last executing test programs: 2.808701065s ago: executing program 3 (id=10852): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0xa0, 0xc}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x1000000004}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000c004280080007007f0000010c00018006000600800a000004000280f3ec0f90d02e2914e9af80bcaf1e2a0e"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x12, &(0x7f000000c280)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e0800450000303f000000000190780300000045000000000000060004000000000000ac1414aa00"/62], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="760ab4000000004e00"/24], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.528572929s ago: executing program 1 (id=10856): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x800) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000050027000300000008000a00", @ANYRES32=r2, @ANYBLOB="24f1876cb8f9221f428a9ac54d8c2e24702928"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0x8001, 0x1, 0x4800a, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05d3419e00010000100000000100010014000000", @ANYRES32=r8, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="01000000001000000300000000000000000000000000000004000000"], 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r9, 0x4) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff00000000000000002729e7d0fdde69c2a691030c98b7390d3d6025cbd6857bdc2c737e59dff0122d900f6b9de3aee6ffba7c52a6b3a7b6c49c16872c69e422c6614f1a7ae62943dc1ecc4892d83a301ea1ef5d9ec051c6fd", @ANYRES32=0x0, @ANYBLOB="0000a1344a1d00434d22fc800b0001006772657461700000240002800800070064010100060003001008008008001500700f0d0008000700ac1414bb0800c6d79c4abb75821935948d5891f3c8e637baa9b81383c8d249eaa0251a66cb8d4093362cba4065e2c73bf7a9db13d2a7615fdb0a04457357d146bdc10108d5e6e00991c5000000000000", @ANYBLOB="570c6927915b977567cffede575e15a739e27f51d82f63e84cf0ee35ec748b0f77df79715bc1d9dcd5a657b5e960e9e808858329598f51701440cec59635c525d273b8127e8970a8252507688d40f9ffffffffffffff7b1201000000a596ca883b1a7fbfb28e336ff001d3060fb1a780418c692a2dd9d2c278a891a86bb950e34eed1b600b76941462059946"], 0x5c}}, 0x48851) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r13, 0x11, 0x2, &(0x7f0000000700)=""/241, &(0x7f00000005c0)=0xf1) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r14, @ANYBLOB="080068c53a0568b20a00", @ANYRES32=r14, @ANYRES8=r3], 0x4c}}, 0x884) 1.051489656s ago: executing program 0 (id=10857): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendto$netrom(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 981.589187ms ago: executing program 3 (id=10858): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 974.380789ms ago: executing program 4 (id=10859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 965.756303ms ago: executing program 2 (id=10860): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) (async) socket(0x840000000002, 0x3, 0xff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x2c, r2, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '.\'][\xe3'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 964.560877ms ago: executing program 3 (id=10861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, 0x0, 0x0) socketpair(0x26, 0x800, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r5, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 825.389828ms ago: executing program 0 (id=10862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xe, "4d0c334d16a91b5e7cbaef0497c8"}, &(0x7f00000000c0)=0x16) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x1, @multicast, 'caif0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}, 0x1, 0x6}, &(0x7f0000000300)=0x90) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={r2, 0x8, 0x10, 0x6, 0x10}, &(0x7f00000003c0)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00'}) close(r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000440)={'raw\x00', 0xbf, "27d02015720506dd726eecda60e63c93c803d025fa6e220e989792148dad78eb2de207ceb38d18955bac9a60f095d9c61c3ff52b4c73e230a5f5b7f924575511bdb67367a3766ff20c879e4a1f52a0f7c6bcc04a86d60f90096cabfc43852e911ca8a17edaed19957aae8253c187b39091dfcdf5c967ee32eeab1940a9c9563ab51c50372cf85322e8a03b873c43613f8f6a2f7f32b10a0937ab6c4ca2738bfee02101f63cd518075e4fafe9d05f721947ddb2c1469197ab3c6788b9fa5874"}, &(0x7f0000000540)=0xe3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r6, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x303, 0x35}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r5}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r9, 0x40047452, &(0x7f0000000840)=0x10000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000004, 0x13, r9, 0xe1dbb000) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000880)={r4, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000008c0)={0x0, 'tunl0\x00', {0x2}, 0x7fff}) syz_emit_ethernet(0x1e, &(0x7f0000000900)={@multicast, @random="53a148c75d78", @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "001bab259ee8c924"}}}}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0xc) 825.013747ms ago: executing program 1 (id=10863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x0, &(0x7f0000009900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000096c0)=[{{&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1, &(0x7f0000000180)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001180)=@xdp, 0x80, &(0x7f0000001700)=[{&(0x7f0000001200)=""/239, 0xef}, {&(0x7f0000001300)=""/36, 0x24}, {&(0x7f0000001340)=""/146, 0x92}, {&(0x7f0000001400)=""/168, 0xa8}, {&(0x7f00000014c0)=""/226, 0xe2}, {&(0x7f00000015c0)=""/142, 0x8e}, {&(0x7f0000001680)=""/39, 0x27}, {&(0x7f00000016c0)=""/8, 0x8}], 0x8, &(0x7f0000001780)=""/248, 0xf8}, 0x2}, {{&(0x7f0000001880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001900)=""/78, 0x4e}, {&(0x7f0000001980)=""/144, 0x90}, {&(0x7f0000001a40)=""/185, 0xb9}, {&(0x7f0000001b00)=""/133, 0x85}], 0x4, &(0x7f0000001c00)=""/241, 0xf1}, 0xc}, {{&(0x7f0000001d00)=@caif=@rfm, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/27, 0x1b}, {&(0x7f0000001dc0)=""/106, 0x6a}, {&(0x7f0000001e40)=""/161, 0xa1}], 0x3, &(0x7f0000001f40)=""/24, 0x18}, 0x3}, {{&(0x7f0000001f80)=@qipcrtr, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/214, 0xd6}, {&(0x7f0000003100)=""/123, 0x7b}, {&(0x7f0000003180)=""/26, 0x1a}, {&(0x7f00000031c0)=""/147, 0x93}, {&(0x7f0000003280)=""/172, 0xac}, {&(0x7f0000003340)=""/17, 0x11}, {&(0x7f0000003380)=""/15, 0xf}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x10000}, {{&(0x7f0000003500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000004880)=[{&(0x7f0000003580)=""/62, 0x3e}, {&(0x7f00000035c0)=""/56, 0x38}, {&(0x7f0000003600)=""/16, 0x10}, {&(0x7f0000003640)=""/150, 0x96}, {&(0x7f0000003700)=""/88, 0x58}, {&(0x7f0000003780)=""/49, 0x31}, {&(0x7f00000037c0)=""/188, 0xbc}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x8, &(0x7f0000004900)=""/144, 0x90}, 0xc}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/230, 0xe6}, {&(0x7f0000005ac0)=""/98, 0x62}, {&(0x7f0000005b40)=""/28, 0x1c}, {&(0x7f0000005b80)=""/94, 0x5e}, {&(0x7f0000005c00)=""/191, 0xbf}, {&(0x7f0000005cc0)=""/7, 0x7}, {&(0x7f0000005d00)=""/47, 0x2f}, {&(0x7f0000005d40)=""/238, 0xee}, {&(0x7f0000005e40)=""/145, 0x91}], 0xa, &(0x7f0000005fc0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006fc0)=@x25, 0x80, &(0x7f0000009340)=[{&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/232, 0xe8}, {&(0x7f0000008140)=""/211, 0xd3}, {&(0x7f0000008240)=""/52, 0x34}, {&(0x7f0000008280)=""/167, 0xa7}, {&(0x7f0000008340)=""/4096, 0x1000}], 0x6, &(0x7f00000093c0)=""/4, 0x4}, 0xd1}, {{&(0x7f0000009400)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000009600)=[{&(0x7f0000009480)=""/85, 0x55}, {&(0x7f0000009500)=""/237, 0xed}], 0x2, &(0x7f0000009640)=""/65, 0x41}, 0x8}], 0x9, 0x0, &(0x7f0000009940)={r1, r2+60000000}) 792.407038ms ago: executing program 3 (id=10864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000006f80)="4ff945e9fc8f36f84da21f2130bcf4c0", 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f00000078c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r6, 0x20, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400002eef37b72620c5ce0003dcdf05010000001fa7edf397ac6ea1a1855dd63b6b212d7abf5a6b715dd426fa99b1476b0ea86a30894c", @ANYRES32=0x0, @ANYBLOB="00300000000004001400350076657468315f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 749.933593ms ago: executing program 2 (id=10865): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket(0x1, 0x1, 0x5) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x820a, 0xb7, 0xfffffffd, 0x0}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={r3, 0x3f, "040c42dfc5e731a7e2b718c6d81aeae30161e221336c06d46f82e616b00ce5dc32dd1a027f554f2b49f923774f2df4e1aa41de2073a4e6c421b18489c6d53d"}, &(0x7f0000000140)=0x47) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x6a, &(0x7f00000006c0)="3e8a4f2ed594100661d53904c8142a2a6840508c69534f2252f4de4d76d1b7f9f1d078080021d90b7692dfb43d330857886ca14d033bcd55471b53b1e7e7e0e16ef665096826730354a5e2be211cdd87e49650a9c7e6dd5847734790ab44556585662d33300ea3488f72", 0x9, 0x1, 0xc49, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac76fd13ba40580000000206050000000000000000000000000005000400000000000900020073797a32000000000c000780050015003e0000000500050002000000050001000600000013000300686173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) 749.381881ms ago: executing program 0 (id=10866): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0xa, 0x6, 0x10, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 649.452278ms ago: executing program 4 (id=10867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4c090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) 645.276015ms ago: executing program 1 (id=10868): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f0d932dda9d2318200000000000e39000000000000"], 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r0, 0xa063}], 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x18, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 642.097172ms ago: executing program 0 (id=10869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x1, 0x8}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000280)) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010003904000000000000000000050800", @ANYRES32=r8, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414aa080014000200000008000500000400000800040001010000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0xc1) 573.541284ms ago: executing program 3 (id=10870): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000180)=0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)=ANY=[], 0x6c68}, 0x1, 0x0, 0x0, 0x24000041}, 0x20008000) 540.185742ms ago: executing program 4 (id=10871): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000080)={0x80, 0x8}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe}, 0x20}, 0x1, 0x2000000000000000}, 0x0) 469.522945ms ago: executing program 2 (id=10872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 463.160198ms ago: executing program 1 (id=10873): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000020000000000000000000000000000000000000005cf20ed3179b42191d6d7fc3fd22a107229a12b38e7c82c2d55d534fa25e4e2855db6ba4d820c7e5005381fd7c19c0c2a02ebcfee8ed9721893987f24e60bd0848b1009bb68bf81110df4bb7cbfd3ec8721b1261abee4a3dbda136bb5eab84a1a414c9d6aabdc038e5c7825cf04f1e992a6664ea6ef9364dde6157b152ea1125f6372cf9073c3778465e9a29ff05b3ed0d7cc51ff65f3be53101aa47d85409f2104c4f916b693f34681db879de954d00340abc1bc6f03cee5222"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r15, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r15, 0x0) ioctl$FS_IOC_SETFLAGS(r14, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x8, 0x1ff, 0x2, {{0x17, 0x4, 0x3, 0x38, 0x5c, 0x67, 0x0, 0x3, 0x7a00f1a878ee4562, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x7, 0x45, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0x3d, 0x1, 0xc, [{@multicast1, 0x1}, {@multicast2, 0x175}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @noop, @ssrr={0x89, 0xf, 0x37, [@multicast1, @multicast2, @empty]}, @noop, @lsrr={0x83, 0x7, 0x80, [@dev={0xac, 0x14, 0x14, 0x3c}]}, @ra={0x94, 0x4}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYBLOB="08000000000000000000000000ddffffff000002", @ANYRES32=r17, @ANYRES32=r2, @ANYRESOCT=r17], 0x50) 414.156496ms ago: executing program 4 (id=10874): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000efcdb2b6b6000000000000000000000000006d760100f0ffffff950000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 328.934075ms ago: executing program 0 (id=10875): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x4, 0x2, 0x0, r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 327.199656ms ago: executing program 2 (id=10876): r0 = socket(0x2, 0x80805, 0x9) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 238.340841ms ago: executing program 4 (id=10877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x24044845}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e8, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xbe}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xff}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x4, 0x24, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x7f, 0x8, 0x0, 0x3, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x23, 0x9, 0x400, 0x4, 0x30, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0xa, 0x0, 0x9, 0x9, 0x5, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xcd, 0x5, 0xa6f, 0xf, 0x8, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe, 0x4, 0x8, 0xff, 0x0, 0x0, 0xfff7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdcd6, 0xfff9, 0x9, 0x3ff, 0x9, 0xf83a, 0x7, 0xa]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x7, 0x9b, 0x6, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x2, 0x89c5, 0x3, 0xc, 0x3, 0x8b98]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0xb}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0xa}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x7, 0x4, 0x5, 0x7ff, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x6c, 0x2, 0x48, 0x16, 0x15d8e678e11c6caa, 0x0, 0x3, 0x24, 0x18, 0x30, 0x0, 0x1b, 0x24, 0x9, 0x9, 0x1, 0x30, 0x60, 0x1, 0x24, 0x12, 0x18, 0x3, 0x18, 0x16, 0x9, 0x18, 0x5, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x8, 0x2, 0x10, 0x9, 0x0, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa, 0xd, 0x7, 0x6, 0x6, 0x80, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x1e, 0x3, 0x7, 0x0, 0x1, 0xe2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x4, 0x5, 0x40, 0x1000, r13, 0x5, '\x00', 0x0, r12, 0x2, 0x4, 0x4, 0x6}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r15}, &(0x7f0000000200), &(0x7f0000000240)=r14}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) 235.494359ms ago: executing program 3 (id=10878): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x40004) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000280)) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000d00)=""/222, &(0x7f0000000000)=0xde) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0x10}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000000, 0xfe7f, 0xfde6, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 109.50213ms ago: executing program 1 (id=10879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r1, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) (async) connect$unix(r5, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x4, 0x1, 0x4, 0x0, r4, 0x3, '\x00', 0x0, r5, 0x2, 0x1, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) sendmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x117, 0x8}], 0x10}}], 0x1, 0x8001) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="4efeb6bca1", 0x5}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x18}}], 0x1, 0x83d086745d8479bf) 108.381822ms ago: executing program 4 (id=10880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) socket$nl_route(0x10, 0x3, 0x0) 83.266814ms ago: executing program 0 (id=10881): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x3, 0x0, @multicast2}}}, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x3, 0x0, @multicast2}}}, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) (async) 81.574157ms ago: executing program 2 (id=10882): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) getpeername(r3, 0x0, &(0x7f00000000c0)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x404e21, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008041}, 0x2400c859) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x77) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="010000000000038000000010000000000000"], 0x18}}, 0x0) 12.692337ms ago: executing program 1 (id=10883): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) (async) preadv(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r3 = socket(0x1d, 0x2, 0x6) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x40010, r1, 0x73907000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x8, 0x4, 0x7, 0x10, 0x6}}], 0x58}, 0x4000000) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000310010300040041000700000005000100070005fa0400018007000000000000000000000080ed00bb8e3b"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x20004090) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000840)=@ethtool_perm_addr={0x20, 0xee, "64db10ef79c6ee7be211e823c72fc318f0236f4cb01cf3470d8302086cb598039b1dcd34024ec7beb5eda7046eda01d98614f41d7e5421773a544181dd2d9229617fb46ff89943eb99d70b4aded25755499c0657075e25888c5600706be4fbf073ef4abc01aaadc14e1bc29ffb6e23f949ec87be33a7678bf80b82c172dfc0868ab5f0ecd6df4d43aca3aa77587b75c1209352fe387bc34f46c91e917dbb2c0898881da8c9325fff672fa63e247d1bee615c41d45a16b375e9c3fcc1401dc405ddbbb60836666ddfbd94a0b4d2fa843ad27192acb95650b997e25b51c1be60e92ac7e3a880c2b52779d6d4bc5958"}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x20, 0x70bd25, 0x2001, {0x0, 0x0, 0x0, r2, {0x6}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x8005, 0xffffffff, 0x400}, 0x10000, 0x1, 0x3, 0xb3b, 0xe, 0x18, 0x1d, 0x1b, 0x6, 0x4ad8, {0x6, 0x19d, 0xa6, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x420481, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x3, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x103000, 0x0) r8 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x0, 0x5}, {0x1, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8f59}, @TCA_FLOW_MODE={0x8}]}}]}, 0x4c}}, 0x2) (async) close(r7) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 2 (id=10884): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0xb, 0xfffffffe}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x22, 0x2, 0x2) accept$alg(r2, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x2) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) kernel console output (not intermixed with test programs): g attributes in process `syz.4.9031'. [ 944.851784][ T4887] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 944.874550][ T146] bond0 (unregistering): (slave erspan1): Releasing active interface [ 944.882930][ T146] erspan1 (unregistering): left promiscuous mode [ 944.955416][ T146] bond6 (unregistering): (slave gretap2): Releasing active interface [ 945.044519][ T146] bridge0 (unregistering): left allmulticast mode [ 945.107980][T27742] Bluetooth: hci2: command tx timeout [ 945.353147][ T146] bond1 (unregistering): Released all slaves [ 945.367103][ T146] bond2 (unregistering): Released all slaves [ 945.382572][ T146] bond3 (unregistering): Released all slaves [ 945.397219][ T146] bond4 (unregistering): Released all slaves [ 945.413894][ T146] bond5 (unregistering): Released all slaves [ 945.431223][ T146] bond6 (unregistering): Released all slaves [ 945.448809][ T146] bond7 (unregistering): Released all slaves [ 945.462026][ T146] bond8 (unregistering): (slave veth5): Releasing active interface [ 945.473878][ T146] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 945.484311][ T146] bond8 (unregistering): Released all slaves [ 945.501247][ T146] bond9 (unregistering): Released all slaves [ 945.515784][ T146] bond10 (unregistering): Released all slaves [ 945.532679][ T146] bond11 (unregistering): Released all slaves [ 945.546490][ T146] bond0 (unregistering): Released all slaves [ 945.746574][T21293] wlan1: Trigger new scan to find an IBSS to join [ 945.773305][ T146] 9: left promiscuous mode [ 945.827426][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9040'. [ 945.913108][ T146] tipc: Left network mode [ 945.974875][ T4909] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 945.991700][ T4911] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 946.001970][ T4906] syzkaller0: entered promiscuous mode [ 946.019021][ T4906] syzkaller0: entered allmulticast mode [ 946.411352][ T4931] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9046'. [ 946.661593][ T4792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.672130][T21293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.823777][ T4792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.846493][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 946.854550][ C1] lec:lec_tx_timeout: lec0 [ 946.859114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 946.866668][ T4792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 946.891785][ T4950] syzkaller1: entered promiscuous mode [ 946.897556][ T4950] syzkaller1: entered allmulticast mode [ 946.905264][ T4792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.955350][ T146] hsr_slave_0: left promiscuous mode [ 946.962193][ T146] hsr_slave_1: left promiscuous mode [ 946.976684][ T146] pim6reg527 (unregistering): left allmulticast mode [ 946.990650][ T146] pimreg (unregistering): left allmulticast mode [ 947.131161][ T4967] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.9055'. [ 947.183095][T27742] Bluetooth: hci2: command tx timeout [ 947.188560][ T4967] openvswitch: netlink: Missing key (keys=40, expected=100) [ 947.389259][ T4967] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 947.414393][ T4967] bond1 (unregistering): Released all slaves [ 947.740644][ T4792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.791029][ T4792] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.824775][T21292] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.831985][T21292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.885262][T21293] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.892457][T21293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.003524][ T146] IPVS: stop unused estimator thread 0... [ 948.034941][ T5009] netlink: 'syz.0.9063': attribute type 21 has an invalid length. [ 948.077694][ T5009] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9063'. [ 948.102431][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9063'. [ 948.383961][ T5036] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9066'. [ 948.471466][ T4792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.530457][ T4792] veth0_vlan: entered promiscuous mode [ 948.562499][ T5039] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9067'. [ 948.586002][ T5039] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9067'. [ 948.597003][ T4792] veth1_vlan: entered promiscuous mode [ 948.643463][ T4792] veth0_macvtap: entered promiscuous mode [ 948.654612][ T4792] veth1_macvtap: entered promiscuous mode [ 948.683954][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.705175][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.721135][T21289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.739270][T21289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.081871][T21289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.091256][T21289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.256747][T27742] Bluetooth: hci2: command tx timeout [ 949.273205][ T5059] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9072'. [ 949.363547][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9073'. [ 949.374516][ T5061] netlink: 'syz.4.9073': attribute type 13 has an invalid length. [ 949.387524][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9073'. [ 951.149685][ T5020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.259081][T21289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.281024][T21289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.323144][ T5067] : entered promiscuous mode [ 951.342017][T27742] Bluetooth: hci2: command tx timeout [ 951.391825][T19596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.402663][T19596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.433933][ T5074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9078'. [ 951.466966][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9077'. [ 951.779402][ T391] IPVS: starting estimator thread 0... [ 951.790575][ T5113] FAULT_INJECTION: forcing a failure. [ 951.790575][ T5113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.834088][ T5113] CPU: 1 UID: 0 PID: 5113 Comm: syz.3.9086 Not tainted syzkaller #0 PREEMPT(full) [ 951.834112][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.834123][ T5113] Call Trace: [ 951.834131][ T5113] [ 951.834139][ T5113] dump_stack_lvl+0xe8/0x150 [ 951.834166][ T5113] should_fail_ex+0x412/0x560 [ 951.834195][ T5113] _copy_from_user+0x2d/0xb0 [ 951.834215][ T5113] ___sys_sendmsg+0x1c6/0x360 [ 951.834234][ T5113] ? __lock_acquire+0x6b5/0x2cf0 [ 951.834257][ T5113] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.834313][ T5113] ? __fget_files+0x2a/0x420 [ 951.834329][ T5113] ? __fget_files+0x3a0/0x420 [ 951.834357][ T5113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.834381][ T5113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.834411][ T5113] ? __pfx_ksys_write+0x10/0x10 [ 951.834443][ T5113] do_syscall_64+0x14d/0xf80 [ 951.834463][ T5113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.834488][ T5113] ? trace_irq_disable+0x37/0x100 [ 951.834508][ T5113] ? clear_bhb_loop+0x40/0x90 [ 951.834529][ T5113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.834545][ T5113] RIP: 0033:0x7f671c79c629 [ 951.834561][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.834576][ T5113] RSP: 002b:00007f671d637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.834596][ T5113] RAX: ffffffffffffffda RBX: 00007f671ca15fa0 RCX: 00007f671c79c629 [ 951.834609][ T5113] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 951.834622][ T5113] RBP: 00007f671d637090 R08: 0000000000000000 R09: 0000000000000000 [ 951.834637][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.834648][ T5113] R13: 00007f671ca16038 R14: 00007f671ca15fa0 R15: 00007fff0b369648 [ 951.834677][ T5113] [ 952.016144][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 952.016609][ T5118] IPVS: using max 32 ests per chain, 76800 per kthread [ 952.024127][ C1] lec:lec_tx_timeout: lec0 [ 952.034070][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 952.063290][ T5120] IPVS: sh: FWM 3 0x00000003 - no destination available [ 952.148947][ T5122] sctp: [Deprecated]: syz.0.9088 (pid 5122) Use of int in maxseg socket option. [ 952.148947][ T5122] Use struct sctp_assoc_value instead [ 952.282662][ T5132] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 952.310824][ T5132] netlink: 'syz.2.9091': attribute type 11 has an invalid length. [ 952.319629][ T5132] netlink: 'syz.2.9091': attribute type 12 has an invalid length. [ 952.436747][ T5145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.671203][ T5158] .: renamed from bridge_slave_1 [ 952.678681][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.690425][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.698323][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.707369][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.730117][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.742694][ T5163] FAULT_INJECTION: forcing a failure. [ 952.742694][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 952.794932][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.2.9099 Not tainted syzkaller #0 PREEMPT(full) [ 952.794957][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.794968][ T5163] Call Trace: [ 952.794975][ T5163] [ 952.794983][ T5163] dump_stack_lvl+0xe8/0x150 [ 952.795011][ T5163] should_fail_ex+0x412/0x560 [ 952.795040][ T5163] should_failslab+0xa8/0x100 [ 952.795065][ T5163] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 952.795089][ T5163] ? __alloc_skb+0x1d0/0x7d0 [ 952.795107][ T5163] ? __local_bh_enable_ip+0xd0/0x130 [ 952.795130][ T5163] __alloc_skb+0x1d0/0x7d0 [ 952.795154][ T5163] __ip6_append_data+0x2a44/0x3c50 [ 952.795194][ T5163] ? __pfx_raw6_getfrag+0x10/0x10 [ 952.795217][ T5163] ? ip6_mtu+0x7d/0x490 [ 952.795255][ T5163] ? __pfx___ip6_append_data+0x10/0x10 [ 952.795275][ T5163] ? ip6_setup_cork+0x544/0xf30 [ 952.795295][ T5163] ? ip6_append_data+0x1b7/0x280 [ 952.795317][ T5163] ip6_append_data+0x10f/0x280 [ 952.795340][ T5163] ? __pfx_raw6_getfrag+0x10/0x10 [ 952.795371][ T5163] rawv6_sendmsg+0x12d3/0x18e0 [ 952.795407][ T5163] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 952.795442][ T5163] ? aa_sk_perm+0x82d/0x960 [ 952.795471][ T5163] ? __pfx_aa_sk_perm+0x10/0x10 [ 952.795496][ T5163] ? sock_rps_record_flow+0x19/0x400 [ 952.795520][ T5163] ? inet_sendmsg+0x2f4/0x370 [ 952.795539][ T5163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.795565][ T5163] ____sys_sendmsg+0x894/0xad0 [ 952.795586][ T5163] ? __might_fault+0xaf/0x130 [ 952.795609][ T5163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.795639][ T5163] ? import_iovec+0x73/0xa0 [ 952.795661][ T5163] ___sys_sendmsg+0x2a5/0x360 [ 952.795681][ T5163] ? __lock_acquire+0x6b5/0x2cf0 [ 952.795704][ T5163] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.795762][ T5163] ? __fget_files+0x2a/0x420 [ 952.795778][ T5163] ? __fget_files+0x3a0/0x420 [ 952.795807][ T5163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 952.795833][ T5163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.795862][ T5163] ? __pfx_ksys_write+0x10/0x10 [ 952.795893][ T5163] do_syscall_64+0x14d/0xf80 [ 952.795914][ T5163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.795930][ T5163] ? trace_irq_disable+0x37/0x100 [ 952.795949][ T5163] ? clear_bhb_loop+0x40/0x90 [ 952.795970][ T5163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.795987][ T5163] RIP: 0033:0x7f806df9c629 [ 952.796002][ T5163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.796017][ T5163] RSP: 002b:00007f806c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.796036][ T5163] RAX: ffffffffffffffda RBX: 00007f806e215fa0 RCX: 00007f806df9c629 [ 952.796049][ T5163] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 952.796061][ T5163] RBP: 00007f806c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 952.796072][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.796082][ T5163] R13: 00007f806e216038 R14: 00007f806e215fa0 R15: 00007ffcb363e888 [ 952.796112][ T5163] [ 952.809511][ T5160] wg1 speed is unknown, defaulting to 1000 [ 952.881732][ T5165] syzkaller0: entered promiscuous mode [ 953.151649][ T5165] syzkaller0: entered allmulticast mode [ 953.159147][ T5167] __nla_validate_parse: 7 callbacks suppressed [ 953.159160][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9101'. [ 953.279751][T27483] syz_tun (unregistering): left allmulticast mode [ 953.332533][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9103'. [ 953.381232][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9107'. [ 953.617449][ T5160] chnl_net:caif_netlink_parms(): no params data found [ 953.731135][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.738670][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.746900][ T5160] bridge_slave_0: entered allmulticast mode [ 953.754714][ T5160] bridge_slave_0: entered promiscuous mode [ 953.764489][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.771979][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.782037][ T5160] bridge_slave_1: entered allmulticast mode [ 953.790064][ T5160] bridge_slave_1: entered promiscuous mode [ 953.847680][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.919521][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.045336][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9114'. [ 954.064913][ T5160] team0: Port device team_slave_0 added [ 954.103430][ T5160] team0: Port device team_slave_1 added [ 954.201055][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.209749][ T5232] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 954.218100][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.263681][ T5237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9117'. [ 954.286017][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.368258][ T5232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.428397][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.445630][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.487647][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.634479][ T5160] hsr_slave_0: entered promiscuous mode [ 954.657954][ T5160] hsr_slave_1: entered promiscuous mode [ 954.666841][ T5160] debugfs: 'hsr0' already exists in 'hsr' [ 954.673396][ T5160] Cannot create hsr debugfs directory [ 954.780259][T27742] Bluetooth: hci5: command tx timeout [ 954.795105][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9123'. [ 954.855356][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9123'. [ 954.881753][ T5262] netlink: 'syz.3.9123': attribute type 13 has an invalid length. [ 954.904546][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9126'. [ 954.961625][ T5266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9123'. [ 955.040008][ T5277] sctp: [Deprecated]: syz.1.9127 (pid 5277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.040008][ T5277] Use struct sctp_sack_info instead [ 955.116583][ T5281] openvswitch: netlink: Missing key (keys=40, expected=80) [ 955.117092][ T5160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.159432][ T5283] tipc: Started in network mode [ 955.164394][ T5283] tipc: Node identity 8000000, cluster identity 4711 [ 955.177078][ T5283] tipc: Node number set to 134217728 [ 955.207135][ T5286] sctp: [Deprecated]: syz.3.9130 (pid 5286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.207135][ T5286] Use struct sctp_sack_info instead [ 955.263964][ T5160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.284073][ T5283] sctp: [Deprecated]: syz.3.9130 (pid 5283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.284073][ T5283] Use struct sctp_sack_info instead [ 955.305336][ T5289] mac80211_hwsim hwsim88 wlan1: Caught tx_queue_len zero misconfig [ 955.337288][ T5283] ip6tnl0: Caught tx_queue_len zero misconfig [ 955.418775][ T5160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.622780][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9138'. [ 955.654649][ T5160] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.762230][ T5317] block nbd5: Unsupported socket: should be TCP or UNIX. [ 955.950919][ T5327] FAULT_INJECTION: forcing a failure. [ 955.950919][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 955.967055][ T5327] CPU: 1 UID: 0 PID: 5327 Comm: syz.0.9146 Not tainted syzkaller #0 PREEMPT(full) [ 955.967092][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.967102][ T5327] Call Trace: [ 955.967110][ T5327] [ 955.967118][ T5327] dump_stack_lvl+0xe8/0x150 [ 955.967146][ T5327] should_fail_ex+0x412/0x560 [ 955.967176][ T5327] should_failslab+0xa8/0x100 [ 955.967202][ T5327] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 955.967226][ T5327] ? __alloc_skb+0x1d0/0x7d0 [ 955.967243][ T5327] ? __local_bh_enable_ip+0xd0/0x130 [ 955.967269][ T5327] __alloc_skb+0x1d0/0x7d0 [ 955.967293][ T5327] __ip6_append_data+0x2a44/0x3c50 [ 955.967334][ T5327] ? __pfx_raw6_getfrag+0x10/0x10 [ 955.967378][ T5327] ? __pfx___ip6_append_data+0x10/0x10 [ 955.967399][ T5327] ? ip6_setup_cork+0x544/0xf30 [ 955.967419][ T5327] ? ip6_append_data+0x1b7/0x280 [ 955.967442][ T5327] ip6_append_data+0x10f/0x280 [ 955.967465][ T5327] ? __pfx_raw6_getfrag+0x10/0x10 [ 955.967488][ T5327] rawv6_sendmsg+0x12d3/0x18e0 [ 955.967523][ T5327] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 955.967559][ T5327] ? aa_sk_perm+0x82d/0x960 [ 955.967588][ T5327] ? __pfx_aa_sk_perm+0x10/0x10 [ 955.967612][ T5327] ? sock_rps_record_flow+0x19/0x400 [ 955.967636][ T5327] ? inet_sendmsg+0x2f4/0x370 [ 955.967656][ T5327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.967681][ T5327] ____sys_sendmsg+0x894/0xad0 [ 955.967701][ T5327] ? __might_fault+0xaf/0x130 [ 955.967728][ T5327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.967759][ T5327] ? import_iovec+0x73/0xa0 [ 955.967781][ T5327] ___sys_sendmsg+0x2a5/0x360 [ 955.967802][ T5327] ? __lock_acquire+0x6b5/0x2cf0 [ 955.967824][ T5327] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.967882][ T5327] ? __fget_files+0x2a/0x420 [ 955.967900][ T5327] ? __fget_files+0x3a0/0x420 [ 955.967929][ T5327] __x64_sys_sendmsg+0x1bd/0x2a0 [ 955.967953][ T5327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.967985][ T5327] ? __pfx_ksys_write+0x10/0x10 [ 955.968018][ T5327] do_syscall_64+0x14d/0xf80 [ 955.968039][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.968056][ T5327] ? trace_irq_disable+0x37/0x100 [ 955.968082][ T5327] ? clear_bhb_loop+0x40/0x90 [ 955.968105][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.968122][ T5327] RIP: 0033:0x7f2d91f9c629 [ 955.968139][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.968154][ T5327] RSP: 002b:00007f2d92edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.968173][ T5327] RAX: ffffffffffffffda RBX: 00007f2d92215fa0 RCX: 00007f2d91f9c629 [ 955.968192][ T5327] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 955.968204][ T5327] RBP: 00007f2d92edd090 R08: 0000000000000000 R09: 0000000000000000 [ 955.968216][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.968228][ T5327] R13: 00007f2d92216038 R14: 00007f2d92215fa0 R15: 00007ffe3a9977e8 [ 955.968259][ T5327] [ 956.267352][ T5160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 956.291695][ T5160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 956.344708][ T5160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 956.394804][ T5160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 956.724730][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.771577][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.820571][T23437] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.827763][T23437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.855959][T27742] Bluetooth: hci5: command tx timeout [ 956.899287][T23437] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.906475][T23437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.940370][ T5385] erspan0: entered promiscuous mode [ 957.097648][ T5395] openvswitch: netlink: Multiple metadata blocks provided [ 957.140570][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.148255][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.250069][ T5404] team_slave_0: Caught tx_queue_len zero misconfig [ 957.270524][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.343250][ T5410] netlink: 'syz.3.9168': attribute type 1 has an invalid length. [ 957.443505][ T5421] veth1_macvtap: Caught tx_queue_len zero misconfig [ 957.691003][ T5160] veth0_vlan: entered promiscuous mode [ 957.703873][ T5160] veth1_vlan: entered promiscuous mode [ 957.784550][ T5160] veth0_macvtap: entered promiscuous mode [ 957.814573][ T5160] veth1_macvtap: entered promiscuous mode [ 957.887140][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.940864][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.960683][T23436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.993041][T23436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.012508][T23436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.039922][T23436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.259915][T21289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.269456][T21289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.295965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6260 ms [ 958.303981][ C1] lec:lec_tx_timeout: lec0 [ 958.309648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 958.337670][ T5461] openvswitch: netlink: Key type 31 is not supported [ 958.363770][T21289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.372839][T21289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.484408][ T5472] __nla_validate_parse: 10 callbacks suppressed [ 958.484425][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9189'. [ 958.536996][ T5475] netlink: 'syz.1.9187': attribute type 7 has an invalid length. [ 958.550257][ T5472] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 958.560770][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9094'. [ 958.570134][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9094'. [ 958.585412][ T5472] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9189'. [ 958.592869][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9190'. [ 958.607543][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9190'. [ 958.623059][ T5482] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 958.730223][ T5491] netlink: 'syz.3.9191': attribute type 1 has an invalid length. [ 958.938775][T27742] Bluetooth: hci5: command tx timeout [ 958.951840][ T5507] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.9195'. [ 959.082591][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9197'. [ 959.197796][ T5517] bond2: entered promiscuous mode [ 959.203825][ T5517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.269875][ T5517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.302897][ T5517] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 959.322465][ T5517] bond2: (slave sit2): Error -95 calling set_mac_address [ 959.420268][ T5540] netlink: 'syz.0.9203': attribute type 1 has an invalid length. [ 959.429807][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9203'. [ 959.547061][ T5545] netlink: 'syz.3.9206': attribute type 3 has an invalid length. [ 959.784925][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9209'. [ 960.593128][ T5588] netlink: 'syz.0.9217': attribute type 13 has an invalid length. [ 960.693932][ T5596] netlink: 'syz.0.9217': attribute type 16 has an invalid length. [ 960.717469][ T5596] netlink: 'syz.0.9217': attribute type 17 has an invalid length. [ 960.925209][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.932417][ T5596] bridge0: port 2(bridge_slave_1) entered listening state [ 960.939870][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.947031][ T5596] bridge0: port 1(bridge_slave_0) entered listening state [ 961.011594][ T5596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 961.018118][T27742] Bluetooth: hci5: command tx timeout [ 961.502513][ T5659] FAULT_INJECTION: forcing a failure. [ 961.502513][ T5659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.554992][ T5659] CPU: 0 UID: 0 PID: 5659 Comm: syz.2.9232 Not tainted syzkaller #0 PREEMPT(full) [ 961.555018][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 961.555028][ T5659] Call Trace: [ 961.555035][ T5659] [ 961.555043][ T5659] dump_stack_lvl+0xe8/0x150 [ 961.555069][ T5659] should_fail_ex+0x412/0x560 [ 961.555098][ T5659] _copy_from_user+0x2d/0xb0 [ 961.555117][ T5659] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 961.555163][ T5659] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 961.555200][ T5659] ip_generic_getfrag+0x149/0x2d0 [ 961.555224][ T5659] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 961.555245][ T5659] ? __alloc_skb+0x4e5/0x7d0 [ 961.555261][ T5659] ? skb_put+0x11b/0x210 [ 961.555283][ T5659] __ip6_append_data+0x36be/0x3c50 [ 961.555320][ T5659] ? __pfx_raw6_getfrag+0x10/0x10 [ 961.555362][ T5659] ? __pfx___ip6_append_data+0x10/0x10 [ 961.555382][ T5659] ? ip6_setup_cork+0x544/0xf30 [ 961.555402][ T5659] ? ip6_append_data+0x1b7/0x280 [ 961.555422][ T5659] ip6_append_data+0x10f/0x280 [ 961.555444][ T5659] ? __pfx_raw6_getfrag+0x10/0x10 [ 961.555468][ T5659] rawv6_sendmsg+0x12d3/0x18e0 [ 961.555502][ T5659] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 961.555534][ T5659] ? aa_sk_perm+0x82d/0x960 [ 961.555564][ T5659] ? __pfx_aa_sk_perm+0x10/0x10 [ 961.555588][ T5659] ? sock_rps_record_flow+0x19/0x400 [ 961.555611][ T5659] ? inet_sendmsg+0x2f4/0x370 [ 961.555630][ T5659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 961.555655][ T5659] ____sys_sendmsg+0x894/0xad0 [ 961.555675][ T5659] ? __might_fault+0xaf/0x130 [ 961.555701][ T5659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.555730][ T5659] ? import_iovec+0x73/0xa0 [ 961.555752][ T5659] ___sys_sendmsg+0x2a5/0x360 [ 961.555770][ T5659] ? __lock_acquire+0x6b5/0x2cf0 [ 961.555792][ T5659] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.555847][ T5659] ? __fget_files+0x2a/0x420 [ 961.555864][ T5659] ? __fget_files+0x3a0/0x420 [ 961.555890][ T5659] __x64_sys_sendmsg+0x1bd/0x2a0 [ 961.555913][ T5659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 961.555943][ T5659] ? __pfx_ksys_write+0x10/0x10 [ 961.555975][ T5659] do_syscall_64+0x14d/0xf80 [ 961.555995][ T5659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.556012][ T5659] ? trace_irq_disable+0x37/0x100 [ 961.556029][ T5659] ? clear_bhb_loop+0x40/0x90 [ 961.556051][ T5659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.556068][ T5659] RIP: 0033:0x7f806df9c629 [ 961.556084][ T5659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.556098][ T5659] RSP: 002b:00007f806c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.556117][ T5659] RAX: ffffffffffffffda RBX: 00007f806e215fa0 RCX: 00007f806df9c629 [ 961.556130][ T5659] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 961.556147][ T5659] RBP: 00007f806c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 961.556158][ T5659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.556168][ T5659] R13: 00007f806e216038 R14: 00007f806e215fa0 R15: 00007ffcb363e888 [ 961.556197][ T5659] [ 961.970062][ T5677] netem: change failed [ 962.055000][ T5672] netlink: 'syz.3.9234': attribute type 5 has an invalid length. [ 962.101693][ T5672] geneve2: entered promiscuous mode [ 962.107164][ T5672] geneve2: entered allmulticast mode [ 962.114141][T21289] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 962.124029][T21289] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 962.133365][T21289] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 962.144247][T21289] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 963.491321][ T5781] syzkaller0: entered promiscuous mode [ 963.505708][ T5781] syzkaller0: entered allmulticast mode [ 963.713466][ T5789] __nla_validate_parse: 6 callbacks suppressed [ 963.713483][ T5789] netlink: 252 bytes leftover after parsing attributes in process `syz.2.9267'. [ 963.842817][ T5791] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9268'. [ 964.055856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 964.063937][ C1] lec:lec_tx_timeout: lec0 [ 964.069786][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 964.089840][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9274'. [ 964.125767][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9274'. [ 964.147469][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9274'. [ 964.315701][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9280'. [ 964.401896][ T5844] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9282'. [ 964.419014][ T5844] netlink: 'syz.3.9282': attribute type 1 has an invalid length. [ 964.430038][ T5844] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9282'. [ 964.439480][ T5845] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9277'. [ 964.470154][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9281'. [ 964.557271][ T5841] hsr_slave_0 (unregistering): left promiscuous mode [ 964.878186][ T5894] bond3: entered promiscuous mode [ 964.883410][ T5894] bond3: entered allmulticast mode [ 964.889623][ T5894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 964.921222][ T5897] netlink: 'syz.0.9292': attribute type 8 has an invalid length. [ 964.958754][ T5897] bond0: entered promiscuous mode [ 964.979037][ T5897] bond_slave_0: entered promiscuous mode [ 964.995467][ T5897] bond_slave_1: entered promiscuous mode [ 965.017258][ T5897] gretap0: entered promiscuous mode [ 965.032481][ T5897] ip6gretap0: entered promiscuous mode [ 965.044228][ T5897] hsr1: entered promiscuous mode [ 965.290339][ T5921] netlink: 'syz.3.9298': attribute type 1 has an invalid length. [ 965.318412][ T5937] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003 [ 965.341448][ T5921] bridge_slave_1: left allmulticast mode [ 965.363343][ T5921] bridge_slave_1: left promiscuous mode [ 965.385434][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.428473][ T5921] bridge_slave_0: left allmulticast mode [ 965.440839][ T5921] bridge_slave_0: left promiscuous mode [ 965.465747][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.606486][ T5953] sctp: [Deprecated]: syz.1.9306 (pid 5953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 965.606486][ T5953] Use struct sctp_sack_info instead [ 965.902254][ T5974] x_tables: duplicate underflow at hook 3 [ 965.902344][ T5973] vlan2: entered promiscuous mode [ 965.931909][ T5973] bridge0: entered promiscuous mode [ 965.951654][ T5973] vlan2: entered allmulticast mode [ 965.963377][ T5973] bridge0: entered allmulticast mode [ 966.424942][ T6011] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 966.799059][ T6039] syzkaller1: entered promiscuous mode [ 966.818612][ T6039] syzkaller1: entered allmulticast mode [ 967.029315][ T6051] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 967.057469][ T6051] bond11 (unregistering): Released all slaves [ 967.159278][ T6045] syzkaller0: entered promiscuous mode [ 967.164857][ T6045] syzkaller0: entered allmulticast mode [ 967.276979][ T6064] netem: unknown loss type 0 [ 967.282089][ T6064] netem: change failed [ 967.431341][ T6070] netlink: 'syz.1.9343': attribute type 1 has an invalid length. [ 967.485099][ T6070] 8021q: adding VLAN 0 to HW filter on device bond11 [ 967.730121][ T6093] IPVS: sh: FWM 3 0x00000003 - no destination available [ 968.165254][ T6127] gretap0: entered promiscuous mode [ 968.190841][ T6122] syzkaller0: entered promiscuous mode [ 968.207349][ T6122] syzkaller0: entered allmulticast mode [ 968.228707][ T6127] gretap0: left promiscuous mode [ 968.248886][ T6127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.551565][ T6151] netlink: 'syz.4.9369': attribute type 1 has an invalid length. [ 969.210503][ T6196] syzkaller0: entered promiscuous mode [ 969.222786][ T6196] syzkaller0: entered allmulticast mode [ 969.378940][ T9] IPVS: starting estimator thread 0... [ 969.486783][ T6216] netlink: 'syz.2.9390': attribute type 10 has an invalid length. [ 969.494758][ T6210] IPVS: using max 38 ests per chain, 91200 per kthread [ 969.601852][ T6222] __nla_validate_parse: 52 callbacks suppressed [ 969.601869][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9392'. [ 969.626375][ T6222] veth0: Caught tx_queue_len zero misconfig [ 969.654515][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9392'. [ 969.815942][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 969.823971][ C1] lec:lec_tx_timeout: lec0 [ 969.831274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 970.038600][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9399'. [ 970.087861][ T6254] netlink: 'syz.3.9400': attribute type 1 has an invalid length. [ 970.122067][ T6254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.153494][ T6254] bond1: (slave veth0_to_bond): making interface the new active one [ 970.165087][ T6254] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 970.177588][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9400'. [ 970.192828][ T6254] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 970.208885][ T6254] bond1 (unregistering): Released all slaves [ 970.339068][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9404'. [ 970.588960][ T6274] wg1 speed is unknown, defaulting to 1000 [ 970.590409][ T6272] netlink: 'syz.4.9407': attribute type 33 has an invalid length. [ 971.107739][ T6306] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.9418'. [ 971.128150][ T6308] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 971.206547][ T6312] sctp: [Deprecated]: syz.0.9419 (pid 6312) Use of int in max_burst socket option deprecated. [ 971.206547][ T6312] Use struct sctp_assoc_value instead [ 971.222184][ T6313] sctp: [Deprecated]: syz.0.9419 (pid 6313) Use of int in max_burst socket option deprecated. [ 971.222184][ T6313] Use struct sctp_assoc_value instead [ 971.462669][ T6333] syzkaller1: entered promiscuous mode [ 971.474818][ T6333] syzkaller1: entered allmulticast mode [ 971.519867][ T6333] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9425'. [ 971.758843][ T6357] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9433'. [ 971.778790][ T6356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9433'. [ 971.811406][ T6361] tipc: Started in network mode [ 971.817515][ T6361] tipc: Node identity 4efd05caa857, cluster identity 4711 [ 971.824901][ T6361] tipc: Enabled bearer , priority 0 [ 971.832049][ T6359] netlink: 'syz.1.9433': attribute type 39 has an invalid length. [ 971.872792][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9432'. [ 971.904987][ T6345] syzkaller0: entered promiscuous mode [ 971.911939][ T6345] syzkaller0: entered allmulticast mode [ 971.918871][ T6345] tipc: Resetting bearer [ 971.937828][ T6343] tipc: Resetting bearer [ 972.108877][ T6369] netlink: zone id is out of range [ 972.114111][ T6369] netlink: zone id is out of range [ 972.119916][ T6369] netlink: zone id is out of range [ 972.125203][ T6369] netlink: zone id is out of range [ 972.130688][ T6369] netlink: zone id is out of range [ 972.136238][ T6369] netlink: zone id is out of range [ 972.141532][ T6369] netlink: zone id is out of range [ 972.147482][ T6369] netlink: zone id is out of range [ 972.152842][ T6369] netlink: zone id is out of range [ 972.158331][ T6369] netlink: zone id is out of range [ 972.522500][ T6375] netlink: 'syz.3.9437': attribute type 9 has an invalid length. [ 972.531235][ T6375] netlink: 'syz.3.9437': attribute type 11 has an invalid length. [ 972.543430][ T6375] netlink: 'syz.3.9437': attribute type 12 has an invalid length. [ 973.446752][ T6343] tipc: Disabling bearer [ 973.494469][T16839] tipc: Node number set to 3869902282 [ 973.610708][ T6383] Bluetooth: MGMT ver 1.23 [ 973.699936][ T6384] geneve3: entered promiscuous mode [ 973.716704][ T6384] geneve3: entered allmulticast mode [ 973.726892][T23437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.735807][T23437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.799585][T23437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.835344][T23437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.872141][ T6399] Cannot find add_set index 3 as target [ 974.750965][ T6454] __nla_validate_parse: 9 callbacks suppressed [ 974.750985][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 974.793900][ T6454] netlink: 'syz.2.9452': attribute type 13 has an invalid length. [ 974.908447][ T6467] syzkaller0: entered promiscuous mode [ 974.933561][ T6467] syzkaller0: entered allmulticast mode [ 975.174832][ T6467] lo: Caught tx_queue_len zero misconfig [ 975.211378][ T6491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9457'. [ 975.475531][ T6511] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9465'. [ 975.560566][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9464'. [ 975.712239][ T6511] bond2 (unregistering): Released all slaves [ 975.734273][ T6521] xt_CT: No such helper "snmp_trap" [ 975.802342][ T6527] netlink: 'syz.3.9467': attribute type 4 has an invalid length. [ 975.921410][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 975.931781][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 975.939797][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 975.967601][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 976.007955][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 976.113871][ T6538] dvmrp6: entered allmulticast mode [ 976.176613][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9468'. [ 976.216293][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 976.223533][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 976.257486][ T6552] netlink: 'syz.0.9471': attribute type 3 has an invalid length. [ 976.515549][T21289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.552151][ T6529] wg1 speed is unknown, defaulting to 1000 [ 976.618826][T21289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.756190][T21289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.912263][T21289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.975431][ T6590] gtp0: entered promiscuous mode [ 976.981907][ T6590] gtp0: entered allmulticast mode [ 977.207992][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9484'. [ 977.278425][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9484'. [ 977.373336][ T6610] netlink: 'syz.0.9484': attribute type 1 has an invalid length. [ 977.409304][ T6610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9484'. [ 977.915564][T21289] bond2 (unregistering): (slave gretap1): Releasing active interface [ 977.933130][T21289] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 978.080359][T21289] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.089040][T21289] bond_slave_0: left allmulticast mode [ 978.095414][T21289] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.105047][T21289] bond_slave_1: left allmulticast mode [ 978.111429][T21289] ` (unregistering): Released all slaves [ 978.123421][T21289] bond0 (unregistering): Released all slaves [ 978.137489][ T5825] Bluetooth: hci4: command tx timeout [ 978.138609][T21289] bond1 (unregistering): Released all slaves [ 978.160274][T21289] bond2 (unregistering): Released all slaves [ 978.179130][T21289] bond3 (unregistering): (slave bond4): Releasing backup interface [ 978.189689][T21289] bond3 (unregistering): Released all slaves [ 978.202414][T21289] bond4 (unregistering): Released all slaves [ 978.215664][T21289] bond5 (unregistering): Released all slaves [ 978.230027][T21289] bond6 (unregistering): Released all slaves [ 978.242853][T21289] bond7 (unregistering): Released all slaves [ 978.261460][T21289] bond8 (unregistering): Released all slaves [ 978.277705][T21289] bond9 (unregistering): Released all slaves [ 978.290683][T21289] bond10 (unregistering): (slave veth9): Releasing active interface [ 978.303396][T21289] bond10 (unregistering): Released all slaves [ 978.319461][T21289] bond11 (unregistering): Released all slaves [ 978.334846][ T6529] chnl_net:caif_netlink_parms(): no params data found [ 978.527782][ T6647] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9491'. [ 978.542992][ T6647] sctp: [Deprecated]: syz.0.9491 (pid 6647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 978.542992][ T6647] Use struct sctp_sack_info instead [ 978.668668][T21289] tipc: Left network mode [ 978.699784][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.748859][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.775196][ T6529] bridge_slave_0: entered allmulticast mode [ 978.782013][T21293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 978.817702][ T6529] bridge_slave_0: entered promiscuous mode [ 978.872713][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.893175][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.922959][ T6529] bridge_slave_1: entered allmulticast mode [ 978.951894][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.957329][ T6529] bridge_slave_1: entered promiscuous mode [ 979.005141][ T6668] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 979.036047][ T6668] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 979.075020][ T6664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.215169][ T6684] net_ratelimit: 45 callbacks suppressed [ 979.215185][ T6684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 979.249915][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.266539][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9499'. [ 979.288360][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.409627][ T6529] team0: Port device team_slave_0 added [ 979.433243][ T6692] team_slave_1: entered promiscuous mode [ 979.439719][ T6692] team_slave_1: left promiscuous mode [ 979.453313][ T6529] team0: Port device team_slave_1 added [ 979.465765][ T6693] netlink: 'syz.2.9500': attribute type 3 has an invalid length. [ 979.518701][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.533122][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.560984][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.588922][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.603103][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.696009][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.845885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 979.853947][ C1] lec:lec_tx_timeout: lec0 [ 979.858978][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 980.063701][ T6529] hsr_slave_0: entered promiscuous mode [ 980.087403][ T6529] hsr_slave_1: entered promiscuous mode [ 980.106774][ T6529] debugfs: 'hsr0' already exists in 'hsr' [ 980.112593][ T6529] Cannot create hsr debugfs directory [ 980.214347][T21289] hsr_slave_0: left promiscuous mode [ 980.226889][ T5825] Bluetooth: hci4: command tx timeout [ 980.237157][T21289] hsr_slave_1: left promiscuous mode [ 980.243183][T21289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.464461][T21289] pimreg3 (unregistering): left allmulticast mode [ 980.690706][T21289] team0 (unregistering): Port device team_slave_1 removed [ 980.728705][T21289] team0 (unregistering): Port device team_slave_0 removed [ 981.142758][ T6763] tipc: Enabling of bearer rejected, failed to enable media [ 981.142975][ T6761] __nla_validate_parse: 2 callbacks suppressed [ 981.142989][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9516'. [ 981.211202][ T6754] delete_channel: no stack [ 981.499245][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9521'. [ 981.731160][ T6799] netlink: 'syz.3.9523': attribute type 21 has an invalid length. [ 981.762907][ T6799] IPv6: NLM_F_CREATE should be specified when creating new route [ 981.779519][ T6801] sctp: [Deprecated]: syz.2.9525 (pid 6801) Use of int in max_burst socket option deprecated. [ 981.779519][ T6801] Use struct sctp_assoc_value instead [ 981.801650][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 981.808900][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 981.816156][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 981.823338][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 981.899870][T21289] IPVS: stop unused estimator thread 0... [ 982.298120][ T5825] Bluetooth: hci4: command tx timeout [ 982.335159][T21289] dummy0: left allmulticast mode [ 982.344118][T21289] bridge0: port 4(dummy0) entered disabled state [ 982.376712][T21289] vlan3: left promiscuous mode [ 982.387190][T21289] bridge0: port 3(vlan3) entered disabled state [ 982.404267][T21289] bridge_slave_1: left allmulticast mode [ 982.414966][T21289] bridge_slave_1: left promiscuous mode [ 982.424631][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9532'. [ 982.424993][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.474443][T21289] bridge_slave_0: left promiscuous mode [ 982.481466][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.901505][T21289] bond3 (unregistering): (slave gretap4): Releasing active interface [ 983.029745][T21289] bond3 (unregistering): (slave bridge2): Releasing active interface [ 983.271680][T21289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.282461][T21289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.292669][T21289] bond0 (unregistering): Released all slaves [ 983.303492][T21289] bond1 (unregistering): Released all slaves [ 983.317476][T21289] bond2 (unregistering): Released all slaves [ 983.330553][T21289] bond3 (unregistering): Released all slaves [ 983.343334][T21289] bond4 (unregistering): Released all slaves [ 983.358305][T21289] bond5 (unregistering): Released all slaves [ 983.374489][T21289] bond6 (unregistering): Released all slaves [ 983.390240][T21289] bond7 (unregistering): Released all slaves [ 983.402762][T21289] bond8 (unregistering): Released all slaves [ 983.542824][ T6832] team0: Port device team_slave_0 removed [ 983.649826][T21289] tipc: Left network mode [ 983.652319][ T6529] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 983.699470][ T6529] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 983.805172][ T6529] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 983.893368][ T6529] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 984.090738][ T6895] IPv6: NLM_F_CREATE should be specified when creating new route [ 984.118040][ T6895] netlink: 'syz.0.9543': attribute type 1 has an invalid length. [ 984.174074][ T6898] netlink: 'syz.3.9544': attribute type 1 has an invalid length. [ 984.288951][ T6897] netlink: 'syz.3.9544': attribute type 11 has an invalid length. [ 984.323698][ T6911] xt_ecn: cannot match TCP bits for non-tcp packets [ 984.375588][ T6897] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.9544'. [ 984.387797][ T5825] Bluetooth: hci4: command tx timeout [ 984.589827][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.654564][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.696919][T21289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.729382][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.755250][T21289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.780781][T21289] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 984.802828][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9552'. [ 984.822198][T21289] batman_adv: batadv0: Removing interface: ipvlan2 [ 984.835948][ T6941] netlink: 'syz.4.9552': attribute type 8 has an invalid length. [ 984.861108][T21289] veth1_macvtap: left promiscuous mode [ 984.866112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 984.874634][ C1] lec:lec_tx_timeout: lec0 [ 984.878886][T21289] veth0_macvtap: left promiscuous mode [ 984.884572][T21289] veth1_vlan: left promiscuous mode [ 984.896910][T21289] veth0_vlan: left promiscuous mode [ 984.936354][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 985.346446][T21289] team0 (unregistering): Port device team_slave_1 removed [ 985.517870][T21289] vcan0 (unregistering): left allmulticast mode [ 985.635230][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.672094][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.679317][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.746406][T21293] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.753609][T21293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.009893][ T5927] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 986.046122][ T5927] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 986.054765][ T5927] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 986.072597][ T5927] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 986.081196][ T5927] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 986.105975][ T5927] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 986.131269][ T5927] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 986.469406][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.519509][T21289] IPVS: stop unused estimator thread 0... [ 986.526564][ T7015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.676845][ T6529] veth0_vlan: entered promiscuous mode [ 986.762430][ T6529] veth1_vlan: entered promiscuous mode [ 986.962206][ T6529] veth0_macvtap: entered promiscuous mode [ 987.004534][ T6529] veth1_macvtap: entered promiscuous mode [ 987.078504][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.105425][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.139031][ T6436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.158827][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9574'. [ 987.167857][ T6436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.167897][ T6436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.167930][ T6436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.328319][ T7054] mac80211_hwsim hwsim108 wlan0: entered promiscuous mode [ 987.365088][T23437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.388483][T23437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.432907][T23436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.453281][T23436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.474272][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9579'. [ 987.479454][ T7059] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 987.489585][ T7059] syzkaller1: linktype set to 823 [ 987.496898][ T7061] openvswitch: netlink: Flow key attr not present in new flow. [ 987.508791][ T7059] syzkaller1: tun_chr_ioctl cmd 35108 [ 987.514581][ T7059] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 987.522850][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9580'. [ 987.580846][ T7065] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9581'. [ 987.845449][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.940699][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9588'. [ 988.064507][ T7100] "syz.3.9593" (7100) uses obsolete ecb(arc4) skcipher [ 988.172224][ T7108] syz_tun: entered allmulticast mode [ 988.255707][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9597'. [ 988.687910][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9606'. [ 988.724527][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9608'. [ 988.734344][ T7161] bond0: (slave gre0): Error: Device type is different from other slaves [ 988.749151][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9608'. [ 988.781030][ T7165] netlink: 'syz.1.9606': attribute type 11 has an invalid length. [ 989.025782][ T7189] vlan2: entered allmulticast mode [ 989.212915][ T7202] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9620'. [ 989.373285][ T7213] dvmrp6: entered allmulticast mode [ 989.389846][ T7218] openvswitch: netlink: IP tunnel dst address not specified [ 989.518430][ T7227] xt_TCPMSS: Only works on TCP SYN packets [ 989.580697][ T7222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.595246][ T7222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 989.722466][ T7222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.736309][ T7222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 990.428352][ T7222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.440829][ T7222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 990.464403][ T7260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.496173][ T7264] tipc: Enabling of bearer rejected, failed to enable media [ 990.578203][ T7222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.592397][ T7222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 990.695859][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 990.703896][ C1] lec:lec_tx_timeout: lec0 [ 990.708667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 990.950480][ T7289] bond2 (unregistering): Released all slaves [ 991.041670][T21289] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 991.051170][T21289] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 991.119380][T21289] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 991.134465][T21289] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 991.174694][T21289] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 991.195227][T21289] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 991.221671][T21289] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 991.248292][T21289] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 991.271435][ T7309] netlink: 'syz.4.9643': attribute type 1 has an invalid length. [ 991.374948][ T7309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 991.399358][ T7317] bond2: (slave veth0_to_bond): making interface the new active one [ 991.409841][ T7317] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 991.477963][ T6434] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 991.503449][ T6434] bond2: now running without any active interface! [ 991.576169][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.583453][ C0] bridge0: topology change detected, propagating [ 991.590101][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.597324][ C0] bridge0: topology change detected, propagating [ 991.669377][ T7327] netlink: 'syz.3.9648': attribute type 1 has an invalid length. [ 991.876895][ T7343] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 991.885039][ T7343] syzkaller0: entered promiscuous mode [ 991.891343][ T7343] syzkaller0: entered allmulticast mode [ 991.963086][ T7350] bond3: Unable to set up delay as MII monitoring is disabled [ 991.975453][ T7350] bond3 (unregistering): Released all slaves [ 992.052194][ T7358] netlink: 'syz.0.9656': attribute type 9 has an invalid length. [ 992.090870][ T7350] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 992.103848][ T7350] bond3 (unregistering): Released all slaves [ 992.141376][ T6434] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.150570][ T6434] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.163855][ T6434] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.173753][ T6434] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.251711][ T7367] __nla_validate_parse: 2 callbacks suppressed [ 992.251728][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9660'. [ 992.276268][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9660'. [ 992.502041][ T7391] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20004 [ 992.569842][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9666'. [ 992.661963][ T7400] tipc: Enabling of bearer rejected, media not registered [ 992.713628][ T7400] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 992.725398][ T7400] bond2: entered promiscuous mode [ 992.733356][ T7400] bond2: entered allmulticast mode [ 992.740480][ T7400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.771857][ T7405] x_tables: unsorted underflow at hook 4 [ 992.866947][ T1296] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 992.916443][ T7408] netlink: 'syz.4.9671': attribute type 18 has an invalid length. [ 992.924319][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9671'. [ 992.945067][ T7408] netlink: 'syz.4.9671': attribute type 18 has an invalid length. [ 992.956837][T21289] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.959046][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9673'. [ 992.965704][T21289] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.984194][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9671'. [ 992.995047][T21289] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.021261][T21289] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.192507][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9677'. [ 993.216915][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9677'. [ 993.235018][ T7432] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20003 [ 993.242340][ T7430] geneve3: entered promiscuous mode [ 993.252136][ T7430] geneve3: entered allmulticast mode [ 993.351562][ T7443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 993.358842][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 993.368611][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9682'. [ 993.397812][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9683'. [ 993.579268][ T5825] block nbd6: Receive control failed (result -32) [ 993.673496][ T7474] netlink: 'syz.4.9690': attribute type 39 has an invalid length. [ 993.885027][ T7490] netlink: 'syz.1.9694': attribute type 26 has an invalid length. [ 993.987235][ T7496] openvswitch: netlink: Multiple metadata blocks provided [ 994.322019][ T7516] xt_l2tp: v2 doesn't support IP mode [ 994.535381][ T7538] netlink: 'syz.4.9710': attribute type 29 has an invalid length. [ 994.552383][ T7538] netlink: 'syz.4.9710': attribute type 29 has an invalid length. [ 994.746792][ T7550] syzkaller0: entered promiscuous mode [ 994.752297][ T7550] syzkaller0: entered allmulticast mode [ 995.027244][ T7571] netlink: 'syz.1.9720': attribute type 2 has an invalid length. [ 995.040719][ T7571] : entered promiscuous mode [ 995.542571][ T7599] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 995.618870][ T7596] wg1 speed is unknown, defaulting to 1000 [ 995.735876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 995.743953][ C1] lec:lec_tx_timeout: lec0 [ 996.348778][ T7644] netlink: 'syz.2.9737': attribute type 1 has an invalid length. [ 996.442003][ T7644] bond4: entered promiscuous mode [ 996.460298][ T7644] bond4: entered allmulticast mode [ 996.468474][ T7644] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.491274][ T7651] erspan1: entered allmulticast mode [ 996.502043][ T7651] bond4: (slave erspan1): making interface the new active one [ 996.509898][ T7651] erspan1: entered promiscuous mode [ 996.516604][ T7651] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 996.728997][ T7670] netlink: 'syz.3.9745': attribute type 10 has an invalid length. [ 996.768542][ T7670] team0: Device ipvlan1 failed to register rx_handler [ 996.794952][ T7675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.940066][ T7686] netlink: 'syz.1.9750': attribute type 10 has an invalid length. [ 997.033534][ T7677] syzkaller0: entered promiscuous mode [ 997.040021][ T7677] syzkaller0: entered allmulticast mode [ 998.399094][ T7686] __nla_validate_parse: 14 callbacks suppressed [ 998.399107][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9750'. [ 998.870396][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9758'. [ 999.972502][ T7726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9760'. [ 1000.056096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1000.135304][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1000.155344][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9761'. [ 1000.203230][ T7739] wg1 speed is unknown, defaulting to 1000 [ 1000.323679][ T7730] netlink: 'syz.2.9761': attribute type 3 has an invalid length. [ 1000.359821][ T7730] netlink: 'syz.2.9761': attribute type 1 has an invalid length. [ 1000.399834][ T7730] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.9761'. [ 1000.413981][ T7747] netlink: 'syz.4.9766': attribute type 6 has an invalid length. [ 1000.423683][ T7747] netlink: 'syz.4.9766': attribute type 6 has an invalid length. [ 1000.730313][ T7763] syzkaller0: entered promiscuous mode [ 1000.804007][ T7763] syzkaller0: entered allmulticast mode [ 1000.815596][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1001.342790][ T7788] netlink: 'syz.1.9774': attribute type 13 has an invalid length. [ 1001.357509][ T7793] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1001.536055][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9781'. [ 1001.595532][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9781'. [ 1001.599307][ T7811] netlink: 'syz.1.9782': attribute type 21 has an invalid length. [ 1001.636247][ T7811] netlink: 'syz.1.9782': attribute type 22 has an invalid length. [ 1001.663573][ T7811] netlink: 'syz.1.9782': attribute type 23 has an invalid length. [ 1001.682020][ T7811] netlink: 'syz.1.9782': attribute type 25 has an invalid length. [ 1001.691770][ T7807] netlink: 'syz.3.9781': attribute type 3 has an invalid length. [ 1001.701139][ T7811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1001.969244][ T7831] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1002.049517][ T7841] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1002.422303][ T7875] syzkaller1: entered promiscuous mode [ 1002.450879][ T7875] syzkaller1: entered allmulticast mode [ 1002.609046][ T7883] tipc: Enabled bearer , priority 0 [ 1002.618706][ T7883] syzkaller0: entered promiscuous mode [ 1002.626851][ T7883] syzkaller0: entered allmulticast mode [ 1002.639869][ T7883] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1002.663608][ T7883] tipc: Resetting bearer [ 1002.672882][ T7881] tipc: Resetting bearer [ 1002.691732][ T7881] tipc: Disabling bearer [ 1002.973776][ T7901] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1003.972066][ T7968] bond3: option primary_reselect: invalid value (255) [ 1003.981444][ T7968] bond3 (unregistering): Released all slaves [ 1004.014416][ T7972] __nla_validate_parse: 73 callbacks suppressed [ 1004.014433][ T7972] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9833'. [ 1004.081426][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9834'. [ 1004.212087][ T7988] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9837'. [ 1004.372757][ T7997] lo speed is unknown, defaulting to 1000 [ 1004.384233][ T7997] lo speed is unknown, defaulting to 1000 [ 1004.392909][ T7997] lo speed is unknown, defaulting to 1000 [ 1004.418278][ T7999] ip6gre2: entered allmulticast mode [ 1004.536524][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1004.561409][ T8008] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9843'. [ 1004.596098][ T8006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1004.758818][ T7997] infiniband syz0: set active [ 1004.763580][ T981] lo speed is unknown, defaulting to 1000 [ 1004.771880][ T7997] infiniband syz0: added lo [ 1004.812019][ T7997] RDS/IB: syz0: added [ 1004.816206][ T7997] smc: adding ib device syz0 with port count 1 [ 1004.822372][ T7997] smc: ib device syz0 port 1 has no pnetid [ 1004.840035][ T5899] lo speed is unknown, defaulting to 1000 [ 1004.850148][ T7997] lo speed is unknown, defaulting to 1000 [ 1005.043836][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9851'. [ 1005.160287][ T7997] lo speed is unknown, defaulting to 1000 [ 1005.335549][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1005.626357][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9856'. [ 1005.698689][ T8042] validate_nla: 3 callbacks suppressed [ 1005.698707][ T8042] netlink: 'syz.0.9856': attribute type 1 has an invalid length. [ 1005.728938][ T7997] lo speed is unknown, defaulting to 1000 [ 1005.735881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1005.743919][ C1] lec:lec_tx_timeout: lec0 [ 1005.748951][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1005.758338][ T8042] syzkaller0: entered promiscuous mode [ 1005.785460][ T8042] syzkaller0: entered allmulticast mode [ 1005.886761][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.894144][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.183285][ T7997] lo speed is unknown, defaulting to 1000 [ 1006.502650][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9870'. [ 1006.546307][ T8086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.553580][ T8086] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.582486][ T7997] lo speed is unknown, defaulting to 1000 [ 1006.800219][ T8101] netlink: 'syz.1.9875': attribute type 5 has an invalid length. [ 1006.888234][ T7997] lo speed is unknown, defaulting to 1000 [ 1007.199804][ T7997] lo speed is unknown, defaulting to 1000 [ 1007.473323][ T7997] lo speed is unknown, defaulting to 1000 [ 1007.698356][ T8132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1007.705632][ T8132] IPv6: NLM_F_CREATE should be set when creating new route [ 1007.735145][ T8132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1007.742416][ T8132] IPv6: NLM_F_CREATE should be set when creating new route [ 1007.901482][ T7997] lo speed is unknown, defaulting to 1000 [ 1008.093478][ T7997] lo speed is unknown, defaulting to 1000 [ 1008.231080][ T8067] siw: device registration error -23 [ 1010.137197][ T2981] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1010.756046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1010.764079][ C1] lec:lec_tx_timeout: lec0 [ 1010.879641][ T8139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1011.135689][ T8196] __nla_validate_parse: 3 callbacks suppressed [ 1011.135705][ T8196] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9895'. [ 1011.173149][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1011.190774][ T8196] netlink: 'syz.1.9895': attribute type 1 has an invalid length. [ 1011.198575][ T8198] netlink: 'syz.1.9895': attribute type 1 has an invalid length. [ 1011.252116][ T8198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1011.408562][ T8226] netlink: 404 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1011.436357][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1011.473657][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1011.520092][ T8226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9903'. [ 1011.570911][ T8234] syzkaller0: entered promiscuous mode [ 1011.579638][ T8234] syzkaller0: entered allmulticast mode [ 1011.607831][ T8236] netlink: 'syz.1.9902': attribute type 10 has an invalid length. [ 1011.656613][ T8236] team0: Device veth0_macvtap failed to register rx_handler [ 1011.702131][ T8239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1011.725580][ T8239] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1011.867528][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9907'. [ 1012.057941][ T8250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9908'. [ 1012.159096][ T8249] syzkaller1: entered promiscuous mode [ 1012.165942][ T8249] syzkaller1: entered allmulticast mode [ 1012.498956][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9919'. [ 1012.581222][ T8276] netlink: 'syz.2.9919': attribute type 7 has an invalid length. [ 1012.592837][ T8276] netlink: 'syz.2.9919': attribute type 8 has an invalid length. [ 1012.842137][ T8306] netlink: 'syz.3.9926': attribute type 1 has an invalid length. [ 1013.005022][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1013.030866][ T8317] bridge_slave_1: left allmulticast mode [ 1013.037193][ T8317] bridge_slave_1: left promiscuous mode [ 1013.042880][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.052487][ T8317] bridge_slave_0: left allmulticast mode [ 1013.060483][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.783241][ T8381] gre1: entered promiscuous mode [ 1013.788376][ T8381] gre1: entered allmulticast mode [ 1014.336605][ T8358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.176459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1016.494930][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.682658][ T8407] netlink: 'syz.3.9951': attribute type 1 has an invalid length. [ 1016.712616][ T5927] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x1 [ 1016.734535][ T5927] hid-generic 0005:0C49:1012.0003: ignoring exceeding usage max [ 1016.755690][ T5927] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x4 [ 1016.820490][ T8420] __nla_validate_parse: 1 callbacks suppressed [ 1016.820507][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9956'. [ 1016.833912][ T5927] hid-generic 0005:0C49:1012.0003: unknown main item tag 0x5 [ 1016.872656][ T5927] hid-generic 0005:0C49:1012.0003: reserved main item tag 0xd [ 1016.883180][ T8407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1016.892998][ T8407] bond3: (slave bond4): making interface the new active one [ 1016.908137][ T5927] hid-generic 0005:0C49:1012.0003: item fetching failed at offset 31/106 [ 1016.918364][ T8407] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1016.929325][ T5927] hid-generic 0005:0C49:1012.0003: probe with driver hid-generic failed with error -22 [ 1017.101052][ T8434] netlink: 'syz.4.9959': attribute type 1 has an invalid length. [ 1017.148864][ T8434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1017.179405][ T8434] bond3: (slave bridge3): making interface the new active one [ 1017.213948][ T8434] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1017.260659][ T8437] dvmrp0: entered allmulticast mode [ 1017.277441][ T8439] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1017.416299][ T8464] netlink: 'syz.2.9966': attribute type 2 has an invalid length. [ 1017.436578][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1017.538155][ T8474] lo: entered promiscuous mode [ 1017.560702][ T8474] netlink: 'syz.3.9971': attribute type 2 has an invalid length. [ 1017.579973][ T8474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1017.598279][ T9] lo speed is unknown, defaulting to 1000 [ 1017.604153][ T9] syz0: Port: 1 Link DOWN [ 1017.614280][ T5899] lo speed is unknown, defaulting to 1000 [ 1017.860559][ T8499] sctp: [Deprecated]: syz.0.9978 (pid 8499) Use of int in maxseg socket option. [ 1017.860559][ T8499] Use struct sctp_assoc_value instead [ 1017.904201][ T8501] Unsupported ieee802154 address type: 0 [ 1018.081166][ T8513] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1018.139009][ T8518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9981'. [ 1018.473055][ T8538] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1018.531473][ T8541] netlink: 'syz.0.9992': attribute type 14 has an invalid length. [ 1018.729879][ T8557] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1018.817240][ T8565] xt_hashlimit: size too large, truncated to 1048576 [ 1018.974355][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1019.002145][ T8572] bond4: entered promiscuous mode [ 1019.008869][ T8572] bond4: entered allmulticast mode [ 1019.014419][ T8572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.739359][ T8582] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.10003'. [ 1019.749126][ T8582] netlink: Unknown conntrack attr (type=2304, max=9) [ 1020.695907][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1020.703987][ C1] lec:lec_tx_timeout: lec0 [ 1020.708712][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1021.080522][ T8601] netlink: 'syz.3.10009': attribute type 7 has an invalid length. [ 1021.095015][ T8601] netlink: 'syz.3.10009': attribute type 7 has an invalid length. [ 1021.098668][T21289] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.111841][T21289] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.120585][T21289] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.132303][T21289] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.519513][ T8541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1021.940639][T21289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.975300][T21289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.270843][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1022.457322][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10031'. [ 1022.550152][ T8680] wg1 speed is unknown, defaulting to 1000 [ 1022.552401][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.559509][ T8680] lo speed is unknown, defaulting to 1000 [ 1022.669982][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1022.686307][ T8692] netlink: 'syz.3.10033': attribute type 5 has an invalid length. [ 1022.755135][ T8699] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1022.868421][ T8701] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10036'. [ 1023.239504][ T8718] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10039'. [ 1023.265929][ T8718] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10039'. [ 1023.367309][ T8713] team_slave_1: entered allmulticast mode [ 1023.654058][ T8733] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1023.666027][ T5825] Bluetooth: hci4: command tx timeout [ 1023.930883][ T8738] syzkaller0: entered promiscuous mode [ 1023.958513][ T8738] syzkaller0: entered allmulticast mode [ 1023.990101][ T8742] netlink: 'syz.0.10046': attribute type 8 has an invalid length. [ 1024.070822][ T8749] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 1024.245082][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10054'. [ 1024.301180][ T8762] pim6reg: entered allmulticast mode [ 1024.331630][ T8762] pim6reg: left allmulticast mode [ 1024.413794][ T8776] SET target dimension over the limit! [ 1024.429120][ T8776] netlink: 348 bytes leftover after parsing attributes in process `syz.4.10059'. [ 1024.468821][ T8778] dvmrp0: entered allmulticast mode [ 1024.487836][ T8777] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10059'. [ 1024.580993][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10061'. [ 1024.700369][ T8788] nbd: nbd4 already in use [ 1024.719647][ T8785] nbd: must specify an index to disconnect [ 1025.196587][ T8817] x_tables: duplicate underflow at hook 1 [ 1025.322060][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.366520][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.410013][ T8827] bond2: entered promiscuous mode [ 1025.415637][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.432948][ T8827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1025.446723][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.459691][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.471445][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.481525][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.492689][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.518334][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.529266][ T8821] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1025.737488][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1025.745494][ C1] lec:lec_tx_timeout: lec0 [ 1027.552593][ T8827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1027.572686][ T8827] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1027.584898][ T8827] bond2: (slave sit1): Error -95 calling set_mac_address [ 1027.598087][ T8831] bond0: Caught tx_queue_len zero misconfig [ 1027.745596][ T8852] __nla_validate_parse: 3 callbacks suppressed [ 1027.745615][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10082'. [ 1027.764474][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10082'. [ 1027.965696][ T8873] tipc: Started in network mode [ 1027.972054][ T8873] tipc: Node identity 426d1d04d58e, cluster identity 4711 [ 1027.979434][ T8873] tipc: Enabled bearer , priority 0 [ 1028.009077][ T8863] tipc: Disabling bearer [ 1028.040655][ T8878] netlink: 59 bytes leftover after parsing attributes in process `syz.4.10089'. [ 1028.327642][ T8908] netlink: 'syz.0.10098': attribute type 1 has an invalid length. [ 1028.531427][ T8925] tipc: Enabling of bearer rejected, failed to enable media [ 1028.693031][ T8935] SET target dimension over the limit! [ 1028.765022][ T8932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1028.912621][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1028.971272][ T8944] bond3: entered promiscuous mode [ 1028.976732][ T8944] bond3: entered allmulticast mode [ 1028.982582][ T8944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1028.994684][ T8950] macvlan2: entered promiscuous mode [ 1029.003328][ T8950] macvlan2: entered allmulticast mode [ 1029.013596][ T8950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1029.151219][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10113'. [ 1029.160962][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10113'. [ 1029.280779][ T8966] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10116'. [ 1029.418934][ T8974] netlink: 'syz.1.10122': attribute type 11 has an invalid length. [ 1029.678229][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10125'. [ 1029.723018][ T8998] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10126'. [ 1029.867383][ T9010] netlink: 288 bytes leftover after parsing attributes in process `syz.1.10131'. [ 1030.296049][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1030.751299][ T9075] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 1030.770486][ T9075] bond5 (unregistering): Released all slaves [ 1031.016945][ T9089] netlink: 'syz.2.10154': attribute type 1 has an invalid length. [ 1031.744344][ T9152] netlink: 'syz.2.10175': attribute type 10 has an invalid length. [ 1031.772681][ T9152] team0: Device veth1_macvtap failed to register rx_handler [ 1032.173116][ T9175] netlink: 'syz.1.10183': attribute type 21 has an invalid length. [ 1032.200200][ T9175] netlink: 'syz.1.10183': attribute type 21 has an invalid length. [ 1032.246293][T21289] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.255557][T21289] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.285925][T21289] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.314961][T21289] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.817847][ T9228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1032.825093][ T9228] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.832400][ T9228] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.839653][ T9228] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.902229][ T9238] netlink: 'syz.2.10206': attribute type 1 has an invalid length. [ 1033.149676][ T9256] __nla_validate_parse: 9 callbacks suppressed [ 1033.149693][ T9256] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.10213'. [ 1033.318104][ T9269] syzkaller0: entered promiscuous mode [ 1033.323686][ T9269] syzkaller0: entered allmulticast mode [ 1033.428424][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10218'. [ 1033.430631][ T9277] wireguard0: entered promiscuous mode [ 1033.444151][ T9277] wireguard0: entered allmulticast mode [ 1033.452409][ T9277] team0: Device wireguard0 is of different type [ 1033.534048][ T9286] netlink: 'syz.3.10223': attribute type 1 has an invalid length. [ 1033.829471][ T9300] wg1 speed is unknown, defaulting to 1000 [ 1033.856745][ T9300] lo speed is unknown, defaulting to 1000 [ 1034.153699][ T9323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1034.169988][ T9327] netlink: 'syz.2.10236': attribute type 1 has an invalid length. [ 1034.250360][ T9327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1034.343116][ T9332] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10237'. [ 1034.444160][ T9338] net_ratelimit: 33020 callbacks suppressed [ 1034.444177][ T9338] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1034.616507][ T9351] IPVS: length: 8 != 1152 [ 1034.625632][ T9342] team0: Device ip6gre1 is of different type [ 1034.808827][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10246'. [ 1034.965565][ T9345] syzkaller0: entered promiscuous mode [ 1034.987756][ T9345] syzkaller0: entered allmulticast mode [ 1035.022476][ T9375] netlink: 'syz.2.10246': attribute type 1 has an invalid length. [ 1035.030628][ T9375] netlink: 'syz.2.10246': attribute type 2 has an invalid length. [ 1035.161878][ T9353] syzkaller1: entered promiscuous mode [ 1035.168817][ T9353] syzkaller1: entered allmulticast mode [ 1035.739967][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 1035.748033][ C1] lec:lec_tx_timeout: lec0 [ 1035.753022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1036.872862][ T9401] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10251'. [ 1036.918779][ T9403] netlink: zone id is out of range [ 1036.955539][ T9403] netlink: zone id is out of range [ 1036.981158][ T9403] netlink: zone id is out of range [ 1037.002140][ T9407] tipc: Started in network mode [ 1037.009101][ T9403] netlink: zone id is out of range [ 1037.009255][ T9407] tipc: Node identity ac14140f, cluster identity 2 [ 1037.016968][ T9403] netlink: zone id is out of range [ 1037.031004][ T9407] tipc: New replicast peer: 255.255.255.255 [ 1037.035757][ T9403] netlink: zone id is out of range [ 1037.043067][ T9407] tipc: Enabled bearer , priority 10 [ 1037.073807][ T9403] netlink: zone id is out of range [ 1037.083692][ T9403] netlink: zone id is out of range [ 1037.097655][ T9403] netlink: zone id is out of range [ 1037.145435][ T9415] netlink: 'syz.4.10257': attribute type 21 has an invalid length. [ 1037.169842][ T9415] IPv6: NLM_F_CREATE should be specified when creating new route [ 1037.185848][ T9420] netlink: 'syz.1.10259': attribute type 1 has an invalid length. [ 1037.193819][ T9415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1037.201071][ T9415] IPv6: NLM_F_CREATE should be set when creating new route [ 1037.208332][ T9415] IPv6: NLM_F_CREATE should be set when creating new route [ 1037.215550][ T9415] IPv6: NLM_F_CREATE should be set when creating new route [ 1037.234796][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1037.242665][ T9416] netlink: 'syz.4.10257': attribute type 21 has an invalid length. [ 1037.254881][ T9416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1037.265810][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1037.302962][ T9420] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1037.563021][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1037.575366][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10268'. [ 1037.597424][ T9451] netlink: 'syz.1.10269': attribute type 1 has an invalid length. [ 1037.940804][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.972806][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.462374][ T9453] tipc: Enabling of bearer rejected, failed to enable media [ 1038.483683][ T9454] gretap1: entered promiscuous mode [ 1038.494244][T23436] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.504672][T23436] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1038.513923][T23436] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1038.545261][ T5899] tipc: Node number set to 2886997007 [ 1038.579294][T23436] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.609220][T23436] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1038.623634][ T9476] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1038.629834][T23436] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1038.663944][T23436] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.682552][T23436] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1038.710291][T23436] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1038.730423][T23436] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.763123][T23436] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1038.788327][T23436] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1039.058633][ T9510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10282'. [ 1039.153418][ T9516] netlink: 'syz.3.10284': attribute type 5 has an invalid length. [ 1039.179722][ T9522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10286'. [ 1039.289132][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10283'. [ 1039.447149][ T9536] netlink: 'syz.3.10288': attribute type 1 has an invalid length. [ 1039.504978][ T9536] bond5: entered promiscuous mode [ 1039.528997][ T9536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1039.580993][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10283'. [ 1039.598970][ T9539] bond5: (slave bridge3): making interface the new active one [ 1039.606529][ T9539] bridge3: entered promiscuous mode [ 1039.612810][ T9539] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1039.629835][ T9542] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1039.642943][ T9542] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1039.692429][ T9548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10292'. [ 1039.866482][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10293'. [ 1039.908137][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1039.937372][ T9554] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1039.985540][ T9554] team0: Failed to send options change via netlink (err -105) [ 1040.024703][ T9554] team0: Port device batadv1 added [ 1040.049348][ T9567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10298'. [ 1040.160050][ T9569] syzkaller0: entered promiscuous mode [ 1040.170432][ T9569] syzkaller0: entered allmulticast mode [ 1040.738867][ T9610] nbd: illegal input index 2958377 [ 1040.765319][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10314'. [ 1040.765861][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1040.782332][ C1] lec:lec_tx_timeout: lec0 [ 1040.942112][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10319'. [ 1041.019287][ T9506] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.033329][ T9629] netlink: 'syz.2.10321': attribute type 2 has an invalid length. [ 1041.309067][ T9648] syzkaller0: entered promiscuous mode [ 1041.314572][ T9648] syzkaller0: entered allmulticast mode [ 1041.322669][ T9653] netlink: 'syz.4.10330': attribute type 21 has an invalid length. [ 1041.331310][ T9653] netlink: 'syz.4.10330': attribute type 6 has an invalid length. [ 1041.689605][ T9667] net_ratelimit: 136 callbacks suppressed [ 1041.689624][ T9667] openvswitch: netlink: Multiple metadata blocks provided [ 1041.768165][ T9668] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1042.144352][T19596] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1043.059917][ T9674] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1043.133710][ T9683] tipc: Enabled bearer , priority 0 [ 1043.248069][ T9683] syzkaller0: entered promiscuous mode [ 1043.253702][ T9683] syzkaller0: entered allmulticast mode [ 1043.260303][ T9683] tipc: Resetting bearer [ 1043.288783][ T9681] tipc: Resetting bearer [ 1043.432979][ T9706] SET target dimension over the limit! [ 1043.439251][ T9706] SET target dimension over the limit! [ 1043.450419][ T9706] SET target dimension over the limit! [ 1044.709007][ T9681] tipc: Disabling bearer [ 1045.284872][ T9744] __nla_validate_parse: 9 callbacks suppressed [ 1045.284891][ T9744] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10357'. [ 1045.316980][ T9743] netlink: 'syz.1.10359': attribute type 11 has an invalid length. [ 1045.328791][ T9743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10359'. [ 1045.416483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1045.461636][ T9753] syzkaller1: entered promiscuous mode [ 1045.479298][ T9753] syzkaller1: entered allmulticast mode [ 1045.556096][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.583090][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.686699][ T9771] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1045.700283][ T9771] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1045.717579][ T9771] veth0_to_bridge: entered allmulticast mode [ 1045.750191][ T9771] veth0_to_bridge: entered promiscuous mode [ 1045.773820][ T9769] netlink: 'syz.1.10368': attribute type 13 has an invalid length. [ 1045.874694][ T9781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10373'. [ 1045.963996][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10374'. [ 1046.096627][ T9797] netlink: 'syz.1.10377': attribute type 4 has an invalid length. [ 1046.232218][ T9799] atomic_op ffff888022313198 conn xmit_atomic 0000000000000000 [ 1046.300474][ T9809] tipc: Started in network mode [ 1046.315611][ T9809] tipc: Node identity 469e89d16776, cluster identity 4711 [ 1046.337084][ T9809] tipc: Enabled bearer , priority 0 [ 1046.369236][ T9815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10382'. [ 1046.397934][ T9817] syzkaller0: entered promiscuous mode [ 1046.403751][ T9817] syzkaller0: entered allmulticast mode [ 1046.412881][ T9817] tipc: Resetting bearer [ 1046.419911][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10382'. [ 1046.722995][ T9808] tipc: Resetting bearer [ 1047.040219][ T9858] xt_ecn: cannot match TCP bits for non-tcp packets [ 1048.294175][ T9808] tipc: Disabling bearer [ 1048.304390][ T9858] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1048.341792][ T9462] tipc: Node number set to 568887761 [ 1048.432069][ T9870] ip6tnl0: Caught tx_queue_len zero misconfig [ 1048.494196][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10395'. [ 1048.535338][ T9878] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1048.557820][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10400'. [ 1048.558102][ T9870] netlink: 'syz.1.10395': attribute type 1 has an invalid length. [ 1048.577101][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10400'. [ 1048.599323][ T9882] netlink: 'syz.2.10400': attribute type 15 has an invalid length. [ 1048.651116][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10399'. [ 1048.656861][ T9882] netlink: 'syz.2.10400': attribute type 15 has an invalid length. [ 1048.660271][T23437] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.696732][T23437] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.716896][T23437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.739678][T23437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1048.842485][ T9893] netlink: 'syz.2.10404': attribute type 3 has an invalid length. [ 1049.129635][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.191253][ T9932] Cannot find del_set index 4 as target [ 1049.364510][ T9949] netlink: 'syz.0.10418': attribute type 1 has an invalid length. [ 1049.386616][ T9949] NCSI netlink: No device for ifindex 0 [ 1049.850850][ T9982] netlink: 'syz.2.10428': attribute type 1 has an invalid length. [ 1049.895660][ T9982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1049.933438][ T9982] bond8: (slave veth0_to_bond): making interface the new active one [ 1049.943364][ T9982] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1050.050678][ T9999] netlink: 'syz.3.10432': attribute type 1 has an invalid length. [ 1050.182311][ T9999] batadv1: entered allmulticast mode [ 1050.525138][T10036] __nla_validate_parse: 9 callbacks suppressed [ 1050.525154][T10036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10448'. [ 1050.641693][T10047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.698265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 1050.706342][ C1] lec:lec_tx_timeout: lec0 [ 1050.711193][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1050.725703][T10052] openvswitch: netlink: Message has 8 unknown bytes. [ 1050.739209][T10052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.241414][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10460'. [ 1051.292126][T10075] gre1: entered promiscuous mode [ 1051.298942][T10075] gre1: entered allmulticast mode [ 1051.450822][T10088] netlink: 'syz.2.10465': attribute type 1 has an invalid length. [ 1051.509951][T10088] bond9: entered promiscuous mode [ 1051.515321][T10088] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1051.695110][T10088] bond9: (slave bridge2): making interface the new active one [ 1051.703252][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10469'. [ 1051.716689][T10088] bridge2: entered promiscuous mode [ 1051.723240][T10088] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 1051.836496][T10106] delete_channel: no stack [ 1051.862521][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1051.891021][T10112] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1051.922992][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10470'. [ 1051.956268][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.032595][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.253214][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10478'. [ 1052.287512][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10478'. [ 1052.363524][T10152] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1052.436751][T10161] netlink: 'syz.3.10485': attribute type 1 has an invalid length. [ 1052.447656][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10485'. [ 1052.539135][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10483'. [ 1053.242513][T10185] netlink: 'syz.1.10490': attribute type 1 has an invalid length. [ 1053.298895][T10185] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1053.313228][T10185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1053.728745][T23437] tipc: Subscription rejected, illegal request [ 1053.909260][T10238] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1054.034579][T10242] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1054.041711][ T9462] IPVS: starting estimator thread 0... [ 1054.145926][T10244] IPVS: using max 31 ests per chain, 74400 per kthread [ 1054.271877][T10261] netlink: 'syz.0.10512': attribute type 3 has an invalid length. [ 1054.281579][T10260] syzkaller0: entered promiscuous mode [ 1054.287647][T10260] syzkaller0: entered allmulticast mode [ 1054.295147][T10264] netlink: 'syz.1.10513': attribute type 13 has an invalid length. [ 1054.316025][ T1296] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 1054.333613][T10263] netlink: 'syz.1.10513': attribute type 13 has an invalid length. [ 1054.335637][T10264] syz_tun: refused to change device tx_queue_len [ 1054.442849][T10263] syz_tun: refused to change device tx_queue_len [ 1054.503841][T10269] openvswitch: netlink: IP tunnel dst address not specified [ 1054.515176][T10269] openvswitch: netlink: IP tunnel dst address not specified [ 1055.140959][T10321] netlink: ct family unspecified [ 1055.143420][T10319] netlink: 'syz.0.10525': attribute type 178 has an invalid length. [ 1055.725966][T10365] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1055.735912][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1055.743953][ C1] lec:lec_tx_timeout: lec0 [ 1055.790282][T10370] ip6t_srh: unknown srh invflags 4000 [ 1055.963693][T10384] __nla_validate_parse: 12 callbacks suppressed [ 1055.963710][T10384] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10542'. [ 1056.095105][T10396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10544'. [ 1056.264013][T10410] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10549'. [ 1056.306526][T10412] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1056.378628][ T5825] Bluetooth: hci0: command 0x080f tx timeout [ 1056.407759][T10327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1056.513537][T10432] netlink: 'syz.1.10553': attribute type 1 has an invalid length. [ 1056.563564][T10432] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10553'. [ 1056.598035][T10432] netlink: 'syz.1.10553': attribute type 1 has an invalid length. [ 1056.609638][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10553'. [ 1056.645592][T10439] netlink: 5672 bytes leftover after parsing attributes in process `syz.1.10553'. [ 1056.646452][T10440] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1056.765199][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1056.893042][T10434] veth0_to_team: Caught tx_queue_len zero misconfig [ 1056.938821][T10460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10559'. [ 1057.303264][T10486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10566'. [ 1058.884938][T10517] netlink: 'syz.2.10573': attribute type 6 has an invalid length. [ 1058.894835][T10517] netlink: 'syz.2.10573': attribute type 6 has an invalid length. [ 1060.112694][T10600] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1060.536005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1060.737038][T10639] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 1060.759638][T10641] netlink: 'syz.1.10605': attribute type 1 has an invalid length. [ 1060.764519][T10637] bridge_slave_0: left allmulticast mode [ 1060.773972][T10637] bridge_slave_0: left promiscuous mode [ 1060.780570][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.783415][T10641] netlink: 'syz.1.10605': attribute type 1 has an invalid length. [ 1060.808594][T10637] bridge_slave_1: left allmulticast mode [ 1060.816736][T10637] bridge_slave_1: left promiscuous mode [ 1060.822483][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.890215][T10637] bond2: (slave veth0_to_bond): Releasing active interface [ 1060.917625][T10637] bond0: (slave bond_slave_0): Releasing backup interface [ 1060.974159][T10637] bond0: (slave bond_slave_1): Releasing backup interface [ 1060.985136][T10656] __nla_validate_parse: 6 callbacks suppressed [ 1060.985151][T10656] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10608'. [ 1061.034585][T10637] team0: Port device team_slave_0 removed [ 1061.069398][T10637] team0: Port device team_slave_1 removed [ 1061.078897][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.095214][T10637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.113176][T10637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.130252][T10637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.142726][T10637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1061.285219][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1061.352315][T10676] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10611'. [ 1061.493801][T10692] bridge4: entered promiscuous mode [ 1061.527013][T10692] bridge4: entered allmulticast mode [ 1061.558415][T10695] netlink: 'syz.3.10617': attribute type 58 has an invalid length. [ 1061.601141][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1061.656805][T10702] netlink: 'syz.0.10620': attribute type 1 has an invalid length. [ 1061.983154][T10727] veth1_macvtap: left promiscuous mode [ 1061.991723][T10727] macsec0: entered promiscuous mode [ 1062.195643][T10748] netlink: 'syz.4.10634': attribute type 1 has an invalid length. [ 1062.206528][T10749] netlink: 'syz.4.10634': attribute type 1 has an invalid length. [ 1062.215294][T10747] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10634'. [ 1062.245274][T10753] netlink: 'syz.0.10636': attribute type 1 has an invalid length. [ 1062.272179][T10753] bond3: entered promiscuous mode [ 1062.277752][T10753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.657357][T10774] tipc: Enabling of bearer rejected, failed to enable media [ 1062.677309][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10642'. [ 1062.719678][T10788] xt_l2tp: v2 doesn't support IP mode [ 1062.725795][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10646'. [ 1062.752415][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10642'. [ 1062.762510][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10642'. [ 1062.832778][T10794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.833637][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10647'. [ 1063.243465][T10826] netlink: 'syz.3.10657': attribute type 9 has an invalid length. [ 1063.252874][T10826] netlink: 'syz.3.10657': attribute type 11 has an invalid length. [ 1063.283451][T10826] netlink: 'syz.3.10657': attribute type 12 has an invalid length. [ 1063.302506][T10831] batadv1: entered allmulticast mode [ 1064.013850][T10881] xfrm0: entered promiscuous mode [ 1064.023287][T10881] xfrm0: entered allmulticast mode [ 1064.183104][T10897] netlink: 'syz.2.10680': attribute type 10 has an invalid length. [ 1064.233124][T10900] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1064.526691][T10920] tipc: Enabling of bearer rejected, failed to enable media [ 1064.721977][T10932] netlink: 'syz.4.10693': attribute type 1 has an invalid length. [ 1065.735923][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 1065.743955][ C1] lec:lec_tx_timeout: lec0 [ 1065.748836][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1066.629210][T10979] __nla_validate_parse: 20 callbacks suppressed [ 1066.629223][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10705'. [ 1067.704839][T10932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.901643][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10710'. [ 1067.938139][T11000] sctp: [Deprecated]: syz.4.10711 (pid 11000) Use of int in max_burst socket option. [ 1067.938139][T11000] Use struct sctp_assoc_value instead [ 1068.095341][T11018] netlink: 'syz.2.10714': attribute type 2 has an invalid length. [ 1068.114031][T11018] Unsupported ieee802154 address type: 0 [ 1068.312662][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10719'. [ 1068.317153][T11037] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10717'. [ 1068.475499][T11050] syzkaller0: entered promiscuous mode [ 1068.481087][T11050] syzkaller0: entered allmulticast mode [ 1068.489016][T11050] 0: reclassify loop, rule prio 0, protocol 800 [ 1068.610521][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10724'. [ 1068.785343][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10727'. [ 1068.811602][T11065] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10727'. [ 1068.864248][T11068] netlink: 'syz.2.10730': attribute type 4 has an invalid length. [ 1068.893391][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1068.895511][T11068] nbd: nbd2 already in use [ 1068.971584][T11077] netlink: 'syz.0.10733': attribute type 20 has an invalid length. [ 1068.980633][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10731'. [ 1068.989810][T11077] IPv6: NLM_F_CREATE should be specified when creating new route [ 1069.115037][T11080] netlink: 'syz.0.10734': attribute type 10 has an invalid length. [ 1069.141947][T11080] geneve4: entered promiscuous mode [ 1069.148232][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10736'. [ 1069.149066][ T6436] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 55930 - 0 [ 1069.172186][ T6436] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 55930 - 0 [ 1069.182645][T21289] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 55930 - 0 [ 1069.231480][T11080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.242612][T11080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.264985][T11086] vlan2: entered promiscuous mode [ 1069.594629][T11119] veth3: entered allmulticast mode [ 1069.624527][T11125] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1069.643168][T11120] veth5: entered allmulticast mode [ 1069.649469][T11125] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1070.036895][T11149] nbd7: detected capacity change from 0 to 127 [ 1070.051096][ T9506] block nbd7: Receive control failed (result -32) [ 1070.074224][T10537] block nbd7: Dead connection, failed to find a fallback [ 1070.082916][T10537] block nbd7: shutting down sockets [ 1070.114475][T10537] blk_print_req_error: 138 callbacks suppressed [ 1070.114491][T10537] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.170435][T10537] buffer_io_error: 138 callbacks suppressed [ 1070.170451][T10537] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1070.194871][T10537] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.219540][T10537] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1070.228208][T10537] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.238366][T10537] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1070.247950][T10537] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.258943][T10537] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1070.268076][T10537] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.280388][T10537] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1070.289030][T10537] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.302590][T10537] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1070.313638][T10537] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.328997][T10537] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1070.337335][T10537] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.340476][T11163] netlink: 'syz.4.10758': attribute type 21 has an invalid length. [ 1070.347517][T10537] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1070.363888][T10537] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.374080][T10537] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1070.383432][T10537] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1070.398396][T10537] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1070.440989][T10537] ldm_validate_partition_table(): Disk read failed. [ 1070.448515][T10537] Dev nbd7: unable to read RDB block 0 [ 1070.455257][T10537] nbd7: unable to read partition table [ 1070.483135][T10537] ldm_validate_partition_table(): Disk read failed. [ 1070.490602][T10537] Dev nbd7: unable to read RDB block 0 [ 1070.498161][T10537] nbd7: unable to read partition table [ 1070.567272][T11183] netlink: 'syz.3.10764': attribute type 9 has an invalid length. [ 1070.744007][T11196] nbd: nbd4 already in use [ 1070.756446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1070.764478][ C1] lec:lec_tx_timeout: lec0 [ 1070.769641][T11196] block nbd4: NBD_DISCONNECT [ 1070.774246][T11196] block nbd4: Send disconnect failed -32 [ 1070.814687][T23437] bridge_slave_1: left promiscuous mode [ 1070.828872][T23437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.839860][T23437] bridge_slave_0: left promiscuous mode [ 1070.845604][T23437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.966087][T11208] openvswitch: netlink: Key type 31 is not supported [ 1071.144247][T23437] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1071.333001][T23437] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 1071.343871][T23437] bridge4 (unregistering): left promiscuous mode [ 1071.633398][T23437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.644682][T23437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.655597][T23437] bond0 (unregistering): Released all slaves [ 1071.675696][T23437] bond1 (unregistering): Released all slaves [ 1071.703975][T23437] bond2 (unregistering): Released all slaves [ 1071.716888][T23437] bond3 (unregistering): Released all slaves [ 1071.730533][T23437] bond4 (unregistering): Released all slaves [ 1071.744239][T23437] bond5 (unregistering): Released all slaves [ 1071.764213][T23437] bond6 (unregistering): Released all slaves [ 1071.781180][T23437] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1071.791947][T23437] bond7 (unregistering): Released all slaves [ 1071.860340][T11080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.886660][T11080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.900238][T11080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55930 - 0 [ 1071.951401][T23437] : left promiscuous mode [ 1071.983737][T11218] wg1 speed is unknown, defaulting to 1000 [ 1072.030394][T11080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.046192][T11080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.076485][T11080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55930 - 0 [ 1072.130558][T11218] lo speed is unknown, defaulting to 1000 [ 1072.188560][T11080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.213108][T11080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.240537][T11080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55930 - 0 [ 1072.498644][T11271] __nla_validate_parse: 7 callbacks suppressed [ 1072.498662][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10783'. [ 1072.516864][T11271] openvswitch: netlink: Flow actions attr not present in new flow. [ 1072.748629][T23436] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.757747][T23436] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 55930 - 0 [ 1072.776268][T23436] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1072.810767][T11281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1072.858661][T23436] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.867599][T23436] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 55930 - 0 [ 1072.878381][T23436] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1072.960509][ T6434] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.980713][ T6434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 55930 - 0 [ 1072.989658][ T6434] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1073.006958][T11300] lo: Caught tx_queue_len zero misconfig [ 1073.019166][T11300] netlink: 'syz.1.10792': attribute type 1 has an invalid length. [ 1073.041070][T11302] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1073.088007][ T6434] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.105277][ T6434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 55930 - 0 [ 1073.119119][ T6434] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1074.064946][T11356] netlink: 'syz.1.10802': attribute type 2 has an invalid length. [ 1074.110673][T23437] hsr_slave_0: left promiscuous mode [ 1074.110687][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1074.140430][T23437] hsr_slave_1: left promiscuous mode [ 1074.155458][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10805'. [ 1074.462901][T23437] team0 (unregistering): Port device team_slave_1 removed [ 1074.481720][T23437] team0 (unregistering): Port device team_slave_0 removed [ 1074.591482][T11356] bond7: option xmit_hash_policy: invalid value (64) [ 1074.599602][T11356] bond7 (unregistering): Released all slaves [ 1074.638567][T11362] bond6: option xmit_hash_policy: invalid value (64) [ 1074.651474][T11362] bond6 (unregistering): Released all slaves [ 1075.300718][T11413] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1075.317043][T11413] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1075.557114][T11430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1075.567732][T11429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1075.668907][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1075.689743][T11444] netlink: 'syz.2.10821': attribute type 1 has an invalid length. [ 1075.720904][T11444] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10821'. [ 1075.995606][T11459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10826'. [ 1076.305159][T11481] tc_dump_action: action bad kind [ 1076.310658][T11475] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1076.414551][T23437] IPVS: stop unused estimator thread 0... [ 1076.461720][T11492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1076.841845][T11524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1076.866779][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.881216][T11521] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10842'. [ 1077.129988][T11531] team1: entered promiscuous mode [ 1077.157101][T11531] team1: entered allmulticast mode [ 1077.452418][T11558] macsec1: entered promiscuous mode [ 1077.558123][T11566] openvswitch: netlink: Message has 4 unknown bytes. [ 1077.657570][T11571] __nla_validate_parse: 2 callbacks suppressed [ 1077.657587][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10855'. [ 1077.666138][T11574] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 1077.789340][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10856'. [ 1079.032549][T11573] bpq0: entered promiscuous mode [ 1079.067281][T11574] bond7: entered promiscuous mode [ 1079.072837][T11574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1079.323622][T11601] nbd: must specify at least one socket [ 1079.348558][T11602] openvswitch: netlink: Actions may not be safe on all matching packets [ 1079.472106][ T9] hid-generic 0005:0C49:1012.0004: unknown main item tag 0x1 [ 1079.492668][ T9] hid-generic 0005:0C49:1012.0004: ignoring exceeding usage max [ 1079.508790][ T9] hid-generic 0005:0C49:1012.0004: unknown main item tag 0x4 [ 1079.516858][ T9] hid-generic 0005:0C49:1012.0004: unknown main item tag 0x5 [ 1079.524331][ T9] hid-generic 0005:0C49:1012.0004: reserved main item tag 0xd [ 1079.532701][ T9] hid-generic 0005:0C49:1012.0004: item fetching failed at offset 31/106 [ 1079.542057][ T9] hid-generic 0005:0C49:1012.0004: probe with driver hid-generic failed with error -22 [ 1079.568469][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1079.578311][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1079.768485][T11632] syzkaller0: entered promiscuous mode [ 1079.774010][T11632] syzkaller0: entered allmulticast mode [ 1079.871475][T11643] netlink: 'syz.0.10875': attribute type 39 has an invalid length. [ 1079.991678][T11650] sit: Src spoofed 172.30.252.4/200:a318:100:e0:ebc7:a1e0:ff5b:efe1 -> 224.0.0.1/fdbc:66e4:d7:e833:6de:422b:4a81:99b [ 1080.117212][T11656] x_tables: unsorted underflow at hook 4 [ 1080.148277][T11650] ------------[ cut here ]------------ [ 1080.153769][T11650] 1 [ 1080.153790][T11650] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#0: syz.3.10878/11650 [ 1080.167492][T11650] Modules linked in: [ 1080.172255][T11650] CPU: 0 UID: 0 PID: 11650 Comm: syz.3.10878 Not tainted syzkaller #0 PREEMPT(full) [ 1080.182282][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.192703][T11650] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 1080.199105][T11650] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 9d 42 74 f8 4d 39 37 74 36 e8 e3 1b 0b f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c9 [ 1080.219102][T11650] RSP: 0018:ffffc9000e106f00 EFLAGS: 00010287 [ 1080.225460][T11650] RAX: ffffffff89b91eab RBX: ffff888064ce0000 RCX: 0000000000080000 [ 1080.233780][T11650] RDX: ffffc9000d20a000 RSI: 000000000000387d RDI: 000000000000387e [ 1080.241939][T11650] RBP: 0000000000000000 R08: ffff888044e48000 R09: 0000000000000006 [ 1080.249992][T11650] R10: 000000000000000a R11: 0000000000000002 R12: ffff888057f94c80 [ 1080.258091][T11650] R13: 0000000000000005 R14: ffff888057f94c80 R15: ffff888064ce0108 [ 1080.266134][T11650] FS: 00007f671d6376c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1080.275469][T11650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.279819][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10884'. [ 1080.282113][T11650] CR2: 00007f671c7e9d40 CR3: 0000000045040000 CR4: 00000000003526f0 [ 1080.282138][T11650] Call Trace: [ 1080.282148][T11650] [ 1080.282162][T11650] __nf_unregister_net_hook+0x74/0x6f0 [ 1080.282199][T11650] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1080.282225][T11650] nf_tables_commit+0x4270/0xa400 [ 1080.282265][T11650] ? nft_pernet+0x23/0x240 [ 1080.282302][T11650] ? nft_pernet+0x23/0x240 [ 1080.282327][T11650] ? nft_pernet+0x23/0x240 [ 1080.282356][T11650] ? __pfx_nf_tables_commit+0x10/0x10 [ 1080.282382][T11650] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1080.282415][T11650] ? nft_flush_table+0x1749/0x18e0 [ 1080.282448][T11650] ? nft_pernet+0x23/0x240 [ 1080.282481][T11650] ? nf_tables_deltable+0x678/0xe80 [ 1080.282517][T11650] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1080.282563][T11650] nfnetlink_rcv+0x1c1b/0x27b0 [ 1080.282590][T11650] ? is_bpf_text_address+0x26/0x2b0 [ 1080.282652][T11650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1080.282679][T11650] ? stack_trace_save+0xa9/0x100 [ 1080.282751][T11650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.282770][T11650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.282807][T11650] netlink_unicast+0x80f/0x9b0 [ 1080.282843][T11650] ? __pfx_netlink_unicast+0x10/0x10 [ 1080.282881][T11650] ? netlink_sendmsg+0x650/0xb40 [ 1080.282902][T11650] ? skb_put+0x11b/0x210 [ 1080.282928][T11650] netlink_sendmsg+0x813/0xb40 [ 1080.282958][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.282983][T11650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1080.283014][T11650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1080.296938][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10884'. [ 1080.300013][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.452982][T11650] ____sys_sendmsg+0xa68/0xad0 [ 1080.458473][T11650] ? __might_fault+0xaf/0x130 [ 1080.463175][T11650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.468544][T11650] ? import_iovec+0x73/0xa0 [ 1080.473055][T11650] ___sys_sendmsg+0x2a5/0x360 [ 1080.477783][T11650] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.482745][T11650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.487998][T11650] ? futex_wait+0x29a/0x380 [ 1080.492520][T11650] ? __fget_files+0x2a/0x420 [ 1080.497151][T11650] ? __fget_files+0x3a0/0x420 [ 1080.501841][T11650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1080.506838][T11650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1080.512311][T11650] ? rcu_is_watching+0x15/0xb0 [ 1080.517170][T11650] do_syscall_64+0x14d/0xf80 [ 1080.521780][T11650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.527914][T11650] ? trace_irq_disable+0x37/0x100 [ 1080.532945][T11650] ? clear_bhb_loop+0x40/0x90 [ 1080.537897][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.543803][T11650] RIP: 0033:0x7f671c79c629 [ 1080.548306][T11650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.567978][T11650] RSP: 002b:00007f671d637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.576472][T11650] RAX: ffffffffffffffda RBX: 00007f671ca15fa0 RCX: 00007f671c79c629 [ 1080.584450][T11650] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000009 [ 1080.592469][T11650] RBP: 00007f671c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1080.600492][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.608550][T11650] R13: 00007f671ca16038 R14: 00007f671ca15fa0 R15: 00007fff0b369648 [ 1080.616594][T11650] [ 1080.619625][T11650] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1080.626910][T11650] CPU: 0 UID: 0 PID: 11650 Comm: syz.3.10878 Not tainted syzkaller #0 PREEMPT(full) [ 1080.636364][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.646401][T11650] Call Trace: [ 1080.649665][T11650] [ 1080.652583][T11650] vpanic+0x1e0/0x670 [ 1080.656562][T11650] panic+0xc5/0xd0 [ 1080.660270][T11650] ? __pfx_panic+0x10/0x10 [ 1080.664680][T11650] __warn+0x315/0x4a0 [ 1080.668645][T11650] ? nf_hook_entry_head+0x23e/0x2c0 [ 1080.674263][T11650] ? nf_hook_entry_head+0x23e/0x2c0 [ 1080.679451][T11650] __report_bug+0x29a/0x540 [ 1080.683956][T11650] ? nf_hook_entry_head+0x23e/0x2c0 [ 1080.689151][T11650] ? __pfx___report_bug+0x10/0x10 [ 1080.694163][T11650] ? kfree+0x1c1/0x610 [ 1080.698222][T11650] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 1080.704020][T11650] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 1080.709835][T11650] ? nf_hook_entry_head+0x23e/0x2c0 [ 1080.715044][T11650] report_bug+0x16a/0x220 [ 1080.719378][T11650] ? nf_hook_entry_head+0x23e/0x2c0 [ 1080.724572][T11650] ? nf_hook_entry_head+0x240/0x2c0 [ 1080.729768][T11650] handle_bug+0x98/0x200 [ 1080.734017][T11650] exc_invalid_op+0x1a/0x50 [ 1080.738517][T11650] asm_exc_invalid_op+0x1a/0x20 [ 1080.743358][T11650] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 1080.749154][T11650] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 9d 42 74 f8 4d 39 37 74 36 e8 e3 1b 0b f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c9 [ 1080.768747][T11650] RSP: 0018:ffffc9000e106f00 EFLAGS: 00010287 [ 1080.775169][T11650] RAX: ffffffff89b91eab RBX: ffff888064ce0000 RCX: 0000000000080000 [ 1080.783148][T11650] RDX: ffffc9000d20a000 RSI: 000000000000387d RDI: 000000000000387e [ 1080.791121][T11650] RBP: 0000000000000000 R08: ffff888044e48000 R09: 0000000000000006 [ 1080.799084][T11650] R10: 000000000000000a R11: 0000000000000002 R12: ffff888057f94c80 [ 1080.807046][T11650] R13: 0000000000000005 R14: ffff888057f94c80 R15: ffff888064ce0108 [ 1080.815013][T11650] ? nf_hook_entry_head+0x1fb/0x2c0 [ 1080.820215][T11650] __nf_unregister_net_hook+0x74/0x6f0 [ 1080.825669][T11650] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 1080.831988][T11650] nf_tables_commit+0x4270/0xa400 [ 1080.837016][T11650] ? nft_pernet+0x23/0x240 [ 1080.841431][T11650] ? nft_pernet+0x23/0x240 [ 1080.845842][T11650] ? nft_pernet+0x23/0x240 [ 1080.850253][T11650] ? __pfx_nf_tables_commit+0x10/0x10 [ 1080.855616][T11650] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1080.861857][T11650] ? nft_flush_table+0x1749/0x18e0 [ 1080.866963][T11650] ? nft_pernet+0x23/0x240 [ 1080.871374][T11650] ? nf_tables_deltable+0x678/0xe80 [ 1080.876575][T11650] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1080.882139][T11650] nfnetlink_rcv+0x1c1b/0x27b0 [ 1080.886894][T11650] ? is_bpf_text_address+0x26/0x2b0 [ 1080.892106][T11650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1080.897209][T11650] ? stack_trace_save+0xa9/0x100 [ 1080.902168][T11650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.907356][T11650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.912555][T11650] netlink_unicast+0x80f/0x9b0 [ 1080.917318][T11650] ? __pfx_netlink_unicast+0x10/0x10 [ 1080.922597][T11650] ? netlink_sendmsg+0x650/0xb40 [ 1080.927520][T11650] ? skb_put+0x11b/0x210 [ 1080.931757][T11650] netlink_sendmsg+0x813/0xb40 [ 1080.936520][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.941798][T11650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1080.946730][T11650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1080.952009][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.957281][T11650] ____sys_sendmsg+0xa68/0xad0 [ 1080.962037][T11650] ? __might_fault+0xaf/0x130 [ 1080.966712][T11650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.972162][T11650] ? import_iovec+0x73/0xa0 [ 1080.976660][T11650] ___sys_sendmsg+0x2a5/0x360 [ 1080.981330][T11650] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.986260][T11650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.991452][T11650] ? futex_wait+0x29a/0x380 [ 1080.995964][T11650] ? __fget_files+0x2a/0x420 [ 1081.000539][T11650] ? __fget_files+0x3a0/0x420 [ 1081.005208][T11650] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1081.010136][T11650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.015589][T11650] ? rcu_is_watching+0x15/0xb0 [ 1081.020352][T11650] do_syscall_64+0x14d/0xf80 [ 1081.024930][T11650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.030983][T11650] ? trace_irq_disable+0x37/0x100 [ 1081.036003][T11650] ? clear_bhb_loop+0x40/0x90 [ 1081.040675][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.046556][T11650] RIP: 0033:0x7f671c79c629 [ 1081.050961][T11650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.070553][T11650] RSP: 002b:00007f671d637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.078960][T11650] RAX: ffffffffffffffda RBX: 00007f671ca15fa0 RCX: 00007f671c79c629 [ 1081.086933][T11650] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000009 [ 1081.094902][T11650] RBP: 00007f671c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1081.102860][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.110821][T11650] R13: 00007f671ca16038 R14: 00007f671ca15fa0 R15: 00007fff0b369648 [ 1081.118803][T11650] [ 1081.122142][T11650] Kernel Offset: disabled [ 1081.126450][T11650] Rebooting in 86400 seconds..