last executing test programs: 2.457678229s ago: executing program 4 (id=2654): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffbff}, 0x1c) (async, rerun: 64) write(r2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000005668de9f725db530180a01020000000000000000000010080900010073797a31000000002c020000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874680372000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a3000000000140000001100010000000000000000000700000a"], 0xf8}}, 0x6004014) (async) listen(r0, 0xffffffff) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) (async) socket$kcm(0x29, 0x5, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x52, &(0x7f0000002800)=[{&(0x7f0000000000)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x4014}, 0x4000000) 2.33482685s ago: executing program 4 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newaddr={0xa4, 0x14, 0x400, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0xa, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x6, 0x1000001, 0x6}}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x9, 0x2, 0x8}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe13}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7d}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x1, 0x322, 0x39af}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040}, 0x4000801) 1.684604384s ago: executing program 4 (id=2666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000a80)={{r1, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@align=0x39, {0x10, 0x3ce, 0x100, 0x6}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x3}, 0x7, &(0x7f0000000980)=[{0x3, 0x8000, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="0e8986b86d27cd370de58575868f564ad424e8d5ae0fb3ae39e7f11384e8993bd5f06421ec32628115f1aa0539ae4214e2fa51be8d431abe9654", 0x3a, 0x2}, {0x1, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)="bb8380c895c5ab91db62ed33ba35fad8467219d24b4e8b1ce243a5e9c950cac6bb46bedc708f682c46a7a91c59eebbba72341a17f5a711053a429d1723a6cc89cd323f83af5ffec40eec4e4becbf0a980608c137795ad9fd82d4d3120c73626b443c4fe9f1f32dae8f095ec04500aadd3d58daf9c1e18731ddd24c430d6273", 0x7f, 0x28}, {0x0, 0x4, &(0x7f00000003c0)=']:%\x00', &(0x7f0000000400)="c873e8ba0de9e3462e7ecab4f46a3d614855898cb06eee3dc0e4ad99ed4bc7924daa581bd6a16783ba9d05c356ec12cb629861c863272248e441b922ec6f590302068c4fb7d44d37a3758ef6c875123a44e884486aab554c8ae67d50891a57a886ee72da25efa220ab90624cf61a95b90f83d57ee66718fc687c695bb76d57984bf71a5e6d41a1a457835667356e3926c1ee3d6a6df2a44bf12e9e5f481d5e1ed18aee0e9ff0d1651287dad89363f6d59d55be8b32a356c43973aec76c0c6a159269078cd3017984d94c4ce3a8a39cfac3154b51bbf1de", 0xd7, 0x10}, {0x1, 0x8, &(0x7f0000000500)='-@,@.(@%,[{\\\x00', &(0x7f0000000540)="0b12d8d1342b4e39f49cc9e9852c2a4d3799f1f5b0492f671e9cd61c03d2e295b4e4fa42f3c285f08912ed2ff07d4bbbc2b1d688ebf6b7b76465e82db3a13ef4de", 0x41}, {0x3, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="93d3f84fac7ff96a7fb44a22a42a4867486bc6916b50b2373e6ccd7ca39fb91960e9c564a6f0e3b8397ea725c3b153e45843c3f981debcff8436788d3f9fd3b3002fc59d27b8df141b06965b132b8c9a49e79aed1fd610fa344bf53a86deb6631e85ead079ea43d4a412082a67800d8a2b4192f9640d3851af2cb31810e8efff0b69ac1215edadf4fc505e31615db7d33b0298ebb63a0ed268e671c0dbbd496230e3e1e3353bfc801401f0a0333633fe3f87603d890e7ff447a727de07230f182023d383957275810f196bd432dd1ed325a05cf4398338ae135dd79bd6b8e4d3", 0xe0, 0x10}, {0x3, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="b2ce98d950bdf03182ef6998d796cb4c15a4d0f1ee34325d4fd0888ecf39afa999b62f399670430a3734708ce0c911cfeeb4b334f3f160593cd6a7a2bfa6b0a19ab1de94594630461d38fef63c69a1ae6e4fcd69a37dd4c092e5e825c126da55b4404863707768fdb0f0cd3a0f70c8ce01061b3f8c638f0262911e29ad7e7cf32b711d41c62b0b4876638d41fcc795ae849daffe66ef0f75d1762eba79ee19089de37a0034cfd5e3c12836fa0c92c6343c417b7381812f537d2af050b26abcb6e25db91548ccf8a9933d2ef9484a9142511ced03f1352b9df9d8601d738bf19ca90ce4a23c11", 0xe6, 0x10}, {0x3, 0x7, &(0x7f0000000840)='\x00', &(0x7f0000000880)="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", 0xff, 0x10}]}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="180000002eca4eb7684a1e8f0000000000436ab67c4a6121247fcf3f23aea0000000", @ANYRES32=0x0], 0x18}}, 0x20000010) recvmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @window={0x3, 0x5, 0x8000}], 0x3) 1.622144214s ago: executing program 1 (id=2668): r0 = socket$kcm(0xa, 0x7, 0x0) pwritev(r0, 0x0, 0x0, 0x9, 0xbb) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.554344188s ago: executing program 0 (id=2670): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @empty}, {0x304, @local}, 0x5a, {0x2, 0x4e25, @private=0xa010102}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x6, [@var={0xc, 0x0, 0x0, 0xe, 0x2}, @const={0x3}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x8}}, @datasec={0x1, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x10000, 0x3b7}, {0x4, 0x2, 0x5}, {0x1, 0xfffffffe, 0x4}, {0x3, 0xe, 0x3}, {0x5, 0x9, 0x9a}], '\v'}, @enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0xd}, {0x9, 0x4}, {0xc, 0x2}, {0x3, 0x1000}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x3}, @const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x2e, 0x61, 0x0]}}, &(0x7f0000000680)=""/71, 0xfe, 0x47, 0x1, 0xa6f}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x2, 0x1, 0x2}, 0x50) sendfile(r0, r5, &(0x7f0000000540)=0x5, 0x100) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="d35c59aa401608a792345b2d8c4e2890750804421cd0a8483fde705b46a00178dea0d7f835a32985724633cb18a492cd047c29b1512ced469d6c05be7af117d2664bf0553c5c79f4c85b2a8d67db0eebc1347b599b6844d0acf15540fa56cc6e41f611533f6ac24eb9e4339a8485b722520c20c21d135d72706bc6c4d845e99d734971b7891bcf35c88392d1aac4425d990a08c6a08cd4d880edb4a89d4aae522cc1f964fe7b388784398c2e3f02a90e325138bac5acd0c79091b8c4932bdcc9852ac17674329228d576496c7b3a42fa24baa2", 0xd3}, {&(0x7f0000000340)="734d48869f4bf7911c373308f5eba9c1771a473ce1753b6bb53008e184673b64ccc2ce7448e407664e165f7f85a2fda1be85542d62511c02157bcd70a29288cac8edacefed41a4c3b43841c6ae516d59d37355c6", 0x54}], 0x2, &(0x7f0000000400)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x10}}], 0x78}, 0x4040000) 1.406878788s ago: executing program 1 (id=2671): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x6, 0x401}, &(0x7f00000000c0)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003fe8ffff07000300", @ANYRES32=r1, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) 1.369677827s ago: executing program 2 (id=2673): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f0000000380)="4b9ad2f2d311f9edcad1e54714f605c567bfb5c649c2be08a993941205feddf53116b003e91702043a5557e16a0682a35774281593c50062cb3948243b71deedd5b30fde78f5271cff06defa292876486acb508cd0d281838993314c79c85ace49282861df1200e021555eebd0968d6fe92f65b3566e770c4f4562a1c61071f894c56f0f39a5b843e559f731912c22a47bfa78329bfb52720ef480f67bef8210240ff4688137ea849b9ed50ff73af9aac7ac5f9a5e75aaf599bebb6de27fdc38942836dad51ed84dcee1c3f37790ac4f6db37d757401f8ace035"}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7a00000055ab60b7b39f331269c93ada98fbd2249a84db93a92a5123f40d7929548bb1111bd6ba9d6b351e6d36f1af8718f2527920ca00f49c919e129ee700ffef18fc778ce1e04054d8f17e15371dad537ffcb17f41d452e470edc0d0b574e32368442d40fbc8997bbee432c11333c35f9ddf47611824c1730c3327b23fab1927c9dc8d3feb69d5129f5ef401e28b5edcea12f4159d1a31be446baafc64d76d9afbf1af597c63592dbd22263a09712039433d91a1f656375191a4d4718a1eae2dbf82e8d0eee84677efdfd23f36cb", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000200000600090000000000"], 0x48}}, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x4044000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.350042437s ago: executing program 0 (id=2674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400000000002}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x17da}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x24000000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r1, 0xfd3d1000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, 0x0, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40814) 1.250902976s ago: executing program 1 (id=2675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x743d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbac}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x20000004) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000300)=0xe, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a050000000200080009000100737900020073797a300000000014000000020a01080000000000000000f7ce9e23ca835d433141c770ab5f74000000051400000011000000000000"], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x4004804) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c40)={0x1ac, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x1}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x184, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6fadc477}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x49a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x30000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x20000}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x712}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3a2422e0195a"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="02c3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="000000d45400"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xaaf5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x93b}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffff9a}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="9e18b4f71460505b7695d5272482378668177e5960d028e45589f6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="bb177f193b1a71e9e94dd7db7fcf78c3999f"}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.249284261s ago: executing program 2 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.235349757s ago: executing program 3 (id=2677): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027c61a7dd1dbdf250f000000080028"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 1.169239523s ago: executing program 0 (id=2678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10, 0x80800) shutdown(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000000c0)='Y\x00\x00\x00\x00\x00', 0x6) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f00000016c0)=""/148, 0x99}, {&(0x7f0000000540)=""/4116, 0xfffffffffffffe80}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5, 0x0, 0xfffffffffffffdc6}, 0x5}], 0x1, 0x2040, 0x0) mmap(&(0x7f00005a6000/0x4000)=nil, 0x4000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000ea0200"/32], 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x13) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000580012800e0001006970366772657461700000004400028014000600fc01000000000000000000000000000114000700fc02000000000000000000000000000106000f0000020000050016000100000008000c000200000008000500", @ANYRES32=r11, @ANYBLOB="47a69218", @ANYRES32=r11, @ANYBLOB], 0x88}}, 0x884) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)=ANY=[@ANYBLOB="4402003ce8723500004b78e88c41cd00cd8dac2b632936eb2c06be9299efa88ae31e8ec1dc99281da1bb89fd337e4515423bba059d6fb49c720e7fc078971ee72b4fdc7748685f5ddfb76308accffd3303ec6810201895ec", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r12, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x20021) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYRES8=r4], 0x44}}, 0x40008c5) 1.054733092s ago: executing program 3 (id=2679): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) (async) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) sendto$inet6(r5, 0x0, 0x0, 0x4, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) accept4$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x800) sendmsg$NFT_BATCH(r2, 0x0, 0x8044) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3cbf}]}, 0x34}, 0x1, 0x0, 0x0, 0x56}, 0x10) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3cbf}]}, 0x34}, 0x1, 0x0, 0x0, 0x56}, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 1.054058785s ago: executing program 2 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdb00000a0001007770616e3100e600e3840cea728fe7"], 0x20}}, 0x20040804) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x4004) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r8, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x1400c000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r8, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}}, 0x800) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r14, 0x890b, &(0x7f0000000700)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3, 0x4, 0x5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r12, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) sendmsg$kcm(r7, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x19) 843.741318ms ago: executing program 1 (id=2681): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='bond_slave\x00', 0x1c1000, &(0x7f0000000080)={@align=0x5, {0x3, 0x9, 0x0, 0x3}}, 0x80000000, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="674466980100000003000300040000009d823fad41d2ec62a0e5b3a290dda0f0eede30ca5ef5ebd15ede24bd6bec428e0e9cabf7a4d83d409169184198567a1e8da9d83a89b985c8afa3c5548505fe784f3d9cdf5b97a06df5b9dcdc0ac51936e3f82cdc29b92987097fa217127bc57f0df8665b8cfff1de0000000000"], 0x7d) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x33, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xd1}}}}]}, 0x40}}, 0x0) 723.772921ms ago: executing program 4 (id=2682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf254b00000008000300", @ANYRESOCT=r3, @ANYRESDEC=r4], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r8, 0x5, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r8, 0x3}, 0x8) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 619.162037ms ago: executing program 3 (id=2683): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000001000000000068234422d02c679425044226030224ed6484603387adc5dee6dd6794093a93789c0b2550bcb061ac6d624eeb7b9873e925bee777c275dafbb3ba2d73097356400432"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000e9714afa6a425f69507d7f5e667c91ca01cef397d688abb8b4e4f77213e3ca08139497eb5b0fe7e682414a340f1da909fa9d479e83ba6fd2d5d2e133f38f87c686df05f72e89f4ef7657350ec2d053412b74f4237cfa", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r7, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8000, 0x8017, 0x0, 0x3, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x65, 0x0, 0x8, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4, 0x1}, @noop, @noop, @generic={0x82, 0xa, "fec52a57fba9a64c"}, @rr={0x7, 0xb, 0xd9, [@loopback, @loopback]}, @generic={0x86, 0x6, "4132f0ec"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000400)='syzkaller\x00', 0x1a7, 0x20, &(0x7f0000000440)=""/32, 0x41100, 0x50, '\x00', r10, @sk_lookup=0x24, r1, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r5, 0x3, &(0x7f00000005c0)=[r2, r4], &(0x7f0000000600)=[{0x2, 0x5, 0xf}, {0x1, 0x3, 0x9, 0x7}, {0x2, 0x5, 0x1}], 0x10, 0x3ff}, 0x94) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xa, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000280), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 605.847113ms ago: executing program 0 (id=2684): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x20) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x10}]}, 0x3c}}, 0x44800) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1877624e8d248175cbf0079ef67f00000000000000000000000000000091121600000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 599.664926ms ago: executing program 2 (id=2685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xcc, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x755}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd23}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 538.771817ms ago: executing program 1 (id=2686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4000058}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000000080)=""/149, 0x95}, {&(0x7f00000028c0)=""/4093, 0xffd}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0x11}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000000080)=""/149, 0x95}, {&(0x7f00000028c0)=""/4093, 0xffd}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0x11}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) 451.523342ms ago: executing program 0 (id=2687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 447.146992ms ago: executing program 3 (id=2688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) write$tcp_congestion(r1, 0x0, 0x0) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="6c1eaa7b8a6f3b2af8d9d40855a0846b614c15d75039ce8aefacaf91eb786a76d9a6c78f065033a9c2447e90069f77ba360ad549e8800ef186d6e3ddb3221f59c7a1d734e1e920f5082cb865b7aba9d5cf", 0x51}], 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) 375.393699ms ago: executing program 4 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='H', @ANYRES8=r4], 0x48}, 0x1, 0x0, 0x0, 0x20004815}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706105006f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 319.307294ms ago: executing program 1 (id=2690): r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000400c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x0, 0x0}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r6, 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) 318.610061ms ago: executing program 2 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r2, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="000000000000000000aca932135450853f541a91f8eb165723520366796e6487cde1110724dfb997a268a1873bccf59ed6f496e64536bfe3dd906bb059d848a82a863fbd44116ac340cb051bd9219153b7cf589774f7", 0x56}], 0x1}}], 0x1, 0x41) (async) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 241.644957ms ago: executing program 3 (id=2692): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00781a00"], 0x18, 0x8001}}], 0x2, 0x80) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4) 145.651366ms ago: executing program 4 (id=2693): socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f00000000c0)="30e559528db6d70456d8f6a0", 0xc, 0x0, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) listen(r2, 0x21) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250f0000010800270001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000180)=0x14) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000800)={{0x200, 0x2, 0x3ff, 0x84, 0x89e}, &(0x7f0000000400)=[{}, {}, {}]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="681000004afe02002bbd7000fbdb000000000000", @ANYRES32=r5, @ANYBLOB="0100010014000100fc01000000000000000000000000000014000100fe8000000000000000000000000000bb080002000200000014000100ff0200000000000000000000000000010800020006000000"], 0x68}}, 0x0) 96.315376ms ago: executing program 3 (id=2694): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@local, @empty]}) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0x20000000002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@local, @empty]}) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r4, 0x0, 0x20000000002) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) 95.713197ms ago: executing program 2 (id=2695): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r0, 0xb0260000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/11, 0xb}], 0x5, &(0x7f0000000700)=""/83, 0x53}, 0x10042) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) 0s ago: executing program 0 (id=2696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000300)}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) kernel console output (not intermixed with test programs): lid length. [ 104.111817][ T7011] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.142728][ T7011] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.237032][ T7709] syzkaller0: entered promiscuous mode [ 104.257953][ T7709] syzkaller0: entered allmulticast mode [ 104.282090][ T7011] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.325506][ T7011] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.342404][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 104.461155][ T7743] Bluetooth: MGMT ver 1.23 [ 104.507842][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 104.552916][ T7752] netlink: 'syz.2.561': attribute type 23 has an invalid length. [ 104.566464][ T7743] team0: Port device team_slave_0 removed [ 104.629988][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 104.677463][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 104.688051][ T7766] netlink: 'syz.2.564': attribute type 30 has an invalid length. [ 104.696108][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 104.711741][ T7768] xt_recent: Unsupported userspace flags (000000b1) [ 104.928436][ T29] audit: type=1804 audit(1782403939.300:3): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.571" name="/newroot/109/cgroup.controllers" dev="tmpfs" ino=567 res=1 errno=0 [ 104.966082][ T7786] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 104.973916][ T29] audit: type=1800 audit(1782403939.300:4): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.571" name="cgroup.controllers" dev="tmpfs" ino=567 res=0 errno=0 [ 105.014873][ T7786] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 105.031423][ T7786] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 105.061162][ T7786] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 105.062431][ T7791] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 105.354493][ T7808] vcan1: entered promiscuous mode [ 105.382647][ T7808] vcan1: entered allmulticast mode [ 105.765642][ T7833] syzkaller0: entered promiscuous mode [ 105.772105][ T7833] syzkaller0: entered allmulticast mode [ 106.376456][ T7867] tipc: Enabled bearer , priority 0 [ 106.412971][ T7867] syzkaller0: entered promiscuous mode [ 106.434728][ T7867] syzkaller0: entered allmulticast mode [ 106.481565][ T7882] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 106.561438][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.584722][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.640661][ T7882] tipc: Resetting bearer [ 106.649191][ T7867] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 106.669747][ T7866] tipc: Resetting bearer [ 106.702623][ T7866] tipc: Disabling bearer [ 106.748848][ T7894] macvlan0: entered promiscuous mode [ 106.789604][ T7896] openvswitch: netlink: Missing valid actions attribute. [ 106.814303][ T7896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.246083][ T7930] openvswitch: netlink: Missing key (keys=40, expected=80) [ 107.408168][ T7886] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 108.634402][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 108.766010][ T8031] validate_nla: 2 callbacks suppressed [ 108.766045][ T8031] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 108.839509][ T8032] __nla_validate_parse: 19 callbacks suppressed [ 108.839547][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 108.885387][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 108.902492][ T8030] bridge2: left promiscuous mode [ 108.906964][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 108.927191][ T8030] bridge2: left allmulticast mode [ 108.942538][ T8031] syzkaller0: entered promiscuous mode [ 108.958886][ T8031] syzkaller0: entered allmulticast mode [ 108.970758][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 108.993422][ T8040] tipc: Enabling of bearer rejected, failed to enable media [ 109.022821][ T8040] netlink: 'syz.0.641': attribute type 2 has an invalid length. [ 109.209761][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 109.342476][ T8058] syzkaller1: entered promiscuous mode [ 109.356119][ T8058] syzkaller1: entered allmulticast mode [ 109.404675][ T8066] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.418399][ T8066] bond2 (unregistering): Released all slaves [ 109.481067][ T8075] gtp0: entered promiscuous mode [ 109.487228][ T8075] gtp0: entered allmulticast mode [ 109.713498][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.655'. [ 109.965358][ T8103] netlink: 'syz.0.659': attribute type 11 has an invalid length. [ 109.977778][ T8103] netlink: 'syz.0.659': attribute type 5 has an invalid length. [ 109.988323][ T8103] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.659'. [ 109.999721][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 110.152793][ T8115] openvswitch: netlink: Key type 218 is out of range max 32 [ 110.194220][ T8119] netlink: 'syz.0.663': attribute type 9 has an invalid length. [ 110.293192][ T8123] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 110.349205][ T8130] syz_tun: entered allmulticast mode [ 110.379634][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 110.550634][ T8146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.560891][ T8146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.631558][ T8148] netlink: 'syz.4.673': attribute type 6 has an invalid length. [ 110.672583][ T8155] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 110.711385][ T8157] netlink: 'syz.3.674': attribute type 12 has an invalid length. [ 110.805524][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 110.894771][ T8170] netlink: 'syz.2.677': attribute type 15 has an invalid length. [ 110.926691][ T139] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 110.927975][ T8170] netlink: 'syz.2.677': attribute type 15 has an invalid length. [ 110.963935][ T139] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 110.996686][ T139] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 111.032343][ T139] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 111.122849][ T8125] syz_tun: left allmulticast mode [ 111.480238][ T8214] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.493600][ T8214] xt_SECMARK: invalid mode: 9 [ 114.250925][ T8195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.515923][ T8237] __nla_validate_parse: 11 callbacks suppressed [ 114.515959][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 114.549673][ T8239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.696'. [ 114.626827][ T8244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.754000][ T8252] netlink: 'syz.0.702': attribute type 13 has an invalid length. [ 114.779918][ T8252] macsec0: entered allmulticast mode [ 114.814580][ T8255] netlink: 'syz.1.704': attribute type 21 has an invalid length. [ 114.948755][ T8259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.127886][ T8277] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 115.213181][ T8277] bond2: entered promiscuous mode [ 115.221875][ T8277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.336837][ T8291] netlink: 'syz.0.716': attribute type 10 has an invalid length. [ 115.368624][ T8292] syzkaller0: entered promiscuous mode [ 115.374840][ T8292] syzkaller0: entered allmulticast mode [ 115.845132][ T8316] ip6gre1: entered allmulticast mode [ 116.507216][ T8355] FAULT_INJECTION: forcing a failure. [ 116.507216][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.542001][ T8355] CPU: 1 UID: 0 PID: 8355 Comm: syz.3.738 Not tainted syzkaller #0 PREEMPT(full) [ 116.542033][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.542055][ T8355] Call Trace: [ 116.542067][ T8355] [ 116.542075][ T8355] dump_stack_lvl+0xe8/0x150 [ 116.542114][ T8355] should_fail_ex+0x40c/0x560 [ 116.542139][ T8355] _copy_from_user+0x2d/0xb0 [ 116.542166][ T8355] ___sys_sendmsg+0x1c6/0x360 [ 116.542195][ T8355] ? rcu_is_watching+0x15/0xb0 [ 116.542215][ T8355] ? get_pid_task+0x20/0x1f0 [ 116.542235][ T8355] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.542267][ T8355] ? rcu_is_watching+0x15/0xb0 [ 116.542300][ T8355] ? __fget_files+0x2a/0x420 [ 116.542321][ T8355] ? __fget_files+0x3a2/0x420 [ 116.542343][ T8355] __x64_sys_sendmsg+0x1b1/0x290 [ 116.542371][ T8355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.542407][ T8355] ? rcu_is_watching+0x15/0xb0 [ 116.542427][ T8355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.542448][ T8355] do_syscall_64+0x174/0x580 [ 116.542476][ T8355] ? clear_bhb_loop+0x40/0x90 [ 116.542498][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.542517][ T8355] RIP: 0033:0x7f43e379ce59 [ 116.542542][ T8355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.542558][ T8355] RSP: 002b:00007f43e4655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.542588][ T8355] RAX: ffffffffffffffda RBX: 00007f43e3a15fa0 RCX: 00007f43e379ce59 [ 116.542603][ T8355] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 116.542615][ T8355] RBP: 00007f43e4655090 R08: 0000000000000000 R09: 0000000000000000 [ 116.542627][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.542639][ T8355] R13: 00007f43e3a16038 R14: 00007f43e3a15fa0 R15: 00007ffd1151b1e8 [ 116.542662][ T8355] [ 116.932811][ T8380] netlink: 'syz.0.746': attribute type 12 has an invalid length. [ 116.946130][ T8380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.746'. [ 117.048727][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 117.067696][ T8383] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 117.067696][ T8383] Please contact the netfilter-devel mailing list or update your nftables rules. [ 117.368811][ T8402] FAULT_INJECTION: forcing a failure. [ 117.368811][ T8402] name failslab, interval 1, probability 0, space 0, times 1 [ 117.391868][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.3.754 Not tainted syzkaller #0 PREEMPT(full) [ 117.391898][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.391910][ T8402] Call Trace: [ 117.391918][ T8402] [ 117.391926][ T8402] dump_stack_lvl+0xe8/0x150 [ 117.391953][ T8402] should_fail_ex+0x40c/0x560 [ 117.391978][ T8402] should_failslab+0xa8/0x100 [ 117.392010][ T8402] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 117.392038][ T8402] ? rcu_is_watching+0x15/0xb0 [ 117.392059][ T8402] ? __alloc_skb+0x1d7/0x7a0 [ 117.392086][ T8402] ? trace_irq_enable+0x3b/0x140 [ 117.392116][ T8402] __alloc_skb+0x1d7/0x7a0 [ 117.392144][ T8402] netlink_sendmsg+0x5d4/0xb40 [ 117.392167][ T8402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.392188][ T8402] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.392209][ T8402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.392236][ T8402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.392254][ T8402] ____sys_sendmsg+0x9b9/0xa20 [ 117.392288][ T8402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.392319][ T8402] ? lock_release+0x4b/0x3c0 [ 117.392350][ T8402] ? import_iovec+0x73/0xa0 [ 117.392379][ T8402] ___sys_sendmsg+0x2a5/0x360 [ 117.392407][ T8402] ? rcu_is_watching+0x15/0xb0 [ 117.392426][ T8402] ? get_pid_task+0x20/0x1f0 [ 117.392446][ T8402] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.392478][ T8402] ? rcu_is_watching+0x15/0xb0 [ 117.392512][ T8402] ? __fget_files+0x2a/0x420 [ 117.392535][ T8402] ? __fget_files+0x3a2/0x420 [ 117.392562][ T8402] __x64_sys_sendmsg+0x1b1/0x290 [ 117.392593][ T8402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.392630][ T8402] ? rcu_is_watching+0x15/0xb0 [ 117.392652][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.392673][ T8402] do_syscall_64+0x174/0x580 [ 117.392701][ T8402] ? trace_irq_disable+0x3b/0x140 [ 117.392737][ T8402] ? clear_bhb_loop+0x40/0x90 [ 117.392760][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.392780][ T8402] RIP: 0033:0x7f43e379ce59 [ 117.392799][ T8402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.392816][ T8402] RSP: 002b:00007f43e4655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.392838][ T8402] RAX: ffffffffffffffda RBX: 00007f43e3a15fa0 RCX: 00007f43e379ce59 [ 117.392853][ T8402] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 117.392866][ T8402] RBP: 00007f43e4655090 R08: 0000000000000000 R09: 0000000000000000 [ 117.392879][ T8402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.392890][ T8402] R13: 00007f43e3a16038 R14: 00007f43e3a15fa0 R15: 00007ffd1151b1e8 [ 117.392914][ T8402] [ 117.755096][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 117.808485][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 118.059645][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 118.266587][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 118.560956][ T8442] trusted_key: syz.4.768 sent an empty control message without MSG_MORE. [ 118.689349][ T8453] syzkaller1: entered promiscuous mode [ 118.722013][ T8453] syzkaller1: entered allmulticast mode [ 118.760131][ T8456] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 119.252824][ T8489] FAULT_INJECTION: forcing a failure. [ 119.252824][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.271859][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(full) [ 119.271890][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.271902][ T8489] Call Trace: [ 119.271909][ T8489] [ 119.271917][ T8489] dump_stack_lvl+0xe8/0x150 [ 119.271943][ T8489] should_fail_ex+0x40c/0x560 [ 119.271967][ T8489] _copy_from_iter+0x1d3/0x1660 [ 119.271991][ T8489] ? rcu_is_watching+0x15/0xb0 [ 119.272014][ T8489] ? __pfx__copy_from_iter+0x10/0x10 [ 119.272035][ T8489] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 119.272064][ T8489] ? netlink_sendmsg+0x650/0xb40 [ 119.272081][ T8489] ? skb_put+0x112/0x210 [ 119.272108][ T8489] netlink_sendmsg+0x6c0/0xb40 [ 119.272129][ T8489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.272149][ T8489] ? aa_sock_msg_perm+0xf1/0x1b0 [ 119.272168][ T8489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.272192][ T8489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.272210][ T8489] ____sys_sendmsg+0x9b9/0xa20 [ 119.272241][ T8489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.272271][ T8489] ? lock_release+0x4b/0x3c0 [ 119.272300][ T8489] ? import_iovec+0x73/0xa0 [ 119.272326][ T8489] ___sys_sendmsg+0x2a5/0x360 [ 119.272354][ T8489] ? rcu_is_watching+0x15/0xb0 [ 119.272372][ T8489] ? get_pid_task+0x20/0x1f0 [ 119.272392][ T8489] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.272422][ T8489] ? rcu_is_watching+0x15/0xb0 [ 119.272456][ T8489] ? __fget_files+0x2a/0x420 [ 119.272478][ T8489] ? __fget_files+0x3a2/0x420 [ 119.272512][ T8489] __x64_sys_sendmsg+0x1b1/0x290 [ 119.272542][ T8489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.272576][ T8489] ? rcu_is_watching+0x15/0xb0 [ 119.272596][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.272617][ T8489] do_syscall_64+0x174/0x580 [ 119.272645][ T8489] ? clear_bhb_loop+0x40/0x90 [ 119.272668][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.272688][ T8489] RIP: 0033:0x7f3c9a79ce59 [ 119.272707][ T8489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.272722][ T8489] RSP: 002b:00007f3c9b6a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.272742][ T8489] RAX: ffffffffffffffda RBX: 00007f3c9aa15fa0 RCX: 00007f3c9a79ce59 [ 119.272756][ T8489] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 119.272768][ T8489] RBP: 00007f3c9b6a4090 R08: 0000000000000000 R09: 0000000000000000 [ 119.272781][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.272793][ T8489] R13: 00007f3c9aa16038 R14: 00007f3c9aa15fa0 R15: 00007ffd79fa9838 [ 119.272815][ T8489] [ 119.567752][ T8492] netlink: 56 bytes leftover after parsing attributes in process `syz.1.782'. [ 119.847920][ T8520] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 119.855781][ T8520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.791'. [ 120.046566][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 120.049776][ T8532] FAULT_INJECTION: forcing a failure. [ 120.049776][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 120.071130][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.0.794 Not tainted syzkaller #0 PREEMPT(full) [ 120.071158][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.071170][ T8532] Call Trace: [ 120.071177][ T8532] [ 120.071185][ T8532] dump_stack_lvl+0xe8/0x150 [ 120.071212][ T8532] should_fail_ex+0x40c/0x560 [ 120.071235][ T8532] should_failslab+0xa8/0x100 [ 120.071265][ T8532] __kmalloc_cache_noprof+0x88/0x660 [ 120.071291][ T8532] ? tcf_action_init_1+0x1c2/0x740 [ 120.071319][ T8532] tcf_action_init_1+0x1c2/0x740 [ 120.071352][ T8532] ? lock_release+0x4b/0x3c0 [ 120.071383][ T8532] ? __pfx_tcf_action_init_1+0x10/0x10 [ 120.071407][ T8532] ? _raw_read_unlock+0x28/0x50 [ 120.071430][ T8532] ? tc_action_load_ops+0x247/0x540 [ 120.071453][ T8532] ? stack_depot_save_flags+0x33/0x800 [ 120.071481][ T8532] ? sctp_sendmsg_to_asoc+0x13fb/0x1880 [ 120.071507][ T8532] ? sctp_sendmsg+0x1bb5/0x2d00 [ 120.071534][ T8532] ? __nla_parse+0x40/0x60 [ 120.071558][ T8532] tcf_action_init+0x30e/0xb10 [ 120.071586][ T8532] ? __pfx_tcf_action_init+0x10/0x10 [ 120.071634][ T8532] ? __pfx___nla_validate_parse+0x10/0x10 [ 120.071657][ T8532] ? unwind_next_frame+0x8f/0x2550 [ 120.071678][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.071715][ T8532] tc_ctl_action+0x43b/0xc70 [ 120.071746][ T8532] ? __pfx_tc_ctl_action+0x10/0x10 [ 120.071772][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.071815][ T8532] ? __pfx_tc_ctl_action+0x10/0x10 [ 120.071838][ T8532] rtnetlink_rcv_msg+0x7b9/0xc00 [ 120.071865][ T8532] ? kasan_save_track+0x3e/0x80 [ 120.071892][ T8532] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 120.071917][ T8532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.071946][ T8532] ? __netlink_lookup+0xc6/0x8b0 [ 120.071964][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.071989][ T8532] netlink_rcv_skb+0x226/0x4a0 [ 120.072019][ T8532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.072047][ T8532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.072081][ T8532] ? net_generic+0x1e/0x240 [ 120.072105][ T8532] ? net_generic+0x1e/0x240 [ 120.072129][ T8532] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.072161][ T8532] netlink_unicast+0x7bb/0x940 [ 120.072194][ T8532] netlink_sendmsg+0x813/0xb40 [ 120.072216][ T8532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.072237][ T8532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 120.072257][ T8532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.072283][ T8532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.072302][ T8532] ____sys_sendmsg+0x9b9/0xa20 [ 120.072337][ T8532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.072367][ T8532] ? lock_release+0x4b/0x3c0 [ 120.072398][ T8532] ? import_iovec+0x73/0xa0 [ 120.072426][ T8532] ___sys_sendmsg+0x2a5/0x360 [ 120.072454][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.072473][ T8532] ? get_pid_task+0x20/0x1f0 [ 120.072492][ T8532] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.072525][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.072560][ T8532] ? __fget_files+0x2a/0x420 [ 120.072582][ T8532] ? __fget_files+0x3a2/0x420 [ 120.072619][ T8532] __x64_sys_sendmsg+0x1b1/0x290 [ 120.072650][ T8532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.072686][ T8532] ? rcu_is_watching+0x15/0xb0 [ 120.072707][ T8532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.072728][ T8532] do_syscall_64+0x174/0x580 [ 120.072756][ T8532] ? clear_bhb_loop+0x40/0x90 [ 120.072779][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.072798][ T8532] RIP: 0033:0x7f117479ce59 [ 120.072817][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.072835][ T8532] RSP: 002b:00007f11729f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.072855][ T8532] RAX: ffffffffffffffda RBX: 00007f1174a15fa0 RCX: 00007f117479ce59 [ 120.072870][ T8532] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 120.072882][ T8532] RBP: 00007f11729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.072893][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.072905][ T8532] R13: 00007f1174a16038 R14: 00007f1174a15fa0 R15: 00007fffbfa13848 [ 120.072927][ T8532] [ 120.620606][ T8547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 120.719095][ T8553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 120.928601][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'. [ 120.973310][ T8565] pimreg3: entered allmulticast mode [ 121.015033][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 121.036405][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 121.316072][ T8588] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 121.425405][ T8588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.434604][ T8597] netlink: 'syz.0.812': attribute type 4 has an invalid length. [ 121.542159][ T8601] pim6reg1: entered promiscuous mode [ 121.568814][ T8601] pim6reg1: entered allmulticast mode [ 121.619340][ T8619] netlink: 'syz.1.819': attribute type 8 has an invalid length. [ 121.692204][ T8625] netlink: 116 bytes leftover after parsing attributes in process `syz.3.820'. [ 121.882688][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.821'. [ 121.998753][ T8647] netlink: 'syz.2.824': attribute type 21 has an invalid length. [ 122.179184][ T8649] ip6gre3: entered allmulticast mode [ 122.259074][ T8660] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 122.651805][ T8685] syzkaller0: entered promiscuous mode [ 122.671304][ T8685] syzkaller0: entered allmulticast mode [ 122.767008][ T8684] syzkaller0: entered promiscuous mode [ 122.772570][ T8684] syzkaller0: entered allmulticast mode [ 122.876650][ T8701] gre0: Master is either lo or non-ether device [ 123.033426][ T8707] netlink: 'syz.4.846': attribute type 3 has an invalid length. [ 123.141304][ T8711] xt_TCPMSS: Only works on TCP SYN packets [ 123.562508][ T8736] netlink: 'syz.1.856': attribute type 83 has an invalid length. [ 123.748520][ T8746] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 123.892600][ T8758] openvswitch: netlink: Key type 30 is not supported [ 124.064040][ T8767] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 124.083422][ T8767] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 124.719704][ T8781] erspan0: entered promiscuous mode [ 124.747624][ T8781] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.758320][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.846047][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.857396][ T8781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.868069][ T8781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.883544][ T8781] veth0_vlan: left promiscuous mode [ 124.889547][ T8781] veth0_vlan: entered promiscuous mode [ 124.897639][ T8781] macvlan0: left promiscuous mode [ 124.905197][ T8781] veth1_macvtap: left promiscuous mode [ 124.911681][ T8781] veth0_macvtap: left promiscuous mode [ 124.918199][ T8781] veth0_macvtap: entered promiscuous mode [ 124.935629][ T8781] veth1_macvtap: entered promiscuous mode [ 124.942062][ T8781] veth1_macvtap: entered allmulticast mode [ 124.978096][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.998383][ T8798] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 125.008182][ T8781] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 125.018041][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.027579][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.036943][ T8781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.046624][ T8781] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 125.057695][ T8781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.065744][ T8781] gtp1: left promiscuous mode [ 125.073177][ T8781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.083019][ T8781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.096527][ T5719] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 125.104116][ T8786] __nla_validate_parse: 11 callbacks suppressed [ 125.104134][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'. [ 125.120783][ T8786] netlink: 6 bytes leftover after parsing attributes in process `syz.1.872'. [ 125.133100][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.140248][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.149114][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.156242][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.183705][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.224599][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.252821][ T8798] bond3: entered promiscuous mode [ 125.258955][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.338893][ T8804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.357913][ T8804] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 125.369203][ T8804] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 125.382654][ T8804] bond3: (slave ip6gre1): making interface the new active one [ 125.390995][ T8804] ip6gre1: entered promiscuous mode [ 125.399069][ T8804] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 125.410395][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.433559][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.500265][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 125.548920][ T8812] syzkaller0: entered promiscuous mode [ 125.554471][ T8812] syzkaller0: entered allmulticast mode [ 125.856451][ T8822] tipc: Started in network mode [ 125.868340][ T8822] tipc: Node identity , cluster identity 4711 [ 125.887239][ T8822] tipc: Failed to obtain node identity [ 125.904687][ T8822] tipc: Enabling of bearer rejected, failed to enable media [ 126.145044][ T8831] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 126.184034][ T8838] team0: Device xfrm0 is of different type [ 126.370562][ T8850] FAULT_INJECTION: forcing a failure. [ 126.370562][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 126.395113][ T8850] CPU: 0 UID: 0 PID: 8850 Comm: syz.3.890 Not tainted syzkaller #0 PREEMPT(full) [ 126.395142][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.395154][ T8850] Call Trace: [ 126.395162][ T8850] [ 126.395170][ T8850] dump_stack_lvl+0xe8/0x150 [ 126.395198][ T8850] should_fail_ex+0x40c/0x560 [ 126.395222][ T8850] should_failslab+0xa8/0x100 [ 126.395254][ T8850] __kmalloc_noprof+0xe8/0x750 [ 126.395279][ T8850] ? offload_action_alloc+0x2b/0x160 [ 126.395304][ T8850] offload_action_alloc+0x2b/0x160 [ 126.395327][ T8850] tcf_action_offload_add_ex+0x3b8/0x8b0 [ 126.395356][ T8850] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 126.395392][ T8850] ? lock_release+0x4b/0x3c0 [ 126.395419][ T8850] ? sctp_sendmsg_to_asoc+0x13fb/0x1880 [ 126.395446][ T8850] ? sctp_sendmsg+0x1bb5/0x2d00 [ 126.395476][ T8850] ? tcf_action_fill_size+0x1c/0x2e0 [ 126.395501][ T8850] tcf_action_init+0x377/0xb10 [ 126.395530][ T8850] ? __pfx_tcf_action_init+0x10/0x10 [ 126.395569][ T8850] ? __pfx___nla_validate_parse+0x10/0x10 [ 126.395594][ T8850] ? unwind_next_frame+0x8f/0x2550 [ 126.395617][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.395656][ T8850] tc_ctl_action+0x43b/0xc70 [ 126.395688][ T8850] ? __pfx_tc_ctl_action+0x10/0x10 [ 126.395717][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.395760][ T8850] ? __pfx_tc_ctl_action+0x10/0x10 [ 126.395796][ T8850] rtnetlink_rcv_msg+0x7b9/0xc00 [ 126.395824][ T8850] ? kasan_save_track+0x3e/0x80 [ 126.395852][ T8850] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 126.395879][ T8850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.395908][ T8850] ? __netlink_lookup+0xc6/0x8b0 [ 126.395925][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.395957][ T8850] netlink_rcv_skb+0x226/0x4a0 [ 126.396021][ T8850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.396050][ T8850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.396084][ T8850] ? net_generic+0x1e/0x240 [ 126.396106][ T8850] ? net_generic+0x1e/0x240 [ 126.396143][ T8850] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.396175][ T8850] netlink_unicast+0x7bb/0x940 [ 126.396207][ T8850] netlink_sendmsg+0x813/0xb40 [ 126.396231][ T8850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.396252][ T8850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.396273][ T8850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.396298][ T8850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.396317][ T8850] ____sys_sendmsg+0x9b9/0xa20 [ 126.396353][ T8850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.396385][ T8850] ? lock_release+0x4b/0x3c0 [ 126.396416][ T8850] ? import_iovec+0x73/0xa0 [ 126.396455][ T8850] ___sys_sendmsg+0x2a5/0x360 [ 126.396485][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.396504][ T8850] ? get_pid_task+0x20/0x1f0 [ 126.396524][ T8850] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.396555][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.396589][ T8850] ? __fget_files+0x2a/0x420 [ 126.396611][ T8850] ? __fget_files+0x3a2/0x420 [ 126.396639][ T8850] __x64_sys_sendmsg+0x1b1/0x290 [ 126.396670][ T8850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.396706][ T8850] ? rcu_is_watching+0x15/0xb0 [ 126.396727][ T8850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.396748][ T8850] do_syscall_64+0x174/0x580 [ 126.396774][ T8850] ? trace_irq_disable+0x3b/0x140 [ 126.396801][ T8850] ? clear_bhb_loop+0x40/0x90 [ 126.396823][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.396843][ T8850] RIP: 0033:0x7f43e379ce59 [ 126.396863][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.396878][ T8850] RSP: 002b:00007f43e4655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.396901][ T8850] RAX: ffffffffffffffda RBX: 00007f43e3a15fa0 RCX: 00007f43e379ce59 [ 126.396915][ T8850] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 126.396928][ T8850] RBP: 00007f43e4655090 R08: 0000000000000000 R09: 0000000000000000 [ 126.396939][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.396960][ T8850] R13: 00007f43e3a16038 R14: 00007f43e3a15fa0 R15: 00007ffd1151b1e8 [ 126.396982][ T8850] [ 126.940071][ T8865] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20000 [ 126.965770][ T8866] IPVS: set_ctl: invalid protocol: 50 172.30.1.1:20000 [ 126.977124][ T8863] syzkaller1: entered promiscuous mode [ 126.982669][ T8863] syzkaller1: entered allmulticast mode [ 127.149992][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 127.170940][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 127.198037][ T8882] syzkaller0: entered promiscuous mode [ 127.203584][ T8882] syzkaller0: entered allmulticast mode [ 127.229360][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 127.491561][ T8898] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 127.580280][ T8869] infiniband syz2: set active [ 127.601227][ T7255] vxcan1 speed is unknown, defaulting to 1000 [ 127.610908][ T8904] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 127.619272][ T8869] infiniband syz2: added vxcan1 [ 127.628425][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 127.641450][ T8904] team0: entered promiscuous mode [ 127.646803][ T8904] team_slave_0: entered promiscuous mode [ 127.652634][ T8904] team_slave_1: entered promiscuous mode [ 127.660554][ T8904] team0: left promiscuous mode [ 127.668319][ T8904] team_slave_0: left promiscuous mode [ 127.668326][ T8869] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 127.673905][ T8904] team_slave_1: left promiscuous mode [ 127.694735][ T8869] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 127.724631][ T8869] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 127.776245][ T8869] RDS/IB: syz2: added [ 127.797946][ T8869] smc: adding ib device syz2 with port count 1 [ 127.805772][ T8869] smc: ib device syz2 port 1 has no pnetid [ 127.812459][ T7236] vxcan1 speed is unknown, defaulting to 1000 [ 127.819593][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 127.959963][ T8916] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 127.986845][ T8916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.994952][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 128.004046][ T8916] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 128.014286][ T8916] netlink: 'syz.3.909': attribute type 9 has an invalid length. [ 128.022070][ T8916] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.909'. [ 128.098570][ T139] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.169492][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 128.235810][ T14] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.437530][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 128.652534][ T8869] vxcan1 speed is unknown, defaulting to 1000 [ 128.822309][ T8931] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 128.976989][ T8939] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.379029][ T8898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.526251][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.613160][ T8956] Cannot find add_set index 0 as target [ 130.619641][ T8955] netlink: 'syz.4.920': attribute type 11 has an invalid length. [ 130.879358][ T8967] syzkaller0: entered promiscuous mode [ 130.887236][ T8967] syzkaller0: entered allmulticast mode [ 130.902875][ T8973] team0: Device xfrm0 is of different type [ 131.320603][ T8993] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 131.338530][ T8997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.931'. [ 131.548950][ T9002] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 131.779905][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 131.821339][ T9025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.008411][ T9039] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 132.171613][ T9025] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.180659][ T9025] gretap1: entered promiscuous mode [ 132.195624][ T9025] gretap1: entered allmulticast mode [ 132.382029][ T9039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.404015][ T9041] bond3: (slave veth3): Enslaving as an active interface with a down link [ 132.417101][ T9042] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 132.444583][ T9048] macsec3: entered promiscuous mode [ 132.559993][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 132.752452][ T9062] syzkaller0: entered promiscuous mode [ 132.772569][ T9062] syzkaller0: entered allmulticast mode [ 132.816300][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'. [ 133.035642][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042167][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.082006][ T9072] vxcan1 speed is unknown, defaulting to 1000 [ 133.303417][ T9075] dvmrp0: entered allmulticast mode [ 133.590088][ T9100] netlink: 512 bytes leftover after parsing attributes in process `syz.2.962'. [ 133.661039][ T9108] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 134.400034][ T9139] FAULT_INJECTION: forcing a failure. [ 134.400034][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 134.421204][ T9139] CPU: 1 UID: 0 PID: 9139 Comm: syz.3.973 Not tainted syzkaller #0 PREEMPT(full) [ 134.421232][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.421245][ T9139] Call Trace: [ 134.421253][ T9139] [ 134.421261][ T9139] dump_stack_lvl+0xe8/0x150 [ 134.421289][ T9139] should_fail_ex+0x40c/0x560 [ 134.421313][ T9139] should_failslab+0xa8/0x100 [ 134.421345][ T9139] __kmalloc_cache_noprof+0x88/0x660 [ 134.421372][ T9139] ? tcf_action_init_1+0x1c2/0x740 [ 134.421399][ T9139] tcf_action_init_1+0x1c2/0x740 [ 134.421423][ T9139] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 134.421449][ T9139] ? __pfx_tcf_action_init_1+0x10/0x10 [ 134.421479][ T9139] ? radix_tree_delete_item+0x2e9/0x400 [ 134.421511][ T9139] tcf_action_init+0x30e/0xb10 [ 134.421538][ T9139] ? __pfx_tcf_action_init+0x10/0x10 [ 134.421575][ T9139] ? __pfx___nla_validate_parse+0x10/0x10 [ 134.421601][ T9139] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 134.421656][ T9139] tc_ctl_action+0x485/0xc70 [ 134.421686][ T9139] ? __pfx_tc_ctl_action+0x10/0x10 [ 134.421713][ T9139] ? rcu_is_watching+0x15/0xb0 [ 134.421754][ T9139] ? __pfx_tc_ctl_action+0x10/0x10 [ 134.421778][ T9139] rtnetlink_rcv_msg+0x7b9/0xc00 [ 134.421805][ T9139] ? kasan_save_track+0x3e/0x80 [ 134.421832][ T9139] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 134.421859][ T9139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.421887][ T9139] ? __netlink_lookup+0xc6/0x8b0 [ 134.421906][ T9139] ? rcu_is_watching+0x15/0xb0 [ 134.421930][ T9139] netlink_rcv_skb+0x226/0x4a0 [ 134.421961][ T9139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.421988][ T9139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.422022][ T9139] ? net_generic+0x1e/0x240 [ 134.422045][ T9139] ? net_generic+0x1e/0x240 [ 134.422070][ T9139] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.422102][ T9139] netlink_unicast+0x7bb/0x940 [ 134.422133][ T9139] netlink_sendmsg+0x813/0xb40 [ 134.422157][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.422177][ T9139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.422197][ T9139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.422221][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.422239][ T9139] ____sys_sendmsg+0x9b9/0xa20 [ 134.422273][ T9139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.422304][ T9139] ? lock_release+0x4b/0x3c0 [ 134.422335][ T9139] ? import_iovec+0x73/0xa0 [ 134.422363][ T9139] ___sys_sendmsg+0x2a5/0x360 [ 134.422391][ T9139] ? rcu_is_watching+0x15/0xb0 [ 134.422409][ T9139] ? get_pid_task+0x20/0x1f0 [ 134.422428][ T9139] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.422458][ T9139] ? rcu_is_watching+0x15/0xb0 [ 134.422490][ T9139] ? __fget_files+0x2a/0x420 [ 134.422512][ T9139] ? __fget_files+0x3a2/0x420 [ 134.422539][ T9139] __x64_sys_sendmsg+0x1b1/0x290 [ 134.422569][ T9139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.422605][ T9139] ? rcu_is_watching+0x15/0xb0 [ 134.422625][ T9139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.422656][ T9139] do_syscall_64+0x174/0x580 [ 134.422683][ T9139] ? clear_bhb_loop+0x40/0x90 [ 134.422705][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.422724][ T9139] RIP: 0033:0x7f43e379ce59 [ 134.422742][ T9139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.422758][ T9139] RSP: 002b:00007f43e4655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.422780][ T9139] RAX: ffffffffffffffda RBX: 00007f43e3a15fa0 RCX: 00007f43e379ce59 [ 134.422794][ T9139] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 000000000000000b [ 134.422806][ T9139] RBP: 00007f43e4655090 R08: 0000000000000000 R09: 0000000000000000 [ 134.422819][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.422830][ T9139] R13: 00007f43e3a16038 R14: 00007f43e3a15fa0 R15: 00007ffd1151b1e8 [ 134.422853][ T9139] [ 134.583340][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'. [ 134.934574][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 134.943584][ T9158] netlink: 'syz.3.980': attribute type 7 has an invalid length. [ 134.951335][ T9158] netlink: 'syz.3.980': attribute type 8 has an invalid length. [ 134.976677][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 135.047136][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 135.061458][ T14] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.061510][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 135.072234][ T14] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.072277][ T14] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.072311][ T14] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.333140][ T9180] syzkaller0: entered promiscuous mode [ 135.349393][ T9180] syzkaller0: entered allmulticast mode [ 136.437383][ T9254] syzkaller0: entered promiscuous mode [ 136.452222][ T9254] syzkaller0: entered allmulticast mode [ 136.630386][ T9265] __nla_validate_parse: 6 callbacks suppressed [ 136.630408][ T9265] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1012'. [ 136.836922][ T9274] netlink: 'syz.0.1011': attribute type 16 has an invalid length. [ 136.870065][ T9274] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 136.876777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.877860][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1011'. [ 136.928023][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 136.938011][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 136.964569][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1013'. [ 137.392708][ T9307] syzkaller1: entered promiscuous mode [ 137.424698][ T9307] syzkaller1: entered allmulticast mode [ 137.462318][ T9307] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 137.627257][ T9340] x_tables: duplicate underflow at hook 2 [ 137.938373][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1032'. [ 137.965377][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 137.983890][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 138.057606][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 138.144351][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 138.292179][ T9365] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 138.305801][ T9365] bond4 (unregistering): Released all slaves [ 138.418448][ T9377] syzkaller0: entered promiscuous mode [ 138.426531][ T9377] syzkaller0: entered allmulticast mode [ 138.655874][ T9398] netlink: 'syz.1.1044': attribute type 13 has an invalid length. [ 138.721883][ T9399] team1: entered promiscuous mode [ 138.729977][ T9399] team1: entered allmulticast mode [ 138.746997][ T9403] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 138.855882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.993246][ T7255] vxcan1 speed is unknown, defaulting to 1000 [ 139.008933][ T9425] syzkaller0: entered promiscuous mode [ 139.024798][ T9425] syzkaller0: entered allmulticast mode [ 139.698070][ T9462] openvswitch: netlink: Flow key attr not present in new flow. [ 139.708472][ T9464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.755204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.773954][ T9467] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.181173][ T9498] syzkaller1: entered promiscuous mode [ 140.193955][ T9498] syzkaller1: entered allmulticast mode [ 140.342324][ T9513] veth0_to_bond: entered allmulticast mode [ 141.003973][ T9570] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 141.011964][ T9570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.469977][ T9589] block nbd0: not configured, cannot reconfigure [ 141.920567][ T9624] __nla_validate_parse: 5 callbacks suppressed [ 141.920587][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 141.942569][ T9625] ip6t_srh: unknown srh match flags 5F28 [ 142.093350][ T9634] ip6t_rpfilter: unknown options [ 142.115332][ T9634] ip6t_rpfilter: unknown options [ 142.135905][ T9634] ip6t_rpfilter: unknown options [ 142.148671][ T9634] ip6t_rpfilter: unknown options [ 142.154963][ T9634] ip6t_rpfilter: unknown options [ 142.160222][ T9634] ip6t_rpfilter: unknown options [ 142.186552][ T9634] ip6t_rpfilter: unknown options [ 142.249609][ T9634] ip6t_rpfilter: unknown options [ 142.295178][ T9634] ip6t_rpfilter: unknown options [ 142.321676][ T9634] ip6t_rpfilter: unknown options [ 142.362139][ T9653] sctp: [Deprecated]: syz.4.1100 (pid 9653) Use of int in max_burst socket option deprecated. [ 142.362139][ T9653] Use struct sctp_assoc_value instead [ 142.422841][ T9659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1101'. [ 142.462548][ T9659] x_tables: duplicate underflow at hook 2 [ 142.907515][ T9685] tipc: Enabled bearer , priority 0 [ 142.933321][ T9685] syzkaller0: entered promiscuous mode [ 142.940840][ T9685] syzkaller0: entered allmulticast mode [ 142.951048][ T9690] syz_tun: entered allmulticast mode [ 142.959018][ T9685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 142.978942][ T9685] netlink: 'syz.1.1108': attribute type 12 has an invalid length. [ 143.016355][ T9683] tipc: Resetting bearer [ 143.084833][ T9683] tipc: Disabling bearer [ 143.107311][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 143.169249][ T9707] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1114'. [ 143.180531][ T7236] bridge0: entered promiscuous mode [ 143.350357][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 143.393712][ T9722] ipt_REJECT: TCP_RESET invalid for non-tcp [ 143.616501][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 143.655586][ T9737] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1123'. [ 143.762396][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 143.864858][ T9754] Cannot find add_set index 3 as target [ 143.877352][ T9755] Cannot find del_set index 4 as target [ 143.906790][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1125'. [ 144.077154][ T9766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1130'. [ 144.091165][ T9767] tipc: Failed to obtain node identity [ 144.098290][ T9767] tipc: Enabling of bearer rejected, failed to enable media [ 144.262787][ T9772] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 144.339988][ T9779] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 144.419838][ T9779] bond5: entered promiscuous mode [ 144.427513][ T9779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.469435][ T9782] bond5: (slave bridge2): making interface the new active one [ 144.477654][ T9782] bridge2: entered promiscuous mode [ 144.485179][ T9782] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 144.526604][ T9790] sctp: [Deprecated]: syz.2.1140 (pid 9790) Use of int in max_burst socket option. [ 144.526604][ T9790] Use struct sctp_assoc_value instead [ 144.545043][ T9791] sctp: [Deprecated]: syz.2.1140 (pid 9791) Use of int in max_burst socket option. [ 144.545043][ T9791] Use struct sctp_assoc_value instead [ 144.601853][ T9794] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 144.631493][ T9801] batadv_slave_0: entered promiscuous mode [ 144.788387][ T9811] team_slave_1: entered promiscuous mode [ 144.802321][ T9815] netlink: 'syz.1.1146': attribute type 21 has an invalid length. [ 144.824056][ T9811] team0: Port device team_slave_1 removed [ 144.830567][ T9798] batadv_slave_0: left promiscuous mode [ 144.839383][ T9816] netlink: 'syz.1.1146': attribute type 21 has an invalid length. [ 144.985805][ T9829] bond0: (slave bond_slave_0): Releasing backup interface [ 145.703373][ T9864] macvtap1: entered promiscuous mode [ 145.715661][ T9868] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 145.747577][ T9864] team0: Device macvtap1 failed to register rx_handler [ 145.764684][ T9870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 145.982068][ T9878] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 146.102503][ T9888] lo: Caught tx_queue_len zero misconfig [ 146.111903][ T9888] sctp: [Deprecated]: syz.1.1170 (pid 9888) Use of int in maxseg socket option. [ 146.111903][ T9888] Use struct sctp_assoc_value instead [ 146.280902][ T9901] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 146.500605][ T9922] syzkaller1: entered promiscuous mode [ 146.510469][ T9922] syzkaller1: entered allmulticast mode [ 146.541398][ T9925] team0: Device ipvlan2 failed to register rx_handler [ 146.627960][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.635807][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.672971][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.680253][ T9929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.687785][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.694981][ T9929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.707731][ T9929] bridge0: entered promiscuous mode [ 146.713041][ T9929] bridge0: entered allmulticast mode [ 146.730759][ T9937] nft_compat: unsupported protocol 0 [ 146.932505][ T9948] __nla_validate_parse: 82 callbacks suppressed [ 146.932527][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 147.033226][ T9952] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1190'. [ 147.090174][ T9956] netlink: 'syz.2.1192': attribute type 1 has an invalid length. [ 147.100267][ T9956] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1192'. [ 147.343521][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 147.437809][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1199'. [ 147.460125][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 147.471945][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1199'. [ 147.492494][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 147.519115][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1199'. [ 147.569877][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1200'. [ 147.689664][ T9988] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 147.878706][T10014] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.380008][T10052] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 148.457307][T10052] bond4: entered promiscuous mode [ 148.479956][T10052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.633345][T10063] bond4: (slave bridge3): making interface the new active one [ 148.661775][T10063] bridge3: entered promiscuous mode [ 148.683566][T10063] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 148.921495][T10084] syzkaller0: entered promiscuous mode [ 148.934098][T10084] syzkaller0: entered allmulticast mode [ 149.439580][T10119] geneve2: entered allmulticast mode [ 149.561375][T10128] bridge4: entered allmulticast mode [ 149.574629][T10127] bridge5: entered allmulticast mode [ 150.301914][ T7232] IPVS: starting estimator thread 0... [ 150.404829][T10171] IPVS: using max 38 ests per chain, 91200 per kthread [ 150.610812][T10190] 0: reclassify loop, rule prio 0, protocol 700 [ 150.625759][T10191] 0: reclassify loop, rule prio 0, protocol 700 [ 150.698153][T10197] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 150.755545][T10197] bond1: entered promiscuous mode [ 150.763012][T10197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.771870][T10187] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 150.903062][T10212] syzkaller0: left promiscuous mode [ 150.908852][T10212] syzkaller0: left allmulticast mode [ 151.062996][T10216] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 151.100386][T10216] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 151.117620][T10216] syzkaller1: group set to 0 [ 151.613453][T10253] sit0: entered promiscuous mode [ 151.970866][T10280] netlink: 'syz.2.1287': attribute type 8 has an invalid length. [ 152.428072][T10307] xt_hashlimit: size too large, truncated to 1048576 [ 152.509978][T10317] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 152.552545][T10321] C: renamed from lo [ 152.587340][T10321] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 152.704887][T10330] __nla_validate_parse: 20 callbacks suppressed [ 152.704909][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1298'. [ 152.936752][T10339] macvlan2: entered promiscuous mode [ 152.958360][T10339] macvlan2: entered allmulticast mode [ 152.983651][T10351] netlink: 'syz.4.1303': attribute type 31 has an invalid length. [ 153.051270][T10355] netlink: 'syz.2.1304': attribute type 23 has an invalid length. [ 153.051905][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1305'. [ 153.310478][T10370] xt_hashlimit: max too large, truncated to 1048576 [ 153.332240][T10375] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 153.353061][T10375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.482667][T10389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.540896][T10392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1316'. [ 153.693137][T10407] netlink: 'syz.0.1317': attribute type 14 has an invalid length. [ 153.723946][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 153.734816][T10407] netlink: 'syz.0.1317': attribute type 14 has an invalid length. [ 153.743217][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 153.782763][T10407] openvswitch: netlink: IP tunnel dst address not specified [ 153.913354][T10424] syzkaller0: entered promiscuous mode [ 153.919612][T10424] syzkaller0: entered allmulticast mode [ 156.564369][T10397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.809284][T10442] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 157.271830][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 157.301409][T10469] netlink: 'syz.2.1338': attribute type 1 has an invalid length. [ 157.317662][T10469] netlink: 'syz.2.1338': attribute type 1 has an invalid length. [ 157.332930][T10469] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 157.345950][T10469] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1338'. [ 157.465341][T10450] vxcan1 speed is unknown, defaulting to 1000 [ 157.640606][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1344'. [ 157.776505][T10491] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 157.785355][T10491] bond5: option packets_per_slave: allowed values 0 - 65535 [ 157.794498][T10491] bond5 (unregistering): Released all slaves [ 157.855836][T10497] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 157.866508][T10497] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1346'. [ 157.973315][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 157.987842][T10508] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1349'. [ 158.093024][T10514] 0: reclassify loop, rule prio 0, protocol 700 [ 158.227969][T10516] tipc: Enabled bearer , priority 0 [ 158.239535][T10516] syzkaller0: MTU too low for tipc bearer [ 158.248162][T10516] tipc: Disabling bearer [ 158.265134][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 158.443757][T10522] syzkaller0: entered promiscuous mode [ 158.466509][T10522] syzkaller0: entered allmulticast mode [ 158.936964][T10571] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.950639][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 159.120343][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 159.189403][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 159.294629][T10587] ipt_ECN: cannot use operation on non-tcp rule [ 159.423027][T10597] nbd: must specify a size in bytes for the device [ 159.535867][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 159.552948][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1377'. [ 159.569161][T10611] tipc: Can't bind to reserved service type 2 [ 159.793456][T10636] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1384'. [ 160.068392][T10653] netlink: 'syz.4.1390': attribute type 39 has an invalid length. [ 160.477070][T10685] syzkaller1: entered promiscuous mode [ 160.483048][T10685] syzkaller1: entered allmulticast mode [ 160.631903][T10699] syzkaller0: entered promiscuous mode [ 160.642944][T10699] syzkaller0: entered allmulticast mode [ 161.034551][T10732] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.847699][T10773] gre1: entered promiscuous mode [ 161.854063][T10773] gre1: entered allmulticast mode [ 162.327621][T10805] netlink: 'syz.0.1429': attribute type 3 has an invalid length. [ 162.365063][T10805] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 163.024729][T10850] __nla_validate_parse: 7 callbacks suppressed [ 163.024760][T10850] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1441'. [ 163.097450][T10850] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1441'. [ 163.319075][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 163.698213][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 163.707364][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 163.987317][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'. [ 164.039456][T10927] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1461'. [ 164.169296][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'. [ 164.242279][T10933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1464'. [ 164.252910][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1464'. [ 164.399509][T10940] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 164.784263][T10964] veth5: entered promiscuous mode [ 164.789397][T10964] veth5: entered allmulticast mode [ 165.061975][T10994] openvswitch: netlink: Tunnel attr 111 out of range max 16 [ 165.162280][T11003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.176273][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 165.312190][T11014] syzkaller0: entered promiscuous mode [ 165.325899][T11014] syzkaller0: entered allmulticast mode [ 165.426462][T11016] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 165.527267][T11029] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 165.766223][T11037] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 165.790156][T11037] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.806082][T11037] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 166.186841][T11061] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 166.196817][T11061] rpfilter_check: 23 callbacks suppressed [ 166.196838][T11061] ip6t_rpfilter: unknown options [ 166.306070][T11064] netlink: 'syz.2.1505': attribute type 39 has an invalid length. [ 167.086996][T11108] syzkaller1: entered promiscuous mode [ 167.104308][T11108] syzkaller1: entered allmulticast mode [ 167.143754][T11116] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.178596][T11116] geneve2: entered promiscuous mode [ 167.190254][T11116] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.381921][ T7237] IPVS: starting estimator thread 0... [ 167.411129][T11134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 167.495177][T11132] IPVS: using max 40 ests per chain, 96000 per kthread [ 167.634908][T11146] syzkaller1: entered promiscuous mode [ 167.643423][T11146] syzkaller1: entered allmulticast mode [ 167.650999][T11149] IPv6: addrconf: prefix option has invalid lifetime [ 167.909710][T11158] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.917279][T11158] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.988416][T11158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.002265][T11158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.060254][T11158] bridge0: left allmulticast mode [ 168.126131][ T7246] vxcan1 speed is unknown, defaulting to 1000 [ 168.134509][ T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.143571][ T7246] syz2: Port: 1 Link DOWN [ 168.158006][ T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.183125][ T7253] vxcan1 speed is unknown, defaulting to 1000 [ 168.183125][ T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.183162][ T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.207851][T11176] __nla_validate_parse: 11 callbacks suppressed [ 168.207871][T11176] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1542'. [ 168.355342][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 168.486401][T11190] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1548'. [ 168.693597][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 168.705503][T11199] "syz.0.1550" (11199) uses obsolete ecb(arc4) skcipher [ 168.749226][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 169.135690][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 169.277848][T11235] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.312774][T11235] bond8 (unregistering): Released all slaves [ 169.441075][T11233] vxcan1 speed is unknown, defaulting to 1000 [ 169.517905][T11253] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1563'. [ 169.722653][T11263] netlink: 'syz.4.1566': attribute type 28 has an invalid length. [ 169.731437][T11263] netlink: 'syz.4.1566': attribute type 3 has an invalid length. [ 169.743925][T11263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1566'. [ 170.052418][T11275] macsec1: entered promiscuous mode [ 170.149842][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 170.169551][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 170.248857][T11283] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 170.265108][T11283] bond6 (unregistering): Released all slaves [ 170.550754][T11295] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 170.775337][T11311] ip6t_rpfilter: unknown options [ 170.855770][T11321] bridge_slave_1: left allmulticast mode [ 170.870574][T11321] bridge_slave_1: left promiscuous mode [ 170.881817][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.900031][T11321] bridge_slave_0: left allmulticast mode [ 170.926840][T11321] bridge_slave_0: left promiscuous mode [ 170.937516][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.047063][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.112215][T11338] block nbd4: not configured, cannot reconfigure [ 171.700775][T11371] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 171.708951][T11369] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 171.708974][T11369] netlink: 'syz.0.1599': attribute type 2 has an invalid length. [ 171.881656][T11383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 172.313319][T11427] netlink: 'syz.2.1612': attribute type 14 has an invalid length. [ 172.323059][T11427] netlink: 'syz.2.1612': attribute type 13 has an invalid length. [ 172.432467][T11434] netlink: 'syz.2.1614': attribute type 1 has an invalid length. [ 172.471223][T11434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.827508][T11458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 174.843553][T11458] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.854067][T11458] gretap1: entered promiscuous mode [ 174.859349][T11458] gretap1: entered allmulticast mode [ 174.986376][T11388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.108131][T11468] __nla_validate_parse: 11 callbacks suppressed [ 175.108154][T11468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1624'. [ 175.163676][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 175.202578][T11475] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 175.235236][T11468] bond4 (unregistering): Released all slaves [ 175.289475][T11470] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 175.311898][T11488] bond6: entered promiscuous mode [ 175.327581][T11488] bond6: entered allmulticast mode [ 175.391909][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 175.465208][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 175.487889][T11503] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 175.499778][T11501] netlink: 'syz.3.1633': attribute type 83 has an invalid length. [ 175.551212][T11503] 8021q: adding VLAN 0 to HW filter on device bond8 [ 175.590167][T11503] veth0_to_bond: left allmulticast mode [ 175.628262][T11510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 175.685605][T11512] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 175.693505][T11512] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1639'. [ 175.769063][T11521] bridge8: entered promiscuous mode [ 175.784596][T11521] bridge8: entered allmulticast mode [ 175.879927][T11529] netlink: 'syz.4.1643': attribute type 1 has an invalid length. [ 176.046082][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1647'. [ 176.230080][T11551] gtp0: entered promiscuous mode [ 176.249508][T11551] gtp0: entered allmulticast mode [ 176.370370][T11557] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1652'. [ 176.387651][T11557] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 176.461066][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 176.588173][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'. [ 176.685380][T11575] xfrm1: entered promiscuous mode [ 176.714543][T11575] xfrm1: entered allmulticast mode [ 176.743718][T11582] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 177.013284][T11603] bridge0: Device is already in use. [ 177.041332][T11605] bridge0: Device is already in use. [ 177.128644][T11607] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1662'. [ 177.247252][T11615] syzkaller0: entered promiscuous mode [ 177.271808][T11615] syzkaller0: entered allmulticast mode [ 177.303656][T11615] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 177.331137][T11615] nbd: error processing sock list [ 177.338265][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.604265][T11636] bridge0: entered promiscuous mode [ 177.609515][T11636] bridge0: entered allmulticast mode [ 177.616554][T11636] team0: Port device bridge0 added [ 177.912345][T11653] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 177.961117][T11660] netlink: 'syz.2.1678': attribute type 7 has an invalid length. [ 177.984473][T11660] netlink: 'syz.2.1678': attribute type 8 has an invalid length. [ 178.421471][T11697] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 178.525152][T11697] bond3: (slave gretap2): making interface the new active one [ 178.549311][T11697] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 178.847661][T11723] netlink: 'syz.0.1700': attribute type 3 has an invalid length. [ 178.856294][T11723] netlink: 'syz.0.1700': attribute type 1 has an invalid length. [ 179.180121][T11746] bridge4: entered promiscuous mode [ 179.188546][T11746] bridge4: entered allmulticast mode [ 179.281074][T11747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.456875][T11774] sock: sock_set_timeout: `syz.2.1711' (pid 11774) tries to set negative timeout [ 179.493188][T11776] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 179.505307][T11775] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 179.573201][T11781] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 179.605745][T11776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.627767][T11781] tipc: Started in network mode [ 179.653355][T11781] tipc: Node identity ac14142f, cluster identity 4711 [ 179.691341][T11781] tipc: New replicast peer: 0.0.0.0 [ 179.699837][T11781] tipc: Enabled bearer , priority 10 [ 179.749882][T11793] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 179.827713][T11793] bond7: (slave veth3): Enslaving as an active interface with a down link [ 179.838625][T11796] tunl0: entered promiscuous mode [ 180.133473][T11816] __nla_validate_parse: 19 callbacks suppressed [ 180.133493][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 180.222604][T11793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 180.269807][T11826] ip6tnl1: entered allmulticast mode [ 180.310914][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 180.459456][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 180.477092][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 180.497359][T11835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.689141][T11848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1733'. [ 180.699933][T11172] tipc: Node number set to 2886997039 [ 180.717652][T11848] veth0_to_bond: entered allmulticast mode [ 180.843937][T11858] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1736'. [ 181.150277][T11876] vxcan1 speed is unknown, defaulting to 1000 [ 181.328020][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'. [ 181.367954][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'. [ 183.876412][T11863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.887432][T11873] nbd: must specify a size in bytes for the device [ 184.027815][T11909] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1749'. [ 184.086914][T11907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1751'. [ 184.137003][T11907] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 184.384833][T11935] validate_nla: 5 callbacks suppressed [ 184.384855][T11935] netlink: 'syz.0.1758': attribute type 6 has an invalid length. [ 184.421406][T11934] team0 (unregistering): Port device team_slave_0 removed [ 184.583168][T11912] vxcan1 speed is unknown, defaulting to 1000 [ 184.717366][ T50] block nbd0: Receive control failed (result -32) [ 185.400934][T11985] __nla_validate_parse: 4 callbacks suppressed [ 185.400968][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 185.431512][T11985] netlink: 'syz.0.1773': attribute type 30 has an invalid length. [ 185.440059][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 185.543415][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.551305][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.565110][T11986] bridge0: left promiscuous mode [ 185.570196][T11986] bridge0: left allmulticast mode [ 185.655710][T11986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.711156][T11986] veth1_macvtap: left allmulticast mode [ 185.721720][T11986] macsec0: left allmulticast mode [ 185.738845][T11986] gtp1: left allmulticast mode [ 185.746075][T11986] veth3: left allmulticast mode [ 185.756033][T11986] ip6gre3: left allmulticast mode [ 185.762334][T11986] bond5: left promiscuous mode [ 185.767132][T11986] bridge2: left promiscuous mode [ 185.781176][T11986] geneve2: left allmulticast mode [ 185.790634][T11991] ip6tnl0: Caught tx_queue_len zero misconfig [ 185.831079][T11409] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.842748][T11409] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.851790][T11409] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.861747][T11409] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.904497][T11409] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.913446][T11409] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.922357][T11409] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.936007][T11409] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.968538][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 186.242511][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 186.320374][T12030] netlink: 'syz.0.1783': attribute type 10 has an invalid length. [ 186.382174][T12030] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.418288][T12030] bond0: (slave team0): Enslaving as an active interface with an up link [ 186.482971][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 186.697902][T12054] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.1793'. [ 186.712116][T12051] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 186.735790][T12051] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:65535 [ 189.752925][T12057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.981258][T12104] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 190.045278][T12106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1805'. [ 190.089695][T12104] macvtap1: entered allmulticast mode [ 190.148555][T12113] macvtap2: entered allmulticast mode [ 190.207639][T12104] bond6: (slave bridge6): making interface the new active one [ 190.228121][T12104] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 190.642437][T12156] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1816'. [ 190.707831][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 190.809472][T12169] x_tables: duplicate underflow at hook 1 [ 190.830332][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 190.849650][T12170] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 190.864905][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 191.075824][T12196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1828'. [ 191.084970][T12196] unsupported nla_type 7424 [ 191.235198][T12211] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 191.276152][T12211] netlink: 'syz.2.1833': attribute type 11 has an invalid length. [ 191.294766][T12211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1833'. [ 191.366697][T12214] netlink: 'syz.3.1834': attribute type 33 has an invalid length. [ 191.400994][T12214] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 191.413017][T12214] bond7 (unregistering): Released all slaves [ 191.434150][T12090] Bluetooth: hci4: command 0x0406 tx timeout [ 191.462108][ T5621] Bluetooth: hci0: command 0x0401 tx timeout [ 191.468315][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 191.477909][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 191.496903][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 191.646202][T12237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1843'. [ 191.849960][T12248] macvtap0: entered allmulticast mode [ 191.855430][T12248] veth0_macvtap: entered allmulticast mode [ 192.060292][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 192.122678][T12272] IPVS: Error connecting to the multicast addr [ 192.246037][T12223] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 192.246041][T12280] netlink: 'syz.4.1855': attribute type 2 has an invalid length. [ 192.272591][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1855'. [ 192.490930][T12289] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 192.516231][T12291] bond4: invalid ARP target 0.0.0.0 specified for addition [ 192.524576][T12291] bond4: option arp_ip_target: invalid value (0) [ 192.532217][T12291] bond4 (unregistering): Released all slaves [ 192.645554][T12289] bond9: entered promiscuous mode [ 192.651204][T12289] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.689688][T12304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.705230][T12305] netlink: 'syz.4.1863': attribute type 8 has an invalid length. [ 192.717166][T12304] bond9: (slave vti1): The slave device specified does not support setting the MAC address [ 192.727443][T12304] bond9: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 192.758913][T12304] bond9: (slave vti1): making interface the new active one [ 192.767040][T12304] vti1: entered promiscuous mode [ 192.776884][T12304] vti1: left promiscuous mode [ 192.823598][T12303] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 193.841534][T12328] gtp3: entered promiscuous mode [ 193.862222][T12328] gtp3: entered allmulticast mode [ 193.869273][T12329] ipt_ECN: cannot use operation on non-tcp rule [ 193.965311][T12338] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 194.033917][T12344] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 194.122693][T12344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.171754][T12344] vlan3: entered promiscuous mode [ 194.191067][T12344] bond4: entered promiscuous mode [ 194.201457][T12344] vlan3: entered allmulticast mode [ 194.207369][T12344] bond4: entered allmulticast mode [ 194.283908][T12364] openvswitch: netlink: IP tunnel dst address not specified [ 194.932502][T12400] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 195.498937][T12421] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 195.594424][T12426] xt_TCPMSS: Only works on TCP SYN packets [ 195.801576][T12442] 8021q: VLANs not supported on lo [ 195.931361][T12450] Can't find ip_set type [ 196.737208][T12499] __nla_validate_parse: 10 callbacks suppressed [ 196.737243][T12499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1909'. [ 196.797624][T12495] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 196.823700][T12493] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 197.126048][T12514] netlink: 'syz.0.1913': attribute type 9 has an invalid length. [ 197.340710][T12518] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1914'. [ 197.589722][T12538] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1919'. [ 197.947384][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 197.978469][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 198.192036][T12572] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 198.273021][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1926'. [ 198.338927][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 198.726829][T12603] IPv6: sit1: Disabled Multicast RS [ 198.747210][T12603] sit1: entered allmulticast mode [ 199.036843][T12614] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 199.124633][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1938'. [ 199.232895][T12621] veth1_to_bond: entered allmulticast mode [ 199.263716][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 199.286431][T12625] sctp: [Deprecated]: syz.0.1940 (pid 12625) Use of int in maxseg socket option. [ 199.286431][T12625] Use struct sctp_assoc_value instead [ 199.324125][T12621] veth1_to_bond: entered promiscuous mode [ 199.347376][T12623] veth1_to_bond (unregistering): left allmulticast mode [ 199.365673][T12623] veth1_to_bond (unregistering): left promiscuous mode [ 199.394016][T12623] bond0: (slave bond_slave_1): Releasing backup interface [ 199.501757][T12627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 199.538748][T12627] bridge0: port 3(bond7) entered blocking state [ 199.562430][T12627] bridge0: port 3(bond7) entered disabled state [ 199.584416][T12627] bond7: entered allmulticast mode [ 199.601096][T12627] bond7: entered promiscuous mode [ 199.616873][T12625] syzkaller0: entered promiscuous mode [ 199.633845][T12625] syzkaller0: entered allmulticast mode [ 199.705013][T12634] team_slave_1: left promiscuous mode [ 199.750530][T12634] gtp0: left promiscuous mode [ 199.764024][T12634] gtp0: left allmulticast mode [ 199.775213][T12634] bond2: left promiscuous mode [ 199.790709][T12634] bond3: left promiscuous mode [ 199.800380][T12634] ip6gre1: left promiscuous mode [ 199.834922][T12634] gretap1: left promiscuous mode [ 199.850607][T12634] gretap1: left allmulticast mode [ 199.878439][T12634] bond6: left promiscuous mode [ 199.883643][T12634] bond6: left allmulticast mode [ 200.037879][T12646] IPVS: set_ctl: invalid protocol: 51 172.20.20.31:20000 [ 200.057653][T12646] netlink: 'syz.2.1945': attribute type 11 has an invalid length. [ 200.206817][T12658] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.227461][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 200.433014][T12667] ip6gre2: entered allmulticast mode [ 201.038403][T12702] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 201.087269][T12706] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 201.099541][T12702] team1: entered promiscuous mode [ 201.116247][T12702] team1: entered allmulticast mode [ 201.206798][T12709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.603712][T12724] syzkaller0: entered promiscuous mode [ 201.625416][T12724] syzkaller0: entered allmulticast mode [ 201.704774][T12728] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 201.726223][T12728] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 201.747658][T12728] __nla_validate_parse: 6 callbacks suppressed [ 201.747683][T12728] netlink: 634 bytes leftover after parsing attributes in process `syz.0.1973'. [ 201.779249][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 201.879133][T12697] vxcan1 speed is unknown, defaulting to 1000 [ 202.052545][T12743] netlink: 'syz.0.1978': attribute type 3 has an invalid length. [ 202.380717][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 202.711744][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 202.729273][T12780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1988'. [ 202.761624][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1989'. [ 202.799937][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 202.861724][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1989'. [ 202.923225][T12793] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 203.061733][T12801] bond10: option lp_interval: invalid value (0) [ 203.072333][T12801] bond10: option lp_interval: allowed values 1 - 2147483647 [ 203.126804][T12807] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1997'. [ 203.214702][T12801] bond10 (unregistering): Released all slaves [ 203.284047][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 203.650730][T12828] IPVS: length: 239 != 24 [ 203.760852][T12832] tipc: Enabled bearer , priority 0 [ 203.842279][T12832] syzkaller0: entered promiscuous mode [ 203.848755][T12832] syzkaller0: entered allmulticast mode [ 203.857499][T12832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 203.876968][T12832] tipc: Resetting bearer [ 203.885039][T12831] tipc: Resetting bearer [ 203.899772][T12831] tipc: Disabling bearer [ 203.919381][T12844] x_tables: duplicate underflow at hook 1 [ 204.193641][T12865] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 204.227389][T12867] netlink: 'syz.4.2016': attribute type 12 has an invalid length. [ 204.262404][T12867] netlink: 'syz.4.2016': attribute type 29 has an invalid length. [ 204.299843][T12870] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 204.324727][T12870] bond5: entered promiscuous mode [ 204.330446][T12870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.351729][T12870] bond5: (slave bridge11): making interface the new active one [ 204.359622][T12870] bridge11: entered promiscuous mode [ 204.366262][T12870] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 204.442643][T12877] veth0: Caught tx_queue_len zero misconfig [ 204.466041][T12848] vxcan1 speed is unknown, defaulting to 1000 [ 205.022642][T12908] netlink: 'syz.0.2029': attribute type 3 has an invalid length. [ 205.147139][T12913] sch_fq: defrate 9 ignored. [ 205.349091][T12927] IPVS: length: 151 != 8 [ 205.368698][T12933] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 205.658589][T12952] xt_hashlimit: invalid interval [ 205.694959][T12940] netlink: 'syz.1.2040': attribute type 11 has an invalid length. [ 205.706599][T12940] netlink: 'syz.1.2040': attribute type 11 has an invalid length. [ 206.002928][T12958] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 206.053397][T12958] bond5 (unregistering): Released all slaves [ 206.095950][T12971] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 206.596316][T13006] hsr0: entered promiscuous mode [ 206.758632][T13012] __nla_validate_parse: 83 callbacks suppressed [ 206.758654][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2062'. [ 206.844561][T13020] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 206.868110][T13020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.882550][T13020] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 206.902565][T13020] macvlan2: entered promiscuous mode [ 206.908377][T13020] macvlan2: entered allmulticast mode [ 206.915026][T13020] bond6: entered promiscuous mode [ 206.920241][T13020] veth0_to_bond: entered promiscuous mode [ 206.927348][T13020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.935915][T13020] bond6: left promiscuous mode [ 206.945509][T13020] veth0_to_bond: left promiscuous mode [ 207.168177][T13036] netlink: 'syz.3.2065': attribute type 12 has an invalid length. [ 207.180445][T13036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2065'. [ 207.196557][T13034] syzkaller0: entered promiscuous mode [ 207.214726][T13034] syzkaller0: entered allmulticast mode [ 207.346623][T13039] syzkaller0: entered promiscuous mode [ 207.357011][T13039] syzkaller0: entered allmulticast mode [ 207.530076][T13056] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 207.552016][T13058] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 207.711606][T13061] syzkaller0: entered promiscuous mode [ 207.739089][T13061] syzkaller0: entered allmulticast mode [ 207.979972][T13085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2080'. [ 208.102791][T13084] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.242224][T13095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.335061][T13101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 208.538042][T13113] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 208.600804][T13118] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.636380][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 209.069153][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 209.107106][T13143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2097'. [ 209.122480][T13143] geneve3: entered promiscuous mode [ 209.134333][T13143] geneve3: entered allmulticast mode [ 209.151176][T13143] xt_policy: too many policy elements [ 209.540660][ T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.565835][ T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.636941][ T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.656411][ T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 209.669974][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 210.459036][T13203] xt_l2tp: unknown flags: 10 [ 210.795984][T13224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.083395][T13236] block nbd2: not configured, cannot reconfigure [ 211.137469][T13236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2124'. [ 212.095487][T13286] FAULT_INJECTION: forcing a failure. [ 212.095487][T13286] name failslab, interval 1, probability 0, space 0, times 0 [ 212.124048][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.0.2139 Not tainted syzkaller #0 PREEMPT(full) [ 212.124075][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.124087][T13286] Call Trace: [ 212.124095][T13286] [ 212.124103][T13286] dump_stack_lvl+0xe8/0x150 [ 212.124132][T13286] should_fail_ex+0x40c/0x560 [ 212.124156][T13286] should_failslab+0xa8/0x100 [ 212.124188][T13286] __kmalloc_noprof+0xe8/0x750 [ 212.124224][T13286] ? lock_release+0x4b/0x3c0 [ 212.124254][T13286] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 212.124284][T13286] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 212.124320][T13286] genl_family_rcv_msg_doit+0xda/0x340 [ 212.124356][T13286] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.124385][T13286] ? apparmor_capable+0x126/0x170 [ 212.124411][T13286] ? bpf_lsm_capable+0x9/0x20 [ 212.124429][T13286] ? security_capable+0x7e/0x2c0 [ 212.124463][T13286] genl_rcv_msg+0x614/0x7a0 [ 212.124505][T13286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.124527][T13286] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 212.124548][T13286] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 212.124568][T13286] ? __pfx_nl80211_post_doit+0x10/0x10 [ 212.124588][T13286] ? __netlink_lookup+0xc6/0x8b0 [ 212.124606][T13286] ? rcu_is_watching+0x15/0xb0 [ 212.124631][T13286] netlink_rcv_skb+0x226/0x4a0 [ 212.124661][T13286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.124685][T13286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.124723][T13286] ? down_read+0x2be/0x330 [ 212.124754][T13286] genl_rcv+0x28/0x40 [ 212.124775][T13286] netlink_unicast+0x7bb/0x940 [ 212.124814][T13286] netlink_sendmsg+0x813/0xb40 [ 212.124845][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.124865][T13286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.124885][T13286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.124909][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.124929][T13286] ____sys_sendmsg+0x9b9/0xa20 [ 212.124964][T13286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.124994][T13286] ? lock_release+0x4b/0x3c0 [ 212.125025][T13286] ? import_iovec+0x73/0xa0 [ 212.125061][T13286] ___sys_sendmsg+0x2a5/0x360 [ 212.125089][T13286] ? rcu_is_watching+0x15/0xb0 [ 212.125108][T13286] ? get_pid_task+0x20/0x1f0 [ 212.125128][T13286] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.125160][T13286] ? rcu_is_watching+0x15/0xb0 [ 212.125195][T13286] ? __fget_files+0x2a/0x420 [ 212.125217][T13286] ? __fget_files+0x3a2/0x420 [ 212.125245][T13286] __x64_sys_sendmsg+0x1b1/0x290 [ 212.125275][T13286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.125312][T13286] ? rcu_is_watching+0x15/0xb0 [ 212.125333][T13286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.125354][T13286] do_syscall_64+0x174/0x580 [ 212.125380][T13286] ? trace_irq_disable+0x3b/0x140 [ 212.125408][T13286] ? clear_bhb_loop+0x40/0x90 [ 212.125430][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.125450][T13286] RIP: 0033:0x7f117479ce59 [ 212.125469][T13286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.125487][T13286] RSP: 002b:00007f11729f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.125516][T13286] RAX: ffffffffffffffda RBX: 00007f1174a15fa0 RCX: 00007f117479ce59 [ 212.125532][T13286] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 212.125545][T13286] RBP: 00007f11729f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.125558][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.125571][T13286] R13: 00007f1174a16038 R14: 00007f1174a15fa0 R15: 00007fffbfa13848 [ 212.125594][T13286] [ 212.183497][T13290] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2140'. [ 212.624429][T13294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2142'. [ 212.763039][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 212.786721][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2144'. [ 212.921125][T13314] validate_nla: 2 callbacks suppressed [ 212.921146][T13314] netlink: 'syz.2.2146': attribute type 4 has an invalid length. [ 212.991740][T13319] syzkaller0: entered promiscuous mode [ 213.006120][T13319] syzkaller0: entered allmulticast mode [ 213.071891][T13325] bond0: Error: CAN devices cannot be enslaved [ 213.292492][T13340] FAULT_INJECTION: forcing a failure. [ 213.292492][T13340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.309877][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.3.2153 Not tainted syzkaller #0 PREEMPT(full) [ 213.309906][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.309919][T13340] Call Trace: [ 213.309927][T13340] [ 213.309935][T13340] dump_stack_lvl+0xe8/0x150 [ 213.309963][T13340] should_fail_ex+0x40c/0x560 [ 213.309986][T13340] _copy_to_user+0x31/0xb0 [ 213.310014][T13340] simple_read_from_buffer+0xe1/0x170 [ 213.310040][T13340] proc_fail_nth_read+0x1bb/0x230 [ 213.310069][T13340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.310096][T13340] ? rw_verify_area+0x24a/0x4c0 [ 213.310123][T13340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.310149][T13340] vfs_read+0x213/0xa80 [ 213.310177][T13340] ? __pfx___mutex_lock+0x10/0x10 [ 213.310205][T13340] ? __pfx_vfs_read+0x10/0x10 [ 213.310235][T13340] ? __fget_files+0x3a2/0x420 [ 213.310258][T13340] ? __fget_files+0x2a/0x420 [ 213.310284][T13340] ksys_read+0x150/0x270 [ 213.310311][T13340] ? __pfx_ksys_read+0x10/0x10 [ 213.310339][T13340] ? rcu_is_watching+0x15/0xb0 [ 213.310362][T13340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.310381][T13340] do_syscall_64+0x174/0x580 [ 213.310418][T13340] ? trace_irq_disable+0x3b/0x140 [ 213.310445][T13340] ? clear_bhb_loop+0x40/0x90 [ 213.310467][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.310486][T13340] RIP: 0033:0x7f43e375d68e [ 213.310503][T13340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.310519][T13340] RSP: 002b:00007f43e4654fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.310541][T13340] RAX: ffffffffffffffda RBX: 00007f43e46556c0 RCX: 00007f43e375d68e [ 213.310555][T13340] RDX: 000000000000000f RSI: 00007f43e46550a0 RDI: 0000000000000004 [ 213.310567][T13340] RBP: 00007f43e4655090 R08: 0000000000000000 R09: 0000000000000000 [ 213.310580][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.310591][T13340] R13: 00007f43e3a16038 R14: 00007f43e3a15fa0 R15: 00007ffd1151b1e8 [ 213.310615][T13340] [ 213.652681][T13347] netlink: 'syz.2.2156': attribute type 4 has an invalid length. [ 213.661894][T13350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2157'. [ 213.682253][T13350] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2157'. [ 213.694082][T13347] netlink: 'syz.2.2156': attribute type 4 has an invalid length. [ 213.743574][T13356] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2158'. [ 213.799161][T13357] team_slave_1: Caught tx_queue_len zero misconfig [ 213.803386][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 213.899374][T13367] SET target dimension over the limit! [ 213.925901][T13367] SET target dimension over the limit! [ 214.050516][T13378] sctp: [Deprecated]: syz.4.2167 (pid 13378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.050516][T13378] Use struct sctp_sack_info instead [ 214.438660][T13393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.473695][T13393] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 214.620208][T13399] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.633394][T13399] bond7: (slave bond8): making interface the new active one [ 214.660205][T13399] bond7: (slave bond8): Enslaving as an active interface with an up link [ 214.707002][T13393] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 214.799217][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 215.028364][T13425] netlink: 'syz.4.2181': attribute type 1 has an invalid length. [ 215.650610][T13459] team0: Device xfrm0 is of different type [ 215.703565][T13461] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2193'. [ 216.138660][T13490] netlink: 'syz.2.2200': attribute type 21 has an invalid length. [ 216.395190][T13502] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 216.415255][T13502] bond10 (unregistering): Released all slaves [ 216.432343][T13508] openvswitch: netlink: IP tunnel TTL not specified. [ 216.463656][T13508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.984361][T13540] netlink: 'syz.0.2219': attribute type 8 has an invalid length. [ 216.997308][T13540] veth1_to_team: entered promiscuous mode [ 217.012070][T13540] gretap0: entered promiscuous mode [ 217.027595][T13540] dummy0: entered promiscuous mode [ 217.045903][T13540] hsr1: entered promiscuous mode [ 217.116930][T13544] sctp: [Deprecated]: syz.1.2220 (pid 13544) Use of int in maxseg socket option. [ 217.116930][T13544] Use struct sctp_assoc_value instead [ 217.315285][T13550] __nla_validate_parse: 6 callbacks suppressed [ 217.315306][T13550] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2223'. [ 217.436588][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 217.470739][T13556] tunl0: Caught tx_queue_len zero misconfig [ 217.587383][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 217.703424][T13565] gre1: entered promiscuous mode [ 217.709163][T13565] gre1: entered allmulticast mode [ 217.807697][T13572] netlink: 'syz.2.2232': attribute type 21 has an invalid length. [ 217.815900][T13572] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2232'. [ 217.908885][T13580] netlink: 'syz.2.2233': attribute type 4 has an invalid length. [ 217.949096][T13580] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2233'. [ 217.966524][T13580] .`: renamed from bond0 [ 217.973246][T13584] ±ÿª¨úrBº“: renamed from lo [ 217.986260][T13584] syzkaller0: entered promiscuous mode [ 217.991914][T13584] syzkaller0: entered allmulticast mode [ 218.528242][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 218.542879][T13621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2242'. [ 218.566736][T13621] ipt_ECN: cannot use operation on non-tcp rule [ 218.919660][T13652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.030047][T13657] netlink: 'syz.0.2254': attribute type 20 has an invalid length. [ 219.038321][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 219.048287][T13657] netlink: 'syz.0.2254': attribute type 20 has an invalid length. [ 219.056152][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 219.107298][T13661] xt_CT: No such helper "snmp" [ 219.273239][T13677] team0: Device xfrm0 is of different type [ 219.849068][T13705] syz_tun: entered allmulticast mode [ 219.883316][T13705] pim6reg: entered allmulticast mode [ 219.897373][T13709] xt_hashlimit: overflow, try lower: 3/0 [ 219.979282][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 220.019513][T13711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 220.035160][T13711] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 220.043589][T13711] gretap2: entered promiscuous mode [ 220.059774][T13711] gretap2: entered allmulticast mode [ 220.480708][T13746] syzkaller0: entered promiscuous mode [ 220.533609][T13746] syzkaller0: entered allmulticast mode [ 220.715510][T13762] netlink: 'syz.2.2289': attribute type 4 has an invalid length. [ 220.772816][T13765] netlink: 'syz.2.2289': attribute type 4 has an invalid length. [ 221.179482][T13788] netlink: 'syz.3.2297': attribute type 1 has an invalid length. [ 221.232414][T13790] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 221.317195][T13792] Cannot find add_set index 4 as target [ 222.039061][T13834] veth1_to_bridge: entered allmulticast mode [ 222.308891][T13854] ipt_ECN: cannot use operation on non-tcp rule [ 222.432678][T13859] netlink: 'syz.2.2317': attribute type 26 has an invalid length. [ 222.690931][T13877] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 222.699144][T13877] __nla_validate_parse: 12 callbacks suppressed [ 222.699162][T13877] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2323'. [ 222.723078][T13815] vxcan1 speed is unknown, defaulting to 1000 [ 222.921805][T13889] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 223.058701][ T29] audit: type=1800 audit(1782404057.430:5): pid=13892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2327" name="memory.events" dev="tmpfs" ino=2362 res=0 errno=0 [ 223.092905][T13892] syzkaller0: entered promiscuous mode [ 223.105776][T13892] syzkaller0: entered allmulticast mode [ 223.124587][T13892] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 223.181414][T13897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'. [ 223.485189][T13913] netlink: 'syz.2.2333': attribute type 1 has an invalid length. [ 223.770817][T13913] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 223.831676][T13923] veth5: entered promiscuous mode [ 223.917211][T13941] C: entered promiscuous mode [ 223.943249][T13941] netlink: 'syz.4.2336': attribute type 2 has an invalid length. [ 223.987780][T13941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.057848][T13949] netlink: 'syz.1.2338': attribute type 24 has an invalid length. [ 224.262679][T13959] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2340'. [ 224.339904][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 224.354598][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 224.507882][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.527655][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2344'. [ 224.536702][T13969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2344'. [ 224.587196][T13969] gretap3: entered promiscuous mode [ 224.605498][T13969] gretap3: entered allmulticast mode [ 224.629824][T13974] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2347'. [ 224.673424][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.938896][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 225.269775][T14030] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2360'. [ 225.305918][T14029] xfrm2: entered promiscuous mode [ 225.315445][T14029] xfrm2: entered allmulticast mode [ 225.531476][T14047] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 225.548443][T14047] bond0: entered promiscuous mode [ 225.553800][T14047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.572980][T14047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.580108][T14047] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 225.597619][T14047] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 225.610143][T14047] bond0: (slave ip6gre1): making interface the new active one [ 225.618871][T14047] ip6gre1: entered promiscuous mode [ 225.625964][T14047] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 225.789706][T14053] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 226.008369][T14070] syzkaller1: entered promiscuous mode [ 226.024033][T14070] syzkaller1: entered allmulticast mode [ 226.085576][T14074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.153047][T14067] syzkaller0: entered promiscuous mode [ 226.158929][T14067] syzkaller0: entered allmulticast mode [ 226.338799][T14091] siw: device registration error -23 [ 226.358269][T14092] smc: removing ib device syz0 [ 226.371475][T14090] netlink: 'syz.4.2374': attribute type 12 has an invalid length. [ 226.379368][T14090] netlink: 'syz.4.2374': attribute type 11 has an invalid length. [ 226.419950][T14092] smbdirect: ib_dev[syz0] removed [ 226.425540][T14090] tipc: Enabled bearer , priority 0 [ 226.688169][T14088] tipc: Disabling bearer [ 227.355831][T14121] syzkaller0: entered promiscuous mode [ 227.390120][T14121] syzkaller0: entered allmulticast mode [ 227.430170][T14124] syzkaller1: entered promiscuous mode [ 227.464308][T14124] syzkaller1: entered allmulticast mode [ 227.473111][T14124] netlink: 'syz.4.2387': attribute type 33 has an invalid length. [ 227.595831][T14124] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 227.619321][T14124] bond9 (unregistering): Released all slaves [ 227.808405][T14154] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 227.929642][T14160] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 227.950287][T14160] __nla_validate_parse: 12 callbacks suppressed [ 227.950307][T14160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2398'. [ 228.095451][T14170] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2399'. [ 228.129767][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2402'. [ 228.146614][T14177] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.167424][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.187051][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.212694][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.226779][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.235895][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2403'. [ 228.246435][T14177] openvswitch: netlink: IP tunnel dst address not specified [ 228.495840][T14189] x_tables: duplicate underflow at hook 2 [ 228.544479][T14192] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 228.590834][T14192] bond6: entered promiscuous mode [ 228.607289][T14155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.614578][T14192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.621336][T14155] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 228.630282][T14195] bridge0: Device is already in use. [ 228.642708][T14155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.649778][T14196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2408'. [ 228.673883][T14155] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 228.686459][T14192] bridge0: Device is already in use. [ 228.695427][T14155] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.706897][T14155] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 228.742390][T14196] syzkaller0: entered promiscuous mode [ 228.749739][T14155] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.765791][T14196] syzkaller0: entered allmulticast mode [ 228.772317][T14155] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 229.432421][T14240] netlink: 'syz.0.2420': attribute type 10 has an invalid length. [ 229.486537][T14240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.785552][T14264] tipc: Enabling of bearer rejected, failed to enable media [ 229.917113][T14268] unsupported nlmsg_type 40 [ 231.331369][T14368] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 231.365641][T14368] netlink: 'syz.0.2446': attribute type 4 has an invalid length. [ 231.885528][T14392] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 231.924196][T14396] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 231.957092][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.033346][T14359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 232.051651][T14359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 232.065903][T14401] bond0 (unregistering): Released all slaves [ 232.110699][T14396] netlink: 'syz.4.2455': attribute type 61 has an invalid length. [ 232.245857][T14408] netlink: 'syz.2.2460': attribute type 6 has an invalid length. [ 232.268708][T14410] netlink: 'syz.0.2461': attribute type 21 has an invalid length. [ 232.284833][T14410] netlink: 'syz.0.2461': attribute type 4 has an invalid length. [ 232.312484][T14410] netlink: 'syz.0.2461': attribute type 5 has an invalid length. [ 232.338918][T14415] netlink: 'syz.0.2461': attribute type 21 has an invalid length. [ 232.522785][T14426] syzkaller0: entered promiscuous mode [ 232.541556][T14426] syzkaller0: entered allmulticast mode [ 232.570849][T14426] 0: reclassify loop, rule prio 0, protocol 800 [ 233.009519][T14445] __nla_validate_parse: 9 callbacks suppressed [ 233.009553][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2470'. [ 233.153065][T14461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2471'. [ 233.213425][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 233.332281][T14473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.538998][T14474] pimreg: entered allmulticast mode [ 233.545347][T14484] sit0: Caught tx_queue_len zero misconfig [ 234.088154][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2486'. [ 234.461517][T14526] ksmbd: Unknown IPC event: 8, ignore. [ 234.909069][T14558] tipc: Enabled bearer , priority 0 [ 234.934925][T14563] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 234.944380][T14558] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1440) ! [ 234.973988][T14563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.009187][T14558] tipc: Resetting bearer [ 235.332377][T14587] validate_nla: 4 callbacks suppressed [ 235.332399][T14587] netlink: 'syz.4.2511': attribute type 1 has an invalid length. [ 235.385583][T14590] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2512'. [ 235.400262][T14587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.469347][T14591] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2512'. [ 235.805792][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 235.840907][T14613] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 235.965433][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2522'. [ 236.016538][T14622] openvswitch: netlink: Flow key attr not present in new flow. [ 236.033882][ T7254] tipc: Node number set to 3177051165 [ 236.369346][T14644] vxcan1 speed is unknown, defaulting to 1000 [ 236.515731][T14650] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 236.699872][T14659] bridge0: Device is already in use. [ 236.804192][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 236.835743][T14663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 236.941756][T14673] netlink: 'syz.1.2535': attribute type 8 has an invalid length. [ 237.006860][T14674] bond0: (slave team0): Releasing backup interface [ 237.022612][T14676] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 237.026408][T14677] ip6t_srh: unknown srh invflags 4000 [ 237.076938][T14674] team0 (unregistering): Port device team_slave_0 removed [ 237.091786][T14674] team0 (unregistering): Port device team_slave_1 removed [ 237.338632][T14694] netlink: 'syz.1.2542': attribute type 4 has an invalid length. [ 237.555773][T14706] tipc: Enabled bearer , priority 0 [ 237.602250][T14706] syzkaller0: entered promiscuous mode [ 237.624994][T14713] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001 [ 237.631943][T14706] syzkaller0: entered allmulticast mode [ 237.638043][ T7254] IPVS: starting estimator thread 0... [ 237.687149][T14713] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 237.693047][T14713] syzkaller1: group set to 0 [ 237.792421][T14701] tipc: Resetting bearer [ 237.810759][T14701] tipc: Disabling bearer [ 237.919629][T14736] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 237.927252][T14736] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.967104][T14715] IPVS: using max 39 ests per chain, 93600 per kthread [ 238.019347][T14738] pimreg3: entered allmulticast mode [ 238.191826][T14746] __nla_validate_parse: 14 callbacks suppressed [ 238.191847][T14746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2559'. [ 238.223449][T14744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2559'. [ 238.233095][T14744] openvswitch: netlink: Flow key attr not present in new flow. [ 238.242662][T14746] openvswitch: netlink: Flow key attr not present in new flow. [ 238.296209][T14750] netlink: 'syz.2.2558': attribute type 11 has an invalid length. [ 238.485558][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2564'. [ 238.512944][T14773] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 238.533145][T14774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2566'. [ 238.582924][T14775] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 238.750692][T14793] netlink: 'syz.2.2570': attribute type 61 has an invalid length. [ 238.860811][T14797] x_tables: unsorted entry at hook 2 [ 239.125321][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2572'. [ 239.200269][T14804] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 239.296948][T14806] netlink: 'syz.4.2574': attribute type 12 has an invalid length. [ 239.305149][T14806] netlink: 'syz.4.2574': attribute type 29 has an invalid length. [ 239.313098][T14806] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2574'. [ 239.323456][T14806] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2574'. [ 239.588875][T14815] netlink: 'syz.0.2577': attribute type 11 has an invalid length. [ 239.969791][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 240.206241][T14833] netlink: 'syz.2.2582': attribute type 5 has an invalid length. [ 240.398953][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 240.496732][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'. [ 240.794748][T14889] netlink: 'syz.4.2604': attribute type 12 has an invalid length. [ 240.943879][T14895] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 241.618947][T14931] netlink: 'syz.4.2616': attribute type 9 has an invalid length. [ 241.695463][T14935] netlink: 'syz.0.2619': attribute type 11 has an invalid length. [ 242.139552][T14962] hsr_slave_1 (unregistering): left promiscuous mode [ 242.253061][T14968] netlink: 'syz.3.2629': attribute type 39 has an invalid length. [ 242.301835][T14968] syz_tun (unregistering): left allmulticast mode [ 242.337868][T14968] bond2: (slave syz_tun): Removing an active aggregator [ 242.359953][T14968] bond2: (slave syz_tun): Releasing backup interface [ 242.388415][T14982] netlink: 'syz.4.2633': attribute type 11 has an invalid length. [ 242.406509][T14982] netlink: 'syz.4.2633': attribute type 5 has an invalid length. [ 242.415141][T14985] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 242.427195][T14985] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 242.477526][T14985] bond9 (unregistering): Released all slaves [ 243.054040][T15017] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 243.374279][T15040] __nla_validate_parse: 10 callbacks suppressed [ 243.374301][T15040] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2649'. [ 243.395954][T15042] netlink: 'syz.2.2650': attribute type 24 has an invalid length. [ 243.610756][T15055] erspan0: entered promiscuous mode [ 243.766245][T15068] tipc: Enabling of bearer rejected, already enabled [ 243.955991][T15084] bridge_slave_0: left allmulticast mode [ 243.980777][T15084] bridge_slave_0: left promiscuous mode [ 244.014205][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.062458][T15084] bridge_slave_1: left allmulticast mode [ 244.099162][T15084] bridge_slave_1: left promiscuous mode [ 244.117288][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.162061][T15084] bond6: (slave veth0_to_bond): Releasing backup interface [ 244.174464][T15084] : (slave bond_slave_0): Releasing backup interface [ 244.183506][T15084] team0: Port device team_slave_0 removed [ 244.199268][T15084] team0: Port device team_slave_1 removed [ 244.214613][T15084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.227728][T15084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.237009][T15084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 244.254036][T15088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 244.418751][T15111] syzkaller0: entered promiscuous mode [ 244.424342][T15111] syzkaller0: entered allmulticast mode [ 244.693961][T15130] netlink: 'syz.1.2671': attribute type 3 has an invalid length. [ 244.858990][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2675'. [ 244.906921][T15139] syzkaller1: entered promiscuous mode [ 244.923274][T15139] syzkaller1: entered allmulticast mode [ 244.943436][T15139] netlink: 'syz.1.2675': attribute type 1 has an invalid length. [ 244.985983][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 245.021160][T15145] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 245.032694][T15147] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 245.046499][T15147] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 245.069546][T15147] bond9: (slave ip6gre3): making interface the new active one [ 245.079168][T15147] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 245.139076][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'. [ 245.221902][T15145] ip6gretap1: entered promiscuous mode [ 245.293462][T15145] ip6gretap1: entered allmulticast mode [ 245.546680][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 245.577442][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 245.706384][T15191] netlink: 'syz.0.2687': attribute type 1 has an invalid length. [ 245.886099][T15202] bond10: (slave geneve3): making interface the new active one [ 245.895534][T15202] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 245.924531][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.951610][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.971981][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.012584][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.026899][T15213] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2693'. [ 246.103465][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'. [ 246.131244][T15219] ------------[ cut here ]------------ [ 246.136986][T15219] !sock_allow_reclassification(sk) [ 246.137017][T15219] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.3.2694/15219 [ 246.152889][T15219] Modules linked in: [ 246.157585][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 246.167440][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.177861][T15219] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 246.183463][T15219] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 4e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 246.203797][T15219] RSP: 0018:ffffc900055b7160 EFLAGS: 00010293 [ 246.209942][T15219] RAX: ffffffff86109574 RBX: 1ffff1100a031399 RCX: ffff88807a3a9f00 [ 246.218317][T15219] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 246.227321][T15219] RBP: ffffc900055b7250 R08: ffff88802663f9df R09: 1ffff11004cc7f3b [ 246.235744][T15219] R10: dffffc0000000000 R11: ffffed1004cc7f3c R12: ffff888050189b00 [ 246.244181][T15219] R13: 1ffff92000ab6e38 R14: dffffc0000000000 R15: 0000000000000001 [ 246.252209][T15219] FS: 00007f43e46346c0(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 246.262264][T15219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.268977][T15219] CR2: 00007f5e191b6e9c CR3: 000000005b76e000 CR4: 00000000003526f0 [ 246.277060][T15219] Call Trace: [ 246.280376][T15219] [ 246.283346][T15219] ? __pfx_nbd_add_socket+0x10/0x10 [ 246.288990][T15219] ? __nla_parse+0x40/0x60 [ 246.293472][T15219] nbd_genl_connect+0x133d/0x1c10 [ 246.298645][T15219] ? __pfx_nbd_genl_connect+0x10/0x10 [ 246.304158][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.308985][T15219] ? trace_kmalloc+0x2a/0xf0 [ 246.313628][T15219] ? __nla_parse+0x40/0x60 [ 246.318772][T15219] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 246.325341][T15219] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 246.331719][T15219] genl_family_rcv_msg_doit+0x233/0x340 [ 246.337368][T15219] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.343500][T15219] ? __pfx_stack_trace_save+0x10/0x10 [ 246.349345][T15219] genl_rcv_msg+0x614/0x7a0 [ 246.353959][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.359023][T15219] ? __pfx_nbd_genl_connect+0x10/0x10 [ 246.364499][T15219] ? __netlink_lookup+0xc6/0x8b0 [ 246.369469][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.374637][T15219] netlink_rcv_skb+0x226/0x4a0 [ 246.379458][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.384587][T15219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.389928][T15219] ? down_read+0x2be/0x330 [ 246.394508][T15219] genl_rcv+0x28/0x40 [ 246.398522][T15219] netlink_unicast+0x7bb/0x940 [ 246.403336][T15219] netlink_sendmsg+0x813/0xb40 [ 246.408469][T15219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.413866][T15219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.418850][T15219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.424275][T15219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.429638][T15219] ____sys_sendmsg+0x9b9/0xa20 [ 246.434777][T15219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.440109][T15219] ? lock_release+0x4b/0x3c0 [ 246.444806][T15219] ? import_iovec+0x73/0xa0 [ 246.449354][T15219] ___sys_sendmsg+0x2a5/0x360 [ 246.454156][T15219] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.459409][T15219] ? futex_wake+0x51b/0x5f0 [ 246.464304][T15219] ? __fget_files+0x2a/0x420 [ 246.469025][T15219] ? __fget_files+0x3a2/0x420 [ 246.473841][T15219] __x64_sys_sendmsg+0x1b1/0x290 [ 246.478839][T15219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.484472][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.489286][T15219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.495749][T15219] do_syscall_64+0x174/0x580 [ 246.500391][T15219] ? trace_irq_disable+0x3b/0x140 [ 246.505537][T15219] ? clear_bhb_loop+0x40/0x90 [ 246.510249][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.516258][T15219] RIP: 0033:0x7f43e379ce59 [ 246.520701][T15219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.540735][T15219] RSP: 002b:00007f43e4634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.549265][T15219] RAX: ffffffffffffffda RBX: 00007f43e3a16090 RCX: 00007f43e379ce59 [ 246.557439][T15219] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 246.565854][T15219] RBP: 00007f43e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.573945][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.581957][T15219] R13: 00007f43e3a16128 R14: 00007f43e3a16090 R15: 00007ffd1151b1e8 [ 246.590109][T15219] [ 246.593166][T15219] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.600574][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 246.610065][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.620153][T15219] Call Trace: [ 246.623477][T15219] [ 246.626437][T15219] vpanic+0x56c/0xa60 [ 246.630456][T15219] ? __pfx__printk+0x10/0x10 [ 246.635081][T15219] ? __pfx_vpanic+0x10/0x10 [ 246.639607][T15219] ? is_bpf_text_address+0x292/0x2b0 [ 246.644992][T15219] ? is_bpf_text_address+0x26/0x2b0 [ 246.650235][T15219] panic+0xc5/0xd0 [ 246.653984][T15219] ? __pfx_panic+0x10/0x10 [ 246.658483][T15219] __warn+0x315/0x4c0 [ 246.662496][T15219] ? nbd_add_socket+0xf35/0x12c0 [ 246.667466][T15219] ? nbd_add_socket+0xf35/0x12c0 [ 246.672448][T15219] __report_bug+0x331/0x530 [ 246.677089][T15219] ? nbd_add_socket+0xf35/0x12c0 [ 246.682144][T15219] ? __pfx___report_bug+0x10/0x10 [ 246.687213][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.692014][T15219] ? do_trace_netlink_extack+0x80/0x1d0 [ 246.697602][T15219] ? __nla_validate_parse+0x2534/0x2d50 [ 246.703186][T15219] ? __fget_files+0x2a/0x420 [ 246.707805][T15219] ? nbd_add_socket+0xf35/0x12c0 [ 246.712771][T15219] report_bug+0x16a/0x220 [ 246.717144][T15219] ? nbd_add_socket+0xf35/0x12c0 [ 246.722147][T15219] ? nbd_add_socket+0xf37/0x12c0 [ 246.727132][T15219] handle_bug+0x9c/0x200 [ 246.731448][T15219] exc_invalid_op+0x1a/0x50 [ 246.736006][T15219] asm_exc_invalid_op+0x1a/0x20 [ 246.740903][T15219] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 246.746497][T15219] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 4e 97 05 44 89 e9 80 e1 07 fe c1 38 [ 246.766839][T15219] RSP: 0018:ffffc900055b7160 EFLAGS: 00010293 [ 246.772947][T15219] RAX: ffffffff86109574 RBX: 1ffff1100a031399 RCX: ffff88807a3a9f00 [ 246.780960][T15219] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 246.788967][T15219] RBP: ffffc900055b7250 R08: ffff88802663f9df R09: 1ffff11004cc7f3b [ 246.796982][T15219] R10: dffffc0000000000 R11: ffffed1004cc7f3c R12: ffff888050189b00 [ 246.805001][T15219] R13: 1ffff92000ab6e38 R14: dffffc0000000000 R15: 0000000000000001 [ 246.813014][T15219] ? nbd_add_socket+0xf34/0x12c0 [ 246.818004][T15219] ? __pfx_nbd_add_socket+0x10/0x10 [ 246.823242][T15219] ? __nla_parse+0x40/0x60 [ 246.827703][T15219] nbd_genl_connect+0x133d/0x1c10 [ 246.832763][T15219] ? __pfx_nbd_genl_connect+0x10/0x10 [ 246.838185][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.843004][T15219] ? trace_kmalloc+0x2a/0xf0 [ 246.847655][T15219] ? __nla_parse+0x40/0x60 [ 246.852117][T15219] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 246.858491][T15219] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 246.864868][T15219] genl_family_rcv_msg_doit+0x233/0x340 [ 246.870462][T15219] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.876568][T15219] ? __pfx_stack_trace_save+0x10/0x10 [ 246.881986][T15219] genl_rcv_msg+0x614/0x7a0 [ 246.886531][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.891592][T15219] ? __pfx_nbd_genl_connect+0x10/0x10 [ 246.897001][T15219] ? __netlink_lookup+0xc6/0x8b0 [ 246.901980][T15219] ? rcu_is_watching+0x15/0xb0 [ 246.906775][T15219] netlink_rcv_skb+0x226/0x4a0 [ 246.911586][T15219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.916639][T15219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.921980][T15219] ? down_read+0x2be/0x330 [ 246.926463][T15219] genl_rcv+0x28/0x40 [ 246.930474][T15219] netlink_unicast+0x7bb/0x940 [ 246.935275][T15219] netlink_sendmsg+0x813/0xb40 [ 246.940076][T15219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.945397][T15219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.950351][T15219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.955655][T15219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.961043][T15219] ____sys_sendmsg+0x9b9/0xa20 [ 246.965849][T15219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.971167][T15219] ? lock_release+0x4b/0x3c0 [ 246.975817][T15219] ? import_iovec+0x73/0xa0 [ 246.980402][T15219] ___sys_sendmsg+0x2a5/0x360 [ 246.985160][T15219] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.990402][T15219] ? futex_wake+0x51b/0x5f0 [ 246.994956][T15219] ? __fget_files+0x2a/0x420 [ 246.999586][T15219] ? __fget_files+0x3a2/0x420 [ 247.004299][T15219] __x64_sys_sendmsg+0x1b1/0x290 [ 247.009289][T15219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.014811][T15219] ? rcu_is_watching+0x15/0xb0 [ 247.019618][T15219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.025712][T15219] do_syscall_64+0x174/0x580 [ 247.030333][T15219] ? trace_irq_disable+0x3b/0x140 [ 247.035387][T15219] ? clear_bhb_loop+0x40/0x90 [ 247.040083][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.045990][T15219] RIP: 0033:0x7f43e379ce59 [ 247.050430][T15219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.070160][T15219] RSP: 002b:00007f43e4634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.078596][T15219] RAX: ffffffffffffffda RBX: 00007f43e3a16090 RCX: 00007f43e379ce59 [ 247.086590][T15219] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007 [ 247.094605][T15219] RBP: 00007f43e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 247.102595][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.110609][T15219] R13: 00007f43e3a16128 R14: 00007f43e3a16090 R15: 00007ffd1151b1e8 [ 247.118663][T15219] [ 247.122335][T15219] Kernel Offset: disabled [ 247.126669][T15219] Rebooting in 86400 seconds..