last executing test programs: 5.051352003s ago: executing program 1 (id=3396): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xe7}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x0, 0x3, 0xa, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.811076717s ago: executing program 1 (id=3400): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001640), 0x4) sendmsg$unix(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x40) listen(r1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8010743f, 0x0) 4.407787852s ago: executing program 1 (id=3404): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x3, 0x5, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x800, '\x00', r3, r4, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000ba008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = accept4(r0, 0x0, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'wg0\x00'}}, 0x1e) sendmsg$nl_route_sched(r6, &(0x7f000000f040)={0x0, 0x0, &(0x7f000000f000)={&(0x7f0000000800)=@newtaction={0x2000, 0x30, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{0x240, 0x1, [@m_mirred={0x1b8, 0x3, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x67c082a7, 0x8, 0x6, 0x4, 0xa}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x4, 0xfffffffd, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0xffffffffffffffff, 0x9, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x80000000, 0xffffffffffffffff, 0x27, 0xffffffcd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xffffffff, 0xffffffffffffffff, 0x0, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x101, 0x3, 0x2, 0xa2e}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0x10000000, 0x8, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x9, 0x7, 0x6, 0x2}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf3da, 0x8001, 0x0, 0xf6, 0x2}, 0x2}}]}, {0x6a, 0x6, "9bada91d80977be45dbd4d2409574ad1d7caaed17e40e2eab7bcfc94f84557aa08b3282ad98a98d49229d8d51eb07d247fb1756f27c86b9952fa85d414f0112885ca68b44ed1f698efdddf7b3e343ff5f3e27df632705e6d364bcbd1405a81385f4401c3adc5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xf560, 0x20000000, 0x1, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x6, 0x10000000, 0x1ff, 0x8}}]}, {0x25, 0x6, "d1d05c7b656c9da2423492aaa037f4d8e3aa5b497064d124c4a4fbe4fcd48853e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x1dac, 0x1, [@m_skbedit={0xf58, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0xf29, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x15, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff, 0x8, 0x0, 0x6, 0x1}, 0x2, 0x4}, [{0x7, 0x9, 0x1, 0x7, 0x5fa8, 0x2}, {0x400, 0x2, 0x9a, 0x8, 0x4, 0x5}, {0x79bd, 0x0, 0x98000, 0x3, 0x7, 0x9}, {0x0, 0x3, 0x80000001, 0x4, 0x7ff, 0xd7a}, {0x5, 0x2, 0x7, 0xa0, 0x5, 0xfffffffc}, {0x7, 0x10001, 0x70c, 0x2, 0x7, 0x7}, {0x6, 0x9, 0x7fffffff, 0x3, 0x30a}, {0x6, 0x400, 0xd, 0x9, 0x2, 0x134}, {0x64f600, 0x0, 0x2, 0xff, 0x1, 0x1}, {0x80000001, 0x101, 0x5, 0x5, 0x3, 0xffffffc0}, {0x9, 0x0, 0x6, 0x0, 0xd3, 0x7}, {0x117b, 0x5, 0x8, 0xb0, 0x400, 0x5}, {0x8, 0x8, 0x7, 0xd, 0x4, 0x5}, {0x100, 0x97, 0x9, 0x10001, 0xc6, 0x1}, {0x62cd, 0xfffffffb, 0x6, 0x200, 0x8, 0x3}, {0x9e70, 0x4, 0x10001, 0xffffffff, 0x1, 0x7f}, {0xa, 0x58, 0x595cb1e0, 0x9, 0x1, 0x1}, {0x7, 0x2, 0xd, 0x9, 0xdf3, 0x7}, {0xcd, 0x3, 0x1, 0x80, 0x9, 0x54c}, {0x4, 0x80000000, 0x6, 0x3, 0x3, 0x7ff}, {0x7, 0x2cb, 0x5, 0x8, 0x4, 0x29ec}, {0xfffffffc, 0x6, 0x8f4, 0x6, 0x9, 0x9}, {0x80000000, 0xb, 0x200, 0x2, 0x5, 0x7}, {0xc, 0x7, 0x1, 0x7, 0x1, 0x9}, {0x353c, 0x5, 0x7, 0x7f, 0x0, 0x4}, {0x40, 0x80, 0x8, 0x6}, {0x9586, 0x3, 0xb795, 0x800, 0xcc, 0x4}, {0xfff, 0x1, 0x0, 0x2, 0x2, 0x8}, {0x9, 0x2, 0x5, 0xfffff281, 0x8, 0x400}, {0x0, 0xfffffff0, 0xa, 0x42d8, 0x2, 0x1f5}, {0x4, 0xffff, 0x80000000, 0x2ae2468a, 0x5, 0xff}, {0x8, 0x5, 0x0, 0x401, 0x0, 0x5}, {0xf3, 0x7, 0x4042, 0x1, 0x3, 0xffffffff}, {0x401, 0x0, 0x3d5, 0xfbd, 0x10000, 0x1489}, {0xc, 0x4, 0x9, 0x9, 0x100, 0x5}, {0x1, 0xfc000000, 0x8001, 0x9, 0x80000001, 0x3e3}, {0x2781, 0x2, 0x8001, 0x3, 0x7f, 0x1}, {0x3, 0x6, 0x7, 0xea, 0x8, 0x1000}, {0xe50, 0x6, 0xfffff5f2, 0xfffffffd, 0x8, 0x840}, {0xd90d, 0x8365, 0xa, 0x4, 0x1b51, 0x3}, {0x8, 0x2, 0x52, 0x5a03, 0xfffffffe, 0x10}, {0x7, 0xffff, 0x4, 0xa, 0x6, 0x1}, {0x7e, 0x800, 0x9, 0x8001, 0x400, 0xffffffff}, {0x1, 0x0, 0x7c4f5ea6, 0x5, 0x0, 0xc}, {0x8, 0x8a, 0x6, 0x100, 0x1, 0x6}, {0x8, 0x7, 0x9, 0x3, 0x7, 0x78}, {0x2, 0x81, 0x1, 0x101, 0xfe00000, 0x7fff}, {0x9, 0x3, 0x7, 0x1ff, 0x4, 0x7}, {0x7fff, 0x5, 0x4, 0xa, 0x1, 0x401}, {0x4, 0x80, 0x2, 0x1000, 0x1, 0x37d}, {0x101, 0x3, 0x4f, 0x401, 0x6, 0x6}, {0x40, 0xfffffeff, 0xffff, 0x9, 0x40, 0x80000001}, {0x7, 0x3, 0x8, 0x1, 0x4, 0x9}, {0x43cb, 0x7, 0x2, 0xf4, 0x2, 0x7}, {0x0, 0x1, 0x2, 0x4d, 0x0, 0xffffffff}, {0x3, 0x1, 0x7bc, 0x6, 0xfffffff9, 0x6}, {0x6, 0x9, 0xff, 0x6, 0x0, 0xd11}, {0x3, 0xa2e, 0xcc, 0x0, 0x2}, {0xf87, 0x1, 0x6d, 0x8, 0x7a, 0xa}, {0x7ff, 0xad70, 0x1, 0x8001, 0x4, 0x3}, {0x8001, 0x0, 0x7, 0x7, 0x2}, {0xe, 0x462, 0x7, 0x4, 0xc91, 0x2}, {0x2, 0x6, 0x80, 0x8, 0x2, 0x8}, {0x7, 0x1, 0x0, 0x6, 0x9, 0x6fa6bac8}, {0x2, 0x46e795c4, 0x8, 0xfffffbff, 0xf7c, 0xf}, {0x0, 0x3, 0x101, 0xfffffffa, 0x2, 0xe}, {0x9, 0x661, 0x9, 0xfffffffc, 0x3, 0x6}, {0x3, 0x1, 0x10, 0xf977, 0x79, 0xe0000000}, {0x5, 0x8000, 0x7, 0x7, 0x4, 0x7ff}, {0x5cb, 0x8, 0x3, 0xffff0075, 0x1, 0x2}, {0x3453, 0x3, 0x5, 0x3, 0x476, 0x727}, {0x8, 0x1, 0xc77, 0x1, 0x81, 0xa72f}, {0x0, 0xa, 0x10, 0x8, 0xe, 0x6}, {0x1, 0x8, 0x3, 0x4, 0x0, 0x3}, {0x9150, 0x4000, 0x8, 0x78f, 0x4, 0x4}, {0x0, 0x1, 0x2, 0x9, 0x4, 0x6}, {0x2, 0x6, 0x3, 0x7, 0x7fff, 0xff}, {0x200, 0xff, 0x3, 0x7, 0x3ff, 0x6}, {0x7fffffff, 0x2, 0x8, 0x5, 0x2, 0x7ff}, {0xfff, 0x1ff, 0x8, 0xffff52ca, 0x5, 0x5ad4}, {0x0, 0x4, 0x4, 0xddc, 0x4, 0x9}, {0x8, 0x8, 0x5, 0x80, 0x0, 0xe}, {0x4, 0x2, 0x7fffffff, 0xf, 0x40, 0x7fffffff}, {0x100, 0x5, 0xd049, 0x8, 0x6, 0xdb8}, {0x0, 0x7, 0x99, 0x2, 0x2, 0x1a0}, {0xd5f, 0xa8c, 0x3, 0x7ff, 0x101, 0x7}, {0x82ee, 0x9, 0x1, 0x9, 0x7, 0x9}, {0x1, 0x1, 0xc38, 0x1, 0xf, 0xb7}, {0x1000, 0xfffffffd, 0x8, 0x7, 0x10001, 0x5}, {0x0, 0x3, 0x40, 0x9f, 0x5d0, 0xffff4722}, {0x10001, 0x38, 0x7, 0x6, 0x1, 0x7}, {0x4, 0x7f2, 0x9, 0x3, 0x3, 0x5253}, {0x182, 0x39, 0x9, 0x5, 0x3, 0x2}, {0xccd, 0x6, 0x5, 0x838, 0x0, 0x4}, {0x101, 0x5, 0x101, 0x3, 0x40000, 0x1}, {0x8, 0x3b68d51, 0xffffffff, 0x8, 0x3, 0x7fff}, {0xe, 0xf, 0x734, 0x9, 0x4, 0x4}, {0xfffffffb, 0x0, 0x7, 0x9, 0x1e}, {0x7fffffff, 0x0, 0x9e, 0x2, 0x6}, {0x0, 0x0, 0x5, 0x8, 0x5e47944c, 0x3}, {0x1000, 0x9, 0x2, 0x5, 0x6, 0xfffffffe}, {0x9, 0x2, 0x6, 0x3ff, 0x7ff, 0x9}, {0x2, 0x8, 0xb8f, 0xe2, 0xc, 0x8}, {0x9, 0x3, 0x6, 0xfffffffd, 0x3, 0x2}, {0x8, 0x4, 0x80, 0xc0000000, 0x0, 0x9}, {0x401, 0x697, 0x1, 0xabb7, 0x0, 0x6}, {0x8, 0x4, 0x2, 0x3, 0x6, 0x4}, {0x4, 0x7, 0x7, 0x4, 0x1, 0x6}, {0x9, 0x15, 0x95b9, 0x6, 0x4, 0x6}, {0x8001, 0x5, 0x3, 0x8, 0x6, 0x14}, {0x3, 0x1, 0x1, 0x7, 0x200}, {0x80000000, 0x2, 0x5, 0x40, 0x2, 0x9}, {0x4, 0x4, 0x2, 0xfff, 0x8000, 0xc}, {0x40, 0x8, 0x7, 0xffffffff, 0x9, 0x5}, {0x100, 0x4, 0x5, 0x7, 0x7, 0xffffffff}, {0x4, 0x0, 0x81, 0x8, 0x5c968773, 0x5}, {0xf, 0x4, 0x100, 0xa8, 0xfff, 0x81}, {0x1, 0x4, 0x9, 0x3, 0x7, 0x9}, {0xff, 0xdb, 0x8, 0x2, 0x8, 0x7ad0}, {0x400, 0xfffffffb, 0x4, 0x7f, 0x8, 0x1}, {0x5, 0x9, 0xffffffff, 0x1ff, 0x80000000, 0x1}, {0x5, 0xfffffff9, 0x4, 0x107, 0x7, 0xf6d5}, {0xfff, 0x8, 0x9, 0x0, 0x4, 0x80000000}, {0x1000, 0x6, 0x7ff, 0x3, 0x9, 0x7}, {0x80000000, 0x6, 0x10, 0x800, 0x8, 0xff}, {0x7, 0x1ff, 0x1, 0x7ff, 0x7, 0x3}, {0x7f, 0x7b6, 0x5, 0x7c4, 0x0, 0x8}, {0x739f, 0x5f8, 0x8, 0xe, 0xb, 0x6}], [{0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x2, 0x1}, {}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1a4760fde559f4f8}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x9adeb176c7c42d89}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x4}, {}, {0x2, 0x1}, {}, {}, {0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2000}, 0x1, 0x0, 0x0, 0x4891}, 0x95) 3.993283205s ago: executing program 1 (id=3407): r0 = socket(0x2, 0x3, 0xff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}, {0x0, 0x13}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000890000009500000000000000126c402d5f5bf84dc295509472075954188c116c7e9b8a885751b460eac6e17010358e17b1847470f5335bddd6172dede09d0d"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) 3.713147134s ago: executing program 1 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000040000000700000000000000db28dfeed8f1ecdfc4674fb324637c43f7f219ee00ede7421aeccbe34c412737bb40", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bind$xdp(r2, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000010010100000000000000000037c2000a14000000160a0102000000000000f9ff04000004180000000e0a01030000000000000000000000060400038024000000000a0102000000000000000007000001040006000900010073797a310000000030000000160a0101000000000000000007000009040003800900010073797a31000000000900020073797a3200000000140000001100010000000000000000000700000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.365118273s ago: executing program 1 (id=3412): unshare(0x100000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="98a4e4d7", @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0xc0c4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) listen(r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x2}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) unshare(0x20080) 2.078187621s ago: executing program 0 (id=3428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0x5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.033736455s ago: executing program 2 (id=3429): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)={r0}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000080)={'veth1_vlan\x00', @ifru_names='wlan1\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x149, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.981787479s ago: executing program 3 (id=3430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) accept$unix(r5, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x3) write$tun(r1, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000) 1.672833622s ago: executing program 2 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r3, 0x0, 0x7) socket$netlink(0x10, 0x3, 0x8000000004) (async) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20080) 1.577139896s ago: executing program 0 (id=3433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'caif0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd700000dcdf2505000000200001800d0001007564703a73797a32000000000c0002800800035300246448"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x44004) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000088f7020305000900"], 0xfdef) 1.361505759s ago: executing program 4 (id=3435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = epoll_create(0x7) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000380)={{r1}, "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"}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.281526746s ago: executing program 2 (id=3436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0x800) 1.225860919s ago: executing program 3 (id=3437): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, 0x0) 1.225212872s ago: executing program 4 (id=3438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000280)={{0x0, 0x3, 0x9, 0xfffffffeffffffff, 0x4, 0x0, 0x3, 0x8, 0x8000, 0x6, 0x5, 0xfffffffffffffff7, 0x7, 0xa, 0x4}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000680)={r3, 0x2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r2, &(0x7f00000003c0)=""/152, 0x98, 0x21, &(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.092472677s ago: executing program 2 (id=3439): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x200280d1}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xffffffffffffff86}, 0x1, 0x0, 0x0, 0xc084}, 0x4044805) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008055) socket(0x1e, 0x4, 0x0) write$nci(r5, &(0x7f0000000140)=ANY=[], 0x14) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890}, 0x0) write$nbd(r4, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'dvmrp0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) 1.077309887s ago: executing program 3 (id=3440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 964.856199ms ago: executing program 0 (id=3441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x3, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@phonet={0x23, 0xac, 0x2, 0xf}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) socket(0x2a, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 876.347811ms ago: executing program 3 (id=3442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000340)=""/144, &(0x7f00000016c0)=0x90) close(0x3) (async) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) (async) listen(r4, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) writev(r6, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) (async) writev(r6, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) accept4(r4, 0x0, 0x0, 0x0) (async) r7 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000001a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000017c0)="521a1269cc3401491ec9739ae3f299cdc51e30467bf88601a496980942fd44e6d221597f402b4913bb4e1b1a659b4bbbd0836efcfb834cea953d325a9d22b3eb68003a96a09855c2d58958f52e839fd5b4eb7a6221bf979ee89bbb94", 0x5c) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000017c0)="521a1269cc3401491ec9739ae3f299cdc51e30467bf88601a496980942fd44e6d221597f402b4913bb4e1b1a659b4bbbd0836efcfb834cea953d325a9d22b3eb68003a96a09855c2d58958f52e839fd5b4eb7a6221bf979ee89bbb94", 0x5c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff0afffc08000340000000140c0009800800014000000081140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff0afffc08000340000000140c0009800800014000000081140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000001c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r9, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) 871.36069ms ago: executing program 4 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000170004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010f000000000000000067000000080001003c00000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x40}}, 0x240040d5) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0xb1a0f409c8e08627, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x38}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) 592.97375ms ago: executing program 3 (id=3444): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x35}]}, {0x0, [0x0, 0x0, 0x61, 0x5f]}}, &(0x7f0000000380)=""/169, 0x3a, 0xa9, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e1946c79521b1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (rerun: 32) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r1}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 431.677786ms ago: executing program 0 (id=3445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r2, 0x4000) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000080), 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 413.944354ms ago: executing program 2 (id=3446): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x90000005}) (async) epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) (async) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x6e21}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) accept4(r6, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x80, 0x80400) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}}}, 0x108) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 333.527667ms ago: executing program 4 (id=3447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252b0000000c0099000d0000007f00000004002a00"], 0x24}}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) poll(&(0x7f0000000000)=[{r2, 0x200}, {r0, 0x2000}, {r0, 0x1403}], 0x3, 0x1) 293.202475ms ago: executing program 4 (id=3448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x77, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, @in={0x2, 0x4e22, @multicast2}, @hci={0x1f, 0x3, 0x3}, @tipc=@name={0x1e, 0x2, 0x699b7aaec1f1ee18, {{}, 0x1}}, 0x5, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x46, 0x3ff, 0x7a79}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000000000611008bc00fd630137000600000095acebc2a59a867e76b5e44661186e91464d533ac10193c842"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) 236.587229ms ago: executing program 3 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) r5 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x4, 0x0, 0x3}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x10}, 0x8810) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 89.297164ms ago: executing program 0 (id=3450): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000080)={r1, 0x5446}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) sendfile(r0, r0, 0x0, 0x0) 88.791911ms ago: executing program 2 (id=3451): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x20000000) 42.744299ms ago: executing program 0 (id=3452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000004) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd7000eddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=3453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6bcd3292dbef915d564890c2000000003977586a9cec55baaf92010000000000000038825dad19cf4311fbdc04dda445926f3df714c4748a04d996b5d8f1480de0c7374168c188f31e25ee19052b76b6703cc12c680f6c44389a7d878f1fe5d8e19a836f2d5b787597192aa57b0c14a782c6b1ff5b35db865e4770f13192e42d759782608652f449f059", 0x92) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) kernel console output (not intermixed with test programs): 6261][T11807] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 214.684447][T11842] lo speed is unknown, defaulting to 1000 [ 214.975516][T11867] sctp: [Deprecated]: syz.2.1612 (pid 11867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.975516][T11867] Use struct sctp_sack_info instead [ 215.080713][T11872] __nla_validate_parse: 10 callbacks suppressed [ 215.080729][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 215.196895][T11872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1613'. [ 215.466787][T11889] bridge0: port 3(ipvlan0) entered blocking state [ 215.493181][T11889] bridge0: port 3(ipvlan0) entered disabled state [ 215.521968][T11889] ipvlan0: entered allmulticast mode [ 215.553570][T11889] bridge0: entered allmulticast mode [ 215.580654][T11889] ipvlan0: left allmulticast mode [ 215.586141][T11889] bridge0: left allmulticast mode [ 215.788412][T11871] bond5 (unregistering): Released all slaves [ 215.912304][T11919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1627'. [ 215.974214][T11923] x_tables: duplicate underflow at hook 1 [ 216.058412][T11871] syzkaller0: entered promiscuous mode [ 216.075900][T11871] syzkaller0: entered allmulticast mode [ 216.271537][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 216.310833][T11937] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1632'. [ 216.355907][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 216.446184][T11941] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 216.460765][T11950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1634'. [ 216.497692][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1634'. [ 216.775708][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 216.959200][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 217.813386][T12010] netlink: 'syz.4.1650': attribute type 21 has an invalid length. [ 217.865326][T12011] netlink: 'syz.4.1650': attribute type 21 has an invalid length. [ 219.088217][T12010] netlink: 'syz.4.1650': attribute type 4 has an invalid length. [ 219.114234][T12010] netlink: 'syz.4.1650': attribute type 5 has an invalid length. [ 219.137496][T12011] netlink: 'syz.4.1650': attribute type 4 has an invalid length. [ 219.152524][T12011] netlink: 'syz.4.1650': attribute type 5 has an invalid length. [ 219.276298][T12019] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 219.301820][ T9877] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 219.311528][T12021] tipc: Enabling of bearer rejected, failed to enable media [ 219.411516][ T9877] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 219.773230][T12046] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 220.087636][T12063] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 220.547673][T12094] tipc: Enabled bearer , priority 10 [ 220.590345][T12095] __nla_validate_parse: 10 callbacks suppressed [ 220.590361][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'. [ 220.596623][T12099] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 220.660077][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'. [ 220.913005][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 220.981997][T12116] xt_hashlimit: size too large, truncated to 1048576 [ 221.002757][T12112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.036419][T12115] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 221.093910][T12115] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1676'. [ 221.156077][T12115] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 221.173098][T12124] bridge0: port 1(1¾x9ÿ) entered disabled state [ 221.250041][T12124] ¾x9ÿ (unregistering): left allmulticast mode [ 221.300530][T12124] ¾x9ÿ (unregistering): left promiscuous mode [ 221.328962][T12124] bridge0: port 1(1¾x9ÿ) entered disabled state [ 221.396268][T12133] syzkaller0: entered promiscuous mode [ 221.426384][T12133] syzkaller0: entered allmulticast mode [ 221.468375][T12136] macvlan3: entered promiscuous mode [ 221.482254][T12136] macvlan3: entered allmulticast mode [ 221.509268][T12136] bond4: entered promiscuous mode [ 221.525192][T12136] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 221.572258][T12136] bond4: left promiscuous mode [ 221.597763][T12141] netlink: 'syz.0.1678': attribute type 3 has an invalid length. [ 221.726529][ T9877] tipc: Node number set to 4107854385 [ 221.856340][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 221.966888][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 222.280277][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 222.306758][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 223.514068][T12244] validate_nla: 1 callbacks suppressed [ 223.514086][T12244] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 223.659280][T12244] bond5: entered promiscuous mode [ 223.668992][T12244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.699587][T12256] syzkaller1: entered promiscuous mode [ 223.728607][T12256] syzkaller1: entered allmulticast mode [ 223.868371][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1711'. [ 223.879075][T12271] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1711'. [ 223.945804][T12271] veth7: entered promiscuous mode [ 223.988288][T12275] sctp: [Deprecated]: syz.1.1712 (pid 12275) Use of int in max_burst socket option. [ 223.988288][T12275] Use struct sctp_assoc_value instead [ 224.246060][T12285] block nbd3: NBD_DISCONNECT [ 224.525517][T12303] geneve2: entered promiscuous mode [ 224.540549][T12303] geneve2: entered allmulticast mode [ 224.565557][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.581172][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.596537][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.615598][T12307] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 224.630707][T12307] team0: Port device dummy0 added [ 225.053303][T12331] pim6reg: entered allmulticast mode [ 225.139649][T12342] sctp: [Deprecated]: syz.0.1731 (pid 12342) Use of int in max_burst socket option deprecated. [ 225.139649][T12342] Use struct sctp_assoc_value instead [ 225.489743][T12362] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.124859][T12390] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 226.185510][T12399] __nla_validate_parse: 10 callbacks suppressed [ 226.185528][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1747'. [ 226.282591][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 226.433347][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1752'. [ 226.805210][T12442] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1757'. [ 226.839340][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 226.864477][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 226.939522][T12425] syz.3.1753 (12425) used greatest stack depth: 17856 bytes left [ 226.949520][T12450] vlan4: entered allmulticast mode [ 226.955738][T12450] bridge4: entered allmulticast mode [ 227.034806][T12445] bridge4: port 1(erspan0) entered blocking state [ 227.051534][T12445] bridge4: port 1(erspan0) entered disabled state [ 227.076353][T12445] erspan0: entered allmulticast mode [ 227.107539][T12445] erspan0: entered promiscuous mode [ 227.116870][T12445] bridge4: port 1(erspan0) entered blocking state [ 227.123491][T12445] bridge4: port 1(erspan0) entered forwarding state [ 227.171075][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 227.305315][T12457] veth3: entered allmulticast mode [ 227.323142][T12455] lo speed is unknown, defaulting to 1000 [ 227.840111][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 227.905906][T12492] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 228.000727][T12498] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 228.016779][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 228.043741][T12498] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 228.472828][T12530] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 228.999108][T12551] netlink: 'syz.1.1785': attribute type 9 has an invalid length. [ 229.087457][T12561] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 229.114425][T12561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.211583][T12561] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 229.228185][T12561] syzkaller1: linktype set to 823 [ 229.248145][T12561] syzkaller1: tun_chr_ioctl cmd 35123 [ 229.365074][T12583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1793'. [ 229.596767][T12591] vlan3: entered allmulticast mode [ 229.766281][T12602] erspan0: entered promiscuous mode [ 229.783596][T12602] erspan0: entered allmulticast mode [ 230.098735][T12620] syzkaller0: entered promiscuous mode [ 230.116742][T12620] syzkaller0: entered allmulticast mode [ 230.159244][T12627] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.342612][T12636] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 230.958068][T12674] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 231.083900][T12674] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.360450][T12701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.412033][T12709] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 231.461794][T12714] __nla_validate_parse: 6 callbacks suppressed [ 231.461811][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1829'. [ 231.546315][T12709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.576942][T12716] syzkaller0: entered promiscuous mode [ 231.597539][T12716] syzkaller0: entered allmulticast mode [ 231.654182][T12726] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 231.693572][T12727] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 231.708415][T12730] syzkaller1: entered promiscuous mode [ 231.719084][T12730] syzkaller1: entered allmulticast mode [ 231.923114][T12743] openvswitch: netlink: IPv4 tun info is not correct [ 231.948039][ T6010] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.959031][ T6010] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.976560][ T6010] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.265841][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 232.520134][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 232.781026][T12795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 232.799354][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 233.060128][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1854'. [ 233.090664][T12821] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1855'. [ 233.133895][T12820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.178256][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 233.429211][T12842] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 233.695543][T12861] syzkaller1: entered promiscuous mode [ 233.710733][T12861] syzkaller1: entered allmulticast mode [ 233.739995][T12864] netlink: 'syz.4.1865': attribute type 39 has an invalid length. [ 233.780203][T12866] sctp: [Deprecated]: syz.3.1866 (pid 12866) Use of int in max_burst socket option deprecated. [ 233.780203][T12866] Use struct sctp_assoc_value instead [ 233.807183][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 233.842330][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 233.851830][ T6009] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.862602][ T6009] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.874138][ T6009] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.883487][ T6009] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.922343][T12876] nbd: couldn't find a device at index 0 [ 233.960538][T12876] netlink: 'syz.0.1868': attribute type 11 has an invalid length. [ 234.459785][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.620230][T12912] netlink: 'syz.4.1876': attribute type 12 has an invalid length. [ 236.948706][T12878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.309610][T12960] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1888'. [ 237.432142][T12967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 237.453040][T12965] xt_hashlimit: size too large, truncated to 1048576 [ 238.247674][T12980] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1891'. [ 238.378305][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1894'. [ 238.411243][T12984] netlink: 'syz.2.1893': attribute type 3 has an invalid length. [ 238.416180][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 238.430744][T12984] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1893'. [ 255.642848][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.514432][T13009] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1900'. [ 258.539474][T13000] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 258.568451][T12999] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 258.634501][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 258.680254][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1897'. [ 258.692736][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1897'. [ 258.719799][T13020] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1902'. [ 258.799883][T12999] syzkaller0: entered promiscuous mode [ 258.815794][T12999] syzkaller0: entered allmulticast mode [ 258.868484][T13020] vlan3: entered allmulticast mode [ 258.886331][T13020] gretap0: entered allmulticast mode [ 259.523365][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 260.106180][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1909'. [ 260.917063][T13061] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 260.919163][T13063] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 261.409254][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 261.647102][T13091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.709070][T13091] bond8 (unregistering): Released all slaves [ 261.760313][T13099] tipc: Resetting bearer [ 261.804774][T13101] bond0: (slave bond_slave_1): Releasing backup interface [ 261.892190][T13114] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 261.962506][T13117] bond5: (slave gretap0): making interface the new active one [ 261.971056][T13117] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 262.458538][T13151] syzkaller0: entered promiscuous mode [ 262.478530][T13151] syzkaller0: entered allmulticast mode [ 262.580596][T13163] h: entered promiscuous mode [ 262.667872][T13169] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 262.678705][T13169] bond7 (unregistering): Released all slaves [ 262.799312][T13179] netlink: 768 bytes leftover after parsing attributes in process `syz.2.1943'. [ 262.919909][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 262.946779][T13184] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 262.955733][T13184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.986953][T13189] x_tables: duplicate underflow at hook 2 [ 263.039828][T13192] netlink: 'syz.2.1945': attribute type 5 has an invalid length. [ 263.298129][T13208] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 263.544353][T13226] __nla_validate_parse: 2 callbacks suppressed [ 263.544371][T13226] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1955'. [ 263.975190][T13249] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1963'. [ 264.230470][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 264.525260][T13269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.548172][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1971'. [ 264.607322][T13289] tunl0: entered promiscuous mode [ 264.627900][T13289] netlink: 'syz.1.1973': attribute type 4 has an invalid length. [ 264.647449][T13289] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1973'. [ 264.672822][T13296] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 264.720265][T13296] netlink: 'syz.4.1971': attribute type 11 has an invalid length. [ 264.734734][T13296] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1971'. [ 264.781807][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 264.803950][T13286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1971'. [ 264.956565][T13309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1978'. [ 264.993460][T13309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1978'. [ 265.239198][T13330] netlink: 'syz.3.1979': attribute type 30 has an invalid length. [ 265.330469][T13330] bond10: option arp_missed_max: invalid value (0) [ 265.375912][T13330] bond10: option arp_missed_max: allowed values 1 - 255 [ 265.418753][T13330] bond10 (unregistering): Released all slaves [ 265.610331][T13350] SET target dimension over the limit! [ 266.257505][T13403] netlink: 'syz.2.1996': attribute type 21 has an invalid length. [ 266.365308][T13406] syzkaller0: entered promiscuous mode [ 266.370984][T13406] syzkaller0: entered allmulticast mode [ 266.474959][T13417] bridge_slave_1: left allmulticast mode [ 266.480734][T13417] bridge_slave_1: left promiscuous mode [ 266.486947][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.496013][T13417] bridge_slave_0: left allmulticast mode [ 266.503721][T13417] bridge_slave_0: left promiscuous mode [ 266.509442][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.698027][T13362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.708642][T13379] __nla_validate_parse: 1 callbacks suppressed [ 268.708659][T13379] netlink: 524 bytes leftover after parsing attributes in process `syz.4.1991'. [ 268.865548][T13427] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004 [ 269.060211][T13443] xt_time: unknown flags 0xf4 [ 269.106504][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 269.133339][T13443] syzkaller0: entered promiscuous mode [ 269.139028][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 269.147449][T13443] syzkaller0: entered allmulticast mode [ 269.271298][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 269.283566][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 269.313804][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 269.386666][T13458] netlink: 'syz.3.2010': attribute type 9 has an invalid length. [ 269.868240][T13489] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 269.890928][T13480] netlink: 'syz.1.2016': attribute type 27 has an invalid length. [ 269.900964][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 269.906453][T13480] netlink: 'syz.1.2016': attribute type 4 has an invalid length. [ 269.949418][T13480] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2016'. [ 270.019072][T13489] bond7: Invalid ad_actor_system MAC address. [ 270.047699][T13489] bond7: option ad_actor_system: invalid value (1) [ 270.065894][T13489] bond7 (unregistering): Released all slaves [ 270.077185][T13500] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 270.096929][T13500] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2021'. [ 270.229076][T13500] bond6: Removing last ns target with arp_interval on [ 270.256776][T13498] syzkaller0: entered promiscuous mode [ 270.264308][T13498] syzkaller0: entered allmulticast mode [ 270.276612][ T5640] Bluetooth: hci4: link tx timeout [ 270.281928][ T5640] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 270.410084][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 270.760161][T13518] syzkaller0: entered promiscuous mode [ 270.772857][T13518] syzkaller0: entered allmulticast mode [ 271.379044][T13550] netlink: 'syz.0.2036': attribute type 30 has an invalid length. [ 272.365769][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 272.940936][T13528] ip6gretap1: entered promiscuous mode [ 272.946706][T13528] ip6gretap1: entered allmulticast mode [ 272.969726][T13550] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 273.151851][T13562] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 273.284879][T13562] bond7: entered promiscuous mode [ 273.327648][T13562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.497430][T13567] erspan0: left allmulticast mode [ 273.531417][T13573] syzkaller0: entered promiscuous mode [ 273.564586][T13573] syzkaller0: entered allmulticast mode [ 273.746907][T13562] bond7: (slave bridge0): making interface the new active one [ 273.768728][T13562] bridge0: entered promiscuous mode [ 273.786495][T13562] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 273.898163][T13608] tipc: Enabled bearer , priority 0 [ 273.907619][T13602] syzkaller0: entered promiscuous mode [ 273.919563][T13602] syzkaller0: entered allmulticast mode [ 273.987929][T13606] __nla_validate_parse: 5 callbacks suppressed [ 273.987949][T13606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2043'. [ 274.042999][T13602] tipc: Resetting bearer [ 274.142263][T13600] tipc: Resetting bearer [ 274.209783][T13579] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 274.225067][T13600] tipc: Disabling bearer [ 274.307022][T13620] tipc: Enabled bearer , priority 0 [ 274.434246][T13620] syzkaller0: entered promiscuous mode [ 274.441275][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 274.447437][T13620] syzkaller0: entered allmulticast mode [ 274.460666][T13620] tipc: Resetting bearer [ 274.474349][T13619] tipc: Resetting bearer [ 274.726184][T13652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2049'. [ 274.854013][T13658] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2053'. [ 274.998164][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2054'. [ 275.484246][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 276.743415][T13619] tipc: Disabling bearer [ 276.760362][T13623] veth1_macvtap: left promiscuous mode [ 276.975360][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2055'. [ 277.018721][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2057'. [ 277.058021][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 277.060019][T13705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2057'. [ 277.156598][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 277.557114][T13737] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 277.793941][T13755] netlink: 'syz.1.2070': attribute type 2 has an invalid length. [ 277.862494][T13755] netlink: 'syz.1.2070': attribute type 2 has an invalid length. [ 278.078434][T13761] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2072'. [ 278.710934][T13808] syzkaller1: entered promiscuous mode [ 278.741521][T13808] syzkaller1: entered allmulticast mode [ 278.905891][T13825] x_tables: duplicate underflow at hook 1 [ 279.062247][T13832] __nla_validate_parse: 1 callbacks suppressed [ 279.062264][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2085'. [ 279.339522][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'. [ 279.485029][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.673370][T13870] geneve5: entered promiscuous mode [ 279.725968][T13870] geneve5: entered allmulticast mode [ 279.765706][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 279.797674][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 279.900177][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 279.936073][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 280.133807][T13911] syzkaller0: entered promiscuous mode [ 280.195093][T13911] syzkaller0: entered allmulticast mode [ 280.444287][T13927] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 280.567585][T13933] syzkaller0: entered promiscuous mode [ 280.626430][T13933] syzkaller0: entered allmulticast mode [ 280.697906][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 280.738611][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 280.943070][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 280.968926][T13963] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2110'. [ 280.999139][T13967] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2110'. [ 281.188946][T13961] syzkaller0: entered promiscuous mode [ 281.214235][T13961] syzkaller0: entered allmulticast mode [ 284.366688][T14007] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 285.812774][T14014] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 285.832921][T14014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2121'. [ 285.865894][T14012] nbd: couldn't find a device at index 0 [ 285.884519][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 285.969869][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 286.079367][T14017] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2124'. [ 286.134346][T14017] veth0_macvtap: left promiscuous mode [ 286.379418][T14048] syzkaller0: entered promiscuous mode [ 286.416312][T14048] syzkaller0: entered allmulticast mode [ 286.685639][T14066] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 286.729156][T14062] syzkaller0: entered promiscuous mode [ 286.751334][T14062] syzkaller0: entered allmulticast mode [ 287.037354][T14080] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2139'. [ 288.637154][T14083] syzkaller1: entered promiscuous mode [ 288.642838][T14083] syzkaller1: entered allmulticast mode [ 288.708919][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 288.891422][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 288.949536][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 289.008311][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 289.018165][T14106] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 289.027233][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 289.389389][T14132] netlink: 'syz.3.2156': attribute type 9 has an invalid length. [ 289.408726][T14132] netlink: 'syz.3.2156': attribute type 6 has an invalid length. [ 289.429848][T14119] IPVS: Scheduler module ip_vs_sip not found [ 289.555063][T14151] ip6tnl0: Master is either lo or non-ether device [ 289.703168][T14158] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.732575][T14158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.739845][T14158] IPv6: NLM_F_CREATE should be set when creating new route [ 289.766571][T14163] netlink: 'syz.4.2163': attribute type 3 has an invalid length. [ 289.819596][T14169] netlink: 'syz.3.2165': attribute type 6 has an invalid length. [ 289.865722][T14169] netlink: 'syz.3.2165': attribute type 6 has an invalid length. [ 290.247946][T14195] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 290.249004][T14199] netlink: 'syz.1.2173': attribute type 4 has an invalid length. [ 290.433382][T14208] netlink: 'syz.2.2177': attribute type 1 has an invalid length. [ 290.607329][T14223] pim6reg527: entered allmulticast mode [ 290.696990][T14225] syzkaller0: entered promiscuous mode [ 290.704385][T14225] syzkaller0: entered allmulticast mode [ 291.102426][T14254] __nla_validate_parse: 13 callbacks suppressed [ 291.102443][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 292.814212][T14264] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 292.840735][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2193'. [ 292.885482][T14271] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 292.898860][T14264] netlink: 'syz.1.2193': attribute type 1 has an invalid length. [ 292.923233][T14264] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2193'. [ 293.039255][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 293.165662][T14288] erspan0: left promiscuous mode [ 293.249980][T14288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.275934][T14288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.320376][T14288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.332553][T14288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.346418][T14288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.357192][T14288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.369343][T14288] veth1_vlan: left promiscuous mode [ 293.375759][T14288] veth0_vlan: left promiscuous mode [ 293.382632][T14288] veth0_vlan: entered promiscuous mode [ 293.389748][T14288] veth1_vlan: entered promiscuous mode [ 293.397663][T14288] tipc: Resetting bearer [ 293.403545][T14288] tipc: Resetting bearer [ 293.411755][T14288] veth0_macvtap: left promiscuous mode [ 293.418203][T14288] veth0_macvtap: entered promiscuous mode [ 293.425350][T14288] veth1_macvtap: entered promiscuous mode [ 293.431272][T14288] veth1_macvtap: entered allmulticast mode [ 293.443592][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.451792][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.466379][T14288] erspan0: entered promiscuous mode [ 293.472524][T14288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.531919][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.539157][ T6009] bridge0: port 1(bridge_slave_0) entered listening state [ 293.551646][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.558854][ T6009] bridge0: port 2(bridge_slave_1) entered listening state [ 294.367413][T14330] bond7 (unregistering): Released all slaves [ 294.409701][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 294.447846][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2217'. [ 294.474118][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 294.490695][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2217'. [ 294.713705][T14370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2225'. [ 294.906093][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 295.244521][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 295.315634][T14407] ip6t_srh: unknown srh match flags 4000 [ 296.118358][T14458] syzkaller0: entered promiscuous mode [ 296.175491][T14458] syzkaller0: entered allmulticast mode [ 296.287996][T14468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.322885][T14468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.374628][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.425897][T14474] netlink: 'syz.3.2248': attribute type 16 has an invalid length. [ 296.440342][T14474] __nla_validate_parse: 1 callbacks suppressed [ 296.440497][T14474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2248'. [ 296.474118][T14476] batman_adv: batadv0: Adding interface: gretap3 [ 296.482145][T14476] batman_adv: batadv0: The MTU of interface gretap3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.511496][T14476] batman_adv: batadv0: Interface activated: gretap3 [ 296.523937][T14474] veth0_macvtap: entered allmulticast mode [ 296.677885][T14488] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.2251'. [ 296.692905][T14488] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 297.130382][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 297.170116][T14523] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2258'. [ 297.268396][T14527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.322591][T14527] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2259'. [ 297.340742][T14527] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2259'. [ 297.374552][T14536] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 297.392857][T14536] netlink: 'syz.1.2263': attribute type 2 has an invalid length. [ 297.679408][T14554] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 297.744931][T14552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 297.759661][T14552] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.773567][T14552] gretap3: entered promiscuous mode [ 297.780084][T14552] gretap3: entered allmulticast mode [ 298.112422][T14587] FAULT_INJECTION: forcing a failure. [ 298.112422][T14587] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 298.180567][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.1.2273 Not tainted syzkaller #0 PREEMPT(full) [ 298.180594][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 298.180612][T14587] Call Trace: [ 298.180619][T14587] [ 298.180626][T14587] dump_stack_lvl+0xe8/0x150 [ 298.180660][T14587] should_fail_ex+0x40c/0x560 [ 298.180686][T14587] _copy_from_user+0x2d/0xb0 [ 298.180713][T14587] __copy_msghdr+0x390/0x590 [ 298.180745][T14587] ___sys_sendmsg+0x213/0x360 [ 298.180771][T14587] ? __lock_acquire+0x683/0x2cf0 [ 298.180800][T14587] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.180860][T14587] ? __fget_files+0x2a/0x420 [ 298.180884][T14587] ? __fget_files+0x3a2/0x420 [ 298.180916][T14587] __x64_sys_sendmsg+0x1b1/0x290 [ 298.180946][T14587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.180991][T14587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.181012][T14587] do_syscall_64+0x174/0x580 [ 298.181038][T14587] ? trace_irq_disable+0x3b/0x140 [ 298.181063][T14587] ? clear_bhb_loop+0x40/0x90 [ 298.181082][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.181100][T14587] RIP: 0033:0x7f79f7f9de99 [ 298.181116][T14587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.181131][T14587] RSP: 002b:00007f79f8e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.181155][T14587] RAX: ffffffffffffffda RBX: 00007f79f8226180 RCX: 00007f79f7f9de99 [ 298.181167][T14587] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 298.181178][T14587] RBP: 00007f79f8e27090 R08: 0000000000000000 R09: 0000000000000000 [ 298.181188][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.181197][T14587] R13: 00007f79f8226218 R14: 00007f79f8226180 R15: 00007ffc7d5fc108 [ 298.181226][T14587] [ 298.480955][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2280'. [ 298.856241][T14621] netlink: 'syz.2.2285': attribute type 83 has an invalid length. [ 299.451872][T14658] FAULT_INJECTION: forcing a failure. [ 299.451872][T14658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.501282][T14658] CPU: 0 UID: 0 PID: 14658 Comm: syz.2.2296 Not tainted syzkaller #0 PREEMPT(full) [ 299.501310][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 299.501320][T14658] Call Trace: [ 299.501327][T14658] [ 299.501335][T14658] dump_stack_lvl+0xe8/0x150 [ 299.501367][T14658] should_fail_ex+0x40c/0x560 [ 299.501393][T14658] _copy_to_user+0x31/0xb0 [ 299.501423][T14658] simple_read_from_buffer+0xe1/0x170 [ 299.501453][T14658] proc_fail_nth_read+0x1bb/0x230 [ 299.501481][T14658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.501510][T14658] ? rw_verify_area+0x24a/0x4c0 [ 299.501540][T14658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.501564][T14658] vfs_read+0x213/0xa80 [ 299.501596][T14658] ? __pfx___mutex_lock+0x10/0x10 [ 299.501716][T14658] ? __pfx_vfs_read+0x10/0x10 [ 299.501752][T14658] ? __fget_files+0x2a/0x420 [ 299.501782][T14658] ? __fget_files+0x3a2/0x420 [ 299.501806][T14658] ? __fget_files+0x2a/0x420 [ 299.501839][T14658] ksys_read+0x150/0x270 [ 299.501870][T14658] ? __pfx_ksys_read+0x10/0x10 [ 299.501906][T14658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.501927][T14658] do_syscall_64+0x174/0x580 [ 299.501954][T14658] ? trace_irq_disable+0x3b/0x140 [ 299.501978][T14658] ? clear_bhb_loop+0x40/0x90 [ 299.502002][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.502020][T14658] RIP: 0033:0x7f6087b5e6ce [ 299.502038][T14658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.502057][T14658] RSP: 002b:00007f6085df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.502077][T14658] RAX: ffffffffffffffda RBX: 00007f6085df66c0 RCX: 00007f6087b5e6ce [ 299.502091][T14658] RDX: 000000000000000f RSI: 00007f6085df60a0 RDI: 0000000000000008 [ 299.502104][T14658] RBP: 00007f6085df6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.502115][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.502127][T14658] R13: 00007f6087e26218 R14: 00007f6087e26180 R15: 00007fff11037af8 [ 299.502167][T14658] [ 300.020514][T14671] 8021q: VLANs not supported on nlmon0 [ 300.268663][T14697] netlink: 'syz.3.2310': attribute type 21 has an invalid length. [ 300.278084][T14697] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.629866][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2315'. [ 300.649959][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2314'. [ 300.662809][T14717] netlink: 4720 bytes leftover after parsing attributes in process `syz.0.2315'. [ 300.969143][T14735] x_tables: duplicate underflow at hook 1 [ 301.121017][T14753] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 301.175939][T14756] netlink: 'syz.0.2325': attribute type 5 has an invalid length. [ 301.234214][T14762] netlink: zone id is out of range [ 301.259572][T14762] netlink: zone id is out of range [ 301.266408][T14762] netlink: zone id is out of range [ 301.296344][T14762] netlink: zone id is out of range [ 301.313610][T14762] netlink: zone id is out of range [ 301.320913][T14762] netlink: zone id is out of range [ 301.326843][T14762] netlink: zone id is out of range [ 301.332900][T14762] netlink: zone id is out of range [ 301.573807][T14782] Cannot find add_set index 65532 as target [ 301.667227][T14794] netlink: 'syz.0.2336': attribute type 11 has an invalid length. [ 301.707098][T14795] __nla_validate_parse: 4 callbacks suppressed [ 301.707116][T14795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2332'. [ 301.754693][T14795] macvlan0: entered promiscuous mode [ 301.760514][T14795] macvlan0: entered allmulticast mode [ 301.766596][T14795] veth1_vlan: entered allmulticast mode [ 301.798772][T14800] syzkaller0: entered promiscuous mode [ 301.817142][T14800] syzkaller0: entered allmulticast mode [ 301.840858][T14800] bridge_slave_0: left promiscuous mode [ 301.848679][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.863289][T14800] bridge_slave_1: left allmulticast mode [ 301.869364][T14800] bridge_slave_1: left promiscuous mode [ 301.883727][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.920175][T14800] bond0: (slave bond_slave_0): Releasing backup interface [ 301.940932][T14800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.963409][T14800] batman_adv: batadv0: Removing interface: macvtap0 [ 302.294394][T14830] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 302.466501][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2349'. [ 302.873903][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 302.895863][T14873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2355'. [ 303.453469][T14902] lo speed is unknown, defaulting to 1000 [ 303.637095][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 304.124784][T14932] tc_dump_action: action bad kind [ 304.357505][T14958] ksmbd: Unknown IPC event: 1, ignore. [ 304.370500][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2374'. [ 304.703917][T14976] syzkaller0: entered promiscuous mode [ 304.716480][T14976] syzkaller0: entered allmulticast mode [ 304.741667][T14976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 304.773877][T14976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 305.068706][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 305.140282][T15009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2390'. [ 305.226109][T15013] sctp: [Deprecated]: syz.0.2391 (pid 15013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.226109][T15013] Use struct sctp_sack_info instead [ 305.486240][T15032] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.652617][T15042] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 305.894272][T15042] bond11: entered promiscuous mode [ 305.904604][T15042] 8021q: adding VLAN 0 to HW filter on device bond11 [ 306.055405][T15051] bond11: (slave bridge4): making interface the new active one [ 306.067824][T15051] bridge4: entered promiscuous mode [ 306.079895][T15051] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 306.649338][T15104] gtp2: entered promiscuous mode [ 306.665480][T15104] gtp2: entered allmulticast mode [ 306.783305][T15110] netlink: 'syz.4.2412': attribute type 1 has an invalid length. [ 306.817811][T15110] __nla_validate_parse: 8 callbacks suppressed [ 306.817829][T15110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2412'. [ 306.906640][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2416'. [ 307.004530][T15113] netlink: 'syz.0.2416': attribute type 2 has an invalid length. [ 307.145899][T15113] : entered promiscuous mode [ 307.462975][T15144] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 307.519971][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2426'. [ 307.533743][T15148] nbd: must specify at least one socket [ 307.551351][T15151] nbd: must specify at least one socket [ 307.557877][T15144] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 307.570397][T15144] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2426'. [ 307.589640][T15144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2426'. [ 307.816693][T15178] netlink: 'syz.4.2431': attribute type 3 has an invalid length. [ 307.847250][T15180] netlink: 'syz.4.2431': attribute type 3 has an invalid length. [ 307.886048][T15178] netlink: 'syz.4.2431': attribute type 1 has an invalid length. [ 307.913251][T15180] netlink: 'syz.4.2431': attribute type 1 has an invalid length. [ 308.321007][T15218] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2443'. [ 308.593254][T15236] syzkaller0: entered promiscuous mode [ 308.626470][T15236] syzkaller0: entered allmulticast mode [ 308.663618][T15236] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 308.763923][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 308.772249][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 308.896943][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 308.925848][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 309.634571][T15291] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 309.662908][T15291] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2466'. [ 309.720662][T15295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.770343][T15302] netlink: 'syz.4.2470': attribute type 11 has an invalid length. [ 309.991628][T15311] syzkaller0: entered promiscuous mode [ 310.004928][T15311] syzkaller0: entered allmulticast mode [ 310.370792][T15345] tunl0: left promiscuous mode [ 310.400683][T15345] bridge4: port 1(erspan0) entered disabled state [ 310.410881][T15345] ip6_vti0: left promiscuous mode [ 310.432366][T15345] ip6_vti0: left allmulticast mode [ 310.534497][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.579341][ T29] audit: type=1107 audit(1784412046.848:2): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='÷€\°ŠÛ#ÓŒá63á{™Þ(¨ [«D•~cž‘ƒ¦­*pÍ…f>ÄÔ_ˆ%»ç‹1dtmM÷ѽ¿'<ø||èT½#˜Æ¨­J›¢©Ù‡¤/ù¬!ÙtdÜ«íRžw²½|éO‚:3' [ 310.629206][T15345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.640659][T15345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.669143][T15345] veth1_vlan: left allmulticast mode [ 310.675670][T15345] macvlan0: left promiscuous mode [ 310.680716][T15345] macvlan0: left allmulticast mode [ 310.712012][T15345] vlan2: left promiscuous mode [ 310.716839][T15345] bond0: left promiscuous mode [ 310.722756][T15345] bond_slave_0: left promiscuous mode [ 310.728282][T15345] bond_slave_1: left promiscuous mode [ 310.735582][T15345] gretap1: left promiscuous mode [ 310.745455][T15345] vlan3: left allmulticast mode [ 310.750339][T15345] bond0: left allmulticast mode [ 310.755280][T15345] bond_slave_0: left allmulticast mode [ 310.760752][T15345] bond_slave_1: left allmulticast mode [ 310.774089][T15345] bond5: left promiscuous mode [ 310.778887][T15345] bond5: left allmulticast mode [ 310.788889][T15345] vlan4: left allmulticast mode [ 310.794290][T15345] bridge4: left allmulticast mode [ 310.799608][T15345] h: left promiscuous mode [ 310.807321][T15345] batman_adv: batadv0: Interface deactivated: gretap3 [ 310.816626][T15355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2484'. [ 310.835045][T15169] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 310.877368][T15169] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 310.916276][T15169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.945971][T15169] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 310.972403][T15169] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 310.999429][T15169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.010388][T15366] sctp: [Deprecated]: syz.4.2489 (pid 15366) Use of int in maxseg socket option. [ 311.010388][T15366] Use struct sctp_assoc_value instead [ 311.031579][T15169] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 311.048764][T15169] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 311.058752][T15169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.069861][T15362] tipc: Enabled bearer , priority 10 [ 311.089286][T15368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.108144][T15169] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 311.119572][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.129686][T15169] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 311.140720][T15169] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.232849][T15376] vlan5: entered promiscuous mode [ 311.244613][T15376] syz_tun: entered promiscuous mode [ 311.399921][ T29] audit: type=1804 audit(1784412047.668:3): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2495" name="/newroot/517/cgroup.controllers" dev="tmpfs" ino=2652 res=1 errno=0 [ 311.431434][T15383] bridge0: port 1(dummy0) entered blocking state [ 311.440037][T15383] bridge0: port 1(dummy0) entered disabled state [ 311.447147][T15383] dummy0: entered allmulticast mode [ 311.451856][ T29] audit: type=1800 audit(1784412047.668:4): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2495" name="cgroup.controllers" dev="tmpfs" ino=2652 res=0 errno=0 [ 311.462005][T15383] dummy0: entered promiscuous mode [ 311.516323][T15383] bridge0: port 1(dummy0) entered blocking state [ 311.522866][T15383] bridge0: port 1(dummy0) entered forwarding state [ 311.542883][T15394] validate_nla: 1 callbacks suppressed [ 311.542900][T15394] netlink: 'syz.0.2498': attribute type 49 has an invalid length. [ 311.673609][T15394] ip6gretap0: entered promiscuous mode [ 311.688221][T15394] ip6gretap0: entered allmulticast mode [ 311.758247][T15407] syzkaller0: entered allmulticast mode [ 312.195844][ T9813] tipc: Node number set to 264697567 [ 312.210035][T15436] __nla_validate_parse: 1 callbacks suppressed [ 312.210054][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 312.311633][T15430] gre2: entered promiscuous mode [ 312.603483][T15459] netlink: 'syz.1.2513': attribute type 2 has an invalid length. [ 312.985279][T15486] 8021q: VLANs not supported on ip6_vti0 [ 313.125014][T15493] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2520'. [ 313.160679][T15493] syz_tun: entered allmulticast mode [ 313.187468][T15497] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2521'. [ 313.225187][T15493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.382888][T15504] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 313.430461][T15504] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2523'. [ 313.460167][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 313.495907][T15517] sctp: [Deprecated]: syz.2.2526 (pid 15517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.495907][T15517] Use struct sctp_sack_info instead [ 313.587965][T15521] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 313.809039][T15517] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 313.873236][T15522] bond4: (slave gretap1): making interface the new active one [ 313.918037][T15522] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 313.934790][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2534'. [ 313.951553][T15535] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 313.952960][T15544] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2534'. [ 314.007723][T15547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2534'. [ 314.054407][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2534'. [ 314.085946][T15553] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2536'. [ 314.447371][T15580] netlink: 'syz.1.2546': attribute type 1 has an invalid length. [ 314.608829][T15572] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.173150][T15594] veth0_to_bond: entered allmulticast mode [ 315.414589][T15608] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 315.915565][T15631] syzkaller0: entered promiscuous mode [ 315.934583][T15631] syzkaller0: entered allmulticast mode [ 316.369584][T15666] netlink: 'syz.2.2570': attribute type 10 has an invalid length. [ 316.390404][T15666] openvswitch: netlink: Flow key attr not present in new flow. [ 316.691362][T15687] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 316.808337][T15689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.872490][T15689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.980029][T15689] bond5 (unregistering): Released all slaves [ 317.045239][T15707] syzkaller0: entered promiscuous mode [ 317.050881][T15707] syzkaller0: entered allmulticast mode [ 317.090127][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357205][T15726] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.432773][T15731] xt_TCPMSS: Only works on TCP SYN packets [ 317.468670][T15732] xt_TCPMSS: Only works on TCP SYN packets [ 318.073915][T15773] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 318.095384][T15773] __nla_validate_parse: 15 callbacks suppressed [ 318.095402][T15773] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2597'. [ 318.567673][T15801] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 318.599551][T15801] xt_hashlimit: size too large, truncated to 1048576 [ 318.605133][T15805] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2605'. [ 319.079847][T15830] netlink: 'syz.0.2609': attribute type 10 has an invalid length. [ 319.130908][T15830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.230916][T15835] netlink: 'syz.3.2610': attribute type 9 has an invalid length. [ 320.048748][T15885] netlink: 'syz.0.2623': attribute type 21 has an invalid length. [ 320.058197][T15885] netlink: 'syz.0.2623': attribute type 22 has an invalid length. [ 320.066783][T15885] netlink: 'syz.0.2623': attribute type 23 has an invalid length. [ 320.075898][T15885] netlink: 'syz.0.2623': attribute type 25 has an invalid length. [ 320.084056][T15885] netlink: 'syz.0.2623': attribute type 26 has an invalid length. [ 320.092206][T15885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2623'. [ 322.441447][T15925] veth0_to_bond: entered allmulticast mode [ 322.596589][T15932] 8021q: VLANs not supported on lo [ 322.749106][T15937] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 322.899268][T15946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2632'. [ 322.899608][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 322.967678][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 323.039383][T15885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.050537][T15951] syzkaller0: entered promiscuous mode [ 323.063576][T15951] syzkaller0: entered allmulticast mode [ 323.208772][T15958] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2637'. [ 323.334439][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 323.472135][T15964] syzkaller0: entered promiscuous mode [ 323.492720][T15964] syzkaller0: entered allmulticast mode [ 323.838212][T15989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.017392][T15993] batman_adv: batadv0: Adding interface: gretap1 [ 324.029380][T15993] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 324.036587][T15999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2653'. [ 324.050568][T15993] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 324.118143][T15993] netlink: 'syz.0.2650': attribute type 2 has an invalid length. [ 324.121233][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.127611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.133165][ C0] bridge0: topology change detected, propagating [ 324.151819][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.159060][ C0] bridge0: topology change detected, propagating [ 324.301309][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2654'. [ 324.336153][T16006] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 324.353574][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 324.429126][T16012] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 324.446662][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 325.016990][T16024] gretap2: entered promiscuous mode [ 325.083332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.095715][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 325.359234][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 325.616613][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 325.682617][T16075] SET target dimension over the limit! [ 328.552718][T16078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.766689][T16115] ipt_ECN: cannot use operation on non-tcp rule [ 328.783863][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2680'. [ 328.833113][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 328.852374][T16120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2677'. [ 329.017794][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 329.052713][T16126] syzkaller0: entered promiscuous mode [ 329.058385][T16126] syzkaller0: entered allmulticast mode [ 329.396501][T16163] netlink: 'syz.1.2691': attribute type 8 has an invalid length. [ 329.429944][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 329.488824][T16169] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 329.660046][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 329.711310][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 329.712717][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 329.787872][T16183] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 329.815348][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 329.834637][T16184] syzkaller0: entered promiscuous mode [ 329.850437][T16184] syzkaller0: entered allmulticast mode [ 330.225325][T16196] IPVS: set_ctl: invalid protocol: 0 172.20.20.54:20004 [ 330.308378][T16188] netlink: 'syz.3.2701': attribute type 29 has an invalid length. [ 330.329328][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 330.457277][T16203] syzkaller0: entered promiscuous mode [ 330.485148][T16203] syzkaller0: entered allmulticast mode [ 331.236695][T16264] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 332.376368][T16309] netlink: 'syz.3.2732': attribute type 39 has an invalid length. [ 332.497363][T16316] netlink: 'syz.2.2735': attribute type 16 has an invalid length. [ 332.513721][T16316] netlink: 'syz.2.2735': attribute type 17 has an invalid length. [ 332.573773][T16322] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 332.702753][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.728547][T16316] veth0_to_bond: left allmulticast mode [ 332.786436][T16316] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 332.837507][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.844755][T15170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.570688][T16373] syzkaller0: entered allmulticast mode [ 333.599954][T16373] geneve3: entered promiscuous mode [ 333.613511][T16373] geneve3: entered allmulticast mode [ 333.651256][T15170] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.670044][T15170] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.679987][T15170] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.689537][T15170] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 334.423169][T16383] __nla_validate_parse: 8 callbacks suppressed [ 334.423182][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 334.439718][T16383] raw_sendmsg: syz.2.2752 forgot to set AF_INET. Fix it! [ 334.527040][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 335.443574][T16317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.638226][T16388] atomic_op ffff8880323af998 conn xmit_atomic 0000000000000000 [ 335.765076][T16394] bond9: option fail_over_mac: invalid value (16) [ 335.786989][T16394] bond9 (unregistering): Released all slaves [ 335.989040][T16399] bond9: option fail_over_mac: invalid value (16) [ 336.018024][T16399] bond9 (unregistering): Released all slaves [ 336.313577][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 336.393041][T16415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2760'. [ 336.414208][T16419] syzkaller1: entered promiscuous mode [ 336.432704][T16419] syzkaller1: entered allmulticast mode [ 336.717790][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 336.887838][T16442] Unsupported ieee802154 address type: 0 [ 337.085886][T16448] netlink: 'syz.3.2769': attribute type 1 has an invalid length. [ 337.246959][T16448] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.351298][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 337.554419][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2772'. [ 337.562495][T16465] netlink: 'syz.3.2773': attribute type 1 has an invalid length. [ 337.604902][T16465] netlink: 'syz.3.2773': attribute type 2 has an invalid length. [ 337.918476][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2777'. [ 338.061960][T16488] netlink: 'syz.3.2780': attribute type 1 has an invalid length. [ 338.085863][T16488] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2780'. [ 338.380077][T16498] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 338.976253][T16523] netlink: 'syz.2.2792': attribute type 83 has an invalid length. [ 339.028809][T16533] xt_nfacct: accounting object `syz1' does not exist [ 339.200302][T16543] tipc: Enabled bearer , priority 0 [ 339.320804][T16543] syzkaller0: entered promiscuous mode [ 339.329698][T16543] syzkaller0: entered allmulticast mode [ 339.337024][T16552] netlink: 'syz.4.2797': attribute type 3 has an invalid length. [ 339.346472][T16543] tipc: Resetting bearer [ 339.500005][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 339.546404][T16561] ieee802154 phy0 wpan0: encryption failed: -90 [ 339.578448][T15165] tipc: Resetting bearer [ 339.859560][T16577] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2809'. [ 339.888820][T16579] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2810'. [ 339.907515][T16577] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2809'. [ 339.948024][T16577] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2809'. [ 340.008028][T16536] tipc: Resetting bearer [ 341.900022][T16536] tipc: Disabling bearer [ 342.018550][T16600] netlink: 'syz.0.2817': attribute type 1 has an invalid length. [ 342.094108][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2818'. [ 342.143813][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2817'. [ 342.160974][T16600] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.190144][T16605] vlan2: entered promiscuous mode [ 342.197620][T16605] bond11: entered promiscuous mode [ 342.204531][T16605] vlan2: entered allmulticast mode [ 342.210316][T16605] bond11: entered allmulticast mode [ 342.274638][T16609] bond11: (slave bridge7): making interface the new active one [ 342.319151][T16609] bridge7: entered promiscuous mode [ 342.333287][T16609] bridge7: entered allmulticast mode [ 342.353044][T16609] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 342.564851][T16629] netlink: 'syz.0.2822': attribute type 29 has an invalid length. [ 342.581354][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 342.882106][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2828'. [ 343.010577][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2828'. [ 343.208475][T16645] "syz.0.2826" (16645) uses obsolete ecb(arc4) skcipher [ 343.349063][T16632] netlink: 'syz.4.2823': attribute type 4 has an invalid length. [ 343.349100][T16670] batadv_slave_1: entered promiscuous mode [ 343.382310][T16670] batadv_slave_1: left promiscuous mode [ 343.400548][T16671] gre2: entered promiscuous mode [ 343.449997][T16682] netlink: 'syz.0.2834': attribute type 83 has an invalid length. [ 343.923730][T16710] netlink: 'syz.0.2842': attribute type 29 has an invalid length. [ 343.973751][T16710] netlink: 'syz.0.2842': attribute type 29 has an invalid length. [ 344.488805][T16735] team0: Port device dummy0 removed [ 344.551766][T16735] bond1: (slave veth0_to_bond): Releasing backup interface [ 344.582298][T16735] bond0: (slave bond_slave_0): Releasing backup interface [ 344.626184][T16735] bond0: (slave bond_slave_1): Releasing backup interface [ 344.649767][T16754] __nla_validate_parse: 6 callbacks suppressed [ 344.649785][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'. [ 344.672420][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 344.697962][T16756] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 344.709414][T16735] team0: Port device team_slave_0 removed [ 344.744720][T16735] team0: Port device team_slave_1 removed [ 344.764742][T16735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.795372][T16735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.817936][T16735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.832750][T16735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.844405][T16735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 344.968547][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2857'. [ 344.969552][T16762] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 344.995021][T16762] bond7: option packets_per_slave: allowed values 0 - 65535 [ 345.025481][T16762] bond7 (unregistering): Released all slaves [ 345.038633][T16768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2856'. [ 345.349319][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 345.373863][T16789] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2864'. [ 345.607199][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 346.206751][T16840] netlink: 'syz.0.2881': attribute type 21 has an invalid length. [ 346.218024][T16840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2881'. [ 346.549590][T16854] x_tables: duplicate underflow at hook 2 [ 346.579718][T16856] x_tables: duplicate underflow at hook 2 [ 346.784212][T16867] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2889'. [ 347.033352][T16873] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2892'. [ 347.154412][T16880] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.336080][T16891] xt_hashlimit: size too large, truncated to 1048576 [ 347.644623][T16902] geneve4: entered allmulticast mode [ 347.732697][T16905] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 347.898814][T16905] 8021q: adding VLAN 0 to HW filter on device bond13 [ 348.088459][T16913] veth7: entered allmulticast mode [ 348.127288][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.140430][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.153417][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.162090][T16913] bond13: (slave veth7): Enslaving as an active interface with a down link [ 348.185604][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.199434][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.209356][T16916] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 348.278506][T16924] bond13: entered promiscuous mode [ 348.308474][T16924] bond13: entered allmulticast mode [ 348.775485][T16931] lo speed is unknown, defaulting to 1000 [ 348.800358][T16921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.837912][T16943] debugfs: '1ùà^!' already exists in 'ieee80211' [ 349.307013][T16978] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 349.639081][T16992] nftables ruleset with unbound chain [ 349.702087][T17013] __nla_validate_parse: 6 callbacks suppressed [ 349.702105][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 349.978297][T16931] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.005295][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.025604][T16931] bridge_slave_0: entered allmulticast mode [ 350.037605][T16931] bridge_slave_0: entered promiscuous mode [ 350.188566][T16931] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.215781][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.252230][T16931] bridge_slave_1: entered allmulticast mode [ 350.282075][ T5640] Bluetooth: hci5: command tx timeout [ 350.293044][T16931] bridge_slave_1: entered promiscuous mode [ 350.499719][T15161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.550061][T15161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.649422][T16931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.718087][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2928'. [ 350.732829][T16931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.927372][T15161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.938407][T15161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.010345][T16931] team0: Port device team_slave_0 added [ 351.036811][T16931] team0: Port device team_slave_1 added [ 351.186364][T17070] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 351.221938][T17070] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2931'. [ 351.224881][T15161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.266789][T17077] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 351.273320][T17077] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.286577][T15161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.502450][T16931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.523501][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.631453][T16931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.653580][T16931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.663201][T16931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.690656][T16931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.875160][T16931] hsr_slave_0: entered promiscuous mode [ 351.893362][T16931] hsr_slave_1: entered promiscuous mode [ 351.916906][T16931] debugfs: 'hsr0' already exists in 'hsr' [ 351.931400][T16931] Cannot create hsr debugfs directory [ 352.097470][T17103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2942'. [ 352.361572][ T5640] Bluetooth: hci5: command tx timeout [ 352.594915][T15161] bridge_slave_1: left allmulticast mode [ 352.634574][T15161] bridge_slave_1: left promiscuous mode [ 352.660625][T15161] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.740574][T17132] SET target dimension over the limit! [ 352.760631][T15161] bridge_slave_0: left allmulticast mode [ 352.779821][T15161] bridge_slave_0: left promiscuous mode [ 352.798682][T17142] SET target dimension over the limit! [ 352.806926][T15161] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.088964][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2954'. [ 353.845522][T15161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.855972][T15161] bond0 (unregistering): Released all slaves [ 353.870925][T15161] bond1 (unregistering): Released all slaves [ 353.885526][T15161] bond2 (unregistering): Released all slaves [ 353.901397][T15161] bond3 (unregistering): Released all slaves [ 353.927854][T15161] bond4 (unregistering): Released all slaves [ 353.941718][T15161] bond5 (unregistering): Released all slaves [ 353.959443][T15161] bond6 (unregistering): Released all slaves [ 354.066775][T17168] tipc: Resetting bearer [ 354.336061][T17168] bridge0: port 1(dummy0) entered disabled state [ 354.342630][T17168] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.453999][ T5640] Bluetooth: hci5: command tx timeout [ 354.595145][T17168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.626268][T17168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.024764][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 355.106987][T15161] tipc: Disabling bearer [ 355.134584][T15161] tipc: Disabling bearer [ 355.145544][T17192] netlink: 'syz.0.2959': attribute type 2 has an invalid length. [ 355.149211][T15161] tipc: Left network mode [ 355.199882][ T6007] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.242387][ T6007] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.276558][ T6007] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.297711][ T6007] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.317873][ T6007] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.327704][ T6007] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.354743][ T6007] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.368538][ T6007] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.371325][T17199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.378276][ T6007] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.378384][ T6007] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.378404][ T6007] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.378423][ T6007] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.421196][T17199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.747141][T17216] pim6reg: entered allmulticast mode [ 356.344767][T17241] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 356.505515][T17246] 0: reclassify loop, rule prio 0, protocol 700 [ 356.521365][ T5640] Bluetooth: hci5: command tx timeout [ 356.595268][T17248] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2971'. [ 356.648613][T17252] vcan0: entered promiscuous mode [ 356.669116][T17252] vcan0: entered allmulticast mode [ 356.750429][T17230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.769047][T17230] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 356.814447][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 356.851611][T17230] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.871654][T17230] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 356.905794][T17230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.943583][T17230] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 357.027502][T17230] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 357.035626][T17230] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 357.273793][T17269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2977'. [ 357.329244][T15161] hsr_slave_0: left promiscuous mode [ 357.356712][T15161] hsr_slave_1: left promiscuous mode [ 357.371962][T15161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.380033][T15161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.397633][T15161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.410803][T15161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.444636][T15161] veth1_macvtap: left allmulticast mode [ 357.450305][T15161] veth1_macvtap: left promiscuous mode [ 357.458619][T15161] veth0_macvtap: left promiscuous mode [ 357.465695][T15161] veth1_vlan: left promiscuous mode [ 357.471657][T15161] veth0_vlan: left promiscuous mode [ 357.626371][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 358.409086][T17306] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 358.464123][T17309] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 358.494523][T17309] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2985'. [ 358.797413][T16931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.813069][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 358.853820][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.929929][T16931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.982619][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.010698][T16931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.094207][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.123848][T16931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.127643][T15161] IPVS: stop unused estimator thread 0... [ 359.183330][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.296859][T17339] tc action pedit offset 0 out of bounds [ 359.735227][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.749656][T17376] netlink: 'syz.0.3000': attribute type 1 has an invalid length. [ 359.771534][T17376] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3000'. [ 359.788582][T16931] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.848880][T15170] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.856088][T15170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.908886][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.916097][T15170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.056180][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 360.085873][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 360.117175][T17394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3003'. [ 361.452116][T17459] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 361.745957][T16931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.820368][T17481] __nla_validate_parse: 1 callbacks suppressed [ 361.820384][T17481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'. [ 361.940169][T17483] syzkaller0: entered promiscuous mode [ 361.971713][T17483] syzkaller0: entered allmulticast mode [ 361.991927][T17488] 0: reclassify loop, rule prio 0, protocol 800 [ 362.032421][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 362.119242][T17483] xfrm1: entered promiscuous mode [ 362.127607][T17491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3029'. [ 362.138480][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'. [ 362.158931][T17483] xfrm1: entered allmulticast mode [ 362.209216][T17497] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 362.307605][T17501] ip6gre1: entered promiscuous mode [ 362.313395][T17501] ip6gre1: entered allmulticast mode [ 362.395633][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 362.451896][T17510] netlink: 'syz.1.3033': attribute type 3 has an invalid length. [ 362.494323][T17510] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 362.634547][T17517] netlink: 'syz.3.3035': attribute type 1 has an invalid length. [ 362.638355][T16931] veth0_vlan: entered promiscuous mode [ 362.718383][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3038'. [ 362.723461][T17517] bond14: entered promiscuous mode [ 362.733196][T17517] 8021q: adding VLAN 0 to HW filter on device bond14 [ 362.751924][T17519] 8021q: adding VLAN 0 to HW filter on device bond14 [ 362.758988][T17519] bond14: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 362.777847][T17519] bond14: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 362.791263][T17519] bond14: (slave ip6gre3): making interface the new active one [ 362.798961][T17519] ip6gre3: entered promiscuous mode [ 362.806345][T17519] bond14: (slave ip6gre3): Enslaving as an active interface with an up link [ 362.869682][T16931] veth1_vlan: entered promiscuous mode [ 363.045331][T16931] veth0_macvtap: entered promiscuous mode [ 363.106718][T17538] netlink: 'syz.2.3043': attribute type 21 has an invalid length. [ 363.109437][T16931] veth1_macvtap: entered promiscuous mode [ 363.128440][T17541] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 363.142441][T17538] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3043'. [ 363.215107][T16931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.246545][T16931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.308838][T15170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.324848][T15170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.342982][T15170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.368691][T15170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.475175][T17554] syzkaller0: entered promiscuous mode [ 363.500916][T17554] syzkaller0: entered allmulticast mode [ 363.700466][T15165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.729804][T15165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.833203][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.856547][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.924274][T17573] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 363.956860][T17573] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 363.971352][T17573] 0ªX¹¦Dö»: entered allmulticast mode [ 363.986409][T17573] 0ªX¹¦Dö»: entered promiscuous mode [ 364.003468][T17572] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 364.026963][T17572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.174214][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3052'. [ 364.288392][T17575] veth11: entered promiscuous mode [ 364.313469][T17585] x_tables: duplicate underflow at hook 3 [ 364.325799][T17586] x_tables: duplicate underflow at hook 3 [ 364.423971][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.437244][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.449288][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.466108][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.476800][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.727641][T17598] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 364.786599][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3059'. [ 365.071879][T17612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 365.072171][T17619] netlink: 'syz.4.3063': attribute type 11 has an invalid length. [ 365.160512][ T5623] syz_tun (unregistering): left allmulticast mode [ 365.226034][T17621] bond15: Unable to set peer notification delay as MII monitoring is disabled [ 365.238317][T17621] bond15 (unregistering): Released all slaves [ 365.489115][T17639] xt_hashlimit: overflow, try lower: 3/0 [ 365.762787][T17587] lo speed is unknown, defaulting to 1000 [ 365.780748][T17651] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3071'. [ 365.792044][T17652] netlink: 'syz.4.3070': attribute type 23 has an invalid length. [ 366.178693][T17673] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 366.333111][T17673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 366.522637][ T5630] Bluetooth: hci1: command tx timeout [ 367.312591][T17709] tipc: Enabling of bearer rejected, failed to enable media [ 367.445201][T17587] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.453073][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.460514][T17726] __nla_validate_parse: 5 callbacks suppressed [ 367.460530][T17726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3087'. [ 367.496405][T17587] bridge_slave_0: entered allmulticast mode [ 367.524039][T17587] bridge_slave_0: entered promiscuous mode [ 367.608248][T17587] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.624375][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.650725][T17587] bridge_slave_1: entered allmulticast mode [ 367.662395][T17587] bridge_slave_1: entered promiscuous mode [ 367.802582][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 367.808632][T17587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.813116][T17746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.868571][T17587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.014418][T17587] team0: Port device team_slave_0 added [ 368.040483][T17587] team0: Port device team_slave_1 added [ 368.133125][T17587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.140236][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.171784][T17587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.201856][T17587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.229614][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.256539][T17587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.315997][T17774] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 368.379057][T17587] hsr_slave_0: entered promiscuous mode [ 368.385826][T17587] hsr_slave_1: entered promiscuous mode [ 368.392324][T17587] debugfs: 'hsr0' already exists in 'hsr' [ 368.398128][T17587] Cannot create hsr debugfs directory [ 368.602248][ T5630] Bluetooth: hci1: command tx timeout [ 368.636855][T17778] openvswitch: netlink: IP tunnel dst address not specified [ 368.645550][T17778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.888203][T17787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.889007][T17788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.914575][T17761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.944750][T17780] netlink: 'syz.1.3103': attribute type 11 has an invalid length. [ 368.970915][T17780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3103'. [ 369.188304][T17794] tc_dump_action: action bad kind [ 369.425546][T17802] syzkaller0: entered promiscuous mode [ 369.441339][T17802] syzkaller0: entered allmulticast mode [ 369.468346][T17805] sock: sock_set_timeout: `syz.0.3111' (pid 17805) tries to set negative timeout [ 369.528913][T17587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.548202][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.571596][T17587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.603973][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.614749][T17587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.646375][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.678080][T17802] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3110'. [ 369.701253][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 369.758879][T17587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.827885][T17587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.086001][T17837] bridge9: entered promiscuous mode [ 370.101462][T17837] bridge9: entered allmulticast mode [ 370.167448][T17587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.280661][T17587] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.382578][T15163] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.389762][T15163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.409816][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.417024][T15163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.568728][T17859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.584123][T17860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3121'. [ 370.623511][T17860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3121'. [ 370.681578][ T5630] Bluetooth: hci1: command tx timeout [ 371.065023][T17881] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 371.374097][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 371.400440][T17894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.708821][T17919] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 371.738617][T17919] tipc: Enabling of bearer rejected, already enabled [ 371.813103][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 371.857918][T17924] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3136'. [ 371.895202][T17927] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 371.986954][T17587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.206820][T17587] veth0_vlan: entered promiscuous mode [ 372.237821][T17587] veth1_vlan: entered promiscuous mode [ 372.374151][T17587] veth0_macvtap: entered promiscuous mode [ 372.418964][T17587] veth1_macvtap: entered promiscuous mode [ 372.527705][T17587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.565728][T17587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.613390][T15161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.659394][T15161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.710664][T15161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.758012][T15161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.773426][ T5630] Bluetooth: hci1: command tx timeout [ 373.042736][T15170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.073326][T15170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.200864][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.239003][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.250672][T17985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.298587][T17987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.315294][T17984] xt_l2tp: v2 doesn't support IP mode [ 373.729749][T18012] __nla_validate_parse: 3 callbacks suppressed [ 373.729771][T18012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3165'. [ 373.994394][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.019928][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.030281][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.044719][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.068989][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.890264][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 374.892779][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 375.212101][T18023] lo speed is unknown, defaulting to 1000 [ 375.304380][T18085] netlink: 'syz.2.3180': attribute type 39 has an invalid length. [ 375.360891][T18089] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3182'. [ 375.507872][T18094] netlink: 'syz.1.3184': attribute type 1 has an invalid length. [ 375.905167][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3188'. [ 375.985938][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'. [ 376.131658][ T5630] Bluetooth: hci0: command tx timeout [ 376.250039][T18136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3191'. [ 376.920350][T18136] syzkaller0: entered promiscuous mode [ 376.926892][T18136] syzkaller0: entered allmulticast mode [ 376.939044][T18023] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.950634][T18023] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.962439][T18023] bridge_slave_0: entered allmulticast mode [ 376.980953][T18023] bridge_slave_0: entered promiscuous mode [ 376.999758][T18023] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.031934][T18023] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.040806][T18023] bridge_slave_1: entered allmulticast mode [ 377.065384][T18023] bridge_slave_1: entered promiscuous mode [ 377.090109][T18176] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 377.136208][T18178] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3197'. [ 378.211201][ T5630] Bluetooth: hci0: command tx timeout [ 378.524371][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.571684][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3197'. [ 379.758593][T18023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.824965][T18023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.073266][T18023] team0: Port device team_slave_0 added [ 380.130659][T18023] team0: Port device team_slave_1 added [ 380.281692][ T5630] Bluetooth: hci0: command tx timeout [ 380.307746][T18233] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3205'. [ 380.323999][T18023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.346528][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.387043][T18023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.530158][T18023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.580498][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.673580][T18023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.967522][T18023] hsr_slave_0: entered promiscuous mode [ 381.017908][T18023] hsr_slave_1: entered promiscuous mode [ 381.057540][T18023] debugfs: 'hsr0' already exists in 'hsr' [ 381.095039][T18023] Cannot create hsr debugfs directory [ 381.758958][T18311] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 381.772597][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 381.793135][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 381.824458][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 382.112984][T18325] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3226'. [ 382.207967][T18023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.260908][T18023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.315324][T18023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 382.353335][T18023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 382.375092][ T5630] Bluetooth: hci0: command tx timeout [ 382.476392][T18352] syzkaller0: entered promiscuous mode [ 382.489423][T18352] syzkaller0: entered allmulticast mode [ 382.568741][T18023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.596050][T18023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.632781][T18023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 382.663067][T18358] x_tables: unsorted underflow at hook 2 [ 382.682679][T18023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 382.837453][T18364] syzkaller0: entered promiscuous mode [ 382.848220][T18364] syzkaller0: entered allmulticast mode [ 382.889631][T18023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.921352][T18023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.967159][T18023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.012333][T18023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 383.100577][T18380] netlink: 'syz.1.3232': attribute type 1 has an invalid length. [ 383.154972][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3232'. [ 383.212464][T18023] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 383.259456][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 383.299746][T18023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.312498][T18387] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 383.320411][T18023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.335409][T18023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 383.345944][T18023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 383.372279][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 383.433704][T18380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.546756][T18387] 8021q: adding VLAN 0 to HW filter on device bond15 [ 383.797423][T18413] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 384.007995][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 384.074947][T18413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.095529][T18417] bond1: (slave veth0_to_bond): making interface the new active one [ 384.153423][T18417] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 384.168159][T18420] bond1: entered promiscuous mode [ 384.175144][T18420] veth0_to_bond: entered promiscuous mode [ 384.181519][T18420] bond1: entered allmulticast mode [ 384.186882][T18420] veth0_to_bond: entered allmulticast mode [ 384.464408][T18023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.495907][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.513325][T18023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.546626][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.577267][T18023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.615449][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.639072][T18023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.650205][T18451] __nla_validate_parse: 2 callbacks suppressed [ 384.650222][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.696429][T18023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.811812][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.838330][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.857215][T18469] sctp: [Deprecated]: syz.2.3248 (pid 18469) Use of int in maxseg socket option. [ 384.857215][T18469] Use struct sctp_assoc_value instead [ 384.929972][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.954920][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.973176][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 384.995245][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 385.032182][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 385.060979][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 385.118585][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 385.194533][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.276920][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.356500][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.363726][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.418363][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.425578][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.444961][T18489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.452312][T18489] IPv6: NLM_F_CREATE should be set when creating new route [ 385.459588][T18489] IPv6: NLM_F_CREATE should be set when creating new route [ 385.468326][T18489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.660797][T18502] gretap1: entered promiscuous mode [ 385.671451][T18502] batman_adv: batadv0: Adding interface: gretap1 [ 385.679187][T18502] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.706602][T18502] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 385.912198][T18023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.965592][T18023] veth0_vlan: entered promiscuous mode [ 385.980103][T18023] veth1_vlan: entered promiscuous mode [ 386.010685][T18023] veth0_macvtap: entered promiscuous mode [ 386.020368][T18023] veth1_macvtap: entered promiscuous mode [ 386.039579][T18023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.074423][T18023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.092232][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.105663][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.117218][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.128449][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.334310][T18479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.644297][T18520] vxcan1: entered allmulticast mode [ 388.672573][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.702618][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.797542][T18533] netlink: 'syz.3.3264': attribute type 2 has an invalid length. [ 388.824028][T18533] netlink: 'syz.3.3264': attribute type 2 has an invalid length. [ 388.837599][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.877273][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.205471][T18546] lo speed is unknown, defaulting to 1000 [ 389.568429][T18574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 389.902028][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.916041][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.925029][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.938656][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.953950][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.206670][T18600] __nla_validate_parse: 59 callbacks suppressed [ 390.206693][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 390.397003][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3279'. [ 390.567027][T18612] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3281'. [ 392.056756][ T5630] Bluetooth: hci2: command tx timeout [ 392.730196][T18632] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 392.779771][T18632] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3284'. [ 392.806778][T15165] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.125789][T15165] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.284046][T18592] lo speed is unknown, defaulting to 1000 [ 393.319378][T15165] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.436836][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 393.460225][T15165] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.479159][T18667] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.503339][T18669] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 393.528116][T18667] netlink: 'syz.0.3294': attribute type 1 has an invalid length. [ 393.634222][T18667] netlink: 'syz.0.3294': attribute type 4 has an invalid length. [ 393.680336][T18680] openvswitch: netlink: Unknown key attributes 20 [ 393.708452][T18667] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3294'. [ 394.060687][T18692] batman_adv: batadv0: Adding interface: bond0 [ 394.086535][T18692] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.131880][ T5630] Bluetooth: hci2: command tx timeout [ 394.223835][T18692] batman_adv: batadv0: Interface activated: bond0 [ 394.365502][T15165] pim6reg: left allmulticast mode [ 394.397643][T15165] pim6reg527: left allmulticast mode [ 394.676046][T15165] bond14 (unregistering): (slave ip6gre3): Releasing backup interface [ 394.704975][T15165] ip6gre3 (unregistering): left promiscuous mode [ 395.048784][T15165] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 395.059789][T15165] bridge4 (unregistering): left promiscuous mode [ 395.074355][T15165] bond0 (unregistering): Released all slaves [ 395.108178][T15165] bond1 (unregistering): Released all slaves [ 395.132108][T15165] bond2 (unregistering): Released all slaves [ 395.146549][T15165] bond3 (unregistering): Released all slaves [ 395.160373][T15165] bond4 (unregistering): Released all slaves [ 395.186173][T15165] bond5 (unregistering): Released all slaves [ 395.200394][T15165] bond6 (unregistering): Released all slaves [ 395.216354][T15165] bond7 (unregistering): Released all slaves [ 395.240177][T15165] bond8 (unregistering): Released all slaves [ 395.259823][T15165] bond9 (unregistering): Released all slaves [ 395.280133][T15165] bond10 (unregistering): Released all slaves [ 395.317899][T15165] bond11 (unregistering): Released all slaves [ 395.332470][T15165] bond12 (unregistering): Released all slaves [ 395.347136][T15165] bond13 (unregistering): (slave veth7): Releasing active interface [ 395.357333][T15165] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 395.367805][T15165] bond13 (unregistering): Released all slaves [ 395.383395][T15165] bond14 (unregistering): Released all slaves [ 395.397287][T15165] bond15 (unregistering): Released all slaves [ 395.475115][T18702] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.482833][T18702] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.670766][T18702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.684558][T18702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.799238][ T6007] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.818430][ T6007] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.030298][ T6007] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.060226][ T6007] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.080961][T15165] tipc: Disabling bearer [ 396.087725][T15165] tipc: Left network mode [ 396.123707][T18730] macsec1: entered promiscuous mode [ 396.140925][T18730] batadv0: entered promiscuous mode [ 396.149156][T18730] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 396.177047][T18730] batadv0: left promiscuous mode [ 396.202666][ T5630] Bluetooth: hci2: command tx timeout [ 396.447764][T18751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3311'. [ 396.513028][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 397.019491][T18592] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.055364][T18592] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.079779][T18592] bridge_slave_0: entered allmulticast mode [ 397.136523][T18592] bridge_slave_0: entered promiscuous mode [ 397.217033][T18592] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.246556][T18592] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.272831][T18592] bridge_slave_1: entered allmulticast mode [ 397.309068][T18592] bridge_slave_1: entered promiscuous mode [ 397.502245][T18592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.515231][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 397.550308][T18592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.822000][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.869184][T18826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3324'. [ 397.914226][T18821] geneve2: entered promiscuous mode [ 398.281451][ T5630] Bluetooth: hci2: command tx timeout [ 398.347826][T18592] team0: Port device team_slave_0 added [ 398.362783][T15163] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 42142 - 0 [ 398.383696][T15160] smbdirect: ib_dev[syú2] removed [ 398.390459][T15163] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 42142 - 0 [ 398.403572][T18819] syzkaller1: entered promiscuous mode [ 398.416706][T18819] syzkaller1: entered allmulticast mode [ 398.459412][T18592] team0: Port device team_slave_1 added [ 398.477009][T15163] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 42142 - 0 [ 398.498671][T15163] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 42142 - 0 [ 398.615606][T18592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.640826][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.679405][T18592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.788575][T18592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.827741][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.970846][T18592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.975471][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 399.061613][T18868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 399.167556][T15165] IPVS: stop unused estimator thread 0... [ 399.177592][T18592] hsr_slave_0: entered promiscuous mode [ 399.199520][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3332'. [ 399.202223][T18592] hsr_slave_1: entered promiscuous mode [ 399.248086][T18592] debugfs: 'hsr0' already exists in 'hsr' [ 399.261869][T18592] Cannot create hsr debugfs directory [ 399.276457][T18861] only policy match revision 0 supported [ 399.276477][T18861] unable to load match [ 399.621381][T18893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3337'. [ 399.796167][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 399.877936][T18902] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 399.920641][T18899] netlink: 'syz.0.3340': attribute type 74 has an invalid length. [ 399.975231][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 400.100605][T18907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3341'. [ 400.120504][T18907] tipc: Enabled bearer , priority 10 [ 400.182917][T18914] netlink: 'syz.2.3344': attribute type 1 has an invalid length. [ 400.389918][T18929] x_tables: duplicate underflow at hook 1 [ 400.571723][T18927] syzkaller0: entered promiscuous mode [ 400.578874][T18927] syzkaller0: entered allmulticast mode [ 401.515123][T18983] __nla_validate_parse: 3 callbacks suppressed [ 401.515141][T18983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 401.621443][T18592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.646130][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.667546][T18592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.682483][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.768477][T18999] netlink: 'syz.0.3362': attribute type 11 has an invalid length. [ 401.779405][T18999] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3362'. [ 401.795118][T18998] netlink: 'syz.0.3362': attribute type 11 has an invalid length. [ 401.810403][T18592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.822802][T18998] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3362'. [ 401.836755][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.909610][T18592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.977187][T18592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.012528][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 402.100618][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 402.384277][T19023] syzkaller1: entered promiscuous mode [ 402.409007][T19023] syzkaller1: entered allmulticast mode [ 402.545785][T18592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.564189][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'. [ 402.683608][T18592] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.712403][T19040] netlink: 'syz.1.3368': attribute type 23 has an invalid length. [ 402.812908][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.820107][T15160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.100229][T15165] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.107461][T15165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.472265][T19071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'. [ 403.771738][T19079] netlink: 'syz.0.3378': attribute type 13 has an invalid length. [ 404.029890][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3380'. [ 404.126761][T19095] netlink: 'syz.2.3381': attribute type 1 has an invalid length. [ 404.347821][T19095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.513254][T19103] bond2: (slave geneve3): making interface the new active one [ 404.568740][T19103] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 404.720766][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 404.792663][T19119] can: request_module (can-proto-3) failed. [ 404.962181][T19133] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3386'. [ 405.008768][T19136] netlink: 'syz.2.3388': attribute type 13 has an invalid length. [ 405.480369][T19141] netlink: 'syz.4.3389': attribute type 2 has an invalid length. [ 405.515179][T19154] ip6tnl0: Caught tx_queue_len zero misconfig [ 405.549894][T19154] sch_fq: defrate 0 ignored. [ 405.580794][T19151] syzkaller0: entered promiscuous mode [ 405.631903][T19151] syzkaller0: entered allmulticast mode [ 405.850642][T18592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.957006][T15170] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.028463][T15170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.060897][T15170] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.087347][T15170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.269700][T18592] veth0_vlan: entered promiscuous mode [ 406.285739][T19190] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.395797][T18592] veth1_vlan: entered promiscuous mode [ 406.594296][T18592] veth0_macvtap: entered promiscuous mode [ 406.643465][T19201] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.677980][T18592] veth1_macvtap: entered promiscuous mode [ 406.726078][T19207] __nla_validate_parse: 4 callbacks suppressed [ 406.726096][T19207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3401'. [ 406.787170][T18592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.827083][T18592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.870948][T15165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.901760][T15165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.955300][T15165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.000208][T15165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.080711][T19213] debugfs: '1ùà^!' already exists in 'ieee80211' [ 407.455541][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.514107][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.650826][T15163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.703021][T15163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.735051][T19239] netlink: 'syz.1.3412': attribute type 29 has an invalid length. [ 407.745528][T19241] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3413'. [ 407.796801][T19241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3413'. [ 408.027039][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3412'. [ 408.325365][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3420'. [ 408.537722][T19277] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 408.579745][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 408.638059][T19289] netlink: 'syz.4.3424': attribute type 9 has an invalid length. [ 408.672543][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 408.713662][T19276] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 408.742519][T19276] bond1 (unregistering): Released all slaves [ 409.070191][T19299] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3428'. [ 409.085143][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.095812][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.106367][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.134723][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.144652][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.147838][T19299] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3428'. [ 409.553407][ T5631] syz_tun (unregistering): left allmulticast mode [ 409.896776][T19337] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 409.913249][T19337] syzkaller1: linktype set to 823 [ 409.947827][T19337] syzkaller1: tun_chr_ioctl cmd 3489698834 [ 409.987412][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3439'. [ 410.095315][T19347] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 410.239617][T19347] syzkaller0: entered promiscuous mode [ 410.285368][T19347] syzkaller0: entered allmulticast mode [ 410.777890][T19383] netlink: 'syz.4.3448': attribute type 4 has an invalid length. [ 410.806597][T19387] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 410.845439][T19388] sctp: [Deprecated]: syz.4.3448 (pid 19388) Use of int in max_burst socket option. [ 410.845439][T19388] Use struct sctp_assoc_value instead [ 410.974737][T19398] INFO: trying to register non-static key. [ 410.980579][T19398] The code is fine but needs lockdep annotation, or maybe [ 410.987690][T19398] you didn't initialize this object before use? [ 410.993930][T19398] turning off the locking correctness validator. [ 411.000268][T19398] CPU: 0 UID: 0 PID: 19398 Comm: syz.0.3452 Not tainted syzkaller #0 PREEMPT(full) [ 411.000290][T19398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 411.000305][T19398] Call Trace: [ 411.000313][T19398] [ 411.000319][T19398] dump_stack_lvl+0xe8/0x150 [ 411.000448][T19398] assign_lock_key+0x133/0x150 [ 411.000486][T19398] register_lock_class+0xcc/0x2e0 [ 411.000508][T19398] __lock_acquire+0xab/0x2cf0 [ 411.000528][T19398] ? kmem_cache_free+0x182/0x650 [ 411.000568][T19398] ? kern_path+0xd1/0x150 [ 411.000596][T19398] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 411.000628][T19398] ? genl_family_rcv_msg_doit+0x233/0x340 [ 411.000747][T19398] ? genl_rcv_msg+0x614/0x7a0 [ 411.000764][T19398] ? netlink_rcv_skb+0x226/0x4a0 [ 411.000811][T19398] ? genl_rcv+0x28/0x40 [ 411.000826][T19398] ? netlink_unicast+0x7bb/0x940 [ 411.000845][T19398] ? netlink_sendmsg+0x813/0xb40 [ 411.000859][T19398] ? sock_sendmsg_nosec+0x13a/0x180 [ 411.000920][T19398] ? ____sys_sendmsg+0x54e/0x850 [ 411.000963][T19398] ? ___sys_sendmsg+0x2a5/0x360 [ 411.000984][T19398] ? __x64_sys_sendmsg+0x1b1/0x290 [ 411.001005][T19398] ? do_syscall_64+0x174/0x580 [ 411.001084][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.001117][T19398] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 411.001141][T19398] lock_acquire+0x106/0x350 [ 411.001160][T19398] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 411.001181][T19398] ? net_generic+0x1e/0x240 [ 411.001198][T19398] ? net_generic+0x1e/0x240 [ 411.001221][T19398] ? net_generic+0x1e/0x240 [ 411.001240][T19398] _raw_spin_lock+0x2e/0x40 [ 411.001281][T19398] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 411.001300][T19398] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 411.001319][T19398] ? kasan_quarantine_put+0xbb/0x1f0 [ 411.001344][T19398] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.001386][T19398] ? kern_path+0xd1/0x150 [ 411.001404][T19398] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 411.001425][T19398] ? kern_path+0xd1/0x150 [ 411.001444][T19398] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 411.001462][T19398] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 411.001478][T19398] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 411.001497][T19398] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 411.001519][T19398] genl_family_rcv_msg_doit+0x233/0x340 [ 411.001539][T19398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.001562][T19398] ? bpf_lsm_capable+0x9/0x20 [ 411.001594][T19398] ? security_capable+0x7e/0x2c0 [ 411.001696][T19398] genl_rcv_msg+0x614/0x7a0 [ 411.001716][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.001733][T19398] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 411.001754][T19398] netlink_rcv_skb+0x226/0x4a0 [ 411.001777][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.001795][T19398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.001821][T19398] ? down_read+0x2be/0x330 [ 411.001836][T19398] genl_rcv+0x28/0x40 [ 411.001851][T19398] netlink_unicast+0x7bb/0x940 [ 411.001875][T19398] netlink_sendmsg+0x813/0xb40 [ 411.001893][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.001908][T19398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.001954][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.001967][T19398] sock_sendmsg_nosec+0x13a/0x180 [ 411.001986][T19398] ____sys_sendmsg+0x54e/0x850 [ 411.002010][T19398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.002036][T19398] ? import_iovec+0x73/0xa0 [ 411.002121][T19398] ___sys_sendmsg+0x2a5/0x360 [ 411.002142][T19398] ? __lock_acquire+0x683/0x2cf0 [ 411.002164][T19398] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.002187][T19398] ? futex_wake+0x51b/0x5f0 [ 411.002232][T19398] ? __fget_files+0x2a/0x420 [ 411.002250][T19398] ? __fget_files+0x3a2/0x420 [ 411.002273][T19398] __x64_sys_sendmsg+0x1b1/0x290 [ 411.002297][T19398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.002325][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.002341][T19398] do_syscall_64+0x174/0x580 [ 411.002363][T19398] ? clear_bhb_loop+0x40/0x90 [ 411.002379][T19398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.002394][T19398] RIP: 0033:0x7fabb5d9de99 [ 411.002409][T19398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.002423][T19398] RSP: 002b:00007fabb6cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.002441][T19398] RAX: ffffffffffffffda RBX: 00007fabb6025fa0 RCX: 00007fabb5d9de99 [ 411.002452][T19398] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000005 [ 411.002463][T19398] RBP: 00007fabb5e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 411.002472][T19398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.002482][T19398] R13: 00007fabb6026038 R14: 00007fabb6025fa0 R15: 00007ffc460712b8 [ 411.002501][T19398] [ 411.020931][T19400] netlink: 'syz.4.3453': attribute type 16 has an invalid length. [ 411.022679][T19398] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 411.476764][T19398] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 411.485170][T19398] CPU: 0 UID: 0 PID: 19398 Comm: syz.0.3452 Not tainted syzkaller #0 PREEMPT(full) [ 411.494535][T19398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 411.504581][T19398] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 411.510825][T19398] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 411.530420][T19398] RSP: 0018:ffffc90004f1f280 EFLAGS: 00010246 [ 411.536479][T19398] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100638700d [ 411.544443][T19398] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90004f1f200 [ 411.552402][T19398] RBP: ffffc90004f1f370 R08: 0000000000000003 R09: 0000000000000004 [ 411.560362][T19398] R10: dffffc0000000000 R11: fffff520009e3e40 R12: ffffc90004f1f300 [ 411.568331][T19398] R13: 1ffff920009e3e98 R14: dffffc0000000000 R15: 1ffff920009e3e5c [ 411.576294][T19398] FS: 00007fabb6cca6c0(0000) GS:ffff888124f57000(0000) knlGS:0000000000000000 [ 411.585214][T19398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.591791][T19398] CR2: 0000001b32723ffc CR3: 00000000546b6000 CR4: 00000000003526f0 [ 411.599759][T19398] Call Trace: [ 411.603030][T19398] [ 411.605948][T19398] ? kasan_quarantine_put+0xbb/0x1f0 [ 411.611235][T19398] ? kern_path+0xd1/0x150 [ 411.615560][T19398] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 411.621534][T19398] ? kern_path+0xd1/0x150 [ 411.625855][T19398] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 411.631913][T19398] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 411.638492][T19398] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 411.644816][T19398] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 411.651139][T19398] genl_family_rcv_msg_doit+0x233/0x340 [ 411.656685][T19398] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.662745][T19398] ? bpf_lsm_capable+0x9/0x20 [ 411.667413][T19398] ? security_capable+0x7e/0x2c0 [ 411.672354][T19398] genl_rcv_msg+0x614/0x7a0 [ 411.676848][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.681861][T19398] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 411.688443][T19398] netlink_rcv_skb+0x226/0x4a0 [ 411.693208][T19398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.698226][T19398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.703511][T19398] ? down_read+0x2be/0x330 [ 411.707917][T19398] genl_rcv+0x28/0x40 [ 411.711892][T19398] netlink_unicast+0x7bb/0x940 [ 411.716656][T19398] netlink_sendmsg+0x813/0xb40 [ 411.721413][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.726688][T19398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.731613][T19398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.736887][T19398] sock_sendmsg_nosec+0x13a/0x180 [ 411.741909][T19398] ____sys_sendmsg+0x54e/0x850 [ 411.746672][T19398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.751955][T19398] ? import_iovec+0x73/0xa0 [ 411.756457][T19398] ___sys_sendmsg+0x2a5/0x360 [ 411.761132][T19398] ? __lock_acquire+0x683/0x2cf0 [ 411.766073][T19398] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.771272][T19398] ? futex_wake+0x51b/0x5f0 [ 411.775779][T19398] ? __fget_files+0x2a/0x420 [ 411.780369][T19398] ? __fget_files+0x3a2/0x420 [ 411.785042][T19398] __x64_sys_sendmsg+0x1b1/0x290 [ 411.789978][T19398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.795446][T19398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.801506][T19398] do_syscall_64+0x174/0x580 [ 411.806094][T19398] ? clear_bhb_loop+0x40/0x90 [ 411.810765][T19398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.816645][T19398] RIP: 0033:0x7fabb5d9de99 [ 411.821051][T19398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.840653][T19398] RSP: 002b:00007fabb6cca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.849064][T19398] RAX: ffffffffffffffda RBX: 00007fabb6025fa0 RCX: 00007fabb5d9de99 [ 411.857029][T19398] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000005 [ 411.864988][T19398] RBP: 00007fabb5e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 411.872948][T19398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.880907][T19398] R13: 00007fabb6026038 R14: 00007fabb6025fa0 R15: 00007ffc460712b8 [ 411.888876][T19398] [ 411.891906][T19398] Modules linked in: [ 411.896058][T19398] ---[ end trace 0000000000000000 ]--- [ 411.903922][T19398] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 411.910963][T19398] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 411.917697][T19400] netlink: 'syz.4.3453': attribute type 17 has an invalid length. [ 411.930903][T19398] RSP: 0018:ffffc90004f1f280 EFLAGS: 00010246 [ 411.930930][T19398] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100638700d [ 411.952880][T19398] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90004f1f200 [ 411.960861][T19398] RBP: ffffc90004f1f370 R08: 0000000000000003 R09: 0000000000000004 [ 411.969456][T19398] R10: dffffc0000000000 R11: fffff520009e3e40 R12: ffffc90004f1f300 [ 411.973508][ T5640] Bluetooth: hci4: command tx timeout [ 411.977597][T19398] R13: 1ffff920009e3e98 R14: dffffc0000000000 R15: 1ffff920009e3e5c [ 411.990837][T19398] FS: 00007fabb6cca6c0(0000) GS:ffff888124f57000(0000) knlGS:0000000000000000 [ 412.000591][T19398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.007587][T19398] CR2: 0000001b32723ffc CR3: 00000000546b6000 CR4: 00000000003526f0 [ 412.015625][T19398] Kernel panic - not syncing: Fatal exception [ 412.021961][T19398] Kernel Offset: disabled [ 412.026272][T19398] Rebooting in 86400 seconds..