last executing test programs: 4.428593879s ago: executing program 1 (id=4917): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x32, 0x16, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0x88, [0x4000000, 0x200, 0x80, 0x8, 0x8, 0x3, 0x6]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x223}, @calipso={0x7, 0x38, {0x0, 0xc, 0xb, 0x8, [0xa, 0x2, 0x3, 0x6, 0x0, 0x2]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xc0) sendto$inet6(r0, &(0x7f00000000c0)="e47fb5cd3c472347f237912c30403939485283db9419c97ade3fd01966c463206d9c65b9c8ae349690c95559b318d07dc31eba61f948aff2f463cbd4771ef839d1a9062e61922fbd62d3530954bc6ff270", 0x51, 0x4000040, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f00000004c0)={0x660, 0x15, 0x100, 0x70bd28, 0x25dfdbfe, {0x1a}, [@nested={0x62, 0xdb, 0x0, 0x1, [@generic="8920f353e3e063e6159cac655a6e142bc240eeb1b3aa17f2c694214c2e1e6aec4afdc4e760c7f088fa8a4ae2712c79169af4b2a17ebb7416ce906a042bb2f3c4789b34c63a1a912391de069bc0592c4f1486438b979b331e69a546e8ec47"]}, @generic='~[', @generic, @nested={0x34f, 0x116, 0x0, 0x1, [@generic="12c0be2a7217c7a33195b073d92112fad14b70a9a67f76bc3f061961af6c73c35e98769c8c83d57845", @generic="b6f3eb034bbdaa4560705d8964a06599e0c214f2075c05483fd97f039880772b54f03996402a51bf8192f5fc009810beea2567eba5ab3900a3c0dafda0fb52c147b6b061775a635d86cf8bf9912f73cb0a361f7c3ab731ef9fac28eaf928ef4630a7ae3d486d22389bb2e2657e0b56923b76be5cfd73b7819c34f34d38c7aef94b9ccb53c44ae5aece613b8613e53c7a94ffd56f5375c6a85aa3ebb5f5a541c5ee492275d29040d53826d34f48", @nested={0x4, 0x7b}, @generic="10695cb44b4f252cd94761740cc2cc4a8d48433a2e10291f4134c861275a3388f3fd7445331ff6c196656071c155ecc4eea564051999ebdb71a8273e6a9f14aa1950bc5d81472d51e5c4a7dd4e44d8d3a61c6a7ca3b8def62d244b9d4085da7a3ad767a3717fffa525355fa4c2bf10ed0e169361d6d0de6cc1b7595fe4b2b9c942e7f16363e536091ea0bc4fb16762", @generic="5f734e5b150325a2d2f38c7e775bb165432cf9e11ebe24ad225914eddac68afad03c01e350529e0417fc0eb68ebe06e4464d32af25f664f248856e0b4164269c77b1255fa7f682d8b82ffdab0abefd722681261ee3873c45a533e52aeaa7ae673d14cc5a10a06020f11e833ec0933071408c112b730bda9f8b9f3ff8f471f56ad870e00d9014dd8df17967d256ed96bb67ad27780eed07a1", @typed={0x8, 0xdb, 0x0, 0x0, @pid=r2}, @generic="ca913420a2acc3b861fb7d1b45daa9e8ac95ce71dd7c60dafcb7ea1fbc9364c5f3e352d6f8ab80a396404793581bb1df6c939241cf38f51ecf34d6d7913fab44d5b0f1f0679302ca098b312f8682ed0bc41251a9cd7c3933", @generic="37ad36aaeb21054e000771607c39ecefd5e41606a9c5daa332b02c0a28a253c75ac9227b476756d48ae8df2e68bc904983bb067c560c1dd58de20a9d828511cc1b62c697c9726c155858f9331b8c837b96b78ea2994d3154020476fcd72385d71292a88f2d5afd01bedea98d14571ef0a2f8ae7c961e4ca13167d8124220db2de7be2e32866a2baa5b67a2d7d62835339274a9a0a327bb77e35d5a16c36144c6d03360096cb44a16361e35a461abc1b6b9a711cdfaaae119f1cadd05a60f268b8d85a28ff538d2c2a7b83ff16d9cc9027867ffce92d51c03930bc10da8fdcac93b91cd60e4ff625529a6"]}, @generic="c57df545c5ddc08b63998ed16c691e354b8042df6e52f264366e745a8778c411915418b24da3fffc7c25520fa102136629ac4cb97728c47fc96810d0cce7b241d5705d84521746c39541423e131b755a8b6aac6adf3b4327f42e9f594fe9e747bcb4c13ae62487703bfb2aedbf9904de2dfbfbbb9b7b6bef79b027d010c4fd4b610d62e59110aa4fa0c2f5a69ccae6ddf7873efcaf4644430624af5d814e6140538336df57e511222c3420d1d48132f431059a2bc7c20b43b428028efbed4bec74377174d6c6c5ea77560f54279f6b54e72be79ddf261eecf390557c449f039781f85d136f02c8e6a035a9b8583ff3b69834ceadf50ae40a0a", @typed={0x8, 0x139, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x98, 0x0, 0x0, @u64=0x9}, @nested={0x104, 0xea, 0x0, 0x1, [@generic="27a6f5a6e14aa7bf445e2b260bbb064f015e2ea001be8ad2151ca1590209372a28440c489e4da5e00d58b72ff28decf47067d3448dd41ff4f25eac5beb738877ac5ba727ab89dac34301a580761e9ea0a5ba4f72648c57158489a94de7e434377ff15e622d136a98fe039509cc1cd12510c131e3931a7da21a1aff52c3fb6a7b26673b5e58fdc8abc0a73478f9170d482a25d9b181c55e7e1dc79ecfd4c883c821e324ab46900d4d95a87ebc2cc85054cca3989d1fcceb56af2ae37d9aac244e420c7fe08e73862a42d572d4b182c767654acadb3b90b27d95a9287007c84929eee228b0f3fd13bad2aecff8f16f03ab0b150455", @nested={0x4, 0x85}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r7}]}, @generic="07c85ae17f1a8e6cd1b8fab17566d4992523ecc60a2157c45a68cbee4b089e66730da5ab4f5ae7efaec9bcfca93b12b2870ffd79ce45f5e706b076873725a561c87208dbc193aa7a7679be057ad8879fd54469e3d04cf41000c469111bcbdad73163550024d9333665a51427d562372ac4a77b43afe3e890bd6ffb359eaecd266be00258"]}, 0x660}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004800) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r9, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)=@report={0x270, 0x20, 0x400, 0x70bd2a, 0x25dfdbfc, {0x3c, {@in6=@mcast2, @in6=@loopback, 0x4e24, 0x4, 0x4e20, 0x5, 0x2, 0xa0, 0xa0, 0x3c, r4, r3}}, [@mark={0xc, 0x15, {0x350759, 0x4}}, @replay_thresh={0x8, 0xb, 0x63943ee4}, @policy_type={0xa}, @algo_crypt={0x13f, 0x2, {{'xts-serpent-avx\x00'}, 0x7b8, "e53b2384894b45e965df1689f5af7876e41362decacbd4a3ba8506a4c77d68ac2dfc98d65e39e8806797ae9ef0ebcfc98f10b0ec9862aae3c14d3cd35e3dfa6dc64cfbb9ce82883577be6d9a2a06e2aaf4894f3f93ae5ae8381d2aad02fcbb8699219b24e0d295de36350db7017c013b8a8ce045c4f83800c0a97139fedb2e6633fae5954ced3d621544a5c87e85a622b18dd954b7b9ba61835dee505829957ae7202cbabd663230379925797045462498ffaebfce5193a90a441a8bf066011be58b4f9bd85f35a307b30c69a9883875cf1db969bd87bd08049d35d058112a8f12ac0e5aa895a6c8923255860ed25e6d756eb3d791f4a0"}}, @algo_aead={0xc2, 0x12, {{'generic-gcm-aesni\x00'}, 0x3b0, 0x200, "9e0e0fce11924da2b3d48a791c5d9c2865ace56ef8c4947a82728379b741d1c6927c6d379c8d9d6cfb6d7861a38c99f306ba2d2294514b56e3b73d565edc6f3b600bd38810749fbef777e510c4096b3f1b41afb58939acfff593408cce55b3d04be3e90d24d4a63d970234a2d100ef7df1e818f0d25a"}}]}, 0x270}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000f40)={@remote, r6}, 0x14) listen(r0, 0x80000000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000001000)={'syzkaller0\x00', 0x7}) write$nci(r8, &(0x7f0000001040)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0xfe, {0x0, 0x1, 0x4}}, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r10 = syz_open_procfs$namespace(r2, &(0x7f0000001080)='ns/user\x00') setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000010c0)={0x42, 0x3, 0x2}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000001100)={0x89, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffc}]}, 0x10) setsockopt$inet_mreq(r8, 0x0, 0x24, &(0x7f0000001140)={@private=0xa010101, @remote}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000011c0)={0x428, 0x3f3, 0x20, 0x70bd26, 0x25dfdbfb, {0x10, 0x2, 0x19, [0x9, 0x6, 0x0, 0x8, 0xffff, 0xf9, 0x7fffffff, 0x6, 0x3, 0x9, 0x7, 0x8, 0x4, 0x5, 0xe, 0x56d, 0x2, 0x9, 0x771418b1, 0x16c5, 0x0, 0x1, 0x5, 0x40000000, 0x1, 0x53e5, 0x8001, 0x62, 0x6895, 0x9, 0x7, 0x10, 0x4, 0x5, 0x7, 0x7, 0xff, 0x3, 0x8c04, 0x8, 0x100, 0x100, 0x9, 0x6416, 0x1, 0x2, 0x1, 0x6, 0xfffff801, 0x3, 0x6, 0x4, 0xe9b8, 0x0, 0x2b, 0xd, 0x8, 0x5, 0xfff, 0xb23e, 0x7d, 0xfffffffd, 0x1, 0x4], [0x7fff, 0x1ff, 0x36ca, 0x80000000, 0xc0000000, 0x1, 0x7, 0x5, 0x4, 0x7ff, 0x9, 0x10000, 0x4, 0x1, 0x4, 0x9, 0x7, 0x0, 0x4, 0x7, 0x3, 0x6, 0x3, 0x7, 0x5, 0x5, 0xe587, 0xe5, 0x1ee8b2d1, 0x1f38, 0x9, 0xffff, 0x2, 0x6, 0x9, 0x0, 0x0, 0x3, 0x3, 0x400, 0xf41, 0x80, 0x9, 0x1, 0x9, 0x9, 0x5, 0x7fb6, 0xfbb, 0x8, 0x5, 0x7, 0x3, 0x200, 0xa2, 0x100, 0x6, 0x8, 0x6, 0x30423cb9, 0x0, 0x1, 0x0, 0xfff], [0x4, 0x4, 0x10, 0x8, 0xfffffffc, 0x3, 0x0, 0xae0e00, 0xc, 0x207e, 0x5, 0x4, 0x10000, 0x9, 0xd1, 0xffffffff, 0x7, 0x80000000, 0xba, 0x5, 0x3, 0x5, 0xff, 0x0, 0x1, 0x4, 0xb, 0xffffffff, 0x3, 0x60be, 0x6, 0xffff, 0xd18, 0x8, 0x0, 0xfffffe01, 0xa00, 0xc0000, 0x4, 0x9, 0x2, 0x1, 0x6, 0x3, 0x10, 0x9, 0x800, 0x4, 0x7, 0x6, 0x80000000, 0xd5, 0xffff, 0x2, 0x2, 0x7, 0x7, 0x8, 0x5, 0xc, 0x6, 0x4, 0xfffffa1a, 0x53cfed5c], [0x0, 0x7, 0x2, 0x6, 0xfffffff8, 0x80000000, 0x0, 0x5, 0x1, 0x2, 0x6, 0xd3, 0x8, 0x4, 0x400, 0x680, 0xfffffff9, 0x8, 0x6, 0x1b3, 0x5, 0x4, 0xe, 0x40, 0x0, 0x1000, 0x60b, 0x1000, 0x9599, 0x39, 0x5, 0x6, 0x8, 0x6, 0x2, 0x0, 0x9, 0x2, 0xf, 0xb, 0x8, 0x8, 0xa7, 0x6, 0x0, 0x574, 0x2, 0x12, 0x3, 0x4, 0x7, 0x6, 0x9, 0x1, 0x9, 0x0, 0x6, 0x4, 0xa, 0x44dd403b, 0x7fffffff, 0x0, 0xfffffbcd, 0x6], 0x5, ['\'&@\x00', '\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x2}, 0x1c000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001680)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x3f, 0x0, "0cf2c4ff17c57438eeb6d1d7e4ed87b56f4ff948c3fdc314bcae65997189c09661374bb707dd4b2ef56c4733777a415ba4325b1cdf0a26ed72643202724e14935438bf17a85ace4a0f755e6dc8a9219d"}, 0xd8) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f0000001780)=@srh={0xc, 0x4, 0x4, 0x2, 0xf7, 0x74, 0x40, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, 0x28) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000017c0)) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001800), r12) read$alg(r9, &(0x7f0000001840)=""/224, 0xe0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) 4.26041352s ago: executing program 1 (id=4921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x22, 0x0, "0dce9b2a863c715328cf7881cfb7967319a7f4908b95950610a7d62c57e65040e5e1d960ead7ce36c060a1dbad5d66c42cba9573b30910c21b8d70c2305010e1ef0cc4fe04c5b31f5e7d58a2ded1ae3c"}, 0xd8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r2, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', r3, 0x7, 0xe0, 0x0, 0xb5, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x67, 0x0, 0xa0, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@noop]}}}}}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2d, 0x0, "cdf8248ba3bcbf9952b0703d8834096f486aa9c9da0eebe960599a945aeb40a4f969032fc79574016d6c578c72adc2c110f4d989c4ddc51794c68c1072489f78edf4bd2314eb1a8bfc98a7c6874a8330"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 2.120341882s ago: executing program 1 (id=4924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = accept$unix(r2, 0x0, &(0x7f00000002c0)) sendmsg$unix(r5, &(0x7f0000000280)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="555d5844a1dc42bab24f7b25e3a6f847d9a15df585da1a22fb0d3b2bc739588c6ebc5b822a6f1a2da3fd6c32d0a5a28d1e8a716e0210cc434a84e768535bc6d3bb0a1cef8d389848bd20c82f5e9af2532f77951f870e", 0x56}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x400c010}, 0x800) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.717859644s ago: executing program 0 (id=4934): r0 = socket$inet(0xa, 0x2, 0x200084) listen(r0, 0x81) accept4(r0, 0x0, 0x0, 0x0) 1.704990134s ago: executing program 2 (id=4935): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0898b400dc01030008001300", @ANYRES32=r2, @ANYBLOB="040014001400030076657468315f6d616376746170000000"], 0x40}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1.577440599s ago: executing program 0 (id=4937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0) 1.388511873s ago: executing program 2 (id=4939): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.294663373s ago: executing program 0 (id=4942): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) unshare(0x26020480) (async) unshare(0x26020480) r1 = socket(0x22, 0x3, 0x0) bind$vsock_stream(r1, &(0x7f0000000740), 0x10) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0xb) 1.224823053s ago: executing program 4 (id=4944): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) ioctl$FITHAW(r0, 0xc0045878) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 1.211164719s ago: executing program 2 (id=4945): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 1.048964191s ago: executing program 3 (id=4946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, r1}, 0x94) 1.048601046s ago: executing program 4 (id=4947): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$netlink(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x800) recvmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$netlink(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x800) (async) recvmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) (async) 1.042892716s ago: executing program 1 (id=4948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r5, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8841) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r7) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r11) sendmsg$NFC_CMD_DISABLE_SE(r11, 0x0, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r14, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e40)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004890}, 0x80) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x931, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x9}, {0xfff3, 0xb}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.02554495s ago: executing program 2 (id=4949): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) close(0x3) (async) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = accept4(r2, &(0x7f0000000380)=@caif=@dbg, &(0x7f0000000400)=0x80, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000004) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 980.928227ms ago: executing program 0 (id=4950): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0xf00, 0xe7, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getnetconf={0x2c, 0x52, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4040000) 941.738103ms ago: executing program 3 (id=4951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000100)=0x4f, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e23, @private=0xa010102}}) 884.792692ms ago: executing program 4 (id=4952): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x301c01, &(0x7f0000000040)={@align=0xfffffffffffffeff, {0x4, 0x0, 0x65, 0x1}}, 0xfff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x96, "59c9e8c485e0e362a3115c2bb4fba4a900c5e1e8d96c954605df4abbe9f164bf3144bb73e431f0857d626238a87f0d991876c345150853a51af54bcb791aad4c57861286b562d2544d489dc8444bbd169d9d509761ab8f5637185d69612081be2a7f73c5fc64be682ace68bad4dd04c0d584b4d034c3c96981ef8eccfcb94ad3cdbe4a37dec6c5e47e2792e7f3f999885181129b382a"}, &(0x7f0000000200)=0xba) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000240)=""/6, &(0x7f0000000280)=0x6) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000300)=0x7, 0x4) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) close(r2) (async) connect$caif(0xffffffffffffffff, &(0x7f00000003c0)=@util={0x25, "da3a348fe939d5b30db25ba1563c1c33"}, 0x18) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={r4, r5, 0xffffffffffffffff}, 0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000500)={'team_slave_1\x00'}) r6 = accept$alg(r3, 0x0, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000580)=r7, 0x4) (async) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) setsockopt(r3, 0x1ff, 0x80000000, &(0x7f0000000600)="4fb3070b9ff0c42e156b73e11b37da8682ac3eeab2c4ef3b9817664afe9b0b860703d7cb78b187cd4206439e8b4622f5dd21b0f77361a183bb7b55a4bb483f29b055d62019887172589442c7793b51e52488f0c3f8b173a79e38640d5c7cee382b28f5296e04ea6fdb121ccd986b52f6d283858190bae2e812aba91c76e2f31699a7c9adbf19dc799f8e3806b1", 0x8d) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000006c0)={0x5694, 0xd0, 0x4b}) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000700)) (async) gettid() sendto(r6, &(0x7f0000000740)="c956d29ac53b7db07792534bcf3b4b7c49bcee4bcc533819baa596dcea", 0x1d, 0x4000010, &(0x7f0000000780)=@xdp={0x2c, 0x4, 0x0, 0x30}, 0x80) (async) connect$pppl2tp(r3, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast2}, 0x0, 0x2, 0x1, 0x2}}, 0x2e) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000840)={0x8, 'batadv_slave_1\x00', {'wg1\x00'}, 0x8f}) (async) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x4) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x178, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x178}}, 0x8000) (async) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000b40)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 'lblcr\x00', 0x0, 0xd4, 0x1f}, {@rand_addr=0x64010100, 0x4e22, 0x1, 0x1, 0x9, 0x6}}, 0x44) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@getroute={0x14, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x448d0}, 0x40) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) 776.961918ms ago: executing program 0 (id=4953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010b2cbd7000ffdbdf251300000008000300", @ANYRES32=r7, @ANYBLOB="0c009900021100000900000006001401010100000c0043000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") 599.397057ms ago: executing program 2 (id=4954): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000010201020000000000000000030001030a000b00512e393331fc7aad0bd4000020080097"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x5}, {}, {0x5, 0xb02aa5b31bb4b727}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 599.196005ms ago: executing program 4 (id=4955): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44aa}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 598.369505ms ago: executing program 3 (id=4956): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 419.48528ms ago: executing program 3 (id=4957): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 344.868571ms ago: executing program 1 (id=4958): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000880), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x100000000000000, 0x0, 0x8021}, 0x4048800) 293.466645ms ago: executing program 2 (id=4959): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000200)=""/80, 0x50, 0x2000, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e1d}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 249.431537ms ago: executing program 4 (id=4960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa2b0ffffff000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 144.994108ms ago: executing program 3 (id=4961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r1, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 141.861409ms ago: executing program 0 (id=4962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x38}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfcfb, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xae0a}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) 141.404083ms ago: executing program 1 (id=4963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r11], 0x168}}], 0x1, 0x8000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xf3, 0xc8, &(0x7f0000000440)="7379c8aee808654d4f819c478119d37cf72b5f33ab537fa9af3a36e0a780d3a80feea14c7b9509d02a76d496791abca72c500518501ae29dee4b151cd8534d7369c24089182424df86c67949f07a0e83839c4b882fb6923dc13691865c7afcc8ee9ed7ee793a319e1afce07ca918e9f702942c1b9445513bbb22ddd2dbe2dbdc168101a8c1b4914b7792a6e80815126ea4ac6ef7a7715235cef8167a73308d4eabacb91ebe5b41d6342abb86491e6949804a2373a65df941376815a67753ecd31f9b96df7a1b5d17ac6134d69299fc18949e3ce2daf402e3d31959ee89004247633a199a91f9d6162cbfcb8159a7953370b3a3", &(0x7f0000000200)=""/200, 0x10000, 0x0, 0x3f, 0x2, &(0x7f0000000300)="3aef3b6d69ae890124e03751bd6e6bfb731edd80953d3dfaab1047c4402ffca21e04fcce9476788d3f8ccca737fd9f5fb698da616da56d91bdc9dadb04c62c", &(0x7f0000000340)=':9', 0x5, 0x0, 0x10b520e3}, 0x50) 65.149162ms ago: executing program 4 (id=4964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x476c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000010200012800b0001006272696467650000100002800c002e00000000001c"], 0x40}}, 0x0) 0s ago: executing program 3 (id=4965): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0x20000000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): ipc: Enabling of bearer rejected, media not registered [ 379.901851][T17655] tipc: Enabling of bearer rejected, media not registered [ 379.922335][T17655] tipc: Enabling of bearer rejected, media not registered [ 379.936808][T17679] delete_channel: no stack [ 379.969574][T17678] delete_channel: no stack [ 379.978692][T17655] tipc: Enabling of bearer rejected, media not registered [ 380.014835][T17685] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 380.243109][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 380.280613][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 380.477690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.538330][T17714] syzkaller0: entered promiscuous mode [ 380.552946][T17714] syzkaller0: entered allmulticast mode [ 380.636396][T17714] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3239'. [ 380.798601][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 380.911549][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.010412][T17735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3242'. [ 381.085692][T17325] veth0_vlan: entered promiscuous mode [ 381.191310][T17325] veth1_vlan: entered promiscuous mode [ 381.210357][T17748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3245'. [ 381.223042][T17750] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 381.310985][T17325] veth0_macvtap: entered promiscuous mode [ 381.370596][T17325] veth1_macvtap: entered promiscuous mode [ 381.449526][T17325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.503413][T17325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.517870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.587717][T16506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.622238][T16506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.636559][T17768] netlink: 'syz.4.3253': attribute type 1 has an invalid length. [ 381.652110][T17768] netlink: 'syz.4.3253': attribute type 2 has an invalid length. [ 381.669694][T16506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.670417][T17768] netlink: 'syz.4.3253': attribute type 1 has an invalid length. [ 381.690155][T16506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.708290][T17771] syzkaller0: entered promiscuous mode [ 381.715190][T17768] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 381.723996][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 381.734912][T17771] syzkaller0: entered allmulticast mode [ 381.922898][T16532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.952925][T16532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.011822][T16506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.020977][T16506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.189343][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 382.543108][T17806] vlan1: entered allmulticast mode [ 382.557757][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.580606][T17806] veth0_vlan: entered allmulticast mode [ 382.593944][T17807] xt_hashlimit: size too large, truncated to 1048576 [ 382.709063][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.720168][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.734338][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.748375][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.758993][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.001442][T17830] xt_hashlimit: size too large, truncated to 1048576 [ 383.018166][T17809] dvmrp0: entered allmulticast mode [ 383.237273][T17818] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.277600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 383.285690][ C1] lec:lec_tx_timeout: lec0 [ 383.292023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.597747][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.727394][T17856] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 383.762535][T17856] team1: entered promiscuous mode [ 383.772691][T17856] team1: entered allmulticast mode [ 384.009560][T17872] xt_hashlimit: size too large, truncated to 1048576 [ 384.019992][T17867] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 384.165843][T17881] xt_hashlimit: size too large, truncated to 1048576 [ 384.292687][T17818] chnl_net:caif_netlink_parms(): no params data found [ 384.454844][T17891] IPv6: sit1: Disabled Multicast RS [ 384.610170][T17818] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.628969][T17818] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.636784][T17818] bridge_slave_0: entered allmulticast mode [ 384.642856][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.673668][T17818] bridge_slave_0: entered promiscuous mode [ 384.688307][T17818] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.701151][T17818] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.714331][T17818] bridge_slave_1: entered allmulticast mode [ 384.723028][T17818] bridge_slave_1: entered promiscuous mode [ 384.730637][T17903] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 384.747188][T17903] __nla_validate_parse: 5 callbacks suppressed [ 384.747205][T17903] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3291'. [ 384.788711][T17903] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3291'. [ 384.800682][ T5838] Bluetooth: hci4: command tx timeout [ 384.832007][T17818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.845504][T17903] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3291'. [ 384.860872][T17818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.999371][T17818] team0: Port device team_slave_0 added [ 385.033941][T17818] team0: Port device team_slave_1 added [ 385.153386][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'. [ 385.190304][T17922] xt_hashlimit: size too large, truncated to 1048576 [ 385.221948][T17818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.238115][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.284230][T17818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.315206][T17927] netlink: 'syz.1.3297': attribute type 2 has an invalid length. [ 385.330756][T17818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.345468][T17818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.381334][T17818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.499043][T17818] hsr_slave_0: entered promiscuous mode [ 385.513525][T17818] hsr_slave_1: entered promiscuous mode [ 385.524901][T17818] debugfs: 'hsr0' already exists in 'hsr' [ 385.534768][T17818] Cannot create hsr debugfs directory [ 385.655285][T17939] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 385.672403][T17939] netlink: 'syz.4.3305': attribute type 11 has an invalid length. [ 385.687651][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.694658][T17939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3305'. [ 385.867168][T17947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3309'. [ 385.887258][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 385.934680][T17818] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.004126][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'. [ 386.053057][T17818] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.236168][T17957] lo speed is unknown, defaulting to 1000 [ 386.280460][T17818] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.372527][T17957] lo speed is unknown, defaulting to 1000 [ 386.400833][T17957] lo speed is unknown, defaulting to 1000 [ 386.435531][T17957] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 386.461461][T17957] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 386.486864][T17968] xt_hashlimit: size too large, truncated to 1048576 [ 386.512203][T17957] lo speed is unknown, defaulting to 1000 [ 386.520629][T17957] lo speed is unknown, defaulting to 1000 [ 386.528595][T17957] lo speed is unknown, defaulting to 1000 [ 386.563193][T17957] lo speed is unknown, defaulting to 1000 [ 386.582923][T17818] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.650525][T17957] lo speed is unknown, defaulting to 1000 [ 386.673596][T17957] lo speed is unknown, defaulting to 1000 [ 386.696587][T17957] lo speed is unknown, defaulting to 1000 [ 386.717734][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.738253][T17957] lo speed is unknown, defaulting to 1000 [ 386.879082][ T5838] Bluetooth: hci4: command tx timeout [ 387.068913][T17981] block nbd0: reconnected socket [ 387.074689][ T5838] block nbd0: Receive control failed (result -107) [ 387.144269][T17818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.171931][T17818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.200477][T17818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.231535][T17818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.251489][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 387.272576][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 387.472979][T17818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.544662][T17818] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.573821][T16506] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.581084][T16506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.640264][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.647454][T16520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.768367][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.220558][T17818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.363591][T17818] veth0_vlan: entered promiscuous mode [ 388.400361][T17818] veth1_vlan: entered promiscuous mode [ 388.473480][T17818] veth0_macvtap: entered promiscuous mode [ 388.505335][T17818] veth1_macvtap: entered promiscuous mode [ 388.543444][T17818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.606449][T17818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.618208][T18038] lo: entered promiscuous mode [ 388.627348][T18038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.656166][T16529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.690091][T16529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.708170][T16529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.755572][T16529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.797837][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.896781][T16520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.933949][T16520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.957890][ T5838] Bluetooth: hci4: command tx timeout [ 389.037609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 389.045713][ C1] lec:lec_tx_timeout: lec0 [ 389.052920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.108362][T18054] bond0: entered promiscuous mode [ 389.113462][T18054] bond_slave_0: entered promiscuous mode [ 389.128947][T18054] bond_slave_1: entered promiscuous mode [ 389.147262][T18054] batadv0: entered promiscuous mode [ 389.159112][T18054] hsr1: entered promiscuous mode [ 389.174396][T18054] hsr1: entered allmulticast mode [ 389.184480][T18054] bond0: entered allmulticast mode [ 389.194600][T18054] bond_slave_0: entered allmulticast mode [ 389.203097][T18054] bond_slave_1: entered allmulticast mode [ 389.211545][T18054] batadv0: entered allmulticast mode [ 389.217533][T18054] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 389.227117][T18054] bond0: left promiscuous mode [ 389.232693][T18054] bond_slave_0: left promiscuous mode [ 389.239435][T18054] bond_slave_1: left promiscuous mode [ 389.246278][T18054] batadv0: left promiscuous mode [ 389.334724][T16520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.349172][T16520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.492573][T18061] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 389.688024][ T1704] block nbd0: Possible stuck request ffff888026cb0000: control (read@0,1024B). Runtime 120 seconds [ 389.700759][ T1704] block nbd0: Possible stuck request ffff888026cb0200: control (read@1024,1024B). Runtime 120 seconds [ 389.716822][ T1704] block nbd0: Possible stuck request ffff888026cb0400: control (read@2048,1024B). Runtime 120 seconds [ 389.729155][ T1704] block nbd0: Dead connection, failed to find a fallback [ 389.763904][T18078] ipt_REJECT: TCP_RESET invalid for non-tcp [ 389.813874][T18084] ipt_REJECT: TCP_RESET invalid for non-tcp [ 389.822372][T18083] __nla_validate_parse: 9 callbacks suppressed [ 389.822391][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 389.837946][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.857111][T18081] netlink: 'syz.0.3345': attribute type 4 has an invalid length. [ 389.871377][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3345'. [ 389.898577][T18083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.970679][T18083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.497413][T18121] "syz.4.3355" (18121) uses obsolete ecb(arc4) skcipher [ 390.705751][T18131] syzkaller0: entered promiscuous mode [ 390.722462][T18131] syzkaller0: entered allmulticast mode [ 390.745259][T18131] sctp: [Deprecated]: syz.4.3358 (pid 18131) Use of int in max_burst socket option deprecated. [ 390.745259][T18131] Use struct sctp_assoc_value instead [ 390.804714][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3361'. [ 390.877706][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.037834][ T5838] Bluetooth: hci4: command tx timeout [ 391.096214][T18148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3364'. [ 391.263144][T18160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3367'. [ 391.521124][T18165] "syz.3.3368" (18165) uses obsolete ecb(arc4) skcipher [ 391.838715][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 391.855514][T18174] netlink: 'syz.1.3371': attribute type 83 has an invalid length. [ 391.899585][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 391.917674][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.135679][T18198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3377'. [ 392.513249][T18214] syzkaller0: entered promiscuous mode [ 392.519263][T18214] syzkaller0: entered allmulticast mode [ 392.532140][T18216] "syz.1.3383" (18216) uses obsolete ecb(arc4) skcipher [ 392.540688][T18214] xt_bpf: check failed: parse error [ 392.967648][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.414196][T18250] "syz.2.3394" (18250) uses obsolete ecb(arc4) skcipher [ 393.965120][T18265] xt_hashlimit: size too large, truncated to 1048576 [ 393.997671][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.077824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 394.085887][ C1] lec:lec_tx_timeout: lec0 [ 394.091468][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.835567][T18182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.046468][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.119945][T18277] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3401'. [ 395.297655][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 395.310238][T18286] "syz.1.3405" (18286) uses obsolete ecb(arc4) skcipher [ 395.779637][T18309] netlink: 'syz.4.3411': attribute type 13 has an invalid length. [ 395.886533][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 395.907779][T18318] netlink: 'syz.2.3414': attribute type 5 has an invalid length. [ 395.932367][T18318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3414'. [ 395.994598][T18318] geneve2: entered promiscuous mode [ 396.011435][T18318] geneve2: entered allmulticast mode [ 396.055659][T16529] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 396.080428][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.098855][T16529] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 396.116063][T16529] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 396.135640][T16529] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 396.250716][T18324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.375819][T18334] ip6t_srh: unknown srh match flags 5F28 [ 396.420460][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 396.441567][T18336] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 396.489067][T18342] x_tables: unsorted entry at hook 2 [ 396.505781][T18334] openvswitch: netlink: Unknown nsh attribute 0 [ 396.674152][T18350] x_tables: unsorted underflow at hook 1 [ 396.690157][T18351] x_tables: unsorted underflow at hook 1 [ 396.940815][T18365] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3427'. [ 397.052288][T18369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3428'. [ 397.117656][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.404437][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 397.593167][T18383] team0: Port device team_slave_0 removed [ 397.627067][T18393] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 398.157651][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.492227][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 398.531909][T18435] geneve2: entered promiscuous mode [ 398.551780][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3448'. [ 398.682689][T18446] tipc: Enabling of bearer rejected, failed to enable media [ 398.908384][T18460] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 399.097606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.105822][ C1] lec:lec_tx_timeout: lec0 [ 399.110613][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.197646][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.437461][T18478] 8021q: VLANs not supported on ip_vti0 [ 399.479958][T18480] +: renamed from syzkaller0 [ 399.518195][T18481] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 399.958367][T18515] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 399.976862][T18510] 8021q: VLANs not supported on wg2 [ 399.986481][T18510] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20001 [ 400.237652][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.425696][T18544] bond0: entered promiscuous mode [ 400.470421][T18544] bond_slave_0: entered promiscuous mode [ 400.509175][T18544] bond_slave_1: entered promiscuous mode [ 400.516257][T18546] xt_CONNSECMARK: invalid mode: 0 [ 400.536553][T18544] batadv0: entered promiscuous mode [ 400.561235][ T5838] Bluetooth: hci4: command tx timeout [ 400.569987][T18550] __nla_validate_parse: 4 callbacks suppressed [ 400.570006][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 400.586960][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 400.609132][T18544] hsr1: entered promiscuous mode [ 400.626858][T18544] hsr1: entered allmulticast mode [ 400.656761][T18544] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 400.709530][T18544] bond0: left promiscuous mode [ 400.715727][T18544] bond_slave_0: left promiscuous mode [ 400.725601][T18544] bond_slave_1: left promiscuous mode [ 400.744112][T18544] batadv0: left promiscuous mode [ 400.785448][T18554] C: renamed from lo [ 400.795404][T18554] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 400.999565][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 401.019938][T18572] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 401.277658][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.347392][T18590] gtp0: entered promiscuous mode [ 401.361505][T18590] gtp0: entered allmulticast mode [ 401.550466][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 401.656792][T18600] bond1: entered promiscuous mode [ 401.662989][T18600] bond1: entered allmulticast mode [ 401.669403][T18600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.712994][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 401.766050][T18609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3496'. [ 401.806127][T18614] bond0: entered promiscuous mode [ 401.821721][T18614] bond_slave_0: entered promiscuous mode [ 401.843140][T18614] bond_slave_1: entered promiscuous mode [ 401.878054][T18614] batadv0: entered promiscuous mode [ 401.896417][T18614] batadv0: left promiscuous mode [ 401.917416][T18614] bond0: left promiscuous mode [ 401.938523][T18614] bond_slave_0: left promiscuous mode [ 401.944340][T18614] bond_slave_1: left promiscuous mode [ 401.989051][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 401.997046][T18609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3496'. [ 402.052322][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.067760][T18609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3496'. [ 402.116758][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.166479][T18609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3496'. [ 402.216803][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.233947][T18629] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3503'. [ 402.250422][T18609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3496'. [ 402.287769][T18629] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 402.308483][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.317432][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.318045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.387109][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.402761][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 402.476441][T18609] netlink: 'syz.4.3496': attribute type 1 has an invalid length. [ 403.164789][T18688] tipc: Started in network mode [ 403.169990][T18688] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 403.181868][T18688] tipc: Enabled bearer , priority 31 [ 403.357678][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.832427][T18728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.839781][T18728] IPv6: NLM_F_CREATE should be set when creating new route [ 404.117594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.125682][ C1] lec:lec_tx_timeout: lec0 [ 404.131040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.297738][ T8552] tipc: Node number set to 10463914 [ 404.397653][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.499457][T18757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.541082][T18748] siw: device registration error -23 [ 404.713612][T18757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.767248][ T10] IPVS: starting estimator thread 0... [ 404.858008][T18791] IPVS: using max 29 ests per chain, 69600 per kthread [ 404.893458][T18757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.066479][T18757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.098124][T18799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.130185][ T10] lo speed is unknown, defaulting to 1000 [ 405.219486][T18807] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 405.298624][T16518] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.352830][T16506] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.425659][T16532] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.437637][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.474670][T16518] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.894501][T18841] syzkaller0: entered promiscuous mode [ 405.907866][T18841] syzkaller0: entered allmulticast mode [ 405.940822][T18842] __nla_validate_parse: 44 callbacks suppressed [ 405.940844][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 406.477662][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.517664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.559001][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.820866][T18881] pim6reg: entered allmulticast mode [ 408.907767][T18921] tipc: Enabling of bearer rejected, failed to enable media [ 408.917288][T18922] tipc: Enabling of bearer rejected, failed to enable media [ 409.137650][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.145758][ C1] lec:lec_tx_timeout: lec0 [ 409.151868][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.199020][T18942] sctp: [Deprecated]: syz.3.3576 (pid 18942) Use of int in max_burst socket option deprecated. [ 409.199020][T18942] Use struct sctp_assoc_value instead [ 409.597644][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.869743][T18986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3587'. [ 410.041907][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3594'. [ 410.221222][T19012] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3598'. [ 410.322011][T19016] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3599'. [ 410.435641][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 410.579056][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 410.589419][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 410.608731][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 410.637651][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.656080][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 410.745428][T19033] validate_nla: 39 callbacks suppressed [ 410.745449][T19033] netlink: 'syz.0.3602': attribute type 1 has an invalid length. [ 410.769628][T19033] netlink: 'syz.0.3602': attribute type 19 has an invalid length. [ 410.808218][T16518] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.827364][T19033] netlink: 'syz.0.3602': attribute type 19 has an invalid length. [ 410.830495][T16518] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.854076][T16518] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.874959][T16518] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.917258][T19040] netlink: 'syz.4.3604': attribute type 1 has an invalid length. [ 411.001215][T19040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.040483][T19050] __nla_validate_parse: 2 callbacks suppressed [ 411.040504][T19050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3609'. [ 411.057312][T19054] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 411.141297][T19055] netlink: 'syz.1.3608': attribute type 21 has an invalid length. [ 411.155243][T19060] gretap1: entered promiscuous mode [ 411.167832][T19055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3608'. [ 411.168839][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 411.190214][T19060] bond3: (slave gretap1): making interface the new active one [ 411.199267][T19060] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 411.216024][T19055] netlink: 'syz.1.3608': attribute type 5 has an invalid length. [ 411.229668][T19055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3608'. [ 411.374993][T19054] macvlan2: entered promiscuous mode [ 411.380538][T19054] macvlan2: entered allmulticast mode [ 411.387102][T19054] bond3: entered promiscuous mode [ 411.393858][T19054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 411.402429][T19054] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 411.419445][T19054] bond3: left promiscuous mode [ 411.584071][T19084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.601255][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 411.610429][T19079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.619378][T19090] netlink: 'syz.3.3617': attribute type 30 has an invalid length. [ 411.677644][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.701782][T19079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.773501][T19090] bond1: option arp_missed_max: invalid value (0) [ 411.802770][T19090] bond1: option arp_missed_max: allowed values 1 - 255 [ 411.820500][T19090] bond1 (unregistering): Released all slaves [ 411.884205][T19097] bond0: (slave bond_slave_0): Releasing backup interface [ 411.944574][T19097] bond0: (slave bond_slave_1): Releasing backup interface [ 412.028961][T19097] team0: Port device team_slave_0 removed [ 412.060775][T19097] team0: Port device team_slave_1 removed [ 412.089702][T19097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.107500][T19097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.132721][T19097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.152567][T19097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.179593][T19097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.375352][T19114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.390711][T19114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.534796][T19114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.545989][T19114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.690143][T19114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.704524][T19114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.718234][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.939703][T19149] sctp: [Deprecated]: syz.1.3632 (pid 19149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.939703][T19149] Use struct sctp_sack_info instead [ 413.015894][T19150] sctp: [Deprecated]: syz.1.3632 (pid 19150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.015894][T19150] Use struct sctp_sack_info instead [ 413.034439][T19150] sctp: [Deprecated]: syz.1.3632 (pid 19150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.034439][T19150] Use struct sctp_sack_info instead [ 413.757669][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.167667][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.175791][ C1] lec:lec_tx_timeout: lec0 [ 414.180528][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.405351][T19141] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 414.406860][T19138] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 414.513077][T19114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.534469][T19114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.562432][T19149] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3632'. [ 414.582995][T19163] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 414.592188][T19164] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 414.736670][T19168] syzkaller0: entered promiscuous mode [ 414.742510][T19168] syzkaller0: entered allmulticast mode [ 414.797653][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.876906][T16532] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.897714][T16532] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.013961][T16532] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.047213][T16532] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.112479][T16518] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.144444][T16518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.168573][T16518] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.177292][T16518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.215223][T19189] ip6tnl0: Caught tx_queue_len zero misconfig [ 415.350448][T19198] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3646'. [ 415.426205][T19198] syzkaller1: entered promiscuous mode [ 415.433583][T19198] syzkaller1: entered allmulticast mode [ 415.655629][T19212] netlink: 'syz.1.3651': attribute type 1 has an invalid length. [ 415.837637][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.209841][T19239] netlink: 'syz.2.3659': attribute type 142 has an invalid length. [ 416.403951][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 416.846508][T19292] netlink: 876 bytes leftover after parsing attributes in process `syz.2.3678'. [ 416.877660][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.001105][T19306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3681'. [ 417.011495][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 417.076776][T19308] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 417.095937][T19308] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3683'. [ 417.206883][T19317] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 417.323897][T19321] xt_limit: Overflow, try lower: 271964/0 [ 417.495785][T19330] netlink: 'syz.4.3691': attribute type 12 has an invalid length. [ 417.505374][ T29] IPVS: starting estimator thread 0... [ 417.607734][T19341] IPVS: using max 36 ests per chain, 86400 per kthread [ 417.620364][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 417.662551][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'. [ 417.674463][T19351] syzkaller1: entered promiscuous mode [ 417.687341][T19353] block nbd4: Unsupported socket: should be TCP or UNIX. [ 417.694245][T19351] syzkaller1: entered allmulticast mode [ 417.726004][T19351] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3696'. [ 417.739732][T19351] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3696'. [ 417.917628][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.957675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.187719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 419.195965][ C1] lec:lec_tx_timeout: lec0 [ 419.997733][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.077912][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 420.084153][T19366] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 420.090687][T19366] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 420.997017][T19366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 421.003199][T19366] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 421.037782][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.069861][T19366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 421.075918][T19366] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 421.131288][T19366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 421.137260][T19366] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 421.426693][T19421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3719'. [ 421.488433][T19417] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 421.496251][T19417] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3718'. [ 421.527798][T19417] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3718'. [ 421.536846][T19417] netlink: 'syz.4.3718': attribute type 1 has an invalid length. [ 421.546750][T19417] netlink: 'syz.4.3718': attribute type 8 has an invalid length. [ 421.554832][T19417] netlink: 582 bytes leftover after parsing attributes in process `syz.4.3718'. [ 421.871893][T19451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3727'. [ 421.908536][T19457] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3730'. [ 421.914496][T19451] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 422.077632][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.105803][T19465] netlink: 'syz.2.3733': attribute type 21 has an invalid length. [ 422.114305][T19465] netlink: 'syz.2.3733': attribute type 22 has an invalid length. [ 422.131652][T19465] netlink: 'syz.2.3733': attribute type 23 has an invalid length. [ 422.148856][T19465] netlink: 'syz.2.3733': attribute type 25 has an invalid length. [ 422.173036][T19465] netlink: 'syz.2.3733': attribute type 26 has an invalid length. [ 422.219902][T19465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3733'. [ 422.250416][T19447] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.258228][T19447] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.265686][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3734'. [ 422.402797][T19483] netlink: 'syz.2.3735': attribute type 25 has an invalid length. [ 422.525972][T19447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.853112][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 423.096487][T19507] netlink: 'syz.2.3739': attribute type 4 has an invalid length. [ 423.117647][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.346771][T16532] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.378465][T16532] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.387434][T16532] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.487506][T16532] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.498327][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 423.580835][T19516] openvswitch: netlink: IPv4 tun info is not correct [ 423.592509][T19516] mac80211_hwsim hwsim40 wlan1: Caught tx_queue_len zero misconfig [ 423.909990][T19540] tipc: Started in network mode [ 423.919839][T19540] tipc: Node identity 52d56a1e7547, cluster identity 4711 [ 423.927524][T19540] tipc: Enabled bearer , priority 0 [ 424.007479][T19540] tipc: Disabling bearer [ 424.029006][T19552] nbd: error processing sock list [ 424.056152][T19554] nbd: error processing sock list [ 424.167675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.550071][T19592] sctp: [Deprecated]: syz.4.3765 (pid 19592) Use of int in max_burst socket option. [ 424.550071][T19592] Use struct sctp_assoc_value instead [ 424.643377][T19593] openvswitch: netlink: IP tunnel dst address not specified [ 424.844840][T19614] lo: Caught tx_queue_len zero misconfig [ 424.960001][T19622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.197653][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.495820][T19659] sctp: [Deprecated]: syz.1.3785 (pid 19659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.495820][T19659] Use struct sctp_sack_info instead [ 425.731228][T19675] IPVS: ip_vs_add_dest(): server weight less than zero [ 426.247634][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.452294][T19695] "syz.1.3801" (19695) uses obsolete ecb(arc4) skcipher [ 426.517494][T19701] sctp: [Deprecated]: syz.1.3802 (pid 19701) Use of int in maxseg socket option. [ 426.517494][T19701] Use struct sctp_assoc_value instead [ 427.287663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.945890][T19725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 427.978042][T19725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.039183][T19725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 428.080592][T19479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.106174][T19733] xt_cgroup: invalid path, errno=-2 [ 428.260119][T19741] openvswitch: netlink: IPv4 tunnel dst address is zero [ 428.317652][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.325343][T19742] __nla_validate_parse: 4 callbacks suppressed [ 428.325365][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 428.348000][T19745] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 40 [ 428.471811][T19742] hsr_slave_0: left promiscuous mode [ 428.484408][T19742] hsr_slave_1: left promiscuous mode [ 428.558169][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.835365][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 429.025514][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'. [ 430.334924][T19789] vlan2: entered allmulticast mode [ 430.348038][T19789] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 430.397701][ C1] net_ratelimit: 3 callbacks suppressed [ 430.397724][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.526549][T19800] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3827'. [ 431.199766][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.437777][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.599054][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.238510][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.477705][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.278148][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.517708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.318847][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.557707][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.597706][ C1] net_ratelimit: 2 callbacks suppressed [ 435.597728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.758904][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.767995][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.398056][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.406578][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.637692][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 437.439551][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.678054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.478029][T19479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.717698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.241524][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249458][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 440.797694][ C1] net_ratelimit: 4 callbacks suppressed [ 440.797715][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.598167][T19479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.837702][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.838629][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.638725][T19479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.877689][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.678002][T19479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.917790][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 444.718341][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.878016][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.257710][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.265742][ C1] lec:lec_tx_timeout: lec0 [ 445.998008][ C1] net_ratelimit: 2 callbacks suppressed [ 445.998028][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.001877][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.798028][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.037722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.838084][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.918229][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.077702][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.878158][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.117712][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.918021][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.197697][ C1] net_ratelimit: 3 callbacks suppressed [ 451.197718][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.437819][ T5191] udevd[5191]: worker [5877] /devices/virtual/block/nbd0 timeout; kill it [ 451.477129][ T5191] udevd[5191]: seq 16853 '/devices/virtual/block/nbd0' killed [ 451.489067][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3832'. [ 451.577877][T19821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3836'. [ 451.588240][T19813] validate_nla: 3 callbacks suppressed [ 451.588261][T19813] netlink: 'syz.2.3832': attribute type 13 has an invalid length. [ 451.636191][T19821] bridge_slave_0 (unregistering): left allmulticast mode [ 451.649836][T19821] bridge_slave_0 (unregistering): left promiscuous mode [ 451.668866][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.697111][T19813] lo: entered promiscuous mode [ 451.702299][T19813] lo: entered allmulticast mode [ 451.716279][T19813] tunl0: entered promiscuous mode [ 451.722942][T19813] tunl0: entered allmulticast mode [ 451.733913][T19813] gre0: entered promiscuous mode [ 451.739202][T19813] gre0: entered allmulticast mode [ 451.745948][T19813] gretap0: entered promiscuous mode [ 451.752038][T19813] gretap0: entered allmulticast mode [ 451.772785][T19813] erspan0: entered promiscuous mode [ 451.787503][T19813] erspan0: entered allmulticast mode [ 451.795155][T19813] ip_vti0: entered promiscuous mode [ 451.800710][T19813] ip_vti0: entered allmulticast mode [ 451.807394][T19813] ip6_vti0: entered promiscuous mode [ 451.813075][T19813] ip6_vti0: entered allmulticast mode [ 451.820373][T19813] sit0: entered promiscuous mode [ 451.825464][T19813] sit0: entered allmulticast mode [ 451.831908][T19813] ip6tnl0: entered promiscuous mode [ 451.837242][T19813] ip6tnl0: entered allmulticast mode [ 451.844047][T19813] ip6gre0: entered promiscuous mode [ 451.852357][T19813] ip6gre0: entered allmulticast mode [ 451.859172][T19813] syz_tun: entered promiscuous mode [ 451.864594][T19813] syz_tun: entered allmulticast mode [ 451.872687][T19813] ip6gretap0: entered promiscuous mode [ 451.878409][T19813] ip6gretap0: entered allmulticast mode [ 451.886965][T19813] vcan0: entered promiscuous mode [ 451.892485][T19813] vcan0: entered allmulticast mode [ 451.899878][T19813] bond0: entered promiscuous mode [ 451.905288][T19813] bond0: entered allmulticast mode [ 451.923858][T19813] team0: entered promiscuous mode [ 451.937733][T19813] team0: entered allmulticast mode [ 451.948639][T19813] dummy0: entered promiscuous mode [ 451.958412][T19813] dummy0: entered allmulticast mode [ 451.978955][T19813] nlmon0: entered promiscuous mode [ 451.984320][T19813] nlmon0: entered allmulticast mode [ 452.000194][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.009237][T19813] caif0: entered promiscuous mode [ 452.015499][T19813] caif0: entered allmulticast mode [ 452.024636][T19813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.051144][T19831] lo: entered promiscuous mode [ 452.078489][T19831] netlink: 'syz.4.3837': attribute type 2 has an invalid length. [ 452.086289][T19831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.146498][T19841] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 452.237635][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.276593][T19851] xt_hashlimit: size too large, truncated to 1048576 [ 452.346883][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 452.431365][T19860] netlink: 'syz.3.3846': attribute type 5 has an invalid length. [ 452.891574][T19882] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 452.923798][T19888] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.042512][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.277662][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 453.745362][T19938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3867'. [ 453.831330][T19941] lo: Caught tx_queue_len zero misconfig [ 453.846240][T19907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3860'. [ 453.998181][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.028387][T19949] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 454.040901][T19952] netlink: 'syz.1.3873': attribute type 4 has an invalid length. [ 454.071517][T19949] xt_CT: No such helper "pptp" [ 454.082003][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.156401][T19958] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3875'. [ 454.276038][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'. [ 454.290036][T19965] openvswitch: netlink: Missing key (keys=40, expected=80) [ 454.590802][T19986] vlan2: entered promiscuous mode [ 454.609700][T19986] bridge0: entered promiscuous mode [ 454.621421][T19986] vlan2: entered allmulticast mode [ 454.635765][T19986] bridge0: entered allmulticast mode [ 454.661408][T19988] pimreg: entered allmulticast mode [ 455.099662][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3892'. [ 455.118457][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 455.127577][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3892'. [ 455.506695][T20047] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 455.576169][T20047] bond2: (slave bridge2): making interface the new active one [ 455.584804][T20047] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 456.346354][T20085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.397643][ C1] net_ratelimit: 5 callbacks suppressed [ 456.397663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.446548][T20089] veth1: Caught tx_queue_len zero misconfig [ 456.555524][T20095] nbd: must specify a device to reconfigure [ 456.622344][T20093] ip6_vti0 speed is unknown, defaulting to 1000 [ 456.715001][T20104] __nla_validate_parse: 3 callbacks suppressed [ 456.715021][T20104] netlink: 816 bytes leftover after parsing attributes in process `syz.3.3922'. [ 457.051347][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.203310][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.437662][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.238983][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.460748][T20093] lo speed is unknown, defaulting to 1000 [ 458.477630][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.649231][T20123] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 458.718933][T20123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.884118][T20135] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3927'. [ 458.973688][T20128] syzkaller0: entered promiscuous mode [ 459.001382][T20128] syzkaller0: entered allmulticast mode [ 459.020565][T20140] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 459.048021][T20140] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 459.087073][T20140] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 459.106299][T20140] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 459.586696][T20163] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3936'. [ 459.614417][T20162] netlink: 'syz.3.3935': attribute type 1 has an invalid length. [ 459.640409][T20162] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3935'. [ 459.684792][T20167] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3938'. [ 459.875151][T20170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 460.408546][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 460.507661][T20188] scsi_nl_rcv_msg: discarding partial skb [ 460.955090][T20210] syzkaller0: entered promiscuous mode [ 460.979650][T20210] syzkaller0: entered allmulticast mode [ 461.075834][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'. [ 461.106468][T20217] geneve0: entered allmulticast mode [ 461.268413][T20231] xt_socket: unknown flags 0x50 [ 461.420998][T20238] ipt_REJECT: TCP_RESET invalid for non-tcp [ 461.434213][T20240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3967'. [ 461.581099][T20249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3971'. [ 461.597627][ C1] net_ratelimit: 67 callbacks suppressed [ 461.597657][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.599184][T20249] syzkaller1: entered promiscuous mode [ 461.637705][T20249] syzkaller1: entered allmulticast mode [ 461.755936][T20264] netlink: 'syz.0.3975': attribute type 1 has an invalid length. [ 461.854856][T20264] bond3: entered promiscuous mode [ 461.889045][T20264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.910852][T20270] FAULT_INJECTION: forcing a failure. [ 461.910852][T20270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.952214][T20270] CPU: 0 UID: 0 PID: 20270 Comm: syz.1.3978 Not tainted syzkaller #0 PREEMPT(full) [ 461.952245][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.952263][T20270] Call Trace: [ 461.952272][T20270] [ 461.952281][T20270] dump_stack_lvl+0xe8/0x150 [ 461.952319][T20270] should_fail_ex+0x412/0x560 [ 461.952351][T20270] _copy_to_user+0x31/0xb0 [ 461.952384][T20270] simple_read_from_buffer+0xe1/0x170 [ 461.952420][T20270] proc_fail_nth_read+0x1bb/0x230 [ 461.952483][T20270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.952516][T20270] ? rw_verify_area+0x2a6/0x4d0 [ 461.952537][T20270] ? tun_chr_write_iter+0x18a/0x200 [ 461.952563][T20270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.952594][T20270] vfs_read+0x20c/0xa70 [ 461.952613][T20270] ? fdget_pos+0x246/0x320 [ 461.952649][T20270] ? __pfx___mutex_lock+0x10/0x10 [ 461.952672][T20270] ? __pfx_vfs_read+0x10/0x10 [ 461.952695][T20270] ? __fget_files+0x2a/0x420 [ 461.952729][T20270] ? __fget_files+0x3a0/0x420 [ 461.952758][T20270] ? __fget_files+0x2a/0x420 [ 461.952798][T20270] ksys_read+0x150/0x270 [ 461.952822][T20270] ? __pfx_ksys_read+0x10/0x10 [ 461.952856][T20270] do_syscall_64+0x14d/0xf80 [ 461.952876][T20270] ? trace_irq_disable+0x3b/0x150 [ 461.952906][T20270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.952928][T20270] ? clear_bhb_loop+0x40/0x90 [ 461.952956][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.952983][T20270] RIP: 0033:0x7f751575cfce [ 461.953004][T20270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.953025][T20270] RSP: 002b:00007f75165fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.953049][T20270] RAX: ffffffffffffffda RBX: 00007f75165fc6c0 RCX: 00007f751575cfce [ 461.953066][T20270] RDX: 000000000000000f RSI: 00007f75165fc0a0 RDI: 0000000000000008 [ 461.953080][T20270] RBP: 00007f75165fc090 R08: 0000000000000000 R09: 0000000000000000 [ 461.953094][T20270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.953107][T20270] R13: 00007f7515a16038 R14: 00007f7515a15fa0 R15: 00007ffd0491f958 [ 461.953142][T20270] [ 462.401615][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.440835][T20294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.515118][T20297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.563819][T20300] syz_tun: mtu greater than device maximum [ 462.616165][T20297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.637743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.713670][T20313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.758590][T20314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3989'. [ 462.768176][T20315] syzkaller0: entered promiscuous mode [ 462.773711][T20315] syzkaller0: entered allmulticast mode [ 463.028103][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3992'. [ 463.118350][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.224576][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3995'. [ 463.258422][T20333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3995'. [ 463.297776][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 463.307661][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 463.438980][ T8548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.677617][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.096843][T20391] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.304563][T20396] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 464.478850][ T8548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.560115][T20416] macvtap1: entered promiscuous mode [ 464.570417][T20416] macvtap1: entered allmulticast mode [ 464.590398][T20416] veth1_vlan: entered allmulticast mode [ 464.602767][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 464.626793][T20418] bond0: entered promiscuous mode [ 464.632986][T20418] bond_slave_0: entered promiscuous mode [ 464.634232][T20423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4023'. [ 464.645767][T20418] bond_slave_1: entered promiscuous mode [ 464.654085][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 464.663880][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 464.679969][T20418] batadv0: entered promiscuous mode [ 464.699473][T20418] hsr1: entered promiscuous mode [ 464.704474][T20418] hsr1: entered allmulticast mode [ 464.712680][T20418] bond0: entered allmulticast mode [ 464.717858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.725208][T20418] bond_slave_0: entered allmulticast mode [ 464.732452][T20418] bond_slave_1: entered allmulticast mode [ 464.738653][T20418] batadv0: entered allmulticast mode [ 464.744569][T20418] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 464.754420][T20418] bond0: left promiscuous mode [ 464.762209][T20418] bond_slave_0: left promiscuous mode [ 464.767998][T20418] bond_slave_1: left promiscuous mode [ 464.774974][T20418] batadv0: left promiscuous mode [ 465.193464][T20450] tipc: Enabled bearer , priority 0 [ 465.202491][T20450] syzkaller0: entered promiscuous mode [ 465.211218][T20450] syzkaller0: entered allmulticast mode [ 465.238372][T20450] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 465.333302][T20450] tipc: Resetting bearer [ 465.363657][T20449] tipc: Resetting bearer [ 465.404531][T20449] tipc: Disabling bearer [ 465.460782][T20467] tipc: Enabling of bearer rejected, failed to enable media [ 465.474256][T20470] netlink: 'syz.0.4040': attribute type 4 has an invalid length. [ 465.483752][T20470] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 465.515652][T20467] netlink: 'syz.1.4039': attribute type 1 has an invalid length. [ 465.525071][T20467] netlink: 'syz.1.4039': attribute type 2 has an invalid length. [ 465.534038][T20467] netlink: 'syz.1.4039': attribute type 1 has an invalid length. [ 465.997465][T20506] bond0: entered promiscuous mode [ 466.004185][T20506] bond_slave_0: entered promiscuous mode [ 466.031831][T20506] bond_slave_1: entered promiscuous mode [ 466.048654][T20506] batadv0: entered promiscuous mode [ 466.071317][T20506] hsr1: entered promiscuous mode [ 466.083331][T20506] hsr1: entered allmulticast mode [ 466.095717][T20506] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 466.120687][T20506] bond0: left promiscuous mode [ 466.135453][T20506] bond_slave_0: left promiscuous mode [ 466.150259][T20506] bond_slave_1: left promiscuous mode [ 466.157085][T20506] batadv0: left promiscuous mode [ 466.338184][T20522] bond0: (slave gre0): Error: Device type is different from other slaves [ 466.498373][T20526] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 466.617174][T20532] nlmon0: Caught tx_queue_len zero misconfig [ 466.649861][T20534] x_tables: duplicate underflow at hook 2 [ 466.797623][ C1] net_ratelimit: 5 callbacks suppressed [ 466.797643][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.891379][T20542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.911052][T20545] sctp: [Deprecated]: syz.0.4066 (pid 20545) Use of int in maxseg socket option. [ 466.911052][T20545] Use struct sctp_assoc_value instead [ 467.104914][T20551] bond0: entered promiscuous mode [ 467.137686][T20551] bond_slave_0: entered promiscuous mode [ 467.153040][T20551] bond_slave_1: entered promiscuous mode [ 467.163325][T20551] batadv0: entered promiscuous mode [ 467.170181][T20551] batadv0: left promiscuous mode [ 467.175874][T20551] bond0: left promiscuous mode [ 467.183618][T20551] bond_slave_0: left promiscuous mode [ 467.189635][T20551] bond_slave_1: left promiscuous mode [ 467.205346][T20555] netlink: 'syz.4.4068': attribute type 1 has an invalid length. [ 467.246102][T20555] macvlan2: entered promiscuous mode [ 467.251677][T20555] macvlan2: entered allmulticast mode [ 467.259579][T20555] bond5: entered promiscuous mode [ 467.278250][T20555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 467.303901][T20555] bond5: left promiscuous mode [ 467.386344][T20567] xt_TPROXY: Can be used only with -p tcp or -p udp [ 467.407444][T20567] bridge3: entered promiscuous mode [ 467.416355][T20567] bridge3: entered allmulticast mode [ 467.601999][ T8548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.624073][T20576] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 467.683689][T20581] netlink: 'syz.2.4076': attribute type 13 has an invalid length. [ 467.712942][T20581] netlink: 'syz.2.4076': attribute type 13 has an invalid length. [ 467.721975][ T151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.760037][ T151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.799175][T20581] __nla_validate_parse: 25 callbacks suppressed [ 467.799197][T20581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4076'. [ 467.816237][ T151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.837668][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.855754][ T151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.908209][T20591] openvswitch: netlink: IP tunnel dst address not specified [ 467.933255][ T8335] lec:lec_start_xmit: lec0:No lecd attached [ 467.975724][T20595] netlink: 'syz.1.4079': attribute type 9 has an invalid length. [ 468.118724][T20606] netlink: zone id is out of range [ 468.124096][T20606] netlink: zone id is out of range [ 468.130847][T20606] netlink: zone id is out of range [ 468.137116][T20606] netlink: zone id is out of range [ 468.219222][T20604] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 468.264607][T20604] bond4 (unregistering): Released all slaves [ 468.434499][T20610] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 468.453941][T20622] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:5 [ 468.462958][T20610] bond4 (unregistering): Released all slaves [ 468.590308][T20628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4087'. [ 469.614373][T20695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 471.997699][ C1] net_ratelimit: 150 callbacks suppressed [ 471.997719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.238748][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.798402][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.037707][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.044668][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 473.052717][ C1] lec:lec_tx_timeout: lec0 [ 473.838171][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.077665][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.799048][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.878394][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.117692][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.278571][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.197702][ C1] net_ratelimit: 3 callbacks suppressed [ 477.197723][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.008212][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.237694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.321946][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.038530][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.277745][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.078191][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.317702][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.119289][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.198198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.397712][ C1] net_ratelimit: 3 callbacks suppressed [ 482.397734][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.199370][ T8548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.437717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.238088][ T8548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.409127][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.417508][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.477698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.278025][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.517684][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.319929][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.607855][ C1] net_ratelimit: 4 callbacks suppressed [ 487.607871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.397956][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.637743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.358268][T19481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.438367][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.677684][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.478144][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.717679][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.442563][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.518600][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.797603][ C1] net_ratelimit: 3 callbacks suppressed [ 492.797622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.096402][T20744] syzkaller0: entered promiscuous mode [ 493.102706][T20744] syzkaller0: entered allmulticast mode [ 493.216588][T20751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.225625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.232029][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 493.271034][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 493.295283][T20751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.304338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.421991][T20760] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.517896][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 493.527208][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 493.547079][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 493.568356][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4130'. [ 493.609010][ T8550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.662809][T20778] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4132'. [ 493.675602][T20778] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4132'. [ 493.679284][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 493.745673][T20782] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 493.761404][T20782] bond3 (unregistering): Released all slaves [ 493.837619][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.868387][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'. [ 493.967636][T20760] lo speed is unknown, defaulting to 1000 [ 494.083635][T20797] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002 [ 494.194916][T20805] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 494.211866][T20805] netlink: 'syz.2.4139': attribute type 1 has an invalid length. [ 494.240717][T20811] tipc: Started in network mode [ 494.245665][T20811] tipc: Node identity 62151dc4eb93, cluster identity 4711 [ 494.266736][T20811] tipc: Enabled bearer , priority 0 [ 494.402476][T20805] bond7: entered promiscuous mode [ 494.432956][T20820] netlink: 'syz.3.4143': attribute type 12 has an invalid length. [ 494.453835][T20805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.486641][T20814] bond7: (slave bridge2): making interface the new active one [ 494.511242][T20814] bridge2: entered promiscuous mode [ 494.524117][T20814] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 494.553459][T20811] tipc: Disabling bearer [ 494.604191][T20816] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 494.617280][T20816] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 494.684035][T20820] bond1: option primary_reselect: invalid value (255) [ 494.703849][T20820] bond1 (unregistering): Released all slaves [ 494.877619][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 495.137157][T20854] mac80211_hwsim hwsim46 : renamed from wlan1 [ 495.213147][T20853] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 495.224532][T20862] netlink: 'syz.3.4154': attribute type 9 has an invalid length. [ 495.237191][T20862] netlink: 'syz.3.4154': attribute type 11 has an invalid length. [ 495.273978][T20862] netlink: 'syz.3.4154': attribute type 12 has an invalid length. [ 495.423624][T20874] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 495.455400][T20867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.506360][T20877] bond8: (slave ip6gretap1): making interface the new active one [ 495.515368][T20877] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.524310][T20877] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.534616][T20877] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 495.544400][T20879] netem: unknown loss type 0 [ 495.563914][T20879] netem: change failed [ 495.603093][T20872] netlink: 'syz.0.4161': attribute type 4 has an invalid length. [ 495.829388][T20898] only policy match revision 0 supported [ 495.829414][T20898] unable to load match [ 495.917902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.205519][T20919] netlink: 'syz.1.4174': attribute type 4 has an invalid length. [ 496.206576][T20922] netlink: 'syz.1.4174': attribute type 4 has an invalid length. [ 496.455308][T20943] xt_socket: unknown flags 0x50 [ 497.195874][T21002] netlink: 'syz.4.4197': attribute type 7 has an invalid length. [ 497.254203][T21001] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.581079][T21001] lo speed is unknown, defaulting to 1000 [ 497.660564][T21024] team0: entered promiscuous mode [ 497.665922][T21024] team_slave_0: entered promiscuous mode [ 497.672398][T21024] team_slave_1: entered promiscuous mode [ 497.746876][T21021] gre0: entered promiscuous mode [ 497.752567][T21021] gre0: entered allmulticast mode [ 497.943142][T21036] geneve3: entered promiscuous mode [ 497.974234][T21036] geneve3: entered allmulticast mode [ 497.997609][ C1] net_ratelimit: 1 callbacks suppressed [ 497.997629][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.079293][T21043] sit0: entered promiscuous mode [ 498.469557][T21052] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 498.477135][T21052] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.509348][T21061] __nla_validate_parse: 24 callbacks suppressed [ 498.509368][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 498.572481][ T151] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.581689][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 498.591989][ T151] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.632467][ T151] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.652285][ T151] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.729873][T21066] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4216'. [ 498.966312][ T49] tipc: Subscription rejected, illegal request [ 499.037630][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.089806][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4222'. [ 499.111487][T21088] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 499.180062][T21088] veth1: entered allmulticast mode [ 499.238997][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 499.405114][T21100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4226'. [ 499.415694][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 499.497074][T21104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4226'. [ 499.565326][T21103] validate_nla: 1 callbacks suppressed [ 499.565348][T21103] netlink: 'syz.3.4227': attribute type 10 has an invalid length. [ 499.587921][T21103] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4227'. [ 499.753300][T21109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4228'. [ 499.931665][T21124] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 500.077760][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.254673][T21144] x_tables: duplicate underflow at hook 3 [ 500.278118][T21147] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 500.286301][T21144] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 500.328074][T21147] bond6: entered promiscuous mode [ 500.333521][T21147] bond6: entered allmulticast mode [ 500.340019][T21147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 500.374116][T21151] macvlan2: entered promiscuous mode [ 500.380331][T21151] macvlan2: entered allmulticast mode [ 500.387965][T21151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.454979][T21144] macvlan2: entered promiscuous mode [ 500.478158][T21144] macvlan2: entered allmulticast mode [ 500.493564][T21144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.536083][T21162] syzkaller0: entered promiscuous mode [ 500.546393][T21162] syzkaller0: entered allmulticast mode [ 500.561783][T21163] sctp: [Deprecated]: syz.3.4243 (pid 21163) Use of int in max_burst socket option deprecated. [ 500.561783][T21163] Use struct sctp_assoc_value instead [ 500.607871][T21163] openvswitch: netlink: IP tunnel dst address not specified [ 500.615774][T21155] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.799835][T21171] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 500.900977][T21155] lo speed is unknown, defaulting to 1000 [ 500.995269][T21177] unsupported nlmsg_type 40 [ 501.114027][T21182] bridge0: port 3(syz_tun) entered blocking state [ 501.127593][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.129785][T21182] bridge0: port 3(syz_tun) entered disabled state [ 501.144238][T21182] syz_tun: entered allmulticast mode [ 501.152975][T21182] syz_tun: entered promiscuous mode [ 501.161738][T21182] bridge0: port 3(syz_tun) entered blocking state [ 501.168774][T21182] bridge0: port 3(syz_tun) entered forwarding state [ 501.647591][T21209] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 501.688084][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.700082][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.713618][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 502.157602][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.386572][T21253] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 503.006843][T21298] erspan0: entered promiscuous mode [ 503.014425][T21298] erspan0: entered allmulticast mode [ 503.061826][T21300] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 503.197596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.521810][T21326] __nla_validate_parse: 14 callbacks suppressed [ 503.521831][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4297'. [ 503.769780][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4302'. [ 503.781886][T21337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.784086][T21337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4301'. [ 504.030456][T21354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.078341][T21354] syzkaller0: entered promiscuous mode [ 504.097728][T21354] syzkaller0: entered allmulticast mode [ 504.155984][T21362] netlink: 'syz.0.4309': attribute type 2 has an invalid length. [ 504.237701][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.426882][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4312'. [ 504.438899][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4312'. [ 504.569393][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4314'. [ 504.778299][T21390] rdma_op ffff8880275df1f0 conn xmit_rdma 0000000000000000 [ 505.094941][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4322'. [ 505.130785][T21402] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.253553][T21408] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 505.287610][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.546184][T21418] netlink: 'syz.1.4328': attribute type 17 has an invalid length. [ 505.581679][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 505.617830][T21418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4328'. [ 505.636270][T21424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4331'. [ 505.660241][T21418] erspan0: entered promiscuous mode [ 505.674074][T21418] gretap0: entered promiscuous mode [ 505.923063][T21439] bond4: entered promiscuous mode [ 505.928415][T21439] bond4: entered allmulticast mode [ 505.935123][T21439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.317600][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 506.582235][T21472] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 506.634235][T21478] ip6gre0: Master is either lo or non-ether device [ 506.641429][T21475] netlink: 'syz.2.4348': attribute type 1 has an invalid length. [ 506.821159][T21475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 506.873377][T21478] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 506.905582][T21478] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 506.967451][T21478] bond5: (slave vcan1): making interface the new active one [ 507.007315][T21478] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 507.037613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5320 ms [ 507.045723][ C1] lec:lec_tx_timeout: lec0 [ 507.124957][T21481] bond9: (slave gretap2): making interface the new active one [ 507.153622][T21481] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 507.357762][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.383321][T21513] netlink: 'syz.1.4359': attribute type 2 has an invalid length. [ 507.621748][T21524] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 507.630566][T21526] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 507.933068][T21541] gretap0: entered promiscuous mode [ 508.207346][T21554] openvswitch: netlink: IPv4 tunnel dst address is zero [ 508.258876][T21551] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 508.292362][T21551] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 508.397639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 508.641557][T21570] 8021q: VLANs not supported on caif0 [ 508.713435][T21575] __nla_validate_parse: 7 callbacks suppressed [ 508.713460][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4381'. [ 508.842929][T21578] gtp1: entered promiscuous mode [ 508.859307][T21578] gtp1: entered allmulticast mode [ 509.437592][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.689633][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4389'. [ 509.930223][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 510.146566][T21629] netlink: 'syz.2.4398': attribute type 5 has an invalid length. [ 510.205888][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4396'. [ 510.455305][T21647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4402'. [ 510.477665][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 510.766737][T21666] netlink: 'syz.3.4408': attribute type 6 has an invalid length. [ 510.830108][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4411'. [ 510.987932][T21682] veth0: entered promiscuous mode [ 510.994400][T21681] veth0: left promiscuous mode [ 511.132216][T21691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4416'. [ 511.289804][T21695] syzkaller0: entered promiscuous mode [ 511.295345][T21695] syzkaller0: entered allmulticast mode [ 511.506807][T21708] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4424'. [ 511.517621][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 511.556237][T21708] bond6 (unregistering): Released all slaves [ 511.900870][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4430'. [ 512.311265][T21749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4436'. [ 512.324159][T21749] ipt_REJECT: TCP_RESET invalid for non-tcp [ 512.557717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 512.856122][T21786] ip6gre2: entered promiscuous mode [ 512.979812][T21797] netlink: 'syz.2.4453': attribute type 4 has an invalid length. [ 513.075138][T21799] syzkaller0: entered promiscuous mode [ 513.083073][T21799] syzkaller0: entered allmulticast mode [ 513.146094][T21808] netlink: 'syz.0.4457': attribute type 4 has an invalid length. [ 513.198981][T21810] netlink: 'syz.0.4457': attribute type 4 has an invalid length. [ 513.363383][ T5948] lo speed is unknown, defaulting to 1000 [ 513.369459][T19481] lo speed is unknown, defaulting to 1000 [ 513.607594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.628443][T21827] netlink: 'syz.0.4463': attribute type 7 has an invalid length. [ 513.636626][T21827] netlink: 'syz.0.4463': attribute type 8 has an invalid length. [ 513.722612][T21831] __nla_validate_parse: 7 callbacks suppressed [ 513.722634][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4465'. [ 514.300007][T21870] pimreg3: entered allmulticast mode [ 514.331637][T21872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4478'. [ 514.461833][T21878] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4479'. [ 514.547476][ T30] audit: type=1107 audit(1772514002.221:5): pid=21871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 514.637591][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 514.943958][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4486'. [ 514.963991][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4485'. [ 514.975472][T21907] bridge0: port 3(gretap0) entered blocking state [ 514.986072][T21907] bridge0: port 3(gretap0) entered disabled state [ 514.993075][T21907] gretap0: entered allmulticast mode [ 515.010325][T21907] gretap0: entered promiscuous mode [ 515.021034][T21907] bridge0: port 3(gretap0) entered blocking state [ 515.027707][T21907] bridge0: port 3(gretap0) entered forwarding state [ 515.164583][T21919] Cannot find del_set index 1 as target [ 515.175149][T21919] netlink: 'syz.1.4488': attribute type 10 has an invalid length. [ 515.212499][T21914] syzkaller0: entered promiscuous mode [ 515.233337][T21914] syzkaller0: entered allmulticast mode [ 515.321828][T21919] team0: Port device dummy0 added [ 515.369452][T21923] netlink: 'syz.1.4488': attribute type 5 has an invalid length. [ 515.677588][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 515.789813][T21950] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4498'. [ 515.804009][T21954] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 515.850869][T21950] syzkaller0: entered promiscuous mode [ 515.865771][T21950] syzkaller0: entered allmulticast mode [ 515.889573][T21950] tipc: Enabled bearer , priority 0 [ 515.918780][T21950] tipc: Enabling of bearer rejected, already enabled [ 515.948225][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'. [ 515.959624][T21949] tipc: Resetting bearer [ 515.997612][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 516.039597][T21949] tipc: Disabling bearer [ 516.081126][T16519] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.087081][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'. [ 516.095660][T16519] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.119630][T16519] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.137610][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 516.141526][T16519] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.381220][T21984] xt_hashlimit: overflow, try lower: 3/0 [ 516.490744][T21983] netlink: 'syz.2.4512': attribute type 13 has an invalid length. [ 516.717850][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 517.526190][T22038] openvswitch: netlink: IP tunnel dst address not specified [ 517.757749][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 517.912255][T22055] team0: left promiscuous mode [ 517.917102][T22055] team0: left allmulticast mode [ 517.948638][T22055] team0: Cannot enslave team device to itself [ 518.021743][T22061] netlink: 'syz.1.4531': attribute type 2 has an invalid length. [ 518.184117][T22069] lo: Caught tx_queue_len zero misconfig [ 518.479947][T22083] syzkaller0: entered promiscuous mode [ 518.491188][T22089] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 518.502809][T22083] syzkaller0: entered allmulticast mode [ 518.518221][T22089] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 518.527419][T22089] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 518.735051][T22102] netlink: 'syz.1.4545': attribute type 7 has an invalid length. [ 518.743831][T22092] syzkaller1: entered promiscuous mode [ 518.765305][T22092] syzkaller1: entered allmulticast mode [ 518.797597][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.109498][T22124] Bluetooth: MGMT ver 1.23 [ 519.565904][T22143] __nla_validate_parse: 5 callbacks suppressed [ 519.565928][T22143] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4556'. [ 519.634232][T22145] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4557'. [ 519.644256][T22145] xt_policy: neither incoming nor outgoing policy selected [ 519.837591][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.890244][T22159] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 520.080122][T22171] syzkaller0: entered promiscuous mode [ 520.097397][T22171] syzkaller0: entered allmulticast mode [ 520.393637][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4573'. [ 520.524509][T22200] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 520.681228][T22207] macsec0: entered promiscuous mode [ 520.686559][T22207] macsec0: entered allmulticast mode [ 520.693010][T22207] veth1_macvtap: entered allmulticast mode [ 520.699276][T22207] macsec0: left promiscuous mode [ 520.709122][T22207] macsec0: left allmulticast mode [ 520.719917][T22207] veth1_macvtap: left allmulticast mode [ 520.838334][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4581'. [ 520.877741][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.037371][T22219] tunl0: Caught tx_queue_len zero misconfig [ 521.047324][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4583'. [ 521.317654][T22234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4590'. [ 521.333621][T22230] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 521.364710][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 521.558019][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'. [ 521.571314][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4595'. [ 521.590531][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4595'. [ 521.917596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.966289][T22267] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 522.132213][T22280] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 522.249135][T22283] syzkaller0: entered promiscuous mode [ 522.254951][T22283] syzkaller0: entered allmulticast mode [ 522.304880][T22288] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 522.339300][T22288] netlink: 'syz.4.4607': attribute type 1 has an invalid length. [ 522.360944][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.369557][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.411792][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.438073][T22288] nbd4: detected capacity change from 0 to 127 [ 522.449489][ T5838] block nbd4: Receive control failed (result -104) [ 522.469926][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.755701][T22306] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 522.782526][T22306] bond7 (unregistering): Released all slaves [ 522.957894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 523.313967][T22335] netlink: 'syz.1.4619': attribute type 10 has an invalid length. [ 523.344154][T22335] team0 (unregistering): Port device team_slave_0 removed [ 523.383056][T22335] team0 (unregistering): Port device team_slave_1 removed [ 523.452086][T22335] team0 (unregistering): Port device dummy0 removed [ 523.677035][T22356] netlink: 'syz.2.4626': attribute type 32 has an invalid length. [ 523.685841][T16628] udevd[16628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 523.723016][T22357] x_tables: duplicate underflow at hook 1 [ 523.741963][T16628] udevd[16628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 523.802431][T22356] bond10: option coupled_control: invalid value (52) [ 523.821776][T22356] bond10 (unregistering): Released all slaves [ 523.871733][T22363] net_ratelimit: 1 callbacks suppressed [ 523.871754][T22363] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 523.925714][T22360] syzkaller0: entered promiscuous mode [ 523.958281][T22360] syzkaller0: entered allmulticast mode [ 523.997600][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 524.012046][T22367] netlink: 'syz.4.4630': attribute type 29 has an invalid length. [ 524.151131][T22359] delete_channel: no stack [ 524.260011][T22379] Unsupported ieee802154 address type: 0 [ 524.277806][T22382] Unsupported ieee802154 address type: 0 [ 524.469265][T22389] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.500118][T22389] netlink: 'syz.3.4635': attribute type 1 has an invalid length. [ 524.758017][T22408] syzkaller0: entered promiscuous mode [ 524.763574][T22408] syzkaller0: entered allmulticast mode [ 524.840806][T22410] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 524.911458][T22412] bond7: (slave bond_slave_1): Device is not our slave [ 524.928756][T22412] bond7: option active_slave: invalid value (bond_slave_1) [ 524.950758][T22412] bond7 (unregistering): Released all slaves [ 524.975253][T22414] __nla_validate_parse: 11 callbacks suppressed [ 524.975277][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4643'. [ 525.037675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.057863][T22421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.676069][T22457] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 525.752297][T22459] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4656'. [ 526.014098][T22476] netlink: 'syz.3.4662': attribute type 32 has an invalid length. [ 526.070263][T22476] netlink: 'syz.3.4662': attribute type 1 has an invalid length. [ 526.078174][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 526.522868][T22497] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 526.533225][T22497] tipc: Enabling of bearer rejected, failed to enable media [ 526.703625][T22504] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 526.882123][T22511] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 526.894950][T22513] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 526.910908][T22512] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4672'. [ 527.218018][T22528] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4677'. [ 527.319286][T22532] netlink: 'syz.4.4678': attribute type 5 has an invalid length. [ 527.358253][T22534] netlink: 'syz.1.4679': attribute type 13 has an invalid length. [ 527.399406][T22534] erspan0: refused to change device tx_queue_len [ 527.480895][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4679'. [ 527.494529][T22540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4676'. [ 527.660393][T22550] xt_hashlimit: size too large, truncated to 1048576 [ 527.891106][T22566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4684'. [ 528.038693][T22573] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4688'. [ 528.093026][T22573] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4688'. [ 528.257717][T22582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4692'. [ 528.375443][T22585] IPv6: sit1: Disabled Multicast RS [ 528.532175][T22595] FAULT_INJECTION: forcing a failure. [ 528.532175][T22595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.565817][T22595] CPU: 1 UID: 0 PID: 22595 Comm: syz.3.4697 Not tainted syzkaller #0 PREEMPT(full) [ 528.565857][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.565871][T22595] Call Trace: [ 528.565880][T22595] [ 528.565889][T22595] dump_stack_lvl+0xe8/0x150 [ 528.565926][T22595] should_fail_ex+0x412/0x560 [ 528.565958][T22595] _copy_from_user+0x2d/0xb0 [ 528.565990][T22595] ___sys_sendmsg+0x1c6/0x360 [ 528.566029][T22595] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.566096][T22595] ? __fget_files+0x2a/0x420 [ 528.566127][T22595] ? __fget_files+0x3a0/0x420 [ 528.566166][T22595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 528.566201][T22595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.566242][T22595] ? __pfx_ksys_write+0x10/0x10 [ 528.566275][T22595] do_syscall_64+0x14d/0xf80 [ 528.566295][T22595] ? trace_irq_disable+0x3b/0x150 [ 528.566325][T22595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.566346][T22595] ? clear_bhb_loop+0x40/0x90 [ 528.566372][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.566394][T22595] RIP: 0033:0x7fa7a1f9c799 [ 528.566414][T22595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.566432][T22595] RSP: 002b:00007fa7a2e71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.566455][T22595] RAX: ffffffffffffffda RBX: 00007fa7a2215fa0 RCX: 00007fa7a1f9c799 [ 528.566471][T22595] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000003 [ 528.566484][T22595] RBP: 00007fa7a2e71090 R08: 0000000000000000 R09: 0000000000000000 [ 528.566497][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.566509][T22595] R13: 00007fa7a2216038 R14: 00007fa7a2215fa0 R15: 00007ffc350f1318 [ 528.566543][T22595] [ 528.816986][T22601] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.900341][T22612] tipc: Enabling of bearer rejected, failed to enable media [ 529.141550][T22621] veth0_to_bond: entered allmulticast mode [ 529.197846][ C1] net_ratelimit: 4 callbacks suppressed [ 529.197868][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 529.317254][T22601] lo speed is unknown, defaulting to 1000 [ 529.329670][T22625] veth0_to_bond: entered allmulticast mode [ 529.799637][T22647] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 530.237654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.258770][T22671] netlink: 'syz.1.4717': attribute type 9 has an invalid length. [ 530.493045][T22682] __nla_validate_parse: 7 callbacks suppressed [ 530.493069][T22682] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4722'. [ 530.725292][T22682] 8021q: VLANs not supported on gre0 [ 530.802008][T22691] FAULT_INJECTION: forcing a failure. [ 530.802008][T22691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.845230][T22691] CPU: 1 UID: 0 PID: 22691 Comm: syz.0.4724 Not tainted syzkaller #0 PREEMPT(full) [ 530.845260][T22691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.845273][T22691] Call Trace: [ 530.845281][T22691] [ 530.845290][T22691] dump_stack_lvl+0xe8/0x150 [ 530.845327][T22691] should_fail_ex+0x412/0x560 [ 530.845357][T22691] _copy_from_iter+0x1d3/0x1670 [ 530.845390][T22691] ? rcu_is_watching+0x15/0xb0 [ 530.845425][T22691] ? __pfx__copy_from_iter+0x10/0x10 [ 530.845466][T22691] ? netlink_sendmsg+0x650/0xb40 [ 530.845492][T22691] ? skb_put+0x11b/0x210 [ 530.845523][T22691] netlink_sendmsg+0x6c0/0xb40 [ 530.845559][T22691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.845589][T22691] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.845614][T22691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.845636][T22691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.845659][T22691] ____sys_sendmsg+0xa68/0xad0 [ 530.845709][T22691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.845747][T22691] ? import_iovec+0x73/0xa0 [ 530.845780][T22691] ___sys_sendmsg+0x2a5/0x360 [ 530.845817][T22691] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.845886][T22691] ? __fget_files+0x2a/0x420 [ 530.845915][T22691] ? __fget_files+0x3a0/0x420 [ 530.845955][T22691] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.845990][T22691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.846032][T22691] ? __pfx_ksys_write+0x10/0x10 [ 530.846066][T22691] do_syscall_64+0x14d/0xf80 [ 530.846085][T22691] ? trace_irq_disable+0x3b/0x150 [ 530.846116][T22691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.846138][T22691] ? clear_bhb_loop+0x40/0x90 [ 530.846163][T22691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.846185][T22691] RIP: 0033:0x7fd824d9c799 [ 530.846205][T22691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.846224][T22691] RSP: 002b:00007fd825c34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.846248][T22691] RAX: ffffffffffffffda RBX: 00007fd825015fa0 RCX: 00007fd824d9c799 [ 530.846264][T22691] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000003 [ 530.846278][T22691] RBP: 00007fd825c34090 R08: 0000000000000000 R09: 0000000000000000 [ 530.846292][T22691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.846305][T22691] R13: 00007fd825016038 R14: 00007fd825015fa0 R15: 00007ffd492e3438 [ 530.846339][T22691] [ 531.220689][T22693] bond10: option min_links: invalid value (18446744073709551614) [ 531.228707][T22693] bond10: option min_links: allowed values 0 - 2147483647 [ 531.277624][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.296913][T22693] bond10 (unregistering): Released all slaves [ 531.749790][T22725] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 531.843794][T22729] lo: left promiscuous mode [ 531.862149][T22729] lo: left allmulticast mode [ 531.891627][T22729] tunl0: left promiscuous mode [ 531.901037][T22729] tunl0: left allmulticast mode [ 531.913576][T22729] gre0: left promiscuous mode [ 531.918743][T22729] gre0: left allmulticast mode [ 531.959057][T22734] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4735'. [ 531.978829][T22729] gretap0: left promiscuous mode [ 531.983864][T22729] gretap0: left allmulticast mode [ 532.177993][T22729] erspan0: left promiscuous mode [ 532.183023][T22729] erspan0: left allmulticast mode [ 532.203274][T22729] ip_vti0: left promiscuous mode [ 532.217716][T22729] ip_vti0: left allmulticast mode [ 532.268247][T22729] ip6_vti0: left promiscuous mode [ 532.289526][ T8335] lec:lec_start_xmit: lec0:No lecd attached [ 532.310546][T22729] ip6_vti0: left allmulticast mode [ 532.317619][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.339383][T22729] sit0: left promiscuous mode [ 532.344157][T22729] sit0: left allmulticast mode [ 532.353688][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4738'. [ 532.419940][T22729] ip6tnl0: left promiscuous mode [ 532.425080][T22729] ip6tnl0: left allmulticast mode [ 532.510530][T22729] ip6gre0: left promiscuous mode [ 532.525813][T22729] ip6gre0: left allmulticast mode [ 532.548919][T22729] syz_tun: left promiscuous mode [ 532.562515][T22729] syz_tun: left allmulticast mode [ 532.603154][T22729] vcan0: left promiscuous mode [ 532.627762][T22729] vcan0: left allmulticast mode [ 532.644988][T22729] bond0: left promiscuous mode [ 532.657806][T22729] bond0: left allmulticast mode [ 532.701791][T22729] dummy0: left promiscuous mode [ 532.717104][T22729] dummy0: left allmulticast mode [ 532.749824][T22729] nlmon0: left promiscuous mode [ 532.761405][T22729] nlmon0: left allmulticast mode [ 532.771125][T22729] caif0: left promiscuous mode [ 532.776012][T22729] caif0: left allmulticast mode [ 533.357592][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 533.496886][T22729] geneve2: left promiscuous mode [ 533.503675][T22729] geneve2: left allmulticast mode [ 533.519047][T22729] gtp0: left promiscuous mode [ 533.523813][T22729] gtp0: left allmulticast mode [ 533.545485][T22729] bond1: left promiscuous mode [ 533.557738][T22729] bond1: left allmulticast mode [ 533.575260][T22729] gretap1: left promiscuous mode [ 533.598216][T22729] bond7: left promiscuous mode [ 533.603057][T22729] bridge2: left promiscuous mode [ 533.676816][T22729] gtp1: left promiscuous mode [ 533.684012][T22729] gtp1: left allmulticast mode [ 533.695082][T22729] ip6gre2: left promiscuous mode [ 533.745310][T16520] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.756057][T16520] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.766564][T16520] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.775814][T16520] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.817329][T16520] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.837181][T16520] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.869541][T16520] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.888793][T16520] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.909646][T16520] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 533.926234][T22764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4744'. [ 533.969092][T16520] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.992472][T16520] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.992677][T22769] netlink: 'syz.3.4744': attribute type 3 has an invalid length. [ 534.010265][T16520] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 534.048407][T22768] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 534.092310][T22772] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4746'. [ 534.293246][T22782] netlink: 'syz.4.4749': attribute type 1 has an invalid length. [ 534.312029][T22782] netlink: 'syz.4.4749': attribute type 1 has an invalid length. [ 534.335538][T22782] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.4749'. [ 534.373077][T22788] FAULT_INJECTION: forcing a failure. [ 534.373077][T22788] name failslab, interval 1, probability 0, space 0, times 0 [ 534.402948][T22788] CPU: 0 UID: 0 PID: 22788 Comm: syz.3.4750 Not tainted syzkaller #0 PREEMPT(full) [ 534.402978][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.402991][T22788] Call Trace: [ 534.402999][T22788] [ 534.403008][T22788] dump_stack_lvl+0xe8/0x150 [ 534.403043][T22788] should_fail_ex+0x412/0x560 [ 534.403073][T22788] should_failslab+0xa8/0x100 [ 534.403097][T22788] ? skb_clone+0x212/0x3a0 [ 534.403129][T22788] kmem_cache_alloc_noprof+0x87/0x650 [ 534.403163][T22788] ? __netlink_lookup+0xc6/0x8b0 [ 534.403198][T22788] skb_clone+0x212/0x3a0 [ 534.403234][T22788] __netlink_deliver_tap+0x404/0x850 [ 534.403273][T22788] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.403301][T22788] netlink_deliver_tap+0x19c/0x1b0 [ 534.403329][T22788] netlink_unicast+0x7e3/0x9b0 [ 534.403362][T22788] ? __pfx_netlink_unicast+0x10/0x10 [ 534.403387][T22788] ? netlink_sendmsg+0x650/0xb40 [ 534.403411][T22788] ? skb_put+0x11b/0x210 [ 534.403455][T22788] netlink_sendmsg+0x813/0xb40 [ 534.403493][T22788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.403523][T22788] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.403550][T22788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.403574][T22788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.403599][T22788] ____sys_sendmsg+0xa68/0xad0 [ 534.403640][T22788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.403682][T22788] ? import_iovec+0x73/0xa0 [ 534.403717][T22788] ___sys_sendmsg+0x2a5/0x360 [ 534.403754][T22788] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.403823][T22788] ? __fget_files+0x2a/0x420 [ 534.403853][T22788] ? __fget_files+0x3a0/0x420 [ 534.403895][T22788] __x64_sys_sendmsg+0x1bd/0x2a0 [ 534.403929][T22788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.403971][T22788] ? __pfx_ksys_write+0x10/0x10 [ 534.404006][T22788] do_syscall_64+0x14d/0xf80 [ 534.404026][T22788] ? trace_irq_disable+0x3b/0x150 [ 534.404056][T22788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.404077][T22788] ? clear_bhb_loop+0x40/0x90 [ 534.404104][T22788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.404125][T22788] RIP: 0033:0x7fa7a1f9c799 [ 534.404147][T22788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.404166][T22788] RSP: 002b:00007fa7a2e71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.404189][T22788] RAX: ffffffffffffffda RBX: 00007fa7a2215fa0 RCX: 00007fa7a1f9c799 [ 534.404204][T22788] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000003 [ 534.404218][T22788] RBP: 00007fa7a2e71090 R08: 0000000000000000 R09: 0000000000000000 [ 534.404231][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.404244][T22788] R13: 00007fa7a2216038 R14: 00007fa7a2215fa0 R15: 00007ffc350f1318 [ 534.404279][T22788] [ 534.407921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.692461][T22786] veth3: entered allmulticast mode [ 534.777311][T22797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4754'. [ 534.917869][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4756'. [ 534.982139][T22807] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 535.213731][T22827] veth0: entered promiscuous mode [ 535.235229][T22824] veth0: left promiscuous mode [ 535.309759][T22835] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4765'. [ 535.434319][T22832] syzkaller0: entered promiscuous mode [ 535.440431][T22832] syzkaller0: entered allmulticast mode [ 535.447591][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.672512][T22859] netlink: 'syz.4.4770': attribute type 61 has an invalid length. [ 536.487615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.347062][T22846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4766'. [ 537.517811][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.766556][T22887] tipc: Started in network mode [ 537.773360][T22887] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 537.785505][T22887] tipc: Enabled bearer , priority 2 [ 537.855798][T22897] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4780'. [ 537.875932][T22897] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4780'. [ 537.916572][T22885] syzkaller0: entered promiscuous mode [ 537.946091][T22885] syzkaller0: entered allmulticast mode [ 538.077538][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 538.085602][ C1] lec:lec_tx_timeout: lec0 [ 538.091933][T22904] FAULT_INJECTION: forcing a failure. [ 538.091933][T22904] name failslab, interval 1, probability 0, space 0, times 0 [ 538.133072][T22904] CPU: 0 UID: 0 PID: 22904 Comm: syz.4.4783 Not tainted syzkaller #0 PREEMPT(full) [ 538.133104][T22904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 538.133117][T22904] Call Trace: [ 538.133126][T22904] [ 538.133135][T22904] dump_stack_lvl+0xe8/0x150 [ 538.133172][T22904] should_fail_ex+0x412/0x560 [ 538.133201][T22904] should_failslab+0xa8/0x100 [ 538.133230][T22904] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 538.133266][T22904] ? __alloc_skb+0x186/0x7d0 [ 538.133294][T22904] ? __alloc_skb+0x1d0/0x7d0 [ 538.133319][T22904] ? __local_bh_enable_ip+0xd0/0x130 [ 538.133361][T22904] __alloc_skb+0x1d0/0x7d0 [ 538.133394][T22904] netlink_sendmsg+0x5d4/0xb40 [ 538.133432][T22904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.133463][T22904] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.133491][T22904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.133515][T22904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.133541][T22904] ____sys_sendmsg+0xa68/0xad0 [ 538.133583][T22904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.133624][T22904] ? import_iovec+0x73/0xa0 [ 538.133658][T22904] ___sys_sendmsg+0x2a5/0x360 [ 538.133695][T22904] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.133759][T22904] ? __fget_files+0x2a/0x420 [ 538.133788][T22904] ? __fget_files+0x3a0/0x420 [ 538.133826][T22904] __x64_sys_sendmsg+0x1bd/0x2a0 [ 538.133859][T22904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.133898][T22904] ? __pfx_ksys_write+0x10/0x10 [ 538.133931][T22904] do_syscall_64+0x14d/0xf80 [ 538.133951][T22904] ? trace_irq_disable+0x3b/0x150 [ 538.133981][T22904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.134003][T22904] ? clear_bhb_loop+0x40/0x90 [ 538.134030][T22904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.134051][T22904] RIP: 0033:0x7f100299c799 [ 538.134071][T22904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.134090][T22904] RSP: 002b:00007f10037f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.134113][T22904] RAX: ffffffffffffffda RBX: 00007f1002c15fa0 RCX: 00007f100299c799 [ 538.134128][T22904] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 538.134141][T22904] RBP: 00007f10037f3090 R08: 0000000000000000 R09: 0000000000000000 [ 538.134154][T22904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.134166][T22904] R13: 00007f1002c16038 R14: 00007f1002c15fa0 R15: 00007ffee7a75098 [ 538.134197][T22904] [ 538.557594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.677159][T22927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4787'. [ 538.709385][T22928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4788'. [ 538.733910][T22932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.812128][T22938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4787'. [ 538.837350][ T8550] tipc: Node number set to 10463914 [ 538.855004][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'. [ 538.908801][T22945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4791'. [ 538.961897][T22945] openvswitch: netlink: Flow key attr not present in new flow. [ 538.973733][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'. [ 538.994916][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'. [ 538.996722][T22945] xt_SECMARK: invalid mode: 9 [ 539.142694][T22952] netlink: 'syz.4.4794': attribute type 5 has an invalid length. [ 539.400672][T22971] xt_hashlimit: size too large, truncated to 1048576 [ 539.413873][T22967] bond7: option lp_interval: invalid value (0) [ 539.429530][T22967] bond7: option lp_interval: allowed values 1 - 2147483647 [ 539.453906][T22967] bond7 (unregistering): Released all slaves [ 539.597593][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.852099][T22999] netlink: 'syz.3.4807': attribute type 1 has an invalid length. [ 540.217720][T23026] delete_channel: no stack [ 540.330547][T23033] batadv_slave_0: Caught tx_queue_len zero misconfig [ 540.637627][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.824827][T23061] syzkaller0: entered promiscuous mode [ 540.830845][T23061] syzkaller0: entered allmulticast mode [ 540.864297][T23061] veth0_to_bond: Caught tx_queue_len zero misconfig [ 540.875317][T23061] unsupported nla_type 33542 [ 541.680272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.809475][T23108] ip6gre0: Master is either lo or non-ether device [ 541.989919][T23121] syzkaller0: entered promiscuous mode [ 542.005075][T23121] syzkaller0: entered allmulticast mode [ 542.026788][T23121] 0: reclassify loop, rule prio 0, protocol 800 [ 542.264549][T23144] nbd: must specify at least one socket [ 542.365115][T23150] __nla_validate_parse: 62 callbacks suppressed [ 542.365140][T23150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4852'. [ 542.398391][T23150] netlink: 'syz.4.4852': attribute type 30 has an invalid length. [ 542.433607][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4852'. [ 542.446099][T23153] netlink: 'syz.4.4852': attribute type 30 has an invalid length. [ 542.717614][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.799362][T23178] nbd: socks must be embedded in a SOCK_ITEM attr [ 542.980350][T23188] syzkaller0: entered promiscuous mode [ 542.985983][T23188] syzkaller0: entered allmulticast mode [ 543.059152][T23188] tipc: Enabled bearer , priority 0 [ 543.093838][T23194] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4866'. [ 543.107195][T23187] tipc: Resetting bearer [ 543.120185][T23196] netlink: 'syz.4.4865': attribute type 1 has an invalid length. [ 543.206183][T23187] tipc: Disabling bearer [ 543.247624][T23196] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4865'. [ 543.271813][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4865'. [ 543.757603][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.818357][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4875'. [ 543.873336][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4874'. [ 543.915532][T23226] xfrm1: entered promiscuous mode [ 543.937836][T23226] xfrm1: entered allmulticast mode [ 543.949938][T23229] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4877'. [ 544.317393][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4878'. [ 544.435703][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.538216][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4883'. [ 544.803580][T23274] 8021q: VLANs not supported on lo [ 544.808975][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 544.933902][T23283] netlink: 'syz.4.4897': attribute type 4 has an invalid length. [ 544.948920][T23283] netlink: 'syz.4.4897': attribute type 4 has an invalid length. [ 545.229613][T23304] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 545.837654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.879342][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.919489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.030180][T23371] syzkaller0: entered promiscuous mode [ 548.053125][T23371] syzkaller0: entered allmulticast mode [ 548.146897][T23379] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003 [ 548.382792][T23391] __nla_validate_parse: 3 callbacks suppressed [ 548.382850][T23391] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4929'. [ 548.537580][T23402] veth0_to_bridge: entered promiscuous mode [ 548.550383][T23402] netlink: 'syz.4.4933': attribute type 11 has an invalid length. [ 548.579825][T23399] veth0_to_bridge: left promiscuous mode [ 548.662685][T23411] veth1_macvtap: renamed from macvlan0 [ 548.700672][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4937'. [ 548.724259][T23415] chnl_net:caif_netlink_parms(): no params data found [ 548.957663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 549.028789][T23436] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4944'. [ 549.389145][T23460] netlink: 'syz.3.4951': attribute type 9 has an invalid length. [ 549.432139][T23460] netlink: 'syz.3.4951': attribute type 6 has an invalid length. [ 549.433815][T23469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4948'. [ 549.451129][T23468] IPVS: set_ctl: invalid protocol: 44 172.30.1.5:20000 [ 549.701161][T23484] netlink: 'syz.4.4955': attribute type 12 has an invalid length. [ 549.737873][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4955'. [ 549.744705][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4954'. [ 549.780832][T23484] netlink: 'syz.4.4955': attribute type 12 has an invalid length. [ 549.815473][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4955'. [ 549.923049][T23495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4958'. [ 549.997605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.115780][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4962'. [ 550.147822][T23507] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 550.196033][T23507] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 550.209701][T23507] netlink: 'syz.0.4962': attribute type 2 has an invalid length. [ 550.259951][T23507] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4962'. [ 550.318527][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 550.350318][ T31] Not tainted syzkaller #0 [ 550.372096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.393317][ T31] task:kworker/1:0H state:D stack:28736 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 550.425248][ T31] Workqueue: kblockd blk_mq_timeout_work [ 550.448310][ T31] Call Trace: [ 550.454263][ T31] [ 550.464253][ T31] __schedule+0x1585/0x5340 [ 550.475442][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.487613][ T31] ? __pfx___schedule+0x10/0x10 [ 550.503209][ T31] ? schedule+0x90/0x360 [ 550.513533][ T31] schedule+0x164/0x360 [ 550.531757][ T31] schedule_timeout+0xc3/0x2c0 [ 550.544677][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 550.557105][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.567570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.579935][ T31] ? wait_for_completion+0x274/0x5e0 [ 550.591172][ T31] wait_for_completion+0x2cc/0x5e0 [ 550.603241][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 550.609571][ T31] __synchronize_srcu+0x329/0x3e0 [ 550.617740][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.628597][ T31] ? __pfx___synchronize_srcu+0x10/0x10 [ 550.641591][ T31] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 550.653809][ T31] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 550.666818][ T31] ? synchronize_srcu+0x295/0x2c0 [ 550.679319][ T31] blk_mq_timeout_work+0x1a0/0x3f0 [ 550.690325][ T31] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 550.703076][ T31] ? process_scheduled_works+0xa25/0x1830 [ 550.710128][ T31] ? process_scheduled_works+0xa25/0x1830 [ 550.716324][ T31] process_scheduled_works+0xb02/0x1830 [ 550.747652][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.756425][ T31] ? assign_work+0x3d5/0x5e0 [ 550.762144][ T31] worker_thread+0xa50/0xfc0 [ 550.766992][ T31] kthread+0x388/0x470 [ 550.773325][ T31] ? __pfx_worker_thread+0x10/0x10 [ 550.784356][ T31] ? __pfx_kthread+0x10/0x10 [ 550.791687][ T31] ret_from_fork+0x51e/0xb90 [ 550.796519][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.806002][ T31] ? __switch_to+0xc7d/0x1450 [ 550.816934][ T31] ? __pfx_kthread+0x10/0x10 [ 550.824668][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.830321][ T31] [ 550.833636][ T31] INFO: task kworker/1:1H:1704 blocked for more than 143 seconds. [ 550.844116][ T31] Not tainted syzkaller #0 [ 550.849568][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.859230][ T31] task:kworker/1:1H state:D stack:26536 pid:1704 tgid:1704 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 550.897625][ T31] Workqueue: kblockd blk_mq_requeue_work [ 550.907895][ T31] Call Trace: [ 550.911247][ T31] [ 550.924427][ T31] __schedule+0x1585/0x5340 [ 550.936764][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.944719][ T31] ? __pfx___schedule+0x10/0x10 [ 550.954852][ T31] ? schedule+0x90/0x360 [ 550.965134][ T31] schedule+0x164/0x360 [ 550.969853][ T31] schedule_timeout+0x158/0x2c0 [ 550.974771][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 550.982813][ T31] ? __pfx_process_timeout+0x10/0x10 [ 550.988536][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.994489][ T31] ? prepare_to_wait_event+0x436/0x480 [ 551.000477][ T31] nbd_queue_rq+0x857/0x1100 [ 551.005232][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 551.011154][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 551.017374][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 551.023714][ T31] ? sbitmap_get+0x229/0x390 [ 551.037687][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.052393][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 551.058752][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 551.064641][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 551.077642][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 551.084699][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 551.107594][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 551.113076][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 551.118728][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 551.124102][ T31] blk_mq_requeue_work+0x71c/0x780 [ 551.134240][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 551.144372][ T31] ? process_scheduled_works+0xa25/0x1830 [ 551.154486][ T31] ? process_scheduled_works+0xa25/0x1830 [ 551.164643][ T31] process_scheduled_works+0xb02/0x1830 [ 551.174800][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 551.184910][ T31] ? assign_work+0x3d5/0x5e0 [ 551.195352][ T31] worker_thread+0xa50/0xfc0 [ 551.205503][ T31] kthread+0x388/0x470 [ 551.210014][ T31] ? __pfx_worker_thread+0x10/0x10 [ 551.215197][ T31] ? __pfx_kthread+0x10/0x10 [ 551.230584][ T31] ret_from_fork+0x51e/0xb90 [ 551.235266][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.251229][ T31] ? __switch_to+0xc7d/0x1450 [ 551.255999][ T31] ? __pfx_kthread+0x10/0x10 [ 551.269123][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.274013][ T31] [ 551.363166][ T31] [ 551.363166][ T31] Showing all locks held in the system: [ 551.377223][ T31] 2 locks held by kworker/1:0H/25: [ 551.407927][ T31] #0: ffff88801faaf948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 551.447035][ T31] #1: ffffc900001f7c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 551.477907][ T31] 1 lock held by khungtaskd/31: [ 551.482927][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 551.501598][ T31] 4 locks held by kworker/1:1H/1704: [ 551.513886][ T31] #0: ffff88801faaf948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 551.546025][ T31] #1: ffffc90005a1fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 551.583416][ T31] #2: ffff8880266b9c18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 551.611520][ T31] #3: ffff888026cb0580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 551.633383][ T31] 2 locks held by getty/5584: [ 551.654135][ T31] #0: ffff8880329980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 551.678348][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 551.702538][ T31] 1 lock held by udevd/5877: [ 551.713953][ T31] #0: ffff888026c52358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 551.733214][ T31] 1 lock held by udevd/16257: [ 551.745962][ T31] #0: ffff888026d87358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 551.763664][ T31] 3 locks held by kworker/u8:32/22994: [ 551.770003][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 551.782613][ T31] #1: ffffc9000c48fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 551.794069][ T31] #2: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 551.803488][ T31] 2 locks held by syz.0.4962/23504: [ 551.809013][ T31] #0: ffffffff8fbcc8c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 551.818379][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 551.831583][ T31] [ 551.836536][ T31] ============================================= [ 551.836536][ T31] [ 551.884676][ T31] NMI backtrace for cpu 0 [ 551.884697][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 551.884722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.884735][ T31] Call Trace: [ 551.884743][ T31] [ 551.884753][ T31] dump_stack_lvl+0xe8/0x150 [ 551.884788][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 551.884815][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.884845][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 551.884877][ T31] sys_info+0x135/0x170 [ 551.884899][ T31] watchdog+0xfd9/0x1030 [ 551.884938][ T31] ? watchdog+0x21a/0x1030 [ 551.884977][ T31] kthread+0x388/0x470 [ 551.884999][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.885035][ T31] ? __pfx_kthread+0x10/0x10 [ 551.885058][ T31] ret_from_fork+0x51e/0xb90 [ 551.885089][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.885115][ T31] ? __switch_to+0xc7d/0x1450 [ 551.885143][ T31] ? __pfx_kthread+0x10/0x10 [ 551.885164][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.885211][ T31] [ 551.885219][ T31] Sending NMI from CPU 0 to CPUs 1: [ 552.001062][ C1] NMI backtrace for cpu 1 [ 552.001080][ C1] CPU: 1 UID: 0 PID: 22992 Comm: kworker/u8:30 Not tainted syzkaller #0 PREEMPT(full) [ 552.001100][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.001113][ C1] Workqueue: krds_cp_wq#6/0 rds_connect_worker [ 552.001146][ C1] RIP: 0010:stack_depot_save_flags+0xf7/0x810 [ 552.001171][ C1] Code: 07 4c 89 f2 89 e9 89 e8 83 fe 01 88 5c 24 10 7f 0a 85 f6 8b 74 24 04 75 11 eb 4c 83 fe 02 8b 74 24 04 74 03 03 6a 08 03 42 04 <03> 0a 31 c5 89 c2 c1 c2 0e 29 d5 31 e9 89 ea c1 c2 0b 29 d1 89 ca [ 552.001187][ C1] RSP: 0018:ffffc9000e32f708 EFLAGS: 00000297 [ 552.001202][ C1] RAX: 00000000a42495f0 RBX: 1ffff92001c65e01 RCX: 00000000e0e248bf [ 552.001223][ C1] RDX: ffffc9000e32f7e8 RSI: 0000000000000001 RDI: 00000000b2162e1a [ 552.001235][ C1] RBP: 00000000c85791da R08: 0000000007fb4457 R09: 00000000fc7342f6 [ 552.001246][ C1] R10: 000000000000000a R11: ffffffff81b0b100 R12: f8f8f8f8f8f8f8f8 [ 552.001259][ C1] R13: 0000000000002800 R14: ffffc9000e32f7a0 R15: ffff88808c3a8980 [ 552.001272][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 552.001286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.001298][ C1] CR2: 000055a454dc5138 CR3: 000000007597a000 CR4: 00000000003526f0 [ 552.001313][ C1] Call Trace: [ 552.001320][ C1] [ 552.001333][ C1] ref_tracker_free+0x12d/0x840 [ 552.001357][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.001379][ C1] ? __sk_destruct+0x3c7/0x880 [ 552.001403][ C1] ? inet_release+0x143/0x190 [ 552.001428][ C1] ? sock_release+0x85/0x150 [ 552.001445][ C1] ? rds_tcp_conn_path_connect+0x78c/0x930 [ 552.001464][ C1] ? rds_connect_worker+0x1d8/0x290 [ 552.001489][ C1] ? process_scheduled_works+0xb02/0x1830 [ 552.001512][ C1] ? worker_thread+0xa50/0xfc0 [ 552.001533][ C1] ? kthread+0x388/0x470 [ 552.001548][ C1] ? ret_from_fork+0x51e/0xb90 [ 552.001569][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 552.001602][ C1] ? rcu_read_unlock_migrate+0x19d/0x260 [ 552.001626][ C1] __sk_destruct+0x3c7/0x880 [ 552.001653][ C1] inet_release+0x143/0x190 [ 552.001680][ C1] sock_release+0x85/0x150 [ 552.001698][ C1] rds_tcp_conn_path_connect+0x78c/0x930 [ 552.001725][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 552.001746][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 552.001775][ C1] rds_connect_worker+0x1d8/0x290 [ 552.001800][ C1] ? process_scheduled_works+0xa25/0x1830 [ 552.001824][ C1] process_scheduled_works+0xb02/0x1830 [ 552.001863][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.001889][ C1] ? assign_work+0x3d5/0x5e0 [ 552.001914][ C1] worker_thread+0xa50/0xfc0 [ 552.001954][ C1] kthread+0x388/0x470 [ 552.001972][ C1] ? __pfx_worker_thread+0x10/0x10 [ 552.001994][ C1] ? __pfx_kthread+0x10/0x10 [ 552.002011][ C1] ret_from_fork+0x51e/0xb90 [ 552.002036][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 552.002058][ C1] ? __switch_to+0xc7d/0x1450 [ 552.002080][ C1] ? __pfx_kthread+0x10/0x10 [ 552.002098][ C1] ret_from_fork_asm+0x1a/0x30 [ 552.002134][ C1] [ 552.087772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 552.137096][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 552.137171][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.137246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.137282][ T31] Call Trace: [ 552.137311][ T31] [ 552.137334][ T31] vpanic+0x56c/0xa60 [ 552.137433][ T31] ? __pfx___schedule+0x10/0x10 [ 552.137525][ T31] ? __pfx_vpanic+0x10/0x10 [ 552.137610][ T31] ? __pfx_console_unlock+0x10/0x10 [ 552.137717][ T31] panic+0xc5/0xd0 [ 552.137793][ T31] ? __pfx_panic+0x10/0x10 [ 552.137878][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 552.137955][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 552.138080][ T31] watchdog+0x1023/0x1030 [ 552.138192][ T31] ? watchdog+0x21a/0x1030 [ 552.138302][ T31] kthread+0x388/0x470 [ 552.138357][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.138440][ T31] ? __pfx_kthread+0x10/0x10 [ 552.138503][ T31] ret_from_fork+0x51e/0xb90 [ 552.138588][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 552.138662][ T31] ? __switch_to+0xc7d/0x1450 [ 552.138739][ T31] ? __pfx_kthread+0x10/0x10 [ 552.138800][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.138945][ T31] [ 552.140033][ T31] Kernel Offset: disabled