last executing test programs: 9.632204582s ago: executing program 0 (id=2574): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x20000ffd, &(0x7f00000004c0)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b", 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route_sched(r3, 0x0, 0x2880) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.840096145s ago: executing program 4 (id=2646): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000300)={0x9, 0x945, 0x4, 0x0, 0x0, [{{r0}, 0x6}, {{r1}}, {{r0}, 0x5}, {{r0}, 0x7fff}]}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xd6, "2dcfcbecb4791e1a8275ac05f5423d8fdbcac6a26efb174f95b72d2408b08d5b0aa0591a516d04f03fa783d6724cd16728bb72debee2f177bb6e79e8afd51b501531c7a2752e4fff83c167ba05feb2d621466455283b3ca90d7b572652d238ecb577f2df0fddd6872ee0d5398ba451f021936f5a91dcb1fae5405071c4e385d068e8c6a7c1daefef4ca9b8ca5875f970765ce4dc056ebb41c93dc65ff4ad813d947ce14cea5392fee8f073c537834e49ed5ea2a623c68ee32101f661fd98ed5c5b70fa456f1693767a1271f63bfbfbe8bde3c9313ebe"}, &(0x7f0000000140)=0xfa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.820434811s ago: executing program 0 (id=2648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002e00)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x218, 0x180, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@loopback, @ipv6=@private2, @ipv4=@private=0xa010100, @ipv6=@empty}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x2, 0x4, 0x4, 0x5, 0x2], 0x0, 0x2}, {0x1, [0x4, 0x1, 0x4, 0xe, 0x4, 0x4], 0x6, 0x6}}}}, {{@ip={@loopback, @remote, 0xff, 0xffffff00, 'team0\x00', 'pimreg1\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @multicast1, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'vlan1\x00', {}, {}, 0x67, 0x1, 0x19}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x800, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 1.666745252s ago: executing program 0 (id=2650): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a8e9, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.499056025s ago: executing program 3 (id=2653): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0xb}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xed000000}, 0x94) 1.380329605s ago: executing program 1 (id=2654): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x1d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x6c}, @ldst={0x1, 0x0, 0x4, 0x2, 0x7, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xaa, 0x4, 0x8, 0x6, 0xfffffeff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x2, &(0x7f00000003c0)=""/2, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r2, r1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x5, 0x8, 0x7}, {0x2, 0x4, 0x0, 0xa}], 0x10, 0x260}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x8, 'macsec0\x00', {'wlan1\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x404c4c4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.256413781s ago: executing program 3 (id=2655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async) r1 = socket$kcm(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) unshare(0x2c020400) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000025c0)=""/4111, 0x100f}], 0x1}, 0x40000300) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x2000000000000, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x378a, 0x40}, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d8"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000001180)={0x100, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x48}}}}, [@NL80211_ATTR_FRAME_MATCH={0xcf, 0x5b, "7f4194d34908bc5e12d3b2e241fa866f9cf53b4be3067b4522dcffc8359d43d4846d78378b333b8a16ecdc1af48af899415bf53222d839a58d09c1aa2a5c05d186483f0e5b97688debdb19484e4fcc1e5b0ab10c1de1d4430735dad85507996d2fc2abcba99ef6d53eb57036ce1603e06336b8b13a0fc1cbc1cc9e26e4f3971305d27484f0a1ee9a9aa570ba8517e8e60b31d898cd16daac2654f1f31501ba8280fc8a645e83c6f331a88f4c9046ca50bd33bc5ca2fbe0edc134157e1e60aa94554eca39a4590273117aa3"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x100}, 0x1, 0x0, 0x0, 0x850}, 0x8080) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20) 1.255789727s ago: executing program 2 (id=2656): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000ffd000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000801020018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 1.193454633s ago: executing program 1 (id=2657): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="180013001400090527bd7000fcdbdf25023800ff", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000020000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c000380050001002d000000080001400000000008000240000000000c00048005000100160000000900010073797a30000000000900020073797a32"], 0x94}}, 0x40000) (async) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) (async) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x22020400) (async) read(r7, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x14, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917511679abf4579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.182281441s ago: executing program 2 (id=2658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003ec0)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c001700020000000000000008000900", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x400, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x200408c4) 1.135570205s ago: executing program 3 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9402}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x68040}, 0x4000) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x400) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x2, @none, 0x9, 0x1}, 0xe) r2 = socket(0x2, 0x2, 0x9) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@newae={0xb4, 0x1e, 0x200, 0x70bd27, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0xa, 0x6c}, @in=@private=0xa010100, 0x1, 0x8}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@private0, 0xa, 0xa, 0x3}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10000}, 0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x808, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bind$802154_dgram(r2, &(0x7f00000005c0)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc087}, 0x8000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000740)=0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000800)={r7, 0xfffff800}, 0x8) recvfrom$inet(r2, &(0x7f0000000840), 0x0, 0x2, &(0x7f0000000880)={0x2, 0x4e22, @local}, 0x10) socket$netlink(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000008c0)) socketpair(0x10, 0x80000, 0x400, &(0x7f0000000900)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x1412, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000b00)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r9, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000001000)={r8, &(0x7f0000000f00)=':&,%\x00', 0x109800, &(0x7f0000000f40)={@align=0xa, {0xf, 0x76f, 0x8, 0xb3f8}}, 0x80, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x1d, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x2, 0x0, 0x6, 0x4, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @alu={0x4, 0x0, 0x4, 0xa, 0xb, 0xffffffffffffffe8, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @ldst={0x1, 0x2, 0x6, 0x5, 0xa, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0x2, 0xa, 0x9, 0x7, 0x6}]}, &(0x7f0000000dc0)='GPL\x00', 0xffff8000, 0xff, &(0x7f0000000e00)=""/255, 0x40f00, 0x10, '\x00', r4, 0x0, r11, 0x8, &(0x7f0000001040)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0x5, 0x4, 0x80}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000010c0)=[r9, r9, r9, r9], &(0x7f0000001100)=[{0x2, 0x2, 0x8, 0x6}, {0x5, 0x3, 0x1, 0xa}, {0x3, 0x5, 0xa, 0x9}, {0x2, 0x1, 0xf, 0xf}, {0x1, 0x3, 0xc, 0x4}, {0x0, 0x4, 0x6}, {0x5, 0x1, 0xb, 0x7}, {0x3, 0x3, 0x1, 0xb}, {0x2, 0x1, 0x2, 0xc}], 0x10, 0x5}, 0x94) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000001280), &(0x7f00000012c0)=0x4) 1.027796863s ago: executing program 0 (id=2660): r0 = socket$inet(0x2, 0x80001, 0x84) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380008166e4bf04ed4fab42312a8114b8d09c7c117755e1d7dfaf84870ea84f1763a8635c44845df292ac5eaeda603618b093fe59ed6b4546846f8b3da387870398e3f402379e65badd60c6462f3d83cb5036846978a1b236f85f573123c11ede8771e3367e1b4593ce388443a7a8fb204d2e62666e2bee7b6b56ddcc226e117bde7ca10090bc871ebe2d55e5faa4a9c7b7aeac27f87259ce95de230bd6e341fb9ea9865d3bc985fc17280188e1e64a60767717a06aea93066ccade97571ac7b8c30d7a18181b4dd87865734db3724", @ANYRES16=r2, @ANYBLOB="010a26bd7000fcdbdf25310000000500360001000000050033000300000005003500800000000a0001007770616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040000) listen(r0, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r3, 0x3) socket$inet(0x2, 0x80001, 0x84) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380008166e4bf04ed4fab42312a8114b8d09c7c117755e1d7dfaf84870ea84f1763a8635c44845df292ac5eaeda603618b093fe59ed6b4546846f8b3da387870398e3f402379e65badd60c6462f3d83cb5036846978a1b236f85f573123c11ede8771e3367e1b4593ce388443a7a8fb204d2e62666e2bee7b6b56ddcc226e117bde7ca10090bc871ebe2d55e5faa4a9c7b7aeac27f87259ce95de230bd6e341fb9ea9865d3bc985fc17280188e1e64a60767717a06aea93066ccade97571ac7b8c30d7a18181b4dd87865734db3724", @ANYRES16=r2, @ANYBLOB="010a26bd7000fcdbdf25310000000500360001000000050033000300000005003500800000000a0001007770616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040000) (async) listen(r0, 0x3) (async) socket$inet(0x2, 0x80001, 0x84) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r3, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) (async) listen(r3, 0x3) (async) 991.871701ms ago: executing program 2 (id=2661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080c2}, 0x20000000) 886.836214ms ago: executing program 1 (id=2662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005", @ANYRESOCT=0x0], 0x3c}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0002010400000900240012800b00010065727373616e0000140002800500160000000000080007e2011414bb08000a00", @ANYBLOB="4c00000010001ffffcffffff97ffffff00000000", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a0014"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b00)={0x1328, r7, 0x412, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x18b}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_NODE={0x1234, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "e6b636cba5e12428594b8edf4129ca87bea748df07728fde6fc35163fa854f7184490736b81f5792ac7a650ccce2110825acd69ce90f018696be5098ecc0c10ec0f2c16f1ace8e61f4a2700f4f99fa52ca92837cfa69691ca61de87a00374883edcb1f59586d8858ba52f9dcfb39415cdd690baebfd93a72acd8793b1591cc110a6a272c880a79bf"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d8a22da763e91b0007a5e5a9a0be18e5acd35cf341"}}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "f57a6e3ca6afe4d1e245064414c42fdf5777a7db2575cfeaacf799b21b3f2ac68e0767d2c686385b3ea546a53188251f37caabb7ed0f7d9d5b2d6cbda78792687889585506e283343d7199a5e83c3efc9d7ff7eb91ea92216a50c7e85db3ecdaf9dc8b8bbfa3b8bf2e51bb94740c3dc3df9a253f96c4ab0f53c5f806762792946e56ae6e59e05bbe68fcfc1090abf84f5d432894a372920087ddceb087a7e74f1aa95b593410ba875f521b6270e5b6de8ba8ac9d2791beb1ed2668eac567ae5af9e6617923f076a838c0787b6972973cbb6549e7a4c8d6c7abca4bdd5a8fbb70324b65623005fbaa2db4bcbd452b72c08d0c094804f0cb1966"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "194fb8aa57b7514903f6340d6ae62a12ba500a4ea8ebd5454454cd93e503049c45fe145ddef464d394c3694d532857ba9d36eb8028f487cd3e9144fdd9a8f2305bd9cc3a8aa86df66b367ab4fcddd5802854a1690d71e40e14cdd6e32b3314c53e6e0232eb190aa8b81f647e3f58886d31c21428392700a1fc1ef73220ae72a0897fe3480ec74620c93e204665be0fb2450647c66259328f5df0eaea6ad7c408a478ef3303fda7b6bdcc71bace7e5dd5cd4dd763e440ea47852d407644bcbc749620b473345cced99db960b5475a88b811547f35d2fe6df7ad6158170a28e3d7a4089e77510d519f72b1bacbd27419df545cf20c732223c76bc4fb431eb1e89c821027065c1296744713cf66951aeadbbc1a87012d448370a35c63bc66243923efb58a4bab8554e0f4032d080592dc7dd75a8fe16ee85f8b001dcee20c7ceb7e57b2a6cf870197b475a17a60fde04ed7dafc97e420367cc9e9acf0727bd256cf76a2c3de0fbc56b5f159d41af8ef62f31cb515dd5860e8f554b0b916997e824ffb3929e6eec05f5bdfa1649d63a9d492d8532a9b361d45e47bf6abddedec50782bcf5f9dcd45dc67cdce898fd3a616c1a52370dac4ed90c8210d935a18816a37ceaad9622288f8aa76d7e9d5ea50f97f543045f309f807de2d63b1662c6eed1c276802ee8fb35a2c60a95e68a7b5213335e730321ac4a051274f7f6a52795c69fafdb84b4184dcab27bde05eb30368c7282bbcc42eedd048626d7cba2bfcc844d5a27b01241ebb2ca963d4df25d8bc75de55fe71f0745b1c8bbe4f0b63954e4cb022c0f21274e409b8b4da8c2838efab0b63bbeed378ccb11b721bee2cf021682792a6ef9c71807fc01eba5b59a5e5102080f16bc9e4029a0abeecba1efc8ba7f23112f3d1bc347db9bdfd0d3ff1392085e7b952da758e9eec249e3d4655d9306ba48eb543a313b01bf5aba7bac36d78cccd386c0eb254f134a3b2b5c3e76c552fa8565bf4cf9649e8858cd2b2a0ee9cf9e3d2138a2229f5c96d0909845df183fe377953bb5019d01c4da917243c2132236f2f6547c242b71c4a94c8406cbdc5ac241a3430c17b5d1d980a4de9af4e29b6d1609c8b2ccc62d96733241a7077fee8dc9ef120fdc76e01c223c415b4b5da9854d84e009116698d017bdf0809af617e7ccc507e4114cdcd4689217f7c75a2a9a32f3414363c4fcdb4f8f83d11d571bb336a17016aed14c4ead8b00917cbde82ae93d33420e224dc23db208093c9d5c6aacb9cf11ec5f69e37c7f24cfa7a6302811381dc3048359b88a00a892a6f90d22bb64153722a044067849c1e942db32c0389afebbf6dfd5d0b68267a1192e31a90ab47286568454a08bdaaa425da890a4585afbcddc5eaf9a19b265135efead522c9c1d4ea7e09972e0b6db358efc9d729d3af71003494c7c82b970475b44c01820cfcaa24290f86a6d9676f572d63e91cffdf21c08a9c6ab1f322ce54e71dd39034832584d74239c33d1e7514efcb2e2dd0a8ea28dbf5d2b328503202d0dd429b4268015abd7612eb6a2394293de548afafe7141f923b1d4cb1dc9adbe56f9f61ef71b9f1e1630dae13abfca6d9fd9c78f79805d2b24f8241a504add25ba081feb0b8f2ef4c8c88b00300f83c08a82ac41cbb114c3a50b5ed422a879a462b85c37325f6c13a01ea7514c94378d67bf38e1a8ab91f2345765b56b18d3ffd5446d2f225206c3f2d1b1866c1cc5f22b3640bfc752c2a00720437c2dba630cdccba1c39576bf15a7ea8f7aedb178a5675d18f75a43762896b2e366c52c38c885b6d66de175284b14f8a726fe55b72ed801a39ee1baffe155eb2395b9c4edbac5d0b4078f3afb7097222f783a6c3bdf0e000a6a3bea64e7aa0b043ccc17c6698ee03a7818bf803f9f8427bca4d8c5434f44d71008a2b4412dac0a7b3aa9052eee90963e3dfa98f7cafd3289a9a8ce9059c4000fe7b9d8553bbcb41d22e1c74a4c1d93b6a1895cd41b411a605bbb863acf4f55a4db0490859d98d03900b0aa89d8725f6149bfd251a08963f0ec1a6fc3defceb5f7885b321007b5e26e52db18ea92ae5da61cf4a734e8304f0b5fc8581e7f03daa6264603901c51f638e7549634e85d30a8ed93f1219ea9cb290fd52193d04ecd9d1588b426f60749023805871b29a188d0c8166167c9d3b3d28ae6f040b55ef615cad6bf820e5bf299e9f7ee560811c681178117445f6770e300c22864b6a291ef35d074a20314be1dd5dcb3a8c603ca6877a9255811cebbb07f1a6b2f7018d657f28c2c97c0c06e13cfc240a13676596eabae555399809a0e2201beb6d806094205a0332ce660c74b69ee7406d82c7484230074c78d7e096048430b40d3efaae3544071c213673af638bd8941ef8f38c24e0b077f6bc5f7272534478de636d4de29ba8f603855481ba99d8c6cdd51bd26b0793d961eb5c98e6af8b515870aa6f6acefa7f6b629d554b93124f9a07eb4929816928f18cd54f731235d3e5fac79ebb93ace42d68bebf5b1aa1c4c1993c2f393d6c2b5106b1c1346b1db020eb7bb128ae839a6de2529645fcae3458788511c363716ed9d26c2b466491aa1ba130d3bae42818948972a4c8a3090f51fd2dbe95b262bf34bfbc399356032287a55786e9fda329086473a0d740ca3c79dd6f6eda9773d7b22332f536e41b0c1bb6f64751daac3b406d2dc375cfead1bc2187efcf2bda9a64edee46e0e26de54077fd0332a727a1477d14acadcafdcfa447b7036dc573969058f3288828cf27e8e6090c2ee931de1401279a2b777223097491ab487b8363f3460efe2a892a229acde4f38c336cdf8615f88f7aade9d76efc275bf8c7a305b075c2f900d1cdd18eefacb64dca16f6c1d1c5d5f01dac1e56356c114e9df54d6d9159aad9cade70b1ace8b4b4fc6e7ca6af2d96eef5e9c6eb16c5ed806311c22d62d31882db8e86349612e786239c7323e945fa909fc7e02feeabcface9f631f3314c03922abc46043ed70f1710f4c22fa95fdfb9ebc7b5bca022541850142fc63391ac5f4644d582593ebc1c469f94cd615cc194b5c98b8d281f17cf634ef231b77b5dcfa856364be5308b4cd6660adba0cfbba4ac2cfa458d2e847dd4fcb8be33382cae447df4c121ad263c209effa2973a2014bc22e28f4e8ce3c7043e7b762da219ca3762dfa37a08c1f54bae51da0fcab58d01c997a552162733938fe5a766abfd13bb61e70659aa6c900fd3d43c24252674e975dcca827bd1a6fe420db32154382934968a81b3834eace783f8d2c2131434a281ac45cd8f53cc48c5d057f34814467a474237958620bc7ae27d24bac82eab952b188e1fdf3c78ff5c9e000928b90cd673bddaf77d676349de23aab1e0971e43ef8ddf406e004c734c45d8d16a943ad7abe8a138514b029bfa720218d9e798fd8a9d4e077b021f8db56977398ca326365fe52ccdfbc9fbe77be37ba46c3400d8a7b8237993d63daf959aba87da5311a7ceb49fad14187220fe051d31e41f6d7870f7c2209087bda0084112d59c71143fb83e998595eece634f7ed893e117d9a5191f013b69d7eddfe6133fb856aba7faf71a0fa26548de6b34d752cc1359b8017b062ebd6d083213a6643d2f5cad4f44115ec2d39eaabad8dc561eeacb7fbf9b67afff136ecbba304b874ed1b03dad6ec51c6a3ac11b9729284be65082b2b22041b64e6ee17ee85f7092f2e7a3d8f07976aa083ad61d069ff62e6fc5df18d6b8e4c9f34718cbf558974bb5046cca51fcb4913ac7f512fcbaffe2f50678598a249e870f6715e1be145e17e4e5215cc31773cf3350ff0135bbf0e942bd242d32fe168fc3d89da8b3f2297f14c7a80e5ecd1ebbf6fa78baf73271b5441a67944ed96d8b54b1f12c689640b448bede3365a24e035100dcacde5d44c5b27fa73136edbb4556b8ad55420d65713653f1b0c03feb550431b6a6be53dab1b40f73fb47c4e54ca72e26d32dcb13f30a9ae8c1ae35f63c37dbe3a938c103490b675f71597236909d4fc755bef9444283b0f485a7127b1b1a07e554176882258709973d4f76f67a7e805204af170edfa2925d967e2417581fe8db718ecc23bcc7281e28b26646413c740c7d1b48adb95fb40df85d7d33668d8685c5a389516a0dc818916ce3990a6eba1bb16bc28b57e64d1abec3d176d61c8597d25c909182d2ad03ccf1ee3001ef029d67f0924a00e26b7630f3b6bbf177413ff0f29215c431055ec6423e4afdfc550ac52e33884a96beaea27bfac20eb3b60cf3c8630842dd12a67720e04f9c0acc12fc3a93b6bc0f4f12cd6786c2e8035282993ccdf0e1259288029967e80ecea817f45643fe95499e6285a3168974e9bb46a9041bd03124feaa463a1f3dc85cc863a1493112262ea7e863a101a0c026232e85c8fe782ce674d8de3ab0317c4673efd333fd7bc1dddda53f383681062ce3d9206fe3ee619bc5fc15a7e93a46057ce10d85253050dc13c55d7cc3b51914cb1eb755f7aebc941b23cd93b51d3289ec424ff5ff00904bbdf5b5f0320003353fd5a2ea840e71a8790fdcef1587b5350e047021dd23947a8675f4367888383cb52fa407f6b0a9c6c1845ce9d880af38900d355999ddcac89dcfb0b306df85b5e16807702e168d511f0838d71a81c165d997bb18268afd27fe6f699ea4bf72ed09cd48a83b8d0969236c55cb8e1686b0a10b469b664d05a8dd90e6cfa813df0937530f26c80932bfa132b15f00a1de36eae7af3f44d018e003221fe888128ec9397541fe8e06c495c5d91f416c570788d38870932e7fae70e835990e160545be0d2a9e271eaf3fc141d8fd041d73383443b6f6fb73d6f90c74879a5b9e156221f91629ce987e3bc83b851edfb3644258ec10ddb09a4a226d9890dae01ec0373a7f4059b8881487a9d2fb352ce6ac8e83973484c9e953b114060f7e01066d979e008f834c5589fabc88bf386a8cb9c4bc39223aeca5a0106dc4b9d1ca1d4f0e25ce55b0beaaf3db82e13f3ca45c014e4fc1a2d3da0b760cca7bcddc0a4de0ae56fdabf44bb9a95daa3bcb6147ceb69e858a71cddaf23c6f74ef64500c778f8dd7f091fdd8a12a7e0af793e3251a961024140c8132af129ff15e53aeac210f558433eeb0124797bd2b867a530038142d4adc25afd5b53a0613a89340a614546a6a0b7cc54e840fa54108eacf00f624c3edc5f170d215b3f8de33d77c138d926cf37afccb12cba50be7b6bab1b98956723a859a6f6ad0be9ce3b09f362080739a758771d9cc28b720a74676db9b119b16bb1a4274573459f2655f12237bbdfcc9625cb79468a85aff77001bb7573b4c73148f1e04b87ca6660e71e63bfc1f95de8fdaf078229b52442b81825d96e74fd8ea781e4bafbf4b3f9988a72f6eb45f468e15748d57d87d2e75ca48bce181f315ac6b7dddc17f4e13e4103001d9dff6f343a52e79b49babf320f93c4e389d26c82de525eb87a67bf31bdab856e9f4905c019c1b8caf592c63aef9872ab92df2753f2bfef6d69d34cfab9af00907bfbb01271824dddb52cea339800e5edebcab050b6552082b8b99a872e1efaa7724c52e0b30d52848eb5863aa00e5368cb56bd947db2a3c1fe2e4950f19c6a349dc082fabbfc788fd61a55462ccdfe0a277880c6e0e0805084bd73818dcef84e190574913d5b8799306642b343e4c1640fee6211d2943b3183f9157640eaa77457cad6e6c3aa8dcad36b87e919390b5ef6061feca90a8b1127ccdcfdcbc6c626c572e8a483ad1c6d3c436f51284cdd4160b32d2ddb"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "53849b35f2991262bfeba234b69fa9c93589a8e9394b33c75d01b1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff0}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7601}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x48000}, 0x40010) 882.92975ms ago: executing program 2 (id=2663): socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@empty, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3a) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="99742dbd7000fbdbdf251500000014000180100001006574683a6970766c031f616e"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="ff6ffc39019fb665f80aca3a55e3cda5cf079f228d83af2294f39c8eb1529ccb7bec232ef9cb2fd8c52d72849389d81bbda2a23f52e2b683cad77e85ee4221e2bac6014b46ebea0b49091e7b2c855c11ff49aa61bee546d9fbb6d067fdc9d9a321cf977f2cb042b04c68127d806dcf85961f95438224cf0e9ecfd95567da20cfb2aa381af8e6735bf325bfccde1522ba7555cad68a8033694a93c72dca4b2cc2aa468540ac55b24d864ed2502cd87234b16329b8e4f11553ae78199806f4", 0xbe, 0xf392a1ac8c396fb3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) (async) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x7}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r9, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, @local, 0xa, 0x9}}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) (async) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) 882.7074ms ago: executing program 4 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x30, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 876.19139ms ago: executing program 0 (id=2665): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20004154) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x8, 0x9, 0xd5}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x9) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180500002020782500000000002020207b1af8def5c0a2ed37f6d8000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 800.175504ms ago: executing program 3 (id=2666): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0xb}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xf9ffffff}, 0x94) 730.89953ms ago: executing program 3 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) (async) unshare(0x20000400) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58}, 0x55) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x8}}, 0xfffd, 0x7ffe}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffe, 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1500000006400000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="9e18bcd294fad8e5310c64a6e2e59c97860547c240aff7075391769b70b39367b8839ff2db6cf2860e5182d9dcc84a2e7e3de9f7a06c8032569d5863aaa78f76ec30385349b4fb9916e03f63fa58b6940eb287348bb53abb995c416cd0", @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400fc0200070002000008000300", @ANYRES32=r6, @ANYBLOB="0800010034"], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async, rerun: 32) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) (async) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000000001010400000072000000000000000404000280"], 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) 719.865007ms ago: executing program 4 (id=2668): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000fff300b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000801020018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 612.406529ms ago: executing program 3 (id=2669): unshare(0x6a040000) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) socket(0x2b, 0x1, 0x1) (async) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x78c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4804) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) unshare(0x8000000) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@broadcast, @local, @void, {@llc={0x8864, {@llc={0x42, 0x0, '['}}}}}, 0x0) (async) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@broadcast, @local, @void, {@llc={0x8864, {@llc={0x42, 0x0, '['}}}}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 546.249154ms ago: executing program 4 (id=2670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x604c800}, 0x20000000) 545.327108ms ago: executing program 4 (id=2671): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000640)=ANY=[@ANYBLOB="e00000850122bcffd958364a03", @ANYBLOB="3fa64109cc48124b7e4c04637d5d0694a60a47b691541f9637b7f7492f3e89baae7a8067647f2c2c8a390e6938daa105fdf6c2ba0632636f569fcac0448d13187d2316984055b53ff8c649d76662fd483f38b179c05f7f53ee4886ec2bfc5af3ab3501c25d3fd751c20c40cc6983691b73a1c8e1c86533efaccd65645e07041ab2687a1e7e5db76ecfbc3aefc932116451301d0006ab4afbb2dad8a347b5b15989375ef98aabbb37b91e", @ANYRES64=r2], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x8000000}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x3, 0x0, 0x8000}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x26, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa8}}, @jmp={0x5, 0x0, 0xc, 0x9, 0x6, 0x8, 0xfffffffffffffff0}, @generic={0x5c, 0x9, 0xe, 0x9, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000030428bd70020000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000010000008800128009000100766c616e0000000078000280640004800c000100008000007f0000000c000100f5000000020000000c00010001040000030000000c00010000000000800000000c000100b1a4ffff010000000c0001001ef0ffff070000000c00010006090000000000000c000100001000000700000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3], 0xb8}}, 0x40488c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000640)=ANY=[@ANYBLOB="e00000850122bcffd958364a03", @ANYBLOB="3fa64109cc48124b7e4c04637d5d0694a60a47b691541f9637b7f7492f3e89baae7a8067647f2c2c8a390e6938daa105fdf6c2ba0632636f569fcac0448d13187d2316984055b53ff8c649d76662fd483f38b179c05f7f53ee4886ec2bfc5af3ab3501c25d3fd751c20c40cc6983691b73a1c8e1c86533efaccd65645e07041ab2687a1e7e5db76ecfbc3aefc932116451301d0006ab4afbb2dad8a347b5b15989375ef98aabbb37b91e", @ANYRES64=r2], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x8000000}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x3, 0x0, 0x8000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x26, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa8}}, @jmp={0x5, 0x0, 0xc, 0x9, 0x6, 0x8, 0xfffffffffffffff0}, @generic={0x5c, 0x9, 0xe, 0x9, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000030428bd70020000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000010000008800128009000100766c616e0000000078000280640004800c000100008000007f0000000c000100f5000000020000000c00010001040000030000000c00010000000000800000000c000100b1a4ffff010000000c0001001ef0ffff070000000c00010006090000000000000c000100001000000700000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3], 0xb8}}, 0x40488c4) (async) 423.187388ms ago: executing program 2 (id=2672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000900)={{r2, &(0x7f0000000240)='\x00', 0x4c000, &(0x7f0000000300)={@_ha_fsid={[0x5, 0x1]}, {0x7, 0x6, 0x8, 0x30000000000000}}, 0x40, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}, 0x3, &(0x7f0000000880)=[{0x1, 0x0, &(0x7f0000000500)=',{{\'\x00', &(0x7f0000000540)="7d7685bb49b79740cf913f73954998d3e4493ddc7584e4505ec7dcf58194b0965553cb30dc529064530cf060108d690744a909c8a7700bb6619be128a0fc0f11d13437d0db307a4a701963966941e37c81a12eeb2b3113baff44e140c12c5de6458a262e96041a9cadb00329dc4f424ae9022038f9ef20bc1926061de5a6087ba638312224386d27260525b7ae557ae39d7d5edc7af825951fdbf457ab8b70c392013897bcc1034b49b30a9f46d3dbacc3de6d566aaf69f7c70f692f33b820a5c80691", 0xc3}, {0x1, 0x9, &(0x7f0000000640)='\x00', &(0x7f0000000680)="7a305ec214627942d3202db06b2e09a2eaf7ed27d13d1a143f482e82113d7a6c0907f27ebf5f8253d04e2130fd62baa43d67acf5d1e6bb7d5cdf57b969c168301429df9f7364853596895019a1a1ed28a54fafdf5bab760c1bda8842e57bf2ffce7cece0dfaa633c721b0d35a692e7cab66b4d8cffa4d7201513ca845a21946d3083b028bd94850064b426", 0x8b, 0x20}, {0x1, 0x10000, &(0x7f0000000740)=':(@#&%%', &(0x7f0000000780)="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", 0xff, 0x32}]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, '|\x00', "d3caadf08a6e8bfb134010f988010dfb83ebfbc27bed7d00", "f83d3940", "6ff5004c27f89cd1"}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{}, "5a6db1cb8ef7241a", "3d555ac9c65c6fc74a611b2abdbf647873cdcc6f35df5319a462964a5ff14fd2", "7325045a", "57d9b1394ab6f637"}, 0x38) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x1, 0x43, &(0x7f00000000c0)=""/159, &(0x7f0000000040)=0x9f) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev}, &(0x7f0000000180)=0xc) recvfrom$packet(r4, &(0x7f0000000400)=""/240, 0xf0, 0x40016040, &(0x7f0000000200)={0x11, 0xf5, r6, 0x1, 0x9b, 0x6, @random="549b40a8d902"}, 0x14) 394.37639ms ago: executing program 1 (id=2673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080c2}, 0x20000000) 295.849225ms ago: executing program 0 (id=2674): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000004090001eeada612672db566495b0073797a3100000000080005400000000200000008000a40fffffffc14000000110001000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000400)='[\x00', 0x6000, &(0x7f0000000440)={@align=0x3ff, {0xb, 0x400, 0x0, 0x4}}, 0x1725, &(0x7f0000000500), &(0x7f0000000540)=0x7}, {[0xffffffff, 0x80000000, 0x7, 0x9]}, 0x6, 0x81, &(0x7f0000000700)=""/129}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000840), 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a380000000c0a010100000000000000000a0000060900020073797a31000000000800044000000003100003800c0000800800034000000003030000000000000000000000000000000300000a38f6ee3565de678b89cf25d49fedf16822162aafb6aeae3b804ec886ec47f26d8ca4174a55601ad9"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r5, &(0x7f0000001780), 0x8) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040027bd7000fcdbdf25010000004c00038008000100010000001400020076657468315f746f5f626f6e64000000080001000208000000000000001414bb14000600ca8d47fb4f2723c6fc0200000076935b54302b1c780000000000000000000000050008000a000000080005000200000008000600ff000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) socket$kcm(0xa, 0x3, 0x87) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x898, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3, 0x4, 0x9, 0x5}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 32) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x4}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r9) 290.943461ms ago: executing program 4 (id=2675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="e7858ecafe52100b4ac6532caef40d7fc7cd901ea206d4ec77e281ea039dce5f010e357d3332581ac931778ba7ea0ebf0943d76768e809b05c889344b9c8b32ff1b5565264f00df08172aabfecbf07a15936ddf94bdc4d8bca004200b84740f588571d9da8d49b9093c144681ab232cb5cf2a69581a9d2682c8830a08da30b5fcd7e35dacbef1482414d958c8ff09789b3b08055b331cec1f1b2c345c3951dc14bd97a4d11ba0277337dc9a86e7c6eaf10a1d1abdde8f347006a5eb3b28293fd10587e8fa2b4bfdd9278c26875c699ae22439b9984fb17a5ae67395141e8119669bb660b2effe730c58706a1299133fdfd4af6091f95f1b1beedd42f32e12a0b9b60b8b745aec05a7c25100da7297f3bdd66462c33fe6b314fe3a5022ea98e524fee6a1b366ebe5618ba79735a63bf35d0d222163d7d84c6100de2a7b274b1a5724fd413fbdbe0ce11da9fc46abe954f1a9b5244dbe350cc483b61b845bf7554e43a24e896969bef5e0b905ceea0303a15d846d99f831332a86ba256f7efb8b197934e0595cbf7893ff69d48c62a63c2f2ac23fbbfa97d23425173cb2ea5b3dbaa0aa8feaed219ebc486ff487698821a905f8d1156aaf5eb3d73b962c66eabef4edb4f780629a4a5797f7f655a95a9eab277748a2b18541563f6d42692b8abe1b81407baf59ea1252d6b675c10fa35794a081b078fca62a4396a706eaa334c0d3c608a4e28793439d3639b0f56889f67a8cce000793bfcd6ff5de99222361c02f2b8e5757335bb0747414d688a964618d18da7ec7287fd6ab8cda9d5813fea702bd4240313900e60f3b2fd3a051c55d1be1798a940d01f101cf89c17af19ebc5f10fd68c12c8212ec826b16cce69a25f4acbe01361e2c1dfae21bc882322262a4e1375a923ea97ec7810cf343c23a0255fb9cea7104f7b9287566968c59ec5154f84ef490ac74eb0404a64807fcbbf8ce94b435ea9db5c0fb3f9f6ed364b5e207ec319efb8815a35053c41bbbda9505383f5d0d21222e72f90062c4087d2a5bf", @ANYRES16=r5, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xa55f, 0x0, 0x0, 0x0, 0xa1e, 0x0, 0x1004, 0x4, 0x7}) r11 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 225.669478ms ago: executing program 2 (id=2676): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3ff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0x30000001}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"], 0x10) close(0x3) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r10], 0x28}}, 0x802) 220.816123ms ago: executing program 1 (id=2677): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var={0xb}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfffffff9}, 0x94) 0s ago: executing program 1 (id=2678): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000009687000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000005c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) listen(r1, 0xf) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$sock(r4, &(0x7f0000000480)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="c30b1da4c83ee0b45c6ddad42edeeac7eddf2855c9567c1e4a217562ab1e83aef10a3a8b787fc1ca41fa2dc907c135703d4ad7c3b547a415efb7015bf8db23476717517a0dccc22de3c02e658b809a8e910c824f5b72440f9da4f587e3ddab070e7d1cd9147e5ef99fe0e622c832338f5145ccd06653756aceeec19c46d97dc270c2fa55c86adb5989e8151953e230d77fd40d5c962f280792144f9c951896ab8d87d702441432238d95f602f8814a7237d086b32f9469d773059ef02008dfdc563d295b03", 0xc5}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}, 0xc844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$rose(0xb, 0x5, 0x0) kernel console output (not intermixed with test programs): cast mode [ 238.239902][ T9833] sit1: left allmulticast mode [ 238.248730][ T9837] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 238.283400][ T9833] team0: left promiscuous mode [ 238.296103][ T9833] team0: left allmulticast mode [ 238.314940][ T9833] team1: left promiscuous mode [ 238.322451][ T9833] team1: left allmulticast mode [ 238.626477][ T9853] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 239.200325][ T9880] __nla_validate_parse: 8 callbacks suppressed [ 239.200344][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.255649][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 239.282176][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.305232][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 239.324853][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.364313][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.397996][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.425708][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.443935][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 239.455469][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 240.051516][ T9915] tipc: Enabled bearer , priority 0 [ 240.187490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 240.195616][ C1] lec:lec_tx_timeout: lec0 [ 240.201117][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.826350][ T9965] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 240.853483][ T9965] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 240.872875][ T9965] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 240.915012][ T9965] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 241.162597][ T9973] lo speed is unknown, defaulting to 1000 [ 241.287021][ T5907] tipc: Node number set to 1469035024 [ 241.655297][ T9992] tun0: tun_chr_ioctl cmd 2147767507 [ 241.698390][ T9992] pim6reg99999999: entered allmulticast mode [ 241.895895][ T9998] lo speed is unknown, defaulting to 1000 [ 242.480371][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.661154][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.730832][ T30] audit: type=1800 audit(1773710849.780:4): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1053" name="memory.events" dev="tmpfs" ino=1089 res=0 errno=0 [ 243.329753][T10036] 5nè‹Ò: entered promiscuous mode [ 243.504946][T10045] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 243.632390][T10045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.652816][T10046] ip6tnl1: entered promiscuous mode [ 243.685443][T10050] vlan3: entered promiscuous mode [ 243.692885][T10050] bond5: entered promiscuous mode [ 243.698538][T10050] vlan3: entered allmulticast mode [ 243.704174][T10050] bond5: entered allmulticast mode [ 243.775194][T10045] bond5: (slave bridge2): making interface the new active one [ 243.790524][T10045] bridge2: entered promiscuous mode [ 243.797092][T10045] bridge2: entered allmulticast mode [ 243.804673][T10045] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 243.818825][T10053] 8021q: VLANs not supported on lo [ 243.925455][T10054] pim6reg: entered allmulticast mode [ 243.941890][T10058] pim6reg: left allmulticast mode [ 244.048614][T10066] net_ratelimit: 349 callbacks suppressed [ 244.048635][T10066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.265391][T10082] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 244.291395][T10082] __nla_validate_parse: 38 callbacks suppressed [ 244.291416][T10082] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1071'. [ 244.725611][T10107] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.736094][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 244.745918][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 244.755507][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 244.765189][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'. [ 244.775385][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 244.784653][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 245.227487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 245.235623][ C1] lec:lec_tx_timeout: lec0 [ 245.240994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.783437][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'. [ 247.140905][T10072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.793797][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 247.871533][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 248.204927][T10168] gre1: entered allmulticast mode [ 248.472888][T10179] netlink: 'syz.0.1105': attribute type 4 has an invalid length. [ 248.502620][T10179] tipc: Enabled bearer , priority 0 [ 248.523958][T10179] gtp0: entered promiscuous mode [ 248.530265][T10179] gtp0: entered allmulticast mode [ 248.542579][T10178] tipc: Resetting bearer [ 248.820776][T10200] netlink: 'syz.2.1110': attribute type 39 has an invalid length. [ 249.268850][ T1338] tipc: Resetting bearer [ 249.548400][ T5941] tipc: Node number set to 3855777703 [ 249.761517][T10259] bridge0: entered allmulticast mode [ 250.159111][T10288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.334643][T10298] __nla_validate_parse: 2 callbacks suppressed [ 250.334664][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 250.640649][T10314] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.1139'. [ 250.950929][T10328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1144'. [ 251.026792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 251.034918][ C1] lec:lec_tx_timeout: lec0 [ 251.040155][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.897482][T10268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.296790][T10342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1150'. [ 253.318517][T10340] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1148'. [ 253.356669][T10340] netlink: 'syz.1.1148': attribute type 11 has an invalid length. [ 253.452372][T10358] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 253.542963][T10358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.619293][T10362] bond6: (slave geneve3): making interface the new active one [ 253.636401][T10362] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 253.656097][ T1338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.721810][ T1338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.746274][ T1338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.759437][ T1338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 253.794054][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 254.290849][T10399] lo speed is unknown, defaulting to 1000 [ 254.358859][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.572654][T10413] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1168'. [ 254.583977][T10413] openvswitch: netlink: Missing key (keys=40, expected=100) [ 254.762229][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 254.788640][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 254.798008][T10420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.816705][T10420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.980842][T10427] Cannot find set identified by id 0 to match [ 255.910175][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.067326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 256.075445][ C1] lec:lec_tx_timeout: lec0 [ 256.081043][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.631913][T10371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.863354][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 256.877234][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 256.975350][T10441] lo speed is unknown, defaulting to 1000 [ 257.059067][T10446] nbd3: detected capacity change from 0 to 63 [ 257.070709][ T5839] block nbd3: Receive control failed (result -32) [ 257.079604][ T8380] block nbd3: Send control failed (result -32) [ 257.096052][ T8380] block nbd3: Request send failed, requeueing [ 257.159796][ T11] block nbd3: Dead connection, failed to find a fallback [ 257.167254][ T11] block nbd3: shutting down sockets [ 257.172736][ T11] blk_print_req_error: 138 callbacks suppressed [ 257.172758][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.191035][ T11] buffer_io_error: 138 callbacks suppressed [ 257.191053][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.212355][ T8380] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.222249][ T8380] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.230576][ T8380] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.240500][ T8380] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.248599][ T8380] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.258519][ T8380] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.266583][ T8380] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.283011][ T8380] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.291353][ T8380] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.301151][ T8380] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.309288][ T8380] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.319078][ T8380] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.327188][ T8380] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.338180][ T8380] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.347951][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 257.357252][ T8380] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.372951][ T8380] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.390085][ T8380] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.401494][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1182'. [ 257.421283][ T8380] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.440514][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1182'. [ 257.456490][ T8380] ldm_validate_partition_table(): Disk read failed. [ 257.465500][ T8380] Dev nbd3: unable to read RDB block 0 [ 257.475229][ T8380] nbd3: unable to read partition table [ 257.498228][T10465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 257.529544][ T8380] ldm_validate_partition_table(): Disk read failed. [ 257.559635][ T8380] Dev nbd3: unable to read RDB block 0 [ 257.572921][ T8380] nbd3: unable to read partition table [ 257.939347][T10480] netlink: 'syz.3.1185': attribute type 13 has an invalid length. [ 258.203835][T10491] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1188'. [ 258.640071][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 258.775114][T10508] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 259.723389][T10522] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1198'. [ 259.849406][T10525] vcan1: entered promiscuous mode [ 259.854697][T10525] vcan1: entered allmulticast mode [ 260.082740][T10530] lo speed is unknown, defaulting to 1000 [ 260.473515][T10464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.720574][ T5839] Bluetooth: hci4: link tx timeout [ 260.731007][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.958429][T10560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1209'. [ 261.034132][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 261.097463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 261.105583][ C1] lec:lec_tx_timeout: lec0 [ 261.115782][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.278112][T10585] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 261.377167][T10585] netlink: 'syz.0.1214': attribute type 10 has an invalid length. [ 261.412807][T10585] dummy0: left allmulticast mode [ 261.418656][T10585] dummy0: left promiscuous mode [ 261.425187][T10585] bridge0: port 3(dummy0) entered disabled state [ 261.463407][T10590] ipt_REJECT: TCP_RESET invalid for non-tcp [ 261.513946][T10585] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 262.135185][T10618] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 262.393972][T10629] €Â: renamed from vlan1 [ 262.497630][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 262.528602][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 262.531029][T10638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'. [ 262.581184][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 262.598245][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 262.608369][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 262.618756][T10647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'. [ 262.647896][T10649] netlink: 'syz.4.1231': attribute type 4 has an invalid length. [ 262.787227][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 263.552040][T10696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1244'. [ 263.738511][T10704] syzkaller0: entered promiscuous mode [ 263.744047][T10704] syzkaller0: entered allmulticast mode [ 264.003669][T10721] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 264.106033][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 264.268523][T10732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.472309][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 266.127333][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 266.135702][ C1] lec:lec_tx_timeout: lec0 [ 266.141439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.565211][T10788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.778090][T10841] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 269.800818][T10844] __nla_validate_parse: 5 callbacks suppressed [ 269.800839][T10844] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1278'. [ 269.872183][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'. [ 269.887539][T10841] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.963403][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1282'. [ 269.997281][T10841] bond3: (slave ip6gretap2): making interface the new active one [ 270.028005][T10841] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 270.084607][T10862] Cannot find add_set index 1 as target [ 270.165195][T10866] pim6reg: entered allmulticast mode [ 270.244068][T10876] xt_TCPMSS: Only works on TCP SYN packets [ 270.422225][T10882] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 270.447560][T10882] netlink: 'syz.4.1288': attribute type 2 has an invalid length. [ 270.447605][T10886] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 270.455344][T10882] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 270.455362][T10882] netlink: 'syz.4.1288': attribute type 3 has an invalid length. [ 270.455377][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 270.541056][T10886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1290'. [ 270.732897][T10888] bond0: (slave bond_slave_1): Releasing backup interface [ 270.901906][T10903] netlink: 'syz.3.1293': attribute type 10 has an invalid length. [ 270.916593][T10903] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 270.973554][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1295'. [ 271.007731][T10907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1295'. [ 271.167349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 271.175522][ C1] lec:lec_tx_timeout: lec0 [ 271.181408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.201151][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 271.227343][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 271.785098][T10947] netlink: 'syz.3.1310': attribute type 29 has an invalid length. [ 271.909408][T10958] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 272.113559][T10965] netlink: 212308 bytes leftover after parsing attributes in process `syz.3.1313'. [ 272.127115][T10965] netlink: Unknown conntrack attr (type=2304, max=9) [ 272.351978][T10970] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 272.538238][T10966] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 272.558834][T10961] bridge_slave_1: left allmulticast mode [ 272.564560][T10961] bridge_slave_1: left promiscuous mode [ 272.604762][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.702730][T10961] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 272.785850][T10975] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 273.128556][T11001] vlan2: entered promiscuous mode [ 273.133675][T11001] bridge0: entered promiscuous mode [ 273.222801][T11006] netlink: 'syz.4.1319': attribute type 11 has an invalid length. [ 273.274005][T11011] bridge_slave_1 (unregistering): left allmulticast mode [ 273.297214][T11011] bridge_slave_1 (unregistering): left promiscuous mode [ 273.304948][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.771980][T11050] syzkaller1: entered promiscuous mode [ 273.778265][T11050] syzkaller1: entered allmulticast mode [ 273.982394][T11054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.638562][T11088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.648954][T11100] syzkaller0: entered promiscuous mode [ 274.654499][T11100] syzkaller0: entered allmulticast mode [ 274.709230][T11087] tipc: Enabled bearer , priority 0 [ 274.754881][T11098] veth0_to_bond: entered promiscuous mode [ 274.764772][T11098] bond3: (slave macvlan3): Enslaving as an active interface with an up link [ 274.783065][T11083] tipc: Resetting bearer [ 274.794381][T11082] tipc: Resetting bearer [ 274.816074][T11103] __nla_validate_parse: 15 callbacks suppressed [ 274.816108][T11103] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1351'. [ 274.833897][T11082] tipc: Disabling bearer [ 274.931070][T11110] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 274.949431][T11110] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1354'. [ 275.079000][T11120] netlink: 'syz.4.1355': attribute type 11 has an invalid length. [ 275.096586][T11102] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 275.225191][T11122] lo speed is unknown, defaulting to 1000 [ 275.291574][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1357'. [ 275.359140][T11125] ip6gre1: entered promiscuous mode [ 275.376902][T11125] ip6gre1: entered allmulticast mode [ 275.435834][T11126] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 275.465753][T11126] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 275.561322][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 275.570608][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 275.776261][T11146] tc_dump_action: action bad kind [ 275.901066][T11153] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1366'. [ 275.922649][T11154] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 275.939849][T11154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1367'. [ 276.008145][T11151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1367'. [ 276.029685][T11151] netem: unknown loss type 4 [ 276.035610][T11151] netem: change failed [ 276.042172][T11154] team0: entered promiscuous mode [ 276.057189][T11154] team_slave_0: entered promiscuous mode [ 276.063145][T11154] team_slave_1: entered promiscuous mode [ 276.077714][T11154] team0: entered allmulticast mode [ 276.086656][T11154] team_slave_0: entered allmulticast mode [ 276.103206][T11154] team_slave_1: entered allmulticast mode [ 276.118169][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.135944][T11154] bridge0: port 2(team0) entered blocking state [ 276.147970][T11154] bridge0: port 2(team0) entered disabled state [ 276.162968][T11154] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.207392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 276.215486][ C1] lec:lec_tx_timeout: lec0 [ 276.220362][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.290171][T11142] lo speed is unknown, defaulting to 1000 [ 276.318952][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.335368][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.347665][ T9536] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.594914][T11168] lo: Caught tx_queue_len zero misconfig [ 276.647768][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.740760][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 276.855194][T11176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.942687][T11167] lo speed is unknown, defaulting to 1000 [ 276.958102][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.073778][T11183] xt_ecn: cannot match TCP bits for non-tcp packets [ 277.511629][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 277.545992][T11189] veth1_to_hsr (unregistering): left allmulticast mode [ 277.569296][T11189] veth1_to_hsr (unregistering): left promiscuous mode [ 277.634448][T11189] hsr_slave_1 (unregistering): left promiscuous mode [ 277.650646][T11192] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.821367][T11199] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 278.864141][T11240] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 278.912538][T11240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.954972][T11240] bond5: (slave veth9): Enslaving as an active interface with a down link [ 279.095149][T11243] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 279.144322][T11243] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 279.538113][T11263] syzkaller1: entered promiscuous mode [ 279.577980][T11263] syzkaller1: entered allmulticast mode [ 279.614839][T11268] lo speed is unknown, defaulting to 1000 [ 279.615049][T11270] ip6tnl0: Caught tx_queue_len zero misconfig [ 279.640095][T11268] lo speed is unknown, defaulting to 1000 [ 279.661905][T11268] lo speed is unknown, defaulting to 1000 [ 280.129611][ T5941] lo speed is unknown, defaulting to 1000 [ 280.138189][T11268] infiniband sqz0: set down [ 280.167485][T11268] infiniband sqz0: added lo [ 280.275361][T11268] RDS/IB: sqz0: added [ 280.282782][T11268] smc: adding ib device sqz0 with port count 1 [ 280.290062][T11268] smc: ib device sqz0 port 1 has no pnetid [ 280.298171][ T5941] lo speed is unknown, defaulting to 1000 [ 280.305832][T11268] lo speed is unknown, defaulting to 1000 [ 280.317115][T11300] __nla_validate_parse: 8 callbacks suppressed [ 280.317135][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 280.396944][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.695609][T11314] bond4: invalid ARP target 0.0.0.0 specified for addition [ 280.703864][T11314] bond4: option arp_ip_target: invalid value (0) [ 280.736207][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 280.746703][T11314] bond4 (unregistering): Released all slaves [ 280.884621][T11328] lo speed is unknown, defaulting to 1000 [ 281.114922][T11268] lo speed is unknown, defaulting to 1000 [ 281.227404][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 281.235652][ C1] lec:lec_tx_timeout: lec0 [ 281.243988][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.360937][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 281.458096][T11350] netlink: 'syz.3.1424': attribute type 13 has an invalid length. [ 281.699959][T11268] lo speed is unknown, defaulting to 1000 [ 282.013192][T11328] lo speed is unknown, defaulting to 1000 [ 282.117746][T11373] ip6tnl2: entered promiscuous mode [ 282.139569][T11375] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.281511][T11378] netlink: 'syz.1.1433': attribute type 28 has an invalid length. [ 282.379718][T11268] lo speed is unknown, defaulting to 1000 [ 283.007408][T11419] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 3, id = 0 [ 283.164891][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 283.189501][T11427] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 283.293857][T11268] lo speed is unknown, defaulting to 1000 [ 283.566586][T11440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1449'. [ 283.765470][T11268] lo speed is unknown, defaulting to 1000 [ 283.859402][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 284.106358][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 284.196128][T11451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.230004][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 284.262512][T11453] ip6gretap0: entered promiscuous mode [ 284.271008][T11453] ip6gretap0: left promiscuous mode [ 284.285729][T11456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.313359][T11437] lo speed is unknown, defaulting to 1000 [ 284.965447][T11475] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 284.995811][T11475] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 285.070245][T11479] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1461'. [ 285.143183][T11485] netlink: 'syz.4.1462': attribute type 8 has an invalid length. [ 285.180362][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 285.339309][T11489] syzkaller0: entered promiscuous mode [ 285.344858][T11489] syzkaller0: entered allmulticast mode [ 285.598493][T11497] syzkaller0: entered promiscuous mode [ 285.604038][T11497] syzkaller0: entered allmulticast mode [ 285.614357][T11497] simple: basic_22 [ 285.618472][T11497] simple: basic_44 [ 285.622240][T11497] simple: basic_66 [ 285.626095][T11497] simple: basic_88 [ 285.629916][T11497] simple: basic_110 [ 285.633761][T11497] simple: basic_132 [ 285.637678][T11497] simple: basic_154 [ 285.641520][T11497] simple: basic_176 [ 285.645376][T11497] simple: basic_198 [ 285.649291][T11497] simple: basic_220 [ 285.653158][T11497] simple: basic_242 [ 285.657079][T11497] simple: basic_264 [ 285.661060][T11497] simple: basic_286 [ 285.664995][T11497] simple: basic_308 [ 285.668892][T11497] simple: basic_330 [ 285.672770][T11497] simple: basic_352 [ 285.676605][T11497] simple: basic_374 [ 285.680632][T11497] 0: reclassify loop, rule prio 0, protocol 800 [ 285.729869][T11502] No such timeout policy "syz0" [ 285.919055][T11515] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 285.941851][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 285.961808][T11515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 286.024513][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 286.208142][T11511] lo speed is unknown, defaulting to 1000 [ 286.397073][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 286.435946][T11524] syzkaller0: entered promiscuous mode [ 286.451835][T11524] syzkaller0: entered allmulticast mode [ 286.832539][T11511] lo speed is unknown, defaulting to 1000 [ 287.026888][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 287.035398][ C1] lec:lec_tx_timeout: lec0 [ 287.040560][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.172563][T11535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.180128][T11535] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 287.205403][T11535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.219149][T11535] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 287.252681][T11535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.267747][T11535] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 287.289181][T11535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.295322][T11535] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 287.721399][T11576] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1481'. [ 288.430113][T11615] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 288.469107][T11615] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 288.497876][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.529328][T11615] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1490'. [ 288.547761][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.710415][T11631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.729732][T11632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.079464][T11652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1499'. [ 289.123708][T11657] batman_adv: batadv0: Adding interface: macvtap1 [ 289.137473][T11657] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 289.174964][T11657] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 289.223111][T11662] netlink: 4232 bytes leftover after parsing attributes in process `syz.1.1501'. [ 289.299926][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 289.355245][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 290.345652][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.405712][T11716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.555944][T11721] bond0: entered allmulticast mode [ 290.566674][T11721] bond_slave_0: entered allmulticast mode [ 290.577889][T11721] bond_slave_1: entered allmulticast mode [ 290.600842][T11721] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 290.641456][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.735596][ T146] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.781044][ T146] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.798177][ T146] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.816662][ T146] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.837792][ T146] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.857604][ T146] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.866054][ T146] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.934896][ T146] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.120606][ T146] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 291.143785][T11776] __nla_validate_parse: 183 callbacks suppressed [ 291.143809][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 291.147775][ T146] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 291.178685][ T146] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 291.190793][ T146] bond0: now running without any active interface! [ 291.211654][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 291.409087][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 291.420039][T11788] netlink: 'syz.1.1539': attribute type 21 has an invalid length. [ 291.448803][T11789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.457627][T11785] syzkaller1: entered promiscuous mode [ 291.463163][T11785] syzkaller1: entered allmulticast mode [ 291.473138][T11788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1539'. [ 291.606103][T11796] tipc: Resetting bearer [ 291.619065][T11796] tipc: Resetting bearer [ 291.658567][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 291.819287][T11810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1545'. [ 292.036476][T11821] FAULT_INJECTION: forcing a failure. [ 292.036476][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 292.066777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 292.074873][ C1] lec:lec_tx_timeout: lec0 [ 292.080345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.088939][T11819] macvtap1: entered promiscuous mode [ 292.094801][T11819] macvtap1: entered allmulticast mode [ 292.100757][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 292.100783][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 292.101115][T11821] CPU: 0 UID: 0 PID: 11821 Comm: syz.3.1547 Not tainted syzkaller #0 PREEMPT(full) [ 292.101140][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.101168][T11821] Call Trace: [ 292.101176][T11821] [ 292.101185][T11821] dump_stack_lvl+0xe8/0x150 [ 292.101221][T11821] should_fail_ex+0x412/0x560 [ 292.101254][T11821] should_failslab+0xa8/0x100 [ 292.101281][T11821] ? skb_clone+0x212/0x3a0 [ 292.101304][T11821] kmem_cache_alloc_noprof+0x87/0x650 [ 292.101326][T11821] ? apparmor_capable+0x126/0x170 [ 292.101367][T11821] skb_clone+0x212/0x3a0 [ 292.101387][T11821] ? nfnetlink_rcv+0x4b0/0x27b0 [ 292.101417][T11821] nfnetlink_rcv+0x4e2/0x27b0 [ 292.101505][T11821] ? is_bpf_text_address+0x26/0x2b0 [ 292.101592][T11821] ? is_bpf_text_address+0x292/0x2b0 [ 292.101656][T11821] ? is_bpf_text_address+0x26/0x2b0 [ 292.101728][T11821] ? __kernel_text_address+0xd/0x30 [ 292.101795][T11821] ? unwind_get_return_address+0x4d/0x90 [ 292.101882][T11821] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 292.101948][T11821] ? arch_stack_walk+0xfb/0x150 [ 292.102058][T11821] ? __lock_acquire+0x6b5/0x2cf0 [ 292.102145][T11821] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 292.102245][T11821] ? __lock_acquire+0x6b5/0x2cf0 [ 292.102344][T11821] ? __lock_acquire+0x6b5/0x2cf0 [ 292.102434][T11821] ? __netlink_lookup+0xc6/0x8b0 [ 292.102535][T11821] ? __netlink_lookup+0x7e4/0x8b0 [ 292.102643][T11821] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.102760][T11821] netlink_unicast+0x80f/0x9b0 [ 292.102865][T11821] ? __pfx_netlink_unicast+0x10/0x10 [ 292.103001][T11821] ? netlink_sendmsg+0x650/0xb40 [ 292.103101][T11821] ? skb_put+0x11b/0x210 [ 292.103198][T11821] netlink_sendmsg+0x813/0xb40 [ 292.103308][T11821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.103407][T11821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.103527][T11821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.103605][T11821] ____sys_sendmsg+0x972/0x9f0 [ 292.103696][T11821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.103769][T11821] ? import_iovec+0x73/0xa0 [ 292.103870][T11821] ___sys_sendmsg+0x2a5/0x360 [ 292.103948][T11821] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.104105][T11821] ? __fget_files+0x2a/0x420 [ 292.104187][T11821] ? __fget_files+0x3a0/0x420 [ 292.104315][T11821] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.104416][T11821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.104513][T11821] ? __pfx_ksys_write+0x10/0x10 [ 292.104613][T11821] do_syscall_64+0x14d/0xf80 [ 292.104700][T11821] ? trace_irq_disable+0x3b/0x150 [ 292.104774][T11821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.104832][T11821] ? clear_bhb_loop+0x40/0x90 [ 292.104930][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.104988][T11821] RIP: 0033:0x7f875a79c799 [ 292.105053][T11821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.105101][T11821] RSP: 002b:00007f87589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.105166][T11821] RAX: ffffffffffffffda RBX: 00007f875aa15fa0 RCX: 00007f875a79c799 [ 292.105210][T11821] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 292.105245][T11821] RBP: 00007f87589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.105279][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.105320][T11821] R13: 00007f875aa16038 R14: 00007f875aa15fa0 R15: 00007ffe0c19d068 [ 292.105410][T11821] [ 292.482168][T11819] veth1_vlan: entered allmulticast mode [ 292.489609][T11823] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 292.714064][T11833] geneve1: entered promiscuous mode [ 292.747066][T11833] geneve1: entered allmulticast mode [ 292.771982][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.789265][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.819198][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 292.854059][T11840] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1554'. [ 292.879138][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.917705][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.210445][T11861] syzkaller0: entered promiscuous mode [ 293.227705][T11861] syzkaller0: entered allmulticast mode [ 293.264801][T11861] macsec1: entered promiscuous mode [ 293.741207][T11889] tipc: Resetting bearer [ 293.996654][T11905] ip6tnl0: Caught tx_queue_len zero misconfig [ 294.011074][T11903] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 294.083730][T11905] netlink: 'syz.4.1575': attribute type 10 has an invalid length. [ 294.093191][T11905] netlink: 'syz.4.1575': attribute type 10 has an invalid length. [ 294.106191][T11905] dummy0: entered promiscuous mode [ 294.113603][T11905] dummy0: entered allmulticast mode [ 294.122780][T11905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.490635][T11927] syzkaller0: entered promiscuous mode [ 294.496184][T11927] syzkaller0: entered allmulticast mode [ 294.688135][T11944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.963243][T11956] ipvlan0: entered promiscuous mode [ 294.970993][T11956] bridge0: port 2(ipvlan0) entered blocking state [ 294.978648][T11956] bridge0: port 2(ipvlan0) entered disabled state [ 294.985539][T11956] ipvlan0: entered allmulticast mode [ 294.991607][T11956] bridge0: entered allmulticast mode [ 295.000374][T11956] ipvlan0: left allmulticast mode [ 295.006376][T11956] bridge0: left allmulticast mode [ 295.093881][T11959] openvswitch: netlink: Flow key attr not present in new flow. [ 295.432204][T11973] FAULT_INJECTION: forcing a failure. [ 295.432204][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 295.446477][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.0.1597 Not tainted syzkaller #0 PREEMPT(full) [ 295.446510][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.446525][T11973] Call Trace: [ 295.446535][T11973] [ 295.446544][T11973] dump_stack_lvl+0xe8/0x150 [ 295.446584][T11973] should_fail_ex+0x412/0x560 [ 295.446618][T11973] should_failslab+0xa8/0x100 [ 295.446648][T11973] __kmalloc_noprof+0xe8/0x760 [ 295.446674][T11973] ? nf_tables_newrule+0x152c/0x28b0 [ 295.446702][T11973] ? nla_strcmp+0x106/0x140 [ 295.446740][T11973] nf_tables_newrule+0x152c/0x28b0 [ 295.446781][T11973] ? __pfx_nf_tables_newrule+0x10/0x10 [ 295.446806][T11973] ? nfnl_pernet+0x23/0x240 [ 295.446845][T11973] ? __nla_parse+0x40/0x60 [ 295.446883][T11973] nfnetlink_rcv+0x1240/0x27b0 [ 295.446909][T11973] ? is_bpf_text_address+0x26/0x2b0 [ 295.446973][T11973] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 295.447013][T11973] ? __lock_acquire+0x6b5/0x2cf0 [ 295.447097][T11973] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.447150][T11973] netlink_unicast+0x80f/0x9b0 [ 295.447187][T11973] ? __pfx_netlink_unicast+0x10/0x10 [ 295.447227][T11973] ? netlink_sendmsg+0x650/0xb40 [ 295.447256][T11973] ? skb_put+0x11b/0x210 [ 295.447293][T11973] netlink_sendmsg+0x813/0xb40 [ 295.447347][T11973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.447382][T11973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.447412][T11973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.447459][T11973] ____sys_sendmsg+0x972/0x9f0 [ 295.447493][T11973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.447526][T11973] ? import_iovec+0x73/0xa0 [ 295.447558][T11973] ___sys_sendmsg+0x2a5/0x360 [ 295.447581][T11973] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.447631][T11973] ? __fget_files+0x2a/0x420 [ 295.447658][T11973] ? __fget_files+0x3a0/0x420 [ 295.447694][T11973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 295.447715][T11973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.447742][T11973] ? __pfx_ksys_write+0x10/0x10 [ 295.447772][T11973] do_syscall_64+0x14d/0xf80 [ 295.447799][T11973] ? trace_irq_disable+0x3b/0x150 [ 295.447826][T11973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.447844][T11973] ? clear_bhb_loop+0x40/0x90 [ 295.447867][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.447885][T11973] RIP: 0033:0x7fcba2d9c799 [ 295.447903][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.447919][T11973] RSP: 002b:00007fcba0ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.447940][T11973] RAX: ffffffffffffffda RBX: 00007fcba3015fa0 RCX: 00007fcba2d9c799 [ 295.447954][T11973] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 295.447966][T11973] RBP: 00007fcba0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.447977][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.447988][T11973] R13: 00007fcba3016038 R14: 00007fcba3015fa0 R15: 00007ffe3db8eee8 [ 295.448016][T11973] [ 295.934225][T11983] bridge0: entered allmulticast mode [ 296.010813][T11990] openvswitch: netlink: Flow key attr not present in new flow. [ 296.044922][T11992] bridge_slave_0: left allmulticast mode [ 296.076933][T11992] bridge_slave_0: left promiscuous mode [ 296.110178][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.254687][T12001] __nla_validate_parse: 10 callbacks suppressed [ 296.254708][T12001] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1608'. [ 296.311672][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1607'. [ 296.630162][T12021] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 296.674814][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 296.707385][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 297.087407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 297.095479][ C1] lec:lec_tx_timeout: lec0 [ 297.101221][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 297.775402][T12059] netlink: 'syz.4.1622': attribute type 8 has an invalid length. [ 297.960757][T12065] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 298.138489][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 298.535089][T12085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.570165][T12083] delete_channel: no stack [ 298.585710][T12083] delete_channel: no stack [ 298.591093][T12083] delete_channel: no stack [ 298.595941][T12083] delete_channel: no stack [ 298.603146][T12083] delete_channel: no stack [ 298.609688][T12083] delete_channel: no stack [ 298.614315][T12083] delete_channel: no stack [ 298.622141][T12083] delete_channel: no stack [ 298.627759][T12083] delete_channel: no stack [ 298.632768][T12083] delete_channel: no stack [ 298.638405][T12083] delete_channel: no stack [ 298.643326][T12083] delete_channel: no stack [ 298.649097][T12083] delete_channel: no stack [ 298.654004][T12083] delete_channel: no stack [ 298.660296][T12083] delete_channel: no stack [ 298.665285][T12083] delete_channel: no stack [ 298.670769][T12083] delete_channel: no stack [ 298.675637][T12083] delete_channel: no stack [ 298.681249][T12083] delete_channel: no stack [ 298.686203][T12083] delete_channel: no stack [ 298.754031][T12101] lo speed is unknown, defaulting to 1000 [ 298.819926][T12089] delete_channel: no stack [ 298.824654][T12089] delete_channel: no stack [ 298.829715][T12089] delete_channel: no stack [ 298.908971][T12089] delete_channel: no stack [ 298.918382][T12089] delete_channel: no stack [ 298.926989][T12089] delete_channel: no stack [ 298.932041][T12089] delete_channel: no stack [ 298.937342][T12089] delete_channel: no stack [ 298.942182][T12089] delete_channel: no stack [ 298.947373][T12089] delete_channel: no stack [ 298.952195][T12089] delete_channel: no stack [ 298.958116][T12089] delete_channel: no stack [ 298.962835][T12089] delete_channel: no stack [ 299.051555][T12101] lo speed is unknown, defaulting to 1000 [ 299.570800][T12120] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 299.611360][T12120] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 299.750697][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 299.780583][T12127] smc: removing ib device syz0 [ 300.352611][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1644'. [ 300.448831][T12147] netlink: 'syz.2.1645': attribute type 27 has an invalid length. [ 300.479392][T12147] batadv_slave_0: left promiscuous mode [ 300.485225][T12147] batadv_slave_0: left allmulticast mode [ 300.494479][T12147] vlan0: left promiscuous mode [ 300.511282][T12147] geneve1: left promiscuous mode [ 300.516510][T12147] geneve1: left allmulticast mode [ 300.540626][T12147] geneve2: left promiscuous mode [ 300.553467][T12147] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 300.567223][T12147] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 300.574667][T12147] bond2: left promiscuous mode [ 300.603601][T12147] wireguard0: left promiscuous mode [ 300.621507][T12147] team1: left promiscuous mode [ 300.626380][T12147] team1: left allmulticast mode [ 300.640861][T12147] hsr1: left promiscuous mode [ 300.659901][T12147] ip6tnl1: left promiscuous mode [ 300.910372][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 300.928278][T12147] ip6gre1: left promiscuous mode [ 300.946533][T12147] ip6gre1: left allmulticast mode [ 301.007826][T12147] veth1_vlan: left allmulticast mode [ 301.015017][T12147] macvtap1: left promiscuous mode [ 301.025886][T12147] macvtap1: left allmulticast mode [ 301.129001][T12149] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.144863][T12149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.162080][ T146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.236889][T12156] hsr_slave_1 (unregistering): left promiscuous mode [ 301.278556][ T146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.292237][ T146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.311761][ T146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.429119][T12162] lo: Caught tx_queue_len zero misconfig [ 301.490581][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1652'. [ 301.521644][T12165] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 301.569083][T12165] syzkaller1: entered promiscuous mode [ 301.575423][T12165] syzkaller1: entered allmulticast mode [ 301.598444][T12167] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1653'. [ 302.039884][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 302.060850][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 302.071041][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 302.076497][T12177] sit0: entered allmulticast mode [ 302.117511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 302.126056][ C1] lec:lec_tx_timeout: lec0 [ 302.131011][T12184] pim6reg: entered allmulticast mode [ 302.132269][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.170152][ T1338] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.189157][ T1338] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.213348][ T1338] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.248809][ T1338] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.270271][ T1338] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.280244][ T1338] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.319859][ T1338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.334233][ T1338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.459626][T12192] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 302.487166][T12192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.489040][T12194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 302.529290][T12194] netlink: 'syz.4.1661': attribute type 7 has an invalid length. [ 302.538039][T12194] netlink: 'syz.4.1661': attribute type 8 has an invalid length. [ 302.554416][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 302.784691][T12215] netlink: 'syz.0.1668': attribute type 2 has an invalid length. [ 302.813272][T12211] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20002 [ 302.826908][ T10] IPVS: starting estimator thread 0... [ 302.843865][T12215] hmac(sha224): entered promiscuous mode [ 302.879011][T12223] x_tables: duplicate underflow at hook 1 [ 302.937490][T12221] IPVS: using max 29 ests per chain, 69600 per kthread [ 303.021177][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'. [ 303.057566][T12229] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1673'. [ 303.069481][T12229] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1673'. [ 303.167731][T12237] bond0: (slave dummy0): Releasing backup interface [ 303.212897][T12237] bond0: (slave bond_slave_0): Releasing backup interface [ 303.240674][T12237] team_slave_0: left promiscuous mode [ 303.246318][T12237] team_slave_0: left allmulticast mode [ 303.276126][T12237] team0: Port device team_slave_0 removed [ 303.283580][T12237] team_slave_1: left promiscuous mode [ 303.290223][T12237] team_slave_1: left allmulticast mode [ 303.303068][T12237] team0: Port device team_slave_1 removed [ 303.325915][T12237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.400484][T12248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.464732][T12236] lo speed is unknown, defaulting to 1000 [ 303.546655][T12248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.583113][T12257] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.684852][T12248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.797056][T12248] bond0: (slave netdevsim0): Releasing backup interface [ 303.807049][T12248] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 303.821616][T12248] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 303.847795][T12248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.081606][ T1338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.175282][ T1338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.248598][ T1338] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.284205][ T146] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.309054][T12265] netlink: 'syz.0.1683': attribute type 39 has an invalid length. [ 304.929879][T12284] x_tables: duplicate underflow at hook 1 [ 304.982278][T12286] x_tables: duplicate underflow at hook 1 [ 305.786874][T12315] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 306.250062][T12339] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 306.527094][T12352] __nla_validate_parse: 13 callbacks suppressed [ 306.527116][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1705'. [ 306.557467][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1705'. [ 306.722702][T12360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1708'. [ 307.090973][T12384] netlink: zone id is out of range [ 307.110709][T12384] netlink: zone id is out of range [ 307.116049][T12384] netlink: zone id is out of range [ 307.147363][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 307.155530][ C1] lec:lec_tx_timeout: lec0 [ 307.160835][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.170983][T12384] netlink: zone id is out of range [ 307.176257][T12384] netlink: zone id is out of range [ 307.178940][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1715'. [ 307.217488][T12384] netlink: zone id is out of range [ 307.232037][T12390] gre0: left promiscuous mode [ 307.254446][T12384] netlink: zone id is out of range [ 307.286191][T12384] netlink: zone id is out of range [ 307.329528][T12384] netlink: zone id is out of range [ 307.334808][T12384] netlink: zone id is out of range [ 307.459699][T12390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.537196][T12389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1714'. [ 307.640754][ T128] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 307.675440][ T128] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 307.711131][ T128] bond0: now running without any active interface! [ 307.869993][T12410] syzkaller0: entered promiscuous mode [ 307.919050][T12410] syzkaller0: entered allmulticast mode [ 308.042658][T12410] tipc: Enabled bearer , priority 0 [ 308.128473][T12410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1718'. [ 308.258233][T12444] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 308.347476][T12406] tipc: Resetting bearer [ 308.442030][T12406] tipc: Disabling bearer [ 308.698730][T12475] veth4: entered allmulticast mode [ 308.798811][T12483] nbd4: detected capacity change from 0 to 63 [ 308.828396][ T8380] block nbd4: Send control failed (result -32) [ 308.834419][ T51] block nbd4: Receive control failed (result -32) [ 308.862807][T12487] lo speed is unknown, defaulting to 1000 [ 308.870191][ T8380] block nbd4: Request send failed, requeueing [ 308.908571][ T8380] block nbd4: Dead connection, failed to find a fallback [ 308.915853][ T8380] block nbd4: shutting down sockets [ 308.922791][ T1746] blk_print_req_error: 138 callbacks suppressed [ 308.922812][ T1746] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 308.940986][ T1746] buffer_io_error: 138 callbacks suppressed [ 308.941005][ T1746] Buffer I/O error on dev nbd4, logical block 0, async page read [ 308.985455][ T8380] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.006843][ T8380] Buffer I/O error on dev nbd4, logical block 1, async page read [ 309.030661][T12490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1729'. [ 309.056870][ T8380] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.094824][ T8380] Buffer I/O error on dev nbd4, logical block 2, async page read [ 309.138398][ T8380] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.185018][ T8380] Buffer I/O error on dev nbd4, logical block 3, async page read [ 309.206849][ T8380] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.246769][ T8380] Buffer I/O error on dev nbd4, logical block 0, async page read [ 309.264917][ T8380] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.305966][ T8380] Buffer I/O error on dev nbd4, logical block 1, async page read [ 309.325328][ T8380] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.349312][ T8380] Buffer I/O error on dev nbd4, logical block 2, async page read [ 309.358497][ T8380] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.429907][ T8380] Buffer I/O error on dev nbd4, logical block 3, async page read [ 309.467443][ T8380] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.483264][T12486] lo speed is unknown, defaulting to 1000 [ 309.502186][ T8380] Buffer I/O error on dev nbd4, logical block 0, async page read [ 309.541698][ T8380] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 309.572027][ T8380] Buffer I/O error on dev nbd4, logical block 1, async page read [ 309.590656][ T8380] ldm_validate_partition_table(): Disk read failed. [ 309.617944][ T8380] Dev nbd4: unable to read RDB block 0 [ 309.641917][ T8380] nbd4: unable to read partition table [ 309.674098][ T8380] ldm_validate_partition_table(): Disk read failed. [ 309.692193][ T8380] Dev nbd4: unable to read RDB block 0 [ 309.713000][ T8380] nbd4: unable to read partition table [ 309.936655][T12528] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 310.010172][T12525] can: request_module (can-proto-3) failed. [ 310.481590][T12520] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 310.552466][T12432] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.615194][T12432] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.788827][T12432] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.827547][T12432] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.985938][T12548] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 311.677884][ T7778] IPVS: starting estimator thread 0... [ 311.762364][T12581] netlink: 'syz.1.1753': attribute type 153 has an invalid length. [ 311.777248][T12579] IPVS: using max 26 ests per chain, 62400 per kthread [ 311.925183][T12590] bond4: option downdelay: invalid value (18446744073709551615) [ 311.943616][T12590] bond4: option downdelay: allowed values 0 - 2147483647 [ 311.971538][T12590] bond4 (unregistering): Released all slaves [ 312.177524][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.185657][ C1] lec:lec_tx_timeout: lec0 [ 312.191154][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.354048][T12606] tipc: Enabled bearer , priority 10 [ 312.387809][T12603] sctp: [Deprecated]: syz.0.1759 (pid 12603) Use of int in max_burst socket option deprecated. [ 312.387809][T12603] Use struct sctp_assoc_value instead [ 312.490613][T12607] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1759'. [ 312.803891][T12620] lo speed is unknown, defaulting to 1000 [ 313.144018][T12634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1769'. [ 313.144024][T12636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1769'. [ 313.285145][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1768'. [ 313.379118][T12652] FAULT_INJECTION: forcing a failure. [ 313.379118][T12652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.392910][T12652] CPU: 0 UID: 0 PID: 12652 Comm: syz.1.1774 Not tainted syzkaller #0 PREEMPT(full) [ 313.392948][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.392961][T12652] Call Trace: [ 313.392970][T12652] [ 313.392979][T12652] dump_stack_lvl+0xe8/0x150 [ 313.393021][T12652] should_fail_ex+0x412/0x560 [ 313.393055][T12652] _copy_from_iter+0x1d3/0x1670 [ 313.393089][T12652] ? rcu_is_watching+0x15/0xb0 [ 313.393126][T12652] ? __pfx__copy_from_iter+0x10/0x10 [ 313.393164][T12652] ? netlink_sendmsg+0x650/0xb40 [ 313.393193][T12652] ? skb_put+0x11b/0x210 [ 313.393229][T12652] netlink_sendmsg+0x6c0/0xb40 [ 313.393269][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.393304][T12652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 313.393334][T12652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.393362][T12652] ____sys_sendmsg+0x972/0x9f0 [ 313.393393][T12652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.393425][T12652] ? import_iovec+0x73/0xa0 [ 313.393461][T12652] ___sys_sendmsg+0x2a5/0x360 [ 313.393488][T12652] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.393548][T12652] ? __fget_files+0x2a/0x420 [ 313.393579][T12652] ? __fget_files+0x3a0/0x420 [ 313.393622][T12652] __x64_sys_sendmsg+0x1bd/0x2a0 [ 313.393647][T12652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.393678][T12652] ? rcu_is_watching+0x15/0xb0 [ 313.393721][T12652] do_syscall_64+0x14d/0xf80 [ 313.393751][T12652] ? trace_irq_disable+0x3b/0x150 [ 313.393777][T12652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.393794][T12652] ? clear_bhb_loop+0x40/0x90 [ 313.393816][T12652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.393834][T12652] RIP: 0033:0x7f01f219c799 [ 313.393850][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.393866][T12652] RSP: 002b:00007f01f303e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.393890][T12652] RAX: ffffffffffffffda RBX: 00007f01f2415fa0 RCX: 00007f01f219c799 [ 313.393902][T12652] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 313.393914][T12652] RBP: 00007f01f303e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.393930][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.393941][T12652] R13: 00007f01f2416038 R14: 00007f01f2415fa0 R15: 00007fff589670f8 [ 313.393978][T12652] [ 313.705556][ T10] tipc: Node number set to 2916832224 [ 313.803701][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 313.834413][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1777'. [ 313.871003][T12662] net_ratelimit: 45 callbacks suppressed [ 313.871024][T12662] openvswitch: netlink: Actions may not be safe on all matching packets [ 313.977917][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'. [ 314.011590][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 314.024328][T12662] syzkaller0: entered promiscuous mode [ 314.072695][T12662] syzkaller0: entered allmulticast mode [ 314.300819][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 314.363448][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 315.699653][T12432] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.709222][T12432] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.719668][T12432] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.800210][T12432] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.058328][T12704] FAULT_INJECTION: forcing a failure. [ 316.058328][T12704] name failslab, interval 1, probability 0, space 0, times 0 [ 316.141238][T12704] CPU: 1 UID: 0 PID: 12704 Comm: syz.3.1790 Not tainted syzkaller #0 PREEMPT(full) [ 316.141269][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.141283][T12704] Call Trace: [ 316.141292][T12704] [ 316.141302][T12704] dump_stack_lvl+0xe8/0x150 [ 316.141339][T12704] should_fail_ex+0x412/0x560 [ 316.141374][T12704] should_failslab+0xa8/0x100 [ 316.141401][T12704] ? ovs_flow_alloc+0x24/0x1f0 [ 316.141424][T12704] kmem_cache_alloc_noprof+0x87/0x650 [ 316.141456][T12704] ovs_flow_alloc+0x24/0x1f0 [ 316.141483][T12704] ovs_flow_cmd_new+0x2b9/0xe80 [ 316.141522][T12704] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 316.141613][T12704] ? __nla_parse+0x40/0x60 [ 316.141653][T12704] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 316.141678][T12704] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 316.141718][T12704] genl_family_rcv_msg_doit+0x22a/0x330 [ 316.141750][T12704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 316.141789][T12704] ? bpf_lsm_capable+0x9/0x20 [ 316.141835][T12704] ? security_capable+0x7e/0x2c0 [ 316.141869][T12704] genl_rcv_msg+0x61c/0x7a0 [ 316.141900][T12704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.141922][T12704] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 316.141951][T12704] ? __lock_acquire+0x6b5/0x2cf0 [ 316.141993][T12704] netlink_rcv_skb+0x232/0x4b0 [ 316.142025][T12704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.142051][T12704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.142101][T12704] ? down_read+0x272/0x2e0 [ 316.142121][T12704] ? genl_rcv+0xd/0x40 [ 316.142145][T12704] genl_rcv+0x28/0x40 [ 316.142164][T12704] netlink_unicast+0x80f/0x9b0 [ 316.142202][T12704] ? __pfx_netlink_unicast+0x10/0x10 [ 316.142231][T12704] ? netlink_sendmsg+0x650/0xb40 [ 316.142259][T12704] ? skb_put+0x11b/0x210 [ 316.142295][T12704] netlink_sendmsg+0x813/0xb40 [ 316.142337][T12704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.142372][T12704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.142403][T12704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.142431][T12704] ____sys_sendmsg+0x972/0x9f0 [ 316.142465][T12704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.142497][T12704] ? import_iovec+0x73/0xa0 [ 316.142535][T12704] ___sys_sendmsg+0x2a5/0x360 [ 316.142564][T12704] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.142631][T12704] ? __fget_files+0x2a/0x420 [ 316.142663][T12704] ? __fget_files+0x3a0/0x420 [ 316.142712][T12704] __x64_sys_sendmsg+0x1bd/0x2a0 [ 316.142738][T12704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.142771][T12704] ? __pfx_ksys_write+0x10/0x10 [ 316.142808][T12704] do_syscall_64+0x14d/0xf80 [ 316.142839][T12704] ? trace_irq_disable+0x3b/0x150 [ 316.142869][T12704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.142892][T12704] ? clear_bhb_loop+0x40/0x90 [ 316.142919][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.142942][T12704] RIP: 0033:0x7f875a79c799 [ 316.142962][T12704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.142981][T12704] RSP: 002b:00007f87589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.143004][T12704] RAX: ffffffffffffffda RBX: 00007f875aa15fa0 RCX: 00007f875a79c799 [ 316.143020][T12704] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 316.143035][T12704] RBP: 00007f87589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.143048][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.143061][T12704] R13: 00007f875aa16038 R14: 00007f875aa15fa0 R15: 00007ffe0c19d068 [ 316.143095][T12704] [ 317.207365][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.215692][ C1] lec:lec_tx_timeout: lec0 [ 317.221057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.353984][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.739346][T12793] __nla_validate_parse: 5 callbacks suppressed [ 317.739370][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 317.784500][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 318.229559][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 318.246403][T12824] netlink: 'syz.1.1825': attribute type 3 has an invalid length. [ 318.287367][T12825] netlink: 'syz.1.1825': attribute type 3 has an invalid length. [ 318.465002][T12836] lo speed is unknown, defaulting to 1000 [ 318.535686][T12843] x_tables: duplicate underflow at hook 2 [ 318.795629][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 318.830540][T12856] vlan1: entered promiscuous mode [ 318.840242][T12856] dummy0: entered promiscuous mode [ 318.965378][T12866] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1835'. [ 319.128758][T12873] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 319.281604][T12878] bond8: (slave veth11): Enslaving as an active interface with a down link [ 319.339638][T12883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1838'. [ 319.454740][T12873] bond8: (slave veth13): Enslaving as an active interface with a down link [ 319.490499][T12862] lo speed is unknown, defaulting to 1000 [ 319.771642][T12883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.093839][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'. [ 320.286035][ T30] audit: type=1800 audit(1773710927.330:5): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1841" name="memory.events" dev="tmpfs" ino=1940 res=0 errno=0 [ 320.296086][T12912] syzkaller1: entered promiscuous mode [ 320.337693][T12912] syzkaller1: entered allmulticast mode [ 320.774258][T12929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1849'. [ 321.144864][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 321.175897][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 321.538734][T12959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.979617][T12971] tipc: Enabling of bearer rejected, failed to enable media [ 322.237442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.245564][ C1] lec:lec_tx_timeout: lec0 [ 322.252842][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.392731][T12993] veth0: entered promiscuous mode [ 322.410830][T12997] batadv1: entered promiscuous mode [ 322.416213][T12997] batadv1: entered allmulticast mode [ 322.453942][T12997] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 322.539110][T12998] batadv2: entered promiscuous mode [ 322.548406][T12998] batadv2: entered allmulticast mode [ 322.556353][T12998] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 322.577701][T12989] veth0: left promiscuous mode [ 322.624134][T12999] : entered promiscuous mode [ 322.743041][T13010] hsr_slave_0: left promiscuous mode [ 322.813570][T13013] lo speed is unknown, defaulting to 1000 [ 322.836629][T13007] can: request_module (can-proto-5) failed. [ 322.879507][T13013] lo speed is unknown, defaulting to 1000 [ 322.907710][T13013] lo speed is unknown, defaulting to 1000 [ 322.944455][T13013] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.083358][T13013] lo speed is unknown, defaulting to 1000 [ 323.113854][T13013] lo speed is unknown, defaulting to 1000 [ 323.141783][T13013] lo speed is unknown, defaulting to 1000 [ 323.161060][T13013] lo speed is unknown, defaulting to 1000 [ 323.192354][T13013] lo speed is unknown, defaulting to 1000 [ 323.340604][T13044] __nla_validate_parse: 7 callbacks suppressed [ 323.340628][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1883'. [ 323.523655][T13058] netlink: 'syz.1.1887': attribute type 13 has an invalid length. [ 323.532060][T13058] netlink: 'syz.1.1887': attribute type 12 has an invalid length. [ 323.567950][T13057] lo speed is unknown, defaulting to 1000 [ 324.120646][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1891'. [ 324.785191][T13052] lo speed is unknown, defaulting to 1000 [ 324.791283][T13057] lo speed is unknown, defaulting to 1000 [ 325.073621][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1904'. [ 325.461964][T13052] lo speed is unknown, defaulting to 1000 [ 325.481469][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 325.532902][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 325.611318][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 325.644175][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 325.657274][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'. [ 325.743899][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 325.859583][T13153] bond9: entered promiscuous mode [ 325.864747][T13153] bond9: entered allmulticast mode [ 325.871109][T13153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 326.216341][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 326.253227][T13164] xt_hashlimit: size too large, truncated to 1048576 [ 326.274168][T13164] xt_hashlimit: overflow, try lower: 0/0 [ 326.283666][T13164] lo: entered allmulticast mode [ 326.308910][T13163] lo: left allmulticast mode [ 326.864538][T13193] delete_channel: no stack [ 327.086950][T13215] netlink: 'syz.0.1933': attribute type 5 has an invalid length. [ 327.168811][T13208] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.195399][T13208] block nbd5: shutting down sockets [ 327.548629][T13242] siw: device registration error -23 [ 328.076736][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 328.084897][ C1] lec:lec_tx_timeout: lec0 [ 328.090719][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.154946][T13278] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 328.223730][T13278] bond7: entered promiscuous mode [ 328.230063][T13278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 328.258532][T13278] netlink: 'syz.3.1954': attribute type 4 has an invalid length. [ 328.315289][T13278] bridge0: Device is already in use. [ 328.443491][T13289] netlink: 'syz.2.1957': attribute type 9 has an invalid length. [ 328.539402][T13291] __nla_validate_parse: 16 callbacks suppressed [ 328.539423][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 328.736993][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 328.748878][T13299] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1956'. [ 328.766975][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'. [ 329.053619][T13314] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 329.071583][T13314] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 329.210212][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1963'. [ 329.592798][T13331] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1964'. [ 329.637819][T13331] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1964'. [ 330.361646][T13343] netlink: 'syz.3.1970': attribute type 13 has an invalid length. [ 330.473706][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 330.720969][T13350] lo speed is unknown, defaulting to 1000 [ 331.449533][T13350] lo speed is unknown, defaulting to 1000 [ 331.782862][T13394] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1984'. [ 331.948036][T13406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1987'. [ 332.506655][T13403] lo speed is unknown, defaulting to 1000 [ 333.008879][T13433] netlink: 'syz.1.1991': attribute type 7 has an invalid length. [ 333.037942][T13433] netlink: 'syz.1.1991': attribute type 8 has an invalid length. [ 333.118427][T13433] syz_tun: entered promiscuous mode [ 333.188325][T13433] gretap0: entered promiscuous mode [ 333.194972][T13433] gretap0: left promiscuous mode [ 333.248326][T13433] syz_tun: left promiscuous mode [ 333.598530][T13403] lo speed is unknown, defaulting to 1000 [ 333.695657][T13405] lo speed is unknown, defaulting to 1000 [ 334.155259][T13469] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 334.164211][T13469] netlink: 'syz.1.1999': attribute type 6 has an invalid length. [ 334.190044][T13469] __nla_validate_parse: 2 callbacks suppressed [ 334.190067][T13469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'. [ 334.233994][T13469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'. [ 334.265528][T13469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'. [ 334.329918][T13477] tipc: Enabled bearer , priority 0 [ 334.519213][T13481] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 334.633547][T13492] netlink: 'syz.4.2003': attribute type 1 has an invalid length. [ 334.642032][T13492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2003'. [ 334.654997][T13481] bond8: entered promiscuous mode [ 334.667028][T13481] bond8: entered allmulticast mode [ 334.680839][T13481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.740535][T13494] xfrm0: Caught tx_queue_len zero misconfig [ 334.767571][T13447] lo speed is unknown, defaulting to 1000 [ 335.259213][T13502] netlink: 'syz.1.2008': attribute type 5 has an invalid length. [ 335.385907][T13447] lo speed is unknown, defaulting to 1000 [ 335.402969][T13479] lo speed is unknown, defaulting to 1000 [ 335.544194][ T5907] tipc: Node number set to 1122808554 [ 335.557444][T13405] lo speed is unknown, defaulting to 1000 [ 336.032498][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 336.054048][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 336.255958][T13479] lo speed is unknown, defaulting to 1000 [ 336.416059][T13528] ip6tnl1: entered promiscuous mode [ 336.546726][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5980 ms [ 336.554831][ C1] lec:lec_tx_timeout: lec0 [ 336.914218][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 336.956945][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 337.148438][T13550] tipc: Can't bind to reserved service type 1 [ 337.164990][T13550] netlink: 'syz.4.2020': attribute type 39 has an invalid length. [ 337.238361][T13554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2020'. [ 337.269336][T13554] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2020'. [ 337.328428][T13554] netlink: 'syz.4.2020': attribute type 5 has an invalid length. [ 337.875115][T13575] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.893057][T13575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.933758][T13587] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 338.261539][T13598] lo speed is unknown, defaulting to 1000 [ 338.445130][T13600] sit0: entered allmulticast mode [ 338.453226][T13609] sit0: left allmulticast mode [ 338.495542][T13598] lo speed is unknown, defaulting to 1000 [ 338.559558][T13612] netlink: 'syz.4.2038': attribute type 13 has an invalid length. [ 338.634074][T13612] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 338.870675][T13628] tipc: Enabled bearer , priority 14 [ 339.140637][T13639] openvswitch: netlink: Flow key attr not present in new flow. [ 339.419750][T13649] __nla_validate_parse: 9 callbacks suppressed [ 339.419776][T13649] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2051'. [ 339.498406][T13647] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 339.634341][T13646] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 340.033843][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 340.209753][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 340.298740][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 340.637109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.646489][T13707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.803535][T13711] lo speed is unknown, defaulting to 1000 [ 341.033834][T13727] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 341.042240][T13727] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.2072'. [ 341.390537][T13743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.401524][T13736] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2076'. [ 341.435765][T13711] lo speed is unknown, defaulting to 1000 [ 341.605346][T13749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.661210][T12432] tipc: Subscription rejected, illegal request [ 341.878395][T13764] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 341.983592][T13764] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2082'. [ 342.114755][T13767] batadv0: entered promiscuous mode [ 342.124380][T13767] bond0: entered promiscuous mode [ 342.134088][T13767] bridge0: entered promiscuous mode [ 342.167666][T13767] debugfs: 'hsr0' already exists in 'hsr' [ 342.192415][T13767] Cannot create hsr debugfs directory [ 342.203468][T13767] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 342.206532][T13770] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.247586][T13767] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 342.270846][T13767] hsr0: entered allmulticast mode [ 342.276564][T13767] batadv0: entered allmulticast mode [ 342.283451][T13767] bond0: entered allmulticast mode [ 342.289491][T13767] bridge0: entered allmulticast mode [ 342.295875][T13767] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 342.505976][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2090'. [ 342.553300][T13788] ip6tnl0: Caught tx_queue_len zero misconfig [ 342.559674][T13788] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2090'. [ 343.164579][T13825] hsr0: entered promiscuous mode [ 343.175298][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 343.229368][T13829] Can't find ip_set type hasG:ip [ 343.343212][T13840] hsr0: left promiscuous mode [ 344.249205][T13886] vlan3: entered promiscuous mode [ 344.254341][T13886] geneve1: entered promiscuous mode [ 344.276073][T13886] vlan3: entered allmulticast mode [ 344.311544][T13886] geneve1: entered allmulticast mode [ 345.015360][T13915] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 345.047772][T13915] __nla_validate_parse: 4 callbacks suppressed [ 345.047795][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 345.106234][T13920] netlink: 'syz.1.2121': attribute type 27 has an invalid length. [ 345.126212][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 345.367604][T13930] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 345.541452][T13930] bond4: entered promiscuous mode [ 345.556842][T13930] bond4: entered allmulticast mode [ 345.562573][T13930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.616364][T13937] vlan2: entered promiscuous mode [ 345.638580][T13946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2130'. [ 345.725380][T13937] syz_tun: entered promiscuous mode [ 346.067613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 346.075841][ C1] lec:lec_tx_timeout: lec0 [ 346.080747][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 347.335129][T13986] netlink: 'syz.1.2139': attribute type 2 has an invalid length. [ 347.709526][T13993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2142'. [ 348.077831][T14007] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 348.088801][T14013] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 348.347181][T14025] netlink: 'syz.3.2149': attribute type 1 has an invalid length. [ 348.557506][T14025] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.618820][T14026] bond10: option tlb_dynamic_lb: unable to set because the bond device is up [ 349.054846][T14047] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2153'. [ 349.504892][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 349.554405][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 349.574813][T14070] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2160'. [ 349.586640][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 349.597075][T14070] netlink: ct family unspecified [ 349.602721][T14070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.508058][T14106] block nbd5: server does not support multiple connections per device. [ 350.520900][T14106] block nbd5: shutting down sockets [ 350.842829][T14111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2175'. [ 351.097346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 351.105458][ C1] lec:lec_tx_timeout: lec0 [ 351.288124][T14139] lo speed is unknown, defaulting to 1000 [ 351.302629][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 351.315206][T14144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.721918][T14158] lo speed is unknown, defaulting to 1000 [ 351.730289][T14139] lo speed is unknown, defaulting to 1000 [ 351.748485][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2191'. [ 351.829601][T14160] team0: No ports can be present during mode change [ 352.003155][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 352.608812][T14191] netlink: 'syz.2.2200': attribute type 14 has an invalid length. [ 352.779735][T14158] lo speed is unknown, defaulting to 1000 [ 353.240321][T14217] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 353.249277][T14215] IPVS: stopping backup sync thread 14217 ... [ 353.490005][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 353.584908][T14233] netlink: 'syz.4.2213': attribute type 2 has an invalid length. [ 353.669319][T14233] ÃM¯”ÛÓó: entered promiscuous mode [ 353.980373][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2215'. [ 354.133193][T14257] hsr0: entered promiscuous mode [ 354.164567][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 354.206399][T14257] hsr_slave_0: left promiscuous mode [ 354.213775][T14257] hsr_slave_1: left promiscuous mode [ 354.239751][T14257] hsr0 (unregistering): left promiscuous mode [ 354.255604][T14241] nbd5: detected capacity change from 0 to 63 [ 354.272042][ T5142] block nbd5: Receive control failed (result -32) [ 354.279582][ T5836] block nbd5: Receive control failed (result -32) [ 354.288384][ T51] block nbd5: Receive control failed (result -32) [ 354.296948][ T5841] block nbd5: Receive control failed (result -32) [ 354.313440][ T5839] block nbd5: Receive control failed (result -32) [ 354.327468][ T8380] block nbd5: Dead connection, failed to find a fallback [ 354.356825][ T8380] block nbd5: shutting down sockets [ 354.378624][ T8380] blk_print_req_error: 138 callbacks suppressed [ 354.378648][ T8380] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.428611][T14264] bond0: Caught tx_queue_len zero misconfig [ 354.435137][ T8380] buffer_io_error: 138 callbacks suppressed [ 354.435157][ T8380] Buffer I/O error on dev nbd5, logical block 0, async page read [ 354.495220][T14271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.525104][ T8380] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.552447][ T8380] Buffer I/O error on dev nbd5, logical block 1, async page read [ 354.586568][ T8380] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.636796][ T8380] Buffer I/O error on dev nbd5, logical block 2, async page read [ 354.655976][ T8380] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.723579][ T8380] Buffer I/O error on dev nbd5, logical block 3, async page read [ 354.775147][ T8380] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.835978][ T8380] Buffer I/O error on dev nbd5, logical block 0, async page read [ 354.855963][ T8380] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.905926][ T8380] Buffer I/O error on dev nbd5, logical block 1, async page read [ 354.921467][T14286] lo speed is unknown, defaulting to 1000 [ 354.937876][ T8380] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 354.964326][ T8380] Buffer I/O error on dev nbd5, logical block 2, async page read [ 354.989148][ T8380] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 355.019397][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'. [ 355.031960][ T8380] Buffer I/O error on dev nbd5, logical block 3, async page read [ 355.051134][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 355.067158][ T8380] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 355.087637][ T8380] Buffer I/O error on dev nbd5, logical block 0, async page read [ 355.105887][ T8380] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 355.128005][ T8380] Buffer I/O error on dev nbd5, logical block 1, async page read [ 355.136659][ T8380] ldm_validate_partition_table(): Disk read failed. [ 355.157605][ T8380] Dev nbd5: unable to read RDB block 0 [ 355.174285][ T8380] nbd5: unable to read partition table [ 355.259093][ T8380] ldm_validate_partition_table(): Disk read failed. [ 355.267670][ T8380] Dev nbd5: unable to read RDB block 0 [ 355.274325][ T8380] nbd5: unable to read partition table [ 355.344163][T14307] sctp: [Deprecated]: syz.2.2234 (pid 14307) Use of int in maxseg socket option. [ 355.344163][T14307] Use struct sctp_assoc_value instead [ 355.616453][T14286] lo speed is unknown, defaulting to 1000 [ 355.625953][T14291] lo speed is unknown, defaulting to 1000 [ 355.746862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.930721][T14316] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.122012][T14322] tipc: Enabled bearer , priority 10 [ 356.139893][T14322] netlink: 'syz.2.2238': attribute type 5 has an invalid length. [ 356.316278][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 356.387584][T14333] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2241'. [ 356.735201][T14342] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.755555][T14342] tipc: Failed to remove unknown binding: 66,0,0/1122808554:2737286147/2737286149 [ 356.778616][T14342] tipc: Failed to remove unknown binding: 66,0,0/1122808554:2737286147/2737286149 [ 356.881345][T14353] syz.4.2247 uses old SIOCAX25GETINFO [ 356.916440][T14291] lo speed is unknown, defaulting to 1000 [ 356.938765][T14343] veth0_to_bond: Caught tx_queue_len zero misconfig [ 357.308228][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2250'. [ 357.387482][T14360] ipvlan2: entered promiscuous mode [ 357.527271][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 357.553879][T14364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2251'. [ 357.566394][T14365] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2252'. [ 357.583671][T14365] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2252'. [ 358.017759][T14382] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 358.448449][T14394] veth1: entered allmulticast mode [ 358.459041][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 358.596295][T14390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2262'. [ 359.105021][T14425] netlink: 'syz.4.2271': attribute type 8 has an invalid length. [ 359.298779][T14434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.473736][T14453] netlink: 968 bytes leftover after parsing attributes in process `syz.4.2273'. [ 359.623810][T14460] veth0: Caught tx_queue_len zero misconfig [ 359.969977][T14472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 360.107478][T14474] lo speed is unknown, defaulting to 1000 [ 360.597914][T14494] ip6gretap0: entered promiscuous mode [ 360.621207][T14494] ip6gretap0: left promiscuous mode [ 360.791304][T14500] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 360.802988][T14500] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 360.811504][T14474] lo speed is unknown, defaulting to 1000 [ 360.825906][T14491] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.026757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 361.034945][ C1] lec:lec_tx_timeout: lec0 [ 361.040856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.343232][T14518] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 361.357370][T14518] bond10 (unregistering): Released all slaves [ 361.885758][T14523] pim6reg1: entered promiscuous mode [ 361.903798][T14523] pim6reg1: entered allmulticast mode [ 362.074137][T14529] lo speed is unknown, defaulting to 1000 [ 362.094367][T14532] __nla_validate_parse: 10 callbacks suppressed [ 362.094389][T14532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2297'. [ 362.260787][T14540] netlink: 'syz.3.2301': attribute type 3 has an invalid length. [ 362.290030][T14540] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 362.335509][T14540] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2301'. [ 362.356933][T14540] NCSI netlink: No device for ifindex 808464432 [ 362.511829][T14555] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 362.563317][T14559] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 362.606194][T14557] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 362.675304][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 362.724388][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 362.738432][T14555] hsr_slave_1 (unregistering): left promiscuous mode [ 362.805056][T14529] lo speed is unknown, defaulting to 1000 [ 362.986504][T14579] openvswitch: netlink: IPv4 tun info is not correct [ 363.020333][T14580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'. [ 363.205347][T14588] netlink: 'syz.3.2317': attribute type 1 has an invalid length. [ 363.291250][T14588] 8021q: adding VLAN 0 to HW filter on device bond11 [ 363.327030][T14588] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2317'. [ 363.342781][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2319'. [ 363.552491][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 363.594533][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 363.673629][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 363.693568][T14613] bond0: left allmulticast mode [ 363.708912][T14613] bond_slave_0: left allmulticast mode [ 363.717147][T14613] bond_slave_1: left allmulticast mode [ 363.724897][T14613] dummy0: left allmulticast mode [ 363.756640][T14615] xt_ecn: cannot match TCP bits for non-tcp packets [ 363.898569][T14611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.918240][T14611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.136351][T14611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.157936][T14611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.323945][T14611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.338568][T14611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.538402][T14611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.570583][T14611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 364.794235][T14662] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 364.802837][T14662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.010816][T14670] pimreg: entered allmulticast mode [ 365.187614][T12430] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.211578][T12430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 365.309688][T12430] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.323036][T12430] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 365.364482][T12430] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.387447][T12430] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 365.413406][T12430] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.452927][T12430] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 365.579814][T14687] sch_tbf: burst 12 is lower than device bridge5 mtu (1514) ! [ 365.674461][T14693] netlink: 'syz.3.2351': attribute type 10 has an invalid length. [ 365.708766][T14693] team0: Port device dummy0 added [ 365.730594][T14693] netlink: 'syz.3.2351': attribute type 10 has an invalid length. [ 365.771033][T14693] team0: Port device dummy0 removed [ 365.800518][T14693] dummy0: entered promiscuous mode [ 365.806150][T14693] dummy0: entered allmulticast mode [ 365.839923][T14693] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.872817][T14693] netlink: 'syz.3.2351': attribute type 10 has an invalid length. [ 366.066772][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 366.074912][ C1] lec:lec_tx_timeout: lec0 [ 366.886472][T14735] lo speed is unknown, defaulting to 1000 [ 367.132885][T14748] tipc: Resetting bearer [ 367.142328][T14732] __nla_validate_parse: 23 callbacks suppressed [ 367.142347][T14732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2363'. [ 367.163935][T14752] netlink: 166192 bytes leftover after parsing attributes in process `syz.1.2367'. [ 367.313879][T14748] tipc: Resetting bearer [ 367.466623][T12430] tipc: Resetting bearer [ 367.532973][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 367.551534][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'. [ 367.577697][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 367.687024][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2375'. [ 367.980944][T14796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.008841][T14796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.061153][T14800] xt_hashlimit: size too large, truncated to 1048576 [ 368.072437][T14800] xt_hashlimit: max too large, truncated to 1048576 [ 368.097780][T14735] lo speed is unknown, defaulting to 1000 [ 368.104692][T14741] lo speed is unknown, defaulting to 1000 [ 368.131567][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'. [ 368.141258][T14805] netlink: 'syz.2.2383': attribute type 4 has an invalid length. [ 368.161101][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'. [ 368.182076][T14805] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2383'. [ 368.204083][T14807] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2382'. [ 369.082222][T14849] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.101369][T14842] lo speed is unknown, defaulting to 1000 [ 369.110036][T14741] lo speed is unknown, defaulting to 1000 [ 369.194942][T14853] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 369.276301][T14849] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.354729][T14849] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.408695][T14864] netlink: 'syz.0.2397': attribute type 3 has an invalid length. [ 369.434905][T14849] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.656150][T12430] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.682013][T12430] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.728788][T14842] lo speed is unknown, defaulting to 1000 [ 369.731140][T12436] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.851087][T12430] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.964942][T14873] tipc: Resetting bearer [ 370.070874][T14876] tipc: Enabling of bearer rejected, already enabled [ 370.176235][T14872] tipc: Resetting bearer [ 370.257667][T14876] tipc: Resetting bearer [ 370.305643][T14883] syzkaller1: entered promiscuous mode [ 370.316880][T14883] syzkaller1: entered allmulticast mode [ 370.544630][T12436] tipc: Resetting bearer [ 370.854037][T14903] tipc: Enabling of bearer rejected, failed to enable media [ 370.877228][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.068222][T14909] lo speed is unknown, defaulting to 1000 [ 371.714341][T14909] lo speed is unknown, defaulting to 1000 [ 371.801370][T14910] lo speed is unknown, defaulting to 1000 [ 372.272779][T14923] lo speed is unknown, defaulting to 1000 [ 372.398641][T14969] __nla_validate_parse: 8 callbacks suppressed [ 372.398664][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 372.614014][T14976] openvswitch: netlink: Missing key (keys=40, expected=100) [ 372.624966][T14923] lo speed is unknown, defaulting to 1000 [ 372.654642][T14910] lo speed is unknown, defaulting to 1000 [ 372.960094][T14989] netlink: 'syz.2.2432': attribute type 1 has an invalid length. [ 372.968735][T14989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2432'. [ 373.140774][T14986] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 373.168026][T14986] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 373.178217][T14986] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 373.238483][T14993] syzkaller0: entered promiscuous mode [ 373.253284][T14993] syzkaller0: entered allmulticast mode [ 373.442890][T15001] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2436'. [ 373.838813][T15012] team0: left promiscuous mode [ 373.852894][T15012] team0: left allmulticast mode [ 373.893539][ T30] audit: type=1804 audit(1773710980.940:6): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2440" name="/newroot/528/memory.events" dev="tmpfs" ino=2712 res=1 errno=0 [ 373.984693][T15012] vlan3: left promiscuous mode [ 374.011926][T15012] bond3: left promiscuous mode [ 374.041778][T15012] bridge1: left promiscuous mode [ 374.060656][T15012] vlan3: left allmulticast mode [ 374.071296][T15012] bond3: left allmulticast mode [ 374.089201][T15012] bridge1: left allmulticast mode [ 374.126849][T15012] tipc: Resetting bearer [ 374.289443][T15012] syzkaller0: left promiscuous mode [ 374.295039][T15012] syzkaller0: left allmulticast mode [ 374.303845][T15012] bond5: left allmulticast mode [ 374.309994][T15012] bridge2: left promiscuous mode [ 374.316986][T15012] bridge2: left allmulticast mode [ 374.333387][T15012] bond6: left promiscuous mode [ 374.338711][T15012] geneve3: left promiscuous mode [ 374.343977][T15012] bond6: left allmulticast mode [ 374.349651][T15012] geneve3: left allmulticast mode [ 374.360112][T15012] gre1: left allmulticast mode [ 374.365295][T15012] gtp0: left promiscuous mode [ 374.370779][T15012] gtp0: left allmulticast mode [ 374.400493][T15012] bond9: left promiscuous mode [ 374.405830][T15012] bond9: left allmulticast mode [ 374.422017][ T146] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.434124][ T146] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.467556][ T146] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.476268][ T146] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 374.513573][T15043] lo speed is unknown, defaulting to 1000 [ 374.662742][T15047] tipc: Enabled bearer , priority 0 [ 374.718401][T15047] syzkaller0: entered promiscuous mode [ 374.747963][T15047] syzkaller0: entered allmulticast mode [ 374.791176][T15047] tipc: Resetting bearer [ 374.819392][T15054] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2451'. [ 374.834084][T15046] tipc: Resetting bearer [ 374.898691][T15046] tipc: Disabling bearer [ 374.910702][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 375.102395][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'. [ 375.192843][T15071] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 375.247677][T15066] lo: Caught tx_queue_len zero misconfig [ 375.297273][T15043] lo speed is unknown, defaulting to 1000 [ 375.310741][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'. [ 375.364185][T15066] vlan0: entered promiscuous mode [ 375.570513][T15087] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2459'. [ 376.067113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 376.075182][ C1] lec:lec_tx_timeout: lec0 [ 376.081057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.170461][T15116] netlink: 'syz.2.2465': attribute type 13 has an invalid length. [ 376.188681][T15123] veth0: entered promiscuous mode [ 376.251628][T15116] netlink: 'syz.2.2465': attribute type 17 has an invalid length. [ 376.260618][T15116] netlink: 'syz.2.2465': attribute type 27 has an invalid length. [ 376.269393][T15123] veth0: left promiscuous mode [ 376.378373][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2469'. [ 376.415821][T15134] IPVS: nq: FWM 3 0x00000003 - no destination available [ 376.503015][T15131] bond7: entered promiscuous mode [ 376.521359][T15131] bond7: entered allmulticast mode [ 376.542403][T15131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.766449][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 376.803762][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.961346][T15168] Cannot find set identified by id 3 to match [ 377.369636][T15191] netlink: 'syz.4.2481': attribute type 3 has an invalid length. [ 377.398456][T15179] bond10 (unregistering): Released all slaves [ 377.499053][T15195] __nla_validate_parse: 1 callbacks suppressed [ 377.499069][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 377.562193][T15202] netlink: 'syz.3.2485': attribute type 2 has an invalid length. [ 377.572068][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 377.586404][T15181] team_slave_1: Caught tx_queue_len zero misconfig [ 377.801636][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2488'. [ 378.009651][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 378.048825][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 378.314680][T15244] gre0 speed is unknown, defaulting to 1000 [ 378.343427][T15244] gre0 speed is unknown, defaulting to 1000 [ 378.387774][T15244] gre0 speed is unknown, defaulting to 1000 [ 378.461495][T15250] rdma_rxe: rxe_newlink: failed to add gre0 [ 378.479523][T15247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2498'. [ 378.479632][T15253] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 378.518442][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2500'. [ 378.660040][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2499'. [ 378.670015][T15254] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 378.683715][T15254] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 378.712201][T15258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.790914][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.800844][ T1300] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 378.822051][T15258] macvlan1: entered promiscuous mode [ 378.828135][T15258] macvlan1: entered allmulticast mode [ 378.834427][T15258] bond5: (slave macvlan1): Error -98 calling set_mac_address [ 378.885392][T15263] tipc: Enabling of bearer rejected, already enabled [ 379.104013][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 379.207592][T15244] infiniband syz1: set down [ 379.212253][ T5900] gre0 speed is unknown, defaulting to 1000 [ 379.226750][T15274] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 379.228212][T15244] infiniband syz1: added gre0 [ 379.241666][T15272] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 379.252371][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 379.296895][T15244] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 379.300651][T15244] infiniband syz1: Couldn't open port 1 [ 379.344851][T15244] RDS/IB: syz1: added [ 379.349449][T15244] smc: adding ib device syz1 with port count 1 [ 379.355661][T15244] smc: ib device syz1 port 1 has no pnetid [ 379.369853][ T5900] gre0 speed is unknown, defaulting to 1000 [ 379.377097][T15244] gre0 speed is unknown, defaulting to 1000 [ 380.105089][T15244] gre0 speed is unknown, defaulting to 1000 [ 380.261868][T15312] sctp: [Deprecated]: syz.2.2519 (pid 15312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.261868][T15312] Use struct sctp_sack_info instead [ 380.284989][T15317] sctp: [Deprecated]: syz.2.2519 (pid 15317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.284989][T15317] Use struct sctp_sack_info instead [ 381.047156][T15244] gre0 speed is unknown, defaulting to 1000 [ 381.097355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.105462][ C1] lec:lec_tx_timeout: lec0 [ 381.365001][T15361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.411201][T15362] ipvlan0: entered promiscuous mode [ 381.452845][T15362] ipvlan0: entered allmulticast mode [ 381.478775][T15362] bond7: entered allmulticast mode [ 381.485296][T15362] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 381.610454][T15376] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 381.720827][T15376] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.971418][T15244] gre0 speed is unknown, defaulting to 1000 [ 382.052081][T15390] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.197184][T15397] nbd6: detected capacity change from 0 to 127 [ 382.205832][ T51] block nbd6: Receive control failed (result -32) [ 382.215242][ T8380] block nbd6: Send control failed (result -32) [ 382.287415][ T8380] block nbd6: Request send failed, requeueing [ 382.294027][ T8380] block nbd6: Dead connection, failed to find a fallback [ 382.303963][ T1746] block nbd6: Dead connection, failed to find a fallback [ 382.311984][ T1746] block nbd6: shutting down sockets [ 382.318165][ T1746] blk_print_req_error: 138 callbacks suppressed [ 382.318186][ T1746] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.334913][ T1746] buffer_io_error: 138 callbacks suppressed [ 382.334932][ T1746] Buffer I/O error on dev nbd6, logical block 0, async page read [ 382.350406][ T8380] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.374858][ T8380] Buffer I/O error on dev nbd6, logical block 1, async page read [ 382.395127][ T8380] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.427327][ T8380] Buffer I/O error on dev nbd6, logical block 2, async page read [ 382.435286][ T8380] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.466959][ T8380] Buffer I/O error on dev nbd6, logical block 3, async page read [ 382.475132][ T8380] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.532229][ T8380] Buffer I/O error on dev nbd6, logical block 0, async page read [ 382.562926][ T8380] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.577572][T15406] netlink: 'syz.2.2550': attribute type 5 has an invalid length. [ 382.606806][ T8380] Buffer I/O error on dev nbd6, logical block 1, async page read [ 382.614717][ T8380] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.686985][ T8380] Buffer I/O error on dev nbd6, logical block 2, async page read [ 382.793924][ T30] audit: type=1804 audit(1773710989.780:7): pid=15418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2550" name="/newroot/500/cgroup.controllers" dev="tmpfs" ino=2563 res=1 errno=0 [ 382.826857][ T8380] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.836406][ T8380] Buffer I/O error on dev nbd6, logical block 3, async page read [ 382.872567][T15411] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 382.901531][ T8380] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 382.954240][ T30] audit: type=1800 audit(1773710989.780:8): pid=15418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2550" name="cgroup.controllers" dev="tmpfs" ino=2563 res=0 errno=0 [ 382.986893][ T8380] Buffer I/O error on dev nbd6, logical block 0, async page read [ 383.007894][ T8380] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 383.026462][ T8380] Buffer I/O error on dev nbd6, logical block 1, async page read [ 383.077680][ T8380] ldm_validate_partition_table(): Disk read failed. [ 383.084878][ T8380] Dev nbd6: unable to read RDB block 0 [ 383.117784][ T8380] nbd6: unable to read partition table [ 383.132059][T15405] lo speed is unknown, defaulting to 1000 [ 383.147739][T15244] gre0 speed is unknown, defaulting to 1000 [ 383.159599][ T8380] ldm_validate_partition_table(): Disk read failed. [ 383.188290][ T8380] Dev nbd6: unable to read RDB block 0 [ 383.194684][ T8380] nbd6: unable to read partition table [ 383.434225][T15426] __nla_validate_parse: 5 callbacks suppressed [ 383.434249][T15426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 383.462361][T15426] netlink: 'syz.2.2557': attribute type 1 has an invalid length. [ 383.470526][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 383.554949][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'. [ 383.564465][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'. [ 383.841544][T15244] gre0 speed is unknown, defaulting to 1000 [ 383.882615][T15405] lo speed is unknown, defaulting to 1000 [ 384.117488][T15451] C: renamed from team_slave_0 [ 384.125469][T15451] netlink: 'syz.0.2564': attribute type 4 has an invalid length. [ 384.146780][T15451] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 384.164568][T15451] netlink: 'syz.0.2564': attribute type 2 has an invalid length. [ 384.174133][T15451] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2564'. [ 384.184298][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 384.193917][T15451] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.806033][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 384.834646][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 385.204312][T15488] lo: Caught tx_queue_len zero misconfig [ 385.284429][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2577'. [ 385.381177][T15482] lo speed is unknown, defaulting to 1000 [ 385.591400][T15499] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2580'. [ 385.988116][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.521521][T15516] bond5: option broadcast_neighbor: invalid value (30) [ 386.570294][T15516] bond5 (unregistering): Released all slaves [ 386.654494][T15482] lo speed is unknown, defaulting to 1000 [ 386.684101][T15482] gre0 speed is unknown, defaulting to 1000 [ 386.711147][T15506] lo speed is unknown, defaulting to 1000 [ 387.170712][T15545] bridge4: entered promiscuous mode [ 387.188517][T15545] bridge4: left promiscuous mode [ 387.443835][T15556] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.488676][T15562] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 387.579131][T15562] bond8: entered promiscuous mode [ 387.584630][T15562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.666318][T15565] macvtap1: entered allmulticast mode [ 387.694182][T15562] netlink: 'syz.4.2599': attribute type 8 has an invalid length. [ 387.739074][T15567] bond8: (slave bridge5): making interface the new active one [ 387.747550][T15567] bridge5: entered promiscuous mode [ 387.756206][T15567] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 387.768887][T15506] lo speed is unknown, defaulting to 1000 [ 387.776421][T15506] gre0 speed is unknown, defaulting to 1000 [ 387.879937][T15556] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.985704][T15588] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 388.004051][T15589] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 388.148872][T15556] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.311648][T15592] bond9: entered promiscuous mode [ 388.317881][T15592] 8021q: adding VLAN 0 to HW filter on device bond9 [ 388.381076][T15598] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.389770][T15598] bond10: entered promiscuous mode [ 388.399068][T15598] bond9: (slave bond10): Enslaving as an active interface with an up link [ 388.492874][T15584] lo speed is unknown, defaulting to 1000 [ 388.511891][T15556] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.770858][T12436] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.943879][T12430] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.981498][ T146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.054723][T12436] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.164440][T15578] lo speed is unknown, defaulting to 1000 [ 389.246489][T15622] __nla_validate_parse: 7 callbacks suppressed [ 389.246515][T15622] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2613'. [ 389.447492][T15623] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2613'. [ 389.458090][T15626] netlink: 'syz.2.2614': attribute type 1 has an invalid length. [ 389.465889][T15626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.636115][T15578] lo speed is unknown, defaulting to 1000 [ 389.679863][T15584] lo speed is unknown, defaulting to 1000 [ 389.687335][T15578] gre0 speed is unknown, defaulting to 1000 [ 389.821486][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2617'. [ 389.996186][T15639] netlink: 'syz.4.2619': attribute type 2 has an invalid length. [ 390.049308][T15639] netlink: 'syz.4.2619': attribute type 9 has an invalid length. [ 390.068464][T15639] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2619'. [ 390.135509][T15645] tunl0: Caught tx_queue_len zero misconfig [ 390.608384][T15584] gre0 speed is unknown, defaulting to 1000 [ 390.947901][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2624'. [ 391.027396][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 391.035516][ C1] lec:lec_tx_timeout: lec0 [ 391.040181][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.381909][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 391.441808][T15670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2628'. [ 391.495111][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2628'. [ 391.731729][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 391.764341][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 392.023964][T15685] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 392.031034][T15692] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 392.239380][T15697] bond0: (slave dummy0): Releasing backup interface [ 392.249838][T15697] dummy0: left promiscuous mode [ 392.274814][T15697] dummy0: left allmulticast mode [ 392.652432][T15708] netlink: 'syz.4.2643': attribute type 6 has an invalid length. [ 392.672656][T15708] tipc: Enabling of bearer rejected, already enabled [ 392.909730][T15721] x_tables: duplicate underflow at hook 2 [ 392.983622][T15723] IPv6: Can't replace route, no match found [ 393.351049][T15744] netlink: 'syz.1.2654': attribute type 8 has an invalid length. [ 393.490253][T15753] netlink: 'syz.2.2658': attribute type 23 has an invalid length. [ 393.865060][T15780] xt_l2tp: v2 doesn't support IP mode [ 393.897807][T15780] netlink: 'syz.1.2662': attribute type 2 has an invalid length. [ 394.157000][T15780] tipc: Enabling of bearer rejected, failed to enable media [ 394.330088][T15795] lo speed is unknown, defaulting to 1000 [ 394.452535][T15816] __nla_validate_parse: 7 callbacks suppressed [ 394.452558][T15816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2674'. [ 394.639678][T15825] [ 394.642072][T15825] ====================================================== [ 394.649122][T15825] WARNING: possible circular locking dependency detected [ 394.656195][T15825] syzkaller #0 Not tainted [ 394.660648][T15825] ------------------------------------------------------ [ 394.667697][T15825] syz.4.2675/15825 is trying to acquire lock: [ 394.673895][T15825] ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 394.683469][T15825] [ 394.683469][T15825] but task is already holding lock: [ 394.690868][T15825] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 394.700523][T15825] [ 394.700523][T15825] which lock already depends on the new lock. [ 394.700523][T15825] [ 394.711044][T15825] [ 394.711044][T15825] the existing dependency chain (in reverse order) is: [ 394.720101][T15825] [ 394.720101][T15825] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 394.728147][T15825] _raw_spin_lock_bh+0x36/0x50 [ 394.733595][T15825] nr_rt_ioctl+0x40c/0xf90 [ 394.738597][T15825] sock_do_ioctl+0x101/0x320 [ 394.743768][T15825] sock_ioctl+0x5c6/0x7f0 [ 394.748673][T15825] __se_sys_ioctl+0xfc/0x170 [ 394.753839][T15825] do_syscall_64+0x14d/0xf80 [ 394.759018][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.765661][T15825] [ 394.765661][T15825] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 394.773764][T15825] _raw_spin_lock_bh+0x36/0x50 [ 394.779121][T15825] nr_rt_ioctl+0x215/0xf90 [ 394.784140][T15825] sock_do_ioctl+0x101/0x320 [ 394.789295][T15825] sock_ioctl+0x5c6/0x7f0 [ 394.794190][T15825] __se_sys_ioctl+0xfc/0x170 [ 394.799343][T15825] do_syscall_64+0x14d/0xf80 [ 394.804505][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.810973][T15825] [ 394.810973][T15825] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 394.818849][T15825] __lock_acquire+0x15a5/0x2cf0 [ 394.824625][T15825] lock_acquire+0xf0/0x2e0 [ 394.829624][T15825] _raw_spin_lock_bh+0x36/0x50 [ 394.835058][T15825] nr_rt_device_down+0xbe/0x860 [ 394.840573][T15825] nr_device_event+0x137/0x150 [ 394.845916][T15825] notifier_call_chain+0x1be/0x400 [ 394.851807][T15825] __dev_notify_flags+0x16d/0x310 [ 394.857431][T15825] netif_change_flags+0xe8/0x1a0 [ 394.862949][T15825] dev_change_flags+0x130/0x260 [ 394.868478][T15825] dev_ioctl+0x7b4/0x1150 [ 394.873482][T15825] sock_do_ioctl+0x23e/0x320 [ 394.878658][T15825] sock_ioctl+0x5c6/0x7f0 [ 394.883576][T15825] __se_sys_ioctl+0xfc/0x170 [ 394.888744][T15825] do_syscall_64+0x14d/0xf80 [ 394.894356][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.900911][T15825] [ 394.900911][T15825] other info that might help us debug this: [ 394.900911][T15825] [ 394.911176][T15825] Chain exists of: [ 394.911176][T15825] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 394.911176][T15825] [ 394.925258][T15825] Possible unsafe locking scenario: [ 394.925258][T15825] [ 394.932753][T15825] CPU0 CPU1 [ 394.938173][T15825] ---- ---- [ 394.943585][T15825] lock(nr_neigh_list_lock); [ 394.948318][T15825] lock(&nr_node->node_lock); [ 394.955664][T15825] lock(nr_neigh_list_lock); [ 394.962998][T15825] lock(nr_node_list_lock); [ 394.967643][T15825] [ 394.967643][T15825] *** DEADLOCK *** [ 394.967643][T15825] [ 394.975917][T15825] 2 locks held by syz.4.2675/15825: [ 394.981157][T15825] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 394.990057][T15825] #1: ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 395.000253][T15825] [ 395.000253][T15825] stack backtrace: [ 395.006199][T15825] CPU: 0 UID: 0 PID: 15825 Comm: syz.4.2675 Not tainted syzkaller #0 PREEMPT(full) [ 395.006231][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.006252][T15825] Call Trace: [ 395.006261][T15825] [ 395.006271][T15825] dump_stack_lvl+0xe8/0x150 [ 395.006308][T15825] print_circular_bug+0x2e1/0x300 [ 395.006348][T15825] check_noncircular+0x12e/0x150 [ 395.006385][T15825] __lock_acquire+0x15a5/0x2cf0 [ 395.006419][T15825] ? __lock_acquire+0x6b5/0x2cf0 [ 395.006452][T15825] lock_acquire+0xf0/0x2e0 [ 395.006479][T15825] ? nr_rt_device_down+0xbe/0x860 [ 395.006513][T15825] ? nr_rt_device_down+0xbe/0x860 [ 395.006542][T15825] _raw_spin_lock_bh+0x36/0x50 [ 395.006571][T15825] ? nr_rt_device_down+0xbe/0x860 [ 395.006600][T15825] nr_rt_device_down+0xbe/0x860 [ 395.006629][T15825] ? nr_device_event+0x12f/0x150 [ 395.006661][T15825] nr_device_event+0x137/0x150 [ 395.006687][T15825] notifier_call_chain+0x1be/0x400 [ 395.006726][T15825] __dev_notify_flags+0x16d/0x310 [ 395.006763][T15825] ? __pfx___dev_notify_flags+0x10/0x10 [ 395.006794][T15825] ? __dev_change_flags+0x4c6/0x690 [ 395.006829][T15825] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.006852][T15825] ? __pfx___dev_change_flags+0x10/0x10 [ 395.006887][T15825] ? full_name_hash+0x92/0xe0 [ 395.006929][T15825] netif_change_flags+0xe8/0x1a0 [ 395.006966][T15825] dev_change_flags+0x130/0x260 [ 395.007002][T15825] dev_ioctl+0x7b4/0x1150 [ 395.007034][T15825] sock_do_ioctl+0x23e/0x320 [ 395.007061][T15825] ? __pfx_sock_do_ioctl+0x10/0x10 [ 395.007091][T15825] ? do_futex+0x333/0x420 [ 395.007125][T15825] sock_ioctl+0x5c6/0x7f0 [ 395.007150][T15825] ? __pfx_sock_ioctl+0x10/0x10 [ 395.007174][T15825] ? __fget_files+0x2a/0x420 [ 395.007205][T15825] ? __fget_files+0x3a0/0x420 [ 395.007236][T15825] ? __fget_files+0x2a/0x420 [ 395.007268][T15825] ? bpf_lsm_file_ioctl+0x9/0x20 [ 395.007296][T15825] ? __pfx_sock_ioctl+0x10/0x10 [ 395.007320][T15825] __se_sys_ioctl+0xfc/0x170 [ 395.007346][T15825] do_syscall_64+0x14d/0xf80 [ 395.007377][T15825] ? trace_irq_disable+0x3b/0x150 [ 395.007409][T15825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.007431][T15825] ? clear_bhb_loop+0x40/0x90 [ 395.007456][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.007485][T15825] RIP: 0033:0x7f0543d9c799 [ 395.007507][T15825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.007527][T15825] RSP: 002b:00007f0544bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.007551][T15825] RAX: ffffffffffffffda RBX: 00007f0544016090 RCX: 00007f0543d9c799 [ 395.007568][T15825] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000b [ 395.007583][T15825] RBP: 00007f0543e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 395.007596][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.007609][T15825] R13: 00007f0544016128 R14: 00007f0544016090 R15: 00007fff26fe2388 [ 395.007635][T15825] [ 395.345254][T15795] lo speed is unknown, defaulting to 1000 [ 395.356295][T15795] gre0 speed is unknown, defaulting to 1000 [ 396.067651][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 396.075870][ C1] lec:lec_tx_timeout: lec0 [ 401.106958][ C1] lec:lec_start_xmit: lec0:No lecd attached