last executing test programs: 3.357717469s ago: executing program 4 (id=4482): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {0x0, 0x86dd, 0x40, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x8106, @val=0xc3f339eccd85e028}, "134a319536450000000000000000000079b95080f6d65e3c6015a6749554c625327558c300"/48}}}}}}}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newnexthop={0x28, 0x68, 0x1, 0x100007, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d9}, 0x40000c4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.744107635s ago: executing program 4 (id=4488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 2.592071634s ago: executing program 0 (id=4491): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xd, @loopback={0xfe80000000000000, 0xac14140c}, 0x8, 0xc}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)='\x00', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x60) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10381, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) socket$can_j1939(0x1d, 0x2, 0x7) 2.466132957s ago: executing program 4 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3118c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c0006000300000000000000"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406810100000002000000b8c70000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x600080c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$kcm(0x2, 0xa, 0x2) 2.458925166s ago: executing program 1 (id=4495): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvfrom$unix(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$int_out(r2, 0x5460, &(0x7f0000000180)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000001c0), 0x4) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80003008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d7}]}, 0x24}}, 0x24000884) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48051}, 0x8000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x398, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x19c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x946}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c39}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1c5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x331}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6548}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbdf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb67}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4029}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff86}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7bb5ec1a, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc48}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xed9a}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000b00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b40)="d4d33f5fc0442af62cfd3037819460585bd8f1a50a73a78ee12f0e177b017d210b4c55100794e13f7fe0755c75668681340cd0c5b2d03fbaac7d8fec3031b972aa8322ba9ae86c100560d0fc0e5dfeca80ace2409f5910ee7a71c9223dcbfd2555654dd535807d1b8ef253467f25bd0b77766100af1e640d21de6319862675ef41855b8f33319af72fba1ed1abbc72b434bb1d", 0x93}], 0x1, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xba, 0x0, 0x9, [0x7, 0x200, 0x8, 0x6]}, @ssrr={0x89, 0xf, 0x86, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0xe, [{@empty, 0x2}, {@multicast1, 0x8}, {@multicast1, 0x91f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp={0x44, 0x14, 0x83, 0x0, 0x0, [0x1d997d9, 0x2, 0x0, 0x1]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x55, [@empty, @local, @multicast2, @multicast2, @broadcast, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xd, 0x3, 0x9, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x9f1a}, {@loopback, 0x1}, {@empty, 0x6}]}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0x0, [0x8, 0x6]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xf, [{@rand_addr=0x64010102, 0x397}, {@loopback, 0x2}]}]}}}], 0x168}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)="6bb8d9cc39bf003668881a7d6f309ff0d29659db7a7a66a8eabd42fb4d889ff046550bb4f67001d201da8bc317e65c4e4797931cc58c3f749bab95d4ec4e6e714b9f865afa48d2611a85b3d54d1a15c5a3be36d63a010926ce4cff5547175e3b4952ce0ba7aa6c43471da9f9c64b83cfef5a62c11dcf8d8ca6e937bacdddd4ef5c8528968d86825ebb4a9041fefba3cda9049a9cfbcc8eae1b4c8f417507af8ec7c21aec136927790403ac", 0xab}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="3cef4aefce539e499597e9e1982f7e984827613d515285cd2c84974d24defde4e016e49f4ebcc8b5bbbfc5ba916168e7b6c58bf875167005944a11661b05ec19a9cd1aeb934ce5efa448976d925428c70bb7e7f2385fea34ff1f924872dc35848596f5becfeee73fdf49343653429833805751bfce6baa4e7bae2ca69cb80343b78575975870b19a02415925e5aa5a5ede0ffc1684e999f2a07701af54c83619a6", 0xa1}, {&(0x7f0000002000)="eef17d787d1ca61c0515238f73f3c24599e400c6439e9cf4594e0fc20191557c69a5022a318112d2620bef9d50ebf07b5b04780d25d7ef205f70f3eb0a852f2c562970762afe3e08de218613d11b128904e8cb2c8370ae8425b1730d30a66944bd0b8788c0cb72023b00c98e3a6007bd3c4cd8a42e145b9222b7c9eef905cbda3df68b149e19797e3c199deb233beb70e638457ffb28a41b1e6322a94a40a64778691071f4e1ab909f46db9c7a43f820c31c2d06d5b252b96047c51d4a7f7acf9d65cbe3ed0a35924f6e4503d5", 0xcd}, {&(0x7f0000002100)}, {&(0x7f0000002140)="319f287dad69c2a8f01b48881a25646ae4c31664902c7bd5c19d4fcfdc56445d1a5b2ef71d14de55df4701eb6f6b3bc05f068d0e556d6578400c8867d49aae6cf1e5077294b966b7dcaa1fc047f188c3c5c6", 0x52}, {&(0x7f00000021c0)="906a892200aa1b91c3edac930c119bb6278a95a0e104d996a0e41db4a2090df896b78c9173c6107b13a7ec6690740d9cb8dd414df9da73be37da8922dc99afc3c5e1e55d3359e9afe074983424f5cef639ce5e929eebaa0e62d9c87fc31501f86e4b24cb832eb716a26cddf0a9af00e841e5ccb2e29abf56df79c47915b994d824d9", 0x82}, {&(0x7f0000002280)="a03af27aabc2305915a1ceba03e8178bc532c6736266c29ebf94eae9dfe00d44abbccb222232f86884575a714c52261ab904ab0974620ef065e30f0fd2aa5eb6a640fe319669ff2ed47c809518947f8fb73b63283b330263f29c89713da661972ff324ce566fbf7f99d68132a3e9fdd6014737c382ed4b3a1a3dc6d752993734fcde8eb29bd73e74f246853b94ae40a8764173027588aed56637806082e974afdd1b5e7f39d7be2ba3b962c1ccd1338c1c94ff6c91206a82369012b2db6db441bc200ca337a0ccc1798d0812d4a4e7ef88d65354e29ec9b536c83101296caf7e8f660513dae6ed56b235606962", 0xed}], 0x8}}, {{&(0x7f0000002400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000002440)="a648e9c43eb98998e6ed2356e5f7fd013482fccc17ddcf8392227793836e134b0695d6f951b6a2b2cdda130f85f9c2ae37d012e20393740e3776610529eae44ef45d3695800272317cf59e5ceeb96742075de1d9651bc671b50fc287d8fe80554209b4b5acfcd1375af0e011fe918999395dc9b52b25ef78a6be62334ff3e415b48d74b8c8a6897f43b57fbd1603f21d809a55d883730011564b90785397b76090e3ddcc834b5fb56130", 0xaa}, {&(0x7f0000002500)="879a4099dd4b3af926c7390cdebbf4f12fadd8820671f5cb4a7969b817d30104119567fd666cabfb1e739bf7a4910a1999400176aada51ecf0bc97c94db3582507ea318e88f764abcb18f6f4", 0x4c}], 0x2, &(0x7f00000025c0)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb7, [@rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x20, [@loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x49, 0x3, [{0x7, 0x6, "a2e548db"}, {0x0, 0x9, "c67e5108ca2628"}, {0x1, 0x12, "457840c11a10205c0964a8c80917ca6d"}, {0x4, 0xb, "4b61e618e0c849a095"}, {0x6, 0x5, "21b4bc"}, {0x7, 0x5, "419ec0"}, {0x1, 0xb, "a4f257c7d77833ddf9"}, {0x0, 0x2}]}, @ssrr={0x89, 0x1f, 0xfd, [@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0xf, 0x1b, [@local, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x35, 0x0, 0x8, [0x1, 0x4]}, @cipso={0x86, 0x13, 0x3, [{0x1, 0xd, "ffd696fca90d0e364c2a00"}]}]}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x11, [@rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010102, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0x93, [@dev={0xac, 0x14, 0x14, 0x1a}, @local, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x14, 0x72, 0x1, 0x6, [{@local, 0xd}, {@private=0xa010100, 0x7ff}]}, @timestamp_addr={0x44, 0x3c, 0xa2, 0x1, 0x5, [{@broadcast, 0x8}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8000}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x6e13}, {@remote, 0x7}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0xba, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x3}, {@loopback, 0xfffff9c0}, {@empty, 0xffff16fb}, {@remote, 0x64b}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}, @timestamp={0x44, 0x8, 0x12, 0x0, 0xe, [0x7ff]}]}}}], 0x198}}], 0x4, 0x600080c0) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000002880)=0x2, &(0x7f00000028c0)=0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003c40)={&(0x7f0000002a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c0, 0x1c0, 0x4, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @struct={0x10, 0x9, 0x0, 0x4, 0x1, 0xffffffff, [{0x10, 0x0, 0x7}, {0xf, 0x2, 0x101}, {0x4, 0x4, 0x3}, {0x6, 0x4, 0x6}, {0x1, 0x0, 0x4}, {0xc, 0x3, 0xf}, {0x10, 0x4, 0x6}, {0x3, 0x3, 0x3}, {0x9, 0x1, 0x6}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x1}, @enum64={0x2, 0x6, 0x0, 0x13, 0x0, 0xd, [{0x5, 0xf, 0xfffffffa}, {0xd, 0x1, 0x7}, {0x10, 0x2, 0x8}, {0x5, 0x9, 0xe07}, {0x4, 0x1ff, 0x6}, {0x4, 0x72, 0xc}]}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x40, [{0xa, 0x3, 0x4}, {0x10, 0x4, 0x10000}, {0x5, 0x1, 0x3}, {0xa, 0x2, 0xf}]}, @union={0xa, 0x5, 0x0, 0x5, 0x1, 0x0, [{0xe, 0x0, 0x1}, {0x6, 0x4, 0x9}, {0xc, 0x5, 0x2}, {0xf, 0x5, 0x1}, {0xe, 0x5, 0xffffffff}]}, @union={0x5, 0x5, 0x0, 0x5, 0x1, 0xa, [{0xa, 0x1, 0x3}, {0x7, 0x2, 0x5}, {0x10, 0x0, 0x8}, {0x3, 0x5, 0x6}, {0x10, 0x0, 0x10001}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000002c40)=""/4096, 0x1dc, 0x1000, 0x1, 0x9, 0x10000}, 0x28) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r7, r5, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e80)={0x11, 0x1d, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xcf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0xd, 0x0, 0x8, 0xfffffffffffffff8, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002a00)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x0, r9, 0x8, &(0x7f0000003c80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003cc0)={0x2, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000003d80)=[r10, 0x1], &(0x7f0000003dc0)=[{0x2, 0x5, 0xb, 0xb}, {0x4, 0x5, 0x6, 0xb}, {0x3, 0x4, 0xd, 0x5}, {0x5, 0x5, 0xe, 0xc}, {0x3, 0x1, 0xb, 0x2}, {0x5, 0x4, 0x10, 0x2}, {0x0, 0x1, 0x4, 0x9}, {0x0, 0x4, 0xc, 0x9}, {0x1, 0x2, 0x7, 0x3}, {0x1, 0x2, 0x10, 0x4}], 0x10, 0xa9}, 0x94) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000003f40)="39cbd1b36703a50c84e43e7ca4dd78c6f00b19b27893f1717606e7e39a62fac5e3fe02957bfaef2bd2c0151fd8b42a6800d96d52b7583ea46205234113846e11e13247f3f0cfbad1770e8446c4190dc1ee085498d80faacc269facd30fdb665ef0b1582050d9bc5cb4e13a0ff6ab37610daea082396889ddd72a5a6201a4d2fa5546c1d056cd82ba1042ab381565f1248e59d30856269dc91e2d7603b74d0a77f309f5585fc56c8e6395d0a7e9fdf929c07b06b5425cc1c2c5bcef64bbd98f3e667a256ff68ee5c74e30efa1f3f86e86fa981c61b3ff02", 0xd7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004040)={r3}) (async) pipe(&(0x7f0000004080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r12, 0x894c, &(0x7f00000040c0)=0x396) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000004100)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0xff, @private0, 0x100}, @in={0x2, 0x4e24, @multicast2}], 0x5c) r13 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$CAIFSO_LINK_SELECT(r13, 0x116, 0x7f, &(0x7f0000004180)=0x400, 0x4) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000004680)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004640)={&(0x7f0000004480)={0x1c0, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4e69be6d440624e9}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 2.265319733s ago: executing program 4 (id=4498): getsockname$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000100)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000010688f874fda029e64a293e9af0c00000000000010b0313ae0ea8cbdebd97b364d99e6f034e7027208920c2e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket(0x22, 0x800, 0x6) unshare(0x2040400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x709) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000005b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00f9546d4ad0eb89595741a84e18502853000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockname$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000100)=0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000010688f874fda029e64a293e9af0c00000000000010b0313ae0ea8cbdebd97b364d99e6f034e7027208920c2e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) socket(0x22, 0x800, 0x6) (async) unshare(0x2040400) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r2, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x709) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000005b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00f9546d4ad0eb89595741a84e18502853000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) 2.126263215s ago: executing program 0 (id=4499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x24}}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) (async) recvfrom(r3, &(0x7f0000000180)=""/226, 0xe2, 0x0, 0x0, 0x0) shutdown(r3, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6ab964ac42"], 0xfdef) unshare(0x2c020400) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000002c0)=0xd, 0x4) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x1c, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r5}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200001761000000000000ffffffff85000000280000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000007b00000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x4, 0x0, &(0x7f00000000c0)="0000f871", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x8c4b815a546142b8, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x540, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, &(0x7f0000000380), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@loopback, 0x34, 0x13, 0x800}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0xc2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, [0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'veth1_virt_wifi\x00', 'pim6reg\x00', {}, {0xff}, 0x0, 0x1, 0x4, 0x1d}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x1], 0x8, 0x0, 0x2}}, @common=@rt={{0x138}, {0x7, [0x9], 0xe46, 0x30, 0x0, [@loopback, @empty, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast1], 0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x2c, 0xb, 0x5, 0xb}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x4}, {0x0, 0x6, 0x2}, {0x2, 0x5}, 0xffff, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="fcebff001900010025bd7000010006d500d5746f15d7f82dceed12fe880061ab60d2442327b1ceff020000000000100000000001016401010100ec30000000000200"/75, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000006000000000000000900000000000000000000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000000800000000000002000000000000000002000000000000010001000000000044010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000fe34000000000000000000000000000040200000ac1414bb000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000004d56c00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000330000000200000000000000000000000000ffffac1414aa0000000001000000000000000000000000000000ff010000000000000000000000000001000004d21700000002000000e00000020000000000000000000000000000000001020100"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 1.954190496s ago: executing program 4 (id=4500): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="7d52432a2df04ccc54edc082195b84594a9a0de5fbdef955ec84289566a5ee4d302940b2a875853b80acca7043f87c2790692bced80f3e9fc9856e5f02358c1879d2da0e98217d9cfb5cc0591ec55525a7aa8af9da2881662d3bbad36846d4260472a23b5760726dd1a54a899fcd985616b153c20f3c3bf853e920a620c773718be1da84622ec2c83b504bae1cc6786abbcd3f9503b730d26c176698802ed85df0a90fad4403ecf4682b83c491808f409857d84a2674", 0xb6}, {&(0x7f0000000480)="8ba8986f5073535c01ccbac0f297e31ce60a85d6ba3839", 0x17}, {&(0x7f0000000500)="132fe24479d0b330a241ee854a2c469ebb862c9fd9215ef0990a53810beb1a583787ce1c4bc4c0fe8cc43dc6ab29f27b8be12b263d3e851b39903d2e582ad97299262521c232e24bfca012695e8fab1bf485a5b2f4a25ecc1f83", 0x5a}], 0x3}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002ac0)="9514c92ae58f97b0fb4e98af7b3ac662794deb2fde895e2f21845a3424a05d2de53e2606ad88f582226b4e296501f78a907b4875f6fda8cb306a93afec226e", 0x3f}, {&(0x7f0000000080)="6df1ee6abeff8d02648b8f51dae4566d6fb934105597f2befbb8ddd3301550", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004040)="d07a6022c283cc31771597d10c59c328edd49e3021e55ee8c9961d1bf80739", 0x1f}, {&(0x7f0000004080)="f127d6d43d7d080c8eab4b1d303d7f6ff27b0baad3cbdfbdd747ad0612353d9e2fec51e60d0fef1d713d6a6775", 0x2d}, {&(0x7f0000004200)="3e17319ebba2310f89c4836d319570f14a8a67e4741e724ddb25244810faabce097116b5aa8f3aea8b353efa10", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004380)="0158bf8582b631dc550e90cbde7d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efac83f4797dcc4f08622", 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005b00)="07658507c9352dd52561fce1d0c05f4984a8e8d97c", 0x15}], 0x1}}], 0x5, 0x240080c5) (async, rerun: 64) recvmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102) (rerun: 64) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) (async, rerun: 64) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x84, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x10}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}]}, 0x60}}, 0x2) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 32) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (rerun: 32) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="0800150001000000050019e3d7000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r9) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) 1.953099219s ago: executing program 1 (id=4501): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0f0000f0ff004000000000000000000000000000c72af48cd943f9103f08aaeaaecc9a3ed4dd66364bc136dc45c575f941cceb11f4812bbd2672dc93085c7ba87616fb3b45447f92766f6bd55ab4e20f259e5758207c8bef68a36f79d4082f5fc466754c00c6d861a7b2b807b9b741d20fbda5d0c1e1e49f565ae2a64374433b2d67a8a8faa6826dae97391c2c57e496cd8bac13c46ebc9c2cff47ec0781946021924c96e4402ba410748d96", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000100"/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x400, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x20000000) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8fbffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = accept(r5, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000380)=0x80) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a875a9884f", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xbeb7}, @generic={0xf8, 0xb, 0x6, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x1, 0x3, 0x9, 0xa, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000600)=r10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x0) recvmsg(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 1.847335521s ago: executing program 2 (id=4503): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x903, 0x7, 0xa5dfdbfe, {0x7, 0x0, 0x0, r5, 0x40109, 0x318}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6, 0x32, r0}, 0x10) 1.626041381s ago: executing program 4 (id=4504): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000140)="80003ee9620ca1ce", 0x8, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x12) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) 1.608601058s ago: executing program 3 (id=4505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="280000001000210029bd7000000000000300000014000180", @ANYRES64], 0x28}}, 0x880) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000001c0), 0x37) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000580)=0x5, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 1.538553911s ago: executing program 0 (id=4506): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'veth0_to_bond\x00'}) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff85000000970000f35a77a1d9b0a2975a480095000000000000002d3eb8e9d7b5993b4eb8af470b341b1a0ecc4bb2a121270dfb406131aa4ea76db6a112050cdf7afdfd88995ea5d99bdbf3c21dd239cc7ad5454dd4df4ab2a0f75dfe09c54ea87b2774d9a2b313425c0b06096e3fee15e576ceb2b8f2ce00013f8d5723c0122e13497cc6c22ffce5ddb81374fe6af7ab"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) 1.45926217s ago: executing program 3 (id=4507): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x73, &(0x7f00000026c0)}, 0x10) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0xb, 0x8}, 0x2) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1.458239473s ago: executing program 1 (id=4508): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x3}, @const={0x9, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000080)=""/109, 0x34, 0x6d, 0x0, 0x80}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@struct={0xc, 0x4, 0x0, 0x4, 0x0, 0x6, [{0x5, 0x2, 0x9}, {0x0, 0x5, 0xf56}, {0x4, 0x4, 0x4}, {0x3, 0x4, 0x4a}]}]}, {0x0, [0x61]}}, &(0x7f0000000240)=""/46, 0x57, 0x2e, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0xd670, 0x6, 0x8, 0x8000, 0xffffffffffffffff, 0x4, '\x00', r0, r1, 0x2, 0x4, 0x5, 0x0, @value=r2}, 0x50) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r0, 0x2f, 0x10, 0x7, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x20, 0x9, 0xc0}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x26}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x1, 0xb, 0x5, 0xc, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xfffffffffffffffc, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xbd}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000003c0)='syzkaller\x00', 0x4f1, 0x7b, &(0x7f0000000400)=""/123, 0x41100, 0x9, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r3, r3, r3, r3, r3, r3], &(0x7f00000005c0)=[{0x3, 0x3, 0x9, 0xc}, {0x3, 0x5, 0x7, 0x3}, {0x4, 0x5, 0x5}, {0x4, 0x4, 0x7, 0xc}, {0x5, 0x2, 0x1, 0x9}, {0x4, 0x2, 0xf, 0x1}, {0x3, 0x2, 0xc, 0x6}, {0x5, 0x5, 0x9, 0x3}], 0x10, 0x7fff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xb, 0x800, 0x5) socket$inet6(0xa, 0x80000, 0x5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r8, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r9 = socket$alg(0x26, 0x5, 0x0) sendto(r9, &(0x7f0000000880)="4f0a56d5a2aa084f84f86368824e08dafc537bf873f90031abe4de07edc7cfa824964bc719c450297717da2267099e4cc6059eab23f6b1657c16bfa431156fd94adbd1ce0c1585c2ba494099266f75a973fb6a7e8ba7bcf43b8c80b3bc1747a0a57d5e76e9dec11611c272a3c0536e7e13", 0x71, 0x4000000, &(0x7f0000000900)=@in6={0xa, 0x4e24, 0x0, @local, 0x6}, 0x80) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x202, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000009c0)={'batadv0\x00', 0x20}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000a00)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000a40)='syzkaller\x00', 0x10001, 0xf, &(0x7f0000000a80)=""/15, 0x40f00, 0x2e, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000ac0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x3, 0xc, 0x8000}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000b40)=[{0x0, 0x4, 0xd, 0xc}, {0x0, 0x1, 0xd, 0x5}], 0x10, 0x9}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x1412, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r7) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '\x00,*^-/!@$\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x200000c1) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ec0), 0x800, 0x0) write$rfkill(r12, &(0x7f0000000f00)={0x18000000, 0x1, 0x1, 0x0, 0x1}, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000f40), r13) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x9c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x8001) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), r13) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r14, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff7fff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb20b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001240)) 1.273338162s ago: executing program 0 (id=4509): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c00054086"], 0xec}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10d000, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2={0x1f, 0x1ff, @any, 0xfffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="d3a214", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0xa, 0x2, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c00054086"], 0xec}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10d000, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2={0x1f, 0x1ff, @any, 0xfffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="d3a214", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) 1.019060278s ago: executing program 0 (id=4510): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/17, 0x11}, 0x1}], 0x1, 0x40002002, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40040}}], 0x1, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x44010) 969.922745ms ago: executing program 1 (id=4511): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x9, 0x1, 0xe, 0xfffffffffffffffe, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0xb7, &(0x7f0000000280)=""/183, 0x40f00, 0x0, '\x00', r7, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000440)=[{0x5, 0x2, 0x0, 0xc}, {0x4, 0x5, 0xc, 0x1}, {0x4, 0x3, 0xf, 0x2}, {0x2, 0x5, 0x2, 0x9}, {0x1, 0x1, 0x4, 0xb}, {0x4, 0x3, 0x1, 0x1}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x8001}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x4, 0x4, 0x3}}, {&(0x7f0000000040)=""/81, 0x51}, &(0x7f00000000c0), 0x40}, 0xa0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r0, 0x0) 969.227361ms ago: executing program 3 (id=4512): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x5, 0x0, 0x80000000}, {0x80000006, 0x0, 0x6, 0x2}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000040)='GPL\x00', 0x3, 0x3, &(0x7f0000003300)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x4e}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, 0x0, 0x0, 0xc6394fb60de09f8a}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x7, 0x1}, 0x20) 917.693204ms ago: executing program 2 (id=4513): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) 811.515807ms ago: executing program 0 (id=4514): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x100440d0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) ioctl$FITHAW(r3, 0xc0045878) 742.578535ms ago: executing program 1 (id=4515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x40909769aa997b5a}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x40909769aa997b5a}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) 693.540911ms ago: executing program 2 (id=4516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0xff, 0x10, 0x2, 0x10000}, &(0x7f00000000c0)=0x18) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x5b46, 0x4e24, 0x1, 0xa, 0x80, 0x180, 0x87, r3, r4}, {0x0, 0x7, 0x1, 0xe294, 0x81, 0x4a, 0x10000, 0x5}, {0x79, 0x7, 0xe, 0x8001}, 0xa9, 0x6e6bb7, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x2, @in=@private=0xa010100, 0x3506, 0x0, 0x1, 0x8, 0x7ff, 0x8, 0x6}}, 0xe8) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@expire={0x1a8, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e22, 0x6, 0xa, 0x20, 0x20, 0x3c, r3, r6}, {@in6=@local, 0x4d5, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x8, 0x2, 0x1e00000, 0x40, 0x6c, 0xfffffffffffffd96, 0xf, 0x8001}, {0x80000000, 0x100, 0x8, 0x1422}, {0xff, 0x7, 0x8000}, 0x70bd2c, 0x3507, 0xa, 0x4, 0xfa, 0x37}, 0xd}, [@sec_ctx={0x82, 0x8, {0x7e, 0x8, 0x1, 0x7, 0x76, "015c72e483ab21f0462f278e87dc4d4125e650d53ebb18f8d332b9ee9290695a46c0e050600a85b5316f2cc58c03e9c0f68b61b88bb009308cb73b17427140681d362a17510f412639a490c91946c24f1f6be2c17ef14d40e0c4e6dbaffb4184dfe9ed2af888eaa5c12ad10b5fbfd2fc1a0be677808d"}}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@multicast2, 0x0, 0x2}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000680)=0x401) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000780)={r1, 0x94, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x10}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @mcast1}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0xfffffffc}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000008c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000900)=0x3ff, 0x4) socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r9, 0x2, 0x8, &(0x7f0000000980)=""/4096, &(0x7f0000001980)=0x1000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r11, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4080) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000001c80)={{r0, &(0x7f0000001ac0)=' \x01\x00', 0x80101, &(0x7f0000001b00)={@align, {0x3, 0x400, 0x401, 0xb}}, 0xfffffc01, &(0x7f0000001b40), &(0x7f0000001b80)=0x100}, {[0x9, 0xfff, 0x2, 0x4]}, 0x2, 0x9d, &(0x7f0000001bc0)=""/157}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000001d00)={r2, 0x2}, 0x8) r13 = getuid() sendmsg$nl_xfrm(r12, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)=@delsa={0x214, 0x11, 0x200, 0x70bd2d, 0x25dfdbfe, {@in6=@local, 0x4d5, 0x2, 0x32}, [@user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@local, 0x0, 0xa}}, @tfcpad={0x8, 0x16, 0x2}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @algo_auth={0x91, 0x1, {{'crc32-pclmul\x00'}, 0x248, "f68d1f995142a6f6d274750f6ceb4e00845c335a072a0226e04fbb3d145243e3a298be980f110150dc32c2c6fd9a5144d1f564b9e6db4f25fc4d6c53883a922a9c1846ed1a98e694c2"}}, @user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@mcast1, 0x0, 0xa}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in=@remote, 0x4e21, 0xff, 0x4e20, 0x0, 0x2, 0x0, 0xa0, 0x32, 0x0, r13}, {@in=@remote, 0x4d6, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x6, 0x4, 0x8, 0x4, 0x4291, 0x10000, 0x2, 0x6}, {0x3, 0xfffffffffffffff9, 0x7, 0xc01}, {0x4e5b, 0x3, 0x6}, 0x70bd2b, 0x3500, 0x2, 0x4, 0x4, 0x10}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r14 = socket$pppl2tp(0x18, 0x1, 0x1) accept(r7, &(0x7f0000002040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000020c0)=0x80) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f0000002100)={0x0, r7, 0x77b, 0x9780, 0x9, 0x1ff}) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r15, 0x112, 0x7, &(0x7f0000002140), &(0x7f0000002180)=0x4) 629.238126ms ago: executing program 1 (id=4517): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) close(0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001214a5b02cbd7000dddbdf25080013"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x1}, 0x28) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/177, &(0x7f0000000200)=0xb1) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) 498.674785ms ago: executing program 3 (id=4518): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9d444d6b91985deb8425016c157beec73878a677523fc0cb4c6dadaacdf948a0e4014db0654213aa351e2f50f0c8b4c331e4f4cc7d6f1b0f67609f47585037d7bd8ac839f6ae7d36670022881e50cfd3f400518c2d86fb0cc0c7cf28390abbeef73cdd74b0f25eaf0487a3e1e5b8d6dd2dcab688b5c14e21e591eaa5a32bd449918c1701d5d895a4c5ef0000000000006eb22798ec18dff570", @ANYRES16=r2, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000200fbff000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) sendmsg$key(r0, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="020100020a0000002cbd7000ffdbdf2508001700000000000a004e2000000002fc000000000000000000000000000000040000000a005e200000a8d60000000000002f0d000000000000000008000000"], 0x50}, 0x1, 0x7}, 0x0) 497.722145ms ago: executing program 2 (id=4519): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'veth0_to_bond\x00'}) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff85000000970000f35a77a1d9b0a2975a480095000000000000002d3eb8e9d7b5993b4eb8af470b341b1a0ecc4bb2a121270dfb406131aa4ea76db6a112050cdf7afdfd88995ea5d99bdbf3c21dd239cc7ad5454dd4df4ab2a0f75dfe09c54ea87b2774d9a2b313425c0b06096e3fee15e576ceb2b8f2ce00013f8d5723c0122e13497cc6c22ffce5ddb81374fe6af7ab"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) 358.508906ms ago: executing program 3 (id=4520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x1, 0x8, "0efb8b", 0x8, 0x1}) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d00"], 0x1c}}, 0x800) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78}}, 0x8004) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) 321.887912ms ago: executing program 2 (id=4521): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x18, 0x40, 0x107, 0xfffffefe, 0x0, {0x81, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xe, 0x15, 0x0, 0x0, @str='wireguard\x00'}]}, @nested={0x4, 0x2}]}, 0x38}}, 0xc000) 9.584556ms ago: executing program 3 (id=4522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000120001002cbd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="0900000048b20000140003006e657464657673070030000000000000", @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020643a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x2c020400) pselect6(0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000080)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x1, 0x8}, 0x0, 0x0, 0x0) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYBLOB="e0d80e0d36eabf3ab1eb5a30e563c92d21032c58b513f9aa84d9703d99bd3bbcc1a01f9125fedf18d54962af70fad966f78cd36db9f350a35f1896630cf78ad57b8e739d20cf3d3979f5b41b890c19ab7c11863a64f7090183b47d61e7f558d7eb8117d8b176c6482e2cc63428a917", @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) unshare(0x22020400) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d00)=""/119, 0x77}, {0x0}], 0x2}, 0x3}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="020000"], 0x48}}, 0x0) 0s ago: executing program 2 (id=4523): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r4, &(0x7f0000000240)=0x2, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) kernel console output (not intermixed with test programs): eout [ 491.480672][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 491.579254][T20747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 491.601772][T20747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 491.620171][T20747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 491.641815][T20747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 491.844130][T21003] xt_hashlimit: size too large, truncated to 1048576 [ 491.883048][T20747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.946837][T20747] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.000786][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.008113][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.060809][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.068077][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.101398][T20983] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 492.638436][T20747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.734758][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 493.290076][T21038] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 493.374577][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 493.390107][ C0] lec:lec_tx_timeout: lec0 [ 493.396600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 493.535159][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 493.539697][ T5831] Bluetooth: hci1: command tx timeout [ 493.757749][T21066] lo speed is unknown, defaulting to 1000 [ 493.823500][T21066] lo speed is unknown, defaulting to 1000 [ 493.828496][T20747] veth0_vlan: entered promiscuous mode [ 493.871940][T20747] veth1_vlan: entered promiscuous mode [ 493.968202][T20747] veth0_macvtap: entered promiscuous mode [ 494.008713][T20747] veth1_macvtap: entered promiscuous mode [ 494.099378][T20747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.268985][T20747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.299278][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.318473][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.341636][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.373222][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.670098][T13509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.707554][T13509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.549041][T21148] __nla_validate_parse: 6 callbacks suppressed [ 495.549061][T21148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3103'. [ 497.078023][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.101354][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.119657][T21139] syzkaller1: entered promiscuous mode [ 497.125944][T21139] syzkaller1: entered allmulticast mode [ 497.221969][T21155] openvswitch: netlink: Key type 96 is out of range max 32 [ 497.349735][T21159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 497.600885][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3105'. [ 497.610616][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 498.652717][T21199] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 498.702787][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 498.819946][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.832075][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.845179][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.856791][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.873124][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.996384][T21204] lo speed is unknown, defaulting to 1000 [ 499.024442][T21204] lo speed is unknown, defaulting to 1000 [ 499.134574][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 499.142821][ C0] lec:lec_tx_timeout: lec0 [ 499.148754][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.155034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 499.506917][T21213] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 499.625271][T21219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3114'. [ 499.644487][T21213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.639970][T21204] chnl_net:caif_netlink_parms(): no params data found [ 500.860095][T21259] lo speed is unknown, defaulting to 1000 [ 500.955947][T21259] lo speed is unknown, defaulting to 1000 [ 500.975415][ T5831] Bluetooth: hci3: command tx timeout [ 501.027727][T21204] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.038213][T21204] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.045770][T21204] bridge_slave_0: entered allmulticast mode [ 501.054022][T21204] bridge_slave_0: entered promiscuous mode [ 501.066371][T21204] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.073729][T21204] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.081383][T21204] bridge_slave_1: entered allmulticast mode [ 501.090283][T21204] bridge_slave_1: entered promiscuous mode [ 501.236711][T21204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.275221][T21274] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3123'. [ 501.331929][T21204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.470432][T21204] team0: Port device team_slave_0 added [ 501.496656][T21204] team0: Port device team_slave_1 added [ 501.596906][T21204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.615823][T21204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.654265][T21204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.694003][T21204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.719426][T21204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.827189][T21204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.051827][T21204] hsr_slave_0: entered promiscuous mode [ 502.071542][T21204] hsr_slave_1: entered promiscuous mode [ 502.101018][T21204] debugfs: 'hsr0' already exists in 'hsr' [ 502.107949][T21204] Cannot create hsr debugfs directory [ 502.683840][T21204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.986160][T21204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.066057][ T5831] Bluetooth: hci3: command tx timeout [ 503.166071][T21322] bond2: option ad_select: invalid value (34) [ 503.177258][T21322] bond2 (unregistering): Released all slaves [ 503.218126][T21204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.327692][T21204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.411758][T21327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3133'. [ 503.898563][T21204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 504.010169][T21204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 504.056083][T21204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 504.116903][T21204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 504.165291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 504.173588][ C0] lec:lec_tx_timeout: lec0 [ 504.178492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 504.198409][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'. [ 504.330588][T21344] ip6gretap1: entered promiscuous mode [ 504.355147][T21344] ip6gretap1: entered allmulticast mode [ 504.763012][T21204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.827308][T21371] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 504.872281][T21374] sctp: [Deprecated]: syz.2.3141 (pid 21374) Use of int in max_burst socket option. [ 504.872281][T21374] Use struct sctp_assoc_value instead [ 504.935443][T21371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.082066][T21378] bond1: (slave batadv1): Opening slave failed [ 505.137889][ T5831] Bluetooth: hci3: command tx timeout [ 505.150381][T21204] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.237237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.244514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.300414][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.307764][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.394444][T21393] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3147'. [ 505.428774][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3146'. [ 505.984572][T21416] : renamed from vlan1 (while UP) [ 506.061511][T21425] tipc: Enabling of bearer rejected, failed to enable media [ 506.080554][T21425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 506.302585][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 506.351716][T21204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.619445][T21204] veth0_vlan: entered promiscuous mode [ 506.690241][T21441] lo speed is unknown, defaulting to 1000 [ 506.723158][T21204] veth1_vlan: entered promiscuous mode [ 506.745377][T21436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3155'. [ 506.827857][T21441] lo speed is unknown, defaulting to 1000 [ 506.949681][T21204] veth0_macvtap: entered promiscuous mode [ 507.000273][T21204] veth1_macvtap: entered promiscuous mode [ 507.097880][T21204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.169440][T21204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.215753][ T5831] Bluetooth: hci3: command tx timeout [ 507.236289][ T127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.294722][ T127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.325742][ T127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.368652][ T127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.402297][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 507.720678][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.739703][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.949261][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.966275][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.260822][T21486] netlink: 'syz.3.3110': attribute type 3 has an invalid length. [ 508.367983][T21489] lo speed is unknown, defaulting to 1000 [ 508.376567][T21489] lo speed is unknown, defaulting to 1000 [ 508.758311][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 509.184658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 509.192816][ C0] lec:lec_tx_timeout: lec0 [ 509.198131][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 509.617952][T21513] netlink: 'syz.1.3168': attribute type 4 has an invalid length. [ 509.628049][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'. [ 509.830335][T21520] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 509.855429][T21520] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 509.867339][T21499] siw: device registration error -23 [ 510.118928][T21530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 510.273595][T21539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3171'. [ 510.288506][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'. [ 510.327125][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'. [ 511.037776][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 511.926245][T21579] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3182'. [ 511.943379][T21578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3181'. [ 512.039803][T21578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.111979][T21578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.132676][T21578] bond0 (unregistering): Released all slaves [ 512.345332][T21584] syzkaller0: entered promiscuous mode [ 512.350898][T21584] syzkaller0: entered allmulticast mode [ 513.250290][T21627] netlink: 'syz.1.3189': attribute type 10 has an invalid length. [ 513.272178][T21627] team0: Port device dummy0 added [ 513.371799][T21633] Cannot find del_set index 49151 as target [ 513.385331][T21617] netlink: 'syz.1.3189': attribute type 10 has an invalid length. [ 513.506235][T21617] team0: Port device dummy0 removed [ 513.518813][T21633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3190'. [ 513.598817][T21642] netlink: 'syz.2.3193': attribute type 1 has an invalid length. [ 513.767934][T21642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.910901][T21645] bond3: (slave geneve2): making interface the new active one [ 513.969746][T21645] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 514.029102][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.062644][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.197618][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.215257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 514.223457][ C0] lec:lec_tx_timeout: lec0 [ 514.228615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 514.245673][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.401269][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3198'. [ 514.464915][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3198'. [ 514.625730][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 514.856023][T21685] lo speed is unknown, defaulting to 1000 [ 514.880833][T21685] lo speed is unknown, defaulting to 1000 [ 514.902859][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 515.013608][T21706] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 515.029750][T21702] netlink: 'syz.0.3204': attribute type 9 has an invalid length. [ 515.052638][T21707] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 515.076314][T21702] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3204'. [ 515.112691][T21706] dummy0: entered allmulticast mode [ 515.154506][T21706] team0: Port device dummy0 added [ 515.203674][T21707] dummy0: left allmulticast mode [ 515.279228][T21707] team0: Port device dummy0 removed [ 515.321322][T21707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 515.544025][T21724] netlink: 'syz.0.3207': attribute type 11 has an invalid length. [ 515.580526][T21724] netlink: 'syz.0.3207': attribute type 4 has an invalid length. [ 515.613485][T21724] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.3207'. [ 515.656474][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 515.792037][T21733] lo speed is unknown, defaulting to 1000 [ 515.878779][T21733] lo speed is unknown, defaulting to 1000 [ 516.277076][T21748] netlink: 'syz.2.3213': attribute type 2 has an invalid length. [ 516.317074][T21748] netlink: 'syz.2.3213': attribute type 1 has an invalid length. [ 516.325845][T21748] netlink: 'syz.2.3213': attribute type 2 has an invalid length. [ 516.582964][T21754] bond0: (slave sit0): Error: Device type is different from other slaves [ 517.848397][T21780] veth0_to_bond: entered promiscuous mode [ 517.884994][T21780] veth0_to_bond: entered allmulticast mode [ 517.891955][T21784] __nla_validate_parse: 35 callbacks suppressed [ 517.891980][T21784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3221'. [ 518.015914][T21791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3222'. [ 518.853662][T21812] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3226'. [ 519.244576][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 519.252681][ C0] lec:lec_tx_timeout: lec0 [ 519.258858][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 519.418233][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 520.190415][T21872] syzkaller1: entered promiscuous mode [ 520.199794][T21872] syzkaller1: entered allmulticast mode [ 520.264386][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3241'. [ 520.330473][T21877] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3240'. [ 520.390447][T21873] validate_nla: 1 callbacks suppressed [ 520.390468][T21873] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 520.405718][T21876] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 520.522835][T21881] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3242'. [ 520.551431][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3242'. [ 520.709824][T21890] lo speed is unknown, defaulting to 1000 [ 520.721186][T21888] lo speed is unknown, defaulting to 1000 [ 520.759719][T21888] lo speed is unknown, defaulting to 1000 [ 521.268608][T21914] tipc: Started in network mode [ 521.284777][T21914] tipc: Node identity ac14140f, cluster identity 4711 [ 521.315152][T21914] tipc: New replicast peer: 255.255.255.255 [ 521.321761][T21914] tipc: Enabled bearer , priority 10 [ 521.345267][T21912] lo speed is unknown, defaulting to 1000 [ 521.352553][T21890] lo speed is unknown, defaulting to 1000 [ 521.359679][T21883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.381805][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3249'. [ 521.613567][T21922] bond0: Error: Cannot enslave bond to itself. [ 521.632863][T21922] batadv_slave_1: entered promiscuous mode [ 521.666756][T21921] batadv_slave_1: left promiscuous mode [ 521.827006][T21926] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3251'. [ 521.986859][T21912] lo speed is unknown, defaulting to 1000 [ 522.450009][ T6564] tipc: Node number set to 2886997007 [ 522.705718][T21951] bond4: entered promiscuous mode [ 522.713183][T21951] bond4: entered allmulticast mode [ 522.723793][T21951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 522.733032][T21948] 8021q: VLANs not supported on vxcan1 [ 522.750624][T21955] bridge0: port 3(gretap0) entered blocking state [ 522.775664][T21955] bridge0: port 3(gretap0) entered disabled state [ 522.795477][T21955] gretap0: entered allmulticast mode [ 522.819248][T21955] gretap0: entered promiscuous mode [ 522.834194][T21955] bridge0: port 3(gretap0) entered blocking state [ 522.840980][T21955] bridge0: port 3(gretap0) entered forwarding state [ 522.864161][T21958] netlink: 'syz.2.3259': attribute type 1 has an invalid length. [ 522.931685][T21958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 523.477226][T21986] netlink: 'syz.1.3264': attribute type 32 has an invalid length. [ 523.487367][T21986] __nla_validate_parse: 1 callbacks suppressed [ 523.487387][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'. [ 523.794507][T21986] bond0: Setting coupled_control to off (0) [ 523.801640][T21989] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 523.825840][T21989] syzkaller1: linktype set to 778 [ 523.889210][T21994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3265'. [ 524.002633][T21990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 524.216572][T21999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3267'. [ 524.253073][T21999] bridge0: port 3(gretap0) entered disabled state [ 524.275418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 524.283568][ C0] lec:lec_tx_timeout: lec0 [ 524.293007][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 524.320491][T22001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3267'. [ 524.430219][T21999] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.438952][T21999] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.446917][T22004] netlink: 'syz.2.3268': attribute type 6 has an invalid length. [ 524.477699][T22007] netlink: 'syz.2.3268': attribute type 6 has an invalid length. [ 524.625696][T21999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.641117][T21999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.926011][ T157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.935654][ T157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.972856][ T157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.987488][ T157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.324679][T22035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3272'. [ 525.337887][T22033] lo speed is unknown, defaulting to 1000 [ 525.347443][T22035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3272'. [ 525.377515][T22033] lo speed is unknown, defaulting to 1000 [ 528.101664][T22028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.304652][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 529.312712][ C0] lec:lec_tx_timeout: lec0 [ 529.318085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 535.614611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 535.622772][ C0] lec:lec_tx_timeout: lec0 [ 535.628570][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 541.374613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 541.382771][ C0] lec:lec_tx_timeout: lec0 [ 541.388546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.134597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 547.142833][ C0] lec:lec_tx_timeout: lec0 [ 547.148339][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.774999][ C0] ip6_tunnel: syzkaller0 xmit: Local address not yet configured! [ 552.155250][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 552.163852][ C0] lec:lec_tx_timeout: lec0 [ 552.169213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.984745][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 557.184612][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 557.192694][ C0] lec:lec_tx_timeout: lec0 [ 557.198180][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 558.014786][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 562.214584][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 562.222678][ C0] lec:lec_tx_timeout: lec0 [ 562.227505][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.234604][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.243067][ C0] lec:lec_tx_timeout: lec0 [ 567.248781][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.264665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 572.272734][ C0] lec:lec_tx_timeout: lec0 [ 572.277565][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 577.295295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 577.303454][ C0] lec:lec_tx_timeout: lec0 [ 577.308231][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.134687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 583.142754][ C0] lec:lec_tx_timeout: lec0 [ 583.149179][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.171268][T24041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3278'. [ 587.375399][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.396215][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.409613][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.419664][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.433881][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.556284][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 587.636972][T24045] lo speed is unknown, defaulting to 1000 [ 587.672768][T24045] lo speed is unknown, defaulting to 1000 [ 587.951538][T24077] Cannot find add_set index 0 as target [ 588.164560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 588.172858][ C0] lec:lec_tx_timeout: lec0 [ 588.179003][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.233955][T24085] netlink: 'syz.1.3287': attribute type 9 has an invalid length. [ 588.262844][T24090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3288'. [ 588.274316][T24085] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3287'. [ 588.297770][T24087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 588.479177][ T127] bridge_slave_1: left allmulticast mode [ 588.496929][ T127] bridge_slave_1: left promiscuous mode [ 588.504574][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.572598][ T127] bridge_slave_0: left allmulticast mode [ 588.597777][ T127] bridge_slave_0: left promiscuous mode [ 588.615150][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.038272][ T127] batman_adv: batadv0: Removing interface: macvlan2 [ 589.529562][ T127] bond1 (unregistering): Released all slaves [ 589.536339][ T5831] Bluetooth: hci4: command tx timeout [ 589.551766][ T127] bond2 (unregistering): Released all slaves [ 589.568588][ T127] bond3 (unregistering): Released all slaves [ 589.583388][ T127] bond4 (unregistering): Released all slaves [ 589.602892][ T127] bond5 (unregistering): Released all slaves [ 589.621199][ T127] bond6 (unregistering): Released all slaves [ 589.640509][ T127] bond0 (unregistering): Released all slaves [ 589.659161][ T127] bond7 (unregistering): Released all slaves [ 589.790762][T24106] lo speed is unknown, defaulting to 1000 [ 589.844344][T24106] lo speed is unknown, defaulting to 1000 [ 589.855293][ T127] : left promiscuous mode [ 590.006424][ T127] m1Ie5: left promiscuous mode [ 590.190884][T24134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.226964][T24134] tipc: Started in network mode [ 590.232013][T24134] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 590.242490][T24134] tipc: Enabling of bearer rejected, failed to enable media [ 590.265997][ T127] tipc: Disabling bearer [ 590.309038][T24138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.333610][ T127] tipc: Left network mode [ 590.341856][T24139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3300'. [ 590.407792][T24134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.432955][T24137] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 590.767928][T24148] lo speed is unknown, defaulting to 1000 [ 590.844394][T24148] lo speed is unknown, defaulting to 1000 [ 590.877186][ T29] audit: type=1107 audit(1772290331.692:8): pid=24147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 591.615979][ T5831] Bluetooth: hci4: command tx timeout [ 591.656468][T24185] tipc: Enabled bearer , priority 0 [ 591.696783][T24180] syzkaller0: entered promiscuous mode [ 591.713031][T24180] syzkaller0: entered allmulticast mode [ 591.729036][T24045] chnl_net:caif_netlink_parms(): no params data found [ 591.780933][T24183] tipc: Resetting bearer [ 591.971618][T24179] tipc: Resetting bearer [ 592.017167][T24179] tipc: Disabling bearer [ 592.496548][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 592.889821][ T127] hsr_slave_0: left promiscuous mode [ 592.908981][ T127] hsr_slave_1: left promiscuous mode [ 592.916638][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.925535][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.941231][ T127] veth1_macvtap: left promiscuous mode [ 592.955602][ T127] veth0_macvtap: left promiscuous mode [ 593.194887][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 593.203071][ C0] lec:lec_tx_timeout: lec0 [ 593.208358][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.530603][ T157] smc: removing ib device syz0 [ 593.553287][T24045] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.575396][T24045] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.582827][T24045] bridge_slave_0: entered allmulticast mode [ 593.629435][T24045] bridge_slave_0: entered promiscuous mode [ 593.647960][T24045] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.664856][T24045] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.672558][T24045] bridge_slave_1: entered allmulticast mode [ 593.699158][T24045] bridge_slave_1: entered promiscuous mode [ 593.705641][ T5831] Bluetooth: hci4: command tx timeout [ 594.127561][T24244] pimreg: tun_chr_ioctl cmd 35108 [ 594.139569][T24045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.193401][T24045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.506059][T24256] Bluetooth: MGMT ver 1.23 [ 594.513545][T24045] team0: Port device team_slave_0 added [ 594.526042][T24045] team0: Port device team_slave_1 added [ 594.765716][T24260] syz_tun: entered allmulticast mode [ 594.795852][T24045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.802965][T24045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.834833][T24045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.870971][T24045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.899464][T24045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.948093][T24045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.174398][T24268] bond2: option xmit_hash_policy: invalid value (10) [ 595.197220][T24268] bond2 (unregistering): Released all slaves [ 595.508152][T20479] IPVS: starting estimator thread 0... [ 595.522413][T24258] syz_tun: left allmulticast mode [ 595.571959][T24265] lo speed is unknown, defaulting to 1000 [ 595.617040][T24277] IPVS: using max 26 ests per chain, 62400 per kthread [ 595.621724][T24045] hsr_slave_0: entered promiscuous mode [ 595.646332][T24045] hsr_slave_1: entered promiscuous mode [ 595.775071][ T5831] Bluetooth: hci4: command tx timeout [ 596.096373][T24297] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3327'. [ 596.792799][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3330'. [ 596.915027][T24314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3330'. [ 596.935463][ T1135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.957618][ T1135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.187997][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 597.223989][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 597.330557][ T1135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.363935][ T1135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.674421][T24335] bridge0: entered allmulticast mode [ 598.033651][T24045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 598.047485][ T127] IPVS: stop unused estimator thread 0... [ 598.128940][T24045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 598.214542][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.222615][ C0] lec:lec_tx_timeout: lec0 [ 598.228760][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.249417][T24045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 598.319996][T24045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 598.581058][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 598.973682][T24371] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3337'. [ 599.030839][T24045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.107446][T24045] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.148165][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.155484][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.193369][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.200651][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.235454][T24383] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3340'. [ 599.281206][T24381] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 599.430308][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'. [ 599.523498][T24392] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0xd5 [ 599.950579][T24045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.113383][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 600.145386][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 600.164122][T24045] veth0_vlan: entered promiscuous mode [ 600.218304][T24045] veth1_vlan: entered promiscuous mode [ 600.329975][T24045] veth0_macvtap: entered promiscuous mode [ 600.353499][T24045] veth1_macvtap: entered promiscuous mode [ 600.384393][T24045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.411684][T24045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.434362][ T127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.491782][ T127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.528208][ T127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.541008][ T127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.752033][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.778379][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.817465][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.835651][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.014280][T24431] netlink: 'syz.4.3348': attribute type 4 has an invalid length. [ 601.176532][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 601.469494][T24444] Cannot find set identified by id 65534 to match [ 601.828687][T24467] lo speed is unknown, defaulting to 1000 [ 602.002368][T24474] lo speed is unknown, defaulting to 1000 [ 602.009623][T24478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3357'. [ 603.115973][T24506] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3362'. [ 603.244665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.252782][ C0] lec:lec_tx_timeout: lec0 [ 603.257514][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.571761][T24527] netlink: 'syz.3.3366': attribute type 2 has an invalid length. [ 603.883569][T24527] : entered promiscuous mode [ 604.084052][T24542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'. [ 605.521524][T24579] netlink: 'syz.4.3376': attribute type 83 has an invalid length. [ 605.567356][T24579] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3376'. [ 605.667012][T24587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 605.785036][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 606.009656][T24600] netlink: 'syz.0.3380': attribute type 142 has an invalid length. [ 606.155512][T24605] dummy0: entered promiscuous mode [ 606.177507][T24605] dummy0: left promiscuous mode [ 606.615680][T24623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 607.227960][T24653] nbd: must specify at least one socket [ 607.240001][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 607.251094][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3393'. [ 607.327307][T24659] FAULT_INJECTION: forcing a failure. [ 607.327307][T24659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.364918][T24659] CPU: 1 UID: 0 PID: 24659 Comm: syz.0.3394 Not tainted syzkaller #0 PREEMPT(full) [ 607.364948][T24659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.364963][T24659] Call Trace: [ 607.364970][T24659] [ 607.364979][T24659] dump_stack_lvl+0xe8/0x150 [ 607.365017][T24659] should_fail_ex+0x412/0x560 [ 607.365061][T24659] _copy_from_user+0x2d/0xb0 [ 607.365093][T24659] copy_from_sockptr+0x5e/0x90 [ 607.365121][T24659] do_ipv6_setsockopt+0x1846/0x31c0 [ 607.365157][T24659] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 607.365182][T24659] ? get_pid_task+0x20/0x1f0 [ 607.365207][T24659] ? get_pid_task+0x20/0x1f0 [ 607.365224][T24659] ? get_pid_task+0x20/0x1f0 [ 607.365259][T24659] ? __lock_acquire+0x6b5/0x2cf0 [ 607.365304][T24659] ? aa_sk_perm+0x6d5/0x900 [ 607.365337][T24659] ? __pfx_aa_sk_perm+0x10/0x10 [ 607.365364][T24659] ? __fget_files+0x2a/0x420 [ 607.365401][T24659] ? aa_sock_opt_perm+0xff/0x1a0 [ 607.365430][T24659] ipv6_setsockopt+0x59/0x170 [ 607.365456][T24659] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 607.365485][T24659] do_sock_setsockopt+0x17c/0x1b0 [ 607.365519][T24659] __x64_sys_setsockopt+0x13d/0x1b0 [ 607.365556][T24659] do_syscall_64+0x14d/0xf80 [ 607.365584][T24659] ? trace_irq_disable+0x3b/0x150 [ 607.365615][T24659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.365637][T24659] ? clear_bhb_loop+0x40/0x90 [ 607.365663][T24659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.365684][T24659] RIP: 0033:0x7f6015f9c799 [ 607.365704][T24659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.365722][T24659] RSP: 002b:00007f6016db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 607.365744][T24659] RAX: ffffffffffffffda RBX: 00007f6016215fa0 RCX: 00007f6015f9c799 [ 607.365760][T24659] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 607.365773][T24659] RBP: 00007f6016db3090 R08: 0000000000000014 R09: 0000000000000000 [ 607.365785][T24659] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 607.365798][T24659] R13: 00007f6016216038 R14: 00007f6016215fa0 R15: 00007ffe761397d8 [ 607.365833][T24659] [ 607.624868][T24653] block nbd3: server does not support multiple connections per device. [ 607.634315][T24653] block nbd3: shutting down sockets [ 607.770094][T24667] Bluetooth: MGMT ver 1.23 [ 608.091070][T24686] x_tables: duplicate underflow at hook 1 [ 608.264780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.272856][ C0] lec:lec_tx_timeout: lec0 [ 608.277860][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 608.332024][T24702] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 608.603882][T24718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3410'. [ 608.647966][T24717] netlink: 'syz.4.3411': attribute type 9 has an invalid length. [ 608.699837][T24722] netlink: 'syz.4.3411': attribute type 21 has an invalid length. [ 608.740005][T24722] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3411'. [ 608.764776][T24722] netlink: 'syz.4.3411': attribute type 4 has an invalid length. [ 608.796120][T24722] netlink: 'syz.4.3411': attribute type 5 has an invalid length. [ 608.835981][T24722] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3411'. [ 609.011352][T24740] netlink: 'syz.2.3415': attribute type 7 has an invalid length. [ 609.129567][T24740] netlink: 'syz.2.3415': attribute type 7 has an invalid length. [ 609.730970][T24777] __nla_validate_parse: 1 callbacks suppressed [ 609.730993][T24777] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3424'. [ 609.811726][T24777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 610.210795][T24805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'. [ 610.220711][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 610.294671][T24811] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3432'. [ 610.312615][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 610.507166][T24804] netlink: 'syz.4.3430': attribute type 10 has an invalid length. [ 610.691728][T24804] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 610.738262][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 610.756341][T24835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 610.834333][T24830] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 610.899664][T24830] bond2 (unregistering): Released all slaves [ 610.956697][T24825] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 610.976165][T24825] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 610.998930][T24847] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3439'. [ 611.023620][T24847] netlink: ct family unspecified [ 611.035419][T24847] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 611.047035][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'. [ 611.228012][T24856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3440'. [ 611.309668][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 611.763348][T24877] lo speed is unknown, defaulting to 1000 [ 611.908048][T24892] Cannot find del_set index 4 as target [ 611.970821][T24898] netlink: 'syz.4.3453': attribute type 3 has an invalid length. [ 612.005943][T24898] nbd: nbd4 already in use [ 612.011020][T24898] block nbd4: NBD_DISCONNECT [ 612.025414][T24898] block nbd4: Send disconnect failed -32 [ 612.032540][T24898] block nbd4: shutting down sockets [ 612.131748][T13509] veth3: left allmulticast mode [ 612.149396][T13509] veth3: left promiscuous mode [ 612.167841][T13509] bridge2: port 2(veth3) entered disabled state [ 612.204313][T13509] ip6gretap1: left allmulticast mode [ 612.220448][T13509] ip6gretap1: left promiscuous mode [ 612.233734][T13509] bridge2: port 1(ip6gretap1) entered disabled state [ 613.284611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 613.292672][ C0] lec:lec_tx_timeout: lec0 [ 613.297736][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 614.591454][T13509] bond7 (unregistering): (slave bridge34): Releasing active interface [ 614.600081][T13509] bond7 (unregistering): (slave bridge34): the permanent HWaddr of slave - ee:ac:8d:d4:bb:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 614.648995][T13509] bond7 (unregistering): (slave bridge35): Releasing active interface [ 614.845414][T13509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.856347][T13509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.867262][T13509] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 614.883449][T13509] bond0 (unregistering): Released all slaves [ 614.896375][T13509] bond1 (unregistering): Released all slaves [ 614.939329][T13509] bond2 (unregistering): (slave lo): Releasing backup interface [ 614.950169][T13509] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 614.963884][T13509] bond2 (unregistering): Released all slaves [ 614.980547][T13509] bond3 (unregistering): Released all slaves [ 614.997249][T13509] bond4 (unregistering): Released all slaves [ 615.013296][T13509] bond5 (unregistering): Released all slaves [ 615.038145][T13509] bond6 (unregistering): Released all slaves [ 615.054274][T13509] bond7 (unregistering): Released all slaves [ 615.080883][T24919] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 615.289833][T24925] __nla_validate_parse: 3 callbacks suppressed [ 615.289856][T24925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3459'. [ 615.331742][T13509] : left promiscuous mode [ 615.376628][T24925] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.384175][T24925] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.736026][ T5976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.840225][T24941] dummy0: entered promiscuous mode [ 615.854391][T24941] dummy0: left promiscuous mode [ 616.065913][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.171300][T24942] lo speed is unknown, defaulting to 1000 [ 616.177653][ T5976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.823831][T24961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.148883][T24994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'. [ 617.199135][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.227885][T24997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'. [ 617.238563][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.543338][T25010] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3475'. [ 617.583950][T25009] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 617.608290][T25007] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3475'. [ 617.652725][T25009] bond2: entered promiscuous mode [ 617.661710][T25009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.682230][T13509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.690440][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3477'. [ 617.713037][T25019] siw: device registration error -23 [ 617.723681][T13509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.935327][ T5976] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 618.051806][ T42] IPVS: starting estimator thread 0... [ 618.058808][T25029] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 618.149351][T25030] IPVS: using max 36 ests per chain, 86400 per kthread [ 618.304580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 618.312820][ C0] lec:lec_tx_timeout: lec0 [ 618.317485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 618.345289][T25017] bond2: (slave bridge3): making interface the new active one [ 618.364350][T25017] bridge3: entered promiscuous mode [ 618.377927][T25017] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 618.422509][T25021] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 618.445700][T25021] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 618.485049][T25025] gretap1: entered promiscuous mode [ 619.040875][T13509] IPVS: stop unused estimator thread 0... [ 619.350150][T25058] lo speed is unknown, defaulting to 1000 [ 619.436591][T25063] netlink: 'syz.2.3488': attribute type 11 has an invalid length. [ 619.737259][T25078] x_tables: unsorted underflow at hook 3 [ 619.820884][T25073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.892445][T25078] dummy0: Caught tx_queue_len zero misconfig [ 619.947742][T25078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3492'. [ 620.043107][T25073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.252319][T25073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.332089][T25101] IPv6: addrconf: prefix option has invalid lifetime [ 620.338947][T25101] IPv6: addrconf: prefix option has invalid lifetime [ 620.403553][T25073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.751315][ T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.764949][T25103] lo speed is unknown, defaulting to 1000 [ 620.831881][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.933206][ T127] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.043844][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.230405][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 621.263013][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3504'. [ 621.374838][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 621.457882][T25131] netlink: 'syz.3.3505': attribute type 49 has an invalid length. [ 621.534731][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 621.565318][T25133] netlink: 'syz.4.3506': attribute type 1 has an invalid length. [ 621.573304][T25133] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3506'. [ 621.906047][T25135] lo speed is unknown, defaulting to 1000 [ 622.827618][T25177] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3514'. [ 623.678642][T25194] xt_TPROXY: Can be used only with -p tcp or -p udp [ 624.046882][T25203] lo speed is unknown, defaulting to 1000 [ 624.272923][T25210] lo speed is unknown, defaulting to 1000 [ 624.582670][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6260 ms [ 624.590791][ C0] lec:lec_tx_timeout: lec0 [ 624.595682][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.862803][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3523'. [ 624.985335][T25231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 625.788611][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 626.296719][T25251] lo speed is unknown, defaulting to 1000 [ 627.888337][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'. [ 627.933571][T25325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.135012][T25330] netlink: 'syz.3.3547': attribute type 21 has an invalid length. [ 628.158300][T25330] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 628.200965][T25330] netlink: 'syz.3.3547': attribute type 2 has an invalid length. [ 628.244224][T25330] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.3547'. [ 628.689317][T25353] team_slave_0: left allmulticast mode [ 628.704029][T25353] team0 (unregistering): Port device team_slave_0 removed [ 628.712672][T25353] team_slave_1: left allmulticast mode [ 628.733349][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.754008][T25353] team0 (unregistering): Port device team_slave_1 removed [ 628.829930][T25354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.935559][T25361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.133390][T25374] FAULT_INJECTION: forcing a failure. [ 629.133390][T25374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.177955][T25374] CPU: 1 UID: 0 PID: 25374 Comm: syz.4.3556 Not tainted syzkaller #0 PREEMPT(full) [ 629.177987][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.178000][T25374] Call Trace: [ 629.178008][T25374] [ 629.178018][T25374] dump_stack_lvl+0xe8/0x150 [ 629.178055][T25374] should_fail_ex+0x412/0x560 [ 629.178086][T25374] _copy_from_user+0x2d/0xb0 [ 629.178119][T25374] copy_from_sockptr+0x5e/0x90 [ 629.178150][T25374] packet_setsockopt+0xbeb/0x1510 [ 629.178181][T25374] ? __pfx_packet_setsockopt+0x10/0x10 [ 629.178218][T25374] ? aa_sk_perm+0x6d5/0x900 [ 629.178250][T25374] ? __pfx_aa_sk_perm+0x10/0x10 [ 629.178276][T25374] ? __fget_files+0x2a/0x420 [ 629.178305][T25374] ? aa_sock_opt_perm+0xff/0x1a0 [ 629.178334][T25374] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 629.178357][T25374] ? __pfx_packet_setsockopt+0x10/0x10 [ 629.178385][T25374] do_sock_setsockopt+0x17c/0x1b0 [ 629.178421][T25374] __x64_sys_setsockopt+0x13d/0x1b0 [ 629.178458][T25374] do_syscall_64+0x14d/0xf80 [ 629.178487][T25374] ? trace_irq_disable+0x3b/0x150 [ 629.178518][T25374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.178540][T25374] ? clear_bhb_loop+0x40/0x90 [ 629.178567][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.178589][T25374] RIP: 0033:0x7fc13759c799 [ 629.178609][T25374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.178628][T25374] RSP: 002b:00007fc1384f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 629.178652][T25374] RAX: ffffffffffffffda RBX: 00007fc137815fa0 RCX: 00007fc13759c799 [ 629.178675][T25374] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 629.178689][T25374] RBP: 00007fc1384f2090 R08: 0000000000000004 R09: 0000000000000000 [ 629.178703][T25374] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 629.178716][T25374] R13: 00007fc137816038 R14: 00007fc137815fa0 R15: 00007ffc78572b88 [ 629.178750][T25374] [ 629.414109][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3558'. [ 629.604364][T25387] netlink: zone id is out of range [ 629.617761][T25384] netlink: 'syz.4.3559': attribute type 21 has an invalid length. [ 629.647376][T25387] netlink: zone id is out of range [ 629.652600][T25387] netlink: zone id is out of range [ 629.660398][T25384] netlink: 'syz.4.3559': attribute type 22 has an invalid length. [ 629.668500][T25387] netlink: zone id is out of range [ 629.674137][T25384] netlink: 'syz.4.3559': attribute type 23 has an invalid length. [ 629.676919][T25387] netlink: zone id is out of range [ 629.683487][T25384] netlink: 'syz.4.3559': attribute type 25 has an invalid length. [ 629.702320][T25384] netlink: 'syz.4.3559': attribute type 26 has an invalid length. [ 629.711958][T25384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3559'. [ 629.781558][T25387] netlink: zone id is out of range [ 629.799776][T25387] netlink: zone id is out of range [ 629.824354][T25387] netlink: zone id is out of range [ 629.861529][T25387] netlink: zone id is out of range [ 630.118182][T25413] netlink: 'syz.3.3565': attribute type 13 has an invalid length. [ 630.126397][T25413] netlink: 'syz.3.3565': attribute type 17 has an invalid length. [ 630.334547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 630.342696][ C0] lec:lec_tx_timeout: lec0 [ 630.347426][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.356520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 630.941326][T25438] FAULT_INJECTION: forcing a failure. [ 630.941326][T25438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.956437][T25438] CPU: 0 UID: 0 PID: 25438 Comm: syz.0.3569 Not tainted syzkaller #0 PREEMPT(full) [ 630.956465][T25438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.956477][T25438] Call Trace: [ 630.956486][T25438] [ 630.956494][T25438] dump_stack_lvl+0xe8/0x150 [ 630.956529][T25438] should_fail_ex+0x412/0x560 [ 630.956560][T25438] _copy_to_user+0x31/0xb0 [ 630.956592][T25438] simple_read_from_buffer+0xe1/0x170 [ 630.956629][T25438] proc_fail_nth_read+0x1bb/0x230 [ 630.956661][T25438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.956693][T25438] ? rw_verify_area+0x2a6/0x4d0 [ 630.956713][T25438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.956743][T25438] vfs_read+0x20c/0xa70 [ 630.956762][T25438] ? fdget_pos+0x246/0x320 [ 630.956797][T25438] ? __pfx___mutex_lock+0x10/0x10 [ 630.956828][T25438] ? __pfx_vfs_read+0x10/0x10 [ 630.956859][T25438] ? __fget_files+0x2a/0x420 [ 630.956893][T25438] ? __fget_files+0x3a0/0x420 [ 630.956921][T25438] ? __fget_files+0x2a/0x420 [ 630.956960][T25438] ksys_read+0x150/0x270 [ 630.956984][T25438] ? __pfx_ksys_read+0x10/0x10 [ 630.957018][T25438] do_syscall_64+0x14d/0xf80 [ 630.957046][T25438] ? trace_irq_disable+0x3b/0x150 [ 630.957077][T25438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.957099][T25438] ? clear_bhb_loop+0x40/0x90 [ 630.957126][T25438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.957147][T25438] RIP: 0033:0x7f6015f5cfce [ 630.957167][T25438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 630.957186][T25438] RSP: 002b:00007f6016db2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.957210][T25438] RAX: ffffffffffffffda RBX: 00007f6016db36c0 RCX: 00007f6015f5cfce [ 630.957226][T25438] RDX: 000000000000000f RSI: 00007f6016db30a0 RDI: 0000000000000004 [ 630.957239][T25438] RBP: 00007f6016db3090 R08: 0000000000000000 R09: 0000000000000000 [ 630.957252][T25438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.957265][T25438] R13: 00007f6016216038 R14: 00007f6016215fa0 R15: 00007ffe761397d8 [ 630.957299][T25438] [ 631.520750][T25441] bond1 (unregistering): Released all slaves [ 631.650368][T25455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.689195][T25455] gretap0: left allmulticast mode [ 631.725396][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.738464][T25455] gretap0: left promiscuous mode [ 631.750949][T25455] bridge0: port 3(gretap0) entered disabled state [ 631.762063][T25457] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.771950][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.792118][T25457] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.802198][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'. [ 631.815290][T25455] bridge_slave_1: left allmulticast mode [ 631.821083][T25455] bridge_slave_1: left promiscuous mode [ 631.827902][T25455] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.840539][T25455] bridge_slave_0: left allmulticast mode [ 631.853873][T25455] bridge_slave_0: left promiscuous mode [ 631.877359][T25455] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.797218][T25513] bond7 (unregistering): Released all slaves [ 633.071255][T25517] lo: Caught tx_queue_len zero misconfig [ 633.233518][T25537] tipc: Enabled bearer , priority 0 [ 633.399754][T25538] syzkaller0: entered promiscuous mode [ 633.464976][T25538] syzkaller0: entered allmulticast mode [ 633.482373][T25538] tipc: Resetting bearer [ 633.622276][ T12] tipc: Resetting bearer [ 633.646392][T25536] tipc: Resetting bearer [ 633.868251][T25572] __nla_validate_parse: 3 callbacks suppressed [ 633.868273][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'. [ 633.914866][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'. [ 635.756688][T25536] tipc: Disabling bearer [ 635.789000][T25568] bridge_slave_0: left allmulticast mode [ 635.795834][T25568] bridge_slave_0: left promiscuous mode [ 635.801638][T25568] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.817500][T25568] bridge_slave_1: left allmulticast mode [ 635.823434][T25568] bridge_slave_1: left promiscuous mode [ 635.829822][T25568] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.842993][T25568] bond0: (slave bond_slave_0): Releasing backup interface [ 635.856658][T25568] bond0: (slave bond_slave_1): Releasing backup interface [ 635.871877][T25568] team0: Port device team_slave_0 removed [ 635.885506][T25568] team0: Port device team_slave_1 removed [ 635.892195][T25568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.900522][T25568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.909671][T25568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.918768][T25568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.928084][T25568] net_ratelimit: 9 callbacks suppressed [ 635.928103][T25568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 635.990935][ T6561] tipc: Node number set to 11777 [ 636.104533][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 636.112718][ C0] lec:lec_tx_timeout: lec0 [ 636.124589][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 636.450557][T25612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3608'. [ 636.554198][T25617] dummy0: entered promiscuous mode [ 636.569561][T25617] dummy0: left promiscuous mode [ 636.844867][T25629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3613'. [ 637.793454][T25654] lo speed is unknown, defaulting to 1000 [ 638.327845][T25673] team0: No ports can be present during mode change [ 638.586134][T25677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3620'. [ 638.940414][T25699] team0: entered promiscuous mode [ 638.966278][T25699] team_slave_0: entered promiscuous mode [ 638.992371][T25699] team_slave_1: entered promiscuous mode [ 639.028622][T25699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 639.365233][T25711] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 639.658254][T25720] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3632'. [ 639.812164][T25726] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3635'. [ 640.081196][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 640.244206][T25743] veth3: entered promiscuous mode [ 640.344361][T25747] openvswitch: netlink: Message has 12 unknown bytes. [ 640.380106][T25747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.414090][T25747] validate_nla: 1 callbacks suppressed [ 640.414110][T25747] netlink: 'syz.3.3639': attribute type 3 has an invalid length. [ 640.490004][T25754] netlink: 'syz.1.3640': attribute type 1 has an invalid length. [ 640.534162][T25754] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 640.815407][T25764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3642'. [ 640.858961][T25766] ipt_ECN: cannot use operation on non-tcp rule [ 640.948902][T25768] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3643'. [ 641.134536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 641.142822][ C0] lec:lec_tx_timeout: lec0 [ 641.148663][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 641.284874][T25776] xt_CT: No such helper "syz0" [ 641.532704][T25789] atomic_op ffff88802aeb5998 conn xmit_atomic 0000000000000000 [ 641.692674][T25798] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3653'. [ 642.505722][T25795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.922703][T25818] ip6t_srh: unknown srh invflags BA61 [ 644.348810][T25850] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3662'. [ 644.360945][T25850] netlink: Unknown conntrack attr (0) [ 644.373451][T25853] syzkaller0: entered promiscuous mode [ 644.384361][T25853] syzkaller0: entered allmulticast mode [ 644.671017][T25868] netlink: 'syz.2.3667': attribute type 1 has an invalid length. [ 644.685718][T25868] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 644.842193][T25877] bridge_slave_1: mtu less than device minimum [ 644.859377][T25878] lo speed is unknown, defaulting to 1000 [ 644.912928][T25879] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 645.127906][T25877] siw: device registration error -23 [ 645.143805][T25885] sctp: [Deprecated]: syz.3.3672 (pid 25885) Use of int in max_burst socket option. [ 645.143805][T25885] Use struct sctp_assoc_value instead [ 645.391652][T25893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3673'. [ 646.164617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 646.172850][ C0] lec:lec_tx_timeout: lec0 [ 646.959963][T25916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3680'. [ 647.091479][T25834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.341824][T25929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 647.440653][T25929] geneve2: entered promiscuous mode [ 647.460381][T25929] geneve2: entered allmulticast mode [ 647.477772][T25932] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3683'. [ 647.614704][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 647.624115][T25938] syzkaller0: entered allmulticast mode [ 647.660105][T25943] syzkaller0 (unregistering): left allmulticast mode [ 648.270699][T25976] netlink: 'syz.3.3695': attribute type 1 has an invalid length. [ 648.441229][T25986] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 648.517170][T25976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3695'. [ 648.617923][T25990] veth3: entered promiscuous mode [ 648.636743][T25990] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 648.689799][T25976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.690505][ T127] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 648.813259][T26004] syzkaller1: entered promiscuous mode [ 648.838090][T26004] syzkaller1: entered allmulticast mode [ 648.865182][ T69] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 649.052907][T25969] netlink: 'syz.1.3693': attribute type 1 has an invalid length. [ 649.250339][T26023] x_tables: duplicate underflow at hook 1 [ 649.258305][T26012] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 649.270832][T26012] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 649.289370][T26012] bond3: (slave ip6gre1): making interface the new active one [ 649.298614][T26012] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 649.323450][T26013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.391272][T26013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.477588][T26013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.610481][T26013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.793483][ T127] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.861575][ T127] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.035938][T13509] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.059132][T13509] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.136725][T26060] dummy0: entered promiscuous mode [ 650.178638][T26060] dummy0: left promiscuous mode [ 651.028196][T26104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 651.404003][T26120] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3726'. [ 651.648194][T26133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 651.683050][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3730'. [ 651.820724][T26145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'. [ 652.124838][T26153] tipc: Enabling of bearer rejected, already enabled [ 652.161898][T26153] netlink: 'syz.3.3736': attribute type 29 has an invalid length. [ 652.187679][T26153] netlink: 'syz.3.3736': attribute type 29 has an invalid length. [ 652.209796][T26153] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3736'. [ 652.340693][T26162] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3738'. [ 653.657657][T26217] tipc: Started in network mode [ 653.663948][T26217] tipc: Node identity 7fffffff, cluster identity 4711 [ 653.675145][T26217] tipc: Node number set to 2147483647 [ 653.777477][T26228] netlink: 'syz.0.3752': attribute type 62 has an invalid length. [ 653.988812][T26243] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 654.020698][T26243] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3755'. [ 654.168824][T26248] netlink: 'syz.2.3756': attribute type 2 has an invalid length. [ 654.186641][T26248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3756'. [ 654.213575][T26247] netlink: 'syz.2.3756': attribute type 2 has an invalid length. [ 654.243001][T26251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 654.357074][T26261] syz_tun: entered allmulticast mode [ 654.404279][T26261] syz_tun: left allmulticast mode [ 654.445550][T26266] netlink: 'syz.4.3760': attribute type 1 has an invalid length. [ 654.502527][T26266] erspan1: entered allmulticast mode [ 655.565144][T26306] netlink: 'syz.2.3768': attribute type 6 has an invalid length. [ 656.138241][T26341] __nla_validate_parse: 5 callbacks suppressed [ 656.138264][T26341] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3773'. [ 656.168447][T26341] tunl0: Caught tx_queue_len zero misconfig [ 656.286101][T26341] netlink: 'syz.1.3773': attribute type 13 has an invalid length. [ 656.708639][T26358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 656.746636][T26368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3776'. [ 656.923282][T26379] netlink: 'syz.4.3776': attribute type 1 has an invalid length. [ 656.963664][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 657.134389][T26391] ipvlan2: entered allmulticast mode [ 657.140583][T26391] veth0_vlan: entered allmulticast mode [ 657.283264][T26403] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 657.302846][T26403] netlink: 'syz.3.3785': attribute type 4 has an invalid length. [ 657.317451][T26403] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3785'. [ 657.604193][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.613786][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.627518][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.637198][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.656198][T26358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.679988][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'. [ 659.889054][T26423] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 659.904883][T26425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3790'. [ 659.975273][T26430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.078752][T26439] lo: Caught tx_queue_len zero misconfig [ 660.102249][T26439] tbf_change: 32 callbacks suppressed [ 660.102270][T26439] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 660.126259][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 660.152619][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 660.172562][T26433] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3794'. [ 660.387233][T26450] lo speed is unknown, defaulting to 1000 [ 661.028910][T26491] sctp: [Deprecated]: syz.4.3805 (pid 26491) Use of int in maxseg socket option. [ 661.028910][T26491] Use struct sctp_assoc_value instead [ 661.199997][T26502] __nla_validate_parse: 3 callbacks suppressed [ 661.200023][T26502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 661.319969][T26509] bond4: Removing last ns target with arp_interval on [ 661.453655][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'. [ 661.494311][T26517] netlink: 'syz.0.3812': attribute type 5 has an invalid length. [ 661.545227][T26507] vlan2: entered promiscuous mode [ 661.586448][T26507] bridge0: entered promiscuous mode [ 661.976431][T26527] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 662.169783][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'. [ 662.193712][T26533] netlink: 'syz.3.3814': attribute type 1 has an invalid length. [ 662.258801][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 662.292684][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3815'. [ 662.306753][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3815'. [ 662.361011][T26529] bond5: option resend_igmp: invalid value (2878) [ 662.369112][T26529] bond5: option resend_igmp: allowed values 0 - 255 [ 662.383235][T26529] bond5 (unregistering): Released all slaves [ 662.825917][T26555] vlan2: entered allmulticast mode [ 662.843214][T26555] team0: entered allmulticast mode [ 663.107625][T26580] netlink: 'syz.2.3825': attribute type 3 has an invalid length. [ 664.295298][T26635] vlan1: entered promiscuous mode [ 664.314588][T26635] bridge0: entered promiscuous mode [ 664.721521][ T42] IPVS: starting estimator thread 0... [ 664.758089][T26664] syzkaller0: entered promiscuous mode [ 664.763993][T26664] syzkaller0: entered allmulticast mode [ 664.843193][T26668] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 664.855453][T26660] IPVS: using max 29 ests per chain, 69600 per kthread [ 664.928238][T26663] geneve2: entered promiscuous mode [ 664.956158][T26663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 665.094927][T26674] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 665.117747][T26674] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 665.177497][T26674] bond2: (slave vxcan3): making interface the new active one [ 665.200654][T26674] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 665.421124][T26688] netlink: 'syz.0.3851': attribute type 6 has an invalid length. [ 665.467711][T26688] net veth1_virt_wifi : renamed from virt_wifi0 [ 665.665147][T26701] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3855'. [ 666.319873][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3860'. [ 666.329496][T26728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'. [ 666.355514][T26732] netlink: 'syz.1.3862': attribute type 3 has an invalid length. [ 666.381730][T26735] netlink: 'syz.4.3860': attribute type 4 has an invalid length. [ 666.424927][T26735] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3860'. [ 666.579250][T26735] wlan1: mtu less than device minimum [ 666.868354][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3866'. [ 667.222467][T26755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3867'. [ 667.303085][T26758] netlink: 'syz.3.3868': attribute type 33 has an invalid length. [ 667.344992][T26758] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3868'. [ 667.433923][T26758] xt_l2tp: wrong L2TP version: 0 [ 667.688501][T26766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.761784][T26772] bond_slave_0: entered promiscuous mode [ 667.768033][T26772] bond_slave_1: entered promiscuous mode [ 667.775273][T26772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.786706][T26772] bond1: (slave macvlan2): making interface the new active one [ 667.798023][T26772] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 668.226975][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 668.401121][T26784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3875'. [ 668.712502][T26815] bridge5: entered promiscuous mode [ 668.739948][T26815] bridge5: entered allmulticast mode [ 669.122649][T26827] netlink: 'syz.0.3880': attribute type 4 has an invalid length. [ 669.704741][T26861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 669.733434][T26857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 669.909040][T26869] : renamed from bond_slave_0 [ 669.938474][T26867] tap0: tun_chr_ioctl cmd 1074025680 [ 670.121744][T26881] syzkaller0: entered promiscuous mode [ 670.148308][T26881] syzkaller0: entered allmulticast mode [ 670.301099][T26884] lo speed is unknown, defaulting to 1000 [ 670.367309][T26899] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20001 [ 670.654824][ C0] ip6_tunnel: syzkaller0 xmit: Local address not yet configured! [ 671.007994][T26924] syzkaller0: entered promiscuous mode [ 671.024968][T26924] syzkaller0: entered allmulticast mode [ 671.098757][T26930] tipc: Started in network mode [ 671.112106][T26930] tipc: Node identity c27b7ca6864b, cluster identity 4711 [ 671.138916][T26930] tipc: Enabled bearer , priority 0 [ 671.198509][T26927] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 671.211070][T26927] bond3 (unregistering): Released all slaves [ 671.261776][T26930] tipc: Resetting bearer [ 671.352556][T26930] tipc: Disabling bearer [ 671.389020][T26939] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 671.412004][T26939] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 671.821867][T26956] __nla_validate_parse: 2 callbacks suppressed [ 671.821892][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 672.001468][T18228] lec:lec_start_xmit: lec0:No lecd attached [ 672.107905][T26970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3915'. [ 672.136661][T26972] veth1_to_bond: entered allmulticast mode [ 672.143756][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 672.408476][T26969] veth1_to_bond: left allmulticast mode [ 672.472493][T26998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3923'. [ 672.530415][T26998] vlan1: entered allmulticast mode [ 672.544261][T26998] gretap0: entered allmulticast mode [ 672.781232][T27008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3925'. [ 672.938524][T27025] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3930'. [ 673.018552][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 673.029816][T27028] netlink: 'syz.1.3931': attribute type 4 has an invalid length. [ 673.069160][T27036] netlink: 'syz.1.3931': attribute type 4 has an invalid length. [ 673.153495][T27025] batadv0: entered promiscuous mode [ 673.240301][T27025] vlan2: entered promiscuous mode [ 673.282586][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3933'. [ 673.368358][T27050] openvswitch: netlink: Actions may not be safe on all matching packets [ 673.782334][T27075] lo speed is unknown, defaulting to 1000 [ 673.828017][T27061] syzkaller1: entered promiscuous mode [ 673.833566][T27061] syzkaller1: entered allmulticast mode [ 674.659563][T27123] netlink: 'syz.4.3953': attribute type 1 has an invalid length. [ 674.741090][T27123] bond3: entered promiscuous mode [ 674.747550][T27123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.830675][T27123] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 674.854041][T27135] openvswitch: netlink: Message has 4096 unknown bytes. [ 674.881663][T27123] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 674.920914][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'. [ 674.926923][T27123] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 674.962849][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'. [ 675.081537][T27123] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 675.125299][T27123] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 675.739527][T27168] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 675.803472][T27168] bond4 (unregistering): Released all slaves [ 677.134499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 677.142607][ C0] lec:lec_tx_timeout: lec0 [ 677.288355][T27256] netlink: 'syz.4.3986': attribute type 30 has an invalid length. [ 677.307616][T27256] __nla_validate_parse: 5 callbacks suppressed [ 677.307638][T27256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3986'. [ 677.402772][T27256] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 677.420972][T27256] bond4 (unregistering): Released all slaves [ 677.562948][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3987'. [ 677.617431][T27264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3987'. [ 677.684652][T27272] netlink: 'syz.1.3988': attribute type 21 has an invalid length. [ 677.718643][T27244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3982'. [ 677.740714][T27272] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.756091][T27244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3982'. [ 677.897660][T27272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.905039][T27272] IPv6: NLM_F_CREATE should be set when creating new route [ 677.912320][T27272] IPv6: NLM_F_CREATE should be set when creating new route [ 677.919615][T27272] IPv6: NLM_F_CREATE should be set when creating new route [ 677.958342][T27277] smc: net device wlan0 applied user defined pnetid SYZ0 [ 678.648656][T27301] tipc: Enabled bearer , priority 0 [ 678.662173][T27301] syzkaller0: entered promiscuous mode [ 678.674682][T27301] syzkaller0: entered allmulticast mode [ 678.713437][T27300] delete_channel: no stack [ 678.837178][T27299] tipc: Resetting bearer [ 679.009624][T27299] tipc: Disabling bearer [ 679.029135][T27328] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3999'. [ 679.038761][T27328] netlink: 'syz.2.3999': attribute type 9 has an invalid length. [ 679.064279][T27327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4000'. [ 679.075764][T13509] bond0: (slave 30): interface is now down [ 679.080358][T27323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.094643][T27328] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3999'. [ 679.104085][T13509] bond0: (slave bond_slave_1): interface is now down [ 679.107968][T27325] dummy0: Caught tx_queue_len zero misconfig [ 679.117781][T13509] bond0: (slave dummy0): interface is now down [ 679.168328][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 679.274657][ T49] bond0: (slave 30): interface is now down [ 679.282100][ T49] bond0: (slave bond_slave_1): interface is now down [ 679.293819][T27337] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 679.297753][ T49] bond0: (slave dummy0): interface is now down [ 679.339162][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 679.340458][ T49] bond0: now running without any active interface! [ 679.762579][T27366] vlan1: entered promiscuous mode [ 679.773778][T27366] bond0: entered promiscuous mode [ 679.872625][T27363] lo speed is unknown, defaulting to 1000 [ 681.491298][T13509] bond1 (unregistering): (slave bridge2): Releasing active interface [ 681.573204][T13509] bond1 (unregistering): (slave bridge3): Releasing active interface [ 681.959535][T13509] bond0 (unregistering): Released all slaves [ 681.970706][T13509] bond1 (unregistering): Released all slaves [ 681.988094][T13509] bond2 (unregistering): (slave bond3): Releasing backup interface [ 682.003413][T13509] bond2 (unregistering): Released all slaves [ 682.019754][T13509] bond3 (unregistering): Released all slaves [ 682.035849][T13509] bond4 (unregistering): Released all slaves [ 682.053070][T13509] bond5 (unregistering): Released all slaves [ 682.074214][T13509] bond6 (unregistering): Released all slaves [ 682.174702][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 682.335669][T13509] !9: left promiscuous mode [ 682.421577][T27443] netlink: 'syz.2.4026': attribute type 10 has an invalid length. [ 682.454867][T27443] __nla_validate_parse: 9 callbacks suppressed [ 682.454888][T27443] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4026'. [ 682.574094][T13509] tipc: Disabling bearer [ 682.614964][T13509] tipc: Disabling bearer [ 682.653147][T13509] tipc: Left network mode [ 682.783272][T27443] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 683.189339][T27475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 683.235836][T27478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4030'. [ 683.349364][T27484] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 683.757868][T27475] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 683.882489][T27507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4037'. [ 683.908052][T27484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 683.991714][T27490] veth3: entered promiscuous mode [ 684.032428][T27490] bond4: (slave veth3): Enslaving as an active interface with an up link [ 684.037669][T27510] delete_channel: no stack [ 684.300665][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 684.344733][T27529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4039'. [ 684.830762][T27529] geneve2: entered promiscuous mode [ 684.849497][T27529] geneve2: entered allmulticast mode [ 684.974000][T27542] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 685.058886][T27545] set match dimension is over the limit! [ 685.096232][T13509] batman_adv: batadv0: Removing interface: wlan1 [ 685.318040][T27555] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 685.357799][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'. [ 685.518001][T27560] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 685.579134][T27560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4047'. [ 685.778150][T13509] hsr_slave_0: left promiscuous mode [ 685.813502][T13509] hsr_slave_1: left promiscuous mode [ 686.023178][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 687.256000][T27609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'. [ 687.319049][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4059'. [ 687.570223][T27627] netlink: 'syz.1.4062': attribute type 58 has an invalid length. [ 687.640529][T27627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4062'. [ 687.856222][T27631] lo speed is unknown, defaulting to 1000 [ 688.122849][T13509] IPVS: stop unused estimator thread 0... [ 688.534368][T27659] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 688.798868][T27671] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4070'. [ 688.854055][T27671] tipc: Enabled bearer , priority 14 [ 688.862290][T27671] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4070'. [ 688.872202][T27671] 0X: renamed from caif0 [ 688.883288][T27671] tipc: Disabling bearer [ 688.929892][T27671] 0X: entered allmulticast mode [ 688.943760][T27671] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 689.293504][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 689.997145][T27706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 690.363228][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 690.570237][T27747] lo speed is unknown, defaulting to 1000 [ 690.610964][T27754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4090'. [ 690.633216][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 690.702533][T27749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.972769][T27754] bond4: option min_links: invalid value (18446744073709551612) [ 690.981000][T27754] bond4: option min_links: allowed values 0 - 2147483647 [ 691.041544][T27754] bond4 (unregistering): Released all slaves [ 691.135125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.143210][ C0] lec:lec_tx_timeout: lec0 [ 691.361586][T27774] netlink: 'syz.2.4092': attribute type 3 has an invalid length. [ 691.634040][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4097'. [ 691.665848][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4097'. [ 691.879794][T27803] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 692.060904][T27803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 692.142357][T27803] netlink: 'syz.2.4099': attribute type 10 has an invalid length. [ 692.179324][T27810] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 692.262145][T27810] bond8: (slave batadv1): making interface the new active one [ 692.301259][T27810] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 692.359717][T27818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.529280][T27825] sctp: [Deprecated]: syz.1.4104 (pid 27825) Use of int in max_burst socket option deprecated. [ 692.529280][T27825] Use struct sctp_assoc_value instead [ 692.634908][T27822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 692.674595][T27822] team0: Port device bond2 added [ 692.959712][T27843] netlink: 211344 bytes leftover after parsing attributes in process `syz.2.4106'. [ 693.051799][T27826] syzkaller0: entered promiscuous mode [ 693.063176][T27826] syzkaller0: entered allmulticast mode [ 693.076847][T27828] lo speed is unknown, defaulting to 1000 [ 695.378785][T27862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4109'. [ 695.395907][T27865] m1Ie5n: entered promiscuous mode [ 695.766624][T27884] netlink: 'syz.3.4114': attribute type 1 has an invalid length. [ 695.925868][T27880] lo speed is unknown, defaulting to 1000 [ 695.982769][T27884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'. [ 696.103959][T27888] 8021q: adding VLAN 0 to HW filter on device bond6 [ 696.138237][T27888] bond5: (slave bond6): making interface the new active one [ 696.166080][T27888] bond5: (slave bond6): Enslaving as an active interface with an up link [ 696.200274][T27903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4118'. [ 696.246602][T27890] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 696.267796][T27884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 696.335775][T27895] vlan2: entered promiscuous mode [ 696.355883][T27895] bond5: entered promiscuous mode [ 696.368847][T27895] bond6: entered promiscuous mode [ 696.458191][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 696.793392][T27923] netlink: 'syz.2.4121': attribute type 2 has an invalid length. [ 696.805810][T27923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4121'. [ 696.876928][T27929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4123'. [ 696.982781][T27925] lo speed is unknown, defaulting to 1000 [ 696.997063][T27923] lo speed is unknown, defaulting to 1000 [ 696.997104][T27929] netlink: 'syz.3.4123': attribute type 1 has an invalid length. [ 697.253631][T27936] netlink: 'syz.0.4124': attribute type 39 has an invalid length. [ 697.726715][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4127'. [ 698.192020][T27968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4130'. [ 698.261044][T27979] netlink: 'syz.3.4131': attribute type 4 has an invalid length. [ 698.416023][T27989] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4133'. [ 698.473298][T27989] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 698.582340][T27993] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 699.017802][T28005] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4138'. [ 699.319641][T28015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4142'. [ 699.602353][T28016] lo speed is unknown, defaulting to 1000 [ 700.010118][T28036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4147'. [ 700.059210][T28036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4147'. [ 700.344242][T28056] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4150'. [ 700.428639][T28038] siw: device registration error -23 [ 700.436872][T28041] siw: device registration error -23 [ 700.462624][T28059] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4151'. [ 700.622121][T28069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 700.647971][T28070] netlink: 'syz.4.4154': attribute type 10 has an invalid length. [ 700.687990][T28070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4154'. [ 700.732177][T28070] dummy0: entered promiscuous mode [ 700.744195][T28070] bridge0: port 1(dummy0) entered blocking state [ 700.774985][T28070] bridge0: port 1(dummy0) entered disabled state [ 700.781684][T28070] dummy0: entered allmulticast mode [ 700.802397][T28070] bridge0: port 1(dummy0) entered blocking state [ 700.809046][T28070] bridge0: port 1(dummy0) entered forwarding state [ 701.007267][T28087] lo speed is unknown, defaulting to 1000 [ 701.037867][T28087] lo speed is unknown, defaulting to 1000 [ 701.078797][T28087] lo speed is unknown, defaulting to 1000 [ 701.162801][T28090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.232017][T28090] netlink: 'syz.0.4160': attribute type 15 has an invalid length. [ 701.460387][ T29] audit: type=1800 audit(1772290442.272:9): pid=28098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4162" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1735 res=0 errno=0 [ 701.753538][T28112] geneve2: entered promiscuous mode [ 701.820568][T28100] lo speed is unknown, defaulting to 1000 [ 701.984281][T28116] syzkaller0: entered promiscuous mode [ 702.000623][T28116] syzkaller0: entered allmulticast mode [ 702.542097][T28087] infiniband syz0: set active [ 702.547460][T28087] infiniband syz0: added lo [ 702.555168][T28087] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 702.570442][T28087] infiniband syz0: Couldn't open port 1 [ 702.682274][T28087] RDS/IB: syz0: added [ 702.687144][T28087] smc: adding ib device syz0 with port count 1 [ 702.693720][T28087] smc: ib device syz0 port 1 has no pnetid [ 704.349927][T28138] __nla_validate_parse: 5 callbacks suppressed [ 704.350147][T28138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4166'. [ 704.369248][T28140] tipc: Started in network mode [ 704.374186][T28140] tipc: Node identity 080211, cluster identity 4711 [ 704.382378][T28140] tipc: Enabled bearer , priority 0 [ 704.391032][ T5903] lo speed is unknown, defaulting to 1000 [ 704.424947][T28145] tipc: Resetting bearer [ 704.431476][ T6564] lo speed is unknown, defaulting to 1000 [ 704.462505][T28148] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4168'. [ 704.479748][T28087] lo speed is unknown, defaulting to 1000 [ 704.484059][T28148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'. [ 704.537956][T28148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4168'. [ 704.633134][T28153] sctp: [Deprecated]: syz.4.4169 (pid 28153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.633134][T28153] Use struct sctp_sack_info instead [ 704.829804][ T1135] nci: nci_rx_work: unknown MT 0x7 [ 704.900472][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 705.006923][T28087] lo speed is unknown, defaulting to 1000 [ 705.404629][ T5967] tipc: Node number set to 134353152 [ 705.491811][T28087] lo speed is unknown, defaulting to 1000 [ 705.839087][T28087] lo speed is unknown, defaulting to 1000 [ 706.007499][T28087] lo speed is unknown, defaulting to 1000 [ 706.171460][T28087] lo speed is unknown, defaulting to 1000 [ 706.331589][T28087] lo speed is unknown, defaulting to 1000 [ 706.486320][T28087] lo speed is unknown, defaulting to 1000 [ 707.568508][T28153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.987461][T28227] lo speed is unknown, defaulting to 1000 [ 708.012153][T28222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4185'. [ 708.112241][T28236] openvswitch: netlink: IP tunnel dst address not specified [ 708.345573][T28227] lo speed is unknown, defaulting to 1000 [ 708.965507][T28288] Cannot find add_set index 2 as target [ 708.974112][T28288] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 708.985979][T28288] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4199'. [ 709.020442][T28283] netem: change failed [ 709.070182][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 709.094596][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 709.259105][T28298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 709.576319][T28302] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 709.785658][T28302] bond5: (slave lo): Enslaving as an active interface with an up link [ 709.804970][T28302] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 710.002325][T28300] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 710.040149][T28300] bond6 (unregistering): Released all slaves [ 710.342813][T28343] IPVS: set_ctl: invalid protocol: 59 172.20.20.66:20002 [ 710.578119][T28350] netlink: 'syz.2.4208': attribute type 10 has an invalid length. [ 710.609496][T28350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4208'. [ 710.652361][T28354] netlink: 'syz.4.4209': attribute type 5 has an invalid length. [ 710.738682][T28353] netlink: 'syz.2.4208': attribute type 14 has an invalid length. [ 711.019350][T28369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4212'. [ 711.270358][T28381] netlink: 'syz.4.4216': attribute type 1 has an invalid length. [ 711.318991][T28381] netlink: 'syz.4.4216': attribute type 1 has an invalid length. [ 711.328140][T28381] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4216'. [ 711.555024][T28407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4219'. [ 712.659498][T28413] lo speed is unknown, defaulting to 1000 [ 712.815846][T28435] bond3 (unregistering): Released all slaves [ 712.877460][T28434] bond3 (unregistering): Released all slaves [ 712.929264][T28442] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4226'. [ 712.940179][T28442] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4226'. [ 713.091580][T28451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4228'. [ 713.189432][T28454] bond9: option arp_interval: invalid value (18446744073709551615) [ 713.210634][T28454] bond9: option arp_interval: allowed values 0 - 2147483647 [ 713.221052][T28454] bond9 (unregistering): Released all slaves [ 713.259204][T28413] lo speed is unknown, defaulting to 1000 [ 713.388224][T28465] netlink: 'syz.1.4232': attribute type 4 has an invalid length. [ 713.430892][T28465] netlink: 'syz.1.4232': attribute type 4 has an invalid length. [ 713.607691][T28479] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 713.643068][T28479] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4236'. [ 713.872324][T28492] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4238'. [ 714.005728][T28496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.017476][T28495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.065523][T28506] syzkaller1: entered promiscuous mode [ 714.081389][T28506] syzkaller1: entered allmulticast mode [ 714.145745][T28515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4242'. [ 715.275531][T28573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.689070][T28579] __nla_validate_parse: 1 callbacks suppressed [ 715.689089][T28579] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4257'. [ 715.742193][T28582] netdevsim0: mtu less than device minimum [ 715.779548][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'. [ 715.791116][T28580] tipc: Enabled bearer , priority 0 [ 715.834544][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'. [ 715.915626][T28582] team0: entered promiscuous mode [ 715.920783][T28582] team0: entered allmulticast mode [ 715.975403][T28582] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.210482][T28585] team1: entered promiscuous mode [ 716.236552][T28585] team1: entered allmulticast mode [ 716.268554][T28585] 8021q: adding VLAN 0 to HW filter on device team1 [ 716.328146][T28591] tipc: Resetting bearer [ 716.392339][T28578] tipc: Disabling bearer [ 716.492331][T28604] can: request_module (can-proto-3) failed. [ 716.666122][T28617] lo speed is unknown, defaulting to 1000 [ 716.885711][T28617] lo speed is unknown, defaulting to 1000 [ 717.048883][T28633] netlink: 'syz.3.4267': attribute type 1 has an invalid length. [ 717.077639][T28633] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4267'. [ 717.365366][T28637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4268'. [ 717.389838][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'. [ 717.783419][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'. [ 717.788278][T28661] sit2: entered promiscuous mode [ 717.919846][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'. [ 717.929327][T28652] lo speed is unknown, defaulting to 1000 [ 717.984937][T28669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4277'. [ 718.012094][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'. [ 718.100624][T28675] 8021q: VLANs not supported on vxcan0 [ 718.199437][T28675] : entered promiscuous mode [ 718.271580][T28652] lo speed is unknown, defaulting to 1000 [ 718.417875][T28677] lo speed is unknown, defaulting to 1000 [ 718.556302][T28698] ipt_ECN: cannot use operation on non-tcp rule [ 719.017911][T28713] vlan2: entered promiscuous mode [ 719.023034][T28713] geneve1: entered promiscuous mode [ 719.085184][T28713] vlan2: entered allmulticast mode [ 719.111618][T28713] geneve1: entered allmulticast mode [ 719.300716][T28715] bond5: Removing last arp target with arp_interval on [ 719.507618][T28714] bond6: Removing last arp target with arp_interval on [ 719.637536][T28729] netlink: 'syz.4.4289': attribute type 1 has an invalid length. [ 719.645759][T28730] netlink: 'syz.4.4289': attribute type 1 has an invalid length. [ 719.664974][T28677] lo speed is unknown, defaulting to 1000 [ 719.712029][T28730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.769692][T28732] bond7: (slave geneve3): making interface the new active one [ 719.789028][T28732] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 720.294365][T28747] netlink: 'syz.2.4291': attribute type 11 has an invalid length. [ 720.756131][T28760] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 720.966277][T28773] __nla_validate_parse: 2 callbacks suppressed [ 720.966299][T28773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4297'. [ 721.277154][T28781] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 721.287273][T28782] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4299'. [ 721.428042][T28781] bond9: entered promiscuous mode [ 721.439565][T28789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4299'. [ 721.451516][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 721.463180][T28789] netlink: 'syz.3.4299': attribute type 7 has an invalid length. [ 721.473605][T28781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 721.486225][T28789] netlink: 'syz.3.4299': attribute type 8 has an invalid length. [ 721.513143][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'. [ 721.550118][T28790] 8021q: adding VLAN 0 to HW filter on device bond9 [ 721.557787][T28790] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 721.579367][T28790] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 721.593382][T28790] bond9: (slave vcan0): making interface the new active one [ 721.601297][T28790] vcan0: entered promiscuous mode [ 721.609987][T28790] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 721.619681][T28785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4299'. [ 721.949892][T28811] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 722.136820][T28822] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 722.440999][T28841] netlink: 'syz.0.4313': attribute type 2 has an invalid length. [ 722.715536][T28850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.807376][T28860] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 722.824872][T28862] tunl0: Caught tx_queue_len zero misconfig [ 722.860473][T28846] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 722.869045][T28857] lo speed is unknown, defaulting to 1000 [ 722.921420][T28850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.018873][T28868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4318'. [ 723.033286][T28850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.077761][T28869] netlink: 'syz.1.4318': attribute type 1 has an invalid length. [ 723.085971][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4318'. [ 723.245546][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'. [ 723.266367][T28857] lo speed is unknown, defaulting to 1000 [ 723.363767][T28850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.467302][T28880] netlink: 'syz.2.4321': attribute type 11 has an invalid length. [ 723.602881][T28883] lo speed is unknown, defaulting to 1000 [ 723.641866][T28888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4323'. [ 723.658726][ T127] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.923621][T13509] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.979048][T13509] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.997093][T28907] syzkaller1: entered promiscuous mode [ 724.007231][T28907] syzkaller1: entered allmulticast mode [ 724.082863][ T127] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.365633][T28927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.438130][T28926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.760530][T28883] lo speed is unknown, defaulting to 1000 [ 725.649011][T28976] netlink: 'syz.4.4340': attribute type 33 has an invalid length. [ 725.658388][T28976] `: renamed from team0 (while UP) [ 726.222453][T29006] delete_channel: no stack [ 726.242759][T29000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.411083][T29000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.525762][T29000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.643186][T29000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.666891][T29022] tap0: tun_chr_ioctl cmd 2147767507 [ 726.928744][T29034] __nla_validate_parse: 38 callbacks suppressed [ 726.928768][T29034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 726.987516][T29035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4352'. [ 727.333996][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081755400: rx timeout, send abort [ 727.350619][T13509] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.423230][ T127] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.471968][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.514180][ T127] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.607144][T29054] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.702163][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 727.834315][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081755000: rx timeout, send abort [ 727.843967][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081755400: abort rx timeout. Force session deactivation [ 727.889640][T29066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4360'. [ 728.123563][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.132141][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.143549][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.160832][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.256455][T29100] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.342793][ C0] vcan0: j1939_tp_rxtimer: 0xffff888081755000: abort rx timeout. Force session deactivation [ 728.369139][T29108] xt_TCPMSS: Only works on TCP SYN packets [ 728.416159][T29110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'. [ 730.146700][T29040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.329014][T29117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4372'. [ 730.523689][T29122] lo speed is unknown, defaulting to 1000 [ 731.108648][T29127] bridge0: port 1(dummy0) entered disabled state [ 732.288868][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 732.299327][T29135] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4376'. [ 732.310608][T29122] lo speed is unknown, defaulting to 1000 [ 732.405171][ T127] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.429205][ T127] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.455952][ T127] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.475021][ T127] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.507571][T29164] sctp: [Deprecated]: syz.1.4380 (pid 29164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.507571][T29164] Use struct sctp_sack_info instead [ 732.537439][T29164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4380'. [ 732.578532][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 732.694124][T29170] SET target dimension over the limit! [ 732.924789][ T6569] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 732.940551][T29179] FAULT_INJECTION: forcing a failure. [ 732.940551][T29179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.955224][T29179] CPU: 0 UID: 0 PID: 29179 Comm: syz.2.4385 Not tainted syzkaller #0 PREEMPT(full) [ 732.955254][T29179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.955268][T29179] Call Trace: [ 732.955277][T29179] [ 732.955286][T29179] dump_stack_lvl+0xe8/0x150 [ 732.955322][T29179] should_fail_ex+0x412/0x560 [ 732.955353][T29179] _copy_to_user+0x31/0xb0 [ 732.955387][T29179] simple_read_from_buffer+0xe1/0x170 [ 732.955421][T29179] proc_fail_nth_read+0x1bb/0x230 [ 732.955453][T29179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.955485][T29179] ? rw_verify_area+0x2a6/0x4d0 [ 732.955504][T29179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.955535][T29179] vfs_read+0x20c/0xa70 [ 732.955563][T29179] ? fdget_pos+0x246/0x320 [ 732.955598][T29179] ? __pfx___mutex_lock+0x10/0x10 [ 732.955630][T29179] ? __pfx_vfs_read+0x10/0x10 [ 732.955653][T29179] ? __fget_files+0x2a/0x420 [ 732.955687][T29179] ? __fget_files+0x3a0/0x420 [ 732.955716][T29179] ? __fget_files+0x2a/0x420 [ 732.955755][T29179] ksys_read+0x150/0x270 [ 732.955778][T29179] ? __pfx_ksys_read+0x10/0x10 [ 732.955810][T29179] do_syscall_64+0x14d/0xf80 [ 732.955837][T29179] ? trace_irq_disable+0x3b/0x150 [ 732.955867][T29179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.955888][T29179] ? clear_bhb_loop+0x40/0x90 [ 732.955914][T29179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.955935][T29179] RIP: 0033:0x7f3ebc75cfce [ 732.955956][T29179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 732.955975][T29179] RSP: 002b:00007f3ebd698fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.955998][T29179] RAX: ffffffffffffffda RBX: 00007f3ebd6996c0 RCX: 00007f3ebc75cfce [ 732.956014][T29179] RDX: 000000000000000f RSI: 00007f3ebd6990a0 RDI: 0000000000000008 [ 732.956027][T29179] RBP: 00007f3ebd699090 R08: 0000000000000000 R09: 0000000000000000 [ 732.956040][T29179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.956053][T29179] R13: 00007f3ebca16038 R14: 00007f3ebca15fa0 R15: 00007fff416c4608 [ 732.956092][T29179] [ 733.362255][T29184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4386'. [ 733.372761][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 733.382922][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4386'. [ 733.420720][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 733.461323][T29191] netlink: 'syz.0.4386': attribute type 1 has an invalid length. [ 733.469996][ T127] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 733.528463][T29191] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4386'. [ 733.775627][ T5976] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 733.817254][T29202] bridge0: entered allmulticast mode [ 734.495432][ T127] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 734.505527][ T127] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 734.561835][T29229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4396'. [ 734.914109][T29253] syzkaller1: entered promiscuous mode [ 734.925087][ T6566] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 734.932581][T29253] syzkaller1: entered allmulticast mode [ 735.185642][T29253] lo speed is unknown, defaulting to 1000 [ 735.236019][T29271] netlink: 'syz.1.4404': attribute type 2 has an invalid length. [ 735.582296][T29253] lo speed is unknown, defaulting to 1000 [ 735.591506][T29285] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 735.664285][T29289] netlink: 'syz.4.4410': attribute type 2 has an invalid length. [ 735.676083][T29293] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4409'. [ 735.737593][T29289] : entered promiscuous mode [ 735.791475][T29289] netlink: 'syz.4.4410': attribute type 2 has an invalid length. [ 735.819154][T29289] : left promiscuous mode [ 736.065584][T29301] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 736.316297][T18228] lec:lec_start_xmit: lec0:No lecd attached [ 736.717980][T29338] tipc: Resetting bearer [ 737.788422][T29384] __nla_validate_parse: 3 callbacks suppressed [ 737.788447][T29384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4432'. [ 737.967622][T29384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.165820][T29404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 738.190305][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4436'. [ 738.381809][T29421] syzkaller0: entered promiscuous mode [ 738.399200][T29421] syzkaller0: entered allmulticast mode [ 738.461728][T29425] bridge0: entered allmulticast mode [ 738.504805][T29425] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 738.814765][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 738.870155][T29436] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.878153][T29436] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.882919][T29440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4446'. [ 738.915371][T29436] bridge0: entered allmulticast mode [ 738.930641][T29436] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 739.037338][T29447] sctp: [Deprecated]: syz.4.4447 (pid 29447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.037338][T29447] Use struct sctp_sack_info instead [ 739.109723][T29447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4447'. [ 739.242670][T29461] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4449'. [ 739.268164][T29461] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4449'. [ 739.297017][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4450'. [ 739.443547][T29475] netlink: 'syz.1.4454': attribute type 12 has an invalid length. [ 739.471641][T29479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 739.597689][T29486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4456'. [ 739.835285][T29500] netlink: 'syz.3.4459': attribute type 12 has an invalid length. [ 740.263057][T29524] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 740.461064][T29539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.486067][T29539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.547447][T29539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.586453][T29539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.930882][T29558] hsr0: entered promiscuous mode [ 741.004214][T29558] hsr0: left promiscuous mode [ 741.731494][T29575] syzkaller0: entered promiscuous mode [ 741.737320][T29575] syzkaller0: entered allmulticast mode [ 742.005604][T29599] rdma_rxe: rxe_newlink: failed to add bond0 [ 742.094461][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 742.102637][ C0] lec:lec_tx_timeout: lec0 [ 742.365072][T29608] SET target dimension over the limit! [ 743.615409][T29637] netlink: 'syz.3.4477': attribute type 1 has an invalid length. [ 745.196952][T29610] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.204509][T29610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.212161][T29610] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.219402][T29610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.262309][T29610] bridge0: left allmulticast mode [ 745.296295][T29610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.325943][T29637] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 745.356703][T29649] __nla_validate_parse: 4 callbacks suppressed [ 745.356728][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 745.650503][T29658] xt_hashlimit: size too large, truncated to 1048576 [ 745.706049][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4481'. [ 745.785617][T29670] IPVS: Unknown mcast interface: pim6reg0 [ 745.793898][T29671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 745.890915][T29676] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4485'. [ 746.080180][T29685] netlink: 'syz.0.4485': attribute type 11 has an invalid length. [ 746.116785][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 746.280972][T29690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.329880][T29695] "syz.1.4490" (29695) uses obsolete ecb(arc4) skcipher [ 746.455745][T29703] netlink: 210652 bytes leftover after parsing attributes in process `syz.2.4493'. [ 746.686303][T29714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4497'. [ 746.732612][T29714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4497'. [ 747.037674][T29740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 747.305392][T29759] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 747.460729][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 747.468738][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.626480][T29778] bond7: Unable to set down delay as MII monitoring is disabled [ 747.684185][T29778] bond7 (unregistering): Released all slaves [ 747.772228][T29765] lo speed is unknown, defaulting to 1000 [ 748.025082][T29794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4510'. [ 748.404397][T29818] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 748.424894][ T6566] syzkaller1: tun_net_xmit 90 [ 748.436615][T29818] syzkaller1: Linktype set failed because interface is up [ 748.547808][T29815] lo speed is unknown, defaulting to 1000 [ 748.610651][T29765] lo speed is unknown, defaulting to 1000 [ 748.687151][T29831] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 748.935194][T29838] x_tables: duplicate entry at hook 1 [ 748.958615][ T5976] syzkaller1: tun_net_xmit 90 [ 748.967219][T29841] netlink: 'syz.2.4523': attribute type 9 has an invalid length. [ 748.984613][T29841] netlink: 'syz.2.4523': attribute type 11 has an invalid length. [ 748.992658][T29841] netlink: 'syz.2.4523': attribute type 12 has an invalid length. [ 749.028857][T29841] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 749.036414][T29841] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 749.044355][T29841] tipc: Resetting bearer [ 749.171774][T29815] lo speed is unknown, defaulting to 1000 [ 749.207358][T29841] [ 749.209771][T29841] ====================================================== [ 749.216910][T29841] WARNING: possible circular locking dependency detected [ 749.223945][T29841] syzkaller #0 Not tainted [ 749.228364][T29841] ------------------------------------------------------ [ 749.235395][T29841] syz.2.4523/29841 is trying to acquire lock: [ 749.241497][T29841] ffffffff8e85e9a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 749.251126][T29841] [ 749.251126][T29841] but task is already holding lock: [ 749.258537][T29841] ffff888029ca1cf8 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 749.268982][T29841] [ 749.268982][T29841] which lock already depends on the new lock. [ 749.268982][T29841] [ 749.279509][T29841] [ 749.279509][T29841] the existing dependency chain (in reverse order) is: [ 749.288646][T29841] [ 749.288646][T29841] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 749.297318][T29841] blk_alloc_queue+0x546/0x680 [ 749.302831][T29841] __blk_mq_alloc_disk+0x197/0x390 [ 749.308613][T29841] nbd_dev_add+0x499/0xb50 [ 749.313628][T29841] nbd_genl_connect+0x962/0x1cf0 [ 749.319113][T29841] genl_family_rcv_msg_doit+0x22a/0x330 [ 749.325219][T29841] genl_rcv_msg+0x61c/0x7a0 [ 749.330353][T29841] netlink_rcv_skb+0x232/0x4b0 [ 749.335676][T29841] genl_rcv+0x28/0x40 [ 749.340208][T29841] netlink_unicast+0x80f/0x9b0 [ 749.345518][T29841] netlink_sendmsg+0x813/0xb40 [ 749.351098][T29841] ____sys_sendmsg+0xa68/0xad0 [ 749.356410][T29841] ___sys_sendmsg+0x2a5/0x360 [ 749.361646][T29841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 749.367133][T29841] do_syscall_64+0x14d/0xf80 [ 749.372272][T29841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.378703][T29841] [ 749.378703][T29841] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 749.385945][T29841] fs_reclaim_acquire+0x71/0x100 [ 749.391435][T29841] prepare_alloc_pages+0x152/0x650 [ 749.397085][T29841] __alloc_frozen_pages_noprof+0x12f/0x380 [ 749.403520][T29841] __alloc_pages_noprof+0xa/0x30 [ 749.409001][T29841] pcpu_populate_chunk+0x182/0xb30 [ 749.414747][T29841] pcpu_alloc_noprof+0xc6c/0x19c0 [ 749.420499][T29841] xt_percpu_counter_alloc+0x161/0x220 [ 749.426511][T29841] translate_table+0x1332/0x20b0 [ 749.431993][T29841] ip6t_register_table+0x11b/0x800 [ 749.437652][T29841] ip6table_raw_table_init+0x54/0x80 [ 749.443570][T29841] xt_find_table_lock+0x30c/0x3e0 [ 749.449147][T29841] xt_request_find_table_lock+0x26/0x100 [ 749.455433][T29841] do_ip6t_get_ctl+0x716/0x1230 [ 749.460854][T29841] nf_getsockopt+0x26e/0x290 [ 749.466123][T29841] ipv6_getsockopt+0x1fd/0x2b0 [ 749.471440][T29841] do_sock_getsockopt+0x2d3/0x3f0 [ 749.477010][T29841] __x64_sys_getsockopt+0x1a4/0x240 [ 749.482758][T29841] do_syscall_64+0x14d/0xf80 [ 749.487899][T29841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.494337][T29841] [ 749.494337][T29841] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 749.502193][T29841] __lock_acquire+0x15a5/0x2cf0 [ 749.507598][T29841] lock_acquire+0xf0/0x2e0 [ 749.512566][T29841] __mutex_lock+0x19f/0x1300 [ 749.517829][T29841] pcpu_alloc_noprof+0x218/0x19c0 [ 749.523415][T29841] sbitmap_init_node+0x1e1/0x640 [ 749.528902][T29841] sbitmap_queue_init_node+0x3e/0x4d0 [ 749.534825][T29841] blk_mq_init_tags+0x15c/0x2d0 [ 749.540485][T29841] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 749.546481][T29841] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 749.552927][T29841] nbd_start_device+0x17f/0xb10 [ 749.558422][T29841] nbd_genl_connect+0x165b/0x1cf0 [ 749.564003][T29841] genl_family_rcv_msg_doit+0x22a/0x330 [ 749.570099][T29841] genl_rcv_msg+0x61c/0x7a0 [ 749.575336][T29841] netlink_rcv_skb+0x232/0x4b0 [ 749.580656][T29841] genl_rcv+0x28/0x40 [ 749.585599][T29841] netlink_unicast+0x80f/0x9b0 [ 749.590903][T29841] netlink_sendmsg+0x813/0xb40 [ 749.596297][T29841] ____sys_sendmsg+0xa68/0xad0 [ 749.601609][T29841] ___sys_sendmsg+0x2a5/0x360 [ 749.606841][T29841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 749.612351][T29841] do_syscall_64+0x14d/0xf80 [ 749.617520][T29841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.623969][T29841] [ 749.623969][T29841] other info that might help us debug this: [ 749.623969][T29841] [ 749.634410][T29841] Chain exists of: [ 749.634410][T29841] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#69 [ 749.634410][T29841] [ 749.648144][T29841] Possible unsafe locking scenario: [ 749.648144][T29841] [ 749.655707][T29841] CPU0 CPU1 [ 749.661095][T29841] ---- ---- [ 749.666473][T29841] lock(&q->q_usage_counter(io)#69); [ 749.671881][T29841] lock(fs_reclaim); [ 749.678487][T29841] lock(&q->q_usage_counter(io)#69); [ 749.686438][T29841] lock(pcpu_alloc_mutex); [ 749.690996][T29841] [ 749.690996][T29841] *** DEADLOCK *** [ 749.690996][T29841] [ 749.699152][T29841] 6 locks held by syz.2.4523/29841: [ 749.704370][T29841] #0: ffffffff8fc3a770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 749.712607][T29841] #1: ffffffff8fc3a588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 749.721612][T29841] #2: ffff88808c6561d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 749.733047][T29841] #3: ffff88808c6560d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 749.744140][T29841] #4: ffff888029ca1cf8 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 749.754901][T29841] #5: ffff888029ca1d30 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 749.765949][T29841] [ 749.765949][T29841] stack backtrace: [ 749.771858][T29841] CPU: 1 UID: 0 PID: 29841 Comm: syz.2.4523 Not tainted syzkaller #0 PREEMPT(full) [ 749.771880][T29841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.771892][T29841] Call Trace: [ 749.771901][T29841] [ 749.771910][T29841] dump_stack_lvl+0xe8/0x150 [ 749.771938][T29841] print_circular_bug+0x2e1/0x300 [ 749.771969][T29841] check_noncircular+0x12e/0x150 [ 749.771999][T29841] __lock_acquire+0x15a5/0x2cf0 [ 749.772032][T29841] lock_acquire+0xf0/0x2e0 [ 749.772053][T29841] ? pcpu_alloc_noprof+0x218/0x19c0 [ 749.772076][T29841] __mutex_lock+0x19f/0x1300 [ 749.772102][T29841] ? pcpu_alloc_noprof+0x218/0x19c0 [ 749.772120][T29841] ? stack_depot_save_flags+0x3f3/0x810 [ 749.772144][T29841] ? kasan_save_track+0x4f/0x80 [ 749.772167][T29841] ? kasan_save_track+0x3e/0x80 [ 749.772182][T29841] ? pcpu_alloc_noprof+0x218/0x19c0 [ 749.772199][T29841] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 749.772216][T29841] ? blk_mq_init_tags+0x83/0x2d0 [ 749.772238][T29841] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 749.772254][T29841] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 749.772274][T29841] ? __pfx___mutex_lock+0x10/0x10 [ 749.772298][T29841] ? genl_rcv+0x28/0x40 [ 749.772322][T29841] ? ____sys_sendmsg+0xa68/0xad0 [ 749.772349][T29841] ? ___sys_sendmsg+0x2a5/0x360 [ 749.772380][T29841] pcpu_alloc_noprof+0x218/0x19c0 [ 749.772408][T29841] sbitmap_init_node+0x1e1/0x640 [ 749.772437][T29841] sbitmap_queue_init_node+0x3e/0x4d0 [ 749.772465][T29841] blk_mq_init_tags+0x15c/0x2d0 [ 749.772489][T29841] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 749.772509][T29841] ? kfree+0x1c1/0x630 [ 749.772534][T29841] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 749.772555][T29841] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 749.772582][T29841] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 749.772606][T29841] ? sysfs_add_file_mode_ns+0x259/0x300 [ 749.772631][T29841] nbd_start_device+0x17f/0xb10 [ 749.772660][T29841] ? device_create_file+0xf4/0x1b0 [ 749.772688][T29841] nbd_genl_connect+0x165b/0x1cf0 [ 749.772718][T29841] ? __pfx_nbd_genl_connect+0x10/0x10 [ 749.772744][T29841] ? rcu_is_watching+0x15/0xb0 [ 749.772774][T29841] ? __nla_parse+0x40/0x60 [ 749.772799][T29841] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 749.772831][T29841] genl_family_rcv_msg_doit+0x22a/0x330 [ 749.772862][T29841] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 749.772896][T29841] ? __lock_acquire+0x6b5/0x2cf0 [ 749.772920][T29841] genl_rcv_msg+0x61c/0x7a0 [ 749.772949][T29841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 749.772975][T29841] ? __pfx_nbd_genl_connect+0x10/0x10 [ 749.772998][T29841] ? __lock_acquire+0x6b5/0x2cf0 [ 749.773025][T29841] netlink_rcv_skb+0x232/0x4b0 [ 749.773046][T29841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 749.773073][T29841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 749.773101][T29841] ? down_read+0x272/0x2e0 [ 749.773126][T29841] ? genl_rcv+0xd/0x40 [ 749.773157][T29841] genl_rcv+0x28/0x40 [ 749.773181][T29841] netlink_unicast+0x80f/0x9b0 [ 749.773203][T29841] ? __pfx_netlink_unicast+0x10/0x10 [ 749.773222][T29841] ? netlink_sendmsg+0x650/0xb40 [ 749.773242][T29841] ? skb_put+0x11b/0x210 [ 749.773268][T29841] netlink_sendmsg+0x813/0xb40 [ 749.773293][T29841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.773315][T29841] ? aa_sock_msg_perm+0xf1/0x1b0 [ 749.773336][T29841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 749.773356][T29841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.773377][T29841] ____sys_sendmsg+0xa68/0xad0 [ 749.773403][T29841] ? futex_unqueue+0x211/0x240 [ 749.773427][T29841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.773457][T29841] ? import_iovec+0x73/0xa0 [ 749.773484][T29841] ___sys_sendmsg+0x2a5/0x360 [ 749.773512][T29841] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.773541][T29841] ? futex_wait+0x29a/0x380 [ 749.773579][T29841] ? __fget_files+0x2a/0x420 [ 749.773604][T29841] ? __fget_files+0x3a0/0x420 [ 749.773633][T29841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 749.773661][T29841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 749.773691][T29841] ? rcu_is_watching+0x15/0xb0 [ 749.773721][T29841] do_syscall_64+0x14d/0xf80 [ 749.773745][T29841] ? trace_irq_disable+0x3b/0x150 [ 749.773772][T29841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.773790][T29841] ? clear_bhb_loop+0x40/0x90 [ 749.773810][T29841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.773828][T29841] RIP: 0033:0x7f3ebc79c799 [ 749.773845][T29841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.773862][T29841] RSP: 002b:00007f3ebd699028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.773881][T29841] RAX: ffffffffffffffda RBX: 00007f3ebca15fa0 RCX: 00007f3ebc79c799 [ 749.773894][T29841] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 749.773907][T29841] RBP: 00007f3ebc832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 749.773918][T29841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.773929][T29841] R13: 00007f3ebca16038 R14: 00007f3ebca15fa0 R15: 00007fff416c4608 [ 749.773950][T29841] [ 750.286619][ T5829] block nbd3: Receive control failed (result -32) [ 750.293596][ T5829] block nbd3: Receive control failed (result -32) [ 750.336380][T29841] nbd3: detected capacity change from 0 to 127 [ 750.368350][T29724] block nbd3: Dead connection, failed to find a fallback [ 750.378216][T29724] block nbd3: shutting down sockets [ 750.383568][T29724] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.394809][T29724] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.402657][T29724] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.412299][T29724] Buffer I/O error on dev nbd3, logical block 1, async page read [ 750.420831][T29724] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.430784][T29724] Buffer I/O error on dev nbd3, logical block 2, async page read [ 750.438675][T29724] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.448246][T29724] Buffer I/O error on dev nbd3, logical block 3, async page read [ 750.456367][T29724] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.466019][T29724] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.473831][T29724] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.483580][T29724] Buffer I/O error on dev nbd3, logical block 1, async page read [ 750.491553][T29724] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.501530][T29724] Buffer I/O error on dev nbd3, logical block 2, async page read [ 750.509750][T29724] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.519354][T29724] Buffer I/O error on dev nbd3, logical block 3, async page read [ 750.527440][T29724] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.537234][T29724] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.545157][T29724] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.554946][T29724] Buffer I/O error on dev nbd3, logical block 1, async page read [ 750.563405][T29724] ldm_validate_partition_table(): Disk read failed. [ 750.570640][T29724] Dev nbd3: unable to read RDB block 0 [ 750.594690][T29724] nbd3: unable to read partition table [ 750.619051][T29724] ldm_validate_partition_table(): Disk read failed. [ 750.626276][T29724] Dev nbd3: unable to read RDB block 0 [ 750.632352][T29724] nbd3: unable to read partition table [ 750.734896][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 752.574657][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 753.134503][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.142840][ C0] lec:lec_tx_timeout: lec0