last executing test programs: 1.818842059s ago: executing program 4 (id=5481): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000a80)={r2, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x101002, &(0x7f0000000400)={@align=0x81, {0x1, 0x5, 0x8f6b, 0xfffffffffffffffc}}, 0x4a7c, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000ac0)=[@in6={0xa, 0x4e22, 0xfffffffa, @mcast2, 0x9}], 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) recvmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045ec6181bd0561c6ee0d45fad85e6d0000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040065580000fffff032fa7742b912c485c9868cf61bcff6b4013d84645927042334c9cee833bdfbd6e3ffd36427814f1a814c55bac96390c861d54f2bed4a5dfb4fb3a200"], 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf9001806fffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2000990780ffd03030700aa980bcad615ce0ca847da804908bfc782e5c3723bfafeee0e6378ee7b34e9330187cded8e2eb7"], 0x0) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r9, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000007c9859abfd2c25afeb070000009ce1943053890000"], 0x18}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000007a97c99373c533000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.724713722s ago: executing program 1 (id=5483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e65766500002000028006000500"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.551698013s ago: executing program 1 (id=5485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x6, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb002000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 1.405609001s ago: executing program 0 (id=5487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) (async) 1.386989753s ago: executing program 4 (id=5488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x524, 0x25dfdbfd, {0x2, 0x1f, 0x8b, 0xc8}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={0x0, 0x6a, "5b94a5646d5f96f3dacfbe7cb97416f1ca85a7d5c9dddd72f44891c7ea4445da9cb9932b91bf816ecf7daae8f0749c681a3f08448ad2d8f8437e9b1c747d06ff8f1485f8f86ac8d7a22f2af949b050a36eb6c699607e965569b16e49737193692a3e47caa7e9a3447161"}, &(0x7f0000000840)=0x72) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000880)={r5, 0x7f}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000880)={r5, 0x7f}, 0x8) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb011800000000000000140000001400000002000000005e431cec2cda26144a86eaa4730000000100000d000000000020000000000000000000"], &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, &(0x7f0000000280)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r9) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x20, r12, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x20, r12, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) r15 = socket$inet6(0xa, 0x80000, 0x7) setsockopt$inet6_group_source_req(r15, 0x29, 0x2e, &(0x7f0000000100)={0xa, {{0xa, 0x4e21, 0xbdb, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff22c}}, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x108) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r16 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r16, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r16, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 1.148780226s ago: executing program 2 (id=5490): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xfffffffffffffd95) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x262, &(0x7f00000003c0)={@empty, @random="42e2ff211cf8", @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "2338b1", 0x22c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@hopopts={0x3a, 0x15, '\x00', [@generic={0x71, 0x48, "f912c798e9d810635812432ebbdf376ffc1376246451ba3dbb2fc870c9082a70f9b4afbf2f7af5506885b198e2c0bb27dc754491ff6a67708db40439062a088aa535a93deb9d3508"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x5, [0x200, 0x9, 0x81, 0x7, 0xffffffffffffffff, 0xe8b2]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}, @dstopts={0x3b, 0xc, '\x00', [@generic={0x5}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x42, [0x7, 0x1800000000, 0x0, 0x1]}}]}], @ni={0x8c, 0x0, 0x0, 0xbc77, 0xffff, 0x1200000000000000, "e2f73db272234ea7d799cf2d0565b3409bce9b1857fada1a813fbfd4c5c2bf9f41849f2fa73ccdc43ff8e645b1c9899cca0ddfa9dd6e615e53e3806f007f61bcfcc9f8d7fd6188a0c32439cd0dc2cf778c818fbe924195ef8bb0b45e5d0141b319845b75dab9bfa90e637abe911f1eb2f8ddd3ecac8e8ad79e780f5d43c9ce03e81e6dd92e2af86ed3fa3a19f3f76bd99f6c7ede96b1f77e541821b398609b9d8043d2462a5bcda541d3fa68900a7c94b0a0fabdb2dd4a933c9ab94db137c67d41e31ddf6f191c5107891669ef07b1a7cf7df975c9be8251d476a06907dee8525cfa066552c3c706407295496d8b32a5497a3fc0"}}}}}}, 0x0) (rerun: 32) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100), 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000080) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x4e20, @private=0xac141437}}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r11) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f375f95020005006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008898b00b70300000000010085000000062000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.001316675s ago: executing program 4 (id=5491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x2f) listen(r1, 0x0) listen(r1, 0xaca) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 997.780209ms ago: executing program 2 (id=5492): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="70c731414f4faabdbb655c017f4070b215cc7f8d8a435d8666e18c146528078502473914ef8549a0f9fc6dfa9acbf1393efa8864b74cda67d15739293acd5994d3598d752dcf75e5e83b3e098df5cac2f098d42dbd8fcfd023ea0084035d895b7fd20eaafe839713ab0b6d3dcdc2155e47049bd0743b7d946c75f46ccdb6486d506ecff1b1dafb4e82d2c2496fd01881e58ea4c9b3be12d60fc5ca7f4cec69b9b1caac7dd79038f7c9fb59d9b019f9d6", 0xb0}], 0x1}, 0x20008894) 991.006999ms ago: executing program 0 (id=5493): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x18}, 0x1}, 0x10) 916.730739ms ago: executing program 3 (id=5494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) unshare(0x22020600) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5761, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) (rerun: 32) 915.06531ms ago: executing program 1 (id=5495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32], 0x3c}}, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x5, 0x0, &(0x7f0000001200)) r6 = socket(0x1f, 0x80000, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000031400002bbd7000fbdbdf250900020073797a3200000000080041007369770014003300677265746170300000000000000000000900020073797a3200000000080041007369770014003300766972745f77696669300000000000000900020073797a30000000000800410073697700140033006d6163767461703000000000000000000900020073797a3200000009000041007369770014003300766972745f80697701666930000000000000ef3910bc3a1ea4bb708c5583c6de140e00c66d5e557acfef9b705f8923f64909d5120e8f8c76161c4ba1ec33be69bfe825daaa"], 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x24008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="e09e3dee812534a8", @ANYRES32=r7, @ANYBLOB="0c0002000700000000000000"], 0x3c}}, 0x20000000) 855.459373ms ago: executing program 2 (id=5496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r1, 0x1}, 0x14) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 835.993263ms ago: executing program 3 (id=5497): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2, [], [], [], 0x0, 0x4000}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0x188, 0xd0}, {0x28}}}}, 0x7b0) 740.573694ms ago: executing program 0 (id=5498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd, 0x4a}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) close(r6) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40084) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x733dc3f079fea6b3}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x4000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, r10, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x15a}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44001}, 0x0) socket(0x26, 0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x10, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 738.805824ms ago: executing program 4 (id=5499): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1, 0x0, 0x0, 0x40}, 0x0) 720.00541ms ago: executing program 3 (id=5500): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1896d10327000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES8=r2, @ANYRES64=r3, @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x40004804}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c8b", 0xc6}, {&(0x7f00000022c0)="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", 0xef1}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x1, 0x24, &(0x7f00000005c0)=""/36, 0x41100, 0x29, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0xd, 0x9, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000009c0)=[{0x5, 0x1, 0x6, 0x5}, {0x2, 0x1, 0xc, 0x8}], 0x10, 0x34f}, 0x94) recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$pppoe(0x18, 0x1, 0x0) tee(r8, r9, 0x1ff, 0x0) sendmsg$netlink(r7, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000a7000000000000000000"], 0x10}], 0x2}, 0x4000044) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={r12, 0x3, 0x6, @remote}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000000)={r12, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r12, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 602.856059ms ago: executing program 2 (id=5501): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a54", 0x80}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77e26464b8dc6ec581588f80c054c025f9", 0x20}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 512.643301ms ago: executing program 4 (id=5502): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) (async) pselect6(0x40, &(0x7f0000000040)={0x800000000, 0x100000000, 0xff, 0xfffeffffffffffff, 0x4, 0xb, 0x2880040000000009, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, &(0x7f0000001e80)=ANY=[@ANYRESOCT=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, r5, 0x8, &(0x7f0000000000), 0x8}, 0xa9) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) (async) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x1}) (async) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x200}) (async, rerun: 64) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001900000000000000ffdbdf2504000000c4eeb7b50714fea8"], 0x1c}}, 0x0) getsockopt$inet_buf(r8, 0x0, 0x24, &(0x7f0000000280)=""/72, &(0x7f0000000300)=0x48) (async) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) 512.27797ms ago: executing program 1 (id=5503): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xffe0, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000300)={0x32, 0x2, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}]}, 0x18) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd4}, 0x48000) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) (async) sendmsg$alg(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9891", 0x2}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r9, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x4040851) (async) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a0100080000000000800400"/77, 0x4d}], 0x1) 435.162495ms ago: executing program 3 (id=5504): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x30}}], 0x1, 0x8000090) (async, rerun: 64) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x329080, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}, [@generic="574046d6"]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x700, 0x10, 0x0, 0x6f30, {{0x2d, 0x4, 0x3, 0x38, 0xb4, 0x67, 0x0, 0x12, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x2b, 0xc5, [@private=0xa010101, @local, @local, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @ssrr={0x89, 0x17, 0xfb, [@empty, @empty, @local, @empty, @private=0xa010101]}, @generic={0x44, 0xd, "dfe9f1f91eb62d36cd41b8"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x94, 0x3, 0x8, [{@loopback, 0x10001}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x2}, {@multicast2, 0x80000001}, {@private=0xa010100, 0x3}, {@local, 0x4acb}]}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x1, [0x8]}, @lsrr={0x83, 0x7, 0x4e, [@broadcast]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000001fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000e80)={0x10d0, 0x12, 0x8, 0x70bd2d, 0x25dfdbfe, {0x25, 0x5, 0xff, 0x1, {0x4e23, 0x4e21, [0x1, 0xe37, 0x7, 0x1], [0x3, 0x0, 0x6, 0xdc1e], r10, [0xffffffc3, 0x1]}, 0xffff, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "2a3a88bc1d8f073a95b656c844386eeed32253dd2a9346df2efd8b20400bcbefaa52309458fc317ff870a8b46dd83ab7da83aceb23093352d5d39591bcfe73a47bd286e25a2c3a256e26fe9cd3fdf41b8c0383236a7c1bf4edc77708827af8bc907da81147b06e05bce180864d7723813c36bcec8415b352c616f43de967368431d4ce4ed908677a54a5794c98788349c39d920dcca73766d6803963178d663eab4129e8018e271425b682bed24e6dc0792d52df93d6f4298bc2cc0bf301c2802a9108da7d302723d488d237b978207ede98ea272b6dcd9aa887426a468bb3948632b22b7661bf1c50ec0609846adaa16dc273be9a0949e59f03b6628f74a504f36999e5b36bb8d095c43d7d687b619d6f11bb63472f21e07285b32252667327d1411a9087a4de1a176cfb77c1ccf288800b3e77f78b6bd27a81ae11c35bf9c5c1db72036331b3de343716714eed5c01652dbf990143cd074e3b6efd7ad321fcd51340f989db207e901b93283167e40b455a7cbc6a05204752c5cf043e19a16112c6b1e66b1a538c218528c8f31a9465c34bde9d757f569e6e82c62598bdf8906153752ab9b95f43118a8292bf1f15bacea914de229c94c319e2901a875bc60beff671eb35f8a0d3137dbceac120378fc1e25cb796f2123421d5379ec6cba268a7d04ea87c52130b8f8cca9779f6a078bafa1d044edfd5ef139be60e8ccec032a07b40e68a1af968a54e62123521695836ec3cfdc39ad423793592d32bd6404ae50cf350ea09e4365dba346433dda146ddc544fed57906edba1132a964b1f31965ad1156be82cdce86a3845cff5ebfa597fbdf1525fbab5f18144289cee90f863beeeadc28087e62bea503b236e8c2f51e28f06b8dd0bb4f7b1b3cd434fc568f5d75efd4b99c8518b8fa7a3ddd79d17ce5beb1d5ef9e6d295fb617e4c666bf0f374a2e38c9b0a4c5c46d1f9a228dd98494e476dfa7d5ae4c0a8992040cb8dca63776ba5c8e91a251a59969dd91aadd0242abe2f601e94b66e907bba651f7a569648f3035c0fe6d66d99b21d0174a1465063add1b50b4b8e98cc8f0e225e0344bbae3e31f9275f3fba5965ab95cf98e3a60f25ad4bd7e43852a71595513f7a193e93ec6b92eebbda8ac4c6d4c4c4b541ee3cf331fbeb7a48dbda0257bf0e67227788ff0bb60949656d9c01ab7143f5261dcd96bab6008676cd23c0614d0a463b20f31e09280decb40235691aa0430867f98f751310c4ae8f1e771c75519aa10933738b978106bead3bc7793fda02685d79a9cede65f256eff9a660b3e98d63e925857c21506a37ca260762866d22268253cf6e32f7b96b8f300336b996e448aae97d5de00bbc8543e689eb2c36cf1c32101b4332561aed8f416749ea8f7330befc9f4914d1155756cec12cfafc0e55d69b5422ca6b4169cdce9a0c0ba8e0fda75b97c6497d4aff7ca730e5bb0023b9a03f5cec106bc27380cdd36b0e11422057d30d1de8fcc5d525702e75b1a764b87637646f65dac401fdf7ee3ea3317efb4fcee3278b071d2c3331a88379e71905f2c2296933f9a3584a9f1c0cea685d472f3dc1cbff5c559700cba344f3b3539fd999e4b2fa42d54014576b629bd81447b6c8b8c473c3af18146ab1cd6fa33bbf0ed587b378ef21658a4e4ee21f8af9440eb84acf2ac682cf4f5a31ec20a9c577bd58d386de710b10394b6a200f650e1a9a31326d30c37faf9769903e6a1823039a9d788416bd07717d05aa472e6c0c3802197f088edc2e7c790ef91b27b21c8aff0ad7bc981ec7f7ed52303f6961680f495b4e37bf65759dc6149093ae24867936f5a2f5b0c6d83fc015406136868dee1d279af2a4f975e78dda64713418bf225482913c8e07917c43c5ebe8dac121cb4ebf2a67bb65b19a7f97a9fb4027d2c55bb36cc4dc8642abc4ffc0a6b5c7ea6dc191006b625b48e302a3f4b7a2b9f140ed2e636f07c7409de9b7e148a6233d7cde7d865045d8febfdad92e4027609d6635e3bbfab06f3df7e3fe6d098c7e1a5e2697c49379723886c3265ffa6353802f51cc4ef5753b4d098c632a93293afff0a8a076ecbedc6dcf226ea484d0427d660419a6557df5720ebe1e86058ff4b92c371e2900051d6ba4ad447eea2130d459a1bbd84d6e71231e761f7fbcf4a525f5a08486f90d0256821df4c4b6ac8b87ea6308c9812f78d0f4ddc94b5a2a927d2152b44383017d4c1c264a007ca7f5a2c00e386acd58cfe70538f5244ef0a7597e1ee3cbb61d935ee84b04e2e6d4e926f856a2e1f4d30cdf8f5919a3b5a431158a10e379b6422785cf52f5e58bb6d9718a9d1e7d10c724ced9b0e60f02d8e4da4923fa4c5c6bddac761e182d92f00aeba3a432dcfc3b19eafca7b917d171a65bed25190b46f1cd9b61298c71e6f095840d205ff1088d1cca7315ef233a52b09aaf5d13984e51dac25dc53fb81e568cdac99a8d63612f842c82269dd1406ce49a243eccde2a192d1d96796febf5b8bba3c7f1cec191ff3672f5f2fc369e751a74e311ec7b0303f1406268a7fb9056ca2ce35e840b557a18228fdd8824c42baaa6221b9575fa44af18686e6df7a5725d9617bedb385a4008eec911c0913ee8a42da4e98d30e999773c501432005c010d224888f6a063d4d58b4c4a7b445c483ce86043a4da916a489aa593f9ad51da2aaa4c7fc3e93a7d1a5745e4a3671c0244c79eb22811221a4d1c5cb41557332b88073ecbc526ca53fd59e03bf9f0f86411c63a62deaa8861ecb46a9451b467f9547bb79091edd7cd44795060fa3337bedaf3459e20bb5353d60fdd171a96c5e4540177ddc0829005a278bc05a6785e318409a94720eda94a1e33f76b44de08a0fa4ac007fab79e9957150184e6796863c319da5fc6624b0427bd361c42e699e1f539d6af50e1f03e50faccd5834b24db56cac593c560ba31e7e744fe721cf5069910ba4bc1faf3ffc6bdc686f47387aa3b79dd25d7db4d67bbbd9c0d90bab26fbd0ddf60b1caaf6acc95a26f83ef04f12702d2cd0fffad662b67a9310f21e0d7d0275b790d260a0a3b3d786eef53d7e4574c0cf0b356eaa7b9267d9fe5100f11a504c5c71cf579e1f1424541e85447ea75062622978b446db2e594f51ee0d5d18b0a2cdd44d37d85417c1d84380758990eee9c9b1a48200f5313cc464675ea01306590641b41828822afb0b3161d7fbacead25621a1cee7db21886c4234968692d37bdec141d18c3251aebb073165fbf0cd77fe91331b96c24b84e9e06cd69fde7d03a2a40ceef57deaad3154f7d494a8ca496ea379f43cb00aec00c8d91a1b1a6205552f726803e5e6a0de2cfc279d990bd4f8729fc14110d5d272662ea3c435df37b9bf779ca73dab1a088342f2fdce4901fcbdbc4dea0ab3efe5a6b2435cf2e0a5156d85579c588bb352155c35d8b8e0242f0ff076ab912a3abd65684c6358a6f0ad8391da6f39682384e2113f8a34f59fe4308069ee11e416677423465551cbd8f1cc2fb5019e8ff2000396b3912c9fb5dc1b7e63dc62fe700173199e173435b6e507444c54a56a8f86fbd62782ec8cf27c8853d5bcf948f63c60a5938f7c20d78fa98e460dbc7925480c52bbd8a3f57aa8c86ac7f05779faf4d64eb0fb42ab47801c6fb0f0dd5751938c13e7c44f13d7e6ae5a422b567abb1edbc15619d4bf472576cd7a4e633ccb47684ebd335bb5f67863090709e7255d542c0d873642460c53a3eb8856b360ed20dafdb5dff5d284331fe327df23110cdf36ece011516cb4f70adcc033f9b781481959fff9c89e39e26b7829751acddb9a74e5ad9e69c484e04ebe2f73176e92a9049de3ef1bf5784e2b3767552a1228fd8f8e383b5b11ebab01db7616b76b0b0ea6647258c57ff8a8f0c70518b7192303f322a43093a15746af7c1e069039845ef6b197e38cf405c11b76efc8e60d448ed8fbc742d339e9634cdff1f5d11e9c14c2a4243ae0df8300075dd4213c15c876361ab0d38946c24ef600431b0719513d744cd840e92b75f8259f6fa521191cb6fbebb4facba91a189ac683c5565185ed80b2bd0304a71668c645b45670eba90e7bffd44f06d793b8b93596395a95e1648692087704ba449d87bf824ba23749ce8db19d945df975293f0ed9a5c9d04361d70a8188dc9adb5871fe19713de5b7492234741a5bcef46855d47c0e5cbaab08979b8347aa3ebcf7800f004048eae1f9d8a76218ce52af37c5c7dfa500451aac3f818b07845c0da9674fc580c9a751b2c1e9c165396b94652e47635ea36a6c395f28fb5d10b8d066362628b030caf7e9c74214f0897da28853f5e528300a9127a01786fb38731e1ae3b5ce03dae786113708fa7606b8d04f30bc5f73b12e16cc0de9abdd733e23decc59dda619771ac45713640c76a0107d3c71f31510b1a0178c226ea187bd25a26c70827c0d4c8ee69314423a23db36bff70d5371cf9533b56036d77744817f5c238125eeb35589b7b3368d4a234b3b610c37b05fa2f3cbd6e17476eca734df2383813a2f1f85ef1e232e24564823c05125ec4d7dad092c1f98df67d0cf524658725cdd6334b90fd8151ed2c58db79260e30866b3a1350abbf68d8757eb5386cf1beda602b60d2451992093dc73395418862882be374aef6b0bc0e38903734d00de57bd7d2b7f05e01e0dc7652195991f2566993f1ec374fc87aa322fe602cbcdc0ba4a103a590721b5d852e10d231e20f559cb866fe6f62c76aa61bff5ff61c11736d5178cd4310aeeb21a3f7fcb84d25aeb606de09ed61075eff6f0017b622cf32b39da22543f7813536542da712171825e66539ba961508bb84e2219a6dc3d1dcb2e8f87980c6acf100a60bd07cf755d669d2c070493fe038b777776984461017cddd179bfaac6c1966f4196c14c7ae907479180a57370d1e13129fe5e8c8797da42bd685617a81f6c2f6da7620b008d099638f9151e956a1d96d680d255191f655308ebea04986d9321e550617cc5def49270d3f96ffc5c1ba970774e91c5179f99c0a4ee94129f80da3f58f8dca3d45a661a38d6879d7ba15472a3dd8c192f25a6e12900bc4ca4eac30182963a91959f604b55550547a341dfd73e1acd866fbada952dc098b716370f9b2b896590097a947982f80e9132ea0f2bf75031bbf8829c9038d7889e538adf806ea303b521d8546ae5b47bdf90994f9db5f98c04275061403a22ba9859852e55dbeaf60dfa7c3ee0bd9d6519547bee7e9ee0e59ccf3a0cb7a422c9ea116897ed17871581d2f591ee821ad736e93037f7ffbb64b9ea6c8354de0e8c0784131b5504341e8394ea4b12539c0c77dff6e474ee27bf2e82b2f7498e83ccd1ccf768b922bb346251d0c4f6fcb6c1e50ce380c919308400471823b2f5c318922a8171f19338a0b7b2641c47c9d10e2cf10651aa919e504fffb2bd9ad347af9cbb4d67e229353d6f2195d9471734bbb3da2c41ae540865557e3ba216597aa79f67371e5311923353aef17911e01d2ba377fac1130f788a43e8c7f7bff887d82c9ffa4f31c0906f572191c1bb54add3104985bac6833971c36f6ce88fc3edd531b8e27a5dc1d319815ef3d6d026304e3143bb4523543cab0d43cf93cbb4efa854cc6eba6d4923b33f882fa8ed557a333fd90858986879b309ac0cd0b442c292ea8a4f721269202de61751bf1ffd3f5f17bfd33634fce1723b4fc379d3ab5f07db88e957a27cbe9d1c941fdfff4e2181d05d446fde52671c35de2fa13eb5a67d837b7c25168b66aa6e078ea9a4586834e9735baa6f5020bf3791"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "2e992174f80d9c9fdd5995ebb6aff1dd19ba5124e7b57f4f5dd4759ec4321bcc2846fc11920fd1ce444910ab7610c87603ba10a795a1a2584af348b21e00752fca245239190bec1c5e9d4ee130967f2554cef36cf20e4caa9f7cc873ebbb11f978fa0c863c5cbdca0663d0b83ee4c935797297bab9778e59883c"}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 370.235303ms ago: executing program 1 (id=5505): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x10}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xa, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000300)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="c200000000000000000000000c00", 0xe}], 0x1}, 0x4040880) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) readv(r4, &(0x7f0000002640)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 296.629045ms ago: executing program 0 (id=5506): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_NAME={0x13, 0x1, '!&,+,\\(.+%-!\"&\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8070}, 0x805) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000100)=0x5) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) r1 = accept(r0, &(0x7f0000000180)=@caif, &(0x7f0000000200)=0x80) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000240)={0x6, 'syz1\x00'}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8042000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffbff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) recvmsg(r1, &(0x7f00000007c0)={&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f0000000700)=""/81, 0x51}], 0x4}, 0x40002001) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000800)={r0, 0x3, 0x6, "69732f9a97be64d0ce12437a9198bb5090"}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000840)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000940)={@in6={{0xa, 0x4e20, 0xfffffb5e, @mcast1}}, 0x0, 0x0, 0x22, 0x0, "94946a158b852612f49277fd46b7dc19c0f90fe2c2fe1e78456f1f430a0d4be4c0ed1f568d9aa2531b1c079747724679a2628af300e1158ae22a9cada37f0951bf62f348fe48ea68e5a2bdd638d85598"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a40)='vxcan1\x00', 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000a80)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x4, 0x1, 0x2}}, {@canfd={0xd, {{0x1, 0x1}, 0x20, 0x2, 0x0, 0x0, "2fbccb40a77fab39292440d182e338f1a101ed084fb15d9a23bb9ad924933963feb07402e8d25d75daf8d830bb37cfa04357ddcc23f9c0ae7c568c429e0f50be"}}}}, &(0x7f0000000b00)={0x1, 0x2, [0x886, 0xc28, 0xa1d, 0x5d]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000c00)={0x0, 0x84, &(0x7f0000000b40)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x5}, @in6={0xa, 0x4e22, 0x0, @empty, 0x7}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0xb, @empty, 0xb}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000c40)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000c80)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000d40)=0x84) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000dc0)='reno\x00', 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0xce, 0x0, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r7 = accept4$vsock_stream(r1, &(0x7f0000001040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000001080)={0x0, 0x2710}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000010c0)={0x1, [0x0]}, &(0x7f0000001100)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000001140)={r4, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x2}, &(0x7f0000001200)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000001240)={r8, 0x10000}, &(0x7f0000001280)=0x8) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000012c0)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000016c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}]}, @NFT_MSG_DELOBJ={0x8c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x38, 0x8, "b699e6b79842bd31a5c89eda316942ca334474632789f28b7220483d1066e6b79fe1d7d5dbc02ff0b9beb4f402fe8dee102b5d8c"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xc3, 0x6, "9e1c9952b4721fc116fde82836b98070ed8258cf941cbb1beee9f1381e49516640dae9dbdf5adf7fcfaaabcf8d1cf0027996c27bde5627a873a2bcd57b776893f3c69c73c21b9da64d11881ad98e4938353da2370b5fc800385153412a3bd1b1452f9289b9d193e559a40a07299eec08e90082465abd001fb41d224abb7c7adf51f05a966d95ee36899f83d90c97e0662be514fb51e3636665960c9be11319fe8644c22459b26dd5729a17aed8c6e018945788499d97dc3982c7a3bf1cec7c"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x99, 0x6, "d9c2a06c998d45c7896be52779cb8ea00dd372f3946bfaf5af5a5f93d3040f51123a4ba069166b093f97405df5813c39c6d355d1372c0e823ccb73ae7fd79a91cb9da266ee9c33bb4784fd3523ef9d0f6295c19c880582c719496eb900f3a12116f5240c42381b674487f59b4afdbaca4c18e4678778623ef36f6c7d78af515bfa6100b5c4aba9bdea527c4674294421c1b2404cb0"}, @NFTA_TABLE_USERDATA={0x8f, 0x6, "c33eca850a3169086fea20554c9343058ff9dd5c6af2c2780c7d7426f377b0eaf1533ae825175807e346520917edae93bb5f98eb1c84c8bd300d2caa707fe39efd564680c7feeb9f6facda89d8c3f001bf8a01a53d9ad6989c42b271a8430bc0b42bd9e9a5ceac14ffcde2cd580dbbdc0bc3afaa83c0793f4d70622188b85b9fe52dc0919f9ac2831ef2f8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x32c}}, 0x4000000) 296.219779ms ago: executing program 2 (id=5507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES8=r0, @ANYRES8=r7], 0x18c0}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 215.8245ms ago: executing program 0 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x40, 0x1410, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}}, 0x40001) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r8 = socket(0x10, 0x80002, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) ioctl$sock_netdev_private(r6, 0x8910, &(0x7f00000003c0)) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="7bad26bd7000ffdbdf25140000fc030007801af62936bee59bc0571ab2c01086684cd25c899142a665f3f19944ba5758bf225f888520375bec6ff8a13237af9528ebdb43f0e1c348c9d50f55e7d772d817da14255a679ee0095b98fd29b09f1c5c76560b505da60dab48fa4c25db46436406c5b77e615bd85dfe5debaf46fdde2612db1755088c30290261cf168b67360bd39b5b63e827a064d019648c08bdc8990d3d4a6e8dc8e0c745fd390e8a2e3187921aa87284e6299f16967ae6a39e287081834c6727e3bf1e61f01a76773310cf9f4223"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) (async) ioctl$sock_rose_SIOCDELRT(r8, 0x890c, &(0x7f00000004c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES8=r7, @ANYRES64=r13, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 175.558568ms ago: executing program 1 (id=5509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x1, [@default, @bcast, @default, @null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x82e, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x5, 0x7, 0x4, 0xe, 0x6, 0xe, 0xc, 0x1, 0x2, 0xa, 0x9, 0xc, 0x2, 0xb, 0x9, 0xc], 0x1, [0xfff8, 0x1, 0x980e, 0xfff7, 0x1ff, 0x2, 0x7, 0x9, 0x3, 0x6, 0x5, 0x1, 0x6, 0x9, 0x6, 0x500], [0xffff, 0xc, 0x1f32, 0x81, 0x1, 0xff1b, 0x7, 0x4, 0x2, 0x3, 0x3, 0xfff, 0x7, 0x80, 0xd, 0xef7]}}}}]}, 0x88}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000670000087eeeff000000000000000000", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800c30074130000"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) socket$inet(0x2, 0x5, 0x0) 175.289191ms ago: executing program 2 (id=5510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e65766500002000028006000500"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 116.62947ms ago: executing program 3 (id=5511): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 114.696116ms ago: executing program 4 (id=5512): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 54.502764ms ago: executing program 3 (id=5513): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x60) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x841, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmsg(r8, &(0x7f0000000b00)={&(0x7f0000000140)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=[{0xa0, 0x117, 0x76, "5f14dcc72900cb8ca8c3478c0014079ea0178d7ff47188a5a3e746b85e6ea3190708ad3f0012372565496c7a29aa1ecc34cda808dea2e279cc599d3c63cf693b70cb552a5510df02550449c43a4c0f5e830a4b5a9517ee58b9eed1a1748b61a317799d6ab698fa2fc30ae1a1c9907fd35abe6c242296b3088e5a1cb855dfb5822e3210d6168764de9860"}, {0x100, 0x113, 0x7, "a8f368629fb780fea59f03aa94e0437858a770cb213c1303f93877b850bcaef333489886c27fde3371ef85aab4ed65fd77586a6f4c2aff039ede13d5081e096cad8c778d8ae82aca79b1b102085474548b591ab37a962ef2ca655e659f81a1f011ab94608c6255be89a96f55d32522c6580beb2b4ab6f231bf600fc9ecbd47afce6fcb6b626d82d1e0719f87b2cd42315a7165e9ed2aef745e87978330efa2143f7ec90b029bb526bb39a71016b0b643d16f42fd3dbd85578e9c0c48163f2f6fb17c3c954d075d48efc1ea9b1e8aa8ab5dc3f595b3ce62ac498e9723cc1312a710bc90dec820f9d1ae15"}, {0x78, 0x10a, 0xbd, "a26fe9662ee011a4523881d62b506e379693206660f68d9dd8d9052c415ee0c12fc1ba58d855596f298c3f0a679e20f26ccff4612618467a7f3201b2443d0817cca0beddc9c1fcb4b0cab39f7104299b0d94737e54827130c02cde0e266fd5702f9dc64b"}], 0x218}, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) 0s ago: executing program 0 (id=5514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xb7, 0x2}, &(0x7f0000000740)=0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x800}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r6, 0x0, 0x0, 0x40002042, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r8 = socket(0x400000000010, 0x1, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x40}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) (async) sendmsg$netlink(r10, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) (async) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @empty, 0x4}, 0x1c) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): lticast mode [ 449.738639][T18587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.749213][T18587] team0: Port device bond0 added [ 449.876775][T18587] vxcan3: entered promiscuous mode [ 449.918122][T18603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.316513][T18597] bridge0: port 3(syz_tun) entered disabled state [ 450.341892][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.349474][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.625763][T18597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.663919][T18597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.981502][T18597] ip6gre1: left allmulticast mode [ 450.995430][T18597] bond3: left promiscuous mode [ 451.000230][T18597] vti0: left promiscuous mode [ 451.034469][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.067944][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.111382][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.141336][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.511984][T18633] netlink: 'syz.3.3712': attribute type 10 has an invalid length. [ 451.536959][T18639] Cannot find set identified by id 1 to match [ 451.592730][T18633] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 451.837405][T18659] ip6t_srh: unknown srh invflags 4000 [ 452.053300][T18668] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20000 [ 452.060266][T18665] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20000 [ 452.220498][T18675] __nla_validate_parse: 14 callbacks suppressed [ 452.220520][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3722'. [ 452.246702][T18671] bond0: left promiscuous mode [ 452.271487][T18671] bond0: left allmulticast mode [ 452.292240][T18671] vxcan3: left promiscuous mode [ 452.298016][ T1153] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 58966 - 0 [ 452.389830][ T1153] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 58966 - 0 [ 452.419354][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 452.429632][ T1153] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 58966 - 0 [ 452.457403][ T1153] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 58966 - 0 [ 452.661029][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3729'. [ 452.742847][T18707] netlink: 'syz.0.3732': attribute type 10 has an invalid length. [ 452.835502][T18713] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3730'. [ 453.352912][T18739] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 453.362920][T18739] tap0: tun_chr_ioctl cmd 1074025676 [ 453.368452][T18739] tap0: owner set to 0 [ 453.385253][T18739] Cannot find del_set index 4 as target [ 453.451349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.459423][ C0] lec:lec_tx_timeout: lec0 [ 453.465766][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 453.470445][T18747] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3744'. [ 453.924101][T18768] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 453.952466][T18768] netlink: 'syz.0.3752': attribute type 3 has an invalid length. [ 453.966908][T18768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3752'. [ 454.362638][ T7477] wlan1: Trigger new scan to find an IBSS to join [ 454.791982][T18789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3757'. [ 455.389766][T18792] netlink: 'syz.1.3758': attribute type 4 has an invalid length. [ 455.398419][T18792] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3758'. [ 456.291435][ T7477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 35464 - 0 [ 456.312152][ T7477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 35464 - 0 [ 456.321023][ T7477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 35464 - 0 [ 456.344042][ T7477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 35464 - 0 [ 456.518695][T18800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3762'. [ 456.552042][T18800] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3762'. [ 456.809038][T18811] RDS: rds_bind could not find a transport for 7ebd:eb75:fd0d:8c56:2c84:d8c0:33ed:7a80, load rds_tcp or rds_rdma? [ 457.008845][T18819] netlink: 'syz.4.3768': attribute type 5 has an invalid length. [ 457.027124][T18819] syzkaller0: entered promiscuous mode [ 457.033778][T18819] syzkaller0: entered allmulticast mode [ 457.079724][T18819] simple: basic_1 [ 457.083758][T18819] simple: basic_2 [ 457.087453][T18819] simple: basic_3 [ 457.091168][T18819] simple: basic_4 [ 457.094832][T18819] simple: basic_5 [ 457.098583][T18819] simple: basic_6 [ 457.102277][T18819] simple: basic_7 [ 457.105932][T18819] simple: basic_8 [ 457.109697][T18819] simple: basic_9 [ 457.113408][T18819] simple: basic_10 [ 457.117163][T18819] simple: basic_11 [ 457.120992][T18819] simple: basic_12 [ 457.124819][T18819] simple: basic_13 [ 457.128597][T18819] simple: basic_14 [ 457.132393][T18819] simple: basic_15 [ 457.136203][T18819] simple: basic_16 [ 457.139966][T18819] simple: basic_17 [ 457.143771][T18819] simple: basic_18 [ 457.147539][T18819] simple: basic_19 [ 457.151431][T18819] simple: basic_20 [ 457.155194][T18819] simple: basic_21 [ 457.159025][T18819] simple: basic_22 [ 457.162834][T18819] simple: basic_23 [ 457.166603][T18819] simple: basic_24 [ 457.170364][T18819] simple: basic_25 [ 457.174175][T18819] simple: basic_26 [ 457.177919][T18819] simple: basic_27 [ 457.181744][T18819] simple: basic_28 [ 457.185484][T18819] simple: basic_29 [ 457.189225][T18819] simple: basic_30 [ 457.193021][T18819] simple: basic_31 [ 457.196850][T18819] simple: basic_32 [ 457.200594][T18819] TC_ACT_REPEAT abuse ? [ 457.363783][T18827] __nla_validate_parse: 1 callbacks suppressed [ 457.363803][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3770'. [ 457.410498][T15804] wlan1: Trigger new scan to find an IBSS to join [ 457.559557][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'. [ 457.672164][T18835] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3773'. [ 457.843119][T18842] ip6t_srh: unknown srh invflags 4000 [ 457.940445][T18844] netlink: 'syz.2.3777': attribute type 83 has an invalid length. [ 457.985097][T18844] sctp: [Deprecated]: syz.2.3777 (pid 18844) Use of int in max_burst socket option deprecated. [ 457.985097][T18844] Use struct sctp_assoc_value instead [ 458.039021][T18848] nftables ruleset with unbound chain [ 458.152888][T18849] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3778'. [ 458.218250][T18851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3779'. [ 458.321804][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3781'. [ 458.365892][T18860] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3782'. [ 458.375993][T18860] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3782'. [ 458.388009][T18860] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.3782'. [ 458.481373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.489712][ C0] lec:lec_tx_timeout: lec0 [ 458.494840][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 459.025991][T18888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3790'. [ 459.284148][T18901] syzkaller0: entered promiscuous mode [ 459.300973][T18901] syzkaller0: entered allmulticast mode [ 459.543087][T18912] macvlan0: entered promiscuous mode [ 459.628178][T18917] syzkaller0: entered promiscuous mode [ 459.650240][T18917] syzkaller0: entered allmulticast mode [ 459.687142][T18921] FAULT_INJECTION: forcing a failure. [ 459.687142][T18921] name failslab, interval 1, probability 0, space 0, times 0 [ 459.724107][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.0.3798 Not tainted syzkaller #0 PREEMPT(full) [ 459.724135][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 459.724147][T18921] Call Trace: [ 459.724154][T18921] [ 459.724162][T18921] dump_stack_lvl+0xe8/0x150 [ 459.724196][T18921] should_fail_ex+0x412/0x560 [ 459.724230][T18921] should_failslab+0xa8/0x100 [ 459.724259][T18921] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 459.724280][T18921] ? __alloc_skb+0x186/0x7d0 [ 459.724301][T18921] ? __alloc_skb+0x1d0/0x7d0 [ 459.724319][T18921] ? __local_bh_enable_ip+0xd0/0x130 [ 459.724349][T18921] __alloc_skb+0x1d0/0x7d0 [ 459.724376][T18921] alloc_skb_with_frags+0xca/0x890 [ 459.724415][T18921] sock_alloc_send_pskb+0x878/0x990 [ 459.724462][T18921] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 459.724504][T18921] ? dev_get_by_index+0x22/0x2e0 [ 459.724531][T18921] ? dev_get_by_index+0x22/0x2e0 [ 459.724566][T18921] packet_sendmsg+0x33e5/0x50f0 [ 459.724597][T18921] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 459.724632][T18921] ? __lock_acquire+0x6b5/0x2cf0 [ 459.724694][T18921] ? aa_sk_perm+0x6d5/0x900 [ 459.724719][T18921] ? __pfx_packet_sendmsg+0x10/0x10 [ 459.724747][T18921] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 459.724773][T18921] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.724803][T18921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.724828][T18921] ____sys_sendmsg+0x972/0x9f0 [ 459.724861][T18921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.724895][T18921] ? import_iovec+0x73/0xa0 [ 459.724922][T18921] ___sys_sendmsg+0x2a5/0x360 [ 459.724953][T18921] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.725015][T18921] ? __fget_files+0x2a/0x420 [ 459.725032][T18921] ? __fget_files+0x3a0/0x420 [ 459.725061][T18921] __x64_sys_sendmsg+0x1bd/0x2a0 [ 459.725088][T18921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.725121][T18921] ? __pfx_ksys_write+0x10/0x10 [ 459.725156][T18921] do_syscall_64+0x14d/0xf80 [ 459.725180][T18921] ? trace_irq_disable+0x3b/0x150 [ 459.725196][T18921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.725215][T18921] ? clear_bhb_loop+0x40/0x90 [ 459.725239][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.725257][T18921] RIP: 0033:0x7fe489d9c819 [ 459.725287][T18921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.725302][T18921] RSP: 002b:00007fe48accb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.725324][T18921] RAX: ffffffffffffffda RBX: 00007fe48a016090 RCX: 00007fe489d9c819 [ 459.725338][T18921] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000007 [ 459.725349][T18921] RBP: 00007fe48accb090 R08: 0000000000000000 R09: 0000000000000000 [ 459.725360][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.725371][T18921] R13: 00007fe48a016128 R14: 00007fe48a016090 R15: 00007ffe90d8d478 [ 459.725402][T18921] [ 460.220007][T18941] netlink: 'syz.2.3802': attribute type 5 has an invalid length. [ 460.363042][ T7479] wlan1: Trigger new scan to find an IBSS to join [ 460.624460][T18960] wlan1 speed is unknown, defaulting to 1000 [ 460.730720][T18970] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.735616][ T10] IPVS: starting estimator thread 0... [ 460.806557][T18970] netlink: 'syz.1.3810': attribute type 11 has an invalid length. [ 460.861587][T18973] IPVS: using max 26 ests per chain, 62400 per kthread [ 460.883745][T18978] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 460.945737][T18985] "syz.1.3814" (18985) uses obsolete ecb(arc4) skcipher [ 461.190461][T18997] bond4 (unregistering): Released all slaves [ 461.395926][T19006] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 461.412713][T19007] veth0: entered promiscuous mode [ 461.497984][T19011] veth0: left promiscuous mode [ 461.510714][ T7481] batadv1: left allmulticast mode [ 461.537096][ T7481] batadv1: left promiscuous mode [ 461.556821][ T7481] bridge0: port 4(batadv1) entered disabled state [ 461.592544][ T7481] bridge_slave_1: left allmulticast mode [ 461.598610][ T7481] bridge_slave_1: left promiscuous mode [ 461.607114][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.618041][ T7481] bridge_slave_0: left allmulticast mode [ 461.626188][ T7481] bridge_slave_0: left promiscuous mode [ 461.634850][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.645018][T19024] netlink: 'syz.2.3825': attribute type 2 has an invalid length. [ 461.656339][T19024] openvswitch: netlink: Multiple metadata blocks provided [ 461.667996][ T7481] erspan0: left allmulticast mode [ 461.673759][ T7481] erspan0: left promiscuous mode [ 461.679204][ T7481] bridge6: port 1(erspan0) entered disabled state [ 462.050629][ T7481] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 462.147476][ T7481] dvmrp0 (unregistering): left allmulticast mode [ 462.163073][ T7481] bond0 (unregistering): (slave geneve3): Releasing active interface [ 462.329056][ T7481] bond3 (unregistering): (slave bridge2): Releasing active interface [ 462.358033][ T7481] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 462.555470][ T7481]  (unregistering): Released all slaves [ 462.569806][ T7481] bond1 (unregistering): (slave bond2): Releasing backup interface [ 462.579096][ T7481] bond1 (unregistering): Released all slaves [ 462.598467][ T7481] bond2 (unregistering): Released all slaves [ 462.618749][ T7481] bond3 (unregistering): Released all slaves [ 462.636732][ T7481] bond4 (unregistering): Released all slaves [ 462.650509][ T7481] bond5 (unregistering): Released all slaves [ 462.664862][ T7481] bond6 (unregistering): Released all slaves [ 462.688655][ T7481] bond0 (unregistering): Released all slaves [ 462.707730][ T7481] bond7 (unregistering): Released all slaves [ 462.723367][ T7481] bond8 (unregistering): (slave veth3): Releasing active interface [ 462.736886][ T7481] bond8 (unregistering): Released all slaves [ 462.759484][T19006] bond2: (slave geneve3): making interface the new active one [ 462.767907][T19006] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 462.781746][T19016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.891668][T19041] netlink: 'syz.1.3828': attribute type 1 has an invalid length. [ 462.923663][ T1153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.941381][ T1153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.031057][ T7481] tipc: Left network mode [ 463.036855][ T1153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.070568][ T1153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.110091][T19047] syzkaller0: entered promiscuous mode [ 463.116326][T19047] syzkaller0: entered allmulticast mode [ 463.189703][T19052] netlink: 'syz.1.3831': attribute type 1 has an invalid length. [ 463.225280][T19052] __nla_validate_parse: 14 callbacks suppressed [ 463.225301][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3831'. [ 463.242778][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3831'. [ 463.322008][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 463.460766][T19071] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3835'. [ 463.502173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 463.510413][ C0] lec:lec_tx_timeout: lec0 [ 463.515237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.534063][T19077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3837'. [ 463.571396][T19081] netlink: 'syz.0.3838': attribute type 1 has an invalid length. [ 463.869762][T19101] FAULT_INJECTION: forcing a failure. [ 463.869762][T19101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.919307][T19101] CPU: 0 UID: 0 PID: 19101 Comm: syz.4.3840 Not tainted syzkaller #0 PREEMPT(full) [ 463.919343][T19101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.919354][T19101] Call Trace: [ 463.919362][T19101] [ 463.919371][T19101] dump_stack_lvl+0xe8/0x150 [ 463.919406][T19101] should_fail_ex+0x412/0x560 [ 463.919441][T19101] _copy_from_iter+0x3b0/0x1670 [ 463.919485][T19101] ? __pfx__copy_from_iter+0x10/0x10 [ 463.919516][T19101] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 463.919547][T19101] skb_copy_datagram_from_iter+0xf5/0x710 [ 463.919581][T19101] ? dev_get_by_index+0x22/0x2e0 [ 463.919607][T19101] ? skb_put+0x11b/0x210 [ 463.919632][T19101] packet_sendmsg+0x37e4/0x50f0 [ 463.919674][T19101] ? __lock_acquire+0x6b5/0x2cf0 [ 463.919732][T19101] ? aa_sk_perm+0x6d5/0x900 [ 463.919760][T19101] ? __pfx_packet_sendmsg+0x10/0x10 [ 463.919791][T19101] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 463.919819][T19101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.919852][T19101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.919879][T19101] ____sys_sendmsg+0x972/0x9f0 [ 463.919915][T19101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.919950][T19101] ? import_iovec+0x73/0xa0 [ 463.919976][T19101] ___sys_sendmsg+0x2a5/0x360 [ 463.920008][T19101] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.920073][T19101] ? __fget_files+0x2a/0x420 [ 463.920090][T19101] ? __fget_files+0x3a0/0x420 [ 463.920120][T19101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.920148][T19101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.920184][T19101] ? __pfx_ksys_write+0x10/0x10 [ 463.920220][T19101] do_syscall_64+0x14d/0xf80 [ 463.920245][T19101] ? trace_irq_disable+0x3b/0x150 [ 463.920262][T19101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.920282][T19101] ? clear_bhb_loop+0x40/0x90 [ 463.920307][T19101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.920327][T19101] RIP: 0033:0x7f0da5b9c819 [ 463.920346][T19101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.920363][T19101] RSP: 002b:00007f0da3db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.920421][T19101] RAX: ffffffffffffffda RBX: 00007f0da5e16180 RCX: 00007f0da5b9c819 [ 463.920436][T19101] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000007 [ 463.920448][T19101] RBP: 00007f0da3db4090 R08: 0000000000000000 R09: 0000000000000000 [ 463.920469][T19101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.920481][T19101] R13: 00007f0da5e16218 R14: 00007f0da5e16180 R15: 00007ffe697ad318 [ 463.920515][T19101] [ 464.246047][T19092] syzkaller0: entered promiscuous mode [ 464.252067][T19092] syzkaller0: entered allmulticast mode [ 464.636886][T19122] netlink: 408 bytes leftover after parsing attributes in process `syz.0.3849'. [ 464.657344][T19122] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3849'. [ 464.739912][T19129] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 464.838446][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 465.038601][T19142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3853'. [ 466.199721][T19123] bond0: (slave gre0): refused to change device type [ 466.214715][T19122] vlan3: entered allmulticast mode [ 466.220167][T19122] syz_tun: entered allmulticast mode [ 466.316240][T19129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.363882][ T7475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.378595][T19133] bond5: (slave veth5): Enslaving as an active interface with a down link [ 466.391398][T19149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3854'. [ 466.414340][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 466.427331][T19137] bridge_slave_1: entered allmulticast mode [ 466.446843][T19139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 466.454199][T19139] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 466.513794][T19146] macvlan0: left promiscuous mode [ 467.116199][ T7481] hsr_slave_0: left promiscuous mode [ 467.124453][ T7481] hsr_slave_1: left promiscuous mode [ 467.175099][T19185] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 468.312522][T19242] sctp: [Deprecated]: syz.1.3883 (pid 19242) Use of int in maxseg socket option. [ 468.312522][T19242] Use struct sctp_assoc_value instead [ 468.397542][T19239] IPv6: sit1: Disabled Multicast RS [ 468.416927][T19239] sit1: entered allmulticast mode [ 468.427607][T19247] __nla_validate_parse: 3 callbacks suppressed [ 468.427627][T19247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3884'. [ 468.434936][T19248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.547003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 468.555229][ C0] lec:lec_tx_timeout: lec0 [ 468.560256][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 468.587811][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3885'. [ 468.657545][ T7481] IPVS: stop unused estimator thread 0... [ 468.748870][T19256] netlink: 'syz.3.3888': attribute type 4 has an invalid length. [ 469.016129][T19271] gretap1: entered promiscuous mode [ 469.064033][T19271] batman_adv: batadv0: Adding interface: gretap1 [ 469.090652][T19271] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 469.143392][T19271] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 469.162624][ T51] Bluetooth: hci0: command tx timeout [ 469.198654][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3895'. [ 469.210862][T19275] netlink: 'syz.3.3895': attribute type 15 has an invalid length. [ 469.214200][T19279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3897'. [ 469.232103][T19278] netlink: 'syz.2.3896': attribute type 1 has an invalid length. [ 469.239890][T19278] netlink: 'syz.2.3896': attribute type 3 has an invalid length. [ 469.267470][T19278] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3896'. [ 469.288991][T19278] NCSI netlink: No device for ifindex 813332851 [ 469.610019][T19301] syzkaller0: entered promiscuous mode [ 469.626087][T19301] syzkaller0: entered allmulticast mode [ 469.657264][T19301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3905'. [ 469.947299][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3910'. [ 470.009644][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3910'. [ 470.145922][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3911'. [ 470.183824][T19318] netlink: 'syz.3.3911': attribute type 15 has an invalid length. [ 470.310274][T19326] netlink: 'syz.1.3915': attribute type 2 has an invalid length. [ 470.348864][T19326] !: entered promiscuous mode [ 470.372200][T19331] netlink: 'syz.1.3915': attribute type 2 has an invalid length. [ 470.391869][T19331] !: left promiscuous mode [ 470.504753][T19336] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 470.739406][T19347] netlink: 'syz.3.3918': attribute type 10 has an invalid length. [ 470.771802][T19336] bond3: entered promiscuous mode [ 470.790241][T19336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.815761][T19347] team0: Device vxcan1 is of different type [ 470.962706][T19355] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3920'. [ 470.998563][T19357] netlink: 'syz.3.3921': attribute type 1 has an invalid length. [ 471.145401][T19357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.332000][T19372] FAULT_INJECTION: forcing a failure. [ 471.332000][T19372] name failslab, interval 1, probability 0, space 0, times 0 [ 471.401489][T19372] CPU: 0 UID: 0 PID: 19372 Comm: syz.3.3926 Not tainted syzkaller #0 PREEMPT(full) [ 471.401519][T19372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 471.401530][T19372] Call Trace: [ 471.401539][T19372] [ 471.401547][T19372] dump_stack_lvl+0xe8/0x150 [ 471.401583][T19372] should_fail_ex+0x412/0x560 [ 471.401617][T19372] should_failslab+0xa8/0x100 [ 471.401644][T19372] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 471.401675][T19372] ? __alloc_skb+0x186/0x7d0 [ 471.401696][T19372] ? __alloc_skb+0x1d0/0x7d0 [ 471.401714][T19372] ? __local_bh_enable_ip+0xd0/0x130 [ 471.401745][T19372] __alloc_skb+0x1d0/0x7d0 [ 471.401772][T19372] netlink_sendmsg+0x5d4/0xb40 [ 471.401804][T19372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.401829][T19372] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.401860][T19372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.401887][T19372] ____sys_sendmsg+0x972/0x9f0 [ 471.401922][T19372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.401958][T19372] ? import_iovec+0x73/0xa0 [ 471.401985][T19372] ___sys_sendmsg+0x2a5/0x360 [ 471.402016][T19372] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.402079][T19372] ? __fget_files+0x2a/0x420 [ 471.402096][T19372] ? __fget_files+0x3a0/0x420 [ 471.402126][T19372] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.402155][T19372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.402190][T19372] ? __pfx_ksys_write+0x10/0x10 [ 471.402226][T19372] do_syscall_64+0x14d/0xf80 [ 471.402251][T19372] ? trace_irq_disable+0x3b/0x150 [ 471.402268][T19372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.402289][T19372] ? clear_bhb_loop+0x40/0x90 [ 471.402314][T19372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.402334][T19372] RIP: 0033:0x7fb69419c819 [ 471.402353][T19372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.402369][T19372] RSP: 002b:00007fb695117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.402391][T19372] RAX: ffffffffffffffda RBX: 00007fb694415fa0 RCX: 00007fb69419c819 [ 471.402404][T19372] RDX: 0000000028004854 RSI: 00002000000007c0 RDI: 0000000000000004 [ 471.402416][T19372] RBP: 00007fb695117090 R08: 0000000000000000 R09: 0000000000000000 [ 471.402428][T19372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.402440][T19372] R13: 00007fb694416038 R14: 00007fb694415fa0 R15: 00007ffc90e170e8 [ 471.402473][T19372] [ 472.107016][T19406] sit0: entered promiscuous mode [ 472.309547][T19409] syzkaller0: entered promiscuous mode [ 472.317889][T19409] syzkaller0: entered allmulticast mode [ 473.206484][T19440] IPv6: Can't replace route, no match found [ 473.573883][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 473.582020][ C0] lec:lec_tx_timeout: lec0 [ 473.586778][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.301489][T19423] validate_nla: 36 callbacks suppressed [ 474.301504][T19423] netlink: 'syz.1.3943': attribute type 3 has an invalid length. [ 474.512886][T19457] syzkaller0: entered promiscuous mode [ 474.523475][T19464] __nla_validate_parse: 39 callbacks suppressed [ 474.523496][T19464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3949'. [ 474.533196][T19457] syzkaller0: entered allmulticast mode [ 474.575183][T19465] batadv_slave_0: entered promiscuous mode [ 474.676105][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3953'. [ 474.694413][T19472] delete_channel: no stack [ 474.700567][T19469] delete_channel: no stack [ 474.727294][T19474] syzkaller0: entered promiscuous mode [ 474.744860][T19474] syzkaller0: entered allmulticast mode [ 474.774442][T19474] 0: reclassify loop, rule prio 0, protocol 800 [ 474.867848][T19478] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3955'. [ 474.956918][T19484] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3955'. [ 474.968064][T19484] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3955'. [ 475.072488][T19486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.229255][T19501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3959'. [ 475.432945][T19505] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 475.452351][T19511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.480929][T19511] netlink: 'syz.4.3962': attribute type 13 has an invalid length. [ 475.503860][T19513] x_tables: duplicate underflow at hook 1 [ 475.539268][T19515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3964'. [ 475.675200][T19522] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 475.816319][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 475.920765][T19535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.928260][T19541] "syz.4.3972" (19541) uses obsolete ecb(arc4) skcipher [ 475.933862][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 476.071776][T19548] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 476.161975][T19555] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 476.388710][T19563] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3979'. [ 476.617371][T19584] tipc: Failed to obtain node identity [ 476.623249][T19584] tipc: Enabling of bearer rejected, failed to enable media [ 476.644284][T19584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 476.654423][T19584] team0: Device macvlan2 is already an upper device of the team interface [ 476.901058][T19597] ipvlan2: entered allmulticast mode [ 476.911566][T19597] batadv_slave_1: entered allmulticast mode [ 476.920523][T19597] batman_adv: batadv0: Adding interface: ipvlan2 [ 476.955775][T19597] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.011441][T19597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.044165][T19597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.060042][T19597] batman_adv: batadv0: Interface activated: ipvlan2 [ 477.756084][T19651] syzkaller0: entered promiscuous mode [ 477.762213][T19651] syzkaller0: entered allmulticast mode [ 477.795516][T19651] simple: basic_1 [ 477.799520][T19651] simple: basic_2 [ 477.803255][T19651] simple: basic_3 [ 477.807014][T19651] simple: basic_4 [ 477.810758][T19651] simple: basic_5 [ 477.814477][T19651] simple: basic_6 [ 477.818140][T19651] simple: basic_7 [ 477.821955][T19651] simple: basic_8 [ 477.825715][T19651] simple: basic_9 [ 477.829393][T19651] simple: basic_10 [ 477.833211][T19651] simple: basic_11 [ 477.836975][T19651] simple: basic_12 [ 477.840746][T19651] simple: basic_13 [ 477.844518][T19651] simple: basic_14 [ 477.848291][T19651] simple: basic_15 [ 477.852110][T19651] simple: basic_16 [ 477.855861][T19651] simple: basic_17 [ 477.859609][T19651] simple: basic_18 [ 477.863442][T19651] simple: basic_19 [ 477.867366][T19651] simple: basic_20 [ 477.871166][T19651] simple: basic_21 [ 477.874925][T19651] simple: basic_22 [ 477.878669][T19651] simple: basic_23 [ 477.882504][T19651] simple: basic_24 [ 477.886334][T19651] simple: basic_25 [ 477.890073][T19651] simple: basic_26 [ 477.893881][T19651] simple: basic_27 [ 477.897625][T19651] simple: basic_28 [ 477.901536][T19651] simple: basic_29 [ 477.905370][T19651] simple: basic_30 [ 477.909112][T19651] simple: basic_31 [ 477.912905][T19651] simple: basic_32 [ 477.916655][T19651] TC_ACT_REPEAT abuse ? [ 478.369760][T19668] lo: Caught tx_queue_len zero misconfig [ 478.732519][T19703] netlink: 'syz.0.4028': attribute type 11 has an invalid length. [ 478.746228][T19703] netlink: 'syz.0.4028': attribute type 11 has an invalid length. [ 478.930979][T19720] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 479.153142][T19726] syzkaller0: entered promiscuous mode [ 479.158729][T19726] syzkaller0: entered allmulticast mode [ 479.197912][T19726] simple: basic_1 [ 479.202122][T19726] simple: basic_2 [ 479.205827][T19726] simple: basic_3 [ 479.209522][T19726] simple: basic_4 [ 479.213229][T19726] simple: basic_5 [ 479.216920][T19726] simple: basic_6 [ 479.220579][T19726] simple: basic_7 [ 479.224543][T19726] simple: basic_8 [ 479.228207][T19726] simple: basic_9 [ 479.231904][T19726] simple: basic_10 [ 479.235716][T19726] simple: basic_11 [ 479.239577][T19726] simple: basic_12 [ 479.243380][T19726] simple: basic_13 [ 479.247140][T19726] simple: basic_14 [ 479.251060][T19726] simple: basic_15 [ 479.254845][T19726] simple: basic_16 [ 479.258589][T19726] simple: basic_17 [ 479.262635][T19726] simple: basic_18 [ 479.266385][T19726] simple: basic_19 [ 479.270126][T19726] simple: basic_20 [ 479.273903][T19726] simple: basic_21 [ 479.277661][T19726] simple: basic_22 [ 479.281640][T19726] simple: basic_23 [ 479.285396][T19726] simple: basic_24 [ 479.289144][T19726] simple: basic_25 [ 479.292952][T19726] simple: basic_26 [ 479.296702][T19726] simple: basic_27 [ 479.300455][T19726] simple: basic_28 [ 479.304262][T19726] simple: basic_29 [ 479.308011][T19726] simple: basic_30 [ 479.311810][T19726] simple: basic_31 [ 479.315644][T19726] simple: basic_32 [ 479.319393][T19726] TC_ACT_REPEAT abuse ? [ 479.327235][T19741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.407340][T19735] syzkaller0: entered promiscuous mode [ 479.413262][T19735] syzkaller0: entered allmulticast mode [ 479.561126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms [ 479.569307][ C0] lec:lec_tx_timeout: lec0 [ 479.574351][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 479.725689][T19756] xt_hashlimit: invalid interval [ 479.759372][T19759] netlink: 'syz.2.4043': attribute type 3 has an invalid length. [ 480.246894][T19782] __nla_validate_parse: 9 callbacks suppressed [ 480.246915][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 480.370968][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 480.690630][T19806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4053'. [ 480.915186][T19808] syzkaller0: entered promiscuous mode [ 480.920738][T19808] syzkaller0: entered allmulticast mode [ 481.037215][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 482.575643][T19845] netlink: 'syz.4.4061': attribute type 18 has an invalid length. [ 482.861791][ T7477] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.870597][ T7477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.924495][T19851] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 482.931595][ T7477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.030219][ T7477] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.040356][T19858] x_tables: unsorted underflow at hook 4 [ 483.115592][T19859] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 483.143716][T19859] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 483.179692][T19859] bond4: (slave ip6gre2): making interface the new active one [ 483.182996][T19851] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 483.189053][T19859] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 483.217230][T19871] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 483.225741][T19864] netlink: 'syz.3.4067': attribute type 10 has an invalid length. [ 483.241387][T19864] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.4067'. [ 483.242625][T19871] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 483.562027][T19891] syzkaller0: entered promiscuous mode [ 483.593846][T19891] syzkaller0: entered allmulticast mode [ 483.952350][T19904] syzkaller0: entered promiscuous mode [ 483.958105][T19904] syzkaller0: entered allmulticast mode [ 484.137129][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4080'. [ 484.151692][T19920] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.257804][T19915] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4078'. [ 484.430323][T19934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4083'. [ 484.456395][T19935] syzkaller0: entered promiscuous mode [ 484.462674][T19935] syzkaller0: entered allmulticast mode [ 484.472062][T19933] 0: reclassify loop, rule prio 0, protocol 800 [ 484.557608][T19942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4087'. [ 484.578150][T19942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4087'. [ 484.670398][T19946] syzkaller1: entered promiscuous mode [ 484.683047][T19946] syzkaller1: entered allmulticast mode [ 484.744888][T19949] netlink: 'syz.4.4089': attribute type 1 has an invalid length. [ 484.769945][T19951] netlink: 'syz.2.4090': attribute type 16 has an invalid length. [ 484.794737][T19949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.253107][T19981] netlink: 'syz.0.4098': attribute type 15 has an invalid length. [ 485.375688][T19983] netlink: 'syz.3.4100': attribute type 11 has an invalid length. [ 485.383990][T19983] netlink: 'syz.3.4100': attribute type 11 has an invalid length. [ 485.392513][T19983] __nla_validate_parse: 6 callbacks suppressed [ 485.392535][T19983] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4100'. [ 485.411190][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 485.419306][ C0] lec:lec_tx_timeout: lec0 [ 485.425016][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 485.908547][T20017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.004509][T20019] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 486.093085][T20019] bond0: Caught tx_queue_len zero misconfig [ 486.283360][T20036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.354770][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4119'. [ 486.522197][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 486.532711][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'. [ 486.585175][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4124'. [ 486.625406][T20056] vxcan2: entered allmulticast mode [ 486.656170][T20061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4125'. [ 486.702048][T20065] syzkaller0: entered promiscuous mode [ 486.707780][T20065] syzkaller0: entered allmulticast mode [ 486.800740][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'. [ 486.833140][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4126'. [ 486.850761][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 486.880941][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'. [ 486.881007][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.965665][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.991848][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.056060][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.107638][T20087] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 487.406458][T20083] syzkaller0: entered promiscuous mode [ 487.431772][T20083] syzkaller0: entered allmulticast mode [ 489.113331][T20112] gretap1: left promiscuous mode [ 489.184233][ T1149] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.195601][ T1149] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 489.218949][ T1149] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.249977][ T1149] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 489.292096][ T7479] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.300802][ T7479] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 489.338238][ T7479] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.347748][ T7479] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 489.384182][T20133] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.433547][T20137] x_tables: duplicate underflow at hook 3 [ 489.750633][T20151] netlink: 'syz.0.4148': attribute type 10 has an invalid length. [ 489.768288][T20153] ip6t_srh: unknown srh invflags 4000 [ 489.774274][T20151] bridge_slave_1: left allmulticast mode [ 489.774300][T20151] bridge_slave_1: left promiscuous mode [ 489.774534][T20151] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.800302][T20151] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 490.376734][T20183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.396623][T20183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 54483 - 0 [ 490.431202][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 490.439301][ C0] lec:lec_tx_timeout: lec0 [ 490.444222][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 490.464907][T20188] syzkaller0: entered promiscuous mode [ 490.474635][T20188] syzkaller0: entered allmulticast mode [ 490.637567][T20197] ip6t_srh: unknown srh invflags 4000 [ 490.759102][T20183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.772476][T20183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 54483 - 0 [ 490.897992][T20183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.910207][T20183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 54483 - 0 [ 491.055598][T20183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.071342][T20183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 54483 - 0 [ 491.093074][T20219] __nla_validate_parse: 9 callbacks suppressed [ 491.093095][T20219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4171'. [ 491.165194][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.260574][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.289912][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 54483 - 0 [ 491.349056][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.372222][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 54483 - 0 [ 491.419401][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.439488][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 54483 - 0 [ 491.500474][T15803] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.512480][T15803] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 54483 - 0 [ 491.530390][T20235] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4173'. [ 491.531573][T20236] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4173'. [ 491.540572][T20235] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 491.558506][T20236] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 491.638913][T20239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.774091][T20246] ip6t_srh: unknown srh invflags 4000 [ 492.224257][T20264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4183'. [ 492.645414][T20276] mpoa:mpoad_close: () going down [ 492.914959][T20295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.935211][T20294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.959082][T20294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4193'. [ 492.983811][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4195'. [ 492.991440][T20295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4193'. [ 493.133491][T20313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4197'. [ 493.135974][T20314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4198'. [ 493.162816][T20313] openvswitch: netlink: Flow key attr not present in new flow. [ 495.451162][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 495.459357][ C0] lec:lec_tx_timeout: lec0 [ 495.464172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 495.983236][T20299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.992361][T20307] netlink: 'syz.2.4196': attribute type 11 has an invalid length. [ 496.009342][T20307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4196'. [ 496.030763][T20330] nbd: illegal input index 2958377 [ 496.223605][T20358] syzkaller0: entered promiscuous mode [ 496.232037][T20362] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4208'. [ 496.241362][T20358] syzkaller0: entered allmulticast mode [ 496.294209][T20365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4209'. [ 496.304138][T20358] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4207'. [ 496.334485][T20369] netlink: 'syz.4.4211': attribute type 1 has an invalid length. [ 496.347235][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4211'. [ 496.370996][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4211'. [ 496.420250][T20372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4211'. [ 496.459680][T20372] netlink: 'syz.4.4211': attribute type 1 has an invalid length. [ 496.469419][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4211'. [ 496.500952][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4211'. [ 496.770948][T20393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4219'. [ 496.786469][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 496.946456][T20397] netlink: 'syz.4.4222': attribute type 9 has an invalid length. [ 497.162301][T20405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.223381][T20419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.269899][T20419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.327673][T20419] bond0 (unregistering): Released all slaves [ 497.382356][T20431] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 497.637181][T20438] bond3: (slave gretap2): making interface the new active one [ 497.673598][T20438] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 498.126110][T20473] sctp: [Deprecated]: syz.3.4239 (pid 20473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.126110][T20473] Use struct sctp_sack_info instead [ 498.256872][T20470] netlink: 'syz.2.4238': attribute type 1 has an invalid length. [ 498.275746][T20470] netlink: 'syz.2.4238': attribute type 2 has an invalid length. [ 498.289776][T20470] netlink: 'syz.2.4238': attribute type 1 has an invalid length. [ 498.376594][T20492] ip6t_srh: unknown srh invflags 4000 [ 498.517082][T20498] netlink: 'syz.1.4246': attribute type 21 has an invalid length. [ 498.614415][T20502] netlink: 'syz.1.4248': attribute type 1 has an invalid length. [ 498.644856][T20495] syzkaller0: entered allmulticast mode [ 498.697592][T20502] bond6: entered promiscuous mode [ 498.709917][T20502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.766000][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.825567][T20502] ipvlan2: entered allmulticast mode [ 498.891401][T20502] bond6: entered allmulticast mode [ 498.922205][T16397] Bluetooth: hci5: command 0x0406 tx timeout [ 498.960755][T20504] bond6: (slave bridge1): making interface the new active one [ 498.969078][T20504] bridge1: entered promiscuous mode [ 498.976759][T20504] bridge1: entered allmulticast mode [ 498.986008][T20504] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 499.163941][T20528] ip6t_srh: unknown srh invflags 4000 [ 499.526731][T20549] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 499.568854][T20549] bond3 (unregistering): Released all slaves [ 499.574797][T20553] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 499.630045][T20557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.927328][T20574] ip6t_srh: unknown srh invflags 4000 [ 500.390843][T20597] netlink: 'syz.4.4276': attribute type 21 has an invalid length. [ 500.471168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 500.475574][T20598] bond7: (slave bond_slave_1): Device is not our slave [ 500.479268][ C0] lec:lec_tx_timeout: lec0 [ 500.490712][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 500.520013][T20598] bond7: option active_slave: invalid value (bond_slave_1) [ 500.583075][T20598] bond7 (unregistering): Released all slaves [ 500.760210][T20619] ip6t_srh: unknown srh invflags 4000 [ 501.008345][T20627] openvswitch: netlink: Flow actions attr not present in new flow. [ 501.241936][ T29] audit: type=1804 audit(1775259437.319:7): pid=20642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4289" name="/newroot/275/memory.events" dev="tmpfs" ino=1429 res=1 errno=0 [ 501.244970][T20642] __nla_validate_parse: 18 callbacks suppressed [ 501.244989][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 501.301245][ T29] audit: type=1800 audit(1775259437.329:8): pid=20642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4289" name="memory.events" dev="tmpfs" ino=1429 res=0 errno=0 [ 501.324788][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4291'. [ 501.375963][T20648] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4291'. [ 501.426447][T20655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4292'. [ 501.487031][T20653] bridge_slave_1: left allmulticast mode [ 501.569548][T20653] bond6: left promiscuous mode [ 501.593157][T20653] bridge1: left promiscuous mode [ 501.613500][T20653] ipvlan2: left allmulticast mode [ 501.618630][T20653] bond6: left allmulticast mode [ 501.625083][T20653] bridge1: left allmulticast mode [ 501.635327][T15803] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.651184][T15803] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 54483 - 0 [ 501.787270][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.814896][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 54483 - 0 [ 501.838356][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.858758][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 54483 - 0 [ 501.881630][T20671] ip6t_srh: unknown srh invflags 4000 [ 501.888297][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.923156][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 54483 - 0 [ 501.966438][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.984936][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 502.432215][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 502.506501][T20704] netlink: 'syz.2.4304': attribute type 5 has an invalid length. [ 502.557732][T20704] netlink: 'syz.2.4304': attribute type 1 has an invalid length. [ 502.590848][T20704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4304'. [ 502.720100][T20708] xfrm1: entered allmulticast mode [ 502.793515][T20715] netlink: 'syz.0.4308': attribute type 5 has an invalid length. [ 502.990147][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 503.049105][T20729] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 503.087227][T20735] ipt_rpfilter: unknown options [ 503.158481][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'. [ 503.333118][T20747] ip6t_srh: unknown srh invflags 4000 [ 503.398471][T20751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4320'. [ 503.679437][T20772] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 504.150689][T20789] x_tables: duplicate underflow at hook 2 [ 504.158026][T20794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.515584][ T29] audit: type=1800 audit(1775259440.599:9): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4339" name="memory.events" dev="tmpfs" ino=1005 res=0 errno=0 [ 504.586836][T20812] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 504.716470][T20819] openvswitch: netlink: Key type 30 is not supported [ 504.730101][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.748310][T20819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.778666][T20822] syzkaller0: entered promiscuous mode [ 504.784640][T20822] syzkaller0: entered allmulticast mode [ 505.254432][T20850] xt_policy: output policy not valid in PREROUTING and INPUT [ 505.319273][T20849] syzkaller0: entered promiscuous mode [ 505.349394][T20849] tipc: Started in network mode [ 505.357539][T20849] tipc: Node identity 4, cluster identity 4711 [ 505.381220][T20849] tipc: Node number set to 4 [ 505.511125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 505.519322][ C0] lec:lec_tx_timeout: lec0 [ 505.524579][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.032904][T20874] ip6t_srh: unknown srh invflags 4000 [ 507.229394][T20864] bond5: entered allmulticast mode [ 507.252840][T20866] bridge2: entered promiscuous mode [ 507.258193][T20866] bridge2: entered allmulticast mode [ 507.427558][T20889] __nla_validate_parse: 5 callbacks suppressed [ 507.427581][T20889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4362'. [ 507.586338][T20900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.716332][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 507.860998][T20919] ip6t_srh: unknown srh invflags 4000 [ 507.957146][T20918] macvlan2: entered promiscuous mode [ 508.021147][T20918] macvlan2: entered allmulticast mode [ 508.035525][T20918] bond6: (slave macvlan2): Opening slave failed [ 508.126061][T20931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4375'. [ 508.333343][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'. [ 508.349246][T20940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4380'. [ 508.354103][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4377'. [ 508.562713][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 509.163392][T16397] Bluetooth: hci4: command 0x0406 tx timeout [ 509.166592][T20983] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4395'. [ 509.195472][T20983] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4395'. [ 509.373597][T20996] sctp: [Deprecated]: syz.0.4402 (pid 20996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.373597][T20996] Use struct sctp_sack_info instead [ 509.407708][T20998] netlink: 'syz.4.4401': attribute type 1 has an invalid length. [ 509.442974][T21001] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4403'. [ 509.468002][T20998] bond6: entered promiscuous mode [ 509.473394][T20998] bond6: entered allmulticast mode [ 509.478964][T20998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.513312][T21005] macvlan2: entered promiscuous mode [ 509.546245][T21005] macvlan2: entered allmulticast mode [ 509.598941][T21005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.049300][T21034] netlink: 'syz.2.4415': attribute type 21 has an invalid length. [ 510.176950][T21043] openvswitch: netlink: IP tunnel dst address not specified [ 510.531390][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 510.539485][ C0] lec:lec_tx_timeout: lec0 [ 510.551259][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 510.570376][T21065] xt_hashlimit: max too large, truncated to 1048576 [ 511.502766][T21102] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 511.560887][T21102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.600299][T21102] bond3: (slave geneve4): making interface the new active one [ 511.611029][T21102] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 511.620682][T15803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.632174][T15803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.660318][T15803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.735491][T15803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.800351][T21114] ip6t_srh: unknown srh invflags 4000 [ 512.095539][T21121] bond7: option mode: invalid value (133) [ 512.128457][T21121] bond7 (unregistering): Released all slaves [ 512.215792][T21122] bridge_slave_1: entered allmulticast mode [ 512.257607][T21137] ip6tnl0: Caught tx_queue_len zero misconfig [ 512.292059][T21139] netlink: 'syz.4.4447': attribute type 3 has an invalid length. [ 512.730860][T21170] __nla_validate_parse: 9 callbacks suppressed [ 512.730881][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4456'. [ 512.914526][T21175] syzkaller0: entered promiscuous mode [ 512.921958][T21175] syzkaller0: entered allmulticast mode [ 512.933086][T21175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4458'. [ 512.964226][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4458'. [ 513.142324][T21186] netlink: 'syz.4.4463': attribute type 30 has an invalid length. [ 513.177735][T21189] Bluetooth: MGMT ver 1.23 [ 513.327939][T21197] netlink: 'syz.4.4467': attribute type 4 has an invalid length. [ 513.338638][T21196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4464'. [ 513.444671][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4464'. [ 513.602736][T21212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4469'. [ 513.602820][T21214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4470'. [ 513.668884][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4471'. [ 513.716371][T21220] sock: sock_set_timeout: `syz.3.4472' (pid 21220) tries to set negative timeout [ 513.730730][T21216] bond7: Removing last ns target with arp_interval on [ 513.956387][T21235] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4478'. [ 514.075231][T21240] IPVS: set_ctl: invalid protocol: 94 172.20.20.26:20002 [ 514.284019][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 514.324183][T21250] syzkaller0: entered promiscuous mode [ 514.329978][T21250] syzkaller0: entered allmulticast mode [ 514.339380][T21250] simple: basic_1 [ 514.343408][T21250] simple: basic_2 [ 514.347104][T21250] simple: basic_3 [ 514.350767][T21250] simple: basic_4 [ 514.354471][T21250] simple: basic_5 [ 514.358134][T21250] simple: basic_6 [ 514.361998][T21250] simple: basic_7 [ 514.365655][T21250] simple: basic_8 [ 514.369403][T21250] simple: basic_9 [ 514.373097][T21250] simple: basic_10 [ 514.376843][T21250] simple: basic_11 [ 514.380600][T21250] simple: basic_12 [ 514.384413][T21250] simple: basic_13 [ 514.388158][T21250] simple: basic_14 [ 514.391963][T21250] simple: basic_15 [ 514.395710][T21250] simple: basic_16 [ 514.399451][T21250] simple: basic_17 [ 514.403251][T21250] simple: basic_18 [ 514.406989][T21250] simple: basic_19 [ 514.410734][T21250] simple: basic_20 [ 514.414543][T21250] simple: basic_21 [ 514.418281][T21250] simple: basic_22 [ 514.422066][T21250] simple: basic_23 [ 514.425807][T21250] simple: basic_24 [ 514.429563][T21250] simple: basic_25 [ 514.433372][T21250] simple: basic_26 [ 514.437113][T21250] simple: basic_27 [ 514.440856][T21250] simple: basic_28 [ 514.444663][T21250] simple: basic_29 [ 514.448406][T21250] simple: basic_30 [ 514.452194][T21250] simple: basic_31 [ 514.455943][T21250] simple: basic_32 [ 514.459685][T21250] TC_ACT_REPEAT abuse ? [ 514.922439][T21267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4487'. [ 515.043408][T21273] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 515.395295][T21273] bond8: entered promiscuous mode [ 515.408553][T21273] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.511495][T21277] ipvlan2: entered allmulticast mode [ 515.561404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 515.569587][ C0] lec:lec_tx_timeout: lec0 [ 515.574603][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 515.588815][T21277] bond8: entered allmulticast mode [ 515.673179][T21283] bond8: (slave bridge3): making interface the new active one [ 515.692334][T21283] bridge3: entered promiscuous mode [ 515.701864][T21283] bridge3: entered allmulticast mode [ 515.729670][T21283] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 515.749830][T21301] FAULT_INJECTION: forcing a failure. [ 515.749830][T21301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.803846][T21301] CPU: 1 UID: 0 PID: 21301 Comm: syz.3.4496 Not tainted syzkaller #0 PREEMPT(full) [ 515.803876][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.803886][T21301] Call Trace: [ 515.803893][T21301] [ 515.803901][T21301] dump_stack_lvl+0xe8/0x150 [ 515.803932][T21301] should_fail_ex+0x412/0x560 [ 515.803960][T21301] _copy_from_user+0x2d/0xb0 [ 515.803980][T21301] __sys_connect+0x156/0x450 [ 515.804002][T21301] ? __pfx___sys_connect+0x10/0x10 [ 515.804033][T21301] ? __pfx_ksys_write+0x10/0x10 [ 515.804059][T21301] __x64_sys_connect+0x7a/0x90 [ 515.804079][T21301] do_syscall_64+0x14d/0xf80 [ 515.804098][T21301] ? trace_irq_disable+0x3b/0x150 [ 515.804113][T21301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.804130][T21301] ? clear_bhb_loop+0x40/0x90 [ 515.804151][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.804213][T21301] RIP: 0033:0x7fb69419c819 [ 515.804230][T21301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.804244][T21301] RSP: 002b:00007fb6950f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 515.804263][T21301] RAX: ffffffffffffffda RBX: 00007fb694416090 RCX: 00007fb69419c819 [ 515.804275][T21301] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 515.804285][T21301] RBP: 00007fb6950f6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.804295][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.804305][T21301] R13: 00007fb694416128 R14: 00007fb694416090 R15: 00007ffc90e170e8 [ 515.804333][T21301] [ 515.841983][T21293] xt_TPROXY: Can be used only with -p tcp or -p udp [ 517.416685][T21321] sit0: left promiscuous mode [ 517.520867][T21321] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.528738][T21321] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.833394][T21321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.849051][T21321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.093912][T21321] bond3: left promiscuous mode [ 518.115394][T21321] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 518.131903][T21321] ipvlan2: left allmulticast mode [ 518.136991][T21321] batadv_slave_1: left allmulticast mode [ 518.166889][T21321] bond5: left allmulticast mode [ 518.181401][T21321] bridge2: left promiscuous mode [ 518.191590][T21321] bridge2: left allmulticast mode [ 518.242671][T21333] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 518.257499][ T171] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.338545][ T171] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.380451][ T171] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 39797 - 0 [ 518.396265][ T171] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.455694][ T171] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.465767][ T171] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 39797 - 0 [ 518.477504][ T171] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.531374][ T171] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.542301][ T171] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 39797 - 0 [ 518.563330][ T171] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.585523][ T171] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.618578][ T171] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 39797 - 0 [ 518.707711][T21351] ip6t_srh: unknown srh invflags 4000 [ 518.848382][T21353] __nla_validate_parse: 10 callbacks suppressed [ 518.848405][T21353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4513'. [ 519.045444][T21359] netlink: 'syz.1.4516': attribute type 1 has an invalid length. [ 519.403752][T16397] Bluetooth: hci2: command 0x0406 tx timeout [ 519.740212][T21381] bond7: option resend_igmp: invalid value (32767) [ 519.749176][T21381] bond7: option resend_igmp: allowed values 0 - 255 [ 519.772517][T21381] bond7 (unregistering): Released all slaves [ 520.298624][T21405] x_tables: duplicate underflow at hook 1 [ 520.571574][T21408] syzkaller0: entered promiscuous mode [ 520.577294][T21408] syzkaller0: entered allmulticast mode [ 520.919048][T21423] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 521.358661][T21427] set match dimension is over the limit! [ 521.403808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 521.411922][ C0] lec:lec_tx_timeout: lec0 [ 521.417210][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.612671][T21268] Set syz1 is full, maxelem 65536 reached [ 521.835424][T21435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4539'. [ 522.940154][T21434] bond6: left promiscuous mode [ 522.945633][T21434] bond6: left allmulticast mode [ 522.956356][T21434] bond8: left promiscuous mode [ 522.962940][T21434] bridge3: left promiscuous mode [ 522.972623][T21434] ipvlan2: left allmulticast mode [ 522.978441][T21434] bond8: left allmulticast mode [ 522.983950][T21434] bridge3: left allmulticast mode [ 523.004659][T15803] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.014595][T15803] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 35464 - 0 [ 523.026385][T15803] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.036329][T15803] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 35464 - 0 [ 523.049355][T15803] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.067979][T15803] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 35464 - 0 [ 523.082934][T15803] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.092698][T15803] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 35464 - 0 [ 523.235154][T21453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4545'. [ 523.293284][T21451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4544'. [ 523.305802][T21451] netlink: 'syz.2.4544': attribute type 15 has an invalid length. [ 523.372520][T21461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.486595][T21463] Can't find ip_set type hash:ip,port,n [ 523.572546][T21475] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4551'. [ 523.635903][T21475] syzkaller0: entered promiscuous mode [ 523.643034][T21479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4553'. [ 523.652725][T21475] syzkaller0: entered allmulticast mode [ 523.976840][T21490] vlan2: entered promiscuous mode [ 523.982344][T21490] bridge0: entered promiscuous mode [ 524.250201][T21505] netlink: 'syz.0.4558': attribute type 333 has an invalid length. [ 524.670025][T21520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4561'. [ 524.705865][T21520] netlink: 'syz.0.4561': attribute type 15 has an invalid length. [ 524.777168][T21523] bridge_slave_1: left allmulticast mode [ 524.811994][T21523] xfrm1: left allmulticast mode [ 524.820749][T21523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4564'. [ 524.841900][T21527] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4563'. [ 524.858826][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4565'. [ 524.891979][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4565'. [ 524.909869][T21525] syzkaller0: entered promiscuous mode [ 524.923996][T21530] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 524.941638][T21525] syzkaller0: entered allmulticast mode [ 525.094097][T21543] ip6t_srh: unknown srh invflags 4000 [ 525.128906][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4571'. [ 525.312394][T21555] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 525.333280][T21556] netlink: 'syz.2.4575': attribute type 2 has an invalid length. [ 525.412290][T21555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.455054][T21558] vlan3: entered promiscuous mode [ 525.460216][T21558] bond4: entered promiscuous mode [ 525.470037][T21558] vlan3: entered allmulticast mode [ 525.475992][T21558] bond4: entered allmulticast mode [ 525.582174][T21563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4576'. [ 525.603939][T21563] netlink: 'syz.4.4576': attribute type 15 has an invalid length. [ 525.619800][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'. [ 525.721424][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 39797 - 0 [ 525.724493][T21573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4579'. [ 525.730469][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 39797 - 0 [ 525.730517][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 39797 - 0 [ 525.769444][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 39797 - 0 [ 526.045945][T21579] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4583'. [ 526.051218][T21584] ip6t_srh: unknown srh invflags 4000 [ 526.431343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 526.439459][ C0] lec:lec_tx_timeout: lec0 [ 526.444437][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 526.542509][T21614] netlink: 'syz.1.4595': attribute type 12 has an invalid length. [ 526.579760][T21614] bond8: option primary_reselect: invalid value (255) [ 526.618109][T21614] bond8 (unregistering): Released all slaves [ 526.629926][T21621] ip6t_srh: unknown srh invflags 4000 [ 527.380858][T21666] netlink: 'syz.3.4613': attribute type 9 has an invalid length. [ 527.396979][T21666] netlink: 'syz.3.4613': attribute type 11 has an invalid length. [ 527.530344][T21673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.835819][T21693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.896164][T21693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.250338][T21712] wg1: entered promiscuous mode [ 528.261001][T21712] wg1: entered allmulticast mode [ 528.447535][T21727] validate_nla: 3 callbacks suppressed [ 528.447556][T21727] netlink: 'syz.2.4631': attribute type 2 has an invalid length. [ 528.621701][T21737] Cannot find add_set index 2 as target [ 528.869363][T21747] syzkaller0: entered promiscuous mode [ 528.875421][T21747] syzkaller0: entered allmulticast mode [ 528.895450][T21747] simple: basic_1 [ 528.899396][T21747] simple: basic_2 [ 528.903082][T21747] simple: basic_3 [ 528.906717][T21747] simple: basic_4 [ 528.910385][T21747] simple: basic_5 [ 528.914039][T21747] simple: basic_6 [ 528.917659][T21747] simple: basic_7 [ 528.921304][T21747] simple: basic_8 [ 528.924943][T21747] simple: basic_9 [ 528.928562][T21747] simple: basic_10 [ 528.932386][T21747] simple: basic_11 [ 528.936095][T21747] simple: basic_12 [ 528.939811][T21747] simple: basic_13 [ 528.943562][T21747] simple: basic_14 [ 528.947270][T21747] simple: basic_15 [ 528.950985][T21747] simple: basic_16 [ 528.954717][T21747] simple: basic_17 [ 528.958424][T21747] simple: basic_18 [ 528.962249][T21747] simple: basic_19 [ 528.966131][T21747] simple: basic_20 [ 528.970033][T21747] simple: basic_21 [ 528.973763][T21747] simple: basic_22 [ 528.977484][T21747] simple: basic_23 [ 528.981355][T21747] simple: basic_24 [ 528.985140][T21747] simple: basic_25 [ 528.988846][T21747] simple: basic_26 [ 528.992574][T21747] simple: basic_27 [ 528.996288][T21747] simple: basic_28 [ 528.999996][T21747] simple: basic_29 [ 529.003836][T21747] simple: basic_30 [ 529.007563][T21747] simple: basic_31 [ 529.011297][T21747] simple: basic_32 [ 529.015028][T21747] TC_ACT_REPEAT abuse ? [ 529.343866][T21775] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.612963][T21786] netlink: 'syz.4.4653': attribute type 2 has an invalid length. [ 529.655308][T21786] 9: entered promiscuous mode [ 529.950946][T21819] __nla_validate_parse: 15 callbacks suppressed [ 529.950969][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'. [ 530.016447][T21819] : entered promiscuous mode [ 530.085621][T21825] netlink: 'syz.3.4666': attribute type 2 has an invalid length. [ 530.112825][T21825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4666'. [ 530.138945][T21827] Can't find ip_set type [ 530.391009][T21847] netlink: 'syz.1.4672': attribute type 1 has an invalid length. [ 530.454906][T21851] IPVS: length: 239 != 24 [ 530.470796][T21851] netlink: 'syz.3.4673': attribute type 142 has an invalid length. [ 530.866800][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 531.043050][T21886] Bluetooth: MGMT ver 1.23 [ 531.054405][T21888] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4686'. [ 531.075697][T21886] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 531.220122][T21898] netlink: 'syz.3.4689': attribute type 11 has an invalid length. [ 531.252045][T21898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4689'. [ 531.277653][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4689'. [ 531.348335][T21901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4690'. [ 531.360482][T21901] netlink: 'syz.0.4690': attribute type 15 has an invalid length. [ 531.423219][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4694'. [ 531.442542][T21909] ip6t_srh: unknown srh invflags 4000 [ 531.451116][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.459458][ C0] lec:lec_tx_timeout: lec0 [ 531.464141][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.790201][T21929] vlan2: entered promiscuous mode [ 531.848375][T21933] team0: Device gtp0 is up. Set it down before adding it as a team port [ 532.011329][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 532.036213][T21941] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4703'. [ 532.058628][T21941] netlink: 'syz.3.4703': attribute type 5 has an invalid length. [ 532.195249][T21956] netlink: 'syz.0.4708': attribute type 15 has an invalid length. [ 532.255579][T21962] netlink: 'syz.3.4710': attribute type 21 has an invalid length. [ 532.466095][T21967] xt_CT: No such helper "pptp" [ 532.484037][T21968] xt_CT: No such helper "pptp" [ 533.081204][T16397] Bluetooth: hci2: command 0x0406 tx timeout [ 533.081432][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 533.738890][T22041] vlan3: left promiscuous mode [ 533.761257][T22041] bond4: left promiscuous mode [ 533.771788][T22041] vlan3: left allmulticast mode [ 533.791362][T22041] bond4: left allmulticast mode [ 533.973666][T22058] veth0_to_team: entered allmulticast mode [ 534.407964][T22091] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 534.569617][T22096] syzkaller0: entered promiscuous mode [ 534.572600][T22098] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 534.587966][T22096] syzkaller0: entered allmulticast mode [ 534.785682][T22107] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 534.975150][T22122] __nla_validate_parse: 15 callbacks suppressed [ 534.975172][T22122] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4759'. [ 535.052711][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4758'. [ 535.089416][T22132] IPVS: set_ctl: invalid protocol: 59 10.1.0.254:20004 [ 535.137036][T22126] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4759'. [ 535.517793][T22156] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4765'. [ 535.528122][T22156] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 535.561596][T22158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4766'. [ 535.808042][T22167] bond0: (slave rose0): Error: Device can not be enslaved while up [ 536.075735][T22191] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4776'. [ 536.273727][T22199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.471110][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.479271][ C0] lec:lec_tx_timeout: lec0 [ 536.484555][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 536.632484][T22220] lo speed is unknown, defaulting to 1000 [ 536.667380][T22220] lo speed is unknown, defaulting to 1000 [ 536.686744][T22220] lo speed is unknown, defaulting to 1000 [ 536.788341][T22232] gtp1: entered promiscuous mode [ 536.822317][T22232] gtp1: entered allmulticast mode [ 536.867973][T22239] validate_nla: 2 callbacks suppressed [ 536.867994][T22239] netlink: 'syz.1.4791': attribute type 4 has an invalid length. [ 537.179328][T22220] infiniband syz2: set down [ 537.184076][ T6715] lo speed is unknown, defaulting to 1000 [ 537.201181][T22220] infiniband syz2: added lo [ 537.291782][T22220] RDS/IB: syz2: added [ 537.295894][T22220] smc: adding ib device syz2 with port count 1 [ 537.311548][T22220] smc: ib device syz2 port 1 has no pnetid [ 537.323192][ T5901] lo speed is unknown, defaulting to 1000 [ 537.332297][T22220] lo speed is unknown, defaulting to 1000 [ 537.411683][T22265] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4799'. [ 537.459052][ T51] Bluetooth: hci0: link tx timeout [ 537.468846][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 537.479740][T22265] bond8 (unregistering): Released all slaves [ 537.654184][T22271] syzkaller0: entered promiscuous mode [ 537.670085][T22271] syzkaller0: entered allmulticast mode [ 537.934495][T22220] lo speed is unknown, defaulting to 1000 [ 538.335120][T22285] syzkaller0: entered promiscuous mode [ 538.352004][T22285] syzkaller0: entered allmulticast mode [ 538.362147][T22284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4804'. [ 538.364582][T22285] simple: basic_1 [ 538.375221][T22285] simple: basic_2 [ 538.378889][T22285] simple: basic_3 [ 538.382594][T22285] simple: basic_4 [ 538.386267][T22285] simple: basic_5 [ 538.388176][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4804'. [ 538.389917][T22285] simple: basic_6 [ 538.389931][T22285] simple: basic_7 [ 538.406725][T22285] simple: basic_8 [ 538.410393][T22285] simple: basic_9 [ 538.414097][T22285] simple: basic_10 [ 538.417958][T22285] simple: basic_11 [ 538.421834][T22285] simple: basic_12 [ 538.425576][T22285] simple: basic_13 [ 538.429313][T22285] simple: basic_14 [ 538.433081][T22285] simple: basic_15 [ 538.436825][T22285] simple: basic_16 [ 538.440567][T22285] simple: basic_17 [ 538.444454][T22285] simple: basic_18 [ 538.448199][T22285] simple: basic_19 [ 538.452031][T22285] simple: basic_20 [ 538.455768][T22285] simple: basic_21 [ 538.459599][T22285] simple: basic_22 [ 538.463388][T22285] simple: basic_23 [ 538.467125][T22285] simple: basic_24 [ 538.470862][T22285] simple: basic_25 [ 538.474739][T22285] simple: basic_26 [ 538.478472][T22285] simple: basic_27 [ 538.482253][T22285] simple: basic_28 [ 538.485992][T22285] simple: basic_29 [ 538.489731][T22285] simple: basic_30 [ 538.493613][T22285] simple: basic_31 [ 538.497371][T22285] simple: basic_32 [ 538.501202][T22285] TC_ACT_REPEAT abuse ? [ 538.581297][T22220] lo speed is unknown, defaulting to 1000 [ 538.761373][T22223] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 538.767630][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 538.774403][T22223] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 538.799948][T22303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4809'. [ 538.860760][T22296] netlink: 'syz.0.4809': attribute type 15 has an invalid length. [ 539.055314][T22310] Unknown options in mask b7f2 [ 539.145027][T22313] veth9: entered promiscuous mode [ 539.145573][T22319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.150280][T22313] veth9: entered allmulticast mode [ 539.157541][T22319] IPv6: NLM_F_CREATE should be set when creating new route [ 539.157602][T22319] IPv6: NLM_F_CREATE should be set when creating new route [ 539.157630][T22319] IPv6: NLM_F_CREATE should be set when creating new route [ 539.178519][T22319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.190726][T22220] lo speed is unknown, defaulting to 1000 [ 539.456832][T22335] netlink: 'syz.0.4821': attribute type 15 has an invalid length. [ 539.481388][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 539.553915][T22339] syzkaller0: entered promiscuous mode [ 539.559644][T22339] syzkaller0: entered allmulticast mode [ 539.568758][T22339] simple: basic_1 [ 539.572924][T22339] simple: basic_2 [ 539.576611][T22339] simple: basic_3 [ 539.580275][T22339] simple: basic_4 [ 539.583992][T22339] simple: basic_5 [ 539.587821][T22339] simple: basic_6 [ 539.591512][T22339] simple: basic_7 [ 539.595167][T22339] simple: basic_8 [ 539.598830][T22339] simple: basic_9 [ 539.602619][T22339] simple: basic_10 [ 539.606360][T22339] simple: basic_11 [ 539.610098][T22339] simple: basic_12 [ 539.613900][T22339] simple: basic_13 [ 539.617641][T22339] simple: basic_14 [ 539.621446][T22339] simple: basic_15 [ 539.625283][T22339] simple: basic_16 [ 539.629020][T22339] simple: basic_17 [ 539.632831][T22339] simple: basic_18 [ 539.633573][T22220] lo speed is unknown, defaulting to 1000 [ 539.636563][T22339] simple: basic_19 [ 539.646113][T22339] simple: basic_20 [ 539.649850][T22339] simple: basic_21 [ 539.653650][T22339] simple: basic_22 [ 539.657391][T22339] simple: basic_23 [ 539.661173][T22339] simple: basic_24 [ 539.664945][T22339] simple: basic_25 [ 539.665140][T22223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.668669][T22339] simple: basic_26 [ 539.668683][T22339] simple: basic_27 [ 539.668693][T22339] simple: basic_28 [ 539.683240][T22223] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 539.685829][T22339] simple: basic_29 [ 539.685844][T22339] simple: basic_30 [ 539.685854][T22339] simple: basic_31 [ 539.685865][T22339] simple: basic_32 [ 539.685877][T22339] TC_ACT_REPEAT abuse ? [ 539.724178][T22223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.734675][T22223] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 539.992243][T22223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.001319][T22223] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 540.037319][T22220] lo speed is unknown, defaulting to 1000 [ 540.205907][T22351] netlink: 'syz.1.4826': attribute type 3 has an invalid length. [ 540.217497][T22351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.243260][T22351] __nla_validate_parse: 2 callbacks suppressed [ 540.243279][T22351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4826'. [ 540.341346][T22351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4826'. [ 540.709062][T22374] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4833'. [ 540.755845][T22374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4833'. [ 540.839969][T22220] lo speed is unknown, defaulting to 1000 [ 541.115115][T22393] syzkaller0: entered promiscuous mode [ 541.141296][T22393] syzkaller0: entered allmulticast mode [ 541.154446][T22393] simple: basic_1 [ 541.158382][T22393] simple: basic_2 [ 541.162103][T22393] simple: basic_3 [ 541.165797][T22393] simple: basic_4 [ 541.169453][T22393] simple: basic_5 [ 541.173171][T22393] simple: basic_6 [ 541.176825][T22393] simple: basic_7 [ 541.180481][T22393] simple: basic_8 [ 541.184188][T22393] simple: basic_9 [ 541.187844][T22393] simple: basic_10 [ 541.191614][T22393] simple: basic_11 [ 541.195366][T22393] simple: basic_12 [ 541.199107][T22393] simple: basic_13 [ 541.202905][T22393] simple: basic_14 [ 541.206646][T22393] simple: basic_15 [ 541.210389][T22393] simple: basic_16 [ 541.214175][T22393] simple: basic_17 [ 541.217910][T22393] simple: basic_18 [ 541.221698][T22393] simple: basic_19 [ 541.225451][T22393] simple: basic_20 [ 541.229198][T22393] simple: basic_21 [ 541.233072][T22393] simple: basic_22 [ 541.236813][T22393] simple: basic_23 [ 541.240550][T22393] simple: basic_24 [ 541.244314][T22393] simple: basic_25 [ 541.248055][T22393] simple: basic_26 [ 541.251834][T22393] simple: basic_27 [ 541.255583][T22393] simple: basic_28 [ 541.259331][T22393] simple: basic_29 [ 541.263136][T22393] simple: basic_30 [ 541.266924][T22393] simple: basic_31 [ 541.270670][T22393] simple: basic_32 [ 541.274477][T22393] TC_ACT_REPEAT abuse ? [ 541.491182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 541.499323][ C0] lec:lec_tx_timeout: lec0 [ 541.504480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 541.661397][T22220] lo speed is unknown, defaulting to 1000 [ 541.853561][T22421] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4843'. [ 541.854905][T22426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.976369][T22426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.981572][T22428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4843'. [ 542.072620][ T7475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.081580][ T7475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.090323][ T7475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.171211][ T7475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.180615][T22442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4843'. [ 542.243062][T22442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.274876][T22442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.313431][T22442] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 542.325050][T22442] bond0 (unregistering): Released all slaves [ 542.351324][T22446] netlink: 'syz.2.4848': attribute type 83 has an invalid length. [ 542.379823][T22446] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4848'. [ 542.399257][T22220] lo speed is unknown, defaulting to 1000 [ 542.644873][T22456] netlink: 'syz.2.4849': attribute type 1 has an invalid length. [ 542.681779][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4849'. [ 542.923251][T22471] ipt_ECN: cannot use operation on non-tcp rule [ 543.136529][T22477] ip6t_srh: unknown srh invflags 4000 [ 543.623472][T22504] netlink: 'syz.1.4863': attribute type 1 has an invalid length. [ 543.669781][T22504] netlink: 'syz.1.4863': attribute type 2 has an invalid length. [ 543.683830][T22510] nbd: must specify an index to disconnect [ 543.787690][T22517] ip6t_srh: unknown srh invflags 4000 [ 543.823103][T22519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4867'. [ 544.092555][T22536] netlink: 'syz.2.4870': attribute type 12 has an invalid length. [ 544.154279][T22526] bond8: Removing last ns target with arp_interval on [ 545.695143][T22631] netlink: 'syz.3.4896': attribute type 28 has an invalid length. [ 545.708573][T22631] netlink: 'syz.3.4896': attribute type 3 has an invalid length. [ 545.718361][T22631] __nla_validate_parse: 6 callbacks suppressed [ 545.718381][T22631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4896'. [ 545.736803][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4896'. [ 545.757830][T22631] vlan2: entered allmulticast mode [ 545.777510][T22631] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 545.805920][T22634] xt_hashlimit: size too large, truncated to 1048576 [ 546.183901][T22643] syz.3.4899 (22643) used greatest stack depth: 17696 bytes left [ 546.244707][T22645] syz.3.4899 (22645) used greatest stack depth: 17472 bytes left [ 546.511332][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 546.519408][ C0] lec:lec_tx_timeout: lec0 [ 546.524127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 546.618104][T22685] syzkaller1: entered promiscuous mode [ 546.624595][T22685] syzkaller1: entered allmulticast mode [ 546.828315][T22693] netlink: 'syz.0.4909': attribute type 9 has an invalid length. [ 547.259569][T22707] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4916'. [ 547.270787][T22707] netlink: 320 bytes leftover after parsing attributes in process `syz.1.4916'. [ 547.468035][T22714] delete_channel: no stack [ 547.597826][T22724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.642497][T22729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4924'. [ 547.688413][T22724] syzkaller1: entered promiscuous mode [ 547.704190][T22724] syzkaller1: entered allmulticast mode [ 547.737022][T22736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4926'. [ 547.805991][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4926'. [ 547.859592][T22742] ip6t_rpfilter: unknown options [ 548.021525][T22757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4931'. [ 548.060248][T22757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 548.078301][T22755] macvlan3: entered promiscuous mode [ 548.085186][T22755] macvlan3: entered allmulticast mode [ 548.099535][T22755] bond9: entered allmulticast mode [ 548.106004][T22755] bond9: entered promiscuous mode [ 548.112619][T22755] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 548.127072][T22755] team0: Port device macvlan3 added [ 548.183655][T22768] veth0: entered promiscuous mode [ 548.195818][T22767] veth0: left promiscuous mode [ 548.261602][T22772] ip6t_srh: unknown srh invflags 4000 [ 548.424114][T22778] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 548.533752][T22778] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4940'. [ 548.720975][T22791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4944'. [ 548.753699][T22791] syzkaller1: entered promiscuous mode [ 548.759293][T22791] syzkaller1: entered allmulticast mode [ 549.094163][T22815] syzkaller0: entered promiscuous mode [ 549.099918][T22815] syzkaller0: entered allmulticast mode [ 549.108848][T22815] simple: basic_1 [ 549.112928][T22815] simple: basic_2 [ 549.116598][T22815] simple: basic_3 [ 549.120232][T22815] simple: basic_4 [ 549.123888][T22815] simple: basic_5 [ 549.127535][T22815] simple: basic_6 [ 549.131276][T22815] simple: basic_7 [ 549.134911][T22815] simple: basic_8 [ 549.138535][T22815] simple: basic_9 [ 549.142189][T22815] simple: basic_10 [ 549.145908][T22815] simple: basic_11 [ 549.149692][T22815] simple: basic_12 [ 549.153424][T22815] simple: basic_13 [ 549.157138][T22815] simple: basic_14 [ 549.160902][T22815] simple: basic_15 [ 549.164648][T22815] simple: basic_16 [ 549.168357][T22815] simple: basic_17 [ 549.172090][T22815] simple: basic_18 [ 549.175808][T22815] simple: basic_19 [ 549.179518][T22815] simple: basic_20 [ 549.183268][T22815] simple: basic_21 [ 549.187066][T22815] simple: basic_22 [ 549.190775][T22815] simple: basic_23 [ 549.194501][T22815] simple: basic_24 [ 549.198316][T22815] simple: basic_25 [ 549.202086][T22815] simple: basic_26 [ 549.205803][T22815] simple: basic_27 [ 549.209513][T22815] simple: basic_28 [ 549.213689][T22815] simple: basic_29 [ 549.217398][T22815] simple: basic_30 [ 549.221219][T22815] simple: basic_31 [ 549.224956][T22815] simple: basic_32 [ 549.228664][T22815] TC_ACT_REPEAT abuse ? [ 549.649146][T22839] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 550.103351][T22865] syzkaller0: entered promiscuous mode [ 550.114590][T22865] syzkaller0: entered allmulticast mode [ 550.158488][T22865] simple: basic_1 [ 550.162563][T22865] simple: basic_2 [ 550.166252][T22865] simple: basic_3 [ 550.170058][T22865] simple: basic_4 [ 550.173784][T22865] simple: basic_5 [ 550.177464][T22865] simple: basic_6 [ 550.181175][T22865] simple: basic_7 [ 550.184835][T22865] simple: basic_8 [ 550.188493][T22865] simple: basic_9 [ 550.192178][T22865] simple: basic_10 [ 550.195923][T22865] simple: basic_11 [ 550.199667][T22865] simple: basic_12 [ 550.203430][T22865] simple: basic_13 [ 550.207197][T22865] simple: basic_14 [ 550.211008][T22865] simple: basic_15 [ 550.214801][T22865] simple: basic_16 [ 550.218546][T22865] simple: basic_17 [ 550.222427][T22865] simple: basic_18 [ 550.226167][T22865] simple: basic_19 [ 550.229909][T22865] simple: basic_20 [ 550.233710][T22865] simple: basic_21 [ 550.237461][T22865] simple: basic_22 [ 550.241244][T22865] simple: basic_23 [ 550.244990][T22865] simple: basic_24 [ 550.248806][T22865] simple: basic_25 [ 550.252564][T22865] simple: basic_26 [ 550.256397][T22865] simple: basic_27 [ 550.260146][T22865] simple: basic_28 [ 550.263945][T22865] simple: basic_29 [ 550.267706][T22865] simple: basic_30 [ 550.271480][T22865] simple: basic_31 [ 550.275214][T22865] simple: basic_32 [ 550.278932][T22865] TC_ACT_REPEAT abuse ? [ 550.704747][T22882] netlink: 'syz.4.4977': attribute type 15 has an invalid length. [ 550.863197][T22899] block nbd3: NBD_DISCONNECT [ 550.891793][T22899] block nbd3: Send disconnect failed -32 [ 550.915507][T22904] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 550.947248][T22904] __nla_validate_parse: 4 callbacks suppressed [ 550.947269][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 550.955691][T22909] netlink: 'syz.1.4986': attribute type 30 has an invalid length. [ 550.977240][T22905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 551.214659][T22917] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 551.226454][T22917] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 551.230708][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'. [ 551.358580][T22923] netlink: 'syz.2.4991': attribute type 10 has an invalid length. [ 551.391311][T22923] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 551.476960][T22932] veth0_to_team: left allmulticast mode [ 551.502246][T22932] syz_tun: entered allmulticast mode [ 551.531335][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 551.539445][ C0] lec:lec_tx_timeout: lec0 [ 551.544206][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 551.593763][T22933] syz_tun: left allmulticast mode [ 552.290839][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5008'. [ 552.344127][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5008'. [ 552.347410][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5010'. [ 552.363704][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5010'. [ 552.491708][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 552.529925][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 552.584568][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 552.730635][T23025] ip6t_srh: unknown srh invflags 4000 [ 553.071029][T23045] bond9 (unregistering): Released all slaves [ 553.601442][T23075] netlink: 'syz.4.5033': attribute type 8 has an invalid length. [ 554.352444][T23114] syzkaller0: entered promiscuous mode [ 554.358075][T23114] syzkaller0: entered allmulticast mode [ 554.507723][T23128] netlink: 'syz.4.5048': attribute type 1 has an invalid length. [ 554.516021][T23126] netlink: 'syz.3.5049': attribute type 4 has an invalid length. [ 554.730266][T23134] xt_hashlimit: size too large, truncated to 1048576 [ 554.803610][T23142] batadv_slave_0: entered promiscuous mode [ 555.309940][T23132] batadv_slave_0: left promiscuous mode [ 555.787562][T23187] ip6t_srh: unknown srh invflags 4000 [ 555.902683][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 555.910688][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 555.977439][T23190] __nla_validate_parse: 40 callbacks suppressed [ 555.977609][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.000193][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.028814][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.036844][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.061847][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.069126][T23198] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 556.094338][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5075'. [ 556.101270][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.118153][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.128124][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.136652][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.145317][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.155990][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.164444][T23190] netlink: 'syz.3.5069': attribute type 11 has an invalid length. [ 556.172716][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.182342][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.192801][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.202592][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.212337][T23190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5069'. [ 556.481548][T23224] ip6t_srh: unknown srh invflags 4000 [ 556.551392][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 556.559601][ C0] lec:lec_tx_timeout: lec0 [ 556.565139][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 556.617862][T23228] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 556.639138][T23228] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 558.092302][T23261] ip6gre1: entered promiscuous mode [ 558.097764][T23261] ip6gre1: entered allmulticast mode [ 558.284296][T23275] netem: incorrect ge model size [ 558.341656][T23275] netem: change failed [ 558.592489][T23301] xt_TCPMSS: Only works on TCP SYN packets [ 558.615712][T23305] IPVS: set_ctl: invalid protocol: 46 172.30.0.3:20002 [ 558.980505][T23326] netlink: 'syz.1.5118': attribute type 1 has an invalid length. [ 559.079868][T23326] 8021q: adding VLAN 0 to HW filter on device bond12 [ 559.134501][T23334] netlink: 'syz.3.5121': attribute type 1 has an invalid length. [ 559.171256][T23332] bond12: (slave geneve3): making interface the new active one [ 559.181732][T23332] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 559.190587][ T1139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 559.205231][ T1139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 559.364335][T23339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.373865][T23339] bond4: (slave bond5): making interface the new active one [ 559.382677][T23339] bond4: (slave bond5): Enslaving as an active interface with an up link [ 559.392499][ T1139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 559.401647][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 559.846222][T23394] netlink: 'syz.0.5135': attribute type 10 has an invalid length. [ 560.166828][T23418] ip6t_srh: unknown srh invflags 4000 [ 560.359811][T23428] syz_tun: entered allmulticast mode [ 560.737366][T23451] netlink: 'syz.0.5155': attribute type 27 has an invalid length. [ 561.028751][T23467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.315604][ T6711] IPVS: starting estimator thread 0... [ 561.361260][T23491] __nla_validate_parse: 38 callbacks suppressed [ 561.361280][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'. [ 561.377618][T23491] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 561.385884][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'. [ 561.395345][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'. [ 561.404818][T23491] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 561.409268][T23473] lo speed is unknown, defaulting to 1000 [ 561.412810][T23489] IPVS: using max 28 ests per chain, 67200 per kthread [ 561.433099][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'. [ 561.455403][T23493] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5171'. [ 561.606063][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5172'. [ 561.807426][T23496] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.040499][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5178'. [ 562.148888][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5181'. [ 562.255427][T23526] syzkaller0: entered promiscuous mode [ 562.260939][T23526] syzkaller0: entered allmulticast mode [ 562.298394][T23526] tc action pedit offset must be on 32 bit boundaries [ 562.350904][T23541] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5184'. [ 562.361237][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 562.369311][ C0] lec:lec_tx_timeout: lec0 [ 562.374813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.493566][T23544] syz_tun: left allmulticast mode [ 562.562357][T23544] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5185'. [ 563.094562][T23566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.323209][T23580] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.406612][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.546414][T23594] netlink: 'syz.0.5206': attribute type 24 has an invalid length. [ 564.253736][T23608] bond9: left allmulticast mode [ 564.271455][T23608] bond9: left promiscuous mode [ 564.276608][T23608] macvlan3: left promiscuous mode [ 564.282297][T23608] macvlan3: left allmulticast mode [ 564.335610][T23620] netlink: 'syz.0.5215': attribute type 83 has an invalid length. [ 564.343315][T23623] netlink: 'syz.0.5215': attribute type 83 has an invalid length. [ 564.365857][ T7475] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.374746][ T7475] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.384623][T23618] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 564.412125][ T7475] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.431653][ T7475] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 564.768141][T23645] bond13: entered promiscuous mode [ 564.896122][T23654] x_tables: unsorted entry at hook 3 [ 565.003406][T23660] netlink: 'syz.1.5224': attribute type 1 has an invalid length. [ 565.057497][T23664] wg1: left promiscuous mode [ 565.069712][T23664] wg1: left allmulticast mode [ 565.096891][T23666] netlink: 'syz.2.5227': attribute type 1 has an invalid length. [ 565.128031][T23664] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 565.156303][T23664] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 565.181512][T23664] vlan2: left allmulticast mode [ 565.187019][T23664] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 565.259965][T23666] 8021q: adding VLAN 0 to HW filter on device bond10 [ 565.269704][ T7475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.304218][ T7475] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.389202][T23670] bond10: (slave veth11): Enslaving as an active interface with a down link [ 565.466401][T23677] macvlan3: entered promiscuous mode [ 565.483153][T23677] macvlan3: entered allmulticast mode [ 565.489613][T23677] bond10: entered promiscuous mode [ 565.516158][T23677] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 565.524444][T23677] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.553513][T23677] bond10: left promiscuous mode [ 565.612809][ T7475] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.636449][ T7475] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.931773][T23713] netlink: 'syz.3.5235': attribute type 1 has an invalid length. [ 566.120652][T23724] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 566.141761][T23724] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 566.303005][T23731] syzkaller0: entered promiscuous mode [ 566.318204][T23731] syzkaller0: entered allmulticast mode [ 566.764583][T23759] xt_cgroup: xt_cgroup: no path or classid specified [ 567.161631][T23795] __nla_validate_parse: 16 callbacks suppressed [ 567.161654][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5253'. [ 567.203450][T23795] netlink: 412 bytes leftover after parsing attributes in process `syz.1.5253'. [ 567.306463][T23801] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5256'. [ 567.401428][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 567.409518][ C0] lec:lec_tx_timeout: lec0 [ 567.414244][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.577059][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5263'. [ 567.587936][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5263'. [ 567.614126][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5263'. [ 567.615452][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.624145][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5263'. [ 567.672786][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.698234][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.716991][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.738610][T23833] syzkaller1: entered promiscuous mode [ 567.744961][T23835] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5265'. [ 567.754223][T23833] syzkaller1: entered allmulticast mode [ 568.088039][T23853] xt_cgroup: invalid path, errno=-2 [ 568.279095][T23860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5270'. [ 570.143904][T23893] ip6t_srh: unknown srh invflags 4000 [ 570.223218][T23898] netlink: 'syz.3.5281': attribute type 24 has an invalid length. [ 570.420438][T23911] lo speed is unknown, defaulting to 1000 [ 570.692947][T23930] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5289'. [ 570.717636][T23930] netlink: Conntrack attr has 4 unknown bytes [ 571.038155][T23914] lo speed is unknown, defaulting to 1000 [ 571.560499][T23968] syzkaller0: entered promiscuous mode [ 571.576971][T23968] syzkaller0: entered allmulticast mode [ 571.598815][T23968] netlink: 'syz.2.5297': attribute type 14 has an invalid length. [ 571.607532][T23968] netlink: 'syz.2.5297': attribute type 14 has an invalid length. [ 571.823110][T23981] bond0: (slave gre0): refused to change device type [ 571.934706][T23987] netlink: 'syz.0.5303': attribute type 24 has an invalid length. [ 571.970827][T23989] ip6t_srh: unknown srh invflags 4000 [ 572.265530][T24008] __nla_validate_parse: 5 callbacks suppressed [ 572.265551][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5307'. [ 572.286971][T24003] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 572.320133][T24003] bond11: (slave lo): Enslaving as an active interface with an up link [ 572.329756][T24003] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 572.407436][T24014] netlink: 'syz.0.5310': attribute type 10 has an invalid length. [ 572.418498][T24014] : (slave wlan1): Opening slave failed [ 572.431082][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 572.439168][ C0] lec:lec_tx_timeout: lec0 [ 572.444213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.448966][T24014] netlink: 'syz.0.5310': attribute type 10 has an invalid length. [ 572.466057][T24014] : (slave wlan1): Opening slave failed [ 573.069406][T24050] netlink: 'syz.4.5320': attribute type 14 has an invalid length. [ 573.097742][T24042] syzkaller0: entered promiscuous mode [ 573.106614][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 573.137779][T24042] syzkaller0: entered allmulticast mode [ 573.138526][T24050] netlink: 'syz.4.5320': attribute type 39 has an invalid length. [ 573.175147][T24052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.270464][T24058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.383198][T24061] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5322'. [ 573.571986][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5326'. [ 573.588300][T24069] block nbd3: Unsupported socket: should be TCP or UNIX. [ 573.669875][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5325'. [ 573.706876][T24079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5329'. [ 573.723042][T24074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5325'. [ 573.816147][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'. [ 574.034652][T24100] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5335'. [ 574.120603][T24100] bond6 (unregistering): Released all slaves [ 574.159109][T24098] lo speed is unknown, defaulting to 1000 [ 574.550548][T24127] syzkaller0: entered promiscuous mode [ 574.566416][T24127] syzkaller0: entered allmulticast mode [ 574.580787][T24127] simple: basic_1 [ 574.584940][T24127] simple: basic_2 [ 574.588634][T24127] simple: basic_3 [ 574.592317][T24127] simple: basic_4 [ 574.595974][T24127] simple: basic_5 [ 574.599630][T24127] simple: basic_6 [ 574.603328][T24127] simple: basic_7 [ 574.606994][T24127] simple: basic_8 [ 574.611000][T24127] simple: basic_9 [ 574.614772][T24127] simple: basic_10 [ 574.618626][T24127] simple: basic_11 [ 574.622402][T24127] simple: basic_12 [ 574.626143][T24127] simple: basic_13 [ 574.629879][T24127] simple: basic_14 [ 574.633655][T24127] simple: basic_15 [ 574.637398][T24127] simple: basic_16 [ 574.641172][T24127] simple: basic_17 [ 574.644921][T24127] simple: basic_18 [ 574.648668][T24127] simple: basic_19 [ 574.652448][T24127] simple: basic_20 [ 574.656194][T24127] simple: basic_21 [ 574.659941][T24127] simple: basic_22 [ 574.663745][T24127] simple: basic_23 [ 574.667665][T24127] simple: basic_24 [ 574.671438][T24127] simple: basic_25 [ 574.675180][T24127] simple: basic_26 [ 574.678926][T24127] simple: basic_27 [ 574.682703][T24127] simple: basic_28 [ 574.686444][T24127] simple: basic_29 [ 574.690187][T24127] simple: basic_30 [ 574.693964][T24127] simple: basic_31 [ 574.697715][T24127] simple: basic_32 [ 574.701484][T24127] TC_ACT_REPEAT abuse ? [ 574.844030][T24131] xt_ecn: cannot match TCP bits for non-tcp packets [ 575.055481][T24143] ip6t_srh: unknown srh invflags 4000 [ 575.119596][ T35] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.132940][T24145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5350'. [ 575.151747][ T35] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.228747][ T35] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.238988][ T35] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.408129][T24157] 8021q: VLANs not supported on xfrm0 [ 575.604483][T24168] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 575.812426][T24173] syzkaller0: entered promiscuous mode [ 575.818017][T24173] syzkaller0: entered allmulticast mode [ 575.835517][T24181] ip6t_srh: unknown srh invflags 4000 [ 575.849582][T24173] simple: basic_1 [ 575.853618][T24173] simple: basic_2 [ 575.857281][T24173] simple: basic_3 [ 575.860944][T24173] simple: basic_4 [ 575.864667][T24173] simple: basic_5 [ 575.868450][T24173] simple: basic_6 [ 575.872251][T24173] simple: basic_7 [ 575.876004][T24173] simple: basic_8 [ 575.879681][T24173] simple: basic_9 [ 575.883552][T24173] simple: basic_10 [ 575.887294][T24173] simple: basic_11 [ 575.891085][T24173] simple: basic_12 [ 575.894908][T24173] simple: basic_13 [ 575.898646][T24173] simple: basic_14 [ 575.902415][T24173] simple: basic_15 [ 575.906167][T24173] simple: basic_16 [ 575.909910][T24173] simple: basic_17 [ 575.913691][T24173] simple: basic_18 [ 575.917440][T24173] simple: basic_19 [ 575.921202][T24173] simple: basic_20 [ 575.924943][T24173] simple: basic_21 [ 575.928700][T24173] simple: basic_22 [ 575.932488][T24173] simple: basic_23 [ 575.936282][T24173] simple: basic_24 [ 575.940026][T24173] simple: basic_25 [ 575.943810][T24173] simple: basic_26 [ 575.947558][T24173] simple: basic_27 [ 575.951332][T24173] simple: basic_28 [ 575.955076][T24173] simple: basic_29 [ 575.958919][T24173] simple: basic_30 [ 575.962806][T24173] simple: basic_31 [ 575.966549][T24173] simple: basic_32 [ 575.970385][T24173] TC_ACT_REPEAT abuse ? [ 576.407098][T24205] IPVS: ip_vs_add_dest(): server weight less than zero [ 576.529990][T24211] ip6t_srh: unknown srh invflags 4000 [ 576.676857][ T29] audit: type=1107 audit(1775259512.759:10): pid=24220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1SoR)JUQăPӔ\U+Xa9;4RĖBnZU=Cj: nt< É{%+dsSn;IB}' [ 576.731830][T24229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.908403][T24232] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.5380:24232 [ 576.949354][T24242] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.5380:24242 [ 577.078329][T24247] xt_TCPMSS: Only works on TCP SYN packets [ 577.430828][T24271] __nla_validate_parse: 1 callbacks suppressed [ 577.430851][T24271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5391'. [ 577.456519][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 577.464616][ C0] lec:lec_tx_timeout: lec0 [ 577.469938][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 577.551429][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5392'. [ 577.562106][T24277] openvswitch: netlink: Flow actions attr not present in new flow. [ 577.676399][T24284] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5393'. [ 577.838755][T24294] netlink: 'syz.2.5398': attribute type 13 has an invalid length. [ 577.858522][T24294] netlink: 'syz.2.5398': attribute type 58 has an invalid length. [ 577.869428][T24294] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5398'. [ 578.096338][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5401'. [ 578.174414][T24316] netlink: 'syz.3.5404': attribute type 13 has an invalid length. [ 578.187413][T24316] macvtap0: entered allmulticast mode [ 578.194173][T24316] macvtap0: refused to change device tx_queue_len [ 578.326956][T24321] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5406'. [ 578.344287][T24328] netlink: 'syz.4.5409': attribute type 1 has an invalid length. [ 578.398385][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5407'. [ 578.408490][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5407'. [ 578.504477][T24328] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 578.660599][T24345] netlink: 'syz.3.5412': attribute type 4 has an invalid length. [ 578.683437][T24347] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5411'. [ 578.688327][T24345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5412'. [ 578.709121][T24351] ip6t_srh: unknown srh invflags 4000 [ 578.723073][T24346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.747896][T24347] netlink: 'syz.1.5411': attribute type 1 has an invalid length. [ 578.783997][T24347] netlink: 'syz.1.5411': attribute type 2 has an invalid length. [ 579.391769][T24390] ip6t_srh: unknown srh invflags 4000 [ 579.650870][T24399] x_tables: duplicate underflow at hook 2 [ 579.893812][T24420] netlink: 'syz.2.5436': attribute type 10 has an invalid length. [ 579.905614][T24420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.918016][T24420] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 579.930475][T24420] netlink: 'syz.2.5436': attribute type 10 has an invalid length. [ 580.006644][T24425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.025705][T24428] netlink: 'syz.2.5438': attribute type 4 has an invalid length. [ 580.173201][T24434] ip6t_srh: unknown srh invflags 4000 [ 580.425230][T24452] veth0_vlan: left promiscuous mode [ 580.437822][T24452] veth0_vlan: entered promiscuous mode [ 580.453759][T24452] team0: Device veth0_vlan failed to register rx_handler [ 580.745259][T24472] syzkaller0: entered promiscuous mode [ 580.751623][T24472] syzkaller0: entered allmulticast mode [ 580.804613][T24475] ip6t_srh: unknown srh invflags 4000 [ 582.481198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 582.489257][ C0] lec:lec_tx_timeout: lec0 [ 582.494448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.501329][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 587.509363][ C0] lec:lec_tx_timeout: lec0 [ 587.514425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 592.521281][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 592.529377][ C0] lec:lec_tx_timeout: lec0 [ 592.534245][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 597.541288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 597.549534][ C0] lec:lec_tx_timeout: lec0 [ 597.554254][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 602.561593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 602.569616][ C0] lec:lec_tx_timeout: lec0 [ 602.574299][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.002303][T24521] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 604.008564][T24528] nla_validate_range_unsigned: 56 callbacks suppressed [ 604.008584][T24528] netlink: 'syz.3.5468': attribute type 11 has an invalid length. [ 604.009949][T24521] gtp1: left promiscuous mode [ 604.059658][T24529] __nla_validate_parse: 11 callbacks suppressed [ 604.059681][T24529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5469'. [ 604.076734][T24528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5468'. [ 604.079373][T24521] gtp1: left allmulticast mode [ 604.105611][T24524] validate_nla: 1 callbacks suppressed [ 604.105634][T24524] netlink: 'syz.1.5466': attribute type 3 has an invalid length. [ 604.122743][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 604.180571][T24533] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5467'. [ 604.208254][T24532] ip6t_srh: unknown srh invflags 4000 [ 604.324565][T24539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5473'. [ 604.347222][T24539] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5473'. [ 604.363600][T24539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'. [ 604.375953][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 604.395351][T24541] syzkaller1: entered promiscuous mode [ 604.410904][T24541] syzkaller1: entered allmulticast mode [ 604.430674][T24547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5476'. [ 604.516025][T16397] block nbd3: Receive control failed (result -32) [ 604.619303][T24550] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5477'. [ 604.832343][T24568] bond13: left promiscuous mode [ 605.058963][T24573] syzkaller0: entered promiscuous mode [ 605.071164][T24573] syzkaller0: entered allmulticast mode [ 605.091919][T24573] simple: basic_1 [ 605.095908][T24573] simple: basic_2 [ 605.099574][T24573] simple: basic_3 [ 605.103288][T24573] simple: basic_4 [ 605.106972][T24573] simple: basic_5 [ 605.110634][T24573] simple: basic_6 [ 605.114512][T24573] simple: basic_7 [ 605.118181][T24573] simple: basic_8 [ 605.121908][T24573] simple: basic_9 [ 605.125566][T24573] simple: basic_10 [ 605.129309][T24573] simple: basic_11 [ 605.133113][T24573] simple: basic_12 [ 605.136855][T24573] simple: basic_13 [ 605.140599][T24573] simple: basic_14 [ 605.144399][T24573] simple: basic_15 [ 605.148150][T24573] simple: basic_16 [ 605.151957][T24573] simple: basic_17 [ 605.155714][T24573] simple: basic_18 [ 605.159456][T24573] simple: basic_19 [ 605.163378][T24573] simple: basic_20 [ 605.167121][T24573] simple: basic_21 [ 605.170871][T24573] simple: basic_22 [ 605.174873][T24573] simple: basic_23 [ 605.178719][T24573] simple: basic_24 [ 605.182517][T24573] simple: basic_25 [ 605.186295][T24573] simple: basic_26 [ 605.190076][T24573] simple: basic_27 [ 605.193910][T24573] simple: basic_28 [ 605.197657][T24573] simple: basic_29 [ 605.201480][T24573] simple: basic_30 [ 605.205238][T24573] simple: basic_31 [ 605.208981][T24573] simple: basic_32 [ 605.212777][T24573] TC_ACT_REPEAT abuse ? [ 605.403418][T24582] C: renamed from lo [ 605.409070][T24582] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 605.572968][T24600] bond0: entered promiscuous mode [ 605.590702][T24600] bond0: left promiscuous mode [ 605.762253][T16397] block nbd4: Receive control failed (result -32) [ 605.906528][T24626] veth0: entered promiscuous mode [ 605.924472][T24626] veth0 (unregistering): left promiscuous mode [ 605.991492][T24629] netlink: 'syz.2.5501': attribute type 72 has an invalid length. [ 606.224175][T24648] netlink: 'syz.1.5505': attribute type 12 has an invalid length. [ 606.403289][T24661] netlink: 'syz.4.5512': attribute type 9 has an invalid length. [ 606.411476][T24662] veth9: left promiscuous mode [ 606.416311][T24662] veth9: left allmulticast mode [ 606.422306][T24661] netlink: 'syz.4.5512': attribute type 11 has an invalid length. [ 606.430160][T24661] netlink: 'syz.4.5512': attribute type 12 has an invalid length. [ 606.449326][T24662] ip6gre1: left promiscuous mode [ 606.464983][T24662] ip6gre1: left allmulticast mode [ 606.507782][T15803] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.510024][T24658] [ 606.519188][T24658] ====================================================== [ 606.519523][T15803] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.526313][T24658] WARNING: possible circular locking dependency detected [ 606.526332][T24658] syzkaller #0 Not tainted [ 606.526344][T24658] ------------------------------------------------------ [ 606.526352][T24658] syz.1.5509/24658 is trying to acquire lock: [ 606.526364][T24658] ffffffff8fd4d098 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 606.538716][T15803] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.542304][T24658] [ 606.542304][T24658] but task is already holding lock: [ 606.542317][T24658] ffff8880251fb470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 606.548159][T15803] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.553817][T24658] [ 606.553817][T24658] which lock already depends on the new lock. [ 606.553817][T24658] [ 606.553834][T24658] [ 606.553834][T24658] the existing dependency chain (in reverse order) is: [ 606.553842][T24658] [ 606.553842][T24658] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 606.553876][T24658] _raw_spin_lock_bh+0x36/0x50 [ 606.636873][T24658] nr_rt_device_down+0x153/0x860 [ 606.642348][T24658] nr_device_event+0x137/0x150 [ 606.647639][T24658] notifier_call_chain+0x1be/0x400 [ 606.653279][T24658] __dev_notify_flags+0x16d/0x310 [ 606.658832][T24658] netif_change_flags+0xe8/0x1a0 [ 606.664297][T24658] dev_change_flags+0x130/0x260 [ 606.669673][T24658] dev_ioctl+0x7b4/0x1150 [ 606.674529][T24658] sock_do_ioctl+0x23e/0x320 [ 606.679650][T24658] sock_ioctl+0x5c6/0x7f0 [ 606.684513][T24658] __se_sys_ioctl+0xfc/0x170 [ 606.689635][T24658] do_syscall_64+0x14d/0xf80 [ 606.694752][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.701174][T24658] [ 606.701174][T24658] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 606.708999][T24658] _raw_spin_lock_bh+0x36/0x50 [ 606.714304][T24658] nr_rt_device_down+0xbe/0x860 [ 606.719693][T24658] nr_device_event+0x137/0x150 [ 606.725070][T24658] notifier_call_chain+0x1be/0x400 [ 606.730712][T24658] __dev_notify_flags+0x16d/0x310 [ 606.736260][T24658] netif_change_flags+0xe8/0x1a0 [ 606.741745][T24658] dev_change_flags+0x130/0x260 [ 606.747120][T24658] dev_ioctl+0x7b4/0x1150 [ 606.752065][T24658] sock_do_ioctl+0x23e/0x320 [ 606.757183][T24658] sock_ioctl+0x5c6/0x7f0 [ 606.762057][T24658] __se_sys_ioctl+0xfc/0x170 [ 606.767172][T24658] do_syscall_64+0x14d/0xf80 [ 606.772290][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.778740][T24658] [ 606.778740][T24658] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 606.786736][T24658] __lock_acquire+0x15a5/0x2cf0 [ 606.792112][T24658] lock_acquire+0xf0/0x2e0 [ 606.797052][T24658] _raw_spin_lock_bh+0x36/0x50 [ 606.802341][T24658] nr_remove_neigh+0x25/0xe0 [ 606.807454][T24658] nr_add_node+0x1e41/0x2630 [ 606.812621][T24658] nr_rt_ioctl+0xe59/0xf90 [ 606.817569][T24658] sock_do_ioctl+0x101/0x320 [ 606.822688][T24658] sock_ioctl+0x5c6/0x7f0 [ 606.827552][T24658] __se_sys_ioctl+0xfc/0x170 [ 606.832680][T24658] do_syscall_64+0x14d/0xf80 [ 606.837807][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.844222][T24658] [ 606.844222][T24658] other info that might help us debug this: [ 606.844222][T24658] [ 606.854671][T24658] Chain exists of: [ 606.854671][T24658] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 606.854671][T24658] [ 606.868501][T24658] Possible unsafe locking scenario: [ 606.868501][T24658] [ 606.875961][T24658] CPU0 CPU1 [ 606.881330][T24658] ---- ---- [ 606.886708][T24658] lock(&nr_node->node_lock); [ 606.891474][T24658] lock(nr_node_list_lock); [ 606.898685][T24658] lock(&nr_node->node_lock); [ 606.905974][T24658] lock(nr_neigh_list_lock); [ 606.910653][T24658] [ 606.910653][T24658] *** DEADLOCK *** [ 606.910653][T24658] [ 606.918884][T24658] 1 lock held by syz.1.5509/24658: [ 606.924002][T24658] #0: ffff8880251fb470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 606.933844][T24658] [ 606.933844][T24658] stack backtrace: [ 606.939736][T24658] CPU: 1 UID: 0 PID: 24658 Comm: syz.1.5509 Not tainted syzkaller #0 PREEMPT(full) [ 606.939755][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 606.939765][T24658] Call Trace: [ 606.939773][T24658] [ 606.939781][T24658] dump_stack_lvl+0xe8/0x150 [ 606.939803][T24658] print_circular_bug+0x2e1/0x300 [ 606.939828][T24658] check_noncircular+0x12e/0x150 [ 606.939852][T24658] __lock_acquire+0x15a5/0x2cf0 [ 606.939877][T24658] ? __lock_acquire+0x6b5/0x2cf0 [ 606.939896][T24658] lock_acquire+0xf0/0x2e0 [ 606.939914][T24658] ? nr_remove_neigh+0x25/0xe0 [ 606.939935][T24658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 606.939951][T24658] ? nr_remove_neigh+0x25/0xe0 [ 606.939970][T24658] _raw_spin_lock_bh+0x36/0x50 [ 606.939986][T24658] ? nr_remove_neigh+0x25/0xe0 [ 606.940005][T24658] nr_remove_neigh+0x25/0xe0 [ 606.940025][T24658] nr_add_node+0x1e41/0x2630 [ 606.940045][T24658] ? dev_get_by_name+0x21/0x200 [ 606.940065][T24658] ? dev_get_by_name+0x21/0x200 [ 606.940083][T24658] ? nr_call_to_digi+0x136/0x1b0 [ 606.940103][T24658] nr_rt_ioctl+0xe59/0xf90 [ 606.940124][T24658] ? kasan_quarantine_put+0xbb/0x1f0 [ 606.940141][T24658] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 606.940162][T24658] ? apparmor_capable+0x126/0x170 [ 606.940183][T24658] ? capable+0x88/0xe0 [ 606.940203][T24658] ? nr_ioctl+0x1b1/0x3b0 [ 606.940219][T24658] sock_do_ioctl+0x101/0x320 [ 606.940241][T24658] ? __pfx_sock_do_ioctl+0x10/0x10 [ 606.940261][T24658] ? do_futex+0x395/0x420 [ 606.940284][T24658] sock_ioctl+0x5c6/0x7f0 [ 606.940305][T24658] ? __pfx_sock_ioctl+0x10/0x10 [ 606.940324][T24658] ? __fget_files+0x2a/0x420 [ 606.940337][T24658] ? __fget_files+0x3a0/0x420 [ 606.940349][T24658] ? __fget_files+0x2a/0x420 [ 606.940363][T24658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 606.940382][T24658] ? __pfx_sock_ioctl+0x10/0x10 [ 606.940402][T24658] __se_sys_ioctl+0xfc/0x170 [ 606.940421][T24658] do_syscall_64+0x14d/0xf80 [ 606.940439][T24658] ? trace_irq_disable+0x3b/0x150 [ 606.940453][T24658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.940468][T24658] ? clear_bhb_loop+0x40/0x90 [ 606.940485][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.940506][T24658] RIP: 0033:0x7f86d1f9c819 [ 606.940521][T24658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.940535][T24658] RSP: 002b:00007f86d2dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.940551][T24658] RAX: ffffffffffffffda RBX: 00007f86d2215fa0 RCX: 00007f86d1f9c819 [ 606.940563][T24658] RDX: 0000200000000300 RSI: 000000000000890b RDI: 000000000000000b [ 606.940573][T24658] RBP: 00007f86d2032c91 R08: 0000000000000000 R09: 0000000000000000 [ 606.940583][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.940593][T24658] R13: 00007f86d2216038 R14: 00007f86d2215fa0 R15: 00007fffd49030e8 [ 606.940610][T24658] [ 608.361276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 608.369374][ C0] lec:lec_tx_timeout: lec0 [ 608.374235][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 613.401472][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 613.409582][ C0] lec:lec_tx_timeout: lec0 [ 613.414217][ C0] lec:lec_start_xmit: lec0:No lecd attached