last executing test programs: 2.133165607s ago: executing program 3 (id=2192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r3, 0xfffffff8}, &(0x7f00000000c0)=0x8) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x2, 0x1, 0x5, 0x7, 0x10, 0xffffffff, 0x8, 0x8}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048801}, 0x4051) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0x1d, 0x0, 0x20) 1.602376621s ago: executing program 1 (id=2201): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r2, r2, 0x0, 0xa) r3 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000240)={0xffff}, 0x4) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 1.599703044s ago: executing program 0 (id=2202): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x10000, 0x1, 0x6be}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x9, 0x0, 0x1ff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x4, @void}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex=r5, r0, 0x2d, 0x14, r1, @void, @value=r8, @void, @void, r2}, 0x20) 1.418699291s ago: executing program 1 (id=2204): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x8810}, 0xc008) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYRESDEC=r0], 0x2260}}], 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, 0x0, &(0x7f0000005e00)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x100004, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30097, 0x51c84}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x9045}, 0xc084) bind$phonet(r3, &(0x7f0000000180)={0x23, 0x7, 0xfa, 0x55}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 1.416131687s ago: executing program 2 (id=2205): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_buf(r2, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)=ANY=[@ANYRESDEC=r3, @ANYBLOB="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", @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c000100080000000800000034000480e1ef3058904b73ce47a3f2d10c00010006000000ff0300000c0001e003000000081500000c00010004000000020000000c00010079e389f7e4b281ab902dc4b4d870d8f9ec697e8e01769be6ed1c22ce6793e2a332db05b898585858bde131fe88609cbcefe5da43200efed9a9289c16b2a6f9934ad3fcb2663f8e4f044b902c832fafd7ebb8c0f951043c9abb40c2c8f2a08fb9824c5ab5afd4c0c09a73dfa1b723cc0e23f2b254e28059facfa4851e6fdb6f593b55cb1038136017e0294509ea5612df820eee0ccb62b8474550e46dc12c19d2c979c25e4b6034a70923c440e60aaf4c00293e72586eda5d85ef0f1ae121516f", @ANYRES64=r2], 0xb4}, 0x1, 0x0, 0x0, 0xa850}, 0x0) 1.337680651s ago: executing program 4 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xbb0e) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockname$packet(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) recvmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xbb0e) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) (async) getsockname$packet(r2, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) (async) recvmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) 1.258749132s ago: executing program 2 (id=2207): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ac1414aa0c00907803000000450000000000000000890000000a010100000000cb034f9a35"], 0x0) 1.167030422s ago: executing program 4 (id=2208): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRESDEC=r0], 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r7], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r10, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x3a8, 0x0, 0x498, 0x1b0, 0x1b0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0xc, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0xb10}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x73, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r13, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44805}, 0x1) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000006fc1c858000000000400000000120000090000000000000002000000000000004800000000000000040000000000000000000000000000000000000000000000011200000000000000000000000000000100000000000000ff00000000000000bb0c000000000000000000000000000000000000000000000009000000000000000000000000000004000000000000000010000000000000ff0f000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000001d4c00000000000002000000000000000000000000000000000000000000000005210000000000000000000000000000b2000000000000000008000000000000050000000000000000000000000000000000000000000000091800000000000000000000000000003a000000000000000100000000000000040000000000000000000000000000000000000000000000020800000000000000000000000000008100000000000000000000000000008024000000000000000000000000000000000008000000000080070000000000000000000000000000080000000000000009000000000000000100000001000000000000000000000000000000000000008400000000000000000000000000000089170000000000001000000000000000090000000000000000000000000000000000000000000000083100"/536]) (async) close(r13) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)={0x6}, 0x8) 1.155163897s ago: executing program 0 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.12976388s ago: executing program 2 (id=2210): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000000c0)={{0x2c, @loopback, 0x4e23, 0x1, 'lblc\x00', 0x452597ffa88f34e2, 0x8, 0x2c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x10000, 0xfffffff7, 0x9, 0x6}}, 0x44) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x6) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.062913107s ago: executing program 3 (id=2211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x90851) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.062572946s ago: executing program 1 (id=2212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r2, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000001e00"/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.050467681s ago: executing program 4 (id=2213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0xffffffffffffc000) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000140)="0fb0ad3b255e5de1", 0x8}, {&(0x7f0000000180)="67c93ef8905ccc2735d7adbd8a3ba7dd208c0301ee6d100f75fdd0c3430c6d8710803b48e23a4724a608285082c9dc213565497ef97f382bdff55c52110eb95b4ecdbd883db5d6374ff41a160b2769218e54fc7e3e1f9cc582138ae376f795bb791c3f1172220fe12f407cc6f3577c7f9e89218ea7dfaa68f40ed3c7a61c2be4dbb6b147febc82866f29d5d98646de11fa0b9f5ea1be45253e90bf92d92abd976d431fdf", 0xa4}, {&(0x7f0000000240)="02aedfe5f65e4db870288b45c2d821b81fb0fd1f4ec2e5ee835080ca43172ba3875dada507bdc49ac6686c5bc5c165669a84e533b32a16b6d71e6f2a94ddb774c8e36fb71e46f4c803128fcbc0f88d0b0c6f297d4c9ec56a0c650ea548d2223ee571c4d91e48f7a80082b57629afba215a1012cb82946583472687cdd1fee65c875ec130eed57153c712e08d99c8229a14952d17f8639d4a2a5975ae6f8f8830be1e67434da8885c68dc939df123707a6ea30872d48cf658454f1e501f59d4fc2e19824d28ab85970b0d2a6b2efd9999d54153cd135cf03f519b020bb795ec0bfcccf4d6d3c5e79546d7c25d381095e728f3186038f09fb0", 0xf8}, {&(0x7f0000000340)="07fa69a43ddee8269cd01fdfeb39e093ebc21ebfc50b9fc1e4e997f27d6fe25c7c45fe2a40badaea432da20c122d3e91b77729a564766ceaf672cd0354e09ca1fa161cbd20fc04b32248721e2ad3192767178796187d0186f464e7ce5cfb5b8ed1b3854d3649d0a82eb28738c5b4d598ae86599174da5e4bb20bf1065fccf6d4f13122878f462077944ac5b43acc91f84cc6b6ef60f9979fde98", 0x9a}, {&(0x7f0000000400)="26ec1673b477c7c7128ea1e24430ff9e95313889b67f3f366ce37dc524220b2dc3321b8b2d4eef98af4650c6fd1034d478d2531f3e8d6ae3722bea459035180ca78b48724d6845be40de69a450dd391175b6e4810437cd17eaf12847e7e17f42e413954a9beee6cc371c0d2e6b6059c13e81dc1846190569bff1720913c7b59a6455", 0x82}, {&(0x7f00000004c0)="e52ea0f54c1c87d74114711bf904eb2325a89334c8aeb1ea4acef1eee3f0d9b634ac2cd4a042c37db8ac154fec3c009bd562e25e8dc446fb722fb59717380762d08098c65ce77c52b19f3e8486a050a9d43e6de646eff6f19776bb15359f", 0x5e}, {&(0x7f0000000540)="fc19d188045270d08bcdc838519ab2978921142b532abf617b8b593cbc8c297e2ab744684fbd258ccde895b6b7d66b4183d3363c0cee810a9a0c03a3d7805bd9bd24a731bd9c0d1cca0caf78a9443ae87049a8c211d35a63947bfa009f251e25eaf242335cd91a0289e01e8718e13a70035a536df56208ed28636beb6454108d688b35523576ef6f3ee81f77b0866e0b68556f3f8fe2bb61b89f115cd1fc721a163383413f9bb5995fc0a78fc04ea2f77e03", 0xb2}, {&(0x7f0000000600)="30e4c881650c1e04bc811030a55f299e8177d1e014c9b14129e9", 0x1a}, {&(0x7f0000000640)="1fec007ab41d68d9f5eaf436693f1240cb842a9465db5e68952a02fa2521958c388740d013442e0f21e102e64ed415f848d08a1d99fea9a3faa6ed17066b177386bc7e762073256c6a693267b66fb78526c74d9c9cdd8b4ea481a4d414bf96a8b9ca5cb3a5f3e9c84423876a5cb977cca3df6bbe76bacf4fe29c525edaed4d9882f2e3c88d147b97028469da66c278b66a1f565c980f9d600df24d65dc0e86e38ae112f4dd0084b0cc35facd58013716e9f5503a92088bbd95a3741ad34fc3d46fb3185998fa9c011a3a02ded55da3189cc0058c", 0xd4}], 0x9, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}, 0x20000000) 927.067762ms ago: executing program 4 (id=2214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) connect$packet(r5, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) socket(0x1d, 0x3, 0x6) preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000740)=""/193, 0xc1}], 0x1, 0x8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f51218206f5abfd", 0x20}], 0x2}, 0x20008b88) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r6, 0x14, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58f1ffff050a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800014000000000080002400000000a0800034000000016140000001100010000000000000000000000000a"], 0x80}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x84, @remote, 0x4f21, 0x3, 'lc\x00', 0x6, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x5, 0x55a6}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r8, 0x2) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="84000000d9026dfe513b2669d649b4681c8bbcc249e8a5090000001b27e18ec56e0765f427006fb38e3ab829fda6430d9b6ceb197ed2160580a2583b693369c727b2305b2697dabb83c25743a58bb05a54a124d6b2837878778c8053f5a9c07332d9855a2fe244e0041b23ce50", @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf252800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000040000000060036005d00000006003600030000000a003400020202020202000016003400acbc62e89acfa0df146bb48086a88ac58d6500000a00340002020202020200000a003400010101010101000006003600060000000600360003000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0x4090) 794.357234ms ago: executing program 3 (id=2215): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}}, 0x400c010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000300)={0x5, 0x2, 0x0, 0x7f, 0x9c4, 0x4, 0x8, 0xe16}, 0xfffffffffffffffd, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ppoll(&(0x7f0000000180)=[{r5, 0x400}, {r4, 0x1024}, {r6, 0x10}], 0x3, &(0x7f00000001c0), &(0x7f0000000200)={[0x9]}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r9, 0x89e0, 0x500) socket$nl_route(0x10, 0x3, 0x0) 793.903111ms ago: executing program 0 (id=2216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x67b, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@generic={0x5, 0xd, 0x0, 0x1, 0x8001}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x401, 0x41, &(0x7f00000001c0)=""/65, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x1, 0x1, 0x7, 0x2}, {0x2, 0x4, 0xa, 0x2}, {0x3, 0x2, 0xe, 0x7}, {0x3, 0x5, 0xe}, {0x4, 0x3, 0xf, 0x5}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 669.775389ms ago: executing program 1 (id=2217): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xffffffff, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0xfffffffc, 0xed, 0x7, 0x0, 0x78}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17d9d65ca8f0eaa1, 0x7ff, 0x9, 0x7a2, 'netbios-ns\x00', 'syz0\x00', {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0800b16d7508c92ef5cfed3c75bb090100000000000000e7000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) sendto$inet6(r2, 0x0, 0x0, 0xc884, &(0x7f0000000540)={0xa, 0x4e23, 0x10, @mcast1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x7) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0xc) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x4c, 0xffffffffffffffff, &(0x7f00000002c0)=0x5c) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="300029bd7000fbdbdf25020000000800030004000000080002000800000008000200060000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x80c4) (async) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r8, &(0x7f0000000200)='netbios-ns\x00', 0x80a80, &(0x7f0000000240)={@_ha_fsid={[0x3, 0x3]}, {0xb, 0x1, 0x8, 0x9b3e}}, 0xffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000300)=0xac1}) r10 = socket(0x2, 0x2, 0x1) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000380)) (async) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x88, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x88}}, 0x0) (async) bind$alg(r10, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) (async) sendmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) 609.938076ms ago: executing program 4 (id=2218): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x18, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48170}, 0x20008880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800fcff01010104000004000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x18, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48170}, 0x20008880) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800fcff01010104000004000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 522.767452ms ago: executing program 2 (id=2219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) socket$kcm(0x29, 0x7, 0x0) 518.841764ms ago: executing program 0 (id=2220): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) 477.413796ms ago: executing program 1 (id=2221): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e22, @broadcast}}) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106200000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f8e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 406.582537ms ago: executing program 4 (id=2222): socket$kcm(0xa, 0x3, 0x87) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e4", 0x4}], 0x1, 0x0, 0x0, 0x84}, 0x8084) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x3}]}]}}, 0x0, 0x3a, 0x0, 0x0, 0x3}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x898, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3, 0xa, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 406.381466ms ago: executing program 0 (id=2223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001", @ANYRESHEX=r0], 0xfdef) 159.840059ms ago: executing program 3 (id=2224): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 159.072031ms ago: executing program 2 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, 0x0, 0x0}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x203}}, @prinfo={0x18}], 0x48}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) 158.557752ms ago: executing program 3 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x301, 0x3, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x29, 0x0, &(0x7f0000000100)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008d0) 142.794087ms ago: executing program 2 (id=2227): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000600)=0x9, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) listen(r1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 82.381659ms ago: executing program 0 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x3) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) close(r5) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) 19.380038ms ago: executing program 3 (id=2229): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 1 (id=2230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000140)="09c69e16e160673a133d6164467635bd", 0x10}], 0x2) kernel console output (not intermixed with test programs): e MTU to 1532 would solve the problem. [ 111.928016][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 111.938469][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.951316][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.953737][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'. [ 111.993227][ T6491] batman_adv: batadv0: Interface activated: ipvlan2 [ 112.014401][ T6493] gtp0: entered promiscuous mode [ 112.019674][ T6493] gtp0: entered allmulticast mode [ 112.178068][ T6510] openvswitch: netlink: Tunnel attr 16364 out of range max 16 [ 112.317328][ T6521] syzkaller1: entered promiscuous mode [ 112.367122][ T6521] syzkaller1: entered allmulticast mode [ 112.445705][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 112.501600][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.160'. [ 112.782762][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 112.811885][ T6546] tipc: Enabled bearer , priority 10 [ 113.108840][ T6562] xt_hashlimit: size too large, truncated to 1048576 [ 113.137523][ T6559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.305215][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 113.333171][ T6576] netlink: 'syz.1.168': attribute type 4 has an invalid length. [ 113.385446][ T6573] ipvlan2: entered allmulticast mode [ 113.396944][ T6573] syz_tun: entered allmulticast mode [ 113.551258][ T6559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.589956][ T6558] syzkaller1: entered promiscuous mode [ 113.598909][ T6558] syzkaller1: entered allmulticast mode [ 113.610792][ T6580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.176'. [ 113.693812][ T6559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.844273][ T6559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.919262][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 113.963396][ T42] tipc: Node number set to 2886997057 [ 114.062082][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.183'. [ 114.083684][ T6600] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 114.101973][ T6206] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.143355][ T6600] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 114.177454][ T6206] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.214388][ T6606] netlink: 'syz.1.185': attribute type 13 has an invalid length. [ 114.237457][ T6606] veth0_macvtap: left promiscuous mode [ 114.245735][ T6606] macvtap0: entered allmulticast mode [ 114.256085][ T6606] macvtap0: refused to change device tx_queue_len [ 114.263720][ T6206] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.282725][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 114.303286][ T6206] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.462320][ T6616] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 114.478981][ T6616] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.487926][ T6616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.495453][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.502929][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.510255][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.662108][ T6624] macvlan0: entered promiscuous mode [ 114.887608][ T6628] can: request_module (can-proto-0) failed. [ 115.166903][ T6650] blkio.reset_stats is deprecated [ 115.410816][ T6664] IPv6: sit1: Disabled Multicast RS [ 115.444517][ T6666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.776943][ T6680] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 116.344289][ T6727] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 116.381725][ T6727] netlink: 'syz.4.217': attribute type 2 has an invalid length. [ 116.531684][ T6743] Cannot find add_set index 0 as target [ 116.732215][ T6758] netlink: 'syz.2.224': attribute type 6 has an invalid length. [ 116.924864][ T6763] netlink: 'syz.4.226': attribute type 4 has an invalid length. [ 116.943222][ T6763] __nla_validate_parse: 6 callbacks suppressed [ 116.943242][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 116.968144][ T6765] Bluetooth: MGMT ver 1.23 [ 117.135733][ T6774] syzkaller0: entered promiscuous mode [ 117.141505][ T6774] syzkaller0: entered allmulticast mode [ 117.451715][ T6793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.581613][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 117.678370][ T6793] netlink: 104 bytes leftover after parsing attributes in process `syz.3.235'. [ 117.704556][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 117.764664][ T6801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.785317][ T6801] bond2 (unregistering): Released all slaves [ 118.037463][ T6815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.096094][ T6819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 118.943597][ T6870] TCP: TCP_TX_DELAY enabled [ 118.954682][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.249'. [ 119.133555][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 119.147105][ T6873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.256'. [ 119.547353][ T6899] netlink: 216 bytes leftover after parsing attributes in process `syz.0.263'. [ 119.744561][ T6908] netlink: 'syz.4.266': attribute type 8 has an invalid length. [ 119.922905][ T6918] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.269'. [ 120.566293][ T6130] udevd[6130]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 120.839321][ T6973] netlink: 'syz.4.283': attribute type 1 has an invalid length. [ 121.689006][ T7016] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.731634][ T7016] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.982062][ T7037] __nla_validate_parse: 6 callbacks suppressed [ 121.982084][ T7037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.299'. [ 122.051305][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.299'. [ 122.187773][ T7043] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 122.946256][ T7081] x_tables: duplicate underflow at hook 1 [ 123.004740][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.037324][ T7073] team0: Port device batadv1 added [ 123.205526][ T7089] netlink: 'syz.2.316': attribute type 10 has an invalid length. [ 123.219356][ T7089] netlink: 396 bytes leftover after parsing attributes in process `syz.2.316'. [ 123.941516][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 123.963525][ T7117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.072665][ T7117] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 124.136351][ T7117] batman_adv: batadv0: Removing interface: ipvlan2 [ 124.188375][ T7117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.240525][ T7141] netlink: 168 bytes leftover after parsing attributes in process `syz.1.326'. [ 124.834437][ T7179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.841875][ T7179] IPv6: NLM_F_CREATE should be set when creating new route [ 124.849295][ T7179] IPv6: NLM_F_CREATE should be set when creating new route [ 124.856615][ T7179] IPv6: NLM_F_CREATE should be set when creating new route [ 124.986823][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 125.328092][ T7213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.342'. [ 125.495871][ T7219] netlink: 188 bytes leftover after parsing attributes in process `syz.4.343'. [ 125.605802][ T7224] bridge0: port 3(syz_tun) entered blocking state [ 125.640349][ T7224] bridge0: port 3(syz_tun) entered disabled state [ 125.693619][ T7224] syz_tun: entered allmulticast mode [ 125.723803][ T7224] syz_tun: entered promiscuous mode [ 125.731207][ T7224] bridge0: port 3(syz_tun) entered blocking state [ 125.738146][ T7224] bridge0: port 3(syz_tun) entered forwarding state [ 125.882182][ T7230] tipc: Started in network mode [ 125.891838][ T7230] tipc: Node identity 4, cluster identity 4711 [ 125.905133][ T7230] tipc: Node number set to 4 [ 125.965050][ T7241] sctp: [Deprecated]: syz.4.350 (pid 7241) Use of int in max_burst socket option. [ 125.965050][ T7241] Use struct sctp_assoc_value instead [ 126.205202][ T7253] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 126.221338][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 126.241131][ T7253] netlink: 'syz.4.353': attribute type 2 has an invalid length. [ 126.275735][ T7257] hsr0: entered promiscuous mode [ 126.282660][ T7257] macvlan2: entered allmulticast mode [ 126.288234][ T7257] hsr0: entered allmulticast mode [ 126.293685][ T7257] hsr_slave_0: entered allmulticast mode [ 126.299386][ T7257] hsr_slave_1: entered allmulticast mode [ 126.732271][ T7290] trusted_key: syz.2.362 sent an empty control message without MSG_MORE. [ 126.919785][ T7300] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 126.952150][ T7285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.122908][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.251820][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 127.394085][ T7305] bond2: (slave veth0_to_bond): making interface the new active one [ 127.419530][ T7305] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 127.469375][ T7298] bond2: entered promiscuous mode [ 127.493856][ T7298] veth0_to_bond: entered promiscuous mode [ 127.513475][ T7298] bond2: entered allmulticast mode [ 127.518824][ T7298] veth0_to_bond: entered allmulticast mode [ 127.744515][ T7337] netlink: 'syz.1.371': attribute type 23 has an invalid length. [ 127.768580][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 129.054435][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.379'. [ 129.543734][ T7446] macvlan0: mtu less than device minimum [ 129.667362][ T7453] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 129.693857][ T7456] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.827399][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 129.901499][ T7467] 8021q: VLANs not supported on sit0 [ 129.957779][ T7471] netlink: 2 bytes leftover after parsing attributes in process `syz.4.392'. [ 130.471053][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 130.517448][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 130.686899][ T7515] netlink: 'syz.0.399': attribute type 5 has an invalid length. [ 130.731096][ T7515] netlink: 'syz.0.399': attribute type 5 has an invalid length. [ 130.815781][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 130.903256][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 131.662983][ T7566] tc_dump_action: action bad kind [ 132.997957][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004872][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.148693][ T7544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.381554][ T7575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.413'. [ 134.429673][ T7579] netlink: 68 bytes leftover after parsing attributes in process `syz.3.415'. [ 134.440258][ T7575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.413'. [ 134.678265][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 134.834004][ T7592] pim6reg: entered allmulticast mode [ 134.863005][ T7603] netlink: 72 bytes leftover after parsing attributes in process `syz.2.420'. [ 134.965887][ T7612] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.422'. [ 135.038324][ T7614] veth3: entered allmulticast mode [ 135.196033][ T7621] Bluetooth: MGMT ver 1.23 [ 135.548242][ T7625] netlink: 'syz.1.427': attribute type 4 has an invalid length. [ 135.711258][ T7626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.988752][ T7651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.432'. [ 136.088409][ T7649] tipc: Enabling of bearer rejected, failed to enable media [ 136.178870][ T7657] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 136.259318][ T7660] netlink: 104 bytes leftover after parsing attributes in process `syz.4.433'. [ 136.681535][ T7686] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.722852][ T7686] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 137.034714][ T7696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 137.133662][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 137.860233][ T7759] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 137.868784][ T7759] NCSI netlink: No device for ifindex 0 [ 138.034347][ T7768] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 138.675768][ T51] block nbd0: Receive control failed (result -32) [ 139.184063][ T7800] netlink: 'syz.0.459': attribute type 21 has an invalid length. [ 139.192117][ T7798] block nbd1: not configured, cannot reconfigure [ 139.420169][ T7806] netlink: 'syz.0.462': attribute type 29 has an invalid length. [ 139.834151][ T7825] __nla_validate_parse: 9 callbacks suppressed [ 139.834174][ T7825] netlink: 2 bytes leftover after parsing attributes in process `syz.3.466'. [ 140.354750][ T51] Bluetooth: hci3: command tx timeout [ 140.521654][ T7852] veth0_to_bond: entered allmulticast mode [ 140.561422][ T7852] syzkaller0: entered promiscuous mode [ 140.567528][ T7852] syzkaller0: entered allmulticast mode [ 140.934342][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 141.015681][ T7875] netlink: 9561 bytes leftover after parsing attributes in process `syz.4.479'. [ 141.053275][ T7875] netlink: 9561 bytes leftover after parsing attributes in process `syz.4.479'. [ 141.204644][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 141.436993][ T7890] netlink: 'syz.1.484': attribute type 12 has an invalid length. [ 141.465375][ T7892] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 141.467542][ T7890] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 141.485468][ T7890] netlink: 148 bytes leftover after parsing attributes in process `syz.1.484'. [ 141.494865][ T7890] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 141.502761][ T7890] netlink: 11 bytes leftover after parsing attributes in process `syz.1.484'. [ 141.715865][ T7907] vlan2: entered allmulticast mode [ 141.721217][ T7907] bond0: entered allmulticast mode [ 141.733166][ T7907] bond_slave_0: entered allmulticast mode [ 141.738983][ T7907] bond_slave_1: entered allmulticast mode [ 141.797055][ T7907] netlink: 14 bytes leftover after parsing attributes in process `syz.0.489'. [ 141.913879][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.947168][ T7907] bond_slave_0: left allmulticast mode [ 141.986949][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.018369][ T7907] bond_slave_1: left allmulticast mode [ 142.028166][ T7907] bond0 (unregistering): Released all slaves [ 142.194742][ T7928] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20000 [ 142.640159][ T7952] netlink: 'syz.4.503': attribute type 83 has an invalid length. [ 142.928505][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 142.950212][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 143.189801][ T7974] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 143.508835][ T7989] pim6reg1: entered promiscuous mode [ 143.544917][ T7989] pim6reg1: entered allmulticast mode [ 144.299975][ T8037] xt_bpf: check failed: parse error [ 144.326117][ T8036] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 144.505952][ T8042] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 144.514361][ T8042] NCSI netlink: No device for ifindex 0 [ 144.945348][ T8067] __nla_validate_parse: 6 callbacks suppressed [ 144.945368][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 145.297191][ T8098] netlink: 124 bytes leftover after parsing attributes in process `syz.4.535'. [ 145.480490][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 145.527693][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.606136][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 145.895861][ T8121] netlink: 212 bytes leftover after parsing attributes in process `syz.2.544'. [ 145.935381][ T8123] raw_sendmsg: syz.4.545 forgot to set AF_INET. Fix it! [ 145.949767][ T8121] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.984992][ T8126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.223956][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 146.847621][ T8171] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 146.883902][ T8171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.561'. [ 147.257610][ T8181] syzkaller0: entered promiscuous mode [ 147.263895][ T8181] syzkaller0: entered allmulticast mode [ 147.986000][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 148.117032][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 148.220003][ T8245] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 148.890925][ T8263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.959504][ T8283] netlink: 'syz.2.585': attribute type 21 has an invalid length. [ 148.984522][ T8276] IPVS: persistence engine module ip_vs_pe_… not found [ 149.197444][ T8263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.272931][ T8293] tls_set_device_offload_rx: netdev not found [ 149.292314][ T8293] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 149.331518][ T8293] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 149.375940][ T8263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.489854][ T8305] ip6tnl1: entered allmulticast mode [ 149.749710][ T8263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.031349][ T6213] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.088586][ T6216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.191494][ T8346] netlink: 'syz.2.596': attribute type 9 has an invalid length. [ 150.241254][ T8348] __nla_validate_parse: 7 callbacks suppressed [ 150.241276][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 150.310983][ T8350] netlink: 'syz.4.598': attribute type 3 has an invalid length. [ 150.320926][ T6213] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.387974][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 150.402311][ T7390] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.440210][ T8343] netlink: 'syz.1.597': attribute type 16 has an invalid length. [ 150.453186][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'. [ 150.490815][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 150.826557][ T8348] bond5: Invalid ad_actor_system MAC address. [ 150.848209][ T8348] bond5: option ad_actor_system: invalid value (1) [ 150.951886][ T8348] bond5 (unregistering): Released all slaves [ 151.045362][ T8369] netlink: 204 bytes leftover after parsing attributes in process `syz.0.599'. [ 151.201775][ T8379] netlink: 'syz.4.602': attribute type 2 has an invalid length. [ 151.286878][ T8379] netlink: 244 bytes leftover after parsing attributes in process `syz.4.602'. [ 151.482794][ T8388] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 151.979034][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 152.383996][ T8428] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 152.517953][ T8428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.658794][ T8434] bond5: (slave veth3): Enslaving as an active interface with a down link [ 152.748918][ T8435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.614'. [ 153.210872][ T8469] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 153.393926][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'. [ 153.485689][ T8490] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 153.499289][ T8469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.561304][ T8493] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.619654][ T8490] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 153.813819][ T8505] netlink: 'syz.3.630': attribute type 8 has an invalid length. [ 153.921366][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 154.276946][ T8530] hsr_slave_0: left promiscuous mode [ 154.326735][ T8530] hsr_slave_1: left promiscuous mode [ 154.470374][ T8536] netlink: 'syz.0.639': attribute type 62 has an invalid length. [ 154.809206][ T8553] Can't find ip_set type hash:ip,p:rt,net [ 154.927464][ T8560] can: request_module (can-proto-4) failed. [ 155.284901][ T8581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.303571][ T8583] __nla_validate_parse: 1 callbacks suppressed [ 155.303588][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 155.332741][ T8583] vlan2: entered allmulticast mode [ 155.346522][ T8583] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 155.434975][ T8588] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 155.467735][ T8592] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.750278][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 156.073039][ T8622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.091073][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.101323][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 156.233022][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 156.317986][ T8633] netlink: 'syz.1.665': attribute type 8 has an invalid length. [ 156.474864][ T8633] batadv0: entered promiscuous mode [ 156.491386][ T8633] macsec1: entered promiscuous mode [ 156.519638][ T8633] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 156.619581][ T8633] batadv0: left promiscuous mode [ 156.968858][ T42] IPVS: starting estimator thread 0... [ 156.975393][ T8659] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.061390][ T8659] syzkaller1: entered promiscuous mode [ 157.078197][ T8659] syzkaller1: entered allmulticast mode [ 157.094304][ T8662] IPVS: using max 26 ests per chain, 62400 per kthread [ 157.243452][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 157.307302][ T8671] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 157.341582][ T8671] bond4 (unregistering): Released all slaves [ 157.359548][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 157.416255][ T8684] netlink: 'syz.1.676': attribute type 30 has an invalid length. [ 157.509357][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 157.512411][ T8682] tipc: Started in network mode [ 157.527634][ T8682] tipc: Node identity 0ec4a9f467d1, cluster identity 4711 [ 157.536349][ T8682] tipc: Enabled bearer , priority 0 [ 157.583261][ T8681] tipc: Resetting bearer [ 157.600609][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 157.728182][ T8686] syzkaller0: entered promiscuous mode [ 157.735174][ T8686] syzkaller0: entered allmulticast mode [ 157.754529][ T8672] tipc: Resetting bearer [ 157.818622][ T8672] tipc: Disabling bearer [ 158.297301][ T8727] unsupported nlmsg_type 40 [ 158.458037][ T8734] netlink: 'syz.3.690': attribute type 3 has an invalid length. [ 158.551149][ T8734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.586842][ T8734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.610903][ T8734] bond0 (unregistering): Released all slaves [ 158.626050][ T8749] netlink: 'syz.4.693': attribute type 5 has an invalid length. [ 158.662759][ T8749] geneve2: entered promiscuous mode [ 158.682982][ T8749] geneve2: entered allmulticast mode [ 158.717238][ T6211] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 158.738649][ T8751] xt_hashlimit: size too large, truncated to 1048576 [ 158.750234][ T6211] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 158.784341][ T6211] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 158.806139][ T6211] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 158.838854][ T8755] –: renamed from vxcan1 (while UP) [ 158.872851][ T8760] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 158.988755][ T8758] netlink: 'syz.3.696': attribute type 11 has an invalid length. [ 159.015570][ T8766] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.032621][ T8766] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 159.046295][ T8766] bond4: (slave vxcan3): making interface the new active one [ 159.056259][ T8766] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 159.070274][ T8769] xt_connbytes: Forcing CT accounting to be enabled [ 159.095974][ T8769] xt_CT: No such helper "netbios-ns" [ 159.396432][ T8775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.403785][ T8775] IPv6: NLM_F_CREATE should be set when creating new route [ 159.736192][ T8789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.117691][ T8817] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 160.227979][ T8819] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 160.244921][ T8817] macvlan3: entered promiscuous mode [ 160.250486][ T8817] macvlan3: entered allmulticast mode [ 160.281736][ T8817] bond2: entered promiscuous mode [ 160.290232][ T8817] bridge1: entered promiscuous mode [ 160.297396][ T8817] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 160.315987][ T8817] bond2: left promiscuous mode [ 160.320939][ T8817] bridge1: left promiscuous mode [ 160.336724][ T8821] __nla_validate_parse: 16 callbacks suppressed [ 160.336743][ T8821] netlink: 172 bytes leftover after parsing attributes in process `syz.3.714'. [ 160.780639][ T8840] netlink: 72 bytes leftover after parsing attributes in process `syz.4.722'. [ 161.825360][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 162.084745][ T8910] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 162.375163][ T8930] netlink: 104 bytes leftover after parsing attributes in process `syz.3.745'. [ 162.702349][ T8945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.161474][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 163.187051][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 163.390868][ T8985] netlink: 'syz.3.759': attribute type 63 has an invalid length. [ 163.982223][ T9001] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.764'. [ 164.092678][ T9008] pim6reg: entered allmulticast mode [ 164.568928][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 164.754991][ T9026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 165.245504][ T9048] netlink: 67 bytes leftover after parsing attributes in process `syz.1.776'. [ 165.371569][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 165.477396][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 165.521435][ T9063] vlan2: entered allmulticast mode [ 165.526731][ T9063] bond0: entered allmulticast mode [ 165.532081][ T9063] bond_slave_0: entered allmulticast mode [ 165.573378][ T9063] bond_slave_1: entered allmulticast mode [ 165.599019][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.782'. [ 165.632298][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 165.649204][ T9081] netlink: 43 bytes leftover after parsing attributes in process `syz.0.782'. [ 165.691546][ T9071] team0: Port device batadv2 added [ 165.698271][ T9081] netlink: 'syz.0.782': attribute type 5 has an invalid length. [ 165.719515][ T5838] IPVS: starting estimator thread 0... [ 165.727361][ T9081] netlink: 43 bytes leftover after parsing attributes in process `syz.0.782'. [ 165.742310][ T9082] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 165.827344][ T9084] IPVS: using max 27 ests per chain, 64800 per kthread [ 165.954206][ T9092] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 165.988824][ T9095] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 166.048033][ T9095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.787'. [ 166.346312][ T9105] atomic_op ffff88807f44c198 conn xmit_atomic 0000000000000000 [ 166.393179][ T29] audit: type=1800 audit(1776111709.708:2): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.790" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=800 res=0 errno=0 [ 166.884581][ T9123] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 167.189994][ T9127] bond4 (unregistering): Released all slaves [ 167.250092][ T9134] netlink: 'syz.2.798': attribute type 5 has an invalid length. [ 167.408197][ T9140] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 167.773819][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 167.833648][ T9160] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 168.556648][ T9192] : renamed from bond0 (while UP) [ 168.902840][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 168.926284][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 168.944165][ T9202] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 169.005733][ T9202] bond6 (unregistering): Released all slaves [ 169.611910][ T9240] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.825'. [ 169.662673][ T9240] openvswitch: netlink: Message has 6 unknown bytes. [ 169.685238][ T9203] lec:lec_atm_close: lec0: Shut down! [ 170.064843][ T9253] netlink: 'syz.0.827': attribute type 3 has an invalid length. [ 170.412674][ T9259] __nla_validate_parse: 2 callbacks suppressed [ 170.412695][ T9259] netlink: 112 bytes leftover after parsing attributes in process `syz.1.830'. [ 170.544411][ T9275] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 170.584070][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 170.735985][ T9275] bond4: entered promiscuous mode [ 170.815967][ T9275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.094001][ T9279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.127955][ T9279] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 171.185007][ T9279] bond4: (slave sit1): Error -95 calling set_mac_address [ 171.272399][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 171.316300][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 171.763660][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 171.788873][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 171.973616][ T5940] lec:lec_start_xmit: lec0:No lecd attached [ 172.053684][ T9342] bond0: mtu less than device minimum [ 174.559160][ T9324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.801706][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 174.822359][ T9357] syzkaller0: entered promiscuous mode [ 174.829060][ T9357] syzkaller0: entered allmulticast mode [ 174.857420][ T9361] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 175.201504][ T9377] netlink: 156 bytes leftover after parsing attributes in process `syz.1.854'. [ 175.240651][ T9377] netlink: 156 bytes leftover after parsing attributes in process `syz.1.854'. [ 175.292793][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.853'. [ 177.153159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 177.161715][ C0] lec:lec_tx_timeout: lec0 [ 177.167809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 177.497900][ T9476] netlink: 204 bytes leftover after parsing attributes in process `syz.0.888'. [ 177.564463][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 178.133759][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.171563][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.191144][ T9508] netlink: 252 bytes leftover after parsing attributes in process `syz.1.900'. [ 178.246026][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.303520][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 178.338088][ T6212] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.368782][ T6212] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.398785][ T6212] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.439036][ T6212] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.939992][ T9546] netlink: 512 bytes leftover after parsing attributes in process `syz.2.913'. [ 179.312811][ T9565] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 179.724063][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.926'. [ 179.733027][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.926'. [ 182.049369][ T9702] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 182.183118][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 182.191341][ C0] lec:lec_tx_timeout: lec0 [ 182.196586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 182.368340][ T9716] syzkaller1: entered promiscuous mode [ 182.374581][ T9716] syzkaller1: entered allmulticast mode [ 182.421884][ T9720] syzkaller1: entered promiscuous mode [ 182.427754][ T9720] syzkaller1: entered allmulticast mode [ 183.541315][ T9781] __nla_validate_parse: 1 callbacks suppressed [ 183.541337][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1005'. [ 183.584692][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 183.788832][ T9794] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 183.891083][ T9796] IPv6: Can't replace route, no match found [ 183.899935][ T9796] IPv6: Can't replace route, no match found [ 185.072170][ T9852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.187530][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 185.198029][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 185.220449][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 185.512675][ T9880] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1044'. [ 186.109653][ T9872] netlink: 'syz.2.1041': attribute type 11 has an invalid length. [ 186.125788][ T9872] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1041'. [ 186.418576][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1054'. [ 186.426057][ T9920] x_tables: duplicate underflow at hook 4 [ 186.486392][ T9918] bond1: entered promiscuous mode [ 186.492146][ T9918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.508821][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 186.529968][ T9923] pim6reg: entered allmulticast mode [ 186.577857][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 186.590043][ T9926] netlink: 'syz.2.1057': attribute type 10 has an invalid length. [ 186.602657][ T9926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 187.087094][ T9948] tipc: Started in network mode [ 187.117091][ T9948] tipc: Node identity 66d5dff2b77f, cluster identity 4711 [ 187.139243][ T9948] tipc: Enabled bearer , priority 0 [ 187.176878][ T9959] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 187.203455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 187.211844][ C0] lec:lec_tx_timeout: lec0 [ 187.217086][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 187.372431][ T9958] syzkaller0: entered promiscuous mode [ 187.398923][ T9958] syzkaller0: entered allmulticast mode [ 187.406639][ T9958] tipc: Resetting bearer [ 187.419996][ T9964] syzkaller0: entered promiscuous mode [ 187.428644][ T9964] syzkaller0: entered allmulticast mode [ 187.596615][ T6207] tipc: Resetting bearer [ 187.606525][ T9947] tipc: Resetting bearer [ 187.939692][T10007] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 188.232590][T10023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.357619][ T9947] tipc: Disabling bearer [ 190.386136][T10003] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 190.393355][ T797] tipc: Node number set to 3517636594 [ 190.672283][T10059] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 190.716274][T10060] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 190.725019][T10060] tc_dump_action: action bad kind [ 190.871782][T10063] __nla_validate_parse: 3 callbacks suppressed [ 190.871814][T10063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1094'. [ 190.902425][T10063] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 190.915439][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 191.249804][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.278194][T10088] pim6reg1: entered promiscuous mode [ 191.280481][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 191.296680][T10088] pim6reg1: entered allmulticast mode [ 192.003024][T10120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1112'. [ 192.090728][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 192.116879][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 192.233478][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 192.241565][ C0] lec:lec_tx_timeout: lec0 [ 192.246254][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 192.377045][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 192.397452][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 192.675800][T10160] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 192.895259][T10172] netlink: 'syz.1.1123': attribute type 2 has an invalid length. [ 192.918939][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1123'. [ 193.400763][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 193.631176][T10208] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 193.826509][T10221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.438083][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.447995][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556002][ T6211] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.566212][ T6211] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.649882][ T6211] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.706071][ T6211] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.872315][T10272] vlan3: entered allmulticast mode [ 194.892503][T10272] bridge3: entered allmulticast mode [ 195.161274][T10298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.520331][T10282] x_tables: duplicate underflow at hook 1 [ 195.636321][T10321] syzkaller1: entered promiscuous mode [ 195.649690][T10321] syzkaller1: entered allmulticast mode [ 196.239243][T10351] __nla_validate_parse: 19 callbacks suppressed [ 196.239264][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1166'. [ 196.431356][T10358] netlink: 'syz.2.1169': attribute type 178 has an invalid length. [ 196.770810][T10376] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 197.463536][T10410] openvswitch: netlink: Message has 130 unknown bytes. [ 197.542649][T10412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1183'. [ 198.012883][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1191'. [ 198.022313][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 198.031952][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 198.041026][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 198.041095][ C0] lec:lec_tx_timeout: lec0 [ 198.049740][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 198.081705][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 198.137122][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 198.265513][T10442] netem: change failed [ 198.322723][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.714945][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1193'. [ 198.813284][T10464] syz.2.1198 (10464) used greatest stack depth: 17472 bytes left [ 199.037636][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 199.099059][T10489] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 199.128815][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'. [ 199.943744][T10532] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 200.128949][T10542] netlink: 'syz.4.1217': attribute type 9 has an invalid length. [ 200.887335][T10583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.122534][T10602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.179613][T10599] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 201.378004][T10614] __nla_validate_parse: 11 callbacks suppressed [ 201.378027][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 201.645726][T10619] syzkaller0: entered promiscuous mode [ 201.651297][T10619] syzkaller0: entered allmulticast mode [ 201.666534][T10619] netlink: 'syz.1.1238': attribute type 9 has an invalid length. [ 201.844213][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 201.925265][T10628] bond0: entered promiscuous mode [ 201.931032][T10628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.998382][T10634] bridge3: entered promiscuous mode [ 202.046124][T10634] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 202.086675][T10628] macvlan3: entered promiscuous mode [ 202.093183][T10628] macvlan3: entered allmulticast mode [ 202.099271][T10628] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 202.207835][T10645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.258095][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 202.289303][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 202.319799][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 202.641985][ T51] Bluetooth: hci3: link tx timeout [ 202.649022][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.999764][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 203.073139][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 203.081295][ C0] lec:lec_tx_timeout: lec0 [ 203.086508][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 203.409637][T10686] nbd1: detected capacity change from 0 to 63 [ 203.423842][ T5835] block nbd1: Receive control failed (result -32) [ 203.428882][ T5832] block nbd1: Receive control failed (result -32) [ 203.455124][ T6130] block nbd1: Dead connection, failed to find a fallback [ 203.462824][ T6130] block nbd1: shutting down sockets [ 203.513357][ T6130] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.553363][ T6130] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.561549][ T6130] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.605117][ T6130] Buffer I/O error on dev nbd1, logical block 1, async page read [ 203.637957][ T6130] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.678451][ T6130] Buffer I/O error on dev nbd1, logical block 2, async page read [ 203.694680][T10703] Cannot find add_set index 2 as target [ 203.703322][ T6130] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.712874][ T6130] Buffer I/O error on dev nbd1, logical block 3, async page read [ 203.763458][ T6130] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.773014][ T6130] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.823371][ T6130] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.833166][ T6130] Buffer I/O error on dev nbd1, logical block 1, async page read [ 203.841050][ T6130] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.910906][ T6130] Buffer I/O error on dev nbd1, logical block 2, async page read [ 203.920117][T10714] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 203.931941][ T6130] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.968221][ T6130] Buffer I/O error on dev nbd1, logical block 3, async page read [ 203.983272][ T6130] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 203.997480][ T6130] Buffer I/O error on dev nbd1, logical block 0, async page read [ 204.012383][ T6130] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 204.035140][T10721] IPVS: Error joining to the multicast group [ 204.035432][ T6130] Buffer I/O error on dev nbd1, logical block 1, async page read [ 204.051445][ T6130] ldm_validate_partition_table(): Disk read failed. [ 204.059747][ T6130] Dev nbd1: unable to read RDB block 0 [ 204.066034][ T6130] nbd1: unable to read partition table [ 204.077449][ T6130] ldm_validate_partition_table(): Disk read failed. [ 204.086372][T10723] syzkaller0: entered promiscuous mode [ 204.091919][T10723] syzkaller0: entered allmulticast mode [ 204.103328][ T6130] Dev nbd1: unable to read RDB block 0 [ 204.109493][ T6130] nbd1: unable to read partition table [ 204.127035][T10720] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 204.240153][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 204.589418][T10730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 204.600902][T10730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.675772][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 204.870915][T10736] x_tables: duplicate underflow at hook 1 [ 204.966440][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 205.160812][T10749] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 205.188412][T10749] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1278'. [ 205.286740][T10756] netlink: 'syz.2.1279': attribute type 7 has an invalid length. [ 205.363515][T10758] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.380367][T10756] netlink: 'syz.2.1279': attribute type 7 has an invalid length. [ 205.668426][T10774] netlink: 'syz.2.1283': attribute type 2 has an invalid length. [ 205.687262][T10774] netlink: 'syz.2.1283': attribute type 3 has an invalid length. [ 205.834938][T10781] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 205.985311][T10781] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.036103][T10783] ipvlan2: entered allmulticast mode [ 206.056900][T10783] batadv_slave_1: entered allmulticast mode [ 206.080535][T10783] batman_adv: batadv0: Adding interface: ipvlan2 [ 206.093796][T10783] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.125137][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.136032][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.146253][T10783] batman_adv: batadv0: Interface activated: ipvlan2 [ 206.160466][T10783] ipvlan3: entered allmulticast mode [ 206.168102][T10783] batman_adv: batadv0: Adding interface: ipvlan3 [ 206.174992][T10783] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.200661][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.211349][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.222573][T10811] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 206.229113][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 206.241611][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.251808][T10783] batman_adv: batadv0: Interface activated: ipvlan3 [ 206.272868][T10809] netem: incorrect gi model size [ 206.279940][T10809] netem: change failed [ 206.310424][T10783] ipvlan4: entered allmulticast mode [ 206.330634][T10783] batman_adv: batadv0: Adding interface: ipvlan4 [ 206.339881][T10783] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.366277][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.378422][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.388725][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 206.398825][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.409936][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 206.420223][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.430514][T10783] batman_adv: batadv0: Interface activated: ipvlan4 [ 206.512427][T10783] ipvlan5: entered allmulticast mode [ 206.535753][T10783] batman_adv: batadv0: Adding interface: ipvlan5 [ 206.575874][T10783] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.621906][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.633479][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.644104][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 206.655146][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.665310][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 206.676498][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.686924][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 206.768579][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.788922][T10783] batman_adv: batadv0: Interface activated: ipvlan5 [ 206.844226][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.956216][T10829] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 207.001103][T10829] veth0_macvtap: left promiscuous mode [ 207.127173][T10840] __nla_validate_parse: 7 callbacks suppressed [ 207.127194][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 207.302410][T10843] syzkaller0: entered promiscuous mode [ 207.308408][T10843] syzkaller0: entered allmulticast mode [ 207.343555][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1304'. [ 208.055301][T10851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.093315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 208.101517][ C0] lec:lec_tx_timeout: lec0 [ 208.106239][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 208.246220][T10885] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 209.096279][T10892] af_packet: tpacket_rcv: packet too big, clamped from 89 to 4294967272. macoff=96 [ 209.128827][T10885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.204441][T10886] bond6: (slave veth5): Enslaving as an active interface with a down link [ 209.255411][T10887] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 209.323491][T10897] syzkaller1: entered promiscuous mode [ 209.330012][T10897] syzkaller1: entered allmulticast mode [ 209.571227][T10917] sock: sock_set_timeout: `syz.0.1319' (pid 10917) tries to set negative timeout [ 209.624547][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1319'. [ 209.736300][T10923] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 209.745858][T10923] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1323'. [ 209.756472][T10923] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1323'. [ 209.993901][T10944] C: renamed from lo [ 210.024701][T10944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.081793][T10944] macsec1: entered promiscuous mode [ 210.260613][T10951] pimreg3: entered allmulticast mode [ 210.305402][T10959] veth1_macvtap: left promiscuous mode [ 210.340716][T10959] validate_nla: 2 callbacks suppressed [ 210.340736][T10959] netlink: 'syz.2.1331': attribute type 16 has an invalid length. [ 210.600419][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 210.634318][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1334'. [ 210.649320][T10975] openvswitch: netlink: IP tunnel dst address not specified [ 210.687383][T10976] syzkaller0: entered promiscuous mode [ 210.714095][T10976] syzkaller0: entered allmulticast mode [ 210.839169][T10979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 210.851498][T10982] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1340'. [ 210.862312][T10982] openvswitch: netlink: Flow key attr not present in new flow. [ 210.879292][T10982] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1340'. [ 210.904549][T10982] openvswitch: netlink: Flow key attr not present in new flow. [ 211.199232][T11007] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 211.225768][T11007] bond3: entered promiscuous mode [ 211.231017][T11007] bond3: entered allmulticast mode [ 211.237095][T11007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.296074][T11010] syzkaller0: entered promiscuous mode [ 211.301690][T11010] syzkaller0: entered allmulticast mode [ 211.490099][T11015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.513226][ T5838] IPVS: starting estimator thread 0... [ 211.519783][T11017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.608430][T11019] IPVS: using max 28 ests per chain, 67200 per kthread [ 211.841992][T11033] netlink: 'syz.1.1354': attribute type 39 has an invalid length. [ 211.873240][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.875147][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.879477][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 211.993896][T11035] ip6gre0: Master is either lo or non-ether device [ 212.268961][ T6211] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.624714][T11073] __nla_validate_parse: 8 callbacks suppressed [ 212.624736][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.654472][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.656811][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1366'. [ 212.686656][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.721906][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.756856][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.780364][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.795436][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.806355][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 212.817814][T11073] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1365'. [ 213.035488][T11095] netlink: 'syz.1.1372': attribute type 3 has an invalid length. [ 213.113105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 213.121233][ C0] lec:lec_tx_timeout: lec0 [ 213.126012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 213.161092][T11099] team1: entered promiscuous mode [ 213.166841][T11099] team1: entered allmulticast mode [ 213.332715][T11107] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 213.623267][T11121] veth1_macvtap: renamed from vlan1 [ 213.864762][T11138] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 213.942729][T11146] netlink: 'syz.0.1386': attribute type 5 has an invalid length. [ 214.065742][T11149] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 214.328922][T11172] x_tables: duplicate underflow at hook 2 [ 214.389119][T11176] xt_TCPMSS: Only works on TCP SYN packets [ 214.590589][T11184] sctp: [Deprecated]: syz.2.1397 (pid 11184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.590589][T11184] Use struct sctp_sack_info instead [ 214.644539][T11191] netlink: 'syz.4.1398': attribute type 2 has an invalid length. [ 215.748952][T11237] vlan3: entered allmulticast mode [ 215.778117][T11237] bond0: entered allmulticast mode [ 215.797915][T11252] sctp: [Deprecated]: syz.1.1410 (pid 11252) Use of int in maxseg socket option. [ 215.797915][T11252] Use struct sctp_assoc_value instead [ 215.803406][T11237] bridge3: entered allmulticast mode [ 216.047218][T11262] netlink: 'syz.4.1415': attribute type 2 has an invalid length. [ 216.112324][T11262] netlink: 'syz.4.1415': attribute type 2 has an invalid length. [ 216.601117][T11294] netlink: 'syz.2.1423': attribute type 178 has an invalid length. [ 216.878374][T11320] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 217.050582][T11320] bond4: (slave geneve2): making interface the new active one [ 217.062767][T11320] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 217.083104][ T6207] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.092004][ T6207] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.163475][ T6207] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.700345][T11365] __nla_validate_parse: 73 callbacks suppressed [ 217.700368][T11365] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1440'. [ 218.042863][T11377] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 218.108056][T11381] tipc: Enabling of bearer rejected, failed to enable media [ 218.127082][T11377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.136128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 218.136163][ C0] lec:lec_tx_timeout: lec0 [ 218.144707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 218.451408][T11398] pim6reg1: entered promiscuous mode [ 218.493521][T11398] pim6reg1: entered allmulticast mode [ 218.565070][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 218.690186][T11419] macvlan3: entered promiscuous mode [ 218.705550][T11419] macvlan3: entered allmulticast mode [ 218.742805][T11419] bond7: entered promiscuous mode [ 218.748915][T11419] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 218.761103][T11419] bond7: left promiscuous mode [ 218.934011][T11433] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1458'. [ 218.961716][T11431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 219.015304][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 219.025733][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 219.408102][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 219.430921][T11458] pim6reg1: entered promiscuous mode [ 219.436621][T11458] pim6reg1: entered allmulticast mode [ 219.460421][T11460] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 219.679006][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 219.836893][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 219.862605][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 219.912528][T11483] vlan4: entered promiscuous mode [ 219.932782][T11483] gretap0: entered promiscuous mode [ 220.335017][T11512] IPv6: NLM_F_REPLACE set, but no existing node found! [ 220.553995][T11521] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 220.573294][T11521] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 221.175578][T11560] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 221.883540][T11541] netem: change failed [ 222.165217][T11593] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 222.472020][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.499054][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.710308][T11615] __nla_validate_parse: 10 callbacks suppressed [ 222.710331][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 223.020371][T11648] sctp: [Deprecated]: syz.1.1516 (pid 11648) Use of int in max_burst socket option deprecated. [ 223.020371][T11648] Use struct sctp_assoc_value instead [ 223.040893][T11650] sctp: [Deprecated]: syz.1.1516 (pid 11650) Use of int in max_burst socket option deprecated. [ 223.040893][T11650] Use struct sctp_assoc_value instead [ 223.153170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 223.161322][ C0] lec:lec_tx_timeout: lec0 [ 223.166056][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.319275][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 223.368637][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 223.391387][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1519'. [ 223.552318][T11676] syzkaller0: entered promiscuous mode [ 223.577127][T11676] syzkaller0: entered allmulticast mode [ 223.731000][T11680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.929590][T11702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1532'. [ 223.952307][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'. [ 224.122714][T11713] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1536'. [ 224.132157][T11713] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 224.211583][T11724] x_tables: duplicate underflow at hook 1 [ 224.219207][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 224.230782][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 224.241206][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 227.096696][T11722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.298423][T11749] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.331424][T11750] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 227.810702][T11779] netlink: 'syz.2.1553': attribute type 12 has an invalid length. [ 227.973592][T11789] tipc: Enabling of bearer rejected, failed to enable media [ 228.016331][T11798] __nla_validate_parse: 2 callbacks suppressed [ 228.016354][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'. [ 228.145749][T11800] vlan1: entered allmulticast mode [ 228.150961][T11800] bridge4: entered allmulticast mode [ 228.173131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 228.181240][ C0] lec:lec_tx_timeout: lec0 [ 228.184484][T11802] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 228.189641][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 228.233587][T11800] x_tables: duplicate entry at hook 1 [ 228.265192][T11805] bridge4: port 1(bond3) entered blocking state [ 228.271974][T11805] bridge4: port 1(bond3) entered disabled state [ 228.281321][T11805] bond3: entered allmulticast mode [ 228.293567][T11805] bond3: entered promiscuous mode [ 228.421666][T11800] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 228.532456][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 228.558905][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'. [ 228.832561][T11837] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 229.079957][T11855] bond8 (unregistering): Released all slaves [ 229.134558][T11860] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 229.171620][T11860] IPVS: length: 239 != 24 [ 229.237244][T11867] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 229.300121][T11867] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1575'. [ 229.602260][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 229.632657][T11884] macvtap1: entered promiscuous mode [ 229.660306][T11884] macvtap1: entered allmulticast mode [ 229.680570][T11884] veth1_vlan: entered allmulticast mode [ 229.837040][T11890] syzkaller0: entered promiscuous mode [ 229.864346][T11890] syzkaller0: entered allmulticast mode [ 230.258176][T11907] xt_NFQUEUE: number of total queues is 0 [ 230.495147][T11920] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 231.054285][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 232.757481][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 232.877369][T11972] sctp: [Deprecated]: syz.2.1599 (pid 11972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.877369][T11972] Use struct sctp_sack_info instead [ 233.125773][T11993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1603'. [ 233.209933][T11993] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1603'. [ 233.223222][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 233.231291][ C0] lec:lec_tx_timeout: lec0 [ 233.236670][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 233.273173][T11993] netlink: 'syz.4.1603': attribute type 6 has an invalid length. [ 233.336902][T11993] netlink: 'syz.4.1603': attribute type 5 has an invalid length. [ 233.354405][T11993] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1603'. [ 233.587081][T12018] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 233.617996][T12024] netlink: 'syz.3.1611': attribute type 9 has an invalid length. [ 233.676610][T12018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.721913][T12026] bond8: (slave veth5): Enslaving as an active interface with a down link [ 233.752244][T12031] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20003 [ 234.068441][T12047] netlink: 'syz.2.1616': attribute type 3 has an invalid length. [ 234.108890][T12047] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1616'. [ 234.158145][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1616'. [ 234.186308][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 234.456700][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 234.791155][T12094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.798742][T12094] IPv6: NLM_F_CREATE should be set when creating new route [ 234.821696][T12094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'. [ 234.842779][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'. [ 235.023387][T12088] tunl0: entered promiscuous mode [ 235.074440][T12088] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 235.093621][T12088] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1625'. [ 235.674494][T12128] netlink: 'syz.0.1633': attribute type 2 has an invalid length. [ 235.725615][T12126] geneve4: entered promiscuous mode [ 235.730984][T12126] geneve4: entered allmulticast mode [ 235.778017][T12125] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.816650][ T6206] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 235.852712][ T6206] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 235.955879][ T6206] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 235.995619][ T6206] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 236.633406][T12168] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 236.642737][T12168] bridge_slave_1: left allmulticast mode [ 236.703629][T12168] bridge_slave_1: left promiscuous mode [ 236.725762][T12168] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.764325][T12168] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 236.984802][T12183] bond8: option xmit_hash_policy: invalid value (64) [ 237.007988][T12183] bond8 (unregistering): Released all slaves [ 237.066676][T12194] gretap0: entered promiscuous mode [ 237.106303][T12194] gretap0: left promiscuous mode [ 237.312776][T12202] syzkaller0: entered promiscuous mode [ 237.333328][T12202] syzkaller0: entered allmulticast mode [ 237.726445][T12227] tipc: New replicast peer: 255.255.255.255 [ 237.745045][T12227] tipc: Enabled bearer , priority 10 [ 237.795552][T12230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 237.826782][T12234] tipc: Disabling bearer [ 238.184373][T12249] __nla_validate_parse: 69 callbacks suppressed [ 238.184396][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 238.243102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 238.251257][ C0] lec:lec_tx_timeout: lec0 [ 238.256063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.289019][T12256] x_tables: duplicate underflow at hook 3 [ 238.571439][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 238.616953][T12279] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1671'. [ 239.101557][T12303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.246587][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1683'. [ 239.264324][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1683'. [ 239.288542][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 239.388547][T12300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.679711][T12343] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 239.710490][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 239.752522][T12341] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1691'. [ 239.922707][T12356] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 240.001014][T12356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.105358][T12359] vlan3: entered promiscuous mode [ 240.140229][T12359] bond4: entered promiscuous mode [ 240.157275][T12359] vlan3: entered allmulticast mode [ 240.162498][T12359] bond4: entered allmulticast mode [ 240.177150][T12372] x_tables: unsorted entry at hook 1 [ 240.185644][T12363] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1696'. [ 240.201439][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.275943][T12370] bridge_slave_0 (unregistering): left allmulticast mode [ 240.293328][T12370] bridge_slave_0 (unregistering): left promiscuous mode [ 240.302602][T12370] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.432489][T12373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.755535][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 241.477647][T12444] netlink: 'syz.1.1720': attribute type 29 has an invalid length. [ 241.708301][T12460] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 242.349436][T12502] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 242.808998][T12521] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 243.101067][T12539] syzkaller0: entered promiscuous mode [ 243.110613][T12539] syzkaller0: entered allmulticast mode [ 243.161128][T12549] sctp: [Deprecated]: syz.3.1752 (pid 12549) Use of int in max_burst socket option. [ 243.161128][T12549] Use struct sctp_assoc_value instead [ 243.549540][T12575] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.355882][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6100 ms [ 244.364091][ C0] lec:lec_tx_timeout: lec0 [ 244.371293][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.959712][T12553] syzkaller0: entered promiscuous mode [ 244.965387][T12553] syzkaller0: entered allmulticast mode [ 245.048288][T12586] netlink: 'syz.0.1759': attribute type 21 has an invalid length. [ 245.059319][T12586] __nla_validate_parse: 10 callbacks suppressed [ 245.059338][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 245.182394][T12586] bond0: entered promiscuous mode [ 245.190931][T12590] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1760'. [ 245.200712][T12586] bond0: left promiscuous mode [ 245.444380][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 245.545078][T12614] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 245.717239][T12620] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1770'. [ 246.143691][T12647] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1778'. [ 246.257852][T12652] C: renamed from lo (while UP) [ 246.274880][T12652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 246.403398][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1785'. [ 246.491689][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 246.532612][T12673] ip6t_srh: unknown srh match flags 5F28 [ 246.677005][T12660] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 246.846643][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 246.856402][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 246.867531][T12689] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1792'. [ 246.888900][T12688] netlink: 'syz.0.1791': attribute type 1 has an invalid length. [ 247.126328][T12705] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 247.342358][T12718] FAULT_INJECTION: forcing a failure. [ 247.342358][T12718] name failslab, interval 1, probability 0, space 0, times 1 [ 247.359810][T12718] CPU: 1 UID: 0 PID: 12718 Comm: syz.1.1800 Not tainted syzkaller #0 PREEMPT(full) [ 247.359855][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.359881][T12718] Call Trace: [ 247.359890][T12718] [ 247.359899][T12718] dump_stack_lvl+0xe8/0x150 [ 247.359948][T12718] should_fail_ex+0x412/0x560 [ 247.359989][T12718] should_failslab+0xa8/0x100 [ 247.360020][T12718] __kmalloc_noprof+0xe8/0x760 [ 247.360046][T12718] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 247.360087][T12718] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 247.360128][T12718] genl_family_rcv_msg_doit+0xd9/0x330 [ 247.360168][T12718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.360209][T12718] ? apparmor_capable+0x126/0x170 [ 247.360238][T12718] ? bpf_lsm_capable+0x9/0x20 [ 247.360268][T12718] ? security_capable+0x7e/0x2c0 [ 247.360319][T12718] genl_rcv_msg+0x61c/0x7a0 [ 247.360358][T12718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.360387][T12718] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 247.360424][T12718] ? __pfx_nl80211_set_key+0x10/0x10 [ 247.360443][T12718] ? __pfx_nl80211_post_doit+0x10/0x10 [ 247.360475][T12718] ? __lock_acquire+0x6b5/0x2cf0 [ 247.360517][T12718] netlink_rcv_skb+0x232/0x4b0 [ 247.360543][T12718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.360576][T12718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.360621][T12718] ? down_read+0x272/0x2e0 [ 247.360640][T12718] ? genl_rcv+0xd/0x40 [ 247.360670][T12718] genl_rcv+0x28/0x40 [ 247.360698][T12718] netlink_unicast+0x80f/0x9b0 [ 247.360729][T12718] ? __pfx_netlink_unicast+0x10/0x10 [ 247.360753][T12718] ? netlink_sendmsg+0x650/0xb40 [ 247.360782][T12718] ? skb_put+0x11b/0x210 [ 247.360812][T12718] netlink_sendmsg+0x813/0xb40 [ 247.360847][T12718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.360876][T12718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.360910][T12718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.360940][T12718] ____sys_sendmsg+0x972/0x9f0 [ 247.360981][T12718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.361021][T12718] ? import_iovec+0x73/0xa0 [ 247.361052][T12718] ___sys_sendmsg+0x2a5/0x360 [ 247.361089][T12718] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.361161][T12718] ? __fget_files+0x2a/0x420 [ 247.361180][T12718] ? __fget_files+0x3a0/0x420 [ 247.361212][T12718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 247.361245][T12718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.361285][T12718] ? __pfx_ksys_write+0x10/0x10 [ 247.361324][T12718] do_syscall_64+0x14d/0xf80 [ 247.361354][T12718] ? trace_irq_disable+0x3b/0x150 [ 247.361371][T12718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.361394][T12718] ? clear_bhb_loop+0x40/0x90 [ 247.361421][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.361442][T12718] RIP: 0033:0x7f829459c819 [ 247.361473][T12718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.361492][T12718] RSP: 002b:00007f82953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.361523][T12718] RAX: ffffffffffffffda RBX: 00007f8294815fa0 RCX: 00007f829459c819 [ 247.361539][T12718] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000003 [ 247.361552][T12718] RBP: 00007f82953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.361565][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.361578][T12718] R13: 00007f8294816038 R14: 00007f8294815fa0 R15: 00007ffe95bb96d8 [ 247.361614][T12718] [ 247.862951][T12724] pim6reg: entered allmulticast mode [ 248.081900][T12741] nbd: must specify a device to reconfigure [ 248.319810][T12753] netlink: 'syz.0.1811': attribute type 10 has an invalid length. [ 248.742523][T12761] FAULT_INJECTION: forcing a failure. [ 248.742523][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 248.788074][T12761] CPU: 1 UID: 0 PID: 12761 Comm: syz.3.1813 Not tainted syzkaller #0 PREEMPT(full) [ 248.788106][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.788120][T12761] Call Trace: [ 248.788128][T12761] [ 248.788137][T12761] dump_stack_lvl+0xe8/0x150 [ 248.788180][T12761] should_fail_ex+0x412/0x560 [ 248.788221][T12761] should_failslab+0xa8/0x100 [ 248.788253][T12761] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 248.788281][T12761] ? __alloc_skb+0x1d0/0x7d0 [ 248.788306][T12761] ? __local_bh_enable_ip+0xd0/0x130 [ 248.788341][T12761] __alloc_skb+0x1d0/0x7d0 [ 248.788367][T12761] ? netlink_ack_tlv_len+0x6c/0x210 [ 248.788396][T12761] netlink_ack+0x146/0xa50 [ 248.788417][T12761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.788447][T12761] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 248.788480][T12761] ? __pfx_nl80211_post_doit+0x10/0x10 [ 248.788520][T12761] ? __lock_acquire+0x6b5/0x2cf0 [ 248.788562][T12761] netlink_rcv_skb+0x2b6/0x4b0 [ 248.788588][T12761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.788621][T12761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.788667][T12761] ? down_read+0x272/0x2e0 [ 248.788686][T12761] ? genl_rcv+0xd/0x40 [ 248.788718][T12761] genl_rcv+0x28/0x40 [ 248.788747][T12761] netlink_unicast+0x80f/0x9b0 [ 248.788780][T12761] ? __pfx_netlink_unicast+0x10/0x10 [ 248.788804][T12761] ? netlink_sendmsg+0x650/0xb40 [ 248.788828][T12761] ? skb_put+0x11b/0x210 [ 248.788859][T12761] netlink_sendmsg+0x813/0xb40 [ 248.788896][T12761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.788926][T12761] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.788963][T12761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.788993][T12761] ____sys_sendmsg+0x972/0x9f0 [ 248.789035][T12761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.789076][T12761] ? import_iovec+0x73/0xa0 [ 248.789107][T12761] ___sys_sendmsg+0x2a5/0x360 [ 248.789145][T12761] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.789217][T12761] ? __fget_files+0x2a/0x420 [ 248.789236][T12761] ? __fget_files+0x3a0/0x420 [ 248.789269][T12761] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.789303][T12761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.789345][T12761] ? __pfx_ksys_write+0x10/0x10 [ 248.789384][T12761] do_syscall_64+0x14d/0xf80 [ 248.789415][T12761] ? trace_irq_disable+0x3b/0x150 [ 248.789435][T12761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.789457][T12761] ? clear_bhb_loop+0x40/0x90 [ 248.789485][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.789513][T12761] RIP: 0033:0x7fb9e159c819 [ 248.789534][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.789554][T12761] RSP: 002b:00007fb9e23b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.789577][T12761] RAX: ffffffffffffffda RBX: 00007fb9e1815fa0 RCX: 00007fb9e159c819 [ 248.789593][T12761] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000003 [ 248.789607][T12761] RBP: 00007fb9e23b1090 R08: 0000000000000000 R09: 0000000000000000 [ 248.789621][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.789634][T12761] R13: 00007fb9e1816038 R14: 00007fb9e1815fa0 R15: 00007ffd9c8814e8 [ 248.789670][T12761] [ 249.400385][T12776] netlink: 'syz.3.1817': attribute type 6 has an invalid length. [ 249.546460][T12789] netlink: 'syz.3.1823': attribute type 62 has an invalid length. [ 249.687238][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.707336][T12794] netlink: 'syz.4.1824': attribute type 9 has an invalid length. [ 250.113211][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 250.121449][ C0] lec:lec_tx_timeout: lec0 [ 250.126758][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 250.249934][T12819] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 250.349410][T12819] bond9 (unregistering): Released all slaves [ 250.400650][T12838] FAULT_INJECTION: forcing a failure. [ 250.400650][T12838] name failslab, interval 1, probability 0, space 0, times 0 [ 250.430215][T12838] CPU: 1 UID: 0 PID: 12838 Comm: syz.3.1838 Not tainted syzkaller #0 PREEMPT(full) [ 250.430248][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 250.430262][T12838] Call Trace: [ 250.430271][T12838] [ 250.430280][T12838] dump_stack_lvl+0xe8/0x150 [ 250.430319][T12838] should_fail_ex+0x412/0x560 [ 250.430361][T12838] should_failslab+0xa8/0x100 [ 250.430391][T12838] ? skb_clone+0x212/0x3a0 [ 250.430422][T12838] kmem_cache_alloc_noprof+0x87/0x650 [ 250.430458][T12838] skb_clone+0x212/0x3a0 [ 250.430493][T12838] __netlink_deliver_tap+0x404/0x850 [ 250.430534][T12838] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.430562][T12838] netlink_deliver_tap+0x19c/0x1b0 [ 250.430589][T12838] netlink_sendskb+0x68/0x140 [ 250.430614][T12838] netlink_unicast+0x3a3/0x9b0 [ 250.430647][T12838] ? __pfx_netlink_unicast+0x10/0x10 [ 250.430681][T12838] netlink_rcv_skb+0x2b6/0x4b0 [ 250.430708][T12838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.430741][T12838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.430788][T12838] ? down_read+0x272/0x2e0 [ 250.430807][T12838] ? genl_rcv+0xd/0x40 [ 250.430840][T12838] genl_rcv+0x28/0x40 [ 250.430868][T12838] netlink_unicast+0x80f/0x9b0 [ 250.430901][T12838] ? __pfx_netlink_unicast+0x10/0x10 [ 250.430926][T12838] ? netlink_sendmsg+0x650/0xb40 [ 250.430949][T12838] ? skb_put+0x11b/0x210 [ 250.430989][T12838] netlink_sendmsg+0x813/0xb40 [ 250.431026][T12838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.431056][T12838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 250.431097][T12838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.431126][T12838] ____sys_sendmsg+0x972/0x9f0 [ 250.431169][T12838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.431211][T12838] ? import_iovec+0x73/0xa0 [ 250.431242][T12838] ___sys_sendmsg+0x2a5/0x360 [ 250.431280][T12838] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.431353][T12838] ? __fget_files+0x2a/0x420 [ 250.431373][T12838] ? __fget_files+0x3a0/0x420 [ 250.431405][T12838] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.431441][T12838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.431483][T12838] ? __pfx_ksys_write+0x10/0x10 [ 250.431524][T12838] do_syscall_64+0x14d/0xf80 [ 250.431555][T12838] ? trace_irq_disable+0x3b/0x150 [ 250.431575][T12838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.431597][T12838] ? clear_bhb_loop+0x40/0x90 [ 250.431625][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.431647][T12838] RIP: 0033:0x7fb9e159c819 [ 250.431668][T12838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.431688][T12838] RSP: 002b:00007fb9e23b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.431712][T12838] RAX: ffffffffffffffda RBX: 00007fb9e1815fa0 RCX: 00007fb9e159c819 [ 250.431728][T12838] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000000000000003 [ 250.431743][T12838] RBP: 00007fb9e23b1090 R08: 0000000000000000 R09: 0000000000000000 [ 250.431756][T12838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.431769][T12838] R13: 00007fb9e1816038 R14: 00007fb9e1815fa0 R15: 00007ffd9c8814e8 [ 250.431806][T12838] [ 250.830888][T12845] xt_ipcomp: unknown flags 1D [ 250.896846][T12849] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 250.909509][T12849] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 251.097018][T12858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.140558][T12863] __nla_validate_parse: 16 callbacks suppressed [ 251.140582][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.166744][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.186522][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.215118][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.316385][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.334650][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.353015][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 251.395717][T12875] netlink: 'syz.4.1849': attribute type 10 has an invalid length. [ 251.449015][T12877] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1849'. [ 251.459029][T12875] veth0_vlan: left promiscuous mode [ 251.477845][T12875] veth0_vlan: entered promiscuous mode [ 251.548945][T12875] team0: Device veth0_vlan failed to register rx_handler [ 251.729551][T12892] netlink: 'syz.2.1855': attribute type 64 has an invalid length. [ 251.738938][T12892] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1855'. [ 252.081515][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 252.191110][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.201362][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.210877][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.219132][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.227319][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.235502][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.245756][T12923] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 252.401395][T12930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 252.741560][T12955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.966531][T12971] syzkaller0: entered promiscuous mode [ 252.975289][T12971] syzkaller0: entered allmulticast mode [ 253.320458][T12993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.342002][T12992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.448640][T12992] syzkaller0: entered promiscuous mode [ 253.454426][T12992] syzkaller0: entered allmulticast mode [ 253.769645][T13011] team0: Device gtp0 is up. Set it down before adding it as a team port [ 254.484711][T13063] FAULT_INJECTION: forcing a failure. [ 254.484711][T13063] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.499403][T13063] CPU: 0 UID: 0 PID: 13063 Comm: syz.1.1902 Not tainted syzkaller #0 PREEMPT(full) [ 254.499451][T13063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.499465][T13063] Call Trace: [ 254.499474][T13063] [ 254.499483][T13063] dump_stack_lvl+0xe8/0x150 [ 254.499521][T13063] should_fail_ex+0x412/0x560 [ 254.499560][T13063] _copy_from_user+0x2d/0xb0 [ 254.499581][T13063] ___sys_sendmsg+0x1c6/0x360 [ 254.499607][T13063] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.499655][T13063] ? __fget_files+0x2a/0x420 [ 254.499670][T13063] ? __fget_files+0x3a0/0x420 [ 254.499691][T13063] __x64_sys_sendmsg+0x1bd/0x2a0 [ 254.499716][T13063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.499745][T13063] ? __pfx_ksys_write+0x10/0x10 [ 254.499772][T13063] do_syscall_64+0x14d/0xf80 [ 254.499794][T13063] ? trace_irq_disable+0x3b/0x150 [ 254.499808][T13063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.499824][T13063] ? clear_bhb_loop+0x40/0x90 [ 254.499843][T13063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.499858][T13063] RIP: 0033:0x7f829459c819 [ 254.499874][T13063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.499888][T13063] RSP: 002b:00007f82953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.499904][T13063] RAX: ffffffffffffffda RBX: 00007f8294815fa0 RCX: 00007f829459c819 [ 254.499916][T13063] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 254.499926][T13063] RBP: 00007f82953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.499935][T13063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.499944][T13063] R13: 00007f8294816038 R14: 00007f8294815fa0 R15: 00007ffe95bb96d8 [ 254.499968][T13063] [ 255.133117][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 255.141292][ C0] lec:lec_tx_timeout: lec0 [ 255.146296][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 255.262156][ T7390] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.276464][ T7390] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.289434][ T7390] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.299141][ T7390] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.318348][T13103] FAULT_INJECTION: forcing a failure. [ 255.318348][T13103] name failslab, interval 1, probability 0, space 0, times 0 [ 255.342735][T13103] CPU: 0 UID: 0 PID: 13103 Comm: syz.3.1915 Not tainted syzkaller #0 PREEMPT(full) [ 255.342766][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.342780][T13103] Call Trace: [ 255.342788][T13103] [ 255.342797][T13103] dump_stack_lvl+0xe8/0x150 [ 255.342831][T13103] should_fail_ex+0x412/0x560 [ 255.342871][T13103] should_failslab+0xa8/0x100 [ 255.342902][T13103] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 255.342927][T13103] ? __alloc_skb+0x186/0x7d0 [ 255.342952][T13103] ? __alloc_skb+0x1d0/0x7d0 [ 255.342976][T13103] ? __local_bh_enable_ip+0xd0/0x130 [ 255.343010][T13103] __alloc_skb+0x1d0/0x7d0 [ 255.343050][T13103] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 255.343082][T13103] netlink_sendmsg+0x5d4/0xb40 [ 255.343117][T13103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.343146][T13103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.343183][T13103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.343211][T13103] ____sys_sendmsg+0x972/0x9f0 [ 255.343251][T13103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.343290][T13103] ? import_iovec+0x73/0xa0 [ 255.343321][T13103] ___sys_sendmsg+0x2a5/0x360 [ 255.343358][T13103] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.343427][T13103] ? __fget_files+0x2a/0x420 [ 255.343446][T13103] ? __fget_files+0x3a0/0x420 [ 255.343478][T13103] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.343512][T13103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.343553][T13103] ? __pfx_ksys_write+0x10/0x10 [ 255.343591][T13103] do_syscall_64+0x14d/0xf80 [ 255.343622][T13103] ? trace_irq_disable+0x3b/0x150 [ 255.343641][T13103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.343664][T13103] ? clear_bhb_loop+0x40/0x90 [ 255.343691][T13103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.343713][T13103] RIP: 0033:0x7fb9e159c819 [ 255.343735][T13103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.343754][T13103] RSP: 002b:00007fb9e23b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.343778][T13103] RAX: ffffffffffffffda RBX: 00007fb9e1815fa0 RCX: 00007fb9e159c819 [ 255.343794][T13103] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.343808][T13103] RBP: 00007fb9e23b1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.343822][T13103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.343835][T13103] R13: 00007fb9e1816038 R14: 00007fb9e1815fa0 R15: 00007ffd9c8814e8 [ 255.343870][T13103] [ 255.879175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887970][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.133367][T13134] ¾x9ÿ: left allmulticast mode [ 256.150580][T13134] ¾x9ÿ: left promiscuous mode [ 256.164124][T13134] bridge0: port 1(1¾x9ÿ) entered disabled state [ 256.195228][T13134] bridge_slave_1: left allmulticast mode [ 256.201202][T13134] bridge_slave_1: left promiscuous mode [ 256.232435][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.260266][T13134] bond6: (slave veth0_to_bond): Releasing active interface [ 256.302331][T13134] team0: Port device team_slave_0 removed [ 256.335400][T13134] team0: Port device team_slave_1 removed [ 256.352272][T13134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.362495][T13134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.373975][T13134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.381823][T13134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.392148][T13134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.708443][T13158] __nla_validate_parse: 38 callbacks suppressed [ 256.708464][T13158] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1934'. [ 256.875836][T13167] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1937'. [ 256.893418][T13168] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1937'. [ 256.907381][T13161] validate_nla: 6 callbacks suppressed [ 256.907401][T13161] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 256.937393][T13161] netlink: 396 bytes leftover after parsing attributes in process `syz.0.1935'. [ 257.148211][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.172189][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.202938][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.249358][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.290859][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.316626][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 257.377182][T13185] bridge0: port 3(syz_tun) entered disabled state [ 257.520974][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.537861][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.637401][T13185] macvtap0: left allmulticast mode [ 257.716899][T13185] gtp0: left promiscuous mode [ 257.721813][T13185] gtp0: left allmulticast mode [ 257.764089][T13185] bond2: left promiscuous mode [ 257.769229][T13185] veth0_to_bond: left promiscuous mode [ 257.775228][T13185] bond2: left allmulticast mode [ 257.780434][T13185] veth0_to_bond: left allmulticast mode [ 257.794936][T13185] vlan2: left allmulticast mode [ 257.799885][T13185] : left allmulticast mode [ 257.808148][T13185] bond_slave_0: left allmulticast mode [ 257.814189][T13185] bond_slave_1: left allmulticast mode [ 257.823665][T13185] bond0: left promiscuous mode [ 257.828643][T13185] bridge3: left promiscuous mode [ 257.837945][T13185] team1: left promiscuous mode [ 257.842873][T13185] team1: left allmulticast mode [ 257.848603][T13185] vlan3: left allmulticast mode [ 257.853594][T13185] bond0: left allmulticast mode [ 257.858541][T13185] bridge3: left allmulticast mode [ 257.869465][T13185] geneve4: left promiscuous mode [ 257.875246][T13185] geneve4: left allmulticast mode [ 257.897379][T13196] netlink: 'syz.3.1943': attribute type 3 has an invalid length. [ 257.919048][ T7390] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.942926][ T7390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.954027][ T7390] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 257.963597][ T7390] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.029408][ T7390] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.053453][ T7390] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.088743][ T7390] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 258.125716][ T7390] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.150094][T13227] netlink: 'syz.4.1953': attribute type 15 has an invalid length. [ 258.260018][ T7390] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.282000][ T7390] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.301815][ T7390] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 258.325261][ T7390] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.377535][ T7390] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.409804][ T7390] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.423958][T13241] atomic_op ffff888020bc9998 conn xmit_atomic 0000000000000000 [ 258.444379][ T7390] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 258.483929][ T7390] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.778806][T13255] sctp: [Deprecated]: syz.4.1960 (pid 13255) Use of int in max_burst socket option deprecated. [ 258.778806][T13255] Use struct sctp_assoc_value instead [ 258.992910][T13261] netlink: 'syz.2.1962': attribute type 4 has an invalid length. [ 259.518545][T13295] netlink: 'syz.0.1971': attribute type 64 has an invalid length. [ 259.897901][T13319] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 259.906514][T13319] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 260.083327][T13323] FAULT_INJECTION: forcing a failure. [ 260.083327][T13323] name failslab, interval 1, probability 0, space 0, times 0 [ 260.111416][T13323] CPU: 0 UID: 0 PID: 13323 Comm: syz.1.1980 Not tainted syzkaller #0 PREEMPT(full) [ 260.111449][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.111464][T13323] Call Trace: [ 260.111473][T13323] [ 260.111483][T13323] dump_stack_lvl+0xe8/0x150 [ 260.111520][T13323] should_fail_ex+0x412/0x560 [ 260.111563][T13323] should_failslab+0xa8/0x100 [ 260.111596][T13323] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 260.111624][T13323] ? __alloc_skb+0x1d0/0x7d0 [ 260.111650][T13323] ? __local_bh_enable_ip+0xd0/0x130 [ 260.111685][T13323] __alloc_skb+0x1d0/0x7d0 [ 260.111718][T13323] tc_ctl_action+0x823/0xc70 [ 260.111751][T13323] ? __pfx_tc_ctl_action+0x10/0x10 [ 260.111779][T13323] ? trace_contention_end+0x3d/0x150 [ 260.111864][T13323] ? __pfx_tc_ctl_action+0x10/0x10 [ 260.111884][T13323] rtnetlink_rcv_msg+0x77e/0xbe0 [ 260.111914][T13323] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 260.111937][T13323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.111967][T13323] ? __lock_acquire+0x6b5/0x2cf0 [ 260.112008][T13323] netlink_rcv_skb+0x232/0x4b0 [ 260.112036][T13323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.112064][T13323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.112110][T13323] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.112145][T13323] netlink_unicast+0x80f/0x9b0 [ 260.112177][T13323] ? __pfx_netlink_unicast+0x10/0x10 [ 260.112202][T13323] ? netlink_sendmsg+0x650/0xb40 [ 260.112226][T13323] ? skb_put+0x11b/0x210 [ 260.112258][T13323] netlink_sendmsg+0x813/0xb40 [ 260.112295][T13323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.112324][T13323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 260.112360][T13323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.112389][T13323] ____sys_sendmsg+0x972/0x9f0 [ 260.112434][T13323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.112474][T13323] ? import_iovec+0x73/0xa0 [ 260.112505][T13323] ___sys_sendmsg+0x2a5/0x360 [ 260.112540][T13323] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.112610][T13323] ? __fget_files+0x2a/0x420 [ 260.112629][T13323] ? __fget_files+0x3a0/0x420 [ 260.112661][T13323] __x64_sys_sendmsg+0x1bd/0x2a0 [ 260.112695][T13323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.112738][T13323] ? __pfx_ksys_write+0x10/0x10 [ 260.112777][T13323] do_syscall_64+0x14d/0xf80 [ 260.112807][T13323] ? trace_irq_disable+0x3b/0x150 [ 260.112827][T13323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.112850][T13323] ? clear_bhb_loop+0x40/0x90 [ 260.112878][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.112900][T13323] RIP: 0033:0x7f829459c819 [ 260.112922][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.112942][T13323] RSP: 002b:00007f82953d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.112965][T13323] RAX: ffffffffffffffda RBX: 00007f8294815fa0 RCX: 00007f829459c819 [ 260.113008][T13323] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 260.113022][T13323] RBP: 00007f82953d7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.113035][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.113047][T13323] R13: 00007f8294816038 R14: 00007f8294815fa0 R15: 00007ffe95bb96d8 [ 260.113087][T13323] [ 260.426423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 260.434663][ C0] lec:lec_tx_timeout: lec0 [ 260.440458][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 260.711750][T13348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.884469][T13355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 260.968861][T13355] bridge0: entered allmulticast mode [ 260.995903][T13355] vcan0: entered allmulticast mode [ 261.106342][T13367] vlan2: entered allmulticast mode [ 261.111769][T13367] bond0: entered allmulticast mode [ 261.117241][T13367] bond_slave_0: entered allmulticast mode [ 261.124600][T13367] bond_slave_1: entered allmulticast mode [ 261.213484][T13376] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 261.259990][T13372] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.302574][T13372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 261.409468][T13379] netlink: 'syz.0.1996': attribute type 13 has an invalid length. [ 261.419505][T13379] netlink: 'syz.0.1996': attribute type 17 has an invalid length. [ 261.640219][T13379] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 261.737270][T13382] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 261.774357][T13394] __nla_validate_parse: 109 callbacks suppressed [ 261.774381][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 261.996289][T13414] netlink: 'syz.4.2006': attribute type 11 has an invalid length. [ 263.289919][T13421] FAULT_INJECTION: forcing a failure. [ 263.289919][T13421] name failslab, interval 1, probability 0, space 0, times 0 [ 263.325846][T13421] CPU: 0 UID: 0 PID: 13421 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) [ 263.325876][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.325891][T13421] Call Trace: [ 263.325899][T13421] [ 263.325908][T13421] dump_stack_lvl+0xe8/0x150 [ 263.325945][T13421] should_fail_ex+0x412/0x560 [ 263.325986][T13421] should_failslab+0xa8/0x100 [ 263.326014][T13421] ? skb_clone+0x212/0x3a0 [ 263.326044][T13421] kmem_cache_alloc_noprof+0x87/0x650 [ 263.326079][T13421] skb_clone+0x212/0x3a0 [ 263.326113][T13421] __netlink_deliver_tap+0x404/0x850 [ 263.326152][T13421] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.326178][T13421] netlink_deliver_tap+0x19c/0x1b0 [ 263.326205][T13421] netlink_sendskb+0x68/0x140 [ 263.326230][T13421] netlink_unicast+0x3a3/0x9b0 [ 263.326260][T13421] ? __pfx_netlink_unicast+0x10/0x10 [ 263.326293][T13421] netlink_rcv_skb+0x2b6/0x4b0 [ 263.326320][T13421] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.326348][T13421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.326386][T13421] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.326429][T13421] netlink_unicast+0x80f/0x9b0 [ 263.326462][T13421] ? __pfx_netlink_unicast+0x10/0x10 [ 263.326486][T13421] ? netlink_sendmsg+0x650/0xb40 [ 263.326510][T13421] ? skb_put+0x11b/0x210 [ 263.326541][T13421] netlink_sendmsg+0x813/0xb40 [ 263.326577][T13421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.326607][T13421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 263.326643][T13421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.326673][T13421] ____sys_sendmsg+0x972/0x9f0 [ 263.326713][T13421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.326755][T13421] ? import_iovec+0x73/0xa0 [ 263.326786][T13421] ___sys_sendmsg+0x2a5/0x360 [ 263.326823][T13421] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.326896][T13421] ? __fget_files+0x2a/0x420 [ 263.326916][T13421] ? __fget_files+0x3a0/0x420 [ 263.326949][T13421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.326981][T13421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.327024][T13421] ? __pfx_ksys_write+0x10/0x10 [ 263.327063][T13421] do_syscall_64+0x14d/0xf80 [ 263.327093][T13421] ? trace_irq_disable+0x3b/0x150 [ 263.327112][T13421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.327135][T13421] ? clear_bhb_loop+0x40/0x90 [ 263.327162][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.327184][T13421] RIP: 0033:0x7ff50fd9c819 [ 263.327205][T13421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.327224][T13421] RSP: 002b:00007ff510bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.327248][T13421] RAX: ffffffffffffffda RBX: 00007ff510015fa0 RCX: 00007ff50fd9c819 [ 263.327264][T13421] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.327278][T13421] RBP: 00007ff510bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.327292][T13421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.327305][T13421] R13: 00007ff510016038 R14: 00007ff510015fa0 R15: 00007ffc9d4b32c8 [ 263.327341][T13421] [ 263.688576][T13471] netlink: 'syz.2.2016': attribute type 21 has an invalid length. [ 263.705823][T13449] syzkaller0: entered promiscuous mode [ 263.711733][T13449] syzkaller0: entered allmulticast mode [ 263.721235][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2015'. [ 263.763426][T13471] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.999038][T13488] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 264.011094][T13479] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 264.060751][T13479] bond7 (unregistering): Released all slaves [ 264.190652][T13488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.255992][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 266.113164][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 266.121385][ C0] lec:lec_tx_timeout: lec0 [ 266.126121][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 266.952454][T13484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.965592][T13520] netlink: 'syz.0.2027': attribute type 1 has an invalid length. [ 266.989677][T13520] netlink: 'syz.0.2027': attribute type 3 has an invalid length. [ 267.010846][T13520] netlink: 'syz.0.2027': attribute type 7 has an invalid length. [ 267.033528][T13520] netlink: 'syz.0.2027': attribute type 8 has an invalid length. [ 267.051065][T13520] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2027'. [ 267.079343][T13520] NCSI netlink: No device for ifindex 131092 [ 267.202339][T13547] s5ÿÿø: renamed from vlan1 [ 267.245834][T13551] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2034'. [ 267.264703][T13550] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2037'. [ 267.279958][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 267.291057][T13542] netlink: 'syz.2.2034': attribute type 8 has an invalid length. [ 267.299635][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 267.332355][T13542] bond0: entered promiscuous mode [ 267.353488][T13542] bond_slave_0: entered promiscuous mode [ 267.359439][T13542] bond_slave_1: entered promiscuous mode [ 267.401701][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 267.415295][T13542] bridge_slave_1: entered promiscuous mode [ 267.428280][T13561] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 267.430957][T13542] hsr1: entered promiscuous mode [ 267.445863][T13560] netem: incorrect ge model size [ 267.451586][T13560] netem: change failed [ 267.546329][T13561] bond5: entered promiscuous mode [ 267.555104][T13561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.671015][T13571] x_tables: duplicate underflow at hook 1 [ 267.680391][T13561] bond5: (slave bridge6): making interface the new active one [ 267.733401][T13561] bridge6: entered promiscuous mode [ 267.757326][T13561] bridge6: left promiscuous mode [ 267.815937][T13577] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2043'. [ 268.162872][T13591] bond6: option fail_over_mac: invalid value (16) [ 268.185463][T13591] bond6 (unregistering): Released all slaves [ 268.427016][T13616] bond7: option fail_over_mac: invalid value (16) [ 268.458298][T13616] bond7 (unregistering): Released all slaves [ 268.485621][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 268.649901][T13629] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2055'. [ 268.881958][T13643] openvswitch: netlink: IP tunnel dst address not specified [ 269.198376][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 269.499751][T13667] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 269.531814][T13661] can: request_module (can-proto-3) failed. [ 270.203599][T13711] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.228958][T13711] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 271.143179][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 271.151350][ C0] lec:lec_tx_timeout: lec0 [ 271.156078][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 271.857316][T13649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.881629][T13725] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 272.064920][T13741] netlink: 'syz.1.2084': attribute type 10 has an invalid length. [ 272.088315][T13741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.121085][T13741] : (slave netdevsim0): Enslaving as an active interface with an up link [ 272.145799][T13745] __nla_validate_parse: 3 callbacks suppressed [ 272.145824][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 272.161566][T13745] netlink: 'syz.2.2085': attribute type 15 has an invalid length. [ 272.171765][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 272.190473][ T6211] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0 [ 272.190851][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 272.210585][T13745] netlink: 'syz.2.2085': attribute type 15 has an invalid length. [ 272.218995][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 272.235937][ T6211] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0 [ 272.261733][ T6211] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0 [ 272.407843][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2090'. [ 272.515106][T13767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.516593][T13768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.558246][T13759] syzkaller0: entered promiscuous mode [ 272.573124][T13759] syzkaller0: entered allmulticast mode [ 272.711175][T13774] block nbd0: reconnected socket [ 272.742100][ T51] block nbd0: Receive control failed (result -32) [ 272.921540][T13786] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 273.047752][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2100'. [ 273.141064][T13796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2102'. [ 273.151636][T13792] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2103'. [ 273.162057][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2103'. [ 273.172912][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2103'. [ 273.199729][T13792] xt_ecn: cannot match TCP bits for non-tcp packets [ 273.358544][T13806] xt_l2tp: wrong L2TP version: 0 [ 273.629747][T13826] geneve3: entered promiscuous mode [ 273.635960][T13826] geneve3: entered allmulticast mode [ 273.654060][T13824] netlink: 'syz.2.2111': attribute type 12 has an invalid length. [ 273.772204][T13840] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 273.815441][T13840] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 274.335523][T13866] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 274.674532][T13884] openvswitch: netlink: Missing key (keys=40, expected=100) [ 274.679644][T13879] syzkaller1: entered promiscuous mode [ 274.723500][T13879] syzkaller1: entered allmulticast mode [ 274.946918][T13901] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 274.987095][T13901] bond5: entered promiscuous mode [ 274.992805][T13901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.038278][T13901] bond5: (slave bridge3): making interface the new active one [ 275.046858][T13901] bridge3: entered promiscuous mode [ 275.054906][T13901] bridge3: left promiscuous mode [ 275.129866][T13906] syzkaller0: entered promiscuous mode [ 275.136829][T13906] syzkaller0: entered allmulticast mode [ 275.539933][T13927] bond6 (unregistering): Released all slaves [ 276.163426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 276.171633][ C0] lec:lec_tx_timeout: lec0 [ 276.176795][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 276.267242][T13980] veth0_virt_wifi: entered promiscuous mode [ 276.301779][T13979] TC_ACT_REPEAT abuse ? [ 276.872334][T14012] lo: entered promiscuous mode [ 276.878743][T14012] netlink: 'syz.3.2162': attribute type 2 has an invalid length. [ 276.888231][T14012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.906393][T14012] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 276.916270][T14012] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 277.089531][T14025] 8021q: adding VLAN 0 to HW filter on device bond8 [ 277.234856][T14045] __nla_validate_parse: 22 callbacks suppressed [ 277.234881][T14045] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2169'. [ 277.280923][T14045] netlink: 'syz.4.2169': attribute type 11 has an invalid length. [ 277.290709][T14045] netlink: 'syz.4.2169': attribute type 11 has an invalid length. [ 277.303559][T14045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2169'. [ 277.333411][T14049] x_tables: duplicate underflow at hook 4 [ 277.611396][T14063] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2173'. [ 277.754379][T14058] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.040905][T14087] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 278.268927][T14107] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.458030][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 278.468365][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 278.530221][T14112] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.938194][T14077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.183067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 281.191203][ C0] lec:lec_tx_timeout: lec0 [ 281.196318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 281.430460][T14145] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2196'. [ 281.769327][T14163] netlink: 'syz.0.2202': attribute type 21 has an invalid length. [ 281.804470][T14163] netlink: 'syz.0.2202': attribute type 22 has an invalid length. [ 281.834013][T14163] netlink: 'syz.0.2202': attribute type 23 has an invalid length. [ 281.856411][T14163] netlink: 'syz.0.2202': attribute type 25 has an invalid length. [ 281.900226][T14163] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2202'. [ 282.161670][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 282.173127][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2213'. [ 282.192529][T14192] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 282.224458][T14192] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2210'. [ 282.313650][T14200] netlink: 'syz.2.2210': attribute type 4 has an invalid length. [ 282.371267][T14202] netlink: 'syz.2.2210': attribute type 4 has an invalid length. [ 282.547313][T14208] syzkaller0: entered promiscuous mode [ 282.562859][T14208] syzkaller0: entered allmulticast mode [ 282.595922][T14210] xt_hashlimit: max too large, truncated to 1048576 [ 282.870173][T14227] syzkaller1: entered promiscuous mode [ 282.889879][T14231] sctp: [Deprecated]: syz.3.2224 (pid 14231) Use of int in max_burst socket option. [ 282.889879][T14231] Use struct sctp_assoc_value instead [ 282.906955][T14227] syzkaller1: entered allmulticast mode [ 282.974161][T14234] netlink: 'syz.2.2225': attribute type 2 has an invalid length. [ 283.111924][T14241] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 283.119986][T14241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2227'. [ 283.240825][T14241] [ 283.243280][T14241] ====================================================== [ 283.250429][T14241] WARNING: possible circular locking dependency detected [ 283.257635][T14241] syzkaller #0 Not tainted [ 283.262086][T14241] ------------------------------------------------------ [ 283.269270][T14241] syz.2.2227/14241 is trying to acquire lock: [ 283.275381][T14241] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 283.285988][T14241] [ 283.285988][T14241] but task is already holding lock: [ 283.293412][T14241] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 283.303830][T14241] [ 283.303830][T14241] which lock already depends on the new lock. [ 283.303830][T14241] [ 283.314285][T14241] [ 283.314285][T14241] the existing dependency chain (in reverse order) is: [ 283.323344][T14241] [ 283.323344][T14241] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 283.331399][T14241] down_write+0x96/0x200 [ 283.336302][T14241] kernfs_add_one+0x41/0x5c0 [ 283.341468][T14241] kernfs_create_dir_ns+0xde/0x130 [ 283.347243][T14241] internal_create_group+0x425/0x1180 [ 283.353202][T14241] cpuhp_invoke_callback+0x445/0x860 [ 283.359071][T14241] cpuhp_issue_call+0x430/0x7a0 [ 283.364510][T14241] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 283.371167][T14241] __cpuhp_setup_state+0x3f/0x60 [ 283.376697][T14241] do_one_initcall+0x250/0x8d0 [ 283.382115][T14241] do_initcall_level+0x104/0x190 [ 283.387667][T14241] do_initcalls+0x59/0xa0 [ 283.392666][T14241] kernel_init_freeable+0x2a6/0x3e0 [ 283.398416][T14241] kernel_init+0x1d/0x1d0 [ 283.403300][T14241] ret_from_fork+0x51e/0xb90 [ 283.408459][T14241] ret_from_fork_asm+0x1a/0x30 [ 283.413780][T14241] [ 283.413780][T14241] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 283.421647][T14241] [ 283.421647][T14241] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 283.429403][T14241] cpus_read_lock+0x42/0x160 [ 283.434748][T14241] static_key_slow_inc+0x12/0x30 [ 283.440336][T14241] nbd_genl_reconfigure+0x132f/0x1ea0 [ 283.446260][T14241] genl_family_rcv_msg_doit+0x22a/0x330 [ 283.452365][T14241] genl_rcv_msg+0x61c/0x7a0 [ 283.457426][T14241] netlink_rcv_skb+0x232/0x4b0 [ 283.462728][T14241] genl_rcv+0x28/0x40 [ 283.467263][T14241] netlink_unicast+0x80f/0x9b0 [ 283.472572][T14241] netlink_sendmsg+0x813/0xb40 [ 283.477985][T14241] ____sys_sendmsg+0x972/0x9f0 [ 283.483307][T14241] ___sys_sendmsg+0x2a5/0x360 [ 283.488553][T14241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 283.494060][T14241] do_syscall_64+0x14d/0xf80 [ 283.499200][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.505639][T14241] [ 283.505639][T14241] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 283.513443][T14241] __mutex_lock+0x19f/0x1300 [ 283.518766][T14241] nbd_queue_rq+0x37b/0x1100 [ 283.523917][T14241] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 283.530031][T14241] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 283.537035][T14241] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 283.543584][T14241] blk_mq_run_hw_queue+0x348/0x4f0 [ 283.549244][T14241] blk_mq_dispatch_list+0xd16/0xe10 [ 283.554990][T14241] blk_mq_flush_plug_list+0x48d/0x570 [ 283.560922][T14241] __blk_flush_plug+0x3ed/0x4d0 [ 283.566318][T14241] __submit_bio+0x28d/0x580 [ 283.571371][T14241] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 283.577550][T14241] block_read_full_folio+0x599/0x830 [ 283.583593][T14241] filemap_read_folio+0x137/0x3b0 [ 283.589169][T14241] do_read_cache_folio+0x358/0x590 [ 283.594859][T14241] read_part_sector+0xb6/0x2b0 [ 283.600184][T14241] adfspart_check_ICS+0xa5/0xa40 [ 283.605704][T14241] bdev_disk_changed+0x7ba/0x1550 [ 283.611286][T14241] blkdev_get_whole+0x380/0x510 [ 283.616691][T14241] bdev_open+0x31e/0xd30 [ 283.621488][T14241] blkdev_open+0x470/0x610 [ 283.626457][T14241] do_dentry_open+0x785/0x14e0 [ 283.631775][T14241] vfs_open+0x3b/0x340 [ 283.636390][T14241] path_openat+0x2e08/0x3860 [ 283.641528][T14241] do_file_open+0x23e/0x4a0 [ 283.646576][T14241] do_sys_openat2+0x113/0x200 [ 283.651812][T14241] __x64_sys_openat+0x138/0x170 [ 283.657225][T14241] do_syscall_64+0x14d/0xf80 [ 283.662587][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.669054][T14241] [ 283.669054][T14241] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 283.676295][T14241] __mutex_lock+0x19f/0x1300 [ 283.681526][T14241] nbd_queue_rq+0xc6/0x1100 [ 283.686591][T14241] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 283.692685][T14241] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 283.699754][T14241] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 283.706307][T14241] blk_mq_run_hw_queue+0x348/0x4f0 [ 283.712061][T14241] blk_mq_dispatch_list+0xd16/0xe10 [ 283.717841][T14241] blk_mq_flush_plug_list+0x48d/0x570 [ 283.723771][T14241] __blk_flush_plug+0x3ed/0x4d0 [ 283.729174][T14241] __submit_bio+0x28d/0x580 [ 283.734227][T14241] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 283.740409][T14241] block_read_full_folio+0x599/0x830 [ 283.746257][T14241] filemap_read_folio+0x137/0x3b0 [ 283.751872][T14241] do_read_cache_folio+0x358/0x590 [ 283.757554][T14241] read_part_sector+0xb6/0x2b0 [ 283.762973][T14241] adfspart_check_ICS+0xa5/0xa40 [ 283.768475][T14241] bdev_disk_changed+0x7ba/0x1550 [ 283.774052][T14241] blkdev_get_whole+0x380/0x510 [ 283.779495][T14241] bdev_open+0x31e/0xd30 [ 283.784289][T14241] blkdev_open+0x470/0x610 [ 283.789266][T14241] do_dentry_open+0x785/0x14e0 [ 283.794668][T14241] vfs_open+0x3b/0x340 [ 283.799291][T14241] path_openat+0x2e08/0x3860 [ 283.804466][T14241] do_file_open+0x23e/0x4a0 [ 283.809971][T14241] do_sys_openat2+0x113/0x200 [ 283.815204][T14241] __x64_sys_openat+0x138/0x170 [ 283.820700][T14241] do_syscall_64+0x14d/0xf80 [ 283.825887][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.832334][T14241] [ 283.832334][T14241] -> #4 (set->srcu){.+.+}-{0:0}: [ 283.839576][T14241] __synchronize_srcu+0xca/0x300 [ 283.845065][T14241] elevator_switch+0x1e8/0x7a0 [ 283.850465][T14241] elevator_change+0x2cc/0x450 [ 283.855814][T14241] elevator_set_default+0x36c/0x430 [ 283.861609][T14241] blk_register_queue+0x366/0x430 [ 283.867208][T14241] __add_disk+0x677/0xd50 [ 283.872109][T14241] add_disk_fwnode+0xfb/0x480 [ 283.877341][T14241] nbd_dev_add+0x72c/0xb50 [ 283.882306][T14241] nbd_init+0x168/0x1f0 [ 283.887055][T14241] do_one_initcall+0x250/0x8d0 [ 283.892386][T14241] do_initcall_level+0x104/0x190 [ 283.897876][T14241] do_initcalls+0x59/0xa0 [ 283.902765][T14241] kernel_init_freeable+0x2a6/0x3e0 [ 283.908508][T14241] kernel_init+0x1d/0x1d0 [ 283.913389][T14241] ret_from_fork+0x51e/0xb90 [ 283.918529][T14241] ret_from_fork_asm+0x1a/0x30 [ 283.923876][T14241] [ 283.923876][T14241] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 283.931823][T14241] __mutex_lock+0x19f/0x1300 [ 283.936973][T14241] elevator_change+0x1b3/0x450 [ 283.942291][T14241] elevator_set_none+0xb5/0x140 [ 283.947694][T14241] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 283.954102][T14241] nbd_start_device+0x17f/0xb10 [ 283.959517][T14241] nbd_genl_connect+0x165b/0x1cf0 [ 283.965103][T14241] genl_family_rcv_msg_doit+0x22a/0x330 [ 283.971204][T14241] genl_rcv_msg+0x61c/0x7a0 [ 283.976435][T14241] netlink_rcv_skb+0x232/0x4b0 [ 283.981940][T14241] genl_rcv+0x28/0x40 [ 283.986560][T14241] netlink_unicast+0x80f/0x9b0 [ 283.991872][T14241] netlink_sendmsg+0x813/0xb40 [ 283.997181][T14241] ____sys_sendmsg+0x972/0x9f0 [ 284.002766][T14241] ___sys_sendmsg+0x2a5/0x360 [ 284.008021][T14241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.013516][T14241] do_syscall_64+0x14d/0xf80 [ 284.018685][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.025127][T14241] [ 284.025127][T14241] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 284.033801][T14241] blk_alloc_queue+0x546/0x680 [ 284.039116][T14241] __blk_mq_alloc_disk+0x197/0x390 [ 284.044787][T14241] nbd_dev_add+0x499/0xb50 [ 284.049758][T14241] nbd_init+0x168/0x1f0 [ 284.054469][T14241] do_one_initcall+0x250/0x8d0 [ 284.059810][T14241] do_initcall_level+0x104/0x190 [ 284.065407][T14241] do_initcalls+0x59/0xa0 [ 284.070284][T14241] kernel_init_freeable+0x2a6/0x3e0 [ 284.076029][T14241] kernel_init+0x1d/0x1d0 [ 284.080904][T14241] ret_from_fork+0x51e/0xb90 [ 284.086044][T14241] ret_from_fork_asm+0x1a/0x30 [ 284.091399][T14241] [ 284.091399][T14241] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 284.098813][T14241] fs_reclaim_acquire+0x71/0x100 [ 284.104321][T14241] kmem_cache_alloc_noprof+0x40/0x650 [ 284.110325][T14241] __kernfs_iattrs+0xdf/0x340 [ 284.115665][T14241] kernfs_iop_setattr+0xea/0x3f0 [ 284.121270][T14241] notify_change+0xc1a/0xf40 [ 284.126614][T14241] do_truncate+0x1c2/0x250 [ 284.131773][T14241] path_openat+0x2f89/0x3860 [ 284.136933][T14241] do_file_open+0x23e/0x4a0 [ 284.142004][T14241] do_sys_openat2+0x113/0x200 [ 284.147242][T14241] __x64_sys_openat+0x138/0x170 [ 284.152737][T14241] do_syscall_64+0x14d/0xf80 [ 284.157881][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.164519][T14241] [ 284.164519][T14241] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 284.173153][T14241] __lock_acquire+0x15a5/0x2cf0 [ 284.178560][T14241] lock_acquire+0xf0/0x2e0 [ 284.183542][T14241] down_write+0x96/0x200 [ 284.188439][T14241] kernfs_unlink_sibling+0x71/0x180 [ 284.194280][T14241] __kernfs_remove+0x3e7/0x660 [ 284.199594][T14241] kernfs_remove_by_name_ns+0xaf/0x130 [ 284.205640][T14241] sysfs_remove_group+0xfc/0x2e0 [ 284.211148][T14241] sysfs_remove_groups+0x54/0xb0 [ 284.216663][T14241] net_rx_queue_update_kobjects+0x68d/0x740 [ 284.223130][T14241] netdev_unregister_kobject+0x113/0x450 [ 284.229331][T14241] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 284.236309][T14241] unregister_netdevice_queue+0x31f/0x360 [ 284.242701][T14241] lowpan_dellink+0xa4/0x140 [ 284.247926][T14241] lowpan_device_event+0xdc/0x130 [ 284.253506][T14241] notifier_call_chain+0x1be/0x400 [ 284.259275][T14241] unregister_netdevice_many_notify+0x186a/0x2370 [ 284.266258][T14241] unregister_netdevice_queue+0x31f/0x360 [ 284.272543][T14241] ieee802154_remove_interfaces+0x17a/0x1d0 [ 284.279093][T14241] ieee802154_unregister_hw+0x62/0xe0 [ 284.285188][T14241] hwsim_del+0x49c/0x500 [ 284.289976][T14241] hwsim_del_radio_nl+0x110/0x150 [ 284.295558][T14241] genl_family_rcv_msg_doit+0x22a/0x330 [ 284.301711][T14241] genl_rcv_msg+0x61c/0x7a0 [ 284.306769][T14241] netlink_rcv_skb+0x232/0x4b0 [ 284.312083][T14241] genl_rcv+0x28/0x40 [ 284.316621][T14241] netlink_unicast+0x80f/0x9b0 [ 284.321969][T14241] netlink_sendmsg+0x813/0xb40 [ 284.327481][T14241] ____sys_sendmsg+0x972/0x9f0 [ 284.332985][T14241] ___sys_sendmsg+0x2a5/0x360 [ 284.338242][T14241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.343743][T14241] do_syscall_64+0x14d/0xf80 [ 284.348900][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.355372][T14241] [ 284.355372][T14241] other info that might help us debug this: [ 284.355372][T14241] [ 284.365616][T14241] Chain exists of: [ 284.365616][T14241] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 284.365616][T14241] [ 284.380080][T14241] Possible unsafe locking scenario: [ 284.380080][T14241] [ 284.387706][T14241] CPU0 CPU1 [ 284.393183][T14241] ---- ---- [ 284.399089][T14241] lock(&root->kernfs_rwsem); [ 284.403966][T14241] lock(cpuhp_state_mutex); [ 284.411103][T14241] lock(&root->kernfs_rwsem); [ 284.418452][T14241] lock(&root->kernfs_iattr_rwsem); [ 284.423791][T14241] [ 284.423791][T14241] *** DEADLOCK *** [ 284.423791][T14241] [ 284.431950][T14241] 6 locks held by syz.2.2227/14241: [ 284.437174][T14241] #0: ffffffff8fc3ee70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 284.445408][T14241] #1: ffffffff8fc3ec88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 284.454696][T14241] #2: ffffffff8f40f548 (hwsim_phys_lock){+.+.}-{4:4}, at: hwsim_del_radio_nl+0x87/0x150 [ 284.464583][T14241] #3: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_unregister_hw+0x5a/0xe0 [ 284.474467][T14241] #4: ffff888028f0e7c8 (&local->iflist_mtx#2){+.+.}-{4:4}, at: ieee802154_remove_interfaces+0x33/0x1d0 [ 284.485750][T14241] #5: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 284.496623][T14241] [ 284.496623][T14241] stack backtrace: [ 284.502565][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.2.2227 Not tainted syzkaller #0 PREEMPT(full) [ 284.502587][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.502599][T14241] Call Trace: [ 284.502607][T14241] [ 284.502616][T14241] dump_stack_lvl+0xe8/0x150 [ 284.502645][T14241] print_circular_bug+0x2e1/0x300 [ 284.502678][T14241] check_noncircular+0x12e/0x150 [ 284.502715][T14241] __lock_acquire+0x15a5/0x2cf0 [ 284.502743][T14241] ? __lock_acquire+0x6b5/0x2cf0 [ 284.502773][T14241] lock_acquire+0xf0/0x2e0 [ 284.502795][T14241] ? kernfs_unlink_sibling+0x71/0x180 [ 284.502820][T14241] down_write+0x96/0x200 [ 284.502837][T14241] ? kernfs_unlink_sibling+0x71/0x180 [ 284.502856][T14241] ? __pfx_down_write+0x10/0x10 [ 284.502871][T14241] ? kernfs_root+0x1c/0x230 [ 284.502898][T14241] ? kernfs_root+0x1c/0x230 [ 284.502923][T14241] ? kernfs_root+0x1c/0x230 [ 284.502950][T14241] ? kernfs_root+0x1ea/0x230 [ 284.502977][T14241] kernfs_unlink_sibling+0x71/0x180 [ 284.502999][T14241] __kernfs_remove+0x3e7/0x660 [ 284.503020][T14241] kernfs_remove_by_name_ns+0xaf/0x130 [ 284.503043][T14241] sysfs_remove_group+0xfc/0x2e0 [ 284.503079][T14241] sysfs_remove_groups+0x54/0xb0 [ 284.503111][T14241] net_rx_queue_update_kobjects+0x68d/0x740 [ 284.503146][T14241] netdev_unregister_kobject+0x113/0x450 [ 284.503177][T14241] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 284.503217][T14241] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 284.503248][T14241] ? __pfx___mutex_lock+0x10/0x10 [ 284.503275][T14241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.503309][T14241] unregister_netdevice_queue+0x31f/0x360 [ 284.503338][T14241] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 284.503370][T14241] ? __asan_memset+0x22/0x50 [ 284.503389][T14241] ? lowpan_event+0x122/0x6b0 [ 284.503415][T14241] lowpan_dellink+0xa4/0x140 [ 284.503436][T14241] lowpan_device_event+0xdc/0x130 [ 284.503457][T14241] notifier_call_chain+0x1be/0x400 [ 284.503491][T14241] unregister_netdevice_many_notify+0x186a/0x2370 [ 284.503528][T14241] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 284.503558][T14241] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.503585][T14241] ? __mutex_lock+0xd09/0x1300 [ 284.503618][T14241] unregister_netdevice_queue+0x31f/0x360 [ 284.503647][T14241] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 284.503681][T14241] ieee802154_remove_interfaces+0x17a/0x1d0 [ 284.503719][T14241] ieee802154_unregister_hw+0x62/0xe0 [ 284.503744][T14241] hwsim_del+0x49c/0x500 [ 284.503762][T14241] ? hwsim_del+0x132/0x500 [ 284.503780][T14241] hwsim_del_radio_nl+0x110/0x150 [ 284.503809][T14241] genl_family_rcv_msg_doit+0x22a/0x330 [ 284.503840][T14241] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.503873][T14241] ? bpf_lsm_capable+0x9/0x20 [ 284.503899][T14241] ? security_capable+0x7e/0x2c0 [ 284.503930][T14241] genl_rcv_msg+0x61c/0x7a0 [ 284.503958][T14241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.503983][T14241] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 284.504012][T14241] ? __lock_acquire+0x6b5/0x2cf0 [ 284.504040][T14241] netlink_rcv_skb+0x232/0x4b0 [ 284.504061][T14241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.504087][T14241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.504114][T14241] ? down_read+0x272/0x2e0 [ 284.504129][T14241] ? genl_rcv+0xd/0x40 [ 284.504154][T14241] genl_rcv+0x28/0x40 [ 284.504177][T14241] netlink_unicast+0x80f/0x9b0 [ 284.504200][T14241] ? __pfx_netlink_unicast+0x10/0x10 [ 284.504218][T14241] ? netlink_sendmsg+0x650/0xb40 [ 284.504238][T14241] ? skb_put+0x11b/0x210 [ 284.504262][T14241] netlink_sendmsg+0x813/0xb40 [ 284.504287][T14241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.504309][T14241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.504339][T14241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.504361][T14241] ____sys_sendmsg+0x972/0x9f0 [ 284.504385][T14241] ? futex_unqueue+0x211/0x240 [ 284.504410][T14241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.504439][T14241] ? import_iovec+0x73/0xa0 [ 284.504462][T14241] ___sys_sendmsg+0x2a5/0x360 [ 284.504490][T14241] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.504518][T14241] ? futex_wait+0x29a/0x380 [ 284.504557][T14241] ? __fget_files+0x2a/0x420 [ 284.504573][T14241] ? __fget_files+0x3a0/0x420 [ 284.504594][T14241] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.504620][T14241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.504650][T14241] ? rcu_is_watching+0x15/0xb0 [ 284.504682][T14241] do_syscall_64+0x14d/0xf80 [ 284.504714][T14241] ? trace_irq_disable+0x3b/0x150 [ 284.504731][T14241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.504749][T14241] ? clear_bhb_loop+0x40/0x90 [ 284.504770][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.504789][T14241] RIP: 0033:0x7fb4b9f9c819 [ 284.504806][T14241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.504823][T14241] RSP: 002b:00007fb4bae8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.504842][T14241] RAX: ffffffffffffffda RBX: 00007fb4ba215fa0 RCX: 00007fb4b9f9c819 [ 284.504856][T14241] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 284.504868][T14241] RBP: 00007fb4ba032c91 R08: 0000000000000000 R09: 0000000000000000 [ 284.504880][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.504891][T14241] R13: 00007fb4ba216038 R14: 00007fb4ba215fa0 R15: 00007ffc2f03b9e8 [ 284.504912][T14241] [ 285.113294][T14243] tipc: Started in network mode [ 285.118354][T14243] tipc: Node identity ac14140f, cluster identity 4711 [ 285.134654][T14243] tipc: New replicast peer: 255.255.255.255 [ 285.149087][T14243] tipc: Enabled bearer , priority 10 [ 286.203191][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 286.211572][ C0] lec:lec_tx_timeout: lec0 [ 286.216152][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 286.263555][ T5892] tipc: Node number set to 2886997007 [ 287.139993][ T51] Bluetooth: hci3: link tx timeout [ 287.145496][ T51] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 288.039551][T14255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.233430][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 291.223186][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 291.231258][ C0] lec:lec_tx_timeout: lec0 [ 291.236090][ C0] lec:lec_start_xmit: lec0:No lecd attached