last executing test programs: 3m38.117673505s ago: executing program 3 (id=728): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r2}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00010000000000000000f707000000", @ANYRES32=r5, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 3m37.285246372s ago: executing program 3 (id=731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet_tcp_TLS_TX(r4, 0x29, 0x1d, 0x0, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) (async) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x74}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5c}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xec}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c4}, 0x20040000) (async) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) socket$kcm(0x29, 0x2, 0x0) 3m36.535301347s ago: executing program 3 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x604, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x58}}, 0x34000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x523c4aa6, 0x48}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "be5855b99c7783f884043f36b0216e54"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c3f13e59f44ff723d4220ab785a7451"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x100}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x424, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10040000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "272fa531cd6edbff260624b0a48169cf2cfbd779ee587807f9f1cf20c0e3cfcfe5"}}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf0, 0x3, "3c68c1d522bcba5796518d097b414e617543c0f9e4e2989fcb128aade2dc991783892d81e02f1149a56079ff625e942db14835f01409003f25538d5e596c25b3da73446cf1764622fbc7b74bc64c986fdfe5de86de1690fc09fe952a97b7b585cc7d3ec91304b6316ca34cb33f2850b8db7f5c10dbc7dd234712067aa56ae14c04b4b6ce3a38ce725fc6d744deb5ed2f2a176542e5da3d58e67921e91e40e4caf87e5a51a4aa62ee9d6a810fc567e136a69635bbcaacdd07fc2395253ad77d4ae05e2ef2ae6b7400c1b456d546c161115996b102decd456b92de22b3602d89bfe27e48c482e707efa07af539"}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9855}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x5f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x843}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xae, 0x3, "cbe78d9ad47a6805f623965b71a1ee30673a801129e0d03f329b01d27f1618f2f5937c943aac63b0358303d9eadd3dd41c7f9328cd065fd21995f526bebac453328541252cbd33b9de6e07ce61726e89b030656aa114e76f0beb7e9ae02895fded1b7133dfb3cf8ffbb2fd694bce3d1d63499f1ccf64938c6c6a734a367776814705ac9b1576ae5b648bc9627bb36e486057164e07024447206a66f9576bab3b3bec8bd3c3bb32b56214"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "62cb5e114aa6194dd4f1235390475cbf70c720ffa4b9e36f158be8ccba0c43aa6d92d3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x424}}, 0x240008c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000400000fcffffff2e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200001000fe00ae"], 0x48}}, 0x0) 3m35.91580048s ago: executing program 3 (id=738): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000dc0), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x5, @vifc_lcl_addr=@multicast2, @private=0xa010102}, 0x10) 3m34.267660622s ago: executing program 3 (id=744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee0, 0x0, 0x0, 0x10, 0x8000}, 0x70) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x100}}}}}}, 0x0) 3m33.762606291s ago: executing program 3 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x204, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000030f491a493cc3dee77001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) unshare(0x62020000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b00010065727370616e0000100002800400d9800500130001000000"], 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x58, 0x29, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0xf}, {0xb, 0xb}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x0, 0xcc}}, @TCA_RATE={0x6, 0x5, {0x40, 0x57}}, @tclass_kind_options=@c_red={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40480d0}, 0x805) ioctl$TUNSETLINK(r1, 0x400454cd, 0x101) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r7, r8, 0x5}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m18.576112609s ago: executing program 32 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x204, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000030f491a493cc3dee77001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) unshare(0x62020000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b00010065727370616e0000100002800400d9800500130001000000"], 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x58, 0x29, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0xf}, {0xb, 0xb}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x10}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x0, 0xcc}}, @TCA_RATE={0x6, 0x5, {0x40, 0x57}}, @tclass_kind_options=@c_red={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40480d0}, 0x805) ioctl$TUNSETLINK(r1, 0x400454cd, 0x101) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r7, r8, 0x5}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m25.650991473s ago: executing program 4 (id=918): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb1c9cfcb74e875ca, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xee, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6700000100b83affff020000000000000000000000000001ff0200000000000000000000000000017312040933000200ff0200000000000000000000000000010000000000000000000effff0000000000000000000000000000000000000001fc000000000000000000000000000000ff020000000000000000000000000001fe8800000000000000000000000000012001000000000000000000000000000120010000000000000000000000000002fe8000000000000000000000000000aa86009078ff02080001000000030000000502c8484ea2d21ee4c408501af78df6"], 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) (async) getsockopt$bt_hci(r2, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000040)={0x283, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000a06010100000000000000000300000908000940800000010900020073797a3100000000050001000700000038000880"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x4000000, {0x3}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x50}}, 0x408c0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) unshare(0x26020480) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) recvmmsg(r10, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x70, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x70, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2m22.722849473s ago: executing program 4 (id=930): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x9, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m22.365093152s ago: executing program 4 (id=932): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x9}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r11, 0xd9e49261224259e9, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x1c, r14, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="58000000acd763e8926218e57d61da98d3b95ef2aef44cc664631efa2a2c78111ff96e1e2b8bf407e8f376e8e07e3ca60702d53ad637da88f4b3a930d2d8f370f78351da622a8443ac8dab1831b49d9b863ed4fd3803b6a124f71e4b62d1379f945abb8ca9a2dfcc9519490ba9f4c68bf299e797fb11fa4494f0c58fa385cd7ac340117c38ef8ee05e57bd0b51409974b0491eed8715421dc0260e46a600b114fc81ed811b665a2c7966be0efee14273e1573204266a46044421221f8f57db3abdc1d1a10cd9413022e9d9a4e2c6cdf9bfb51c35cdeaff959974cec242fac7738ee2999c2ee7a750395e5b958c681f679ddc", @ANYRES16=r0, @ANYBLOB="08002dbd7000ffdbdf25190000000c000600020000000200000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB="0c00060003000000000000000c0006000300000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r17, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x4) 2m21.313137447s ago: executing program 4 (id=934): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffff1920ffff00ff9078ac1e0001ffff050000000000000000000000000000000000909fdc2ad75d929d99c2621cb2fca63a2eced1aed75cd37d5b337a52df3dca01297f7cf3962225a4f35909c45770247ca253e0118074aa8856a0f6daf75b0b9950d055bf0cb6c896e6a65229733351678ba89c4c5c15f5029dad90cb9e6bf5de79d603c0dab7d131b7d090c1004b9e3b342fe6b74c902eab3acfbb3e8efcb0f25d2655367f410a1414792556f1adc6bba906"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket(0x21, 0x800, 0x2) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) (async) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000140)=""/155, &(0x7f0000000080)=0x9b) (async) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) bind$tipc(r0, 0x0, 0x0) 2m21.009860626s ago: executing program 4 (id=936): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010325bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdb07000800001895400300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x24008044) close(0x3) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000711907864010101ac14142100004e20009c907801000000000000007b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af584cbf2649a50f2dbc43efa8698d45942824251d7d17b51915156df59e655c84cdd4fbc40a27424d0000000000000000000000000000bcfdfe4f3a4745a8f762b964000000000000000000000000000000009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000300)={@mcast1, 0x4, r10}) 2m19.62762423s ago: executing program 4 (id=940): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8, 0x3, 0x0) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 2m4.367612744s ago: executing program 33 (id=940): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8, 0x3, 0x0) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 4.586583195s ago: executing program 5 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x54}, 0x7ffffffe, 0x0, 0x0, 0x4004c40}, 0x40000) 4.478720992s ago: executing program 5 (id=1730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016e384f1c5e37a1c5b0000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb5dde7ce04b96e485e55321fa56cb7c27a5025ccca9e00360db70100000040fad95667e006dcdf63951f070000009ad809d5e1eace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xe7}], 0x1}, 0x60044804) 4.255637408s ago: executing program 0 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703665727370616ef7ffff2700028014000700ff02000000000000000000000000000106000200000000000600030040000000"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x4e24}, {@in6=@private1, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x144}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000006801088054000780080006006e000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500946fa5"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close(r6) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='veth1_to_batadv\x00', 0x5, 0xef69, 0x2}) ioctl$FIONCLEX(r6, 0x5450) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e580000002c"], 0x66) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r11) sendmsg$IEEE802154_LLSEC_LIST_DEV(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r12, 0x70b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x40000a0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000040)=0x7ff, 0x4) 4.138231693s ago: executing program 5 (id=1735): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff80, &(0x7f0000000000)={&(0x7f0000000240)="083b000000000022add7aead", 0xc}, 0x1, 0x0, 0x0, 0x4080}, 0x30000800) 3.889895161s ago: executing program 5 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x5c, 0x21, 0x8, 0x70bd2c, 0x25dfdbfb, {0xa, 0x80, 0x10, 0x5, 0xd, 0x0, 0x0, 0x2, 0x16}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x80}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x5c}}, 0x0) 3.773596079s ago: executing program 5 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000400000003200004801c000180090001006c617374000000000c000280080001407fffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendto$rxrpc(r5, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0xfffffc64) 3.751326416s ago: executing program 6 (id=1741): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="c20f0d278934358545ad914303ca8e5623f4e94f7757310aeb9be547737e99f4d69e56a1b04760ce19b9c49cf49899da97f06ed548da74c59c3b2b4accc8ab42b6692fd338754fa39cf2b1b3023087f14795eb9428d6b88dbcad93e31f408f29794fdd045cb7d20b50c90faf7c88f2d810cdf1f8a844ce26c88d35ffe1db7a32ed6414244405f5554171e7d8641ade39454166936a84fa7f36e277ce1c53f4078dfe0bde514650611ce4c369ecc034f452eff839a6d4ed0e75c47fbb9a865eaf3d464c10fb5ec0873cda96608db92b5cb5691303f236e4200628056c30a501276567fb2ea522967d39c4b463622152dd8b6ca76c9192998eaeafd36fb07caeee73a4a311f9b24a1004ec9d3625b0b79060199c9b", 0x114, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, r1}, 0x94) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r7}, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r7, 0x1}, &(0x7f0000000280)=0x8) 3.693902789s ago: executing program 2 (id=1742): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYRES16=r1], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x11a, 0x11, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x11eac000) (async) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x11eac000) 3.548516383s ago: executing program 6 (id=1743): r0 = socket$kcm(0x10, 0x7, 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) close(0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001", @ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r1, @ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x8, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0xc000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r7 = socket(0x14, 0x2, 0x4) shutdown(r7, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="86380000003c0007010000000000000000017c00000800fc80040008800c00018006000600800a00000800028004007280080005006f98840f4100b8148b8e8c28", @ANYRES32=r8, @ANYBLOB="210b7d28b0eee2e679ac8d1a949e5f971c39f2c0aa1886a92a25e63e6cb0e0c0b6e9873b4662"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, 0x0, &(0x7f0000000100)) 3.451279626s ago: executing program 2 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) 3.221872705s ago: executing program 2 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x110c2300fe) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) getpeername$tipc(r8, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000020000000000000700000000000000000000000203000000060000000000000c0000000000006100000061005480ab9ba8a4863a67c370a36619dd01c3e041a7aad54e6a3d531a05de91039b56aad2bae108b2e16543bbeb42212f373d92f354d02dd1c83bd96ac2420736cafd2fbf6127d46fc7b3e0bd58524b5bef86488236fa42c8b149e0ab760cfd3ff96c3fc12de021a82a119184ba78"], 0x0, 0x44}, 0x20) 2.67906037s ago: executing program 6 (id=1749): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {{'cbcmac-aes-neon\x00'}, '\x00', '\x00', 0x0, 0x400}, ["", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040080}, 0x480c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) connect$802154_dgram(r5, &(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x5}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000240100000100000000000002000200005a5abd239cc638e6677fa3e8e9d203a88459e164ef088dc375e97c7c945f6814def68a63a1f33075352f3e03ff7d9415d59231165088fd38e85506baa80746fc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) 1.404866891s ago: executing program 5 (id=1750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = accept4(r3, &(0x7f00000004c0)=@can, &(0x7f0000000540)=0x80, 0x800) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f00000005c0)={0x9, 0x3, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pimreg1\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x80, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}}, {{@pci={{0xb}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)={0x174, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x174}}, 0x4040810) setsockopt$inet_int(r7, 0x0, 0xc, 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd7000fddbdf25030000000600deff4d24000005000400030000000500020002000000060001004e21000014000900fe880000c8f0000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000040)={0x1d, r13, 0x8000000000000003}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4c801}, 0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20001c2bbd7000fcdbdf0000000051f6f8f48f379d5600000000", @ANYRES32=0x0, @ANYBLOB="08000b00f8ffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x50, r15, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4804) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3f0000c2", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001400020077673200000000000000000000000000080005000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x54}, 0x1, 0x0, 0x0, 0x4004c40}, 0x40000) 1.333542196s ago: executing program 6 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'macvlan1\x00'}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x110, r6, 0x310, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c2e6263f7d2578bd5e36a00c0c0574bd08f8f9d3047c3d26"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27483395490f51d921ebb97ba7e23a1f72ab6e76c3423f33"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70bdde2db98488168ff5608ffc4954bc51c2b5618c6c3da8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c16299e2ca5b818b078f8ff25a701e51dcf433abc1d123e"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1.33272088s ago: executing program 1 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r2, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) 1.326491945s ago: executing program 2 (id=1753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x54}, 0x1, 0x2000000, 0x0, 0x4004c40}, 0x40000) 1.29380004s ago: executing program 0 (id=1754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010003bb2008fd5f2acb9690200000015", @ANYRES32=0x0, @ANYBLOB="c1900000815c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32=r1, @ANYBLOB], 0x58}}, 0x48010) 1.074080727s ago: executing program 1 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 990.711973ms ago: executing program 1 (id=1756): r0 = socket$packet(0x11, 0x3, 0x300) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x6c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 861.051573ms ago: executing program 0 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609110914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="050b0500001106000000030000003d14bb7c8e97ac0d1f450b120f5a229a3fd7c82c7a01ef1b166893f10fa0a9dcabdac94cfa3c8424c5025124f83c22483d5e48190c1ef11903a8f2a262e6082fa03f7869e8ebc55205d0b04e825aea43093021767a01d845794e5003c2c5e32ff57291d9e0c8575c256b39ae12f2dd7d95f7eaaf5263d52d02dff091cbd8bad9c0311223a3ab51f74a752952228abd575c5213dfd4bf542075200a63a0b4d1a8b48e"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd777000fbdbdf25030000000c08080005000000000000000c00030002000000000000001d30f2d21f4a0c00020008000000000000000c0004001bdb0000000000000c000600f4"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0xc000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x840) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6e281dd3d2450e126b5b0704c74aad64fdcc9f81ad798fe7c356705ee1d9b5825d67c1a904ab3cb9b7e54172b9be41fd32cdf3a18709deb0a3eca570f5246a8b1b7957d103ebcc055b74a6a2afbd553b1a5dc03c8c89fe55ad3327abfd71437b2717a7d4f6c96cbefb86b2d630c9", @ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf250300000014000600697036746e6c3000000000000000000014000200fe8000000000000000000000000000aa2700070073797374656d5f753a6f626a6563745f723a6d7472725f6465766963655f743a733000002400070073797374656d5f753a6f626a6563745f723a6170745f657865635f743a73300008000500ac1e0101"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xe38}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0) 794.055116ms ago: executing program 2 (id=1758): r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r3, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r1, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 781.424029ms ago: executing program 6 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000000000000080001"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) close(0x3) 705.445613ms ago: executing program 1 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r0], 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000013000100000000000200000007000000", @ANYRES32=r5, @ANYBLOB="06a00000000000000c001a800800058004000380"], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014001000030001302564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 460.748423ms ago: executing program 2 (id=1761): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000800006e3ee540ff9b04766f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 458.442101ms ago: executing program 0 (id=1762): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28}, 0x48) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/149, 0x95}, {&(0x7f00000001c0)="fa317b27f1d3543cd89fca", 0xb}], 0x2, 0x0, 0x0, 0x84}, 0x8084) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x25, 0x0, &(0x7f0000000080)) (async) close(r1) 359.007052ms ago: executing program 6 (id=1763): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x644, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) unshare(0x2000500) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 230.282097ms ago: executing program 1 (id=1764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000ac0)="8b348d6b72b741e742e12e3cad79dae0ca65a2a92e4fa50dc8764791d9fa60cbdac98017f52b2c1e9f5244cc6f7211b31af8d771f533f57b9c7c765be40554aa6083c7308a34b6142efaadf0eb33717c1957a95b69e04264697946e59c22626c24dd3179ad71f7e949e990f2a23b98f67937df91c359ef621a8f2fee0150ae7359ca6d77027b15dce8b7cd94109f26f13888b7", 0x93}, {&(0x7f0000000b80)="d3f23ed5d7f7b0b7849c0b504016865b3bfa939901f129a292e1cd64b3b734e5051a15318659c4ee37cf2737c276d6b36538", 0x32}], 0x2}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001180)="aad1d440d57251486998523b0d4f08cbc2885b9324272e0dab54c8229d4ab953a721aa819dbd42242724d71d29666b79f74c7720fd5b4ae4c273b677f4957cf83ef1da0241011631e64c04d7efb3c2ec52533e6115cc", 0x56}, {&(0x7f0000001200)="d77f7694531cdff6873d9e32453d6eb16d8ef300bdb66840b134642f3eb19a5b1e202c46dafda2e6f942d4d7ee76f9de2b55a37860256bbd5820f783df221b67ee26fe50a85652df148f064736cc57bf4d60495560bbc0d1aae41cab6f5f994b342f06f06883a389a911a087d22ef9", 0x6f}], 0x2}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002080)="9e41", 0x2}], 0x1}}], 0x4, 0x1) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) (async, rerun: 64) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000240)=0xa9, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x406c8d0}, 0x4004011) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000980)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="12220000", @ANYRES16=r7, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x20008815}, 0x8001) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x10001000, 0x3a}, 0x1c) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000000000000000080000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESOCT=r4, @ANYRESDEC=r0], &(0x7f0000000440)='syzkaller\x00', 0x8cb2, 0xaf, &(0x7f00000004c0)=""/175, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x800000a, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x9e, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x5, 0x10, 0x8}], 0x10, 0xc}, 0x94) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000640)=0x80000000, 0x4) (async) setsockopt$sock_int(r10, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r9, 0x4) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'veth0_vlan\x00', 0xc201}) (async, rerun: 64) r11 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b36, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r12, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 153.833867ms ago: executing program 0 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x60}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRES8], 0x328}}, 0x84) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r5, 0x81}, &(0x7f00000001c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x60}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRES8], 0x328}}, 0x84) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') (async) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, &(0x7f0000000100)=0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r5, 0x81}, &(0x7f00000001c0)=0x8) (async) 43.732266ms ago: executing program 0 (id=1766): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'macsec0\x00', 0xfff9}) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind(r3, &(0x7f0000000080)=@nfc={0x27, r4, 0x0, 0x3}, 0x80) tee(r1, r2, 0x2, 0xa) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000100)={{r2}, "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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'vcan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001280)={0x66c97511, 0x400, 0x5, 0x7d, 0x8}, 0x14) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000012c0)={{0x7, 0x8}, 0x8}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001300)={'nr0\x00', 0x20}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f00000017c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x3a0, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x9, 0x45, "445abde425"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "a4b87c644e7afe6988d6aef3ed7e3cc1ba1a87f0e1a197cb8410d721935b426d92abe6ab54faeda8e1ce7d0bf4fc4248bb18f3afa414bf768ec24a3f88a9235961af38f3164322b3c328af7656a26a3bfe3116c9e3289a2afdaf0b529c8bb692337ab48ba8aa095bc89a05122008e97a119f96aeeab6cd7bb528897921bfd39bca575ddbb819f402f02c87aed7d3d60c44d21b027e4044e29a50d67b259c8e526087b00462e543b1b06df6d5ce37b73ff8f473387c8134a1"}, @NL80211_ATTR_TESTDATA={0x5e, 0x45, "b262dfd16f5227d6000ae71078f06b0abd9627ddf6ab322385084afa402af69cf473387fd69f78ccdedfa79897cf583baf9c423288f8241ac50219e1ea68ba8e62501e30f49fe00b7070c197d2e01142099bf8adf8d0bd53b239"}, @NL80211_ATTR_TESTDATA={0x5a, 0x45, "e2cb5f5303c5e64bf8c1ba965c7c43aec09bee7713b33e90baee2c13df289aab31c615b7bfcbc9821a915631c4c910728c53c5215090df367a4e60ad61d1bbbfdf78407c0d619d3b46702131b4b604852f57eb16461e"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "ae61"}, @NL80211_ATTR_TESTDATA={0x65, 0x45, "faa668455fc6528d503268a7079f7d42a74c5f4a466e55232e3e6220cd2fe553388ea02cb9e87de5cfc964fd59b31aa0a67e6cc41a4fe3b368cba0c503896d4f2bfff6c0acbf5303da018ee131679edf0f12b8e0805e21661a9819f3202459711e"}, @NL80211_ATTR_TESTDATA={0xc3, 0x45, "64697a0b19f4428a8f07d5bbc8bee5d4489acc011d5eac79037c42aa8fe0308b9e8d335f93a987bdb2fd8cc7fe89b565c016d31134c0be3d9cfb0723e9f1c3b7bc6255cc4dcdfc25197fbb7ceacbf0e6b53aba993a166c3b019b2d40d75e553c58d27226b871c2ea5516c410243fffb6ea4b85f3ea2a310c42869e0ade9f02250ea04e50f8819a92c76def033506ca80f852481147f2c203d2c29b19fa5f91c3350ea35e197dfe09fb119ebb27bbee889dccd9dc8b00694eb635be8f81fe0a"}, @NL80211_ATTR_TESTDATA={0xd1, 0x45, "5ccc60fc1d1bb73b57b69889376b551a8f8d2ece2b4f29761fe2eae8c589d48940152904fe15b5c33c62e7dc7cfbc0627dfcbffbbbc82bace2708ba914f16cefff65f674749dff7af1deac96e08f179a6c54c93a9469bbfe796f52cb1d6803b85c56a0ec3bf8c4df31d9e58dca9e8d12f589582c052562c70870c5deb182ddcfcae89b34482d2ba8f13bbef8e758f2c0c1057bfcb8f8875ac973897d8592f649d6589ec4f9c04705da783726c08d00880990f3dff5f6cf8195009789ca5cc8fd8623de041344f1bd1750fd2bdc"}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r9, &(0x7f00000019c0)={&(0x7f0000001800)={0x2a, 0x7435cd4df57120ab, 0x4001}, 0xc, &(0x7f0000001880)=[{&(0x7f0000001840)="f40ad05eb7f8d75645c0459c486e5ebb56feab78e7", 0x15}], 0x1, &(0x7f00000018c0)=[{0xe8, 0x118, 0xa, "e5994a9cbd177b497723ab665a15898eef380ee5a2c801fa3e66471a12721a3893bae777123a1ee5b92f0314c9b8626ec37c5f448c704e86f470b9002dd54e5d22bb97be2e0741caa5cceb31b8719f85ddbf8f5980be7a9369683fbd05e22629d6df77ca75fef3235ab9f37d3c7004b1a02872f272e6034c9482d174c046409ebb234a87b054f64f5b1a06a45028366517c45a2020aa0fc742f06bbcf45836fac1ad5ddc9089bbc4bfd90c362ee381cf0d5f80a941722eeaf96d51093e06ecdd779b970ed00d3f1ee3d644c5d98a2824e476158462c053ca"}], 0xe8, 0x4}, 0x38) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000001a00)) close(r3) sendmsg(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)="660f0633656a2e0ef43ca9b63b16844488c2668d1504122bbc11ea71a33250b17324d79c107cb13e2d3fc8446e067fe2d64abb50206ffbf8fbe8b45f1cfd7c5420bfe2764db83846e7456b476f", 0x4d}], 0x1}, 0x8000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}}, 0x4040000) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001d40)=0x14) 0s ago: executing program 1 (id=1767): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000880000015000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): d length. [ 142.243105][ T6842] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 142.624412][ T6855] tap0: tun_chr_ioctl cmd 2148553947 [ 142.744112][ T6862] team0: Device ip6gre1 is of different type [ 142.942571][ T6865] syzkaller1: entered promiscuous mode [ 142.962898][ T6865] syzkaller1: entered allmulticast mode [ 143.032974][ T6867] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 143.195230][ T6872] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 143.213778][ T6872] netlink: 232 bytes leftover after parsing attributes in process `syz.4.236'. [ 143.252681][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 143.313276][ T6883] netlink: 'syz.1.241': attribute type 18 has an invalid length. [ 143.395624][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.395731][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 143.442157][ T6883] netlink: 'syz.1.241': attribute type 18 has an invalid length. [ 143.449712][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.502576][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.542190][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.919377][ T9] IPVS: starting estimator thread 0... [ 144.026712][ T6911] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.472467][ T6937] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 144.493871][ T6937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.254'. [ 144.679716][ T6945] sit0: entered promiscuous mode [ 144.698757][ T6945] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 144.734895][ T6945] netlink: 1 bytes leftover after parsing attributes in process `syz.0.256'. [ 145.231629][ T6962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.502970][ T6976] netlink: 'syz.0.264': attribute type 14 has an invalid length. [ 145.527508][ T6976] netlink: 'syz.0.264': attribute type 13 has an invalid length. [ 145.829463][ T6978] pim6reg1: entered promiscuous mode [ 145.879388][ T6978] pim6reg1: entered allmulticast mode [ 146.254100][ T6997] __nla_validate_parse: 3 callbacks suppressed [ 146.254121][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 146.821592][ T1154] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.867493][ T1154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.935022][ T1154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.947285][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.278'. [ 146.988998][ T1154] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.143189][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.182579][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.230305][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.253757][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.712215][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 147.763877][ T7060] netlink: 'syz.3.288': attribute type 5 has an invalid length. [ 147.835803][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 147.989749][ T7068] netlink: 256 bytes leftover after parsing attributes in process `syz.0.289'. [ 148.059520][ T2998] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.082054][ T2998] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.145431][ T1102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.192595][ T1102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.392582][ T7088] 8021q: VLANs not supported on ip_vti0 [ 149.000999][ T7117] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 149.013358][ T7117] netlink: 244 bytes leftover after parsing attributes in process `syz.4.302'. [ 149.107094][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 150.003794][ T7151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.512157][ T7166] netlink: 'syz.2.313': attribute type 23 has an invalid length. [ 150.628946][ T2998] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.759545][ T7230] __nla_validate_parse: 1 callbacks suppressed [ 151.759568][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 151.806979][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 151.840964][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 151.942498][ T7235] gretap0: entered promiscuous mode [ 152.004085][ T7235] gretap0: left promiscuous mode [ 152.228820][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.339'. [ 152.270856][ T7251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.292444][ T7252] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 152.912593][ T7272] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 152.973168][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.347'. [ 153.419967][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.464015][ T7299] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 153.495934][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.559128][ T7306] netlink: 'syz.3.353': attribute type 83 has an invalid length. [ 153.584602][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 153.650976][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.670780][ T7315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.684282][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.697895][ T7299] veth0: entered promiscuous mode [ 153.747774][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 154.003188][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 154.004107][ T7326] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.030737][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.039931][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.427741][ T7344] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 154.570468][ T7352] tipc: Started in network mode [ 154.598138][ T7352] tipc: Node identity 080211, cluster identity 4711 [ 154.642113][ T7352] tipc: Enabled bearer , priority 0 [ 154.685403][ T7353] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 154.743952][ T7353] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 154.775615][ T7353] tipc: Resetting bearer [ 155.564341][ T1154] tipc: Resetting bearer [ 155.744380][ T6203] tipc: Node number set to 134353152 [ 155.788958][ T7379] tipc: Started in network mode [ 155.804859][ T7379] tipc: Node identity ac14140f, cluster identity 4711 [ 155.832580][ T7379] tipc: New replicast peer: 255.255.255.255 [ 155.862295][ T1102] tipc: Subscription rejected, illegal request [ 155.872514][ T7379] tipc: Enabled bearer , priority 10 [ 156.816368][ T7414] __nla_validate_parse: 7 callbacks suppressed [ 156.816390][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 156.937648][ T7422] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 156.994726][ T1212] tipc: Node number set to 2886997007 [ 157.029978][ T7425] kthread_run failed with err -4 [ 157.593393][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 157.812775][ T7461] syzkaller1: entered promiscuous mode [ 157.852195][ T7461] syzkaller1: entered allmulticast mode [ 157.891315][ T6203] IPVS: starting estimator thread 0... [ 158.084885][ T7471] IPVS: using max 22 ests per chain, 52800 per kthread [ 158.472420][ T7481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.736316][ T7503] netlink: 'syz.4.409': attribute type 33 has an invalid length. [ 159.811964][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 159.823994][ T7503] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 159.861660][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 159.902162][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 160.155225][ T7508] veth5: entered allmulticast mode [ 161.447930][ T7538] netlink: 44 bytes leftover after parsing attributes in process `syz.1.419'. [ 161.796568][ T7548] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 161.901870][ T7547] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.934362][ T7544] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 161.979649][ T7544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.421'. [ 162.794680][ T7570] syzkaller0: entered promiscuous mode [ 162.861866][ T7570] syzkaller0: entered allmulticast mode [ 165.390749][ T7602] tipc: Started in network mode [ 165.411787][ T7602] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 165.443398][ T7602] tipc: Enabled bearer , priority 12 [ 165.494141][ T7603] syzkaller0: entered promiscuous mode [ 165.499678][ T7603] syzkaller0: entered allmulticast mode [ 165.700526][ T7623] 8021q: VLANs not supported on caif0 [ 166.555269][ T978] tipc: Node number set to 10070698 [ 166.734188][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 166.804119][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 166.973481][ T7655] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.042301][ T7661] sctp: [Deprecated]: syz.3.449 (pid 7661) Use of int in maxseg socket option. [ 167.042301][ T7661] Use struct sctp_assoc_value instead [ 167.065496][ T7661] sctp: [Deprecated]: syz.3.449 (pid 7661) Use of int in maxseg socket option. [ 167.065496][ T7661] Use struct sctp_assoc_value instead [ 167.184498][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 167.266783][ T7666] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 167.752808][ T7678] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 167.809752][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.452'. [ 167.871123][ T7667] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.956329][ T7667] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 168.215730][ T7673] gretap1: entered promiscuous mode [ 168.311923][ T7673] bond1: (slave gretap1): making interface the new active one [ 168.376518][ T7673] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 168.483820][ T7678] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 168.696650][ T7687] macvlan2: entered promiscuous mode [ 168.773731][ T7687] macvlan2: entered allmulticast mode [ 168.824212][ T7687] bond1: entered promiscuous mode [ 168.882633][ T7687] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.973956][ T7687] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 169.055188][ T7687] bond1: left promiscuous mode [ 169.488521][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.461'. [ 170.186472][ T7708] veth1_to_bond: left allmulticast mode [ 170.209443][ T7708] veth1_to_bond: left promiscuous mode [ 170.515264][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 171.031422][ T7732] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 171.134181][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 171.261287][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 171.721274][ T7757] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 171.790790][ T7757] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 171.819386][ T7759] dvmrp0: entered allmulticast mode [ 171.875928][ T7757] netlink: 192 bytes leftover after parsing attributes in process `syz.3.469'. [ 172.180924][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 172.259456][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 172.359583][ T7775] pim6reg: entered allmulticast mode [ 172.869863][ T7791] !: renamed from dummy0 (while UP) [ 173.037322][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'. [ 173.825504][ T7814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.485'. [ 173.885656][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 173.947000][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 173.992766][ T7820] tipc: Enabling of bearer rejected, failed to enable media [ 174.358969][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.621316][ T7836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.691084][ T7822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.721400][ T7822] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.776895][ T7822] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 176.178783][ T7851] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 176.719473][ T7864] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 176.781438][ T7864] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 177.831662][ T7870] lec:lec_atm_close: lec0: Shut down! [ 177.960995][ T7880] vlan0: entered promiscuous mode [ 177.980799][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 178.997217][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 181.382948][ T7957] netlink: 9 bytes leftover after parsing attributes in process `syz.1.520'. [ 181.454770][ T7957] gretap0: entered promiscuous mode [ 181.526241][ T7960] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 181.553315][ T7957] netlink: 5 bytes leftover after parsing attributes in process `syz.1.520'. [ 181.603946][ T7960] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 181.625366][ T7957] 0ªî{X¹¦: renamed from gretap0 [ 181.665354][ T7957] 0ªî{X¹¦: left promiscuous mode [ 181.688343][ T7957] 0ªî{X¹¦: entered allmulticast mode [ 181.714531][ T7957] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.778009][ T7963] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 182.337533][ T7971] ip6gre0: Master is either lo or non-ether device [ 183.067063][ T7982] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 183.270351][ T7982] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 183.604073][ T5935] lec:lec_start_xmit: lec0:No lecd attached [ 183.712883][ T7990] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 183.818593][ T7990] netlink: 'syz.2.529': attribute type 3 has an invalid length. [ 183.922715][ T7990] netlink: 'syz.2.529': attribute type 235 has an invalid length. [ 184.055398][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 185.744289][ T8022] tap0: tun_chr_ioctl cmd 1074025672 [ 185.749653][ T8022] tap0: ignored: set checksum disabled [ 187.314203][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.371004][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 188.917573][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 188.925963][ C1] lec:lec_tx_timeout: lec0 [ 188.941182][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.949668][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 189.678740][ T8114] ipvlan2: entered promiscuous mode [ 189.699954][ T8114] bridge0: port 3(ipvlan2) entered blocking state [ 189.724345][ T8114] bridge0: port 3(ipvlan2) entered disabled state [ 189.739735][ T8114] ipvlan2: entered allmulticast mode [ 189.757661][ T8114] bridge0: entered allmulticast mode [ 189.772285][ T8114] ipvlan2: left allmulticast mode [ 189.787664][ T8114] bridge0: left allmulticast mode [ 191.135010][ T8127] netlink: 'syz.0.564': attribute type 11 has an invalid length. [ 191.149872][ T8127] netlink: 228 bytes leftover after parsing attributes in process `syz.0.564'. [ 191.366760][ T8135] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 191.410070][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.566'. [ 192.510190][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.571'. [ 192.520205][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 192.558112][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 192.816323][ T8158] tipc: New replicast peer: 255.255.255.255 [ 192.840357][ T8158] tipc: Enabled bearer , priority 10 [ 192.890488][ T8158] netlink: 232 bytes leftover after parsing attributes in process `syz.4.573'. [ 193.339117][ T8169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.574'. [ 193.777727][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 193.792678][ T8177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.815296][ T8185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.921363][ T8185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.956974][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.965071][ C1] lec:lec_tx_timeout: lec0 [ 193.977346][ T8189] lec:lec_start_xmit: lec0:No lecd attached [ 193.987073][ T8193] netlink: 'syz.4.579': attribute type 58 has an invalid length. [ 194.003956][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 194.053161][ T8190] macvlan2: entered promiscuous mode [ 194.061209][ T8190] macvlan2: entered allmulticast mode [ 194.072128][ T8190] bond2: entered promiscuous mode [ 194.079006][ T8190] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.116631][ T8190] bond2: left promiscuous mode [ 194.361005][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562648][ T8185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.732196][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 196.700775][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 197.866610][ T8253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.594'. [ 197.971863][ T8253] unsupported nlmsg_type 40 [ 198.219770][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 198.324084][ T8263] netlink: 224 bytes leftover after parsing attributes in process `syz.4.594'. [ 198.561153][ T8272] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 198.642152][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 198.997556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.005651][ C1] lec:lec_tx_timeout: lec0 [ 199.022189][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.422780][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 201.313838][ T51] Bluetooth: hci4: command tx timeout [ 202.646748][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 202.934323][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.030777][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 203.095887][ T8353] bridge_slave_0: entered promiscuous mode [ 203.469009][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 204.034173][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 204.042543][ C1] lec:lec_tx_timeout: lec0 [ 204.058450][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.658358][ T8400] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 205.395319][ T8413] netlink: 'syz.1.632': attribute type 23 has an invalid length. [ 205.977200][ T8424] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 206.028839][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'. [ 206.065224][ T8425] netlink: 'syz.3.636': attribute type 4 has an invalid length. [ 206.148141][ T8429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.328747][ T8424] team0: Port device geneve0 added [ 207.020710][ T8442] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.639'. [ 207.731102][ T8452] netlink: 256 bytes leftover after parsing attributes in process `syz.2.640'. [ 209.077769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.085872][ C1] lec:lec_tx_timeout: lec0 [ 209.101954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.206134][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'. [ 209.996622][ T8505] netlink: 104 bytes leftover after parsing attributes in process `syz.2.653'. [ 210.315061][ T8511] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 210.605951][ T8511] team0: Device hsr_slave_0 failed to register rx_handler [ 210.770734][ T8498] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 210.849936][ T8498] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 211.266621][ T8531] netlink: 256 bytes leftover after parsing attributes in process `syz.1.657'. [ 211.875661][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 211.881999][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 211.888682][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 211.895951][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 212.581473][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 212.675484][ T8554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 213.038793][ T8556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 213.342571][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.665'. [ 214.123622][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 214.131676][ C1] lec:lec_tx_timeout: lec0 [ 214.148328][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.224249][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 214.528412][ T8589] netlink: 'syz.3.670': attribute type 17 has an invalid length. [ 214.622386][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 214.722361][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.670'. [ 215.338373][ T8587] team0 (unregistering): Port device team_slave_0 removed [ 215.424286][ T8587] team0 (unregistering): Port device team_slave_1 removed [ 215.518921][ T8587] team0 (unregistering): Port device geneve0 removed [ 215.794219][ T8589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.931578][ T8599] netlink: 6 bytes leftover after parsing attributes in process `syz.0.673'. [ 215.991789][ T8599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.566646][ T8620] netlink: 'syz.3.677': attribute type 10 has an invalid length. [ 216.719796][ T8609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.755486][ T8609] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 216.772458][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.839646][ T8620] bridge_slave_1: left allmulticast mode [ 216.882168][ T8609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.904044][ T8609] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 216.912101][ T8620] bridge_slave_1: left promiscuous mode [ 216.960683][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.980263][ T8609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.999820][ T8609] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 217.062540][ T8609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.092700][ T8609] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 217.124177][ T8620] bridge_slave_1: entered allmulticast mode [ 217.147232][ T8609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.167487][ T8609] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 217.180185][ T8620] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 217.712650][ T8609] tipc: Resetting bearer [ 218.961586][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.684'. [ 219.234192][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 219.255135][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 219.959157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 219.967269][ C1] lec:lec_tx_timeout: lec0 [ 219.982470][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.364807][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 220.487919][ T8660] veth7: entered allmulticast mode [ 220.833161][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 222.247362][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 222.961207][ T8710] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 223.063849][ T8710] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 223.124055][ T8710] netlink: 'syz.3.692': attribute type 4 has an invalid length. [ 223.187132][ T8710] netlink: 136 bytes leftover after parsing attributes in process `syz.3.692'. [ 223.648004][ T8722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.696'. [ 225.003640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 225.011698][ C1] lec:lec_tx_timeout: lec0 [ 225.031129][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.155065][ T8755] netlink: 188 bytes leftover after parsing attributes in process `syz.1.703'. [ 225.309346][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'. [ 226.114446][ T8773] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2202537534/2202537536 [ 226.156189][ T8773] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2202537534/2202537536 [ 226.301191][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 226.359528][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 226.910602][ T8772] bridge_slave_0: left promiscuous mode [ 226.996983][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.037994][ T8772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.152721][ T8772] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 227.210254][ T8772] team1: left promiscuous mode [ 227.328863][ T8775] veth1: entered promiscuous mode [ 227.362100][ T8775] veth1: entered allmulticast mode [ 227.465685][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.503653][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.533075][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.561626][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.580911][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.626647][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.767119][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.845065][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.792163][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 228.855508][ T8819] bridge_slave_0: entered promiscuous mode [ 228.884446][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 229.538694][ T8833] netlink: 'syz.1.718': attribute type 2 has an invalid length. [ 230.044851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 230.052951][ C1] lec:lec_tx_timeout: lec0 [ 230.073386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.103118][ T8845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.400341][ T8855] netlink: 72 bytes leftover after parsing attributes in process `syz.3.723'. [ 231.710294][ T8873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.269040][ T8884] netlink: 104 bytes leftover after parsing attributes in process `syz.3.731'. [ 232.464066][ T8886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.731'. [ 232.557042][ T8885] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 233.044629][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 234.446499][ T8933] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 234.477937][ T8933] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 234.799063][ T8916] dvmrp1: entered allmulticast mode [ 235.093505][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 235.101623][ C1] lec:lec_tx_timeout: lec0 [ 235.116995][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.220356][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 235.308274][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 235.423794][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 235.474465][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 235.483345][ T8946] netlink: 'syz.2.742': attribute type 15 has an invalid length. [ 235.564180][ T8939] netlink: 'syz.2.742': attribute type 15 has an invalid length. [ 235.830427][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 235.918692][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 236.014961][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 236.142085][ T8954] netlink: 'syz.4.747': attribute type 7 has an invalid length. [ 236.373120][ T8968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.666129][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.750'. [ 240.131137][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 240.139193][ C1] lec:lec_tx_timeout: lec0 [ 240.153399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.957123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 245.965228][ C1] lec:lec_tx_timeout: lec0 [ 245.977023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 248.321485][ T9009] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.647323][ T9016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 249.236598][ T9025] openvswitch: netlink: Actions may not be safe on all matching packets [ 249.855172][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 249.966208][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 250.989706][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 250.997808][ C1] lec:lec_tx_timeout: lec0 [ 251.014769][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.119359][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 251.206443][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 251.718368][ T9063] veth0: entered promiscuous mode [ 251.782570][ T9062] veth0: left promiscuous mode [ 253.401473][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.414071][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.427409][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.450080][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.464784][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.553369][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.567888][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.582300][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.652688][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.664109][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.139288][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.777'. [ 255.714517][ T5878] Bluetooth: hci5: command tx timeout [ 255.803953][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.026687][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 256.034830][ C1] lec:lec_tx_timeout: lec0 [ 256.050144][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.480951][ T9152] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 256.637550][ T9098] chnl_net:caif_netlink_parms(): no params data found [ 257.741017][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.779517][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.794900][ T5878] Bluetooth: hci5: command tx timeout [ 257.817070][ T9098] bridge_slave_0: entered allmulticast mode [ 257.847120][ T9098] bridge_slave_0: entered promiscuous mode [ 257.887269][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.926298][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.974802][ T9098] bridge_slave_1: entered allmulticast mode [ 257.994663][ T9098] bridge_slave_1: entered promiscuous mode [ 258.241584][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.290757][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.782661][ T9183] netlink: 'syz.2.786': attribute type 21 has an invalid length. [ 258.815452][ T9183] netlink: 128 bytes leftover after parsing attributes in process `syz.2.786'. [ 258.962220][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.020694][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.122534][ T9098] team0: Port device team_slave_0 added [ 259.156730][ T9183] netlink: 3 bytes leftover after parsing attributes in process `syz.2.786'. [ 259.214342][ T9098] team0: Port device team_slave_1 added [ 259.874524][ T5878] Bluetooth: hci5: command tx timeout [ 260.175840][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.182843][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.460241][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.557578][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.613419][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.821558][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.065641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 261.073735][ C1] lec:lec_tx_timeout: lec0 [ 261.089001][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.672910][ T9098] hsr_slave_0: entered promiscuous mode [ 261.823073][ T9098] hsr_slave_1: entered promiscuous mode [ 261.870909][ T9098] debugfs: 'hsr0' already exists in 'hsr' [ 261.921932][ T9098] Cannot create hsr debugfs directory [ 261.955409][ T5878] Bluetooth: hci5: command tx timeout [ 261.974135][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.799'. [ 261.994690][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.800'. [ 262.385969][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.456756][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.575397][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 264.598120][ T9283] syzkaller1: entered promiscuous mode [ 264.638771][ T9283] syzkaller1: entered allmulticast mode [ 265.497299][ T9098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.983429][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.018581][ T9317] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 266.047299][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.073845][ T9317] netlink: 'syz.4.816': attribute type 2 has an invalid length. [ 266.112204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 266.120334][ C1] lec:lec_tx_timeout: lec0 [ 266.137987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 266.140121][ T9317] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 266.223957][ T9098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.246161][ T9317] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.816'. [ 266.530759][ T9098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.720519][ T9098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.922583][ T9337] netlink: 'syz.4.819': attribute type 14 has an invalid length. [ 267.312701][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 267.372830][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'. [ 267.938137][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.171443][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.492929][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.500167][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.667477][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.674748][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.156024][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.221461][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.734916][ T9392] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 269.818838][ T9395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.982887][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 270.052613][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 270.111434][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 270.666426][ T9409] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 270.711835][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 270.854559][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 271.959315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 271.967409][ C1] lec:lec_tx_timeout: lec0 [ 271.984297][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.275688][ T9412] tipc: Enabling of bearer rejected, failed to enable media [ 272.617618][ T9436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 272.624512][ T9436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.751384][ T9439] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 272.765843][ T9430] lo speed is unknown, defaulting to 1000 [ 272.772546][ T9430] lo speed is unknown, defaulting to 1000 [ 272.964752][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.841'. [ 273.357747][ T9439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.432617][ T9430] lo speed is unknown, defaulting to 1000 [ 273.534953][ T9430] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.619551][ T9446] vlan2: entered allmulticast mode [ 273.675333][ T9446] veth1: entered allmulticast mode [ 273.699230][ T9430] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.751846][ T9446] bond3: (slave vlan2): making interface the new active one [ 273.819458][ T9446] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 274.071725][ T9430] lo speed is unknown, defaulting to 1000 [ 274.107447][ T12] bridge_slave_0: left allmulticast mode [ 274.171226][ T12] bridge_slave_0: left promiscuous mode [ 274.224438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.289620][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 276.046514][ T12] dvmrp1 (unregistering): left allmulticast mode [ 276.996693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.004834][ C1] lec:lec_tx_timeout: lec0 [ 277.016355][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 277.394687][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.409085][ T12] bond_slave_0: left allmulticast mode [ 277.428111][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.445398][ T12] bond_slave_1: left allmulticast mode [ 277.455335][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 277.473203][ T12] bridge_slave_1: left allmulticast mode [ 277.482847][ T12] bond0 (unregistering): Released all slaves [ 277.520297][ T12] bond1 (unregistering): Released all slaves [ 277.882036][ T12] bond2 (unregistering): (slave veth3): Releasing backup interface [ 277.912948][ T12] bond2 (unregistering): Released all slaves [ 278.151297][ T12] bond3 (unregistering): Released all slaves [ 278.379135][ T12] bond4 (unregistering): Released all slaves [ 278.410994][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.423461][ T9430] lo speed is unknown, defaulting to 1000 [ 278.507666][ T9473] bridge_slave_0: default FDB implementation only supports local addresses [ 278.576620][ T9430] lo speed is unknown, defaulting to 1000 [ 278.635924][ T9430] lo speed is unknown, defaulting to 1000 [ 278.681861][ T9430] lo speed is unknown, defaulting to 1000 [ 278.750923][ T9430] lo speed is unknown, defaulting to 1000 [ 278.956793][ T9494] syz_tun: entered promiscuous mode [ 279.041932][ T9496] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 281.000944][ T9496] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 281.045420][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.546492][ T9541] openvswitch: netlink: Flow key attribute not present in set flow. [ 281.958891][ T9546] gre1: entered promiscuous mode [ 282.018825][ T9546] gre1: entered allmulticast mode [ 282.027422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.035501][ C1] lec:lec_tx_timeout: lec0 [ 282.049968][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 282.128476][ T9552] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 282.560631][ T9562] openvswitch: netlink: Multiple metadata blocks provided [ 284.318063][ T9558] netlink: 184 bytes leftover after parsing attributes in process `syz.1.861'. [ 284.882326][ T9098] veth0_vlan: entered promiscuous mode [ 285.008092][ T9098] veth1_vlan: entered promiscuous mode [ 285.332423][ T9098] veth0_macvtap: entered promiscuous mode [ 285.370762][ T9606] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 285.392588][ T9098] veth1_macvtap: entered promiscuous mode [ 285.415885][ T9606] netlink: 236 bytes leftover after parsing attributes in process `syz.0.868'. [ 285.471537][ T9606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.491462][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.654093][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.772744][ T9295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.833902][ T9295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.936116][ T9295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.011980][ T9295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.966805][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.035394][ T9646] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 287.066060][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.073594][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.074142][ C1] lec:lec_tx_timeout: lec0 [ 287.098015][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.029495][ T9692] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 292.122584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 292.130696][ C1] lec:lec_tx_timeout: lec0 [ 292.146152][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.876103][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.907672][ T9692] bridge0: port 3(team0) entered blocking state [ 293.924867][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.964103][ T9692] bridge0: port 3(team0) entered disabled state [ 293.970704][ T9692] team0: entered allmulticast mode [ 294.017446][ T9692] team_slave_0: entered allmulticast mode [ 294.083105][ T9692] team_slave_1: entered allmulticast mode [ 294.133308][ T9692] team0: entered promiscuous mode [ 294.180615][ T9692] team_slave_0: entered promiscuous mode [ 294.228751][ T9692] team_slave_1: entered promiscuous mode [ 294.316413][ T9692] bridge0: port 3(team0) entered blocking state [ 294.322960][ T9692] bridge0: port 3(team0) entered forwarding state [ 295.843751][ T12] hsr_slave_0: left promiscuous mode [ 295.912917][ T12] hsr_slave_1: left promiscuous mode [ 295.975157][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.099938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.187920][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.329252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.815321][ T12] veth1_macvtap: left promiscuous mode [ 296.879071][ T12] veth0_macvtap: left promiscuous mode [ 297.173278][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 297.254948][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 297.351385][ T9773] netlink: 288 bytes leftover after parsing attributes in process `syz.1.904'. [ 297.963484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 297.971594][ C1] lec:lec_tx_timeout: lec0 [ 297.987021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.553262][ T12] team0 (unregistering): Port device macvlan0 removed [ 299.268588][ T12] team0 (unregistering): Port device team_slave_1 removed [ 299.381062][ T12] team0 (unregistering): Port device team_slave_0 removed [ 300.389686][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 300.428713][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 300.449277][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'. [ 301.074996][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 301.162361][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 301.229188][ T9786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.906'. [ 301.782408][ T9810] netlink: 96 bytes leftover after parsing attributes in process `syz.1.912'. [ 301.897900][ T9804] netlink: 'syz.0.911': attribute type 3 has an invalid length. [ 301.959336][ T9810] 8021q: VLANs not supported on ip_vti0 [ 302.999681][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.007786][ C1] lec:lec_tx_timeout: lec0 [ 303.022899][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.053319][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 303.124725][ T9832] netlink: 'syz.2.916': attribute type 5 has an invalid length. [ 303.145800][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 303.217773][ T9832] geneve2: entered promiscuous mode [ 303.238332][ T9832] geneve2: entered allmulticast mode [ 303.273404][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 303.292904][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 303.334435][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 303.343112][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 303.691930][ T9841] netlink: 248 bytes leftover after parsing attributes in process `syz.2.917'. [ 303.739329][ T9841] NCSI netlink: No device for ifindex 0 [ 303.840199][ T9844] tipc: Enabling of bearer rejected, failed to enable media [ 303.867483][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 304.654610][ T9852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.919'. [ 305.598755][ T9867] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 305.796542][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.868144][ T9867] bridge_slave_1: left allmulticast mode [ 305.903776][ T9867] bridge_slave_1: left promiscuous mode [ 305.934908][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.023064][ T9867] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 306.235745][ T9876] netlink: 76 bytes leftover after parsing attributes in process `syz.0.926'. [ 306.584451][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 306.907780][ T9887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.989802][ T9894] dvmrp0: entered allmulticast mode [ 307.035835][ T9894] dvmrp0: left allmulticast mode [ 307.547985][ T9910] sctp: [Deprecated]: syz.1.933 (pid 9910) Use of int in maxseg socket option. [ 307.547985][ T9910] Use struct sctp_assoc_value instead [ 308.034175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.042232][ C1] lec:lec_tx_timeout: lec0 [ 308.053629][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.680050][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 309.539654][ T9933] infiniband syz1: set active [ 309.708074][ T9933] infiniband syz1: added bond0 [ 309.753334][ T9933] syz1: rxe_create_cq: returned err = -12 [ 309.778715][ T9933] infiniband syz1: Couldn't create ib_mad CQ [ 309.799716][ T9933] infiniband syz1: Couldn't open port 1 [ 309.920790][ T9946] xt_socket: unknown flags 0x50 [ 310.052507][ T9933] RDS/IB: syz1: added [ 310.150549][ T9933] smc: adding ib device syz1 with port count 1 [ 310.205856][ T9941] lo speed is unknown, defaulting to 1000 [ 310.241933][ T9933] smc: ib device syz1 port 1 has pnetid [ 313.070137][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.078251][ C1] lec:lec_tx_timeout: lec0 [ 313.094023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.893329][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'. [ 313.911857][T10004] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 313.928740][T10004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.953'. [ 314.181490][T10016] netlink: 168 bytes leftover after parsing attributes in process `syz.0.954'. [ 315.756124][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 316.872749][T10062] netlink: 'syz.0.966': attribute type 4 has an invalid length. [ 317.258638][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.108594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.116708][ C1] lec:lec_tx_timeout: lec0 [ 318.133650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.598240][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.974'. [ 319.942781][T10098] veth0: entered promiscuous mode [ 320.183455][T10098] veth0: left promiscuous mode [ 320.537602][T10123] macvlan3: entered promiscuous mode [ 320.564060][T10123] macvlan3: entered allmulticast mode [ 320.602710][T10123] veth1_to_bond: entered promiscuous mode [ 320.628649][T10123] veth1_to_bond: entered allmulticast mode [ 320.666022][T10123] team0: Port device macvlan3 added [ 321.354980][T10141] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 321.512087][T10150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.982'. [ 321.736219][T10155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.978371][T10166] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 322.032755][T10167] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 322.412621][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 323.564921][T10200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.992'. [ 323.794841][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 323.958756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 323.966865][ C1] lec:lec_tx_timeout: lec0 [ 323.982275][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.317132][T10222] netlink: 240 bytes leftover after parsing attributes in process `syz.2.995'. [ 325.065859][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 325.176229][T10240] 8021q: VLANs not supported on lo [ 325.222222][T10242] 8021q: VLANs not supported on lo [ 325.261952][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 326.585544][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 326.699791][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 326.839897][T10252] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 328.443489][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.461685][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.485178][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.497191][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.505770][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.749246][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 328.998216][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.006317][ C1] lec:lec_tx_timeout: lec0 [ 329.008056][ T2998] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.023148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.376623][T10288] lo speed is unknown, defaulting to 1000 [ 329.860417][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 330.599838][ T5870] Bluetooth: hci4: command tx timeout [ 330.800243][ T2998] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.464868][T10288] chnl_net:caif_netlink_parms(): no params data found [ 332.054856][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.084070][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.091372][T10288] bridge_slave_0: entered allmulticast mode [ 332.125993][T10288] bridge_slave_0: entered promiscuous mode [ 332.155939][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.175264][T10305] nbd: must specify an index to disconnect [ 332.240640][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.300172][T10288] bridge_slave_1: entered allmulticast mode [ 332.370436][T10288] bridge_slave_1: entered promiscuous mode [ 332.679236][ T5870] Bluetooth: hci4: command tx timeout [ 332.742912][T10356] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1019'. [ 332.861179][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 333.477723][T10288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.494420][T10370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 333.637142][T10288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.035077][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.043138][ C1] lec:lec_tx_timeout: lec0 [ 334.058430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.198736][ T2998] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.554066][T10288] team0: Port device team_slave_0 added [ 334.703199][T10375] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 334.755426][ T5870] Bluetooth: hci4: command tx timeout [ 334.781457][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.0.1025 Not tainted syzkaller #0 PREEMPT(full) [ 334.781488][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.781501][T10375] Call Trace: [ 334.781509][T10375] [ 334.781519][T10375] dump_stack_lvl+0x189/0x250 [ 334.781557][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.781584][T10375] ? __pfx__printk+0x10/0x10 [ 334.781621][T10375] ? kernfs_path_from_node+0x2f/0x290 [ 334.781645][T10375] ? kernfs_path_from_node+0x250/0x290 [ 334.781667][T10375] ? kernfs_path_from_node+0x2f/0x290 [ 334.781696][T10375] sysfs_warn_dup+0x8e/0xa0 [ 334.781718][T10375] sysfs_do_create_link_sd+0xc0/0x110 [ 334.781745][T10375] device_add_class_symlinks+0x1cf/0x240 [ 334.781772][T10375] device_add+0x475/0xb50 [ 334.781799][T10375] wiphy_register+0x1ba6/0x28d0 [ 334.781851][T10375] ? __pfx_wiphy_register+0x10/0x10 [ 334.781879][T10375] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 334.781921][T10375] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 334.781961][T10375] ieee80211_register_hw+0x3425/0x4080 [ 334.782005][T10375] ? ieee80211_register_hw+0x1441/0x4080 [ 334.782039][T10375] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 334.782067][T10375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.782105][T10375] ? __hrtimer_setup+0x187/0x210 [ 334.782124][T10375] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 334.782156][T10375] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 334.782223][T10375] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 334.782247][T10375] ? trace_kmalloc+0x1f/0xd0 [ 334.782277][T10375] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 334.782306][T10375] ? kstrndup+0xbf/0x160 [ 334.782341][T10375] hwsim_new_radio_nl+0xea4/0x1b10 [ 334.782371][T10375] ? __pfx___nla_validate_parse+0x10/0x10 [ 334.782421][T10375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.782465][T10375] ? __nla_parse+0x40/0x60 [ 334.782501][T10375] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 334.782536][T10375] genl_family_rcv_msg_doit+0x215/0x300 [ 334.782570][T10375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.782611][T10375] ? bpf_lsm_capable+0x9/0x20 [ 334.782638][T10375] ? security_capable+0x7e/0x2e0 [ 334.782676][T10375] genl_rcv_msg+0x60e/0x790 [ 334.782708][T10375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.782729][T10375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 334.782775][T10375] netlink_rcv_skb+0x205/0x470 [ 334.782802][T10375] ? __lock_acquire+0xab9/0xd20 [ 334.782833][T10375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.782858][T10375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.782925][T10375] ? down_read+0x1ad/0x2e0 [ 334.782960][T10375] genl_rcv+0x28/0x40 [ 334.782981][T10375] netlink_unicast+0x82c/0x9e0 [ 334.783021][T10375] ? __pfx_netlink_unicast+0x10/0x10 [ 334.783048][T10375] ? netlink_sendmsg+0x642/0xb30 [ 334.783075][T10375] ? skb_put+0x11b/0x210 [ 334.783111][T10375] netlink_sendmsg+0x805/0xb30 [ 334.783153][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.783188][T10375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.783223][T10375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.783245][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.783276][T10375] __sock_sendmsg+0x219/0x270 [ 334.783308][T10375] ____sys_sendmsg+0x505/0x830 [ 334.783338][T10375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.783373][T10375] ? import_iovec+0x74/0xa0 [ 334.783403][T10375] ___sys_sendmsg+0x21f/0x2a0 [ 334.783428][T10375] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.783499][T10375] ? __fget_files+0x2a/0x420 [ 334.783527][T10375] ? __fget_files+0x3a0/0x420 [ 334.783568][T10375] __x64_sys_sendmsg+0x19b/0x260 [ 334.783593][T10375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.783630][T10375] ? rcu_is_watching+0x15/0xb0 [ 334.783658][T10375] ? do_syscall_64+0xbe/0x3b0 [ 334.783694][T10375] do_syscall_64+0xfa/0x3b0 [ 334.783721][T10375] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.783748][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.783767][T10375] ? clear_bhb_loop+0x60/0xb0 [ 334.783792][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.783812][T10375] RIP: 0033:0x7f8983b8ebe9 [ 334.783832][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.783849][T10375] RSP: 002b:00007f8984a43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.783872][T10375] RAX: ffffffffffffffda RBX: 00007f8983db5fa0 RCX: 00007f8983b8ebe9 [ 334.783887][T10375] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 334.783908][T10375] RBP: 00007f8983c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.783921][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.783933][T10375] R13: 00007f8983db6038 R14: 00007f8983db5fa0 R15: 00007fff1fc5e6e8 [ 334.783969][T10375] [ 335.685396][T10288] team0: Port device team_slave_1 added [ 336.834598][ T5870] Bluetooth: hci4: command tx timeout [ 337.271493][T10288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.295580][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.403041][T10288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.511408][T10288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.553269][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.610964][T10288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.707722][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 338.141894][T10438] tipc: Enabling of bearer rejected, already enabled [ 338.238320][T10288] hsr_slave_0: entered promiscuous mode [ 338.262457][T10288] hsr_slave_1: entered promiscuous mode [ 338.290260][T10288] debugfs: 'hsr0' already exists in 'hsr' [ 338.322542][T10288] Cannot create hsr debugfs directory [ 338.349069][T10447] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 338.368753][T10447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1040'. [ 338.476650][T10438] tipc: Resetting bearer [ 339.076089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.084214][ C1] lec:lec_tx_timeout: lec0 [ 339.089686][ T8098] lec:lec_start_xmit: lec0:No lecd attached [ 339.297404][T10452] nbd0: detected capacity change from 0 to 127 [ 339.356349][ T5870] block nbd0: Receive control failed (result -104) [ 339.955338][T10471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1045'. [ 340.161599][ T2998] team0: left allmulticast mode [ 340.183870][ T2998] team_slave_0: left allmulticast mode [ 340.201147][ T2998] team_slave_1: left allmulticast mode [ 340.225364][ T2998] team0: left promiscuous mode [ 340.237127][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 340.246475][ T2998] team_slave_0: left promiscuous mode [ 340.252119][ T2998] team_slave_1: left promiscuous mode [ 340.260018][ T2998] bridge0: port 3(team0) entered disabled state [ 340.283111][ T2998] bridge_slave_1: left allmulticast mode [ 340.298984][ T2998] bridge_slave_1: left promiscuous mode [ 340.314469][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.351015][ T2998] bridge_slave_0: left allmulticast mode [ 340.363157][ T2998] bridge_slave_0: left promiscuous mode [ 340.372675][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.378543][T10486] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 344.107026][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.115102][ C1] lec:lec_tx_timeout: lec0 [ 344.126014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.330434][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.358131][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.376810][ T2998] bond0 (unregistering): Released all slaves [ 345.411236][T10288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.438233][T10288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.486149][T10288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 345.515132][T10288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.575661][T10486] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 345.926134][T10501] tipc: Can't bind to reserved service type 1 [ 346.036271][T10502] veth0: entered promiscuous mode [ 346.161524][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 346.662437][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1054'. [ 346.946131][T10510] bond3: (slave vlan2): Releasing active interface [ 347.604702][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.635782][T10528] vlan2: entered promiscuous mode [ 347.641671][T10528] bridge0: entered promiscuous mode [ 347.691372][ T2998] tipc: Disabling bearer [ 347.728021][ T2998] tipc: Disabling bearer [ 347.756372][ T2998] tipc: Left network mode [ 347.836805][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.879296][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.886608][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.038601][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.045987][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.858117][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 348.877942][T10553] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1062'. [ 349.135834][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.143933][ C1] lec:lec_tx_timeout: lec0 [ 349.159396][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.855230][T10572] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 349.959595][T10572] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1068'. [ 350.608777][T10587] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1071'. [ 350.661974][T10589] netlink: 'syz.1.1072': attribute type 10 has an invalid length. [ 350.810514][ T1212] hid-generic 0005:0C45:06F5.0001: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa [ 351.192297][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 352.339693][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.748303][T10627] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 354.148740][T10657] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 354.211826][T10648] bond3: entered promiscuous mode [ 354.229979][T10648] bond3: entered allmulticast mode [ 354.284247][T10648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.330491][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1086'. [ 354.594322][ T2998] hsr_slave_0: left promiscuous mode [ 354.654777][ T2998] hsr_slave_1: left promiscuous mode [ 354.669733][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.706015][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.707277][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 354.723152][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.738439][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.782188][ T2998] veth1_macvtap: left promiscuous mode [ 354.790733][ T2998] veth0_macvtap: left promiscuous mode [ 354.800922][ T2998] veth1_vlan: left promiscuous mode [ 354.806621][ T2998] veth0_vlan: left promiscuous mode [ 354.825721][T10681] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 354.851907][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 354.993563][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 355.001631][ C1] lec:lec_tx_timeout: lec0 [ 355.006891][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.059847][ T2998] pim6reg (unregistering): left allmulticast mode [ 355.475897][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 355.513117][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 355.904877][ T2998] lo (unregistering): left allmulticast mode [ 355.954755][ T24] lo speed is unknown, defaulting to 1000 [ 355.979542][ T24] syz2: Port: 1 Link DOWN [ 356.186359][T10288] veth0_vlan: entered promiscuous mode [ 356.351912][T10288] veth1_vlan: entered promiscuous mode [ 356.552034][T10288] veth0_macvtap: entered promiscuous mode [ 356.568851][T10709] netlink: 'syz.5.1097': attribute type 1 has an invalid length. [ 356.596405][T10708] netlink: 'syz.5.1097': attribute type 1 has an invalid length. [ 356.675909][T10712] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 356.809811][T10709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.866892][T10708] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 356.875436][T10288] veth1_macvtap: entered promiscuous mode [ 356.963359][T10288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.054015][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 357.082425][T10288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.199351][ T1336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.231543][ T1336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.332193][ T1336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.363207][ T1336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.431110][ T2998] IPVS: stop unused estimator thread 0... [ 357.974753][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.982624][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.150961][T10770] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1110'. [ 358.173867][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.176941][T10775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1112'. [ 358.200346][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.357160][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1112'. [ 358.908980][T10798] syzkaller0: entered promiscuous mode [ 358.930011][T10798] syzkaller0: entered allmulticast mode [ 360.017267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.025344][ C1] lec:lec_tx_timeout: lec0 [ 360.029965][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.004979][T10832] FAULT_INJECTION: forcing a failure. [ 361.004979][T10832] name failslab, interval 1, probability 0, space 0, times 1 [ 361.101128][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.2.1120 Not tainted syzkaller #0 PREEMPT(full) [ 361.101157][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.101169][T10832] Call Trace: [ 361.101177][T10832] [ 361.101186][T10832] dump_stack_lvl+0x189/0x250 [ 361.101215][T10832] ? __pfx____ratelimit+0x10/0x10 [ 361.101242][T10832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.101265][T10832] ? __pfx__printk+0x10/0x10 [ 361.101299][T10832] ? __pfx___might_resched+0x10/0x10 [ 361.101324][T10832] should_fail_ex+0x414/0x560 [ 361.101357][T10832] should_failslab+0xa8/0x100 [ 361.101388][T10832] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.101416][T10832] ? __alloc_skb+0x112/0x2d0 [ 361.101450][T10832] __alloc_skb+0x112/0x2d0 [ 361.101482][T10832] netlink_sendmsg+0x5c6/0xb30 [ 361.101522][T10832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.101555][T10832] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.101587][T10832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.101608][T10832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.101638][T10832] __sock_sendmsg+0x219/0x270 [ 361.101667][T10832] ____sys_sendmsg+0x505/0x830 [ 361.101694][T10832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.101735][T10832] ? import_iovec+0x74/0xa0 [ 361.101763][T10832] ___sys_sendmsg+0x21f/0x2a0 [ 361.101787][T10832] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.101850][T10832] ? __fget_files+0x2a/0x420 [ 361.101878][T10832] ? __fget_files+0x3a0/0x420 [ 361.101919][T10832] __x64_sys_sendmsg+0x19b/0x260 [ 361.101943][T10832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.101975][T10832] ? __pfx_ksys_write+0x10/0x10 [ 361.101997][T10832] ? rcu_is_watching+0x15/0xb0 [ 361.102024][T10832] ? do_syscall_64+0xbe/0x3b0 [ 361.102057][T10832] do_syscall_64+0xfa/0x3b0 [ 361.102082][T10832] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.102108][T10832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.102128][T10832] ? clear_bhb_loop+0x60/0xb0 [ 361.102153][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.102171][T10832] RIP: 0033:0x7fbfc718ebe9 [ 361.102190][T10832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.102206][T10832] RSP: 002b:00007fbfc7f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.102229][T10832] RAX: ffffffffffffffda RBX: 00007fbfc73b6090 RCX: 00007fbfc718ebe9 [ 361.102243][T10832] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 361.102256][T10832] RBP: 00007fbfc7f89090 R08: 0000000000000000 R09: 0000000000000000 [ 361.102268][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.102280][T10832] R13: 00007fbfc73b6128 R14: 00007fbfc73b6090 R15: 00007ffc0dfae6c8 [ 361.102314][T10832] [ 362.243929][T10885] netlink: 'syz.6.1135': attribute type 10 has an invalid length. [ 362.261218][T10885] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.299191][T10885] bridge_slave_1: left allmulticast mode [ 362.358977][T10885] bridge_slave_1: left promiscuous mode [ 362.375137][T10885] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.429532][T10885] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 362.498710][T10892] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 362.512093][T10892] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 362.580998][T10896] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 363.005960][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 363.125141][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.230865][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 363.420953][ T5920] IPVS: starting estimator thread 0... [ 363.429209][T10942] netlink: 'syz.5.1147': attribute type 2 has an invalid length. [ 363.439678][T10942] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1147'. [ 363.471607][T10947] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1149'. [ 363.523715][T10943] IPVS: using max 23 ests per chain, 55200 per kthread [ 364.002802][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 364.013169][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 364.183182][T10960] syz_tun: left promiscuous mode [ 364.212910][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.479736][T10960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.508302][T10960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.671819][T10960] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 364.703474][T10960] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 364.716194][T10960] veth3: left promiscuous mode [ 364.822754][T10960] geneve2: left promiscuous mode [ 364.839342][T10960] veth1_to_bond: left allmulticast mode [ 364.846691][T10960] macvlan3: left promiscuous mode [ 364.927633][ T2915] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.986281][ T2915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.038708][ T2915] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 365.043563][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.055791][ C1] lec:lec_tx_timeout: lec0 [ 365.060622][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.114287][ T2915] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.145732][ T2915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.173222][ T2915] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 365.182875][ T2915] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.199379][ T2915] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.211222][ T2915] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 365.251559][T11001] batman_adv: batadv0: Adding interface: dummy0 [ 365.269538][T11001] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.298324][T11004] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 365.306776][T11001] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 365.307412][T11004] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1158'. [ 365.322420][ T2915] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.339574][T11010] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1157'. [ 365.342597][ T2915] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.368850][ T2915] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 365.614503][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1161'. [ 365.643799][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1161'. [ 365.669769][T11022] syzkaller1: entered promiscuous mode [ 365.682645][T11021] netlink: 'syz.6.1161': attribute type 18 has an invalid length. [ 365.743708][T11022] syzkaller1: entered allmulticast mode [ 365.778420][ T59] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.778600][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1161'. [ 365.837702][T11021] netlink: 'syz.6.1161': attribute type 18 has an invalid length. [ 365.854909][ T1336] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.935123][ T1336] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.973446][ T1336] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.394626][T11057] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 366.578200][T11064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 369.348489][T11172] netlink: 'syz.5.1202': attribute type 1 has an invalid length. [ 369.487749][T11178] __nla_validate_parse: 10 callbacks suppressed [ 369.487771][T11178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 369.542102][T11177] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 369.599536][T11177] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 369.633796][T11177] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 369.716360][ T55] block nbd0: Possible stuck request ffff88807be35080: control (read@0,1024B). Runtime 30 seconds [ 369.729807][ T55] block nbd0: Possible stuck request ffff88807be35240: control (read@1024,1024B). Runtime 30 seconds [ 369.743927][ T55] block nbd0: Possible stuck request ffff88807be35400: control (read@2048,1024B). Runtime 30 seconds [ 369.756914][ T55] block nbd0: Possible stuck request ffff88807be355c0: control (read@3072,1024B). Runtime 30 seconds [ 369.942844][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 370.017148][T11193] netlink: 'syz.6.1209': attribute type 21 has an invalid length. [ 370.073704][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.081779][ C1] lec:lec_tx_timeout: lec0 [ 370.086735][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.492391][T11209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.962277][T11212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.305688][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1220'. [ 371.346248][T11238] tipc: Started in network mode [ 371.351390][T11238] tipc: Node identity ac14140f, cluster identity 4711 [ 371.362207][T11238] tipc: New replicast peer: 255.255.255.255 [ 371.390368][T11238] tipc: Enabled bearer , priority 10 [ 371.511195][T11247] netlink: 'syz.0.1222': attribute type 12 has an invalid length. [ 372.071068][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1226'. [ 372.511442][T10991] tipc: Node number set to 2886997007 [ 372.637063][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 372.739701][ T2998] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 372.757754][T11294] vlan2: entered allmulticast mode [ 372.813425][T11294] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 373.149854][T11322] blkio.reset_stats is deprecated [ 373.207507][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'. [ 373.228059][T11328] xt_time: unknown flags 0xf4 [ 373.268101][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'. [ 373.769858][T11345] tipc: Started in network mode [ 373.797033][T11345] tipc: Node identity d2576ff9ccd7, cluster identity 4711 [ 373.835389][T11345] tipc: Enabled bearer , priority 0 [ 373.874727][T11353] syzkaller0: entered allmulticast mode [ 373.917597][T11345] tipc: Resetting bearer [ 373.942771][T11343] tipc: Disabling bearer [ 374.292355][T11366] netlink: 'syz.1.1248': attribute type 13 has an invalid length. [ 374.302805][T11366] netlink: 'syz.1.1248': attribute type 58 has an invalid length. [ 374.334857][T11366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1248'. [ 375.093601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.101716][ C1] lec:lec_tx_timeout: lec0 [ 375.106666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.401932][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1259'. [ 375.423353][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 375.446617][T11409] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 375.786552][T11427] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 375.833774][T11428] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 376.231845][T11438] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 376.233563][ T30] audit: type=1800 audit(1755676861.072:3): pid=11438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 376.290606][T11438] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 376.365858][T11438] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 376.490176][T11447] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 376.508465][T11447] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 377.191138][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1273'. [ 377.312335][T11492] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 377.342984][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 377.491366][T11496] xfrm1: entered allmulticast mode [ 377.610000][T11501] veth0: entered promiscuous mode [ 378.023970][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 378.081238][T11503] veth0: left promiscuous mode [ 378.094070][T11528] bpq0: entered promiscuous mode [ 378.144237][T11529] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 378.350742][T11540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1285'. [ 378.380033][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1288'. [ 378.436307][T11538] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 378.463301][T11538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.921751][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 379.246275][T11580] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 379.376940][T11575] tipc: Enabled bearer , priority 0 [ 379.395781][T11580] batman_adv: batadv0: Adding interface: team0 [ 379.402193][T11580] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 379.420642][T11577] tipc: Enabling of bearer rejected, already enabled [ 379.505129][T11577] tipc: Disabling bearer [ 379.550801][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 380.113552][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.121605][ C1] lec:lec_tx_timeout: lec0 [ 380.126417][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.720038][T11632] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1315'. [ 380.748465][T11634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.758291][ T5878] Bluetooth: hci5: command 0x0405 tx timeout [ 381.491138][T11659] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1325'. [ 381.510868][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 381.665900][T11663] macvlan0: entered promiscuous mode [ 381.671266][T11663] macvlan0: entered allmulticast mode [ 381.684032][T11663] bond2: entered promiscuous mode [ 381.691564][T11663] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 381.731977][T11663] bond2: left promiscuous mode [ 382.115946][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 382.258582][T11690] veth1_virt_wifi: mtu less than device minimum [ 383.081156][T11721] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 383.113903][T11721] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1343'. [ 383.299502][T11726] netlink: 'syz.6.1344': attribute type 13 has an invalid length. [ 383.513356][T11732] netlink: 'syz.6.1346': attribute type 23 has an invalid length. [ 383.554374][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 384.358518][T11762] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 384.384798][T11762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1352'. [ 384.411090][T11762] block nbd1: not configured, cannot reconfigure [ 384.613957][T11770] netlink: 'syz.2.1354': attribute type 39 has an invalid length. [ 384.701787][T11774] netlink: 'syz.0.1355': attribute type 11 has an invalid length. [ 384.836136][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1357'. [ 385.051774][T11778] sctp: [Deprecated]: syz.6.1357 (pid 11778) Use of int in max_burst socket option deprecated. [ 385.051774][T11778] Use struct sctp_assoc_value instead [ 385.082061][T11776] syzkaller0: entered promiscuous mode [ 385.087716][T11776] syzkaller0: entered allmulticast mode [ 385.093142][T11790] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1360'. [ 385.114372][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1357'. [ 385.129989][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 385.139158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.139189][ C1] lec:lec_tx_timeout: lec0 [ 385.147645][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.971965][T11796] ip6gre1: entered allmulticast mode [ 387.034587][T11804] veth1_to_bond: entered allmulticast mode [ 387.054971][T11804] __nla_validate_parse: 2 callbacks suppressed [ 387.054990][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1363'. [ 387.249133][T11804] bond0: (slave bond_slave_1): Releasing backup interface [ 387.320742][T11804] veth1_to_bond (unregistering): left allmulticast mode [ 387.488493][T11825] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 387.727502][T11825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.750104][T11833] vlan0: entered promiscuous mode [ 387.761271][T11833] bond3: entered promiscuous mode [ 387.777522][T11833] vlan0: entered allmulticast mode [ 387.782777][T11833] bond3: entered allmulticast mode [ 387.798727][T11831] netlink: 'syz.5.1370': attribute type 3 has an invalid length. [ 387.807931][T11831] netlink: 'syz.5.1370': attribute type 3 has an invalid length. [ 387.829650][T11831] netlink: 'syz.5.1370': attribute type 3 has an invalid length. [ 387.939945][T11841] bond3: (slave gretap0): making interface the new active one [ 387.984548][T11841] gretap0: entered promiscuous mode [ 387.996944][T11841] gretap0: entered allmulticast mode [ 388.055979][T11841] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 388.163815][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1376'. [ 388.476243][T11861] openvswitch: netlink: Flow key attr not present in new flow. [ 388.529979][T11866] openvswitch: netlink: Actions may not be safe on all matching packets [ 388.846029][T11878] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1384'. [ 388.923893][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 389.324522][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 389.352472][T11907] validate_nla: 49 callbacks suppressed [ 389.352493][T11907] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 389.396031][T11907] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1393'. [ 389.436495][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 389.446725][T11907] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 391.473567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 391.481604][ C1] lec:lec_tx_timeout: lec0 [ 391.486502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.233568][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 397.241782][ C1] lec:lec_tx_timeout: lec0 [ 397.246512][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.803721][ T55] block nbd0: Possible stuck request ffff88807be35080: control (read@0,1024B). Runtime 60 seconds [ 399.814489][ T55] block nbd0: Possible stuck request ffff88807be35240: control (read@1024,1024B). Runtime 60 seconds [ 399.826166][ T55] block nbd0: Possible stuck request ffff88807be35400: control (read@2048,1024B). Runtime 60 seconds [ 399.837903][ T55] block nbd0: Possible stuck request ffff88807be355c0: control (read@3072,1024B). Runtime 60 seconds [ 401.555367][ T5234] udevd[5234]: worker [10301] /devices/virtual/block/nbd0 is taking a long time [ 402.993580][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 403.001638][ C1] lec:lec_tx_timeout: lec0 [ 403.007306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.013813][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 408.021862][ C1] lec:lec_tx_timeout: lec0 [ 408.026564][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.033759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.041795][ C1] lec:lec_tx_timeout: lec0 [ 413.046370][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.575822][T11919] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 414.590329][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 414.743870][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1396'. [ 414.946246][T11926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.000354][T11926] bond4: (slave bond5): making interface the new active one [ 415.058937][T11926] bond4: (slave bond5): Enslaving as an active interface with an up link [ 415.116534][T11919] bond4: entered promiscuous mode [ 415.121722][T11919] bond5: entered promiscuous mode [ 415.127513][T11919] bond4: entered allmulticast mode [ 415.132831][T11919] bond5: entered allmulticast mode [ 415.139895][T11919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.318962][T11951] tipc: Enabling of bearer rejected, failed to enable media [ 415.446635][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 415.487721][T11955] openvswitch: netlink: Flow key attr not present in new flow. [ 415.857320][T11973] netlink: 'syz.5.1410': attribute type 10 has an invalid length. [ 415.869450][T11973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1410'. [ 415.902751][T11973] team0: Port device geneve0 added [ 416.394843][T12002] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1420'. [ 416.700656][T12008] syz_tun: left allmulticast mode [ 416.726343][T12008] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 416.764344][T12008] veth3: left allmulticast mode [ 416.769847][T12008] geneve2: left allmulticast mode [ 416.793986][T12008] macvlan3: left allmulticast mode [ 416.799804][T12008] vlan2: left allmulticast mode [ 416.814395][T12008] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 416.820193][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 416.821846][T12008] ip6gre1: left allmulticast mode [ 416.848992][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 416.873899][T12008] bond4: left allmulticast mode [ 416.882095][T12008] bond5: left allmulticast mode [ 416.999025][T12017] bridge_slave_1: left allmulticast mode [ 417.024048][T12017] bridge_slave_1: left promiscuous mode [ 417.049135][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.073356][T12017] bridge_slave_0: left allmulticast mode [ 417.080651][T12017] bridge_slave_0: left promiscuous mode [ 417.100526][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.418715][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 417.458953][T12038] netlink: 'syz.2.1432': attribute type 11 has an invalid length. [ 417.462199][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1435'. [ 417.484794][T12043] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1435'. [ 417.706330][T12058] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 417.834660][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.868236][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.917935][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.937305][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.053532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.061787][ C1] lec:lec_tx_timeout: lec0 [ 418.066905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 418.382307][T12093] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.435073][ T5870] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 419.677933][T12153] __nla_validate_parse: 9 callbacks suppressed [ 419.677957][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 420.017247][T12178] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 420.042600][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 420.092602][T12180] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 420.320778][T12193] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1475'. [ 420.758338][T12210] Bluetooth: MGMT ver 1.23 [ 420.850849][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1483'. [ 421.181681][T10984] IPVS: starting estimator thread 0... [ 421.190785][T12225] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.294256][T12234] IPVS: using max 25 ests per chain, 60000 per kthread [ 421.567289][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 421.627279][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1496'. [ 421.679633][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1496'. [ 421.712580][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 421.780562][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'. [ 421.823203][T12254] macsec0: entered promiscuous mode [ 421.839070][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 421.930623][T12262] erspan0: entered promiscuous mode [ 421.938622][T12262] 0ªî{X¹¦: entered promiscuous mode [ 421.945565][T12262] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 421.977642][T12270] netlink: zone id is out of range [ 421.987013][T12270] netlink: zone id is out of range [ 421.992266][T12270] netlink: zone id is out of range [ 421.997794][T12270] netlink: zone id is out of range [ 422.003012][T12270] netlink: zone id is out of range [ 422.004360][T12262] hsr1: Slave B (30ªî{X¹¦) is not up; please bring it up to get a fully working HSR network [ 422.008432][T12270] netlink: zone id is out of range [ 422.024273][T12270] netlink: zone id is out of range [ 422.029520][T12270] netlink: zone id is out of range [ 422.051754][T12270] netlink: zone id is out of range [ 423.015042][T12311] lo speed is unknown, defaulting to 1000 [ 423.047709][T12311] lo speed is unknown, defaulting to 1000 [ 423.071826][T12311] lo speed is unknown, defaulting to 1000 [ 423.078044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 423.078076][ C1] lec:lec_tx_timeout: lec0 [ 423.641284][T12339] bpq0: left promiscuous mode [ 423.890335][T12343] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 423.945555][T12343] bond5: (slave vcan0): Error -95 calling set_mac_address [ 424.318064][T12311] infiniband syz0: set down [ 424.322693][T10987] lo speed is unknown, defaulting to 1000 [ 424.330045][T12367] lo: entered allmulticast mode [ 424.340856][T12311] infiniband syz0: added lo [ 424.373461][T12311] syz0: rxe_create_cq: returned err = -12 [ 424.402327][T12311] infiniband syz0: Couldn't create ib_mad CQ [ 424.420400][T12311] infiniband syz0: Couldn't open port 1 [ 424.593864][T12311] RDS/IB: syz0: added [ 424.620505][T12311] smc: adding ib device syz0 with port count 1 [ 424.658398][T12311] smc: ib device syz0 port 1 has pnetid [ 424.671701][T10987] lo speed is unknown, defaulting to 1000 [ 424.682160][T12311] lo speed is unknown, defaulting to 1000 [ 424.736140][T12388] FAULT_INJECTION: forcing a failure. [ 424.736140][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 424.772380][T12384] netlink: 'syz.6.1537': attribute type 21 has an invalid length. [ 424.791356][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.0.1538 Not tainted syzkaller #0 PREEMPT(full) [ 424.791386][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.791398][T12388] Call Trace: [ 424.791406][T12388] [ 424.791415][T12388] dump_stack_lvl+0x189/0x250 [ 424.791444][T12388] ? __pfx____ratelimit+0x10/0x10 [ 424.791533][T12388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.791558][T12388] ? __pfx__printk+0x10/0x10 [ 424.791588][T12388] ? __lock_acquire+0xab9/0xd20 [ 424.791630][T12388] should_fail_ex+0x414/0x560 [ 424.791661][T12388] should_failslab+0xa8/0x100 [ 424.791693][T12388] kmem_cache_alloc_noprof+0x73/0x3c0 [ 424.791718][T12388] ? skb_clone+0x212/0x3a0 [ 424.791744][T12388] skb_clone+0x212/0x3a0 [ 424.791771][T12388] __netlink_deliver_tap+0x404/0x850 [ 424.791815][T12388] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.791845][T12388] netlink_deliver_tap+0x19c/0x1b0 [ 424.791875][T12388] netlink_unicast+0x7fa/0x9e0 [ 424.791911][T12388] ? __pfx_netlink_unicast+0x10/0x10 [ 424.791939][T12388] ? netlink_sendmsg+0x642/0xb30 [ 424.791964][T12388] ? skb_put+0x11b/0x210 [ 424.791998][T12388] netlink_sendmsg+0x805/0xb30 [ 424.792038][T12388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.792070][T12388] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.792103][T12388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.792125][T12388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.792155][T12388] __sock_sendmsg+0x219/0x270 [ 424.792184][T12388] ____sys_sendmsg+0x505/0x830 [ 424.792212][T12388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.792245][T12388] ? import_iovec+0x74/0xa0 [ 424.792273][T12388] ___sys_sendmsg+0x21f/0x2a0 [ 424.792297][T12388] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.792368][T12388] ? __fget_files+0x2a/0x420 [ 424.792397][T12388] ? __fget_files+0x3a0/0x420 [ 424.792439][T12388] __x64_sys_sendmsg+0x19b/0x260 [ 424.792465][T12388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.792508][T12388] ? __pfx_ksys_write+0x10/0x10 [ 424.792531][T12388] ? rcu_is_watching+0x15/0xb0 [ 424.792558][T12388] ? do_syscall_64+0xbe/0x3b0 [ 424.792597][T12388] do_syscall_64+0xfa/0x3b0 [ 424.792622][T12388] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.792648][T12388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.792668][T12388] ? clear_bhb_loop+0x60/0xb0 [ 424.792694][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.792713][T12388] RIP: 0033:0x7f8983b8ebe9 [ 424.792730][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.792749][T12388] RSP: 002b:00007f8984a43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.792772][T12388] RAX: ffffffffffffffda RBX: 00007f8983db5fa0 RCX: 00007f8983b8ebe9 [ 424.792786][T12388] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.792800][T12388] RBP: 00007f8984a43090 R08: 0000000000000000 R09: 0000000000000000 [ 424.792813][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.792825][T12388] R13: 00007f8983db6038 R14: 00007f8983db5fa0 R15: 00007fff1fc5e6e8 [ 424.792860][T12388] [ 425.196578][T12311] lo speed is unknown, defaulting to 1000 [ 425.815402][T12402] netlink: 'syz.6.1541': attribute type 28 has an invalid length. [ 425.831046][T12402] netlink: 'syz.6.1541': attribute type 3 has an invalid length. [ 425.848286][T12402] __nla_validate_parse: 11 callbacks suppressed [ 425.848307][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1541'. [ 426.348004][T12311] lo speed is unknown, defaulting to 1000 [ 426.562535][T12420] FAULT_INJECTION: forcing a failure. [ 426.562535][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 426.596185][T12420] CPU: 1 UID: 0 PID: 12420 Comm: syz.6.1549 Not tainted syzkaller #0 PREEMPT(full) [ 426.596214][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.596227][T12420] Call Trace: [ 426.596235][T12420] [ 426.596245][T12420] dump_stack_lvl+0x189/0x250 [ 426.596274][T12420] ? __pfx____ratelimit+0x10/0x10 [ 426.596303][T12420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.596327][T12420] ? __pfx__printk+0x10/0x10 [ 426.596359][T12420] ? __pfx___might_resched+0x10/0x10 [ 426.596379][T12420] ? fs_reclaim_acquire+0x7d/0x100 [ 426.596416][T12420] should_fail_ex+0x414/0x560 [ 426.596450][T12420] should_failslab+0xa8/0x100 [ 426.596488][T12420] __kmalloc_noprof+0xcb/0x4f0 [ 426.596514][T12420] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 426.596545][T12420] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 426.596579][T12420] genl_family_rcv_msg_doit+0xb8/0x300 [ 426.596610][T12420] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 426.596644][T12420] ? apparmor_capable+0x137/0x1b0 [ 426.596671][T12420] ? bpf_lsm_capable+0x9/0x20 [ 426.596696][T12420] ? security_capable+0x7e/0x2e0 [ 426.596732][T12420] genl_rcv_msg+0x60e/0x790 [ 426.596763][T12420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.596784][T12420] ? __pfx_wg_set_device+0x10/0x10 [ 426.596809][T12420] ? __asan_memcpy+0x40/0x70 [ 426.596831][T12420] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.596868][T12420] netlink_rcv_skb+0x205/0x470 [ 426.596893][T12420] ? __lock_acquire+0xab9/0xd20 [ 426.596922][T12420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.596946][T12420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.596998][T12420] ? down_read+0x1ad/0x2e0 [ 426.597031][T12420] genl_rcv+0x28/0x40 [ 426.597050][T12420] netlink_unicast+0x82c/0x9e0 [ 426.597086][T12420] ? __pfx_netlink_unicast+0x10/0x10 [ 426.597115][T12420] ? netlink_sendmsg+0x642/0xb30 [ 426.597140][T12420] ? skb_put+0x11b/0x210 [ 426.597174][T12420] netlink_sendmsg+0x805/0xb30 [ 426.597215][T12420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.597248][T12420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.597280][T12420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.597302][T12420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.597332][T12420] __sock_sendmsg+0x219/0x270 [ 426.597368][T12420] ____sys_sendmsg+0x505/0x830 [ 426.597396][T12420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.597429][T12420] ? import_iovec+0x74/0xa0 [ 426.597458][T12420] ___sys_sendmsg+0x21f/0x2a0 [ 426.597491][T12420] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.597559][T12420] ? __fget_files+0x2a/0x420 [ 426.597587][T12420] ? __fget_files+0x3a0/0x420 [ 426.597630][T12420] __x64_sys_sendmsg+0x19b/0x260 [ 426.597654][T12420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.597687][T12420] ? __pfx_ksys_write+0x10/0x10 [ 426.597710][T12420] ? rcu_is_watching+0x15/0xb0 [ 426.597737][T12420] ? do_syscall_64+0xbe/0x3b0 [ 426.597770][T12420] do_syscall_64+0xfa/0x3b0 [ 426.597796][T12420] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.597822][T12420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.597842][T12420] ? clear_bhb_loop+0x60/0xb0 [ 426.597868][T12420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.597887][T12420] RIP: 0033:0x7f38d8b8ebe9 [ 426.597905][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.597923][T12420] RSP: 002b:00007f38d9970038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.597946][T12420] RAX: ffffffffffffffda RBX: 00007f38d8db5fa0 RCX: 00007f38d8b8ebe9 [ 426.597961][T12420] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 426.597975][T12420] RBP: 00007f38d9970090 R08: 0000000000000000 R09: 0000000000000000 [ 426.597987][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.597999][T12420] R13: 00007f38d8db6038 R14: 00007f38d8db5fa0 R15: 00007fff90aaaab8 [ 426.598036][T12420] [ 427.232464][T12435] netlink: 'syz.0.1550': attribute type 29 has an invalid length. [ 427.855432][T12311] lo speed is unknown, defaulting to 1000 [ 428.030612][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1560'. [ 428.513325][T12486] netlink: 'syz.5.1562': attribute type 1 has an invalid length. [ 428.587552][T12486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.742783][T12488] bond6: (slave veth3): Enslaving as an active interface with a down link [ 428.817354][T12486] bond6: (slave veth0_to_bond): making interface the new active one [ 428.839610][T12486] veth0_to_bond: entered promiscuous mode [ 428.859652][T12486] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.033772][T12491] bond6: (slave veth5): Enslaving as an active interface with a down link [ 429.179277][T12311] lo speed is unknown, defaulting to 1000 [ 429.522969][T12520] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1568'. [ 429.803223][T12529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'. [ 429.874525][ T55] block nbd0: Possible stuck request ffff88807be35080: control (read@0,1024B). Runtime 90 seconds [ 429.885960][ T55] block nbd0: Possible stuck request ffff88807be35240: control (read@1024,1024B). Runtime 90 seconds [ 429.897537][ T55] block nbd0: Possible stuck request ffff88807be35400: control (read@2048,1024B). Runtime 90 seconds [ 429.908690][ T55] block nbd0: Possible stuck request ffff88807be355c0: control (read@3072,1024B). Runtime 90 seconds [ 429.949235][T12535] tipc: Enabled bearer , priority 10 [ 430.136983][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 430.149216][ T5870] Bluetooth: hci4: link tx timeout [ 430.157490][ T5870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.191538][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 430.471195][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 430.571248][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 430.597527][ T5878] Bluetooth: hci4: link tx timeout [ 430.602718][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.628087][ T5878] Bluetooth: hci4: link tx timeout [ 430.633266][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.633888][T12561] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 430.901681][T12573] net_ratelimit: 3 callbacks suppressed [ 430.901704][T12573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.164951][ T5878] Bluetooth: hci4: link tx timeout [ 431.170403][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.264172][T12589] tipc: Enabling of bearer rejected, failed to enable media [ 431.480019][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 431.517610][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.554088][ T5878] Bluetooth: hci4: link tx timeout [ 431.559357][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.561225][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 431.643672][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.696074][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 431.728484][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.734379][T12607] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 431.768775][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 431.808886][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.819111][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 431.878966][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 431.971931][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 432.023964][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 432.032712][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 432.041413][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 432.136517][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 432.183214][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1589'. [ 432.199506][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 432.205702][ T5878] Bluetooth: hci4: link tx timeout [ 432.223255][T12599] openvswitch: netlink: Actions may not be safe on all matching packets [ 432.602893][T12649] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1604'. [ 433.211580][T12666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.258758][T12666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.527963][T12666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.576731][T12666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.605594][T12691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.692635][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.702930][T12688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.736468][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.748748][T12688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.771696][T12666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.801756][T12666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.068852][T12666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.100565][T12666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.353791][ T2915] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.375624][ T2915] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.502691][T10593] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.531346][T10593] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.581293][T10593] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.604659][T10593] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.612939][T10593] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.654538][T10593] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.144438][T12752] netlink: 'syz.6.1633': attribute type 10 has an invalid length. [ 435.317196][T12758] sctp: [Deprecated]: syz.5.1635 (pid 12758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.317196][T12758] Use struct sctp_sack_info instead [ 436.316536][T12795] netlink: 'syz.1.1643': attribute type 16 has an invalid length. [ 436.334554][T12795] netlink: 'syz.1.1643': attribute type 9 has an invalid length. [ 436.592267][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 436.612966][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 436.621597][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 436.625129][T12801] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 436.700809][T12812] Unsupported ieee802154 address type: 0 [ 436.734523][T12812] Unsupported ieee802154 address type: 0 [ 436.759150][T12812] Unsupported ieee802154 address type: 0 [ 436.760607][T12803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 436.805816][T12801] bond5: entered promiscuous mode [ 436.815937][T12801] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.877825][T12810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.891039][T12810] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 436.904771][T12810] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 436.942415][T12810] bond5: (slave wireguard0): making interface the new active one [ 436.953167][T12810] wireguard0: entered promiscuous mode [ 436.961534][T12810] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 436.991264][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.030084][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.105289][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.169914][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.227641][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.290190][T12803] syzkaller0 speed is unknown, defaulting to 1000 [ 437.442024][T12836] __nla_validate_parse: 12 callbacks suppressed [ 437.442048][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 437.892626][T12854] bridge_slave_0: left allmulticast mode [ 437.906705][T12854] bridge_slave_0: left promiscuous mode [ 437.912637][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.986843][T12854] bond0: (slave bridge_slave_1): Releasing backup interface [ 438.012581][T12854] bond0: (slave bond_slave_0): Releasing backup interface [ 438.052152][T12854] team0: Port device team_slave_0 removed [ 438.073067][T12854] team0: Port device team_slave_1 removed [ 438.080821][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.089105][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.104567][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.112228][T12854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.191828][T12806] lo speed is unknown, defaulting to 1000 [ 438.565683][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 438.576871][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1667'. [ 440.102023][ T1154] veth0_to_bond: left promiscuous mode [ 440.125246][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 440.525170][T12943] netlink: 'syz.1.1686': attribute type 10 has an invalid length. [ 440.758366][T12939] bond5: entered promiscuous mode [ 440.771350][T12939] bond5: entered allmulticast mode [ 440.788429][T12939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.115908][T12939] bond5 (unregistering): Released all slaves [ 441.312720][T12964] tipc: Enabled bearer , priority 0 [ 441.352707][T12971] syzkaller0: entered promiscuous mode [ 441.385482][T12971] syzkaller0: entered allmulticast mode [ 441.503727][T12976] tipc: Resetting bearer [ 441.590275][T12953] tipc: Resetting bearer [ 441.741178][T12953] tipc: Disabling bearer [ 442.027138][T13003] sctp: [Deprecated]: syz.1.1697 (pid 13003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.027138][T13003] Use struct sctp_sack_info instead [ 442.061791][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1699'. [ 442.097208][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1699'. [ 442.360264][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1701'. [ 442.560781][T13021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1703'. [ 442.729825][T13026] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1705'. [ 442.779950][T13030] syzkaller0: entered promiscuous mode [ 442.816509][T13030] syzkaller0: entered allmulticast mode [ 443.094713][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.113976][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.124063][T10987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.153768][T10984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.667102][T13074] tipc: Enabled bearer , priority 0 [ 443.684448][T10987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.717282][T13074] syzkaller0: entered promiscuous mode [ 443.737989][T13074] syzkaller0: entered allmulticast mode [ 443.908901][T13069] tipc: Resetting bearer [ 444.007027][T13069] tipc: Disabling bearer [ 444.382857][T13104] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 444.641455][T13124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1728'. [ 444.652576][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 444.800097][T13124] veth7: entered allmulticast mode [ 444.897598][T13129] netlink: 'syz.5.1730': attribute type 4 has an invalid length. [ 444.912745][T13129] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1730'. [ 445.123436][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 445.133559][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.141912][ C1] lec:lec_tx_timeout: lec0 [ 445.155492][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 445.183639][T13131] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1732'. [ 445.226029][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 445.396912][T13146] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1737'. [ 445.468741][T13131] syzkaller0: entered promiscuous mode [ 445.494671][T13131] syzkaller0: entered allmulticast mode [ 446.196817][T13175] delete_channel: no stack [ 447.483732][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.076878][T13201] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 448.214590][T13193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.568425][T13226] __nla_validate_parse: 2 callbacks suppressed [ 448.568445][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 448.597423][T13193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.646024][T13228] net_ratelimit: 1 callbacks suppressed [ 448.646044][T13228] openvswitch: netlink: Unknown key attributes 2 [ 448.790993][T13241] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1760'. [ 448.846047][T13193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.853422][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 449.130846][T13247] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.146239][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 449.158564][T13247] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.176091][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'. [ 449.335106][T13269] [ 449.337502][T13269] ====================================================== [ 449.344533][T13269] WARNING: possible circular locking dependency detected [ 449.351572][T13269] syzkaller #0 Not tainted [ 449.356009][T13269] ------------------------------------------------------ [ 449.363045][T13269] syz.0.1766/13269 is trying to acquire lock: [ 449.369128][T13269] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 449.378317][T13269] [ 449.378317][T13269] but task is already holding lock: [ 449.385702][T13269] ffff888055df7a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 449.394971][T13269] [ 449.394971][T13269] which lock already depends on the new lock. [ 449.394971][T13269] [ 449.405446][T13269] [ 449.405446][T13269] the existing dependency chain (in reverse order) is: [ 449.414481][T13269] [ 449.414481][T13269] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 449.422491][T13269] lock_acquire+0x120/0x360 [ 449.427540][T13269] _raw_spin_lock_bh+0x36/0x50 [ 449.432841][T13269] nr_rt_device_down+0x12a/0x720 [ 449.438390][T13269] nr_device_event+0x137/0x150 [ 449.443763][T13269] notifier_call_chain+0x1b3/0x3e0 [ 449.449568][T13269] __dev_notify_flags+0x18d/0x2e0 [ 449.455120][T13269] netif_change_flags+0xe8/0x1a0 [ 449.460714][T13269] dev_change_flags+0x130/0x260 [ 449.466114][T13269] dev_ioctl+0x7b4/0x1150 [ 449.470989][T13269] sock_do_ioctl+0x22c/0x300 [ 449.476110][T13269] sock_ioctl+0x576/0x790 [ 449.481183][T13269] __se_sys_ioctl+0xfc/0x170 [ 449.486310][T13269] do_syscall_64+0xfa/0x3b0 [ 449.491352][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.497853][T13269] [ 449.497853][T13269] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 449.505683][T13269] lock_acquire+0x120/0x360 [ 449.510727][T13269] _raw_spin_lock_bh+0x36/0x50 [ 449.516016][T13269] nr_rt_device_down+0xa9/0x720 [ 449.521388][T13269] nr_device_event+0x137/0x150 [ 449.526671][T13269] notifier_call_chain+0x1b3/0x3e0 [ 449.532310][T13269] __dev_notify_flags+0x18d/0x2e0 [ 449.537873][T13269] netif_change_flags+0xe8/0x1a0 [ 449.543329][T13269] dev_change_flags+0x130/0x260 [ 449.548711][T13269] dev_ioctl+0x7b4/0x1150 [ 449.553571][T13269] sock_do_ioctl+0x22c/0x300 [ 449.558719][T13269] sock_ioctl+0x576/0x790 [ 449.563570][T13269] __se_sys_ioctl+0xfc/0x170 [ 449.568683][T13269] do_syscall_64+0xfa/0x3b0 [ 449.573805][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.580227][T13269] [ 449.580227][T13269] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 449.588140][T13269] validate_chain+0xb9b/0x2140 [ 449.593513][T13269] __lock_acquire+0xab9/0xd20 [ 449.598716][T13269] lock_acquire+0x120/0x360 [ 449.603748][T13269] _raw_spin_lock_bh+0x36/0x50 [ 449.609045][T13269] nr_rt_ioctl+0x390/0xd50 [ 449.613999][T13269] sock_do_ioctl+0xd9/0x300 [ 449.619023][T13269] sock_ioctl+0x576/0x790 [ 449.623874][T13269] __se_sys_ioctl+0xfc/0x170 [ 449.629004][T13269] do_syscall_64+0xfa/0x3b0 [ 449.634040][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.640538][T13269] [ 449.640538][T13269] other info that might help us debug this: [ 449.640538][T13269] [ 449.650849][T13269] Chain exists of: [ 449.650849][T13269] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 449.650849][T13269] [ 449.664668][T13269] Possible unsafe locking scenario: [ 449.664668][T13269] [ 449.672115][T13269] CPU0 CPU1 [ 449.677474][T13269] ---- ---- [ 449.682833][T13269] lock(&nr_node->node_lock); [ 449.687599][T13269] lock(nr_node_list_lock); [ 449.694711][T13269] lock(&nr_node->node_lock); [ 449.701996][T13269] lock(nr_neigh_list_lock); [ 449.706683][T13269] [ 449.706683][T13269] *** DEADLOCK *** [ 449.706683][T13269] [ 449.714832][T13269] 2 locks held by syz.0.1766/13269: [ 449.720071][T13269] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 449.729579][T13269] #1: ffff888055df7a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 449.739261][T13269] [ 449.739261][T13269] stack backtrace: [ 449.745153][T13269] CPU: 1 UID: 0 PID: 13269 Comm: syz.0.1766 Not tainted syzkaller #0 PREEMPT(full) [ 449.745175][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.745186][T13269] Call Trace: [ 449.745194][T13269] [ 449.745201][T13269] dump_stack_lvl+0x189/0x250 [ 449.745225][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.745244][T13269] ? __pfx__printk+0x10/0x10 [ 449.745264][T13269] ? stack_trace_save+0x9c/0xe0 [ 449.745287][T13269] print_circular_bug+0x2ee/0x310 [ 449.745308][T13269] check_noncircular+0x134/0x160 [ 449.745328][T13269] validate_chain+0xb9b/0x2140 [ 449.745358][T13269] __lock_acquire+0xab9/0xd20 [ 449.745384][T13269] ? nr_rt_ioctl+0x390/0xd50 [ 449.745400][T13269] lock_acquire+0x120/0x360 [ 449.745421][T13269] ? nr_rt_ioctl+0x390/0xd50 [ 449.745439][T13269] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 449.745459][T13269] ? nr_rt_ioctl+0x390/0xd50 [ 449.745476][T13269] _raw_spin_lock_bh+0x36/0x50 [ 449.745494][T13269] ? nr_rt_ioctl+0x390/0xd50 [ 449.745510][T13269] nr_rt_ioctl+0x390/0xd50 [ 449.745531][T13269] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 449.745553][T13269] ? apparmor_capable+0x137/0x1b0 [ 449.745574][T13269] ? capable+0x89/0xe0 [ 449.745588][T13269] ? nr_ioctl+0x1b1/0x3b0 [ 449.745602][T13269] sock_do_ioctl+0xd9/0x300 [ 449.745622][T13269] ? __pfx_sock_do_ioctl+0x10/0x10 [ 449.745638][T13269] ? __lock_acquire+0xab9/0xd20 [ 449.745664][T13269] sock_ioctl+0x576/0x790 [ 449.745682][T13269] ? __pfx_sock_ioctl+0x10/0x10 [ 449.745699][T13269] ? __fget_files+0x2a/0x420 [ 449.745720][T13269] ? __fget_files+0x3a0/0x420 [ 449.745742][T13269] ? __fget_files+0x2a/0x420 [ 449.745765][T13269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 449.745784][T13269] ? __pfx_sock_ioctl+0x10/0x10 [ 449.745801][T13269] __se_sys_ioctl+0xfc/0x170 [ 449.745820][T13269] do_syscall_64+0xfa/0x3b0 [ 449.745841][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.745860][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.745876][T13269] ? clear_bhb_loop+0x60/0xb0 [ 449.745894][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.745908][T13269] RIP: 0033:0x7f8983b8ebe9 [ 449.745923][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.745937][T13269] RSP: 002b:00007f8984a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.745955][T13269] RAX: ffffffffffffffda RBX: 00007f8983db5fa0 RCX: 00007f8983b8ebe9 [ 449.745969][T13269] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 449.745979][T13269] RBP: 00007f8983c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 449.745990][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.745999][T13269] R13: 00007f8983db6038 R14: 00007f8983db5fa0 R15: 00007fff1fc5e6e8 [ 449.746016][T13269] [ 450.025137][T13193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.055592][T13247] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.081689][T13247] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.142367][ T1336] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.187412][T13247] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.206731][T13247] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.221254][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.229794][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.239273][ T1336] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.286521][T13247] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.296397][T13247] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.346073][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.354738][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.366280][ T1154] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.374637][ T1154] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.388175][ T1154] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.396472][ T1154] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.408121][ T1154] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.416444][ T1154] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.113665][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!