last executing test programs: 7.0981155s ago: executing program 4 (id=10404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000480)="c13ce297f1a5841cdf9f8ab6a7b02c34c28fa48da33865f8c2221e3af062c424e9704557157b18ef55350f4a58af6d827f19e05523fc924fdaa277907cb10ba4a4f5be5f892368b42d54f9de031718b774af0c274fbf3118829331e3faebb1a31867202c24170d77a776c52defdb44aa5592a0ffe1d31aa510ce1e25479f84f9bd0cd1671b5d882cd6f5c953", 0x8c}, {&(0x7f0000000700)="7a2675f64f532e1e4e29e36849a3e76354cc45e10591498feffcd0c29963683cc093b5241e99e30d2802dbb78a9e5d1100aa8cb96d90ffad3541cbe1c68552d1a49c21de9ab1f92dba1b0e1a376611404b87abbbe4eb923c32730f86afa9a2a4552602098bff03836c83cf8eb841c4abf34b3ce8f9e3dc452f5f4370478a81ea41cb574b06b3ddb3bcc103e7e2e961642b2c7d4577e8b681357f0bd7b88462938da6134e654c6875a5cb02fa", 0xac}, {&(0x7f00000007c0)="b25db86a60ae440d91862cbe3d232abffaf6", 0x12}, {&(0x7f0000000840)="5c64d49a6bbec1b87aaffb1b879b5f1061daac8097adc8fa993e24af7c20e71af7e5e0ef1a743a8c896d48863f3abe7daa9292605d235749efb1d1aff3599f41feae23e42de26466114abd02d14d09f3c2005489f49471c1ca568e150ad1a3375595c79e83eee3c7125bf5523d0a4aad5471b0267489746d1c970e4b841a45ca6fa1be4ed117ac139176767f70712cf44785e1dd097305243aed73e7f7d20bebd6ec6e40f6e6272e00ba4d249abc77692c75a4a5d831391009a061da68f8a4fb533037a8af1ecef117ed484054dfd47698e9a9e9d6fa6e6418bc70beeba1c3626447639add00b5b0e76e1996597bcfdb8c2f5b337e569c3bae10154a9d7271", 0xff}], 0x5) 6.765408541s ago: executing program 4 (id=10407): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) recvmsg$can_j1939(r0, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x1405, 0x200, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400}, 0x805) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) write$nci(r4, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) unshare(0x2c020400) r6 = socket$inet(0xa, 0x801, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000280)='\x00', 0x1, &(0x7f00000002c0)={@align=0x7f, {0x6, 0x7, 0x0, 0xff}}, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0xfffffffe}, {[0x2, 0x1, 0x3, 0x7fffffff]}, 0x10, 0x43, &(0x7f00000003c0)=""/67}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000001000)=ANY=[@ANYBLOB="e90cef7a738426b278ad5612692e0c11bf0558c3242b5841957c1c9e7f758dfdda43c688f91cc82b5f8dd86af1ec36aedf8e4ee51695ad936fdf89b5bf1dd6e38df51cb13da10798b0f4a7b807322731fde8611574e7dd81535fc6feda61", @ANYRES16=r8, @ANYBLOB="000828bd7000fddbdf250b00000005002e000000000005002d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) listen(r6, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r10, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r12 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000480)=0x8) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x36, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000002500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001300)={0x119c, 0x13, 0x200, 0x70bd2a, 0x25dfdbfc, {0x32, 0x2, 0x9, 0x9, {0x4e24, 0x4e20, [0x6, 0x5e8, 0x6, 0xc5], [0x4, 0x3, 0x0, 0x7], r5, [0xfffffff7, 0x4]}, 0x8, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x66, 0x1, "6aaf2148051c4651e00a097f53fa8b836334231f487a2a37e1cf5533a4860502c0b23a4f70a8cec772361ef7f660237a765df685e56eb5ac1286e48fdbe51e5d222c112653ec334c92a3d1d7c9d3b7ba582153e5349eb77de10e85fa28e818447722"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "a9ee7439afdb47f611171ac6b97510436ea121c2c55637366fff9c9c3dadfc90bae3410456360d49ecb144800e56f526005a99595d29b2162c4292a386f1616de71285cda4cd7d657ee80fc44f098f2e4b0906f75787753df021e94f74b191b0ee7c9d8e5bcf95835f1d30e8f42a78638e7d56d0497d320be0b90d4272dcf0104907255dac969dc5d3509d26e01a52f6384fb69cb459505fe1cded39be2b20380626f59489d095289cc7a26a4880a35bacc30c679ba268fbc0f2952c1a0fde6c83ed5a22cfe9fd53bb2819741c1d17034d6aa589cdfc5177322290e5cd2d"}]}, 0x119c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r13, 0x8983, &(0x7f0000000fc0)={0x7, 'veth0\x00', {0xcf}, 0x40}) 6.573208309s ago: executing program 4 (id=10409): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, 0x40, 0x0, 0x0, 0xfffffffe}}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000040000000000000000000000fd00", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000800), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x100}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300010000100000000000813bbcf39b2ff4802d0000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000100000000000000fffffffffffffffffeffffffffffffff0300000000000000000000000000000000000000000000000000000000000000651700000000000000000000400000000000000000000000feffffff000000000001000200000000"], 0xb8}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f00000003c0)={0x0, 0x0, 0x0, [0x6, 0x3, 0x4, 0x7, 0x6], [0x400, 0x59d, 0x3, 0x2, 0x4, 0x8, 0x1, 0x7, 0x3, 0x9, 0x8, 0x4, 0x10001, 0x3ff, 0x9, 0x3ff, 0x8, 0x0, 0x8, 0x5e, 0x4, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x7f, 0xa, 0x6331, 0x10, 0x7fffffff, 0x4, 0x8, 0xe4, 0x5964, 0x4, 0x9, 0x5, 0x1, 0x8001, 0xa, 0x6, 0x4, 0x70b5, 0x0, 0x8, 0x80000000, 0x9e1a, 0xfffffffffffffff2, 0xfffffffffffffffe, 0x3b, 0x400, 0xaf, 0x140000000000, 0x3, 0xfffffffffffffff7, 0x91, 0x0, 0x10000, 0xfffffffffffffffa, 0xe, 0x8, 0x0, 0x0, 0x8207, 0x34000000000, 0x14, 0x100, 0x1ff, 0x7, 0x64, 0x5, 0xbc8, 0x8, 0x980, 0x6, 0x4, 0x1, 0x300, 0x9, 0x4, 0x9, 0x4, 0xfffffffffffffffa, 0x6, 0x9, 0xd1d, 0x8, 0x2, 0x2, 0x0, 0x400, 0x5, 0x2, 0x1, 0x4, 0xfffffffffffffffb, 0x3, 0x7, 0x0, 0x9, 0x8, 0x3c, 0x4000000, 0x0, 0xab70, 0x8, 0x0, 0x1, 0xa, 0x8, 0x1, 0x7, 0x8001, 0xe9, 0x2, 0x0, 0x50cc, 0x7fffffff, 0x7, 0x47f6dbfc, 0x42, 0x8000000000000000]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'pim6reg0\x00', @random="0000230c1100"}) 6.0082072s ago: executing program 4 (id=10413): connect$netlink(0xffffffffffffffff, &(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc) write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) listen(r0, 0xfffffffd) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e21, 0x80000001, @loopback, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='gre0\x00', 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@deltaction={0x18, 0x31, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), 0x0) 5.699116311s ago: executing program 4 (id=10416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5.643189907s ago: executing program 0 (id=10417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000480)="c13ce297f1a5841cdf9f8ab6a7b02c34c28fa48da33865f8c2221e3af062c424e9704557157b18ef55350f4a58af6d827f19e05523fc924fdaa277907cb10ba4a4f5be5f892368b42d54f9de031718b774af0c274fbf3118829331e3faebb1a31867202c24170d77a776c52defdb44aa5592a0ffe1d31aa510ce1e25479f84f9bd0cd1671b5d882cd6f5c953", 0x8c}, {&(0x7f0000000700)="7a2675f64f532e1e4e29e36849a3e76354cc45e10591498feffcd0c29963683cc093b5241e99e30d2802dbb78a9e5d1100aa8cb96d90ffad3541cbe1c68552d1a49c21de9ab1f92dba1b0e1a376611404b87abbbe4eb923c32730f86afa9a2a4552602098bff03836c83cf8eb841c4abf34b3ce8f9e3dc452f5f4370478a81ea41cb574b06b3ddb3bcc103e7e2e961642b2c7d4577e8b681357f0bd7b88462938da6134e654c6875a5cb02fa", 0xac}, {&(0x7f00000007c0)="b25db86a60ae440d91862cbe3d232abffaf6", 0x12}, {&(0x7f0000000840)="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", 0xff}], 0x5) 4.955004574s ago: executing program 2 (id=10418): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) socket$inet(0x2, 0x1, 0x100) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f00000000c0)) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0xf7fffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x59808, 0x35004}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MAP={0x24, 0xe, {0x2, 0x5, 0x6, 0x7, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050) 2.090129378s ago: executing program 3 (id=10420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) unshare(0x20000400) unshare(0x4000000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x1) r4 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001d40)=""/4044, 0xfcc}, {&(0x7f0000000d40)=""/4089, 0xff9}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/11, 0xb}], 0x7}, 0x10000) 1.963411453s ago: executing program 3 (id=10421): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @loopback}, {0x4, 0x4e22, @remote}, {0x2, 0xfffe, @multicast2}, 0x384, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='veth0_to_team\x00', 0x0, 0xfffffffffffffffe}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff10000000010000000c0005006c010000000000000c000200ff7d000000000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000006800010002000000fcffff7f00000000000000d8b9442737befffae8bb49001c0002000100000004000000ff0f0008000000000000000004000000c3c7dd6100570c2ee18da4c257bd9a5b4d4d86411dbbe5ad54b9b6ea45cadb40340679507e8021d320daae34c6764a58c8f2682ac9b42abf367253"], 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x3dc4, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x2002}) 1.961645224s ago: executing program 0 (id=10422): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x8, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400d00001608000240000000020900010073797a30000000000900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400010004000300040002000400020004000400040006"], 0x138}}, 0x0) 1.948321848s ago: executing program 4 (id=10423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8010, r4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, r5, 0x21d67000) (async) r6 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r6, 0x29, 0x7, 0x0, &(0x7f0000000100)) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f000000cf40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xc0}}], 0x1, 0x2404c845) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x20040084) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x100, 0x4020, 0xf7fffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0020002cbd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="2600000093080df641e97ea6f6e8e20e5912b424a080ae205827c5322517be30026c4debfa7dd365a453c4d64f3f84424ff752bce05dbd9b6e0c21a855553a73f1376e5ac29fc0f518779b7d00c4592a6a943995a888d6853d27d8daf05c3362e822053653d46320c6be299ca0c31405e35e2f49a63113204273fdc0fcbd2293fb41e505ed4e9cc57135fa5a8e0d9e4219b4378b3fbee00854fa96816313ca4270913412509c1ae97511358e3e8835601cf97cba6839537598940fc0d25ee9a00d2097da1946eac2db12bcbb5290de"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r10, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) (async) socket(0x10, 0x3, 0x0) 1.811406664s ago: executing program 2 (id=10425): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x54, 0x11, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0x7, 0x1}, {0xfff1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0xffffffffffffff2a, 0xb, 0x41ff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.735825994s ago: executing program 3 (id=10426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.723161065s ago: executing program 1 (id=10427): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffffd0000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000507010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.531348052s ago: executing program 1 (id=10428): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, 0x40, 0x0, 0x0, 0xfffffffe}}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000040000000000000000000000fd00", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000d00)={&(0x7f0000000800), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x100}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300010000100000000000813bbcf39b2ff4802d0000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000100000000000000fffffffffffffffffeffffffffffffff0300000000000000000000000000000000000000000000000000000000000000651700000000000000000000400000000000000000000000feffffff000000000001000200000000"], 0xb8}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f00000003c0)={0x0, 0x0, 0x0, [0x6, 0x3, 0x4, 0x7, 0x6], [0x400, 0x59d, 0x3, 0x2, 0x4, 0x8, 0x1, 0x7, 0x3, 0x9, 0x8, 0x4, 0x10001, 0x3ff, 0x9, 0x3ff, 0x8, 0x0, 0x8, 0x5e, 0x4, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x7f, 0xa, 0x6331, 0x10, 0x7fffffff, 0x4, 0x8, 0xe4, 0x5964, 0x4, 0x9, 0x5, 0x1, 0x8001, 0xa, 0x6, 0x4, 0x70b5, 0x0, 0x8, 0x80000000, 0x9e1a, 0xfffffffffffffff2, 0xfffffffffffffffe, 0x3b, 0x400, 0xaf, 0x140000000000, 0x3, 0xfffffffffffffff7, 0x91, 0x0, 0x10000, 0xfffffffffffffffa, 0xe, 0x8, 0x0, 0x0, 0x8207, 0x34000000000, 0x14, 0x100, 0x1ff, 0x7, 0x64, 0x5, 0xbc8, 0x8, 0x980, 0x6, 0x4, 0x1, 0x300, 0x9, 0x4, 0x9, 0x4, 0xfffffffffffffffa, 0x6, 0x9, 0xd1d, 0x8, 0x2, 0x2, 0x0, 0x400, 0x5, 0x2, 0x1, 0x4, 0xfffffffffffffffb, 0x3, 0x7, 0x0, 0x9, 0x8, 0x3c, 0x4000000, 0x0, 0xab70, 0x8, 0x0, 0x1, 0xa, 0x8, 0x1, 0x7, 0x8001, 0xe9, 0x2, 0x0, 0x50cc, 0x7fffffff, 0x7, 0x47f6dbfc, 0x42, 0x8000000000000000]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'pim6reg0\x00', @random="0000230c1100"}) 1.512405786s ago: executing program 3 (id=10429): r0 = socket(0x2c, 0xa, 0x7ffc) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2711}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@getqdisc={0x0, 0x26, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x1, 0x7}, {0xfff7, 0xc}}, [{}, {}, {}, {}, {}, {}]}, 0xfffffffffffffdf8}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800e68e8da23507ef0000b86714071b032daee4ec04fe5cdb7308e540a95e42d09de6b3d4eeb714cb466432638691a81b18a7f026c9baf003a7e6bb6f137401a061238575b065172e28dc625154af08fcf0ffd677575d03cb27d23c9ea9727f2e8d0f12969bb0cf7cc6c754567e306df88a805227480709638ba76912302c0008005a44f53b201119914e62b551759e989cbd7713b8adef41bbb889f700891cf7d63cab9e9bd4cd6c86fe320f0314a819a34c6efff8749d6decddd9d38af017d8ab3cbe1963eaea5d67823f2ea0e5c8e88916514560f459ff215b1c340c20bbc53fff3da8909100"/247, @ANYRES32=r6, @ANYBLOB="100001800400", @ANYRESDEC=0x0], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x7, 0x2bf3, 0x1, 0x400, 0x100, 0x5, 0xa1}, &(0x7f0000000240)={0xa, 0x1, 0x3, 0xcd35, 0x6, 0x6, 0x5, 0x10000}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x78, @private1, 0x9}}, 0x8, 0xfff9}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={r7, 0x2}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x5, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a88003cd6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5f1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) 1.34976441s ago: executing program 2 (id=10430): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=r2, @ANYRESOCT=r3, @ANYBLOB="b3636f71"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.008839623s ago: executing program 0 (id=10431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="e40000000201010800060000000000000a000000d00001800c00028005000100000000001400018008007cd4544b000000001100000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x240408d0}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0xf0, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2004c010}, 0x40050) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000054) 894.622397ms ago: executing program 2 (id=10432): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendto$packet(r0, &(0x7f0000000000)="d1e514ce9c422a0798ae9e2f212af04a387974c9f1f07d15bfdf12d4d6990689ca6bc7d38c8dd9c1f9f6ec1fd317cc85f6abcf9c3522d3d973db085cffad3a1265c5815fc91488cb85c0cc2dd1e34bf3d62949dba8c672", 0x57, 0x10, &(0x7f0000000140)={0x11, 0x1, r2, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xfffffffffffffd7d, 0x1, {0x8a5b}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x2000c800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000180)={0x8, 'vcan0\x00', {'netpci0\x00'}, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 736.388109ms ago: executing program 0 (id=10433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 734.685616ms ago: executing program 1 (id=10434): r0 = socket$inet(0x2, 0x1, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002f40)=[{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000005c0)="e6fae6d1b292e91438440d3cb6bf5ca3623413b54f1811e2", 0x18}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x44000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c0002800800"], 0x9c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000001) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1ff}}, 0x5, 0x3, 0x4, 0x4, 0x86, 0x8000, 0x4e}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x4, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r5, 0x8, 0x3, 0x6, 0x6, 0x7}, 0x14) 539.114439ms ago: executing program 2 (id=10435): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x190, 0x4) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@deltfilter={0x88, 0x2d, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x9, 0xd}, {0x8, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x24}, @TCA_ROUTE4_TO={0x8, 0x2, 0xa8}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xffff}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x29}}, @TCA_RATE={0x6, 0x5, {0xb1, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88}}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xffffffffffffff88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000100)={&(0x7f0000000040)=0xcb7, 0x3ff, 0x0, &(0x7f00000000c0)}) socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) vmsplice(r5, &(0x7f00000003c0), 0x0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000"], 0x4c}}, 0x0) 529.566171ms ago: executing program 3 (id=10436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="ab6bb2bd2f0be58021556edde0ab811f86d60022d200eda6e579221faaf6381d41dcefbf3c9423d4e13c4e4d9a926225805ac40dfe3c5ac9833ec42c7a7a68c4b575f01b8c1c04168a5e6fa74f4328218e0db4f506b32aa4bbb569e20596587e3e4258be4724ba39177a6e2504b586ddaf487e1e3f9b32f99db67442d8d6358080f2e8e501a09d69c7b1f2cba678472f5ae91bc68f4df1e3be5f61", @ANYRES16=r1, @ANYBLOB="01000000000000000000140000001c0007800c00030000000000000000000c0004000000000000000000"], 0x30}}, 0x0) 486.131596ms ago: executing program 1 (id=10437): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x4040) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) clock_gettime(0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000002, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socket$inet(0x2, 0x3, 0x6) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) 319.100559ms ago: executing program 3 (id=10438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000000000000000000000000000002b794a8c16a2fcb7f549d4e5bc276e2a078a6f453ff9d21f9ddeaea5afe8716260801999fb9fda3366062f7b49de173808bca9d43dc2e86c9dc3beb3ca2f57af4dc88db2f1a53b87aea3518ccdeda6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x30}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac0f978f5442ed9419a86be9817675d67f40000000", 0x29}, {&(0x7f0000000140)="7c0004062f0000f9000000b661", 0xd}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x20008040) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd7000000000000800010000000000080008"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x80, 0xfffffff7, 0x0, @remote, @private0, 0x20, 0x7800, 0x7, 0x40000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYRES16=r11], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94) 223.270594ms ago: executing program 1 (id=10439): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, 0x0, 0x4) 222.477397ms ago: executing program 0 (id=10440): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) 127.933643ms ago: executing program 2 (id=10441): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)={@align=0x8001, {0x4, 0x0, 0x6, 0x7fff}}, 0x4, 0x0, 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0x70, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x9, 0x7, 0x7, 0x8, 0x80, 0x2, 0xd5}, &(0x7f00000002c0)=0x9c) 102.357684ms ago: executing program 1 (id=10442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x80, 0x40, 0xffffff73, 0xaa2, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x1c, 0xbc, 0x0, 0x7, [0x80000000, 0xff, 0x5, 0x8, 0x3, 0x8]}, @ssrr={0x89, 0xb, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xcd, [@multicast1]}]}}}}}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x13, 0x6, 0x4, 0x61, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x8000, 0x8, 0x6, 0x5}}) getpeername$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0, 0x7}, {0xfff1, 0x4}, {0x0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000e00)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) 0s ago: executing program 0 (id=10443): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) clock_gettime(0x8, &(0x7f0000000280)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffffff, 0x20}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x789, 0x0, 0x0, 0x9, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x880) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x8000006, 0x6, 0x2}, 0x14) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x1d, @multicast2, 0x4e22, 0x0, 'dh\x00', 0x8, 0x800, 0x6d}, 0x2c) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@local, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): T6415] bond9: entered promiscuous mode [ 1075.562801][ T6415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1075.636000][ T6429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1075.658104][ T6429] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1075.676811][ T6429] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1075.696998][ T6429] bond9: (slave vcan0): making interface the new active one [ 1075.712234][ T6429] vcan0: entered promiscuous mode [ 1075.724557][ T6429] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 1075.741486][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.954843][ T6321] team0: Port device team_slave_0 added [ 1075.991038][ T6321] team0: Port device team_slave_1 added [ 1076.048596][ T6444] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 1076.067115][ T6444] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 1076.241796][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.249765][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.277961][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.317458][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.341779][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.403040][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.514128][ T6321] hsr_slave_0: entered promiscuous mode [ 1076.524326][ T6321] hsr_slave_1: entered promiscuous mode [ 1076.530941][ T6321] debugfs: 'hsr0' already exists in 'hsr' [ 1076.537554][ T6321] Cannot create hsr debugfs directory [ 1076.763102][ T6495] __nla_validate_parse: 7 callbacks suppressed [ 1076.763125][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9034'. [ 1076.804565][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9033'. [ 1076.838095][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9032'. [ 1076.859781][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9033'. [ 1076.862641][ T6491] macvtap2: entered promiscuous mode [ 1076.898072][ T6491] macvtap2: entered allmulticast mode [ 1076.903679][ T6491] bond0: entered allmulticast mode [ 1076.909021][ T6491] bond_slave_0: entered allmulticast mode [ 1076.916385][ T6491] bond_slave_1: entered allmulticast mode [ 1076.929359][ T6491] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1076.974848][ T6499] bond0: left allmulticast mode [ 1076.980004][ T6499] bond_slave_0: left allmulticast mode [ 1076.989714][ T6499] bond_slave_1: left allmulticast mode [ 1077.362445][T20948] Bluetooth: hci4: command tx timeout [ 1077.531739][ T6532] netlink: 'syz.4.9044': attribute type 1 has an invalid length. [ 1077.576727][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1077.591863][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9044'. [ 1077.630562][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1078.302400][ T6321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1078.361017][ T6321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.392078][ T6321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1078.417735][ T6321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.428475][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1078.442898][ T6321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1078.466963][ T6321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.484854][ T6321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1078.509918][ T6321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.730064][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.797923][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9055'. [ 1078.889697][ T6595] veth11: entered allmulticast mode [ 1078.944178][ T6321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.980100][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.987368][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.024236][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.031515][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.052703][ T6601] nbd3: detected capacity change from 63 to 0 [ 1079.112051][ T6249] block nbd3: NBD_DISCONNECT [ 1079.117537][ T6603] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1079.128362][ T6249] block nbd3: Send disconnect failed -32 [ 1079.143775][ T6603] bond12 (unregistering): Released all slaves [ 1079.288048][T31834] pimreg: left allmulticast mode [ 1079.427628][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1079.443569][T20948] Bluetooth: hci4: command tx timeout [ 1079.548042][T31834] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 1079.786561][T31834] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1079.927082][ T6630] netlink: 'syz.4.9065': attribute type 8 has an invalid length. [ 1080.336632][T31834] bond11 (unregistering): (slave bridge9): Removing an active aggregator [ 1080.348161][T31834] bond11 (unregistering): (slave bridge9): Releasing backup interface [ 1080.356676][T31834] bond11 (unregistering): (slave bridge9): the permanent HWaddr of slave - 86:81:39:19:93:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1080.377118][T31834] bridge9 (unregistering): left promiscuous mode [ 1080.384630][T31834] bridge9 (unregistering): left allmulticast mode [ 1080.446201][T31834] bond11 (unregistering): (slave bridge10): Releasing backup interface [ 1080.455099][T31834] bridge10 (unregistering): left promiscuous mode [ 1080.461550][T31834] bridge10 (unregistering): left allmulticast mode [ 1080.566643][T31834] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 1080.598500][T31834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.608970][T31834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.618556][T31834] bond0 (unregistering): Released all slaves [ 1080.629472][T31834] bond1 (unregistering): Released all slaves [ 1080.645461][T31834] bond2 (unregistering): Released all slaves [ 1080.661507][T31834] bond3 (unregistering): (slave veth3): Releasing active interface [ 1080.670975][T31834] bond3 (unregistering): (slave veth5): Releasing active interface [ 1080.680365][T31834] bond3 (unregistering): Released all slaves [ 1080.703422][T31834] bond4 (unregistering): Released all slaves [ 1080.720790][T31834] bond5 (unregistering): Released all slaves [ 1080.738779][T31834] bond6 (unregistering): Released all slaves [ 1080.753883][T31834] bond7 (unregistering): (slave lo): Releasing backup interface [ 1080.761991][T31834] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1080.773512][T31834] bond7 (unregistering): Released all slaves [ 1080.788287][T31834] bond8 (unregistering): Released all slaves [ 1080.804493][T31834] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1080.814012][T31834] bond9 (unregistering): Released all slaves [ 1080.833929][T31834] bond10 (unregistering): Released all slaves [ 1080.849197][T31834] bond11 (unregistering): Released all slaves [ 1080.863695][T31834] bond12 (unregistering): Released all slaves [ 1080.884482][T31834] bond13 (unregistering): Released all slaves [ 1081.183517][ T6637] netlink: 'syz.4.9068': attribute type 10 has an invalid length. [ 1081.185032][ T6638] netlink: 'syz.0.9067': attribute type 13 has an invalid length. [ 1081.196034][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.235876][ T6637] team0: Port device bond0 added [ 1081.531130][T20948] Bluetooth: hci4: command tx timeout [ 1081.737532][T31834] tipc: Disabling bearer [ 1081.743251][T31834] tipc: Left network mode [ 1082.080535][ T6653] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1082.110240][ T6653] bond10 (unregistering): Released all slaves [ 1082.162083][ T6620] lo speed is unknown, defaulting to 1000 [ 1082.572445][ T6669] IPVS: Error joining to the multicast group [ 1082.691403][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.787229][ T6676] __nla_validate_parse: 5 callbacks suppressed [ 1082.787251][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1082.908081][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1082.924771][ T6678] netlink: 'syz.4.9077': attribute type 8 has an invalid length. [ 1082.946034][ T6321] veth0_vlan: entered promiscuous mode [ 1082.963533][ T6659] lo speed is unknown, defaulting to 1000 [ 1083.335466][ T6321] veth1_vlan: entered promiscuous mode [ 1083.525270][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1083.596838][ T6321] veth0_macvtap: entered promiscuous mode [ 1083.618394][ T6321] veth1_macvtap: entered promiscuous mode [ 1083.709393][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.757551][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.821340][T11014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.856863][T11014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.891171][T11014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.931353][T11014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.298651][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.341450][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.546819][ T6716] tipc: Resetting bearer [ 1084.578369][T11016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.591510][T11016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.614836][ T6714] tipc: Enabling of bearer rejected, already enabled [ 1084.880720][T31834] hsr_slave_0: left promiscuous mode [ 1084.916759][T31834] hsr_slave_1: left promiscuous mode [ 1084.929858][T31834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.949670][T31834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.198039][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1085.214516][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1085.225915][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1085.237067][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1085.246306][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1085.570820][T31834] team0 (unregistering): Port device team_slave_1 removed [ 1085.616514][T31834] team0 (unregistering): Port device team_slave_0 removed [ 1085.750395][ T6738] pim6reg: entered allmulticast mode [ 1085.756422][ T6740] pim6reg: left allmulticast mode [ 1085.834905][ T6712] tipc: Resetting bearer [ 1086.129751][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9096'. [ 1086.207039][ T6722] lo speed is unknown, defaulting to 1000 [ 1086.320670][T31834] IPVS: stop unused estimator thread 0... [ 1086.467969][ T6752] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1086.626701][ T6758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.676848][ T6761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.745080][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1086.869252][ T6737] lo speed is unknown, defaulting to 1000 [ 1086.884029][ T6757] netlink: 'syz.1.9101': attribute type 4 has an invalid length. [ 1086.918481][ T6757] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1087.155452][T11014] tipc: Resetting bearer [ 1087.211009][ T6757] .`: renamed from bond0 [ 1087.357318][ T6773] tipc: Started in network mode [ 1087.365699][ T6773] tipc: Node identity d23f5ed32d39, cluster identity 4711 [ 1087.372808][T20948] Bluetooth: hci2: command tx timeout [ 1087.401137][ T6773] tipc: Enabled bearer , priority 0 [ 1087.425175][ T6780] syzkaller0: entered promiscuous mode [ 1087.443178][ T6780] syzkaller0: entered allmulticast mode [ 1087.528318][ T6767] tipc: Resetting bearer [ 1087.564627][ T6767] tipc: Disabling bearer [ 1087.647884][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9105'. [ 1087.673664][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9105'. [ 1087.828045][ T6802] netlink: 'syz.1.9106': attribute type 1 has an invalid length. [ 1088.011466][ T6809] bond0: (slave bridge4): making interface the new active one [ 1088.036652][ T6809] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 1088.151167][ T6811] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1088.256570][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 1088.547764][T31834] veth0_to_bond: left allmulticast mode [ 1088.567702][T31834] veth0_to_bond: left promiscuous mode [ 1088.582440][T31834] bridge6: port 2(veth0_to_bond) entered disabled state [ 1088.603898][T31834] veth11: left allmulticast mode [ 1088.621649][T31834] veth11: left promiscuous mode [ 1088.634640][T31834] bridge6: port 1(veth11) entered disabled state [ 1088.662432][T31834] dvmrp0: left allmulticast mode [ 1088.854225][T31834] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1089.246509][T31834] team0: Port device bond0 removed [ 1089.252877][T31834] bond0 (unregistering): Released all slaves [ 1089.265165][T31834] bond1 (unregistering): Released all slaves [ 1089.281859][T31834] bond2 (unregistering): Released all slaves [ 1089.304952][T31834] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 1089.313493][T31834] wireguard0: left promiscuous mode [ 1089.320156][T31834] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 1089.329424][T31834] bond3 (unregistering): Released all slaves [ 1089.346428][T31834] bond4 (unregistering): Released all slaves [ 1089.361892][T31834] bond5 (unregistering): Released all slaves [ 1089.377614][T31834] bond6 (unregistering): Released all slaves [ 1089.401282][T31834] bond7 (unregistering): (slave veth9): Releasing active interface [ 1089.410158][T31834] bond7 (unregistering): Released all slaves [ 1089.426408][T31834] bond8 (unregistering): Released all slaves [ 1089.440961][T31834] bond9 (unregistering): Released all slaves [ 1089.447361][T20948] Bluetooth: hci2: command tx timeout [ 1089.468171][T31834] bond10 (unregistering): Released all slaves [ 1089.484059][T31834] bond11 (unregistering): Released all slaves [ 1089.545547][ T6838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1089.686632][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.695854][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.703673][ T6737] bridge_slave_0: entered allmulticast mode [ 1089.711885][ T6737] bridge_slave_0: entered promiscuous mode [ 1089.732348][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.739625][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.747365][ T6737] bridge_slave_1: entered allmulticast mode [ 1089.758654][ T6737] bridge_slave_1: entered promiscuous mode [ 1089.880561][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.925337][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.988007][T31834] tipc: Left network mode [ 1090.028432][ T6869] netlink: 'syz.2.9118': attribute type 8 has an invalid length. [ 1090.057396][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9118'. [ 1090.078223][ T6858] tipc: Enabled bearer , priority 0 [ 1090.121565][ T6737] team0: Port device team_slave_0 added [ 1090.167707][ T6737] team0: Port device team_slave_1 added [ 1090.469073][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.495688][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.590380][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.664852][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.687832][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.726468][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9125'. [ 1090.733700][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.827742][ T6905] netlink: 'syz.1.9128': attribute type 1 has an invalid length. [ 1090.924665][ T6906] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1090.992775][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1091.081858][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1091.116529][ T6895] bond15: (slave vxcan9): The slave device specified does not support setting the MAC address [ 1091.136604][ T6895] bond15: (slave vxcan9): Error -95 calling set_mac_address [ 1091.223761][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9130'. [ 1091.254452][ T6910] bond15: (slave bridge5): Enslaving as an active interface with a down link [ 1091.301310][ T6905] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1091.500489][ T6737] hsr_slave_0: entered promiscuous mode [ 1091.522364][T20948] Bluetooth: hci2: command tx timeout [ 1091.530784][ T6737] hsr_slave_1: entered promiscuous mode [ 1091.549659][ T6737] debugfs: 'hsr0' already exists in 'hsr' [ 1091.575300][ T6737] Cannot create hsr debugfs directory [ 1091.694278][ T6936] block nbd3: not configured, cannot reconfigure [ 1091.718091][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1092.005684][ T6951] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9139'. [ 1092.487743][ T6960] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9141'. [ 1092.560762][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1092.733121][ T6939] lo speed is unknown, defaulting to 1000 [ 1093.039185][ T6980] sctp: [Deprecated]: syz.1.9145 (pid 6980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.039185][ T6980] Use struct sctp_sack_info instead [ 1093.239640][ T6988] block nbd3: not configured, cannot reconfigure [ 1093.606634][T20948] Bluetooth: hci2: command tx timeout [ 1094.192672][ T7015] tipc: Resetting bearer [ 1094.212758][T31834] hsr_slave_0: left promiscuous mode [ 1094.224685][T31834] hsr_slave_1: left promiscuous mode [ 1094.948094][ T6562] smbdirect: ib_dev[syz2] removed [ 1094.969956][ T7015] __nla_validate_parse: 33 callbacks suppressed [ 1094.969977][ T7015] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9153'. [ 1095.005722][ T7014] tipc: Resetting bearer [ 1095.143719][ T7039] nbd0: detected capacity change from 137438953472 to 0 [ 1095.223717][ T6249] block nbd0: NBD_DISCONNECT [ 1095.238731][ T6249] block nbd0: Send disconnect failed -32 [ 1095.244817][T11014] tipc: Resetting bearer [ 1095.250296][ T6249] block nbd0: shutting down sockets [ 1095.457853][ T6737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1095.537279][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1095.565312][ T6737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1095.597136][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1095.636274][ T6737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1095.669359][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1095.695765][ T6737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1095.729646][ T6737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.796504][ T7057] netlink: 'syz.0.9165': attribute type 1 has an invalid length. [ 1095.904335][ T7057] bond10: entered promiscuous mode [ 1095.943827][ T7057] bond10: entered allmulticast mode [ 1095.984434][ T7057] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1096.138589][T31834] IPVS: stop unused estimator thread 0... [ 1096.153955][ T7080] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1096.263545][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9169'. [ 1096.386822][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.471496][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.536379][ T7090] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9168'. [ 1096.564884][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.573885][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.697149][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.704412][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.741518][ T7099] xt_TCPMSS: Only works on TCP SYN packets [ 1096.756401][ T7097] mac80211_hwsim hwsim62 syzkaller0: Caught tx_queue_len zero misconfig [ 1097.026910][ T7108] syzkaller0: entered promiscuous mode [ 1097.052084][ T7108] syzkaller0: entered allmulticast mode [ 1097.140154][ T7108] tipc: Started in network mode [ 1097.166640][ T7108] tipc: Node identity d247a9aa376e, cluster identity 4711 [ 1097.209139][ T7108] tipc: Enabled bearer , priority 0 [ 1097.307654][ T7108] tipc: Resetting bearer [ 1097.365467][ T7106] tipc: Resetting bearer [ 1097.435740][ T7106] tipc: Disabling bearer [ 1097.734886][ T7144] Cannot find add_set index 3 as target [ 1097.750429][ T7143] Cannot find add_set index 3 as target [ 1097.785162][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.894035][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1097.913241][ T7151] netlink: 'syz.2.9183': attribute type 8 has an invalid length. [ 1098.009943][ T7156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9185'. [ 1098.038521][ T7154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1098.211655][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1098.499178][ T7182] tipc: Resetting bearer [ 1098.536794][ T7182] tipc: Enabling of bearer rejected, already enabled [ 1098.585209][ T7182] tipc: Resetting bearer [ 1098.651105][ T7179] tipc: Resetting bearer [ 1098.690717][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1098.715517][ T7184] netlink: 35 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1098.763205][ T7190] sctp: [Deprecated]: syz.2.9191 (pid 7190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1098.763205][ T7190] Use struct sctp_sack_info instead [ 1098.823727][ T7184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.910118][ T6737] veth0_vlan: entered promiscuous mode [ 1099.001529][ T6737] veth1_vlan: entered promiscuous mode [ 1099.075098][ T6737] veth0_macvtap: entered promiscuous mode [ 1099.124748][ T6737] veth1_macvtap: entered promiscuous mode [ 1099.163830][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.190286][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.260280][T31834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.281672][T31834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.321739][T31834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.341040][T31834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.361930][ T6565] tipc: Resetting bearer [ 1099.415059][ T7201] netlink: 'syz.1.9195': attribute type 8 has an invalid length. [ 1099.548766][ T7207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1099.704912][T11014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.727210][T11014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.964809][ T6565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.988117][ T6565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.000365][ T7219] tipc: Resetting bearer [ 1100.604971][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1100.617555][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1100.629134][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1100.638862][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1100.655143][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.753542][ T7240] vlan2: entered allmulticast mode [ 1100.765268][ T7240] bridge0: port 3(vlan2) entered blocking state [ 1100.811726][ T7255] netlink: 'syz.2.9209': attribute type 8 has an invalid length. [ 1100.832472][ T7240] bridge0: port 3(vlan2) entered disabled state [ 1100.838549][ T7258] __nla_validate_parse: 8 callbacks suppressed [ 1100.838568][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1100.878588][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1100.887704][ T7240] vlan2: entered promiscuous mode [ 1100.943887][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1101.019972][ T7247] tipc: Resetting bearer [ 1101.266434][ T7267] xt_hashlimit: size too large, truncated to 1048576 [ 1101.347283][T11014] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.496980][T11014] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.668472][T11014] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.722620][T20948] Bluetooth: hci5: command tx timeout [ 1103.136709][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.144500][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.216249][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.229200][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.333741][T11014] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.361214][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1103.416710][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.426069][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.480089][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.521454][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.609437][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 1103.715132][ T7321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9228'. [ 1103.728038][ T7321] netlink: 'syz.4.9228': attribute type 1 has an invalid length. [ 1103.806534][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9228'. [ 1104.047999][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.055556][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.064806][ T7247] bridge_slave_0: entered allmulticast mode [ 1104.081585][ T7247] bridge_slave_0: entered promiscuous mode [ 1104.110814][T11014] bridge_slave_1: left allmulticast mode [ 1104.116807][T11014] bridge_slave_1: left promiscuous mode [ 1104.124648][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.143605][T11014] bridge_slave_0: left allmulticast mode [ 1104.150429][T11014] bridge_slave_0: left promiscuous mode [ 1104.156699][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.157115][ T7337] netlink: 'syz.4.9231': attribute type 1 has an invalid length. [ 1104.585071][T11014] veth5: left allmulticast mode [ 1104.590017][T11014] veth5: left promiscuous mode [ 1104.595075][T11014] bridge4: port 1(veth5) entered disabled state [ 1104.611222][T11014] bond4: left allmulticast mode [ 1104.617854][T11014] bond4: left promiscuous mode [ 1104.626062][T11014] bridge9: port 1(bond4) entered disabled state [ 1104.640579][T11014] dvmrp0: left allmulticast mode [ 1104.646028][T11014] pimreg9: left allmulticast mode [ 1104.810525][T20948] Bluetooth: hci5: command tx timeout [ 1104.915813][T11014] bond6 (unregistering): (slave erspan1): Releasing active interface [ 1104.924329][T11014] erspan1 (unregistering): left promiscuous mode [ 1104.985737][T11014] batman_adv: batadv0: Removing interface: gretap2 [ 1105.276575][T11014] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1105.720034][T11014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.729095][T11014] bond_slave_0: left promiscuous mode [ 1105.737279][T11014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.746969][T11014] bond_slave_1: left promiscuous mode [ 1105.752922][T11014] bond0 (unregistering): Released all slaves [ 1105.765679][T11014] bond1 (unregistering): Released all slaves [ 1105.780689][T11014] bond2 (unregistering): Released all slaves [ 1105.795397][T11014] bond3 (unregistering): Released all slaves [ 1105.809424][T11014] bond4 (unregistering): Released all slaves [ 1105.828334][T11014] bond5 (unregistering): Released all slaves [ 1105.854019][T11014] bond6 (unregistering): Released all slaves [ 1105.869645][T11014] bond7 (unregistering): Released all slaves [ 1105.885593][T11014] bond8 (unregistering): Released all slaves [ 1105.900919][T11014] bond9 (unregistering): (slave vcan0): Releasing backup interface [ 1105.908966][T11014] vcan0: left promiscuous mode [ 1105.916312][T11014] bond9 (unregistering): Released all slaves [ 1105.937046][T11014] bond10 (unregistering): Released all slaves [ 1105.961788][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.970563][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.977977][ T7247] bridge_slave_1: entered allmulticast mode [ 1105.988450][ T7247] bridge_slave_1: entered promiscuous mode [ 1106.397230][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.427348][T11014] 5nè‹Ò: left promiscuous mode [ 1106.509177][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.551105][T11014] tipc: Disabling bearer [ 1106.560043][T11014] tipc: Disabling bearer [ 1106.569213][T11014] tipc: Left network mode [ 1106.670206][ T7367] tipc: Started in network mode [ 1106.690019][ T7367] tipc: Node identity 2aac889dd013, cluster identity 4711 [ 1106.705336][ T7367] tipc: Enabled bearer , priority 0 [ 1106.795343][ T7369] syzkaller0: entered promiscuous mode [ 1106.815081][ T7369] syzkaller0: entered allmulticast mode [ 1106.895169][T20948] Bluetooth: hci5: command tx timeout [ 1107.069292][ T7377] tipc: Resetting bearer [ 1107.098078][ T7247] team0: Port device team_slave_0 added [ 1107.131566][ T7356] tipc: Resetting bearer [ 1107.241966][ T7356] tipc: Disabling bearer [ 1107.369163][ T7247] team0: Port device team_slave_1 added [ 1107.644454][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.676670][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.766451][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.795956][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.811514][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.891414][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.987441][ T7410] netlink: 'syz.2.9248': attribute type 1 has an invalid length. [ 1108.011382][ T7410] netlink: 'syz.2.9248': attribute type 83 has an invalid length. [ 1108.050255][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1108.314776][ T7247] hsr_slave_0: entered promiscuous mode [ 1108.321782][ T7247] hsr_slave_1: entered promiscuous mode [ 1108.332972][ T7247] debugfs: 'hsr0' already exists in 'hsr' [ 1108.338840][ T7247] Cannot create hsr debugfs directory [ 1108.476319][ T7436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.899824][T11014] veth1_to_team: left promiscuous mode [ 1108.914249][T11014] veth1: left promiscuous mode [ 1108.931213][T11014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.952744][T11014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.967295][T11014] batman_adv: batadv0: Interface deactivated: dummy0 [ 1108.974730][T20948] Bluetooth: hci5: command tx timeout [ 1108.993936][T11014] batman_adv: batadv0: Removing interface: dummy0 [ 1109.024341][T11014] batman_adv: batadv0: Removing interface: ipvlan0 [ 1109.051185][ T7445] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9257'. [ 1109.584114][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9258'. [ 1110.949890][T11014] IPVS: stop unused estimator thread 0... [ 1111.550056][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9264'. [ 1111.940868][ T7509] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1112.036142][ T7509] ip_vti0: entered promiscuous mode [ 1112.068072][ T7509] ip_vti0: entered allmulticast mode [ 1112.139077][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1112.156725][ T7510] netlink: 'syz.2.9266': attribute type 8 has an invalid length. [ 1112.475335][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9268'. [ 1112.583139][ T7247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1112.619435][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.647456][ T7247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1112.671528][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.694845][ T7534] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1112.707706][ T7529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1112.765482][ T7247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1112.802006][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1112.825587][ T7247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1112.866976][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.236168][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9274'. [ 1113.301533][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.361610][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.405180][T31834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.412451][T31834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.456771][T31834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.464021][T31834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.598681][ T7581] netlink: 'syz.4.9278': attribute type 1 has an invalid length. [ 1113.789753][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9279'. [ 1113.831189][ T7587] netlink: 'syz.2.9279': attribute type 8 has an invalid length. [ 1114.000486][ T7600] netlink: 'syz.4.9280': attribute type 12 has an invalid length. [ 1114.171593][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1114.377397][ T7622] netlink: 'syz.3.9286': attribute type 1 has an invalid length. [ 1114.398760][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.413196][ T7619] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1114.474114][ T7622] bond1: entered promiscuous mode [ 1114.483111][ T7622] bond1: entered allmulticast mode [ 1114.488759][ T7622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1114.490638][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1114.540214][ T7247] veth0_vlan: entered promiscuous mode [ 1114.554621][ T7247] veth1_vlan: entered promiscuous mode [ 1114.631237][ T7629] erspan1: entered allmulticast mode [ 1114.721967][ T7629] bond1: (slave erspan1): making interface the new active one [ 1114.753082][ T7629] erspan1: entered promiscuous mode [ 1114.784891][ T7629] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1114.834412][ T7646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9290'. [ 1114.913506][ T7648] sctp: [Deprecated]: syz.4.9290 (pid 7648) Use of int in maxseg socket option. [ 1114.913506][ T7648] Use struct sctp_assoc_value instead [ 1114.943501][ T7646] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1115.349205][ T7247] veth0_macvtap: entered promiscuous mode [ 1115.405231][ T7247] veth1_macvtap: entered promiscuous mode [ 1115.588505][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.622676][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9293'. [ 1115.661401][ T7669] netlink: 'syz.2.9293': attribute type 8 has an invalid length. [ 1115.699777][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.790693][ T7679] netlink: 'syz.4.9294': attribute type 1 has an invalid length. [ 1115.960528][ T7679] bond1: entered promiscuous mode [ 1115.988136][ T7679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.008665][ T6564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.068769][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.086245][ T7686] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1116.101621][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.108820][ T7686] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1116.114528][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1116.133979][ T7686] bond1: (slave gre1): making interface the new active one [ 1116.141488][ T7686] gre1: entered promiscuous mode [ 1116.148998][ T7686] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1116.162325][ T6564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.230653][ T6564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.255518][ T6564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.714970][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.739273][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.975539][ T7705] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1117.022454][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1117.064344][ T7703] xt_hashlimit: size too large, truncated to 1048576 [ 1117.144767][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1117.269862][ T6562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.292913][ T6562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.721739][ T7714] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1118.120350][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1118.137214][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1118.148692][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1118.167617][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1118.177672][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1119.139975][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9310'. [ 1119.430052][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1119.494489][ T7785] ip6gretap0: entered promiscuous mode [ 1119.519248][ T7785] macsec1: entered promiscuous mode [ 1119.551155][ T7785] macsec1: entered allmulticast mode [ 1119.575245][ T7785] ip6gretap0: entered allmulticast mode [ 1119.600488][ T7785] ip6gretap0: left allmulticast mode [ 1119.621444][ T7785] ip6gretap0: left promiscuous mode [ 1119.750102][ T7803] netlink: 'syz.3.9316': attribute type 30 has an invalid length. [ 1119.810684][ T7808] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1119.810718][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1119.845836][ T7808] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1120.249216][ T50] Bluetooth: hci1: command tx timeout [ 1120.389020][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9320'. [ 1120.437193][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 1120.541903][ T7835] mac80211_hwsim hwsim91 wlan0: Caught tx_queue_len zero misconfig [ 1120.645687][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.646464][ T7842] block nbd0: not configured, cannot reconfigure [ 1120.653856][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.667805][ T7732] bridge_slave_0: entered allmulticast mode [ 1120.676309][ T7732] bridge_slave_0: entered promiscuous mode [ 1120.686826][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.694518][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.701819][ T7732] bridge_slave_1: entered allmulticast mode [ 1120.710497][ T7732] bridge_slave_1: entered promiscuous mode [ 1120.759725][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.773454][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.827635][ T7848] netlink: 'syz.2.9325': attribute type 1 has an invalid length. [ 1120.841161][ T7732] team0: Port device team_slave_0 added [ 1120.863725][ T7732] team0: Port device team_slave_1 added [ 1120.922500][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9325'. [ 1120.982564][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.996468][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.048887][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.074118][ T7854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.119169][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.132214][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1121.140356][ C1] lec:lec_tx_timeout: lec0 [ 1121.149350][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.215610][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.307736][ T7858] nbd: must specify a device to reconfigure [ 1121.402634][ T7732] hsr_slave_0: entered promiscuous mode [ 1121.435404][ T7732] hsr_slave_1: entered promiscuous mode [ 1121.465141][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 1121.489932][ T7732] Cannot create hsr debugfs directory [ 1121.738565][ T7869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1121.792010][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1122.073113][ T7887] veth0_macvtap: entered allmulticast mode [ 1122.087925][ T7886] netlink: 'syz.0.9333': attribute type 4 has an invalid length. [ 1122.332855][ T50] Bluetooth: hci1: command tx timeout [ 1122.627503][ T7904] netlink: 'syz.0.9336': attribute type 13 has an invalid length. [ 1122.664863][ T7904] netlink: 'syz.0.9336': attribute type 17 has an invalid length. [ 1122.897171][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.905391][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.921696][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9339'. [ 1123.294058][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.338461][ T7899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.007284][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.025486][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.055874][ T7904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.245972][T11014] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.275706][T11014] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.394381][T11014] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.412540][ T50] Bluetooth: hci1: command tx timeout [ 1124.427564][T11014] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.114052][ T7981] netlink: 'syz.3.9347': attribute type 1 has an invalid length. [ 1125.245062][ T7981] bond3: entered promiscuous mode [ 1125.268714][ T7981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1125.477827][ T7986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1125.507776][ T7986] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1125.547444][ T7986] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1125.627912][ T7986] bond3: (slave wireguard0): making interface the new active one [ 1125.652371][ T7986] wireguard0: entered promiscuous mode [ 1125.661886][ T7986] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1125.823791][ T7995] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 1126.093098][ T8005] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1126.104091][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1126.346969][ T7732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1126.366184][ T7732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.412298][ T7732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1126.427563][ T7732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.470489][ T7732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1126.487091][ T50] Bluetooth: hci1: command tx timeout [ 1126.499013][ T7732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.511439][ T7732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1126.522979][ T7732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.532914][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1126.546728][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9357'. [ 1126.570933][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1126.596973][ T8017] netlink: 'syz.2.9355': attribute type 6 has an invalid length. [ 1126.729668][ T8016] netlink: 'syz.3.9357': attribute type 2 has an invalid length. [ 1126.752815][ T8016] netlink: 'syz.3.9357': attribute type 2 has an invalid length. [ 1126.776555][ T8016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9357'. [ 1126.802642][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9357'. [ 1126.828654][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9357'. [ 1126.865174][ T6563] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.879503][ T6563] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.895343][ T6563] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1126.939949][ T6563] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.125053][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.171305][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.212184][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.219437][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.276672][T31834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.283943][T31834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.307539][ T8042] netlink: 'syz.4.9361': attribute type 4 has an invalid length. [ 1127.553849][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1127.572063][ T8053] netlink: 'syz.0.9365': attribute type 13 has an invalid length. [ 1127.711547][ T8059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1127.906961][ T8067] "syz.3.9366" (8067) uses obsolete ecb(arc4) skcipher [ 1128.035755][ T8042] netlink: 'syz.4.9361': attribute type 4 has an invalid length. [ 1128.087105][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.265326][ T7732] veth0_vlan: entered promiscuous mode [ 1128.304750][ T7732] veth1_vlan: entered promiscuous mode [ 1128.388085][ T7732] veth0_macvtap: entered promiscuous mode [ 1128.407858][ T7732] veth1_macvtap: entered promiscuous mode [ 1128.479926][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.533682][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.610317][ T6564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.653021][ T6564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.721111][ T6564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.733298][ T6564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.769594][ T8092] block nbd0: not configured, cannot reconfigure [ 1129.068917][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.112212][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.250653][ T8120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1129.274771][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.372340][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.530565][ T8126] gre1: entered allmulticast mode [ 1129.724892][ T8137] nbd: must specify a device to reconfigure [ 1130.148889][ T8157] syzkaller1: entered promiscuous mode [ 1130.167480][ T8157] syzkaller1: entered allmulticast mode [ 1130.641561][ T8181] pimreg9: entered allmulticast mode [ 1131.141813][ T8204] __nla_validate_parse: 5 callbacks suppressed [ 1131.141836][ T8204] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9408'. [ 1131.584924][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1131.611429][ T8214] netlink: 'syz.4.9411': attribute type 8 has an invalid length. [ 1131.848241][ T8225] ip6tnl0: Caught tx_queue_len zero misconfig [ 1131.943880][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9415'. [ 1132.137485][ T8237] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1132.451552][T13131] lec:lec_start_xmit: lec0:No lecd attached [ 1132.564645][ T8259] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 1132.676217][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1132.872680][ T8261] ip_vti0: left allmulticast mode [ 1133.249598][ T8286] nbd: couldn't find a device at index 4 [ 1133.329339][ T8279] netlink: 'syz.1.9427': attribute type 8 has an invalid length. [ 1133.446805][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9430'. [ 1133.560688][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9432'. [ 1133.605654][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9432'. [ 1134.090775][ T8322] nbd: couldn't find a device at index 4 [ 1134.148762][ T8316] netlink: 'syz.0.9443': attribute type 1 has an invalid length. [ 1134.235337][ T8316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1134.294165][ T8319] syzkaller0: entered promiscuous mode [ 1134.304078][ T8319] syzkaller0: entered allmulticast mode [ 1134.420988][ T8345] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1134.433018][ T8316] vlan2: entered allmulticast mode [ 1134.454843][ T8316] bond2: entered allmulticast mode [ 1134.516801][ T8334] bond2: (slave geneve2): making interface the new active one [ 1134.535487][ T8334] geneve2: entered allmulticast mode [ 1134.561496][ T8353] netlink: 'syz.4.9445': attribute type 1 has an invalid length. [ 1134.580365][ T8353] netlink: 'syz.4.9445': attribute type 1 has an invalid length. [ 1134.590735][ T8334] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1134.649062][ T8348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1134.669334][T31834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.756051][T31834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.773011][T31834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.911173][T31834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.103435][ T8361] netlink: 'syz.2.9451': attribute type 8 has an invalid length. [ 1135.372555][ T8378] nbd: couldn't find a device at index 4 [ 1135.399234][ T8370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.603194][ T8386] Cannot find set identified by id 0 to match [ 1135.804894][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9461'. [ 1135.866702][ T8400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 1136.188643][ T8404] netlink: 'syz.1.9462': attribute type 1 has an invalid length. [ 1136.199199][ T8404] netlink: 'syz.1.9462': attribute type 1 has an invalid length. [ 1136.295918][ T8418] netlink: 'syz.2.9465': attribute type 7 has an invalid length. [ 1136.410484][ T8425] nbd: couldn't find a device at index 4 [ 1136.442587][ T8423] netlink: 'syz.0.9466': attribute type 8 has an invalid length. [ 1136.478221][ T8427] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9468'. [ 1136.504429][ T8427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9468'. [ 1136.529808][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1136.643193][ T8436] syzkaller0: entered promiscuous mode [ 1136.649136][ T8436] syzkaller0: entered allmulticast mode [ 1136.836713][ T8445] validate_nla: 1 callbacks suppressed [ 1136.836733][ T8445] netlink: 'syz.1.9474': attribute type 14 has an invalid length. [ 1137.176484][ T8466] block nbd3: not configured, cannot reconfigure [ 1137.381021][ T8272] IPVS: starting estimator thread 0... [ 1137.388384][ T8476] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20000 [ 1137.399764][ T8461] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 1137.429668][ T8461] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 1137.483092][ T8478] IPVS: using max 24 ests per chain, 57600 per kthread [ 1137.705671][ T8493] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1138.082236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 1138.090405][ C1] lec:lec_tx_timeout: lec0 [ 1138.182331][ T8513] block nbd2: not configured, cannot reconfigure [ 1138.251384][ T8515] netlink: 'syz.3.9494': attribute type 11 has an invalid length. [ 1138.746432][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9503'. [ 1139.097989][ T8553] netlink: 'syz.2.9506': attribute type 1 has an invalid length. [ 1139.117891][ T8553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.315199][ T8566] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9509'. [ 1139.666676][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1139.676412][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1139.691915][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1139.719375][ T6563] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.729377][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1139.741115][ T6563] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.752765][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9511'. [ 1139.775805][ T6563] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.791762][ T6563] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.820437][ T8578] netlink: 'syz.4.9512': attribute type 39 has an invalid length. [ 1139.958223][ T8580] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1140.598254][ T8597] netlink: 'syz.0.9517': attribute type 1 has an invalid length. [ 1141.313252][ T8625] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1141.413015][ T8627] delete_channel: no stack [ 1141.970147][ T8638] __nla_validate_parse: 5 callbacks suppressed [ 1141.970169][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9522'. [ 1141.994481][ T8638] nbd: nbd64 already in use [ 1142.366090][ T8652] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 1142.378384][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9528'. [ 1142.394965][ T7947] udevd[7947]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1142.419810][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9528'. [ 1142.934414][ T8684] netlink: 'syz.4.9532': attribute type 21 has an invalid length. [ 1143.128127][ T8691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.166265][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9534'. [ 1143.278948][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9535'. [ 1143.405974][ T8705] syzkaller0: entered promiscuous mode [ 1143.425013][ T8705] syzkaller0: entered allmulticast mode [ 1143.441491][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9536'. [ 1143.468502][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9536'. [ 1144.256962][ T8739] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1144.305238][ T8734] tipc: Enabled bearer , priority 0 [ 1144.481279][ T8760] netlink: 'syz.0.9547': attribute type 1 has an invalid length. [ 1144.505612][ T8731] tipc: Disabling bearer [ 1145.305943][ T8795] netlink: 'syz.1.9551': attribute type 1 has an invalid length. [ 1145.439706][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9551'. [ 1145.507379][ T8795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1145.621837][ T8804] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1145.654459][ T8804] bond1: (slave batadv1): making interface the new active one [ 1145.679913][ T8804] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1145.795953][ T8810] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1145.837923][ T8810] bond1 (unregistering): Released all slaves [ 1145.881966][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9556'. [ 1146.066078][ T8832] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9558'. [ 1146.273421][ T8838] tipc: Started in network mode [ 1146.278366][ T8838] tipc: Node identity 8aee5960ea3e, cluster identity 4711 [ 1146.299146][ T8838] tipc: Enabled bearer , priority 0 [ 1146.386876][ T8837] tipc: Disabling bearer [ 1146.665460][ T8273] IPVS: starting estimator thread 0... [ 1146.782521][ T8861] IPVS: using max 28 ests per chain, 67200 per kthread [ 1147.007453][ T8872] veth2: entered allmulticast mode [ 1147.039644][ T8881] __nla_validate_parse: 1 callbacks suppressed [ 1147.039664][ T8881] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9568'. [ 1147.058939][ T8872] veth3: entered allmulticast mode [ 1147.069976][ T8877] tipc: New replicast peer: 255.255.255.255 [ 1147.077466][ T8877] tipc: Enabled bearer , priority 10 [ 1147.093929][ T8881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.105767][ T8881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.121944][ T8881] bond0 (unregistering): Released all slaves [ 1147.140972][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9569'. [ 1147.302468][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9574'. [ 1147.335576][ T8892] syzkaller0: entered promiscuous mode [ 1147.347785][ T8892] syzkaller0: entered allmulticast mode [ 1147.438390][ T8894] netlink: 'syz.0.9573': attribute type 1 has an invalid length. [ 1147.450847][ T8894] netlink: 'syz.0.9573': attribute type 1 has an invalid length. [ 1147.588307][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9577'. [ 1147.635635][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1148.204021][ T7975] tipc: Node number set to 4206856349 [ 1148.573803][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1148.641128][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1148.697190][ T8938] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1148.826288][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1148.899387][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1149.073918][ T8953] xt_connbytes: Forcing CT accounting to be enabled [ 1150.102396][ T8979] netlink: 'syz.4.9595': attribute type 1 has an invalid length. [ 1150.133352][ T8979] netlink: 'syz.4.9595': attribute type 1 has an invalid length. [ 1152.125605][ T8995] netlink: 'syz.3.9602': attribute type 4 has an invalid length. [ 1152.178746][ T9002] netlink: 'syz.3.9602': attribute type 4 has an invalid length. [ 1152.511470][ T9009] netlink: 'syz.4.9604': attribute type 30 has an invalid length. [ 1152.521164][ T9012] netlink: 'syz.4.9604': attribute type 30 has an invalid length. [ 1152.533849][ T9011] __nla_validate_parse: 2 callbacks suppressed [ 1152.533870][ T9011] netlink: 160 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1152.753927][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.761539][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.119300][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.156453][ T8995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.671676][ T6564] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.688201][ T6564] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.707521][ T6564] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.756547][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9611'. [ 1153.801337][ T6564] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.952535][ T9042] vlan0: entered promiscuous mode [ 1153.968658][ T9042] geneve1: entered promiscuous mode [ 1153.974607][ T5920] IPVS: starting estimator thread 0... [ 1153.980958][ T9042] vlan0: entered allmulticast mode [ 1153.986680][ T9042] geneve1: entered allmulticast mode [ 1154.006040][ T9055] netlink: 276 bytes leftover after parsing attributes in process `syz.3.9615'. [ 1154.062297][ T9053] IPVS: using max 25 ests per chain, 60000 per kthread [ 1154.078795][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1154.114120][ T9034] netlink: 'syz.1.9609': attribute type 1 has an invalid length. [ 1154.133747][ T9034] netlink: 'syz.1.9609': attribute type 1 has an invalid length. [ 1154.411557][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9619'. [ 1154.477614][ T9072] syzkaller0: entered promiscuous mode [ 1154.504323][ T9072] syzkaller0: entered allmulticast mode [ 1154.581474][ T9076] €Â0: renamed from batadv_slave_1 [ 1154.739165][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9621'. [ 1154.764682][ T9083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1154.877010][ T9085] netlink: 'syz.1.9623': attribute type 3 has an invalid length. [ 1154.888277][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9623'. [ 1155.360803][ T9099] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1155.535917][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9631'. [ 1155.569620][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9631'. [ 1155.588782][ T9115] netlink: 'syz.0.9631': attribute type 18 has an invalid length. [ 1155.706130][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1155.940185][ T9127] team0: Port device team_slave_0 removed [ 1155.982831][ T9129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1156.155248][ T9138] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1156.444452][ T9138] syzkaller1: entered promiscuous mode [ 1156.451871][ T9138] syzkaller1: entered allmulticast mode [ 1156.459724][ T9145] syzkaller0: entered promiscuous mode [ 1156.470087][ T9145] syzkaller0: entered allmulticast mode [ 1157.519220][ T9179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1157.575210][ T9192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.631790][ T9189] macvlan2: entered allmulticast mode [ 1157.642810][ T9189] hsr0: entered allmulticast mode [ 1157.653341][ T9189] hsr_slave_0: entered allmulticast mode [ 1157.660132][ T9189] hsr_slave_1: entered allmulticast mode [ 1157.673908][ T9189] hsr0: entered promiscuous mode [ 1158.089468][ T30] audit: type=1107 audit(1777017905.147:28): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1158.092664][ T9210] __nla_validate_parse: 5 callbacks suppressed [ 1158.092682][ T9210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9656'. [ 1158.340457][ T9213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1158.704807][ T9240] openvswitch: netlink: IPv4 tun info is not correct [ 1158.737149][ T9240] xt_HMARK: proto mask must be zero with L3 mode [ 1158.794941][ T9244] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1158.831885][ T9244] syzkaller1: linktype set to 0 [ 1158.849052][ T9250] syz_tun: entered allmulticast mode [ 1158.992849][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1159.003634][ T9246] syzkaller0: entered promiscuous mode [ 1159.017510][ T9246] syzkaller0: entered allmulticast mode [ 1159.171209][ T9257] FAULT_INJECTION: forcing a failure. [ 1159.171209][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.175863][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1159.194994][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.2.9669 Not tainted syzkaller #0 PREEMPT(full) [ 1159.195024][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1159.195036][ T9257] Call Trace: [ 1159.195044][ T9257] [ 1159.195053][ T9257] dump_stack_lvl+0xe8/0x150 [ 1159.195092][ T9257] should_fail_ex+0x412/0x560 [ 1159.195130][ T9257] _copy_to_user+0x31/0xb0 [ 1159.195156][ T9257] simple_read_from_buffer+0xe1/0x170 [ 1159.195184][ T9257] proc_fail_nth_read+0x1bb/0x230 [ 1159.195211][ T9257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.195247][ T9257] ? rw_verify_area+0x2a6/0x4d0 [ 1159.195272][ T9257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.195297][ T9257] vfs_read+0x20c/0xa70 [ 1159.195328][ T9257] ? __pfx___mutex_lock+0x10/0x10 [ 1159.195361][ T9257] ? __pfx_vfs_read+0x10/0x10 [ 1159.195388][ T9257] ? __fget_files+0x2a/0x420 [ 1159.195415][ T9257] ? __fget_files+0x3a0/0x420 [ 1159.195435][ T9257] ? __fget_files+0x2a/0x420 [ 1159.195467][ T9257] ksys_read+0x150/0x270 [ 1159.195495][ T9257] ? __pfx_ksys_read+0x10/0x10 [ 1159.195529][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.195552][ T9257] do_syscall_64+0x15f/0xf80 [ 1159.195579][ T9257] ? trace_irq_disable+0x3b/0x140 [ 1159.195606][ T9257] ? clear_bhb_loop+0x40/0x90 [ 1159.195631][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.195652][ T9257] RIP: 0033:0x7f6ce095d60e [ 1159.195672][ T9257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.195691][ T9257] RSP: 002b:00007f6ce17f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1159.195714][ T9257] RAX: ffffffffffffffda RBX: 00007f6ce17f96c0 RCX: 00007f6ce095d60e [ 1159.195729][ T9257] RDX: 000000000000000f RSI: 00007f6ce17f90a0 RDI: 0000000000000004 [ 1159.195742][ T9257] RBP: 00007f6ce17f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.195755][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.195768][ T9257] R13: 00007f6ce0c16038 R14: 00007f6ce0c15fa0 R15: 00007fff29e6b778 [ 1159.195802][ T9257] [ 1159.449855][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1159.498714][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1159.507986][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1159.525347][ T9237] syz_tun: left allmulticast mode [ 1159.623790][ T9272] netlink: 404 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1159.633002][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1159.641972][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9675'. [ 1159.784070][ T9276] netlink: 'syz.3.9673': attribute type 21 has an invalid length. [ 1159.836542][ T9278] syzkaller0: entered promiscuous mode [ 1159.866571][ T9278] syzkaller0: entered allmulticast mode [ 1159.888296][ T9285] bond0: (slave bond_slave_1): Releasing backup interface [ 1159.898116][ T9284] macvtap0: entered promiscuous mode [ 1159.920625][ T9283] macvtap0: left promiscuous mode [ 1160.117394][ T9300] netlink: 'syz.0.9681': attribute type 2 has an invalid length. [ 1160.311707][ T9314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1160.367620][ T9325] 8021q: VLANs not supported on lo [ 1160.981255][ T9348] netlink: 'syz.1.9694': attribute type 4 has an invalid length. [ 1161.867733][ T9369] syzkaller0: entered promiscuous mode [ 1161.902703][ T9369] syzkaller0: entered allmulticast mode [ 1162.381401][ T9383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1162.631710][ T9386] netlink: 'syz.2.9705': attribute type 32 has an invalid length. [ 1162.925423][ T9392] sock: sock_set_timeout: `syz.3.9707' (pid 9392) tries to set negative timeout [ 1163.421162][ T9407] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1163.762238][ T9365] Bluetooth: hci1: command 0x0405 tx timeout [ 1163.813669][ T9419] __nla_validate_parse: 15 callbacks suppressed [ 1163.813693][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1163.928970][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1164.869152][ T9448] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1164.937876][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9721'. [ 1165.619535][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9728'. [ 1165.650297][ T9464] netlink: 280 bytes leftover after parsing attributes in process `syz.3.9727'. [ 1165.701567][ T9464] netlink: 183 bytes leftover after parsing attributes in process `syz.3.9727'. [ 1165.722892][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9727'. [ 1165.810332][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9727'. [ 1166.339162][T11014] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfb [ 1166.405064][ T9484] nbd: couldn't find a device at index 4 [ 1166.535250][ T9491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9733'. [ 1166.933699][ T9499] netlink: 'syz.0.9735': attribute type 1 has an invalid length. [ 1167.426150][ T9519] nbd0: detected capacity change from 0 to 63 [ 1167.484976][ T9528] xt_TCPMSS: Only works on TCP SYN packets [ 1167.568228][ T50] block nbd0: Receive control failed (result -104) [ 1168.528405][ T9558] netlink: 'syz.1.9752': attribute type 8 has an invalid length. [ 1169.229950][ T9578] block nbd0: reconnected socket [ 1169.246113][ T9578] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1169.273213][ T50] block nbd0: Receive control failed (result -32) [ 1169.433537][ T9581] __nla_validate_parse: 4 callbacks suppressed [ 1169.433560][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9760'. [ 1169.875557][ T9596] vlan2: left allmulticast mode [ 1169.883948][ T9596] bond2: left allmulticast mode [ 1169.892777][ T9596] geneve2: left allmulticast mode [ 1170.360721][ T6565] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.391148][ T6565] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.501979][ T6565] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.532403][ T6565] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.702554][ T9629] syzkaller0: entered promiscuous mode [ 1170.728219][ T9629] syzkaller0: entered allmulticast mode [ 1170.783930][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1170.940234][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1170.951199][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1170.975042][ T9637] netlink: 'syz.0.9773': attribute type 2 has an invalid length. [ 1170.993030][ T9637] netlink: 'syz.0.9773': attribute type 2 has an invalid length. [ 1171.035353][ T9637] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1171.225316][ T9649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9776'. [ 1171.468445][ T9651] batadv_slave_0: entered promiscuous mode [ 1171.484037][ T9663] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1171.506478][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1171.526117][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1171.565480][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9780'. [ 1171.612050][ T9650] batadv_slave_0: left promiscuous mode [ 1171.805957][ T9669] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1171.958678][ T9678] bond4: entered allmulticast mode [ 1171.965622][ T9674] syzkaller0: entered promiscuous mode [ 1171.973136][ T9674] syzkaller0: entered allmulticast mode [ 1172.014431][ T9683] tipc: Enabling of bearer rejected, already enabled [ 1172.325220][ T9691] ip6tnl0: Caught tx_queue_len zero misconfig [ 1172.445598][ T9696] macvtap1: entered promiscuous mode [ 1172.451145][ T9696] macvtap1: entered allmulticast mode [ 1172.960749][ T9722] xfrm1: entered allmulticast mode [ 1173.002824][ T9719] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1173.061360][ T9719] netlink: 'syz.2.9790': attribute type 1 has an invalid length. [ 1173.338023][ T9731] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1173.383884][ T9739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1173.476350][T11016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1173.512054][T11016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1173.568725][T11016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1173.578478][ T9750] nbd: couldn't find a device at index 4 [ 1173.608626][T11016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1173.833992][ T9762] netlink: 'syz.3.9798': attribute type 1 has an invalid length. [ 1173.960667][ T9764] unsupported nlmsg_type 40 [ 1175.150530][ T9813] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1175.684592][ T9835] netlink: zone id is out of range [ 1175.704720][ T9835] netlink: zone id is out of range [ 1175.727183][ T9835] netlink: zone id is out of range [ 1175.743610][ T9835] netlink: zone id is out of range [ 1175.770510][ T9835] netlink: zone id is out of range [ 1175.802821][ T9835] netlink: zone id is out of range [ 1175.812520][ T9835] netlink: zone id is out of range [ 1175.829851][ T9835] netlink: zone id is out of range [ 1176.129056][ T9845] __nla_validate_parse: 8 callbacks suppressed [ 1176.129079][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9815'. [ 1176.172438][ T9845] netlink: 580 bytes leftover after parsing attributes in process `syz.1.9815'. [ 1176.810292][ T9859] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1176.846039][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1177.539824][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1178.537578][ T9830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1178.733634][ T9864] rose2: entered promiscuous mode [ 1178.846045][ T9871] netlink: 'syz.4.9822': attribute type 1 has an invalid length. [ 1179.297184][ T9874] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1179.357140][ T9874] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1179.530487][ T9877] bond2: (slave gretap1): making interface the new active one [ 1179.543794][ T9877] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1179.573570][ T9888] net_ratelimit: 395 callbacks suppressed [ 1179.573589][ T9888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1179.630648][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 1179.690742][ T9895] netlink: 'syz.3.9830': attribute type 13 has an invalid length. [ 1179.711782][ T9895] netlink: 'syz.3.9830': attribute type 17 has an invalid length. [ 1179.724678][ T9902] tipc: Enabled bearer , priority 0 [ 1179.741694][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9830'. [ 1179.843830][ T9900] netlink: 'syz.3.9830': attribute type 3 has an invalid length. [ 1179.980984][ T9895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.004474][ T9895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.027967][ T9914] netlink: 296 bytes leftover after parsing attributes in process `syz.1.9833'. [ 1180.039373][ T9895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1180.057094][ T9897] syzkaller0: entered promiscuous mode [ 1180.072313][ T9897] syzkaller0: entered allmulticast mode [ 1180.094302][ T9896] tipc: Resetting bearer [ 1180.138663][ T9896] tipc: Disabling bearer [ 1180.376133][ T9925] syzkaller0: entered promiscuous mode [ 1180.388547][ T9937] netlink: 'syz.1.9839': attribute type 3 has an invalid length. [ 1180.398612][ T9925] syzkaller0: entered allmulticast mode [ 1180.401649][ T9937] netlink: 'syz.1.9839': attribute type 3 has an invalid length. [ 1180.441927][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9839'. [ 1180.602361][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1180.624161][ T9946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1180.649891][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9843'. [ 1181.060770][ T9964] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1181.209910][ T9973] __nla_validate_parse: 2 callbacks suppressed [ 1181.209932][ T9973] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1181.233031][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1181.445419][ T9981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1181.464747][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9855'. [ 1181.539504][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9855'. [ 1181.568874][ T9976] netlink: 'syz.1.9852': attribute type 1 has an invalid length. [ 1181.577444][ T9976] netlink: 'syz.1.9852': attribute type 1 has an invalid length. [ 1181.745667][ T9989] netlink: 'syz.4.9857': attribute type 13 has an invalid length. [ 1181.918360][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9858'. [ 1182.029589][ T9997] netlink: 'syz.0.9860': attribute type 1 has an invalid length. [ 1182.178867][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1182.412656][T10015] tipc: Enabled bearer , priority 0 [ 1182.451608][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1182.501765][T10014] tipc: Disabling bearer [ 1182.511652][T10019] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9868'. [ 1182.917645][T10024] lo: Caught tx_queue_len zero misconfig [ 1183.013219][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9869'. [ 1183.042671][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1183.050767][ C1] lec:lec_tx_timeout: lec0 [ 1184.599659][T10079] ±ÿ_congesti: renamed from lo [ 1185.057683][T10084] validate_nla: 4 callbacks suppressed [ 1185.057706][T10084] netlink: 'syz.2.9885': attribute type 1 has an invalid length. [ 1185.079290][T10096] syzkaller1: entered promiscuous mode [ 1185.085808][T10096] syzkaller1: entered allmulticast mode [ 1185.091448][T10084] netlink: 'syz.2.9885': attribute type 1 has an invalid length. [ 1185.376573][T10108] netlink: 'syz.2.9894': attribute type 11 has an invalid length. [ 1185.508255][T10098] tipc: Enabled bearer , priority 0 [ 1185.645849][T10124] Cannot find set identified by id 0 to match [ 1185.786343][T10133] syzkaller1: entered promiscuous mode [ 1185.795492][T10133] syzkaller1: entered allmulticast mode [ 1186.041397][T10136] netlink: 'syz.1.9901': attribute type 1 has an invalid length. [ 1186.045426][T10097] tipc: Disabling bearer [ 1186.066625][T10136] netlink: 'syz.1.9901': attribute type 1 has an invalid length. [ 1186.409786][T10154] netlink: 'syz.1.9907': attribute type 12 has an invalid length. [ 1186.754232][T10168] syzkaller1: entered promiscuous mode [ 1186.765415][T10168] syzkaller1: entered allmulticast mode [ 1186.797654][T10170] __nla_validate_parse: 8 callbacks suppressed [ 1186.797676][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9915'. [ 1186.830892][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9915'. [ 1188.199203][T10218] netlink: 'syz.2.9925': attribute type 1 has an invalid length. [ 1188.848591][T10232] xt_hashlimit: size too large, truncated to 1048576 [ 1188.904689][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1188.938901][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1189.577758][T10247] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9934'. [ 1189.680342][T10256] netlink: 'syz.0.9934': attribute type 4 has an invalid length. [ 1189.769952][T10257] netlink: 'syz.0.9934': attribute type 4 has an invalid length. [ 1189.925859][T10256] netlink: 'syz.0.9934': attribute type 4 has an invalid length. [ 1190.498972][T10285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9942'. [ 1190.611888][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9942'. [ 1190.782498][T10291] syzkaller1: entered promiscuous mode [ 1190.792505][T10291] syzkaller1: entered allmulticast mode [ 1191.158392][T10305] gre1: left allmulticast mode [ 1191.187433][T10305] vlan0: left promiscuous mode [ 1191.200381][T10305] geneve1: left promiscuous mode [ 1191.218059][T10305] vlan0: left allmulticast mode [ 1191.240170][T10305] geneve1: left allmulticast mode [ 1191.284968][T10322] netlink: 'syz.0.9952': attribute type 6 has an invalid length. [ 1191.306707][T10322] netlink: 'syz.0.9952': attribute type 7 has an invalid length. [ 1191.338263][T10322] netlink: 'syz.0.9952': attribute type 8 has an invalid length. [ 1191.360099][T10322] netlink: 'syz.0.9952': attribute type 15 has an invalid length. [ 1191.397605][ T6564] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.422940][ T6564] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.464755][ T6564] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.495367][ T6564] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.664664][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9961'. [ 1191.692584][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9961'. [ 1192.441886][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9970'. [ 1192.465521][T10380] tipc: Enabling of bearer rejected, failed to enable media [ 1192.850379][T10398] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1192.866042][T10398] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1192.918180][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9975'. [ 1192.961914][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9975'. [ 1193.305935][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1193.367454][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1193.413971][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1193.548053][T10424] bond4: entered promiscuous mode [ 1193.563157][T10424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1193.634513][T10435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1193.888282][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9987'. [ 1194.365476][T10445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1194.390150][T10452] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1194.716714][T10471] netlink: 'syz.0.9995': attribute type 2 has an invalid length. [ 1194.834239][T10464] netlink: 'syz.3.9991': attribute type 1 has an invalid length. [ 1194.865760][T10464] netlink: 'syz.3.9991': attribute type 1 has an invalid length. [ 1195.271788][T10494] A link change request failed with some changes committed already. Interface 26±ÿ_congesti may have been left with an inconsistent configuration, please check. [ 1195.723945][T10510] syzkaller0: entered promiscuous mode [ 1195.738064][T10510] syzkaller0: entered allmulticast mode [ 1196.257530][T10529] netlink: 'syz.1.10007': attribute type 1 has an invalid length. [ 1196.299260][T10532] netlink: 'syz.3.10006': attribute type 29 has an invalid length. [ 1196.367043][T10529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1196.406286][T10530] vlan3: entered allmulticast mode [ 1196.415298][T10530] bond1: entered allmulticast mode [ 1196.499402][T13131] lec:lec_start_xmit: lec0:No lecd attached [ 1196.657470][T10546] bridge0: port 3(syz_tun) entered blocking state [ 1196.672511][T10546] bridge0: port 3(syz_tun) entered disabled state [ 1196.685274][T10546] syz_tun: entered allmulticast mode [ 1196.767829][T10546] syz_tun: entered promiscuous mode [ 1196.783525][T10546] bridge0: port 3(syz_tun) entered blocking state [ 1196.790141][T10546] bridge0: port 3(syz_tun) entered forwarding state [ 1197.390903][T10567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1197.526597][T10576] veth0_macvtap: left promiscuous mode [ 1198.011698][ T1706] block nbd0: Possible stuck request ffff888027b17380: control (read@0,1024B). Runtime 30 seconds [ 1198.047653][ T1706] block nbd0: Possible stuck request ffff888027b17540: control (read@1024,1024B). Runtime 30 seconds [ 1198.059438][ T1706] block nbd0: Possible stuck request ffff888027b17700: control (read@2048,1024B). Runtime 30 seconds [ 1198.070915][ T1706] block nbd0: Possible stuck request ffff888027b178c0: control (read@3072,1024B). Runtime 30 seconds [ 1198.089036][ T1706] block nbd0: Dead connection, failed to find a fallback [ 1198.097026][ T1706] block nbd0: shutting down sockets [ 1198.104846][ T1706] blk_print_req_error: 24 callbacks suppressed [ 1198.104864][ T1706] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.120507][ T1706] buffer_io_error: 23 callbacks suppressed [ 1198.120526][ T1706] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1198.137319][ T1706] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.147035][ T1706] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1198.155851][ T1706] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.165499][ T1706] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1198.173533][ T1706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.183103][ T1706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1198.197083][ T9074] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.277462][ T9074] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1198.315393][ T9074] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.325108][ T9074] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1198.333733][ T9074] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.345196][ T9074] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1198.356463][ T9074] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.371897][ T9074] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1198.404005][T10597] __nla_validate_parse: 10 callbacks suppressed [ 1198.404025][T10597] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10021'. [ 1198.428153][ T9074] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.452777][ T9074] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1198.482927][ T9074] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1198.491717][T10620] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1198.511777][ T9074] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1198.545924][T10597] A link change request failed with some changes committed already. Interface 26±ÿ_congesti may have been left with an inconsistent configuration, please check. [ 1198.571015][ T9074] ldm_validate_partition_table(): Disk read failed. [ 1198.611824][ T9074] Dev nbd0: unable to read RDB block 0 [ 1198.631962][ T9074] nbd0: unable to read partition table [ 1198.648009][T10623] netlink: 'syz.0.10024': attribute type 83 has an invalid length. [ 1198.742751][ T9074] ldm_validate_partition_table(): Disk read failed. [ 1198.776365][ T9074] Dev nbd0: unable to read RDB block 0 [ 1198.798052][ T9074] nbd0: unable to read partition table [ 1199.212506][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10027'. [ 1199.276680][T10640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10027'. [ 1199.709235][T10648] bond4: entered promiscuous mode [ 1199.730657][T10648] bond4: entered allmulticast mode [ 1199.739672][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10029'. [ 1199.765242][T10648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1199.874395][T10668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10030'. [ 1200.082835][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1200.263639][T10658] lo speed is unknown, defaulting to 1000 [ 1200.287137][T10658] lo speed is unknown, defaulting to 1000 [ 1200.368136][T10658] lo speed is unknown, defaulting to 1000 [ 1200.379571][T10658] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1200.395668][T10658] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1200.400416][T10680] syz_tun: left allmulticast mode [ 1200.415494][T10658] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1200.426537][T10680] syz_tun: left promiscuous mode [ 1200.438420][T10680] bridge0: port 3(syz_tun) entered disabled state [ 1200.483689][T10680] bridge_slave_0: left allmulticast mode [ 1200.489502][T10680] bridge_slave_0: left promiscuous mode [ 1200.496779][T10680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.521464][T10658] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1200.522303][T10680] bridge_slave_1: left allmulticast mode [ 1200.535097][T10680] bridge_slave_1: left promiscuous mode [ 1200.540987][T10680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.576602][T10680] team0: Port device team_slave_0 removed [ 1200.604746][T10680] team0: Port device team_slave_1 removed [ 1200.626580][T10680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.643870][T10680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.663593][T10680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.682567][T10680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.699853][T10680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1200.785146][T10658] lo speed is unknown, defaulting to 1000 [ 1200.837637][T10658] lo speed is unknown, defaulting to 1000 [ 1200.858045][T10658] lo speed is unknown, defaulting to 1000 [ 1200.976210][T10658] lo speed is unknown, defaulting to 1000 [ 1200.980849][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10034'. [ 1200.996828][T10658] lo speed is unknown, defaulting to 1000 [ 1201.015997][T10658] lo speed is unknown, defaulting to 1000 [ 1201.026081][T10701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1201.077644][T10658] lo speed is unknown, defaulting to 1000 [ 1201.094392][T10658] lo speed is unknown, defaulting to 1000 [ 1201.110336][T10658] lo speed is unknown, defaulting to 1000 [ 1201.505161][T10712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10037'. [ 1201.609033][T10712] netlink: 'syz.1.10037': attribute type 1 has an invalid length. [ 1201.639172][T10712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10037'. [ 1202.082606][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 1202.090726][ C1] lec:lec_tx_timeout: lec0 [ 1202.557068][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10043'. [ 1202.630154][T10744] tipc: Enabling of bearer rejected, failed to enable media [ 1202.642000][T10747] tipc: Enabling of bearer rejected, failed to enable media [ 1202.976994][T10762] sctp: [Deprecated]: syz.4.10049 (pid 10762) Use of int in max_burst socket option. [ 1202.976994][T10762] Use struct sctp_assoc_value instead [ 1203.011260][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1203.326860][T10776] x_tables: duplicate underflow at hook 2 [ 1203.346288][T10776] x_tables: duplicate underflow at hook 1 [ 1203.627357][T10789] netlink: 'syz.0.10057': attribute type 21 has an invalid length. [ 1203.654377][T10789] __nla_validate_parse: 3 callbacks suppressed [ 1203.654398][T10789] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10057'. [ 1203.711515][T10792] syzkaller0: entered promiscuous mode [ 1203.717723][T10792] syzkaller0: entered allmulticast mode [ 1203.791911][T10792] A link change request failed with some changes committed already. Interface 26±ÿ_congesti may have been left with an inconsistent configuration, please check. [ 1203.967464][T10790] netlink: 'syz.2.10056': attribute type 1 has an invalid length. [ 1203.967470][T10786] netlink: 'syz.2.10056': attribute type 1 has an invalid length. [ 1203.967495][T10790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1203.988767][T10786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1204.027008][T10801] A link change request failed with some changes committed already. Interface 26±ÿ_congesti may have been left with an inconsistent configuration, please check. [ 1204.084496][T10801] netlink: 'syz.1.10061': attribute type 1 has an invalid length. [ 1204.297402][T10809] netlink: 'syz.1.10064': attribute type 1 has an invalid length. [ 1204.525285][T10809] bond2: entered promiscuous mode [ 1204.538862][T10809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1204.629527][T10809] bond2: (slave bridge2): making interface the new active one [ 1204.650540][T10809] bridge2: entered promiscuous mode [ 1204.660345][T10809] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1204.855576][T10835] openvswitch: netlink: IP tunnel dst address not specified [ 1204.888507][T10835] netlink: 'syz.0.10068': attribute type 13 has an invalid length. [ 1204.912642][T10835] netlink: 'syz.0.10068': attribute type 17 has an invalid length. [ 1205.018316][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1205.171066][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.199483][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.234578][T10835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1205.431952][T10819] lo speed is unknown, defaulting to 1000 [ 1205.723408][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10073'. [ 1205.800970][T10861] netlink: 'syz.0.10074': attribute type 1 has an invalid length. [ 1205.834682][T10861] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10074'. [ 1206.209587][T10865] netlink: 'syz.4.10075': attribute type 1 has an invalid length. [ 1206.279154][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1206.325155][T10879] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10078'. [ 1207.025054][T10904] vlan1: entered allmulticast mode [ 1207.037973][T10904] bridge0: port 3(vlan1) entered blocking state [ 1207.057159][T10904] bridge0: port 3(vlan1) entered disabled state [ 1207.079387][T10904] vlan1: entered promiscuous mode [ 1207.808863][T10929] validate_nla: 1 callbacks suppressed [ 1207.808886][T10929] netlink: 'syz.1.10090': attribute type 10 has an invalid length. [ 1207.833181][T10929] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10090'. [ 1207.933615][T10933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1208.025595][T10938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10094'. [ 1208.135235][T10944] syzkaller1: entered promiscuous mode [ 1208.151144][T10944] syzkaller1: entered allmulticast mode [ 1208.663560][T10966] __nla_validate_parse: 2 callbacks suppressed [ 1208.663584][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10101'. [ 1208.686532][T10972] netlink: 165 bytes leftover after parsing attributes in process `syz.0.10103'. [ 1208.810473][T10981] netlink: 'syz.3.10105': attribute type 1 has an invalid length. [ 1208.931476][T10988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1208.953998][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1208.976963][T10972] ¾x9ÿ: renamed from bridge_slave_0 [ 1209.109206][T10995] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10109'. [ 1209.853423][T11009] ip6t_srh: unknown srh invflags 4000 [ 1210.010023][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10115'. [ 1210.050724][T11001] lo speed is unknown, defaulting to 1000 [ 1210.322941][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.520141][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10118'. [ 1210.585594][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10118'. [ 1210.719366][T11041] x_tables: duplicate underflow at hook 2 [ 1211.225625][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10123'. [ 1211.569310][T11066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1212.377133][T11089] bridge0: port 2(bridge_slave_1) entered listening state [ 1212.402953][T11089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.406251][T11094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.028679][T11067] lo speed is unknown, defaulting to 1000 [ 1213.549149][T11140] netlink: 'syz.2.10146': attribute type 13 has an invalid length. [ 1213.586494][T11142] netlink: 'syz.2.10146': attribute type 13 has an invalid length. [ 1213.621942][T11145] FAULT_INJECTION: forcing a failure. [ 1213.621942][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.652802][T11145] CPU: 1 UID: 0 PID: 11145 Comm: syz.0.10147 Not tainted syzkaller #0 PREEMPT(full) [ 1213.652834][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1213.652847][T11145] Call Trace: [ 1213.652856][T11145] [ 1213.652865][T11145] dump_stack_lvl+0xe8/0x150 [ 1213.652905][T11145] should_fail_ex+0x412/0x560 [ 1213.652944][T11145] _copy_to_user+0x31/0xb0 [ 1213.652973][T11145] simple_read_from_buffer+0xe1/0x170 [ 1213.653002][T11145] proc_fail_nth_read+0x1bb/0x230 [ 1213.653030][T11145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.653058][T11145] ? rw_verify_area+0x2a6/0x4d0 [ 1213.653083][T11145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1213.653117][T11145] vfs_read+0x20c/0xa70 [ 1213.653150][T11145] ? __pfx___mutex_lock+0x10/0x10 [ 1213.653181][T11145] ? __pfx_vfs_read+0x10/0x10 [ 1213.653209][T11145] ? __fget_files+0x2a/0x420 [ 1213.653237][T11145] ? __fget_files+0x3a0/0x420 [ 1213.653257][T11145] ? __fget_files+0x2a/0x420 [ 1213.653307][T11145] ksys_read+0x150/0x270 [ 1213.653336][T11145] ? __pfx_ksys_read+0x10/0x10 [ 1213.653372][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.653396][T11145] do_syscall_64+0x15f/0xf80 [ 1213.653423][T11145] ? trace_irq_disable+0x3b/0x140 [ 1213.653450][T11145] ? clear_bhb_loop+0x40/0x90 [ 1213.653477][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.653498][T11145] RIP: 0033:0x7f77da15d60e [ 1213.653520][T11145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1213.653538][T11145] RSP: 002b:00007f77db07dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1213.653561][T11145] RAX: ffffffffffffffda RBX: 00007f77db07e6c0 RCX: 00007f77da15d60e [ 1213.653577][T11145] RDX: 000000000000000f RSI: 00007f77db07e0a0 RDI: 0000000000000004 [ 1213.653590][T11145] RBP: 00007f77db07e090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.653603][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.653615][T11145] R13: 00007f77da416038 R14: 00007f77da415fa0 R15: 00007ffe345d3948 [ 1213.653658][T11145] [ 1213.926459][T11092] lo speed is unknown, defaulting to 1000 [ 1213.943660][T11151] netlink: 'syz.2.10149': attribute type 8 has an invalid length. [ 1213.971389][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10149'. [ 1214.105358][T11151] veth1_to_team: entered promiscuous mode [ 1214.144712][T11151] gretap0: entered promiscuous mode [ 1214.151669][T11151] batadv_slave_0: entered promiscuous mode [ 1214.164665][T11151] batadv_slave_0: left promiscuous mode [ 1214.181353][T11151] veth1_to_team: left promiscuous mode [ 1214.220053][T11151] gretap0: left promiscuous mode [ 1214.298612][T11165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.669781][T11174] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10153'. [ 1215.101786][T11188] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10156'. [ 1215.442627][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1215.453113][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1215.464678][T11211] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1215.475283][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1215.496737][T11211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.510664][T11211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.527071][T11211] bond0 (unregistering): Released all slaves [ 1215.679414][T11217] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 1215.912462][T11230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10168'. [ 1215.941209][T11231] netlink: 'syz.4.10166': attribute type 12 has an invalid length. [ 1216.061342][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10165'. [ 1216.104539][T11232] netlink: 'syz.0.10165': attribute type 13 has an invalid length. [ 1216.172737][T11237] netlink: 'syz.0.10165': attribute type 16 has an invalid length. [ 1216.223962][T11237] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10165'. [ 1216.405404][T11250] tipc: Enabled bearer , priority 0 [ 1216.451122][T11249] tipc: Disabling bearer [ 1216.811730][T11247] lo speed is unknown, defaulting to 1000 [ 1217.067865][T11274] : renamed from veth0_to_bond [ 1217.341479][T11284] "syz.4.10182" (11284) uses obsolete ecb(arc4) skcipher [ 1217.443694][T11286] netlink: 'syz.4.10182': attribute type 6 has an invalid length. [ 1217.670268][T11301] netlink: 'syz.0.10188': attribute type 1 has an invalid length. [ 1217.770906][T11309] netlink: 'syz.1.10189': attribute type 1 has an invalid length. [ 1217.778625][T11301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1217.779991][T11309] nbd: error processing sock list [ 1217.960343][T11306] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1218.298431][T11331] netlink: 'syz.0.10192': attribute type 1 has an invalid length. [ 1218.445934][T11337] x_tables: duplicate underflow at hook 4 [ 1218.777691][T11311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.790158][T11311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.846857][T11353] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1218.856282][T11354] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1219.055023][T11311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.085532][T11311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.127604][T11362] __nla_validate_parse: 8 callbacks suppressed [ 1219.127626][T11362] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10203'. [ 1219.220521][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10197'. [ 1219.294615][T11359] netlink: 'syz.0.10197': attribute type 5 has an invalid length. [ 1219.402284][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10197'. [ 1219.635459][T11311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.673772][T11311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.916709][T11359] geneve3: entered promiscuous mode [ 1219.931535][T11359] geneve3: entered allmulticast mode [ 1219.950874][ T6564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1220.103520][T11311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.137456][T11311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.252904][ T6564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1220.271332][T11399] netlink: 'syz.4.10207': attribute type 1 has an invalid length. [ 1220.288083][ T6564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1220.311928][ T6564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1220.321802][T11399] netlink: 'syz.4.10207': attribute type 2 has an invalid length. [ 1220.345763][T11399] netlink: 'syz.4.10207': attribute type 3 has an invalid length. [ 1220.387475][T11399] lo: Caught tx_queue_len zero misconfig [ 1220.469580][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10207'. [ 1220.522637][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10207'. [ 1220.545041][ T6564] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.561705][ T6564] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.627979][T11014] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.661586][T11014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.682691][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1220.765722][T11014] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.778666][T11014] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.848042][T11014] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.870946][T11014] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.460894][T11448] nbd: must specify an index to disconnect [ 1221.519244][T11450] : entered promiscuous mode [ 1221.786335][T11463] netlink: 'syz.4.10224': attribute type 4 has an invalid length. [ 1221.839099][T11463] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1221.844446][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10225'. [ 1221.882046][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10225'. [ 1221.897715][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10225'. [ 1222.194883][T11483] netlink: 'syz.4.10227': attribute type 15 has an invalid length. [ 1222.374657][T11429] lo speed is unknown, defaulting to 1000 [ 1222.400418][T11492] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1223.147719][T11469] lo speed is unknown, defaulting to 1000 [ 1223.541683][T11014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.570062][T11014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.705493][T11014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.733587][T11014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.784088][T11540] 0ªX¹¦À: renamed from caif0 [ 1223.807134][T11540] 0ªX¹¦À: entered allmulticast mode [ 1223.826447][T11540] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1224.481785][T11574] netlink: 'syz.1.10250': attribute type 1 has an invalid length. [ 1224.606680][T11584] __nla_validate_parse: 12 callbacks suppressed [ 1224.606703][T11584] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.10252'. [ 1224.709614][T11574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.989004][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10256'. [ 1225.275687][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10262'. [ 1225.401088][T11616] syzkaller1: entered promiscuous mode [ 1225.425066][T11616] syzkaller1: entered allmulticast mode [ 1225.574192][T11628] netlink: 'syz.4.10268': attribute type 39 has an invalid length. [ 1225.683712][ T9365] Bluetooth: hci5: command 0x0406 tx timeout [ 1225.772885][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10269'. [ 1225.815112][T11632] bond0: option updelay: invalid value (18446744073558915216) [ 1225.862293][T11636] openvswitch: netlink: VXLAN extension 143 out of range max 1 [ 1225.895612][T11632] bond0: option updelay: allowed values 0 - 2147483647 [ 1226.065089][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10273'. [ 1226.097507][T11643] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10273'. [ 1226.167102][T11645] vlan0: entered promiscuous mode [ 1226.173759][T11645] bridge0: entered promiscuous mode [ 1226.180587][T11646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.274206][T11652] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10275'. [ 1226.296031][T11653] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10275'. [ 1226.538896][T11664] xt_bpf: check failed: parse error [ 1226.567113][T11635] lo speed is unknown, defaulting to 1000 [ 1227.276422][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10285'. [ 1227.367860][T11682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10284'. [ 1227.617566][T11699] delete_channel: no stack [ 1228.091194][T11719] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1228.131847][T11723] ip6tnl0: Caught tx_queue_len zero misconfig [ 1228.146499][T11723] netem: change failed [ 1228.477794][T11704] lo speed is unknown, defaulting to 1000 [ 1228.718834][T11744] veth0: Caught tx_queue_len zero misconfig [ 1228.895825][T11752] netlink: 'syz.2.10302': attribute type 13 has an invalid length. [ 1228.944602][T11752] netlink: 'syz.2.10302': attribute type 17 has an invalid length. [ 1228.981307][T11751] netlink: 'syz.1.10301': attribute type 8 has an invalid length. [ 1229.125239][T11752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.145091][T11752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.174476][T11752] 0ªX¹¦À: left allmulticast mode [ 1229.179901][T11752] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1229.197486][ T5920] lo speed is unknown, defaulting to 1000 [ 1229.212928][ T5920] syz2: Port: 1 Link ACTIVE [ 1229.351453][T11761] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1229.416055][T11771] syzkaller0: entered promiscuous mode [ 1229.446222][T11771] syzkaller0: entered allmulticast mode [ 1229.894101][T11800] __nla_validate_parse: 7 callbacks suppressed [ 1229.894124][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10317'. [ 1230.235666][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10321'. [ 1230.286007][T11816] netlink: 'syz.3.10321': attribute type 8 has an invalid length. [ 1230.406102][T11822] netlink: 'syz.0.10325': attribute type 10 has an invalid length. [ 1230.415442][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1230.426433][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1230.436020][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1230.547402][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10328'. [ 1230.667374][T11834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10329'. [ 1230.734341][T11837] sctp: [Deprecated]: syz.0.10329 (pid 11837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1230.734341][T11837] Use struct sctp_sack_info instead [ 1230.802032][T11838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.105297][T11855] macvtap1: entered promiscuous mode [ 1231.110794][T11855] macvtap1: entered allmulticast mode [ 1231.228218][T11839] lo speed is unknown, defaulting to 1000 [ 1231.315259][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10338'. [ 1231.333554][T11863] netlink: 'syz.4.10338': attribute type 8 has an invalid length. [ 1231.557169][T11873] : renamed from veth0_to_bond (while UP) [ 1231.586792][T11872] netlink: 268 bytes leftover after parsing attributes in process `syz.3.10341'. [ 1231.602907][T11872] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10341'. [ 1232.135032][T11888] bond4: left promiscuous mode [ 1232.140059][T11888] bond4: left allmulticast mode [ 1232.154521][T11888] geneve3: left promiscuous mode [ 1232.159673][T11888] geneve3: left allmulticast mode [ 1232.185725][T11899] vlan0: entered promiscuous mode [ 1232.202426][T11899] bond0: entered promiscuous mode [ 1232.207674][T11899] bond_slave_0: entered promiscuous mode [ 1232.219722][T11899] bond_slave_1: entered promiscuous mode [ 1232.258448][T11911] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1232.295960][ T6168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1232.326445][ T6168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1232.387676][ T6168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1232.412130][ T6168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1232.533035][T11917] bond6: entered promiscuous mode [ 1232.553025][T11917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1232.749123][T11937] netlink: 'syz.2.10358': attribute type 10 has an invalid length. [ 1233.173955][T11951] team1: entered promiscuous mode [ 1233.187405][T11951] team1: entered allmulticast mode [ 1233.199899][T11951] 8021q: adding VLAN 0 to HW filter on device team1 [ 1233.239699][T11958] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1233.320111][T11958] team2: entered promiscuous mode [ 1233.327428][T11958] team2: entered allmulticast mode [ 1233.336441][T11958] 8021q: adding VLAN 0 to HW filter on device team2 [ 1233.344982][T11957] syzkaller0: entered promiscuous mode [ 1233.372562][T11957] syzkaller0: entered allmulticast mode [ 1233.643467][T11973] tipc: Enabled bearer , priority 0 [ 1233.796322][T11973] syzkaller0: entered promiscuous mode [ 1233.801870][T11973] syzkaller0: entered allmulticast mode [ 1233.829405][T11973] tipc: Resetting bearer [ 1234.305964][T11971] tipc: Resetting bearer [ 1238.978038][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.002857][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1240.182233][T11971] tipc: Disabling bearer [ 1240.220104][T12013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1240.236656][ T7960] tipc: Node number set to 4278607571 [ 1240.404738][T12025] syzkaller0: entered promiscuous mode [ 1240.432297][T12025] syzkaller0: entered allmulticast mode [ 1240.921159][T12059] netlink: 'syz.0.10388': attribute type 2 has an invalid length. [ 1240.953961][T12048] __nla_validate_parse: 9 callbacks suppressed [ 1240.953983][T12048] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10385'. [ 1240.982460][T12059] netlink: 'syz.0.10388': attribute type 1 has an invalid length. [ 1240.991938][T12059] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10388'. [ 1241.395378][T12076] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1241.492482][ T7975] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1241.661818][T12091] netlink: 'syz.4.10396': attribute type 1 has an invalid length. [ 1241.684603][T12091] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1241.822462][ T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1241.887485][T12100] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1242.146988][T12108] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1242.225125][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10403'. [ 1242.230916][T12113] syzkaller0: entered promiscuous mode [ 1242.262892][T12113] syzkaller0: entered allmulticast mode [ 1242.292437][T12109] ip6gretap0: entered allmulticast mode [ 1242.308077][T31834] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1242.714961][T12135] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10407'. [ 1242.958200][T12141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.083984][T12139] netlink: 'syz.4.10409': attribute type 1 has an invalid length. [ 1243.095063][T12139] netlink: 'syz.4.10409': attribute type 1 has an invalid length. [ 1243.363651][ T6168] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1243.385500][ T6168] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1243.568501][T12158] syzkaller0: entered promiscuous mode [ 1243.577231][T12158] syzkaller0: entered allmulticast mode [ 1243.585398][T12169] gre0: entered promiscuous mode [ 1243.602610][T12169] gre0: entered allmulticast mode [ 1244.083709][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1244.091814][ C1] lec:lec_tx_timeout: lec0 [ 1244.412915][ T7975] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1245.052037][T12197] netlink: 'syz.1.10419': attribute type 1 has an invalid length. [ 1245.060614][T12197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.348717][T12194] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1247.479933][T12206] nbd2: detected capacity change from 0 to 62 [ 1247.524804][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10421'. [ 1247.543625][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10424'. [ 1247.569176][ T50] block nbd2: Receive control failed (result -104) [ 1247.682302][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1247.692313][T12216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10422'. [ 1248.317344][T12237] netlink: 'syz.1.10428': attribute type 1 has an invalid length. [ 1248.359382][T12237] netlink: 'syz.1.10428': attribute type 1 has an invalid length. [ 1248.475226][T12255] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10431'. [ 1248.512289][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10431'. [ 1248.663159][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10432'. [ 1248.700676][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10432'. [ 1248.730720][T12263] netlink: 'syz.1.10434': attribute type 1 has an invalid length. [ 1248.748717][T12263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10434'. [ 1248.778467][T12262] syzkaller0: entered promiscuous mode [ 1248.796924][T12262] syzkaller0: entered allmulticast mode [ 1249.294390][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1249.340230][T12289] netlink: 'syz.3.10438': attribute type 8 has an invalid length. [ 1249.403237][T12293] team0: Port device syz_tun added [ 1249.464417][T12297] team0: Port device syz_tun removed [ 1249.505621][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.530282][T12300] [ 1249.532678][T12300] ====================================================== [ 1249.539719][T12300] WARNING: possible circular locking dependency detected [ 1249.546764][T12300] syzkaller #0 Not tainted [ 1249.551200][T12300] ------------------------------------------------------ [ 1249.558239][T12300] syz.0.10443/12300 is trying to acquire lock: [ 1249.564451][T12300] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1249.573644][T12300] [ 1249.573644][T12300] but task is already holding lock: [ 1249.581029][T12300] ffff888032bb7270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1249.590314][T12300] [ 1249.590314][T12300] which lock already depends on the new lock. [ 1249.590314][T12300] [ 1249.600746][T12300] [ 1249.600746][T12300] the existing dependency chain (in reverse order) is: [ 1249.609781][T12300] [ 1249.609781][T12300] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1249.617814][T12300] _raw_spin_lock_bh+0x36/0x50 [ 1249.623138][T12300] nr_rt_device_down+0x153/0x860 [ 1249.628655][T12300] nr_device_event+0x137/0x150 [ 1249.633973][T12300] notifier_call_chain+0x1ad/0x3d0 [ 1249.639648][T12300] __dev_notify_flags+0x16d/0x310 [ 1249.645227][T12300] netif_change_flags+0xe8/0x1a0 [ 1249.650719][T12300] dev_change_flags+0x130/0x270 [ 1249.656119][T12300] dev_ioctl+0x7b4/0x1150 [ 1249.661013][T12300] sock_do_ioctl+0x23e/0x320 [ 1249.666164][T12300] sock_ioctl+0x5c6/0x7f0 [ 1249.671050][T12300] __se_sys_ioctl+0xfc/0x170 [ 1249.676192][T12300] do_syscall_64+0x15f/0xf80 [ 1249.681343][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.687786][T12300] [ 1249.687786][T12300] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1249.695645][T12300] _raw_spin_lock_bh+0x36/0x50 [ 1249.700969][T12300] nr_rt_device_down+0xbe/0x860 [ 1249.706396][T12300] nr_device_event+0x137/0x150 [ 1249.711726][T12300] notifier_call_chain+0x1ad/0x3d0 [ 1249.717388][T12300] __dev_notify_flags+0x16d/0x310 [ 1249.722962][T12300] netif_change_flags+0xe8/0x1a0 [ 1249.728454][T12300] dev_change_flags+0x130/0x270 [ 1249.733857][T12300] dev_ioctl+0x7b4/0x1150 [ 1249.738748][T12300] sock_do_ioctl+0x23e/0x320 [ 1249.743889][T12300] sock_ioctl+0x5c6/0x7f0 [ 1249.748775][T12300] __se_sys_ioctl+0xfc/0x170 [ 1249.753917][T12300] do_syscall_64+0x15f/0xf80 [ 1249.759058][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.765491][T12300] [ 1249.765491][T12300] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1249.773412][T12300] __lock_acquire+0x15a5/0x2cf0 [ 1249.778798][T12300] lock_acquire+0x106/0x350 [ 1249.783836][T12300] _raw_spin_lock_bh+0x36/0x50 [ 1249.789129][T12300] nr_rt_ioctl+0x40c/0xf90 [ 1249.794077][T12300] sock_do_ioctl+0x101/0x320 [ 1249.799194][T12300] sock_ioctl+0x5c6/0x7f0 [ 1249.804051][T12300] __se_sys_ioctl+0xfc/0x170 [ 1249.809174][T12300] do_syscall_64+0x15f/0xf80 [ 1249.814293][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.820712][T12300] [ 1249.820712][T12300] other info that might help us debug this: [ 1249.820712][T12300] [ 1249.830938][T12300] Chain exists of: [ 1249.830938][T12300] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1249.830938][T12300] [ 1249.844771][T12300] Possible unsafe locking scenario: [ 1249.844771][T12300] [ 1249.852219][T12300] CPU0 CPU1 [ 1249.857593][T12300] ---- ---- [ 1249.862974][T12300] lock(&nr_node->node_lock); [ 1249.867758][T12300] lock(nr_node_list_lock); [ 1249.874891][T12300] lock(&nr_node->node_lock); [ 1249.882196][T12300] lock(nr_neigh_list_lock); [ 1249.886898][T12300] [ 1249.886898][T12300] *** DEADLOCK *** [ 1249.886898][T12300] [ 1249.895060][T12300] 2 locks held by syz.0.10443/12300: [ 1249.900355][T12300] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1249.909867][T12300] #1: ffff888032bb7270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1249.919544][T12300] [ 1249.919544][T12300] stack backtrace: [ 1249.925440][T12300] CPU: 1 UID: 0 PID: 12300 Comm: syz.0.10443 Not tainted syzkaller #0 PREEMPT(full) [ 1249.925460][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1249.925471][T12300] Call Trace: [ 1249.925481][T12300] [ 1249.925490][T12300] dump_stack_lvl+0xe8/0x150 [ 1249.925519][T12300] print_circular_bug+0x2e1/0x300 [ 1249.925539][T12300] check_noncircular+0x12e/0x150 [ 1249.925560][T12300] __lock_acquire+0x15a5/0x2cf0 [ 1249.925594][T12300] ? nr_rt_ioctl+0x40c/0xf90 [ 1249.925608][T12300] lock_acquire+0x106/0x350 [ 1249.925632][T12300] ? nr_rt_ioctl+0x40c/0xf90 [ 1249.925647][T12300] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1249.925667][T12300] ? nr_rt_ioctl+0x821/0xf90 [ 1249.925683][T12300] ? nr_rt_ioctl+0x40c/0xf90 [ 1249.925698][T12300] _raw_spin_lock_bh+0x36/0x50 [ 1249.925718][T12300] ? nr_rt_ioctl+0x40c/0xf90 [ 1249.925732][T12300] nr_rt_ioctl+0x40c/0xf90 [ 1249.925750][T12300] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1249.925769][T12300] ? apparmor_capable+0x126/0x170 [ 1249.925792][T12300] ? capable+0x88/0xe0 [ 1249.925816][T12300] ? nr_ioctl+0x1b1/0x3b0 [ 1249.925837][T12300] sock_do_ioctl+0x101/0x320 [ 1249.925858][T12300] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1249.925878][T12300] ? do_futex+0x333/0x420 [ 1249.925900][T12300] sock_ioctl+0x5c6/0x7f0 [ 1249.925919][T12300] ? __pfx_sock_ioctl+0x10/0x10 [ 1249.925938][T12300] ? __fget_files+0x2a/0x420 [ 1249.925954][T12300] ? __fget_files+0x3a0/0x420 [ 1249.925969][T12300] ? __fget_files+0x2a/0x420 [ 1249.925985][T12300] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1249.926006][T12300] ? __pfx_sock_ioctl+0x10/0x10 [ 1249.926025][T12300] __se_sys_ioctl+0xfc/0x170 [ 1249.926045][T12300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.926067][T12300] do_syscall_64+0x15f/0xf80 [ 1249.926088][T12300] ? trace_irq_disable+0x3b/0x140 [ 1249.926108][T12300] ? clear_bhb_loop+0x40/0x90 [ 1249.926125][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.926142][T12300] RIP: 0033:0x7f77da19cdd9 [ 1249.926158][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.926173][T12300] RSP: 002b:00007f77db07e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.926191][T12300] RAX: ffffffffffffffda RBX: 00007f77da415fa0 RCX: 00007f77da19cdd9 [ 1249.926204][T12300] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 1249.926214][T12300] RBP: 00007f77da232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1249.926224][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.926234][T12300] R13: 00007f77da416038 R14: 00007f77da415fa0 R15: 00007ffe345d3948 [ 1249.926253][T12300] [ 1250.189272][T12297] bridge_slave_1: left allmulticast mode [ 1250.217405][T12297] bridge_slave_1: left promiscuous mode [ 1250.246194][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.271187][T12297] bond0: (slave bond_slave_0): Releasing backup interface [ 1250.295777][T12297] bond0: (slave bond_slave_1): Releasing backup interface [ 1250.325498][T12297] team0: Port device team_slave_1 removed [ 1250.344763][T12297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.363004][T12297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.370746][T12297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1250.549350][T12300] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002 [ 1250.812293][ T1671] block nbd2: Possible stuck request ffff888027b86200: control (read@0,1024B). Runtime 2 seconds [ 1250.823333][ T1671] block nbd2: Possible stuck request ffff888027b863c0: control (read@1024,1024B). Runtime 2 seconds [ 1250.834527][ T1671] block nbd2: Possible stuck request ffff888027b86580: control (read@2048,1024B). Runtime 2 seconds [ 1250.845554][ T1671] block nbd2: Possible stuck request ffff888027b86740: control (read@3072,1024B). Runtime 2 seconds [ 1251.528132][ T5508] veth1_macvtap: left promiscuous mode [ 1254.162860][ T1671] block nbd2: Possible stuck request ffff888027b86200: control (read@0,1024B). Runtime 4 seconds [ 1254.173686][ T1671] block nbd2: Possible stuck request ffff888027b863c0: control (read@1024,1024B). Runtime 4 seconds [ 1254.184582][ T1671] block nbd2: Possible stuck request ffff888027b86580: control (read@2048,1024B). Runtime 4 seconds [ 1254.195520][ T1671] block nbd2: Possible stuck request ffff888027b86740: control (read@3072,1024B). Runtime 4 seconds [ 1256.882272][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1257.522957][ T1671] block nbd2: Possible stuck request ffff888027b86200: control (read@0,1024B). Runtime 6 seconds [ 1257.533880][ T1671] block nbd2: Possible stuck request ffff888027b863c0: control (read@1024,1024B). Runtime 6 seconds [ 1257.544784][ T1671] block nbd2: Possible stuck request ffff888027b86580: control (read@2048,1024B). Runtime 6 seconds [ 1257.555658][ T1671] block nbd2: Possible stuck request ffff888027b86740: control (read@3072,1024B). Runtime 6 seconds