last executing test programs: 6.153085388s ago: executing program 1 (id=5884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) listen(r2, 0x0) r4 = epoll_create(0x6) ppoll(&(0x7f0000000040)=[{r2, 0x5122}, {r4, 0x1020}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x20048080) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x10000014}) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000300)={r3, &(0x7f00000000c0)='\x00', 0x80800, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x5]}, {0xfff, 0xf1, 0x9}}, 0x65f, &(0x7f0000000140), &(0x7f00000001c0)=0x7fff}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) 5.885659939s ago: executing program 1 (id=5886): socket$key(0xf, 0x3, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) (async) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000140)={0x5e, 0x0, '\x00', [@ra={0x5, 0x2, 0xf}, @pad1]}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) pwritev(r4, &(0x7f0000000200)=[{&(0x7f0000000180)="57f5ded39cee8a4cf319f729e3f6831b9bb32d370678af2906c09bb5dce3d494820d317c089184c646fb39f42f2e44cb95cd57e739bfd9af63", 0x39}], 0x1, 0x8, 0x1d) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x4, 0x5, {{0x12, 0x4, 0x0, 0xb, 0x48, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0xe, [{@remote, 0x2}, {@multicast1, 0xffffffff}, {@multicast2, 0x3}, {@loopback, 0x7}, {@local, 0x4}]}, @ssrr={0x89, 0x7, 0xbf, [@multicast2]}]}}}}}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x10000}) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x7, 0x10000004, 0x5c}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (rerun: 32) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.820907305s ago: executing program 1 (id=5888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, 0x0, 0x20008800) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000003ca273902b118841"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x6, 0x7, 0x6a, 0x8}, {0x0, 0x7f, 0x80}, {0x6, 0xc5, 0xb, 0xad1}]}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r13, @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRES32=r8, @ANYRES64=r11, @ANYRES8=r2], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 5.358015032s ago: executing program 0 (id=5893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x4040) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) socket$kcm(0x11, 0x3, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) 5.357556473s ago: executing program 1 (id=5894): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 4.854468623s ago: executing program 4 (id=5898): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/244, 0xf4}], 0x5, &(0x7f00000003c0)=""/27, 0x1b}, 0x20) (async) recvmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/244, 0xf4}], 0x5, &(0x7f00000003c0)=""/27, 0x1b}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x8, 0x400, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x12, 0x2, [{0x7, 0x6, "1c0d1c94"}, {0x5, 0x6, "88d52b4f"}]}, @generic={0x44, 0xe, "79d69eab50cefd969be30fe0"}, @cipso={0x86, 0x1f, 0x0, [{0x1, 0x11, "4cc3c79aef756db397bd76e21a1d77"}, {0x0, 0x8, "a40f2e587b27"}]}, @timestamp_prespec={0x44, 0x24, 0xcb, 0x3, 0x0, [{@multicast1, 0xd562}, {@empty, 0x6}, {@local, 0x5860000}, {@dev={0xac, 0x14, 0x14, 0x44}}]}, @end, @timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0x5, [{@rand_addr=0x64010100, 0x4416}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x7, 0x0, 0x0, 0xa, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @float={0xd, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e]}}, &(0x7f0000000780)=""/218, 0x4b, 0xda, 0x0, 0x2, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900)={0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900)={0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0xa5551a65120e1527}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x5, 0xa5551a65120e1527}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x4e, 0x13, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x4e, 0x13, 0x200, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x2, 0x5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0x1a, &(0x7f00000005c0)=""/26, 0x41000, 0x20, '\x00', r2, @fallback=0x32, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r5, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x800}, 0x94) socket$alg(0x26, 0x5, 0x0) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x0, @loopback}, &(0x7f0000000b40)=0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000b80)={0x1, 0x39, 0x23c8d596}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0)={r3}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [""]}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000d00)={'wg1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r11 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r11, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14) (async) getsockname$packet(r11, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000e80)=@buf={0x28, &(0x7f0000000e40)="e9131b9b0eb95c89fb535aae688f162ab2990d28670044114c11ac982424564364b76d7c5b3a9a69"}) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000ec0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7f, 0x3ff, 0x1, 0xffffffffffff7821, 0x6, 0x4}, {0x80000001, 0x4, 0x9, 0x3, 0x388e, 0x3}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r9) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x78, r12, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1e}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6c}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x78}}, 0x1) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r13, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r14, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) 4.743122303s ago: executing program 3 (id=5900): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffb, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0xa0, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xf32fd785104e0667}, @TCA_TBF_BURST={0x8, 0x6, 0x8000}, @TCA_TBF_RATE64={0xc, 0x4, 0x8afc866cf65079be}, @TCA_TBF_PBURST={0x8, 0x7, 0x1ecb}, @TCA_TBF_PRATE64={0xc, 0x5, 0x41fd7f3b2d7eb6c7}, @TCA_TBF_RATE64={0xc, 0x4, 0xed9a6de1a6efece2}]}}]}, 0xa0}}, 0x0) 2.066035014s ago: executing program 4 (id=5901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d8"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/211, 0xd3}, {&(0x7f00000007c0)=""/145, 0x91}, {&(0x7f0000000880)=""/8, 0x8}], 0x8}, 0x40010e21) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000, 0x0, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a00, 0x2010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r8, 0x12, r6}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='L\x00', 0x2}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x8, 0x289, 0xe3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 1.996097795s ago: executing program 1 (id=5902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x7c, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000100)={{0x0, 0x3, 0x5, 0x0, 0x6}, &(0x7f0000000040)}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x20, 0x14}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$alg(0x26, 0x5, 0x0) 1.988390113s ago: executing program 2 (id=5903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000001000000620121000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x4, 0x4, 0xa, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x8, 0x4, 0x9}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r1, 0x25, 0x5, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f00000003c0)=[&(0x7f00000001c0)='@:\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)=',{}@\x00', &(0x7f0000000280)=']#@\x00', &(0x7f00000002c0)='*+@.#{-$^]$}\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='+\x00', &(0x7f0000000380)='\x00'], 0x0, 0x5}}, 0x30) 1.918554335s ago: executing program 0 (id=5904): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000080000000800000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) socket$kcm(0x2, 0xa, 0x2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000000002d1dbd00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000030838f52b32fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fe800000000000000000000000000013fe880000000000000000000000000001"], 0x0) getpeername$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000007110af22001afba063cc00000000000095000000000000003bdc1d4ca2cc937e91da2eef90ef45b39dabd51aa76d0ce31ddd7da7ab246fcdbe4dbf98d63310af7ea44fc6575a2b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r7, 0x29, 0x7, 0x1, 0x7, 0x24, @loopback, @loopback, 0x40, 0x8, 0x1000, 0x7}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002440)={{r1, &(0x7f0000000500)='-[{!$\x00', 0x6101c0, &(0x7f0000000540)={@align=0x7f, {0x200, 0x0, 0x9, 0xc}}, 0x7, &(0x7f0000000580), &(0x7f0000000680)=0xfffffff8}, 0xa, &(0x7f0000002300)=[{0x3, 0x401, &(0x7f00000006c0)='*%#)\x00', &(0x7f0000000700)="ed2ca67526ae1bc2361cdedb5fc52f5611bf38bdc1c8d4e44985c47bbb5f2f2a4a5602b97aac492d01f50b1d1f34a0251603e269f3904761a1b378905199e01cbd973509c03b", 0x46, 0x20}, {0x2, 0x1000, &(0x7f0000000780)=',\x00', &(0x7f00000007c0)="1cd6828b89da092385ce50f4b1e05a4372265b081dd79db56e114a84856e4ba5a699", 0x22, 0x12}, {0x1, 0xfffff800, &(0x7f0000000800)='\x00', &(0x7f0000000940)="9ff5d51dcdd6dec198cc3d118f970625d00eb5f4ec1f97282aedd5008e34b21c9736a52b27b2a4097c48b2f2782100c0886fff80f1b8537dc9afa8b4cdeb5039ec10e30b0057bddb415d20e1c428cd1e5e0c3758f09b578173ad914cab2cddc37f132a1939a3a156d1a79389d576a651b24d3f351bc749b3bf96f46b14caae512c521605d5f21ef9e620c9791fa2408c22c5aa3d7cdd81848ac7bc2af18be8bdef1bac072b85df10eaa6", 0xaa, 0x2}, {0x1, 0x0, &(0x7f0000000a00)='$$\x00', &(0x7f0000000a40)="b25179da3d2b140c4b50e8a744377cf0af501c59b08cdacceebda41598bfac540cae3b9b04a321d9fb38ec9ec7824983b5d1ee81e76d5522f3d9662e47504c4f3531719f0178b96712727eb55e18b8caf15c5cfd2049cfbab47551d8bd95db225b39c1cb2800e18439902b72d25c859c5b09d16570c495ee3238e79c8d1e7af9f8cf6cd7", 0x84}, {0x1, 0x80000000, &(0x7f0000000b00)='@&\x00', &(0x7f0000000b40)="a7d56ee3eef96ebdfec98210687e1e28c85ae8476353e2aaf850f77ee39dce550b37143115408d8ba977a74175b366fd2a1e7e3475c7ac996117828948f646ea5433f978bd75cd5ed3ed1b9678115c01abd7a6e2377e71730bb760cd32e6540222a2d2f93067c28706", 0x69, 0x18}, {0x3, 0x40, &(0x7f0000000bc0)='+/@\\{:*\x00', &(0x7f0000000d00)="caf9323aade215515cf2b61869bf1b278a506d2dd6698222a4508205f4cee6d733a375ac68f0327a1ca0d1359b4354cb667f82ee9ac36c95d0944ae3f1e33f33d777393a4a660aa7dbd0196cbeb406d2b2fecbf15d31c15d6ba557256b8221575cf408c5f723b1f265a17a3f6d161421a4eb2daeaa63737e7caa3ab58a63cf0d9197e8eb9f829f9c313bbffeff136f16f7ec264103eaf6059d8fdd7b369422ce930a5458205c0e6003a0e93b028a35cd8588dbbf37634e71c46448616a516858cc4fd1817f6742a5ef1f80be02c01cdb1fc845b24be9a2a88ca6b470e10714f7b175479d56f4d26fe4832388", 0xec, 0x30}, {0x1, 0x9, &(0x7f0000000e00)=')#]}\x00', &(0x7f0000000e40)="7774e25720e95083a02b926eb31b690937b72fd3736c1b8aa62060b271cf89b9b4411a2260d84d264a937025160c5dbb898110aa6954f737fd927bcedc1a5b14469ef645a35263ef7486f553996c2113500a288cb2f5a475a1b392f65d6dc12c0a9630a8c4b9330a5e73701fc535fc695ed9c557394015d7e69d91d8ba98c970d813ca0f0497459b5b1d417b68b1bb2f3522dda12bad58752f638ea50a40cd76b3c2043c4d38e2824d50606167f42ea21edad3db6c3ab645594bd716cb19", 0xbe, 0x10}, {0x2, 0x17ce, &(0x7f0000000f00)='flow\x00', &(0x7f0000000f40)="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", 0xfd, 0x10}, {0x1, 0x1, &(0x7f0000001080)='\x00', &(0x7f00000010c0)="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", 0xff, 0x6}, {0x3, 0xc000, &(0x7f00000011c0)='$\x00', &(0x7f0000001300)="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", 0x1000, 0x3a}]}) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="1e0000000600000004007400b606000080210000", @ANYRES32, @ANYBLOB="f7d0d93600"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0400000003000000050000000b00"/28], 0x50) r11 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="0dda2dfa", 0x4}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) recvmsg$can_j1939(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1}, 0x2140) 1.801095959s ago: executing program 2 (id=5905): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) socket$inet6(0xa, 0xa, 0x9c7) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040091}, 0x2400c000) 1.513784544s ago: executing program 3 (id=5906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f00000001c0)={0xfffffffffffffffd, 0x6, 0x2, 0x3, 0x7fffffff}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x1ff}]}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.410368774s ago: executing program 2 (id=5907): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @remote, 0x0}, &(0x7f0000000140)=0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x8000000000000000, 0x9) ppoll(&(0x7f0000000280)=[{r8, 0x1000}, {r4, 0xc2}], 0x2, &(0x7f00000002c0), &(0x7f0000000340)={[0xffffffff00000001]}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000005c0)={r5, r8}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0xa0, 0xff, 0x6, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7800, 0x1, 0x8, 0x6}}) r10 = socket(0xf, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff1, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x24040000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x7f, 0x9, 0x8, @private2, @private2, 0x80, 0x1, 0x8, 0x1}}) getsockopt$inet_mreqn(r0, 0x0, 0x4965b5f0952ab112, &(0x7f0000000400)={@multicast1, @loopback, 0x0}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x6, 0x8, {{0x15, 0x4, 0x3, 0x2, 0x54, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x13, 0xab, [@local, @broadcast, @remote, @local]}, @rr={0x7, 0xb, 0x26, [@multicast1, @loopback]}, @lsrr={0x83, 0x1f, 0xe1, [@private=0xa010102, @private=0xa010100, @loopback, @empty, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="100025bd7000fcdbdf250c0000005400018008000100", @ANYRES32=r3, @ANYBLOB="a40f0089d13c1b0070615cb98181b0984186738b0c6aca3df014ca483682f2aeed10eefb19b8e79c60f502a9874950c678d367fb9ec18c9998432b6d841a6404743001f13f3248943566541d53e4dd619ce9", @ANYRES32=r6, @ANYBLOB="08000100a345ee253d4461885b352dbde16926ca9724444c76584f3e4639ae6e6fc809df9119040f3573fc2ac5eb", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=r16, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x940) close(r0) 1.352054684s ago: executing program 0 (id=5908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}}}, 0xb8}}, 0x2c040800) 1.147182842s ago: executing program 0 (id=5909): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)='\x00'/10, 0xa) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000000cc0)=""/4084, 0x835) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000700)={0x3, 0x3}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r5, &(0x7f00000002c0)="e7c209415f543e818b62a416d6f158e235ce55bd27e0e84460703c2b8af19ccfdf9dc457be436c35827db20cefe671c6a948e4f8c05c82e6be83f82b2a894fbaf1f7a26badc73d43047150f1cdacd3434b85f9b45473a928ee9f6019b1796b7649c36ad4e98fe2656962d95e9ede6384156508e862574265a91b67ad5771a0a99e948fe4fc6500bcb8dadb536824ae17bb4447eeac1a9eb375e995d1590a6f773d", &(0x7f0000000500)=@buf="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", 0x4}, 0x20) sendmmsg$alg(r4, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="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", 0x738}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x644000, 0x0) getsockopt$inet_buf(r6, 0x118, 0x2f, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r6, @ANYRESOCT, @ANYRESOCT=r3], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000006c0)=@ethtool_eee={0x45, 0x80000001, 0x0, 0xb, 0x3, 0x5e9, 0x8001, 0x1, [0x9, 0x8]}}) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.002201653s ago: executing program 2 (id=5910): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000002280)={0xa, 0x4e21, 0x10c8, @mcast2, 0x16}, 0x1c, 0x0, 0x0, &(0x7f0000002400)=[@hopopts={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x21, 0x3, '\x00', [@generic={0xfd, 0xc, "aeeca38f791ee0874f06be62"}, @ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}], 0x50}}], 0x1, 0x4000) 1.001590954s ago: executing program 4 (id=5911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) (async, rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) (rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) (async) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) (async, rerun: 64) r5 = getpid() (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r2, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x2c}}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x1, 0x0, {0x147, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x23fad7d0, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404a880}, 0x42115) (async, rerun: 32) r8 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 903.951821ms ago: executing program 0 (id=5912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x8, 0x7fffffffffffffff, 0x5, 0x7, 0xd022, 0x0, 0x5, 0x8000, 0x6, 0x7fffffffffffffff, 0x800, 0x6}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf7a4d}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x58}}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4]}, 0x94) 896.306288ms ago: executing program 4 (id=5913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000ff00000001c2dd19053bbb08988168194139b75421a843187b32fcbb2e1db9d6a704dbba50bf7df91679ca996f169c9f04031bc8b59e50290540ea72ff6e2a04aa83580c8cc54bf89bb1c7e0fb9d0573e82b50b9f468a2a17fc8e996210eedb8109dcee17f473d79ed94dc16a37d17b651f74824"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 889.725167ms ago: executing program 2 (id=5914): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x7, 0xf, 0x2}, {0x4, 0x2, 0x1}, {0x0, 0x7}], 0x3, 0x10, 0x6, 0xc7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00e0ffffff000000000000040000000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) 842.013661ms ago: executing program 3 (id=5915): socket(0x28, 0x6, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x9}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)=ANY=[]) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2c08004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) (async, rerun: 64) r8 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) (async, rerun: 32) connect$l2tp6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast1, 0x4, 0x2}, 0x20) (async, rerun: 32) connect$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x2}, 0x20) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async, rerun: 64) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x4000000) unshare(0x2c020400) 811.841098ms ago: executing program 1 (id=5916): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f80000000000800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0x0, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x5, 0x1, 0xd, 0xb, 0x8, 0x5, 0x5, 0xd, 0x3, 0x0, 0x1, 0x8, 0x3, 0x9, 0x1, 0x4], 0x1, [0x1, 0x180, 0x5, 0x4, 0x8, 0x6, 0x5, 0x0, 0x98db, 0x7c65, 0x1, 0x7, 0x36c9, 0x6, 0x8, 0x1], [0x7f, 0x9, 0x1, 0x8, 0x2, 0x1, 0x3, 0x8, 0xb, 0x1, 0x5318, 0xb5b, 0x2, 0x0, 0xf409, 0x1]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x8) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}]}, 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000001c0), 0x0}, 0x20) close(r0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4) 732.126166ms ago: executing program 4 (id=5917): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) poll(&(0x7f0000001d00)=[{r0, 0x1}], 0x1, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000a40)={{r3, 0x3ff, 0x2, 0x8, 0x0, 0x5, 0x800000000, 0x2, 0x7, 0x0, 0x5, 0x3, 0x0, 0x5, 0x7ff}, 0x18, [0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x800) recvmmsg(r5, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40002062, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) unshare(0x400) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000480)={0x0, 0x26000, 0x800, 0xfffffffe, 0x1}, 0x20) 597.466475ms ago: executing program 2 (id=5918): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) close(0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4600000010000108fdffffff00000070c652da00", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) 550.547906ms ago: executing program 3 (id=5919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xfff3, 0xffe0}, {0x2, 0xfffe}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x1, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1e0}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xead3e3ffa84aeaef}}, [@NFT_MSG_NEWOBJ={0x58, 0x12, 0xa, 0x402, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x44, 0x4, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}]}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x40040) recvfrom(r2, &(0x7f0000001780)=""/4096, 0x1000, 0x10020, &(0x7f0000002780)=@in6={0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}, 0x80) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000006f5c000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/44}, 0x20) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x7, 0x0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 381.881588ms ago: executing program 4 (id=5920): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="00000200000008000007db29623b3ec1ba688c3ff0100402", 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001020000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffe09, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r6, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r7, 0xfffff789) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1000, 0x2, 0x8002, 0x103, 0xa, 0x8, 0x1}, 0x9c) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 339.761734ms ago: executing program 3 (id=5921): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x61, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0x0, 0x3, [@m_bpf={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x6, 0x3, 0xffffffffffffffff, 0x102b, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x80, 0x5, 0x0, 0x4, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x9ad, 0xf1, 0x2, 0x10000, 0x101}}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x0, 0x6, "e34dddbd29e127d2258cc3fe083180c78d354a50eb489fe35aabec255cbb8604c6b69cbb4a4749274ea6616d43ef209244b4024c42e3a4b1f5a730c2a2851f2cc9588c086e48cb788c5fb894844050842ff57c0ac7b4a30ea02d36"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mpls={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x0, 0x7, 0x8}]}, {0x0, 0x6, "c2fcd4e8b992df7b121e86f9e226f6428fc608d968615c1233bd73caa8289891dcd8180567f1f5968d37f49822928ca3a44e0fc93fac"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x6, 0xd, 0x6, 0x14f1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0x0, 0x4, @broadcast}, @TCA_SKBMOD_DMAC, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local}, @TCA_SKBMOD_DMAC={0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x4, 0x820, 0xffffffffffffffff, 0x1, 0x8}, 0xe}}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x8, 0x4, 0xffffffffffffffff, 0xf, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0xf52}]}, {0x0, 0x6, "b1410e51abd91c19df03678c0a734d81f15d12da897bdfda147129939b701982f88ef1530658e77269b94e9578c525f6af9d0b09060f41d335cfe49f87770ed7cfae2bc46bad866cfe2e63954f12060e1e9773ec9687cf75bb8147cd5d44ff0e6670baf0986aa2415bf20da788e368e8b2ad7bf23e33e00571e6cadc2f42"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_nat={0x0, 0x16, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x1, 0x10000000, 0x80000001, 0x6}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8, 0x1, 0xfffffffffffffff8, 0x6, 0xfffffffe}, @private=0xa010101, @multicast2, 0xff000000, 0x1}}]}, {0x0, 0x6, "9d61a804491d93f3a318b13472c4c13c4a2ed17605e0276b2e69695fc6c745a8"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x3}}}}, @m_ct={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x0, 0x3, 0x1}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @remote}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_CT_MARK={0x0, 0x5, 0x7}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e20}, @TCA_CT_MARK={0x0, 0x5, 0x8}]}, {0x0, 0x6, "312feec9711d469aa9e09a47cb4ac7c821f6bbf7f8ede91cefa9514b34992034195a415f193d4bc02077d3c161c98c5c3f8b0a295aac7398c1dde1e03c3b8f9394e5e992ae65aadd44e8224144b3182b648787b711161405176528d797e5527a9f3ae11e84ada47772eade600db074b6d06490dac5292fbb3c18ea2a645e79039d8356b8dc8aeef1edf6b6734a4273ac83466de3bdfe7120500b77accd616acbc031a5923303ee6ccd7939b00a77d36e8aacf8541778ac2eb523656711efe838f558b78558e364942ecd41f46bc6af1fe865686306ed594958"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x20c}}, 0x2000c800) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x9, 0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x158, 0x7, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x85, 0x6, {0x400, 'raw\x00', 0x5, 0x7, "e7baf755bed1ecc3f5fc2df03b3d0f06d09ccf684e4411ebfca469e487dfafc236a2bd68996c4dd4ae902cbfc9d7f59928859ad2d968df34a1ed9135ff9e64c3c00d2e5d74e326e9476228c1aadf95b61690dc9047103ce3b7c636"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x75, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) unshare(0x26000400) (async) r6 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2057, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 130.631004ms ago: executing program 0 (id=5922): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 0s ago: executing program 3 (id=5923): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) kernel console output (not intermixed with test programs): 02401][T23855] bond4: entered allmulticast mode [ 678.209919][T23855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.777377][T23882] bond5: option mode: invalid value (254) [ 678.784454][T23882] bond5 (unregistering): Released all slaves [ 678.930969][T23885] __nla_validate_parse: 3 callbacks suppressed [ 678.930985][T23885] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.4319'. [ 680.144401][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 680.152503][ C1] lec:lec_tx_timeout: lec0 [ 680.157585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 680.305679][T23815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.561613][T23906] xt_l2tp: missing protocol rule (udp|l2tpip) [ 680.592318][T23906] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 681.206704][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4334'. [ 681.229915][T23932] netlink: 'syz.1.4332': attribute type 5 has an invalid length. [ 681.435859][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'. [ 682.026594][T23975] tipc: Started in network mode [ 682.039858][T23975] tipc: Node identity ca2f47204b49, cluster identity 4711 [ 682.050702][T23975] tipc: Enabled bearer , priority 0 [ 682.069640][T23974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.081016][T23975] syzkaller0: entered promiscuous mode [ 682.087748][T23975] syzkaller0: entered allmulticast mode [ 682.097093][T23979] openvswitch: netlink: IP tunnel dst address not specified [ 682.182415][T23975] tipc: Resetting bearer [ 682.208098][T23973] tipc: Resetting bearer [ 682.278043][T23973] tipc: Disabling bearer [ 682.500850][T24001] netlink: 'syz.0.4351': attribute type 1 has an invalid length. [ 682.633484][T24001] bond5: entered promiscuous mode [ 682.640146][T24001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 682.649193][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'. [ 682.682888][T24011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4354'. [ 683.196565][T24038] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4360'. [ 683.250210][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.260156][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.268177][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.276173][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.284184][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.292173][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.300155][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.308140][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.316142][T24041] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 683.497689][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 683.683786][T24062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4369'. [ 684.060134][T24073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4373'. [ 684.082362][T24073] netlink: 'syz.4.4373': attribute type 2 has an invalid length. [ 684.608334][T24091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 684.626333][T24094] x_tables: duplicate underflow at hook 1 [ 684.778114][T24102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 684.806985][T24102] syzkaller1: linktype set to 825 [ 684.980491][T24109] nbd: must specify an index to disconnect [ 685.164840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 685.172948][ C1] lec:lec_tx_timeout: lec0 [ 685.179205][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 685.453102][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4393'. [ 685.511938][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 685.678522][T24138] netlink: 'syz.2.4397': attribute type 1 has an invalid length. [ 685.687517][T24138] netlink: 'syz.2.4397': attribute type 2 has an invalid length. [ 685.852300][T24148] netlink: 'syz.2.4399': attribute type 39 has an invalid length. [ 686.036701][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.056620][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.079084][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.090457][T24162] sctp: [Deprecated]: syz.2.4401 (pid 24162) Use of int in max_burst socket option deprecated. [ 686.090457][T24162] Use struct sctp_assoc_value instead [ 686.112446][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.123861][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.143918][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.209600][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.222871][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.238309][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.258230][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.281004][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.312148][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.354020][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.370820][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.407539][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.407542][T24176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4407'. [ 686.407658][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.441058][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.453592][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.544686][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.566313][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.571830][T24185] netlink: 'syz.1.4409': attribute type 1 has an invalid length. [ 686.592269][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.672577][T24185] bond7: entered promiscuous mode [ 686.680770][T24185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.689351][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.705228][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.772427][T24185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 686.780317][T24185] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 686.791200][T24185] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 686.805589][T24185] bond7: (slave vcan1): making interface the new active one [ 686.813182][T24185] vcan1: entered promiscuous mode [ 686.823603][T24185] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 686.841067][T24157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 686.888677][T24199] netlink: 316 bytes leftover after parsing attributes in process `syz.3.4414'. [ 686.987721][T24199] netlink: 'syz.3.4414': attribute type 16 has an invalid length. [ 687.036171][T24199] netlink: 'syz.3.4414': attribute type 17 has an invalid length. [ 687.125848][T24199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.152267][T24199] 8021q: adding VLAN 0 to HW filter on device ` [ 687.192643][T24199] net_ratelimit: 48 callbacks suppressed [ 687.192656][T24199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.366254][T24225] syzkaller1: entered promiscuous mode [ 687.383782][T24225] syzkaller1: entered allmulticast mode [ 687.417388][T24226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.889637][T24250] netlink: 'syz.4.4427': attribute type 1 has an invalid length. [ 688.039690][T24251] bond6: (slave bridge4): making interface the new active one [ 688.064075][T24251] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 688.110153][T24254] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 688.121204][T24248] syzkaller0: entered promiscuous mode [ 688.134739][T24248] syzkaller0: entered allmulticast mode [ 688.478904][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 688.637480][T24278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4431'. [ 688.676889][T24278] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 689.143750][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'. [ 689.226270][T24302] ip6tnl1: entered allmulticast mode [ 689.470999][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 689.652390][T24315] vxcan3: entered promiscuous mode [ 690.194819][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.202896][ C1] lec:lec_tx_timeout: lec0 [ 690.208281][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 690.281096][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 690.633257][T24358] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4450'. [ 690.900837][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4453'. [ 690.967657][T24372] team0: Port device team_slave_0 removed [ 691.031740][T24374] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4455'. [ 691.151255][T24376] dummy0: entered allmulticast mode [ 691.268995][T24382] dummy0: left allmulticast mode [ 692.662322][T24438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4470'. [ 694.452993][T24391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.688475][T24445] xt_hashlimit: size too large, truncated to 1048576 [ 694.864721][T24455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4475'. [ 695.028295][T24451] syzkaller1: entered promiscuous mode [ 695.062961][T24451] syzkaller1: entered allmulticast mode [ 695.406676][T24482] FAULT_INJECTION: forcing a failure. [ 695.406676][T24482] name failslab, interval 1, probability 0, space 0, times 0 [ 695.419711][T24482] CPU: 0 UID: 0 PID: 24482 Comm: syz.4.4480 Not tainted syzkaller #0 PREEMPT(full) [ 695.419738][T24482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.419751][T24482] Call Trace: [ 695.419760][T24482] [ 695.419769][T24482] dump_stack_lvl+0xe8/0x150 [ 695.419806][T24482] should_fail_ex+0x412/0x560 [ 695.419844][T24482] should_failslab+0xa8/0x100 [ 695.419873][T24482] __kmalloc_noprof+0xe8/0x760 [ 695.419898][T24482] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 695.419929][T24482] tomoyo_realpath_from_path+0xe3/0x5d0 [ 695.419954][T24482] ? tomoyo_domain+0xd7/0x130 [ 695.419984][T24482] ? tomoyo_path_number_perm+0x219/0x630 [ 695.420015][T24482] tomoyo_path_number_perm+0x246/0x630 [ 695.420048][T24482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 695.420076][T24482] ? __lock_acquire+0x6b5/0x2cf0 [ 695.420133][T24482] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 695.420185][T24482] ? __fget_files+0x2a/0x420 [ 695.420210][T24482] ? __fget_files+0x2a/0x420 [ 695.420229][T24482] ? __fget_files+0x3a0/0x420 [ 695.420248][T24482] ? __fget_files+0x2a/0x420 [ 695.420273][T24482] security_file_ioctl+0xc3/0x2a0 [ 695.420304][T24482] __se_sys_ioctl+0x47/0x170 [ 695.420330][T24482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.420353][T24482] do_syscall_64+0x15f/0xf80 [ 695.420378][T24482] ? trace_irq_disable+0x3b/0x140 [ 695.420404][T24482] ? clear_bhb_loop+0x40/0x90 [ 695.420429][T24482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.420449][T24482] RIP: 0033:0x7f5fc659cdd9 [ 695.420468][T24482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.420486][T24482] RSP: 002b:00007f5fc7470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.420510][T24482] RAX: ffffffffffffffda RBX: 00007f5fc6815fa0 RCX: 00007f5fc659cdd9 [ 695.420525][T24482] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 695.420538][T24482] RBP: 00007f5fc7470090 R08: 0000000000000000 R09: 0000000000000000 [ 695.420550][T24482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.420562][T24482] R13: 00007f5fc6816038 R14: 00007f5fc6815fa0 R15: 00007ffc0ab28bf8 [ 695.420596][T24482] [ 695.420603][T24482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 695.569699][T24486] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4482'. [ 695.709929][T24484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4481'. [ 696.033485][T24505] netlink: 'syz.4.4486': attribute type 1 has an invalid length. [ 696.042065][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4486'. [ 696.174293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5960 ms [ 696.182440][ C1] lec:lec_tx_timeout: lec0 [ 696.188515][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 696.199691][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 240 seconds [ 696.225457][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 240 seconds [ 696.237079][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 240 seconds [ 696.312593][T24507] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 696.402464][T24522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4489'. [ 696.426648][T24523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4490'. [ 696.461940][T24509] batman_adv: batadv0: Interface deactivated: gretap1 [ 696.729881][T24535] "syz.4.4493" (24535) uses obsolete ecb(arc4) skcipher [ 696.961666][T24543] FAULT_INJECTION: forcing a failure. [ 696.961666][T24543] name failslab, interval 1, probability 0, space 0, times 0 [ 696.985064][T24543] CPU: 1 UID: 0 PID: 24543 Comm: syz.4.4495 Not tainted syzkaller #0 PREEMPT(full) [ 696.985096][T24543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.985119][T24543] Call Trace: [ 696.985128][T24543] [ 696.985137][T24543] dump_stack_lvl+0xe8/0x150 [ 696.985178][T24543] should_fail_ex+0x412/0x560 [ 696.985218][T24543] should_failslab+0xa8/0x100 [ 696.985249][T24543] __kmalloc_noprof+0xe8/0x760 [ 696.985276][T24543] ? tomoyo_encode+0x28b/0x550 [ 696.985305][T24543] tomoyo_encode+0x28b/0x550 [ 696.985341][T24543] tomoyo_realpath_from_path+0x58d/0x5d0 [ 696.985366][T24543] ? tomoyo_domain+0xd7/0x130 [ 696.985396][T24543] ? tomoyo_path_number_perm+0x219/0x630 [ 696.985427][T24543] tomoyo_path_number_perm+0x246/0x630 [ 696.985459][T24543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 696.985488][T24543] ? __lock_acquire+0x6b5/0x2cf0 [ 696.985538][T24543] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 696.985592][T24543] ? __fget_files+0x2a/0x420 [ 696.985618][T24543] ? __fget_files+0x2a/0x420 [ 696.985638][T24543] ? __fget_files+0x3a0/0x420 [ 696.985658][T24543] ? __fget_files+0x2a/0x420 [ 696.985684][T24543] security_file_ioctl+0xc3/0x2a0 [ 696.985716][T24543] __se_sys_ioctl+0x47/0x170 [ 696.985744][T24543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.985767][T24543] do_syscall_64+0x15f/0xf80 [ 696.985794][T24543] ? trace_irq_disable+0x3b/0x140 [ 696.985822][T24543] ? clear_bhb_loop+0x40/0x90 [ 696.985849][T24543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.985870][T24543] RIP: 0033:0x7f5fc659cdd9 [ 696.985891][T24543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.985908][T24543] RSP: 002b:00007f5fc7470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.985932][T24543] RAX: ffffffffffffffda RBX: 00007f5fc6815fa0 RCX: 00007f5fc659cdd9 [ 696.985947][T24543] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 696.985959][T24543] RBP: 00007f5fc7470090 R08: 0000000000000000 R09: 0000000000000000 [ 696.985972][T24543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.985984][T24543] R13: 00007f5fc6816038 R14: 00007f5fc6815fa0 R15: 00007ffc0ab28bf8 [ 696.986020][T24543] [ 696.986177][T24543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.285370][T24549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4492'. [ 697.671286][T24572] netlink: 'syz.3.4500': attribute type 10 has an invalid length. [ 697.775424][T24572] 8021q: adding VLAN 0 to HW filter on device ` [ 697.836198][T24572] bond0: (slave `): Enslaving as an active interface with an up link [ 698.790061][T24608] bond0: entered promiscuous mode [ 698.807609][T24608] batadv0: entered promiscuous mode [ 698.814175][T24608] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 698.824795][T24608] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 698.905268][T24608] bond0: left promiscuous mode [ 698.927437][T24608] batadv0: left promiscuous mode [ 699.114875][T24629] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 699.122884][T24629] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4511'. [ 699.276564][T24631] netlink: 'syz.4.4512': attribute type 1 has an invalid length. [ 699.296773][T24631] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4512'. [ 699.333846][T24631] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4512'. [ 699.361972][T24642] netlink: 'syz.1.4514': attribute type 12 has an invalid length. [ 699.491256][T24647] FAULT_INJECTION: forcing a failure. [ 699.491256][T24647] name failslab, interval 1, probability 0, space 0, times 0 [ 699.512817][T24647] CPU: 1 UID: 0 PID: 24647 Comm: syz.2.4515 Not tainted syzkaller #0 PREEMPT(full) [ 699.512846][T24647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.512860][T24647] Call Trace: [ 699.512868][T24647] [ 699.512877][T24647] dump_stack_lvl+0xe8/0x150 [ 699.512916][T24647] should_fail_ex+0x412/0x560 [ 699.512975][T24647] should_failslab+0xa8/0x100 [ 699.513003][T24647] __kmalloc_noprof+0xe8/0x760 [ 699.513024][T24647] ? ioctl_standard_iw_point+0x516/0xd90 [ 699.513046][T24647] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 699.513072][T24647] ioctl_standard_iw_point+0x516/0xd90 [ 699.513113][T24647] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 699.513133][T24647] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 699.513155][T24647] ? __pfx___mutex_lock+0x10/0x10 [ 699.513188][T24647] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 699.513208][T24647] ioctl_standard_call+0xaf/0x1b0 [ 699.513231][T24647] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 699.513249][T24647] wext_ioctl_dispatch+0xee/0x410 [ 699.513267][T24647] ? __pfx_ioctl_standard_call+0x10/0x10 [ 699.513291][T24647] wext_handle_ioctl+0x10f/0x1d0 [ 699.513313][T24647] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 699.513332][T24647] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 699.513371][T24647] sock_ioctl+0x159/0x7f0 [ 699.513396][T24647] ? __pfx_sock_ioctl+0x10/0x10 [ 699.513417][T24647] ? __fget_files+0x2a/0x420 [ 699.513433][T24647] ? __fget_files+0x3a0/0x420 [ 699.513449][T24647] ? __fget_files+0x2a/0x420 [ 699.513469][T24647] ? bpf_lsm_file_ioctl+0x9/0x20 [ 699.513492][T24647] ? __pfx_sock_ioctl+0x10/0x10 [ 699.513512][T24647] __se_sys_ioctl+0xfc/0x170 [ 699.513535][T24647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.513557][T24647] do_syscall_64+0x15f/0xf80 [ 699.513580][T24647] ? trace_irq_disable+0x3b/0x140 [ 699.513602][T24647] ? clear_bhb_loop+0x40/0x90 [ 699.513623][T24647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.513640][T24647] RIP: 0033:0x7fa1af59cdd9 [ 699.513656][T24647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.513672][T24647] RSP: 002b:00007fa1b037b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.513692][T24647] RAX: ffffffffffffffda RBX: 00007fa1af815fa0 RCX: 00007fa1af59cdd9 [ 699.513704][T24647] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 699.513715][T24647] RBP: 00007fa1b037b090 R08: 0000000000000000 R09: 0000000000000000 [ 699.513724][T24647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.513734][T24647] R13: 00007fa1af816038 R14: 00007fa1af815fa0 R15: 00007fffb5aea778 [ 699.513762][T24647] [ 699.937298][T24654] tipc: Enabled bearer , priority 0 [ 699.986134][T24654] tipc: Disabling bearer [ 700.056220][T24664] hsr0: entered promiscuous mode [ 700.073591][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 700.092094][T24666] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 700.100576][T24666] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 700.133845][T24664] hsr_slave_0: left promiscuous mode [ 700.159361][T24664] hsr_slave_1: left promiscuous mode [ 700.176044][T24664] hsr0 (unregistering): left promiscuous mode [ 700.383784][T24676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.073828][T24693] syzkaller0: entered promiscuous mode [ 701.089267][T24693] syzkaller0: entered allmulticast mode [ 701.113265][T24693] netlink: 49 bytes leftover after parsing attributes in process `syz.2.4528'. [ 701.130503][T24693] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4528'. [ 701.140974][T24693] netlink: 49 bytes leftover after parsing attributes in process `syz.2.4528'. [ 701.164189][T24699] netlink: 'syz.3.4531': attribute type 3 has an invalid length. [ 701.174966][T24699] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4531'. [ 701.239206][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4531'. [ 701.522512][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 701.640751][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 701.706079][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 701.819815][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 701.952717][T24727] FAULT_INJECTION: forcing a failure. [ 701.952717][T24727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.999894][T24727] CPU: 1 UID: 0 PID: 24727 Comm: syz.4.4541 Not tainted syzkaller #0 PREEMPT(full) [ 701.999923][T24727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 701.999936][T24727] Call Trace: [ 701.999944][T24727] [ 701.999953][T24727] dump_stack_lvl+0xe8/0x150 [ 701.999991][T24727] should_fail_ex+0x412/0x560 [ 702.000030][T24727] _copy_to_user+0x31/0xb0 [ 702.000055][T24727] simple_read_from_buffer+0xe1/0x170 [ 702.000083][T24727] proc_fail_nth_read+0x1bb/0x230 [ 702.000109][T24727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.000134][T24727] ? rw_verify_area+0x2a6/0x4d0 [ 702.000158][T24727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.000180][T24727] vfs_read+0x20c/0xa70 [ 702.000211][T24727] ? __pfx___mutex_lock+0x10/0x10 [ 702.000241][T24727] ? __pfx_vfs_read+0x10/0x10 [ 702.000268][T24727] ? __fget_files+0x2a/0x420 [ 702.000294][T24727] ? __fget_files+0x3a0/0x420 [ 702.000314][T24727] ? __fget_files+0x2a/0x420 [ 702.000355][T24727] ksys_read+0x150/0x270 [ 702.000382][T24727] ? __pfx_ksys_read+0x10/0x10 [ 702.000414][T24727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.000435][T24727] do_syscall_64+0x15f/0xf80 [ 702.000461][T24727] ? trace_irq_disable+0x3b/0x140 [ 702.000487][T24727] ? clear_bhb_loop+0x40/0x90 [ 702.000512][T24727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.000532][T24727] RIP: 0033:0x7f5fc655d60e [ 702.000552][T24727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.000570][T24727] RSP: 002b:00007f5fc746ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.000593][T24727] RAX: ffffffffffffffda RBX: 00007f5fc74706c0 RCX: 00007f5fc655d60e [ 702.000608][T24727] RDX: 000000000000000f RSI: 00007f5fc74700a0 RDI: 0000000000000006 [ 702.000621][T24727] RBP: 00007f5fc7470090 R08: 0000000000000000 R09: 0000000000000000 [ 702.000633][T24727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.000651][T24727] R13: 00007f5fc6816038 R14: 00007f5fc6815fa0 R15: 00007ffc0ab28bf8 [ 702.000685][T24727] [ 702.208919][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 702.216996][ C1] lec:lec_tx_timeout: lec0 [ 702.223133][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 702.481227][T24742] set match dimension is over the limit! [ 702.575162][T24758] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 702.769011][T24776] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 702.849523][T24764] bond6: entered promiscuous mode [ 702.871919][T24764] bond6: entered allmulticast mode [ 702.888651][T24764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 703.008326][T24771] bridge4: entered promiscuous mode [ 703.025767][T24771] bridge4: entered allmulticast mode [ 703.042109][T24771] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 703.074991][ T6478] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 703.194875][ T6487] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 703.279071][T24797] netlink: 'syz.1.4555': attribute type 10 has an invalid length. [ 703.305047][T24797] netlink: 'syz.1.4555': attribute type 27 has an invalid length. [ 703.553433][T24812] netlink: 'syz.3.4557': attribute type 1 has an invalid length. [ 703.568910][T24812] netlink: 'syz.3.4557': attribute type 2 has an invalid length. [ 703.721175][T24819] netlink: 'syz.0.4563': attribute type 5 has an invalid length. [ 704.089111][T24833] xt_CT: No such helper "syz1" [ 704.457771][T24855] netlink: 'syz.1.4570': attribute type 1 has an invalid length. [ 704.945390][T24869] 8021q: adding VLAN 0 to HW filter on device bond5 [ 704.972189][T24869] bond5 (unregistering): Released all slaves [ 705.014490][T24881] bond0: option arp_validate: invalid value (55553) [ 705.072490][T24883] bond0: option arp_validate: invalid value (55553) [ 705.139326][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 120 seconds [ 705.153683][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 120 seconds [ 705.165530][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 120 seconds [ 705.179276][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 120 seconds [ 705.217193][T24891] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 705.277427][T24891] __nla_validate_parse: 12 callbacks suppressed [ 705.277449][T24891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4581'. [ 705.317987][T24891] netem: unknown loss type 11 [ 705.326019][T24891] netem: change failed [ 705.399260][T24907] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4584'. [ 705.432249][T24905] bridge5: entered promiscuous mode [ 705.447413][T24905] bridge5: entered allmulticast mode [ 705.500375][T24908] bond7: entered promiscuous mode [ 705.507916][T24908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 705.520711][T24911] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 705.562898][T24915] syzkaller0: entered promiscuous mode [ 705.578653][T24915] syzkaller0: entered allmulticast mode [ 705.668343][T24923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4589'. [ 705.776856][T24921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.788065][T24921] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.813704][T24921] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 705.832113][T24923] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4589'. [ 706.247711][ T6478] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.275060][ T6478] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.325013][ T6478] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.336889][ T6478] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 706.502658][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4599'. [ 707.048832][T24996] validate_nla: 1 callbacks suppressed [ 707.048851][T24996] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 707.073565][T24997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4609'. [ 707.226577][T25003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.291218][T25008] netlink: 'syz.4.4613': attribute type 5 has an invalid length. [ 707.334516][T25008] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4613'. [ 707.532159][T25017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4617'. [ 707.648831][T25024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4615'. [ 708.044888][T25051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4626'. [ 708.334277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6110 ms [ 708.342374][ C1] lec:lec_tx_timeout: lec0 [ 708.347536][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 708.762612][T25085] 0ªX¹¦À: renamed from caif0 [ 708.789470][T25085] 0ªX¹¦À: entered allmulticast mode [ 708.803638][T25085] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 709.286638][T25101] netlink: 'syz.4.4645': attribute type 30 has an invalid length. [ 709.325633][ T33] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.348044][ T33] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.386688][ T33] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.410729][ T33] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.527270][T25119] sctp: [Deprecated]: syz.4.4651 (pid 25119) Use of int in max_burst socket option. [ 709.527270][T25119] Use struct sctp_assoc_value instead [ 709.661515][T25127] team_slave_1: Caught tx_queue_len zero misconfig [ 709.959221][T25140] netlink: 'syz.0.4657': attribute type 1 has an invalid length. [ 709.995718][T25140] netlink: 'syz.0.4657': attribute type 4 has an invalid length. [ 710.298252][T25159] __nla_validate_parse: 8 callbacks suppressed [ 710.298272][T25159] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4662'. [ 710.987165][T25183] netlink: 'syz.3.4667': attribute type 1 has an invalid length. [ 711.443704][T25200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4669'. [ 711.795828][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4669'. [ 711.832756][T14465] block nbd64: NBD_DISCONNECT [ 712.165754][T25231] netlink: 'syz.2.4675': attribute type 13 has an invalid length. [ 712.178348][T14114] udevd[14114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 712.187185][T25231] netlink: 'syz.2.4675': attribute type 17 has an invalid length. [ 712.241914][T25237] netlink: 'syz.1.4677': attribute type 1 has an invalid length. [ 712.408346][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 712.863496][T25231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.874090][T25231] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.890270][T25231] 0ªX¹¦À: left allmulticast mode [ 712.896961][T25231] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 713.347318][T25285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4679'. [ 713.397715][T25285] bond0: entered promiscuous mode [ 713.404032][T25285] bond_slave_0: entered promiscuous mode [ 713.410713][T25285] bond_slave_1: entered promiscuous mode [ 713.441080][T25285] bond0: left promiscuous mode [ 713.455363][T25285] bond_slave_0: left promiscuous mode [ 713.471342][T25285] bond_slave_1: left promiscuous mode [ 713.511174][T25295] netlink: 'syz.1.4684': attribute type 1 has an invalid length. [ 713.565440][T25295] bond8: entered promiscuous mode [ 713.571646][T25295] 8021q: adding VLAN 0 to HW filter on device bond8 [ 713.591663][T25285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.632760][T25299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 713.641937][T25295] ipvlan2: entered allmulticast mode [ 713.655763][T25295] bond8: entered allmulticast mode [ 713.663464][T25290] syzkaller0: entered promiscuous mode [ 713.673941][T25290] syzkaller0: entered allmulticast mode [ 713.765302][T25295] bond8: (slave bridge6): making interface the new active one [ 713.786052][T25295] bridge6: entered promiscuous mode [ 713.793989][T25295] bridge6: entered allmulticast mode [ 713.803780][T25295] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 713.992223][T25304] xt_ecn: cannot match TCP bits for non-tcp packets [ 714.096001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 714.104131][ C1] lec:lec_tx_timeout: lec0 [ 714.109463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 714.122055][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'. [ 714.221720][T25316] netlink: 'syz.4.4688': attribute type 28 has an invalid length. [ 714.540524][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4694'. [ 714.579038][T25330] tipc: New replicast peer: 255.255.255.255 [ 714.591032][T25330] tipc: Enabled bearer , priority 10 [ 714.660233][T25334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 714.910266][T25348] xt_l2tp: invalid flags combination: 8 [ 715.044776][T25352] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 715.065417][T25356] tipc: Enabling of bearer rejected, already enabled [ 715.210657][T25366] netlink: 'syz.2.4709': attribute type 1 has an invalid length. [ 715.222220][T25366] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4709'. [ 715.276273][T25362] syzkaller0: entered promiscuous mode [ 715.282004][T25362] syzkaller0: entered allmulticast mode [ 715.376600][T25375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4711'. [ 715.390579][T25375] netlink: 'syz.1.4711': attribute type 6 has an invalid length. [ 715.425067][T25375] netlink: 'syz.1.4711': attribute type 2 has an invalid length. [ 715.433755][T25375] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 715.458816][T25375] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4711'. [ 715.562035][T25384] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4713'. [ 715.714990][ T7806] tipc: Node number set to 2886997179 [ 715.750106][T25398] netlink: 'syz.1.4715': attribute type 10 has an invalid length. [ 715.772250][T25398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.787742][T25398] team0: Port device bond0 added [ 716.323180][T25434] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:20003 [ 716.358574][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4728'. [ 716.389580][T25438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4728'. [ 716.560609][T25444] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4730'. [ 717.112215][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 717.803845][T25494] pim6reg: entered allmulticast mode [ 718.199484][T25509] bond10 (unregistering): Released all slaves [ 718.276441][T25515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4749'. [ 718.288466][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'. [ 718.446011][T25518] validate_nla: 1 callbacks suppressed [ 718.446030][T25518] netlink: 'syz.4.4751': attribute type 1 has an invalid length. [ 718.475343][T25518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4751'. [ 718.507025][T25518] netlink: 'syz.4.4751': attribute type 4 has an invalid length. [ 718.540473][T25520] tc_dump_action: action bad kind [ 718.548538][T25518] netlink: 'syz.4.4751': attribute type 4 has an invalid length. [ 718.761785][T25534] Bluetooth: MGMT ver 1.23 [ 718.789487][T25531] geneve2: entered promiscuous mode [ 719.124867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 719.133014][ C1] lec:lec_tx_timeout: lec0 [ 719.138226][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 719.474755][T25570] netlink: 'syz.2.4764': attribute type 1 has an invalid length. [ 719.899788][T25596] openvswitch: netlink: IP tunnel dst address not specified [ 720.042488][T25596] netlink: 'syz.2.4772': attribute type 21 has an invalid length. [ 720.689130][T25637] bridge_slave_1: Caught tx_queue_len zero misconfig [ 720.777218][T25641] __nla_validate_parse: 7 callbacks suppressed [ 720.777240][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 720.825747][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 720.836539][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 721.001443][T25649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4786'. [ 721.482260][T25673] netlink: 'syz.4.4794': attribute type 4 has an invalid length. [ 721.910593][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4796'. [ 722.105903][T25705] syzkaller1: entered promiscuous mode [ 722.119214][T25705] syzkaller1: entered allmulticast mode [ 722.168023][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 722.188146][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 722.262123][T25706] team0: Port device team_slave_0 removed [ 722.549936][T25703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.590672][T25720] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 722.785506][T25734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4810'. [ 722.825491][T25734] vlan3: entered promiscuous mode [ 722.830769][T25734] bridge0: entered promiscuous mode [ 722.836656][T25734] vlan2: entered promiscuous mode [ 723.385885][T25772] xt_l2tp: missing protocol rule (udp|l2tpip) [ 724.127221][T25799] netlink: 'syz.2.4821': attribute type 10 has an invalid length. [ 724.150518][T25799] bond0: (slave wlan1): Opening slave failed [ 724.157199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 724.157232][ C1] lec:lec_tx_timeout: lec0 [ 724.165739][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 724.182091][T25798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.192398][T25816] netlink: 'syz.3.4823': attribute type 9 has an invalid length. [ 724.488340][T25789] delete_channel: no stack [ 724.552983][T25822] netlink: 'syz.0.4826': attribute type 11 has an invalid length. [ 724.678694][T25832] veth1_to_bridge: entered allmulticast mode [ 724.948718][T25847] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4833'. [ 724.954774][T25845] erspan1: entered allmulticast mode [ 725.122620][T25851] sctp: [Deprecated]: syz.2.4834 (pid 25851) Use of int in maxseg socket option. [ 725.122620][T25851] Use struct sctp_assoc_value instead [ 725.282709][T25861] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 725.554056][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'. [ 725.682588][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 726.009089][T25884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4842'. [ 726.061656][T25885] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4843'. [ 726.262456][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 270 seconds [ 726.275019][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 270 seconds [ 726.287832][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 270 seconds [ 726.302450][T25885] netlink: 'syz.0.4843': attribute type 4 has an invalid length. [ 726.595973][T25912] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4848'. [ 726.602920][T25911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4850'. [ 726.627443][T25911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4850'. [ 726.640062][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4850'. [ 726.761434][T25917] netlink: 'syz.4.4850': attribute type 4 has an invalid length. [ 726.922817][T25923] vlan2: entered promiscuous mode [ 726.928972][T25923] `: entered promiscuous mode [ 726.960796][ T30] audit: type=1804 audit(1777113878.886:16): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4853" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1556 res=1 errno=0 [ 726.992006][ T30] audit: type=1800 audit(1777113878.886:17): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4853" name="cgroup.controllers" dev="tmpfs" ino=1556 res=0 errno=0 [ 727.030110][T25929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4856'. [ 727.086357][T25934] syzkaller1: entered promiscuous mode [ 727.093725][T25934] syzkaller1: entered allmulticast mode [ 727.190368][T25936] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 727.220527][T25936] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 727.260784][T25936] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 727.311483][T25936] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 727.605491][T25947] syzkaller1: entered promiscuous mode [ 727.611428][T25947] syzkaller1: entered allmulticast mode [ 728.401475][T25954] : entered promiscuous mode [ 728.820726][T25974] syzkaller0: entered promiscuous mode [ 728.837121][T25974] syzkaller0: entered allmulticast mode [ 728.888546][T25974] netlink: 'syz.4.4871': attribute type 21 has an invalid length. [ 728.897154][T25974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4871'. [ 729.175237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 729.183340][ C1] lec:lec_tx_timeout: lec0 [ 729.188861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 729.239855][T25992] vlan3: entered promiscuous mode [ 729.269613][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 729.280905][ T30] audit: type=1804 audit(1777113881.186:18): pid=25999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4877" name="/newroot/370/cgroup.controllers" dev="tmpfs" ino=1911 res=1 errno=0 [ 729.324755][T25992] team0: entered promiscuous mode [ 729.352596][ T30] audit: type=1800 audit(1777113881.266:19): pid=25999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4877" name="cgroup.controllers" dev="tmpfs" ino=1911 res=0 errno=0 [ 729.606756][T25993] netlink: 'syz.2.4876': attribute type 1 has an invalid length. [ 729.657504][T26008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4876'. [ 731.788617][T26020] netlink: 'syz.0.4881': attribute type 1 has an invalid length. [ 731.805006][T26020] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4881'. [ 731.814475][T26020] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4881'. [ 732.077888][T26032] A link change request failed with some changes committed already. Interface veth3 may have been left with an inconsistent configuration, please check. [ 732.217498][T26039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'. [ 732.483508][T26048] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 732.806553][T26066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4894'. [ 733.119409][T26066] nbd: socks must be embedded in a SOCK_ITEM attr [ 733.150829][T14114] block nbd64: NBD_DISCONNECT [ 733.401560][T26090] openvswitch: netlink: Message has 8 unknown bytes. [ 733.406641][T14114] udevd[14114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 733.939470][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4907'. [ 733.954968][T26114] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4907'. [ 734.107954][T26120] dvmrp0: entered allmulticast mode [ 734.121408][T26128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4912'. [ 734.135730][T26128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4912'. [ 734.263854][T26131] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4914'. [ 734.273870][T26131] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4914'. [ 734.312249][T26134] netlink: 'syz.3.4913': attribute type 1 has an invalid length. [ 734.425444][T26136] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 734.437339][T26136] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 734.545587][T26134] bond8: (slave gretap3): making interface the new active one [ 734.570372][T26134] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 734.613001][T26144] macvlan2: entered promiscuous mode [ 734.641271][T26144] macvlan2: entered allmulticast mode [ 734.652773][T26136] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 734.662467][T26136] syzkaller1: Refused to change device type [ 734.883178][T26155] netlink: 'syz.3.4921': attribute type 1 has an invalid length. [ 734.974266][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 734.982322][ C1] lec:lec_tx_timeout: lec0 [ 734.987605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 735.095704][T26155] bond9: entered promiscuous mode [ 735.116302][T26155] 8021q: adding VLAN 0 to HW filter on device bond9 [ 735.210326][T26161] 8021q: adding VLAN 0 to HW filter on device bond9 [ 735.225865][T26161] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 735.236322][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 150 seconds [ 735.247354][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 150 seconds [ 735.255176][T26161] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 735.258909][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 150 seconds [ 735.279926][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 150 seconds [ 735.317769][T26161] bond9: (slave gre1): making interface the new active one [ 735.338431][T26161] gre1: entered promiscuous mode [ 735.351826][T26161] bond9: (slave gre1): Enslaving as an active interface with an up link [ 735.769900][ T5868] Bluetooth: hci3: link tx timeout [ 735.782625][ T5868] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 735.929955][T26185] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 735.979361][T26185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 736.707270][T26226] TCP: TCP_TX_DELAY enabled [ 737.016438][T26239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.143494][T26247] __nla_validate_parse: 10 callbacks suppressed [ 737.143515][T26247] netlink: 558 bytes leftover after parsing attributes in process `syz.1.4943'. [ 737.162405][T26247] netlink: 'syz.1.4943': attribute type 1 has an invalid length. [ 737.170855][T26247] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4943'. [ 737.171256][T26244] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 737.230887][T26244] bond10: (slave lo): Enslaving as an active interface with an up link [ 737.241344][T26244] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 738.255568][ T5868] Bluetooth: hci3: command 0x0405 tx timeout [ 738.932342][T26291] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4952'. [ 739.244506][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'. [ 739.311611][T26303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4955'. [ 739.361307][T26306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'. [ 739.555791][T26308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4957'. [ 739.624720][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4958'. [ 739.664206][T26310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4958'. [ 739.821420][T26319] netlink: 'syz.3.4960': attribute type 1 has an invalid length. [ 739.898303][T26319] bond11: entered promiscuous mode [ 739.904100][T26319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 739.952619][T26328] netlink: 'syz.2.4962': attribute type 3 has an invalid length. [ 739.958589][T26319] IPv6: Can't replace route, no match found [ 739.960775][T26328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4962'. [ 739.995005][T26319] IPv6: Can't replace route, no match found [ 740.014286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 740.022381][ C1] lec:lec_tx_timeout: lec0 [ 740.027911][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 740.315735][T26337] tc_dump_action: action bad kind [ 741.403051][T26383] netlink: 'syz.1.4978': attribute type 1 has an invalid length. [ 741.418027][T26380] bond6: left allmulticast mode [ 741.433917][T26380] bridge4: left allmulticast mode [ 741.462271][T26380] bridge5: left allmulticast mode [ 741.519808][T26380] macvlan2: left allmulticast mode [ 741.547722][ T33] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.560202][ T33] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.569957][ T33] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.579811][T26388] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 741.590389][ T33] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.926567][T26402] xt_CT: No such helper "syz1" [ 742.070979][T26413] dvmrp6: entered allmulticast mode [ 742.265701][T26426] syzkaller0: entered promiscuous mode [ 742.285011][T26426] syzkaller0: entered allmulticast mode [ 742.609336][T26426] __nla_validate_parse: 12 callbacks suppressed [ 742.609357][T26426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4989'. [ 742.628455][T26438] netlink: 'syz.0.4992': attribute type 11 has an invalid length. [ 742.689051][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4992'. [ 742.707331][T26446] vxcan5: entered promiscuous mode [ 742.879124][T26435] macsec1: entered promiscuous mode [ 742.954000][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4995'. [ 743.017190][T26463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4998'. [ 743.039686][T26463] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 743.234850][T26469] netlink: 'syz.3.5001': attribute type 1 has an invalid length. [ 743.338217][T26474] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 743.350116][T26474] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 743.438076][T26469] syzkaller0: entered promiscuous mode [ 743.456542][T26469] syzkaller0: entered allmulticast mode [ 743.642040][T26481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 743.768601][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5006'. [ 743.785678][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 743.941885][T26497] sock: sock_set_timeout: `syz.1.5008' (pid 26497) tries to set negative timeout [ 744.154140][T26486] veth7: entered allmulticast mode [ 744.157093][T26511] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5011'. [ 744.191236][T26486] bond8: (slave veth7): Enslaving as an active interface with an up link [ 744.216839][T26494] bond8 (unregistering): (slave veth7): Releasing backup interface [ 744.243621][T26514] netlink: 'syz.2.5012': attribute type 39 has an invalid length. [ 744.262260][T26494] bond8 (unregistering): Released all slaves [ 744.700784][T26534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5017'. [ 744.712360][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5018'. [ 745.034721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 745.042841][ C1] lec:lec_tx_timeout: lec0 [ 745.048129][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 745.140551][T26556] batadv_slave_0: entered promiscuous mode [ 745.254110][T26556] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 745.289330][T26556] bond8 (unregistering): Released all slaves [ 745.531704][T26555] batadv_slave_0: left promiscuous mode [ 746.269099][T26617] netlink: 'syz.1.5038': attribute type 1 has an invalid length. [ 746.296895][T26617] bond10: entered promiscuous mode [ 746.302670][T26617] 8021q: adding VLAN 0 to HW filter on device bond10 [ 746.369607][T26620] bridge7: entered allmulticast mode [ 746.488206][T26621] netlink: 'syz.1.5039': attribute type 17 has an invalid length. [ 746.539249][T26621] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.550618][T26621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.585194][T26626] bond6: entered promiscuous mode [ 746.590561][T26626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 747.387236][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.633204][T26601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.852466][T26643] __nla_validate_parse: 10 callbacks suppressed [ 748.852488][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5047'. [ 748.878395][T26643] netlink: 'syz.3.5047': attribute type 30 has an invalid length. [ 748.888702][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'. [ 748.902830][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'. [ 748.974620][T26655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5045'. [ 749.088810][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5047'. [ 749.095971][T26659] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5048'. [ 749.145750][T26643] netlink: 'syz.3.5047': attribute type 30 has an invalid length. [ 749.250175][ T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.259388][ T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.317741][ T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.352652][ T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.363492][T26668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5050'. [ 749.711124][T26682] netlink: 'syz.1.5056': attribute type 30 has an invalid length. [ 749.858859][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5059'. [ 749.904072][T26691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.054714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 750.062802][ C1] lec:lec_tx_timeout: lec0 [ 750.067925][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 750.470623][T26725] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 750.505635][T26725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5066'. [ 750.613234][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5069'. [ 750.836740][T26738] team1: entered promiscuous mode [ 750.846857][T26738] team1: entered allmulticast mode [ 750.855291][T26738] 8021q: adding VLAN 0 to HW filter on device team1 [ 750.921199][T26745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.956346][T26747] pimreg: left allmulticast mode [ 751.076117][T26757] netlink: 'syz.3.5077': attribute type 39 has an invalid length. [ 751.303401][T26758] mac80211_hwsim hwsim41 syzkaller0: Caught tx_queue_len zero misconfig [ 751.518388][T26786] netlink: 'syz.2.5082': attribute type 11 has an invalid length. [ 751.542007][T26786] netlink: 'syz.2.5082': attribute type 8 has an invalid length. [ 751.563725][T26788] syzkaller0: entered promiscuous mode [ 751.579970][T26788] syzkaller0: entered allmulticast mode [ 752.070179][T26819] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 752.567503][T26838] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 752.621777][T26838] bond0: (slave vlan0): Opening slave failed [ 752.721151][T26849] chnl_net:caif_netlink_parms(): no params data found [ 752.768806][T26851] tipc: Enabling of bearer rejected, already enabled [ 752.875979][T26852] tipc: Resetting bearer [ 753.011775][ T30] audit: type=1800 audit(1777113904.936:20): pid=26856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5099" name="memory.events" dev="tmpfs" ino=1792 res=0 errno=0 [ 753.827962][T26908] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 753.967079][T26914] block nbd0: not configured, cannot reconfigure [ 754.019423][T26919] __nla_validate_parse: 16 callbacks suppressed [ 754.019446][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5115'. [ 754.405956][T26932] netlink: 'syz.0.5120': attribute type 2 has an invalid length. [ 754.423333][T26939] netlink: 'syz.0.5120': attribute type 2 has an invalid length. [ 754.435485][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'. [ 754.445512][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'. [ 754.708217][T26960] netlink: 'syz.0.5127': attribute type 1 has an invalid length. [ 754.786696][T26960] bond8: (slave geneve2): making interface the new active one [ 754.796138][T26960] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 754.808139][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.810335][T26960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5127'. [ 754.835243][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.869558][T26960] 8021q: adding VLAN 0 to HW filter on device bond8 [ 754.913940][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 754.923808][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 755.074409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 755.082582][ C1] lec:lec_tx_timeout: lec0 [ 755.087324][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 755.340889][T26980] netlink: 'syz.4.5132': attribute type 1 has an invalid length. [ 755.609326][T26980] bond10: entered promiscuous mode [ 755.655231][T26980] 8021q: adding VLAN 0 to HW filter on device bond10 [ 755.710417][T26982] bond13: Removing last arp target with arp_interval on [ 755.727739][T26983] ipvlan1: entered allmulticast mode [ 755.756312][T26983] bond10: entered allmulticast mode [ 755.833743][T26987] bond10: (slave bridge8): making interface the new active one [ 755.862077][T26987] bridge8: entered promiscuous mode [ 755.882628][T26987] bridge8: entered allmulticast mode [ 755.893145][T26987] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 756.201202][T27018] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5141'. [ 756.335642][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 300 seconds [ 756.347577][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 300 seconds [ 756.360678][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 300 seconds [ 756.430685][T27034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'. [ 756.697477][T27045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5148'. [ 756.990577][T27052] netlink: 34 bytes leftover after parsing attributes in process `syz.2.5149'. [ 757.091194][T27060] ipvlan2: entered promiscuous mode [ 757.110608][T27060] bridge0: port 1(ipvlan2) entered blocking state [ 757.132773][T27060] bridge0: port 1(ipvlan2) entered disabled state [ 757.152630][T27064] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5154'. [ 757.155465][T27060] ipvlan2: entered allmulticast mode [ 757.181652][T27064] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5154'. [ 757.188495][T27060] bridge0: entered allmulticast mode [ 757.227327][T27060] ipvlan2: left allmulticast mode [ 757.255566][T27060] bridge0: left allmulticast mode [ 757.362407][T27073] netlink: 'syz.1.5156': attribute type 10 has an invalid length. [ 757.560346][T27086] netlink: 'syz.4.5160': attribute type 11 has an invalid length. [ 757.569619][T27085] netlink: 'syz.4.5160': attribute type 11 has an invalid length. [ 757.793130][T27100] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 757.842467][T27101] ipip1: entered promiscuous mode [ 757.981353][T27108] dvmrp1: entered allmulticast mode [ 758.033323][T27108] rdma_op ffff88807be9c1f0 conn xmit_rdma 0000000000000000 [ 758.061181][T27109] x_tables: duplicate underflow at hook 2 [ 758.618856][T27135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.626181][T27135] IPv6: NLM_F_CREATE should be set when creating new route [ 758.633425][T27135] IPv6: NLM_F_CREATE should be set when creating new route [ 759.016026][T27156] geneve3: entered promiscuous mode [ 759.021296][T27156] geneve3: entered allmulticast mode [ 759.093459][T27162] __nla_validate_parse: 1 callbacks suppressed [ 759.093480][T27162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5177'. [ 759.421847][T27177] netlink: 'syz.3.5183': attribute type 1 has an invalid length. [ 759.724076][T27190] netlink: 'syz.1.5187': attribute type 1 has an invalid length. [ 759.782641][T27190] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 759.946227][T27211] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 760.095224][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 760.103293][ C1] lec:lec_tx_timeout: lec0 [ 760.108656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 760.193879][T27216] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 760.223436][T27216] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 760.416080][T27234] netlink: 'syz.4.5194': attribute type 28 has an invalid length. [ 760.489339][T27222] syzkaller0: entered promiscuous mode [ 760.498476][T27222] syzkaller0: entered allmulticast mode [ 760.529687][T27236] ip6tnl4: entered promiscuous mode [ 760.542921][T27236] ip6tnl4: entered allmulticast mode [ 761.007745][T27266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5201'. [ 765.124852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 765.132921][ C1] lec:lec_tx_timeout: lec0 [ 765.137901][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 765.296336][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 180 seconds [ 765.307497][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 180 seconds [ 765.319135][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 180 seconds [ 765.330616][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 180 seconds [ 766.902293][ T5211] udevd[5211]: worker [14455] /devices/virtual/block/nbd1 timeout; kill it [ 766.912376][ T5211] udevd[5211]: seq 24840 '/devices/virtual/block/nbd1' killed [ 766.920007][ T5211] udevd[5211]: worker [14082] /devices/virtual/block/nbd4 timeout; kill it [ 766.929113][ T5211] udevd[5211]: seq 29911 '/devices/virtual/block/nbd4' killed [ 768.261755][T27311] macvtap0: entered promiscuous mode [ 768.380497][T27319] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 768.441811][T27324] syzkaller0: entered promiscuous mode [ 768.455931][T27324] syzkaller0: entered allmulticast mode [ 768.458770][T27326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5216'. [ 768.467160][T27323] tipc: Enabled bearer , priority 0 [ 768.492532][T27322] tipc: Resetting bearer [ 768.576840][T27322] tipc: Disabling bearer [ 768.609276][T27328] team_slave_1: Caught tx_queue_len zero misconfig [ 768.843488][T27337] syzkaller0: entered promiscuous mode [ 768.849917][T27337] syzkaller0: entered allmulticast mode [ 769.310508][T27351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5228'. [ 769.536415][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'. [ 769.717901][T27367] netlink: 'syz.0.5232': attribute type 1 has an invalid length. [ 769.726867][T27367] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5232'. [ 769.736038][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 769.757511][T27368] netlink: 'syz.0.5232': attribute type 1 has an invalid length. [ 769.765808][T27368] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5232'. [ 769.779723][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 770.144865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 770.153086][ C1] lec:lec_tx_timeout: lec0 [ 770.158784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 772.267580][T27376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5234'. [ 772.485377][T27389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5239'. [ 772.536188][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5240'. [ 772.568269][T27398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.737177][T27402] : entered promiscuous mode [ 772.750947][T27406] x_tables: duplicate underflow at hook 1 [ 773.950429][T27434] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 774.002719][T27434] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 774.046283][T27442] __nla_validate_parse: 1 callbacks suppressed [ 774.046304][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5253'. [ 774.260068][T27450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5255'. [ 774.272737][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5255'. [ 774.627961][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5262'. [ 774.690419][T27476] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 774.706390][T27476] dvmrp1: linktype set to 804 [ 775.069034][T27499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5266'. [ 775.174824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 775.182975][ C1] lec:lec_tx_timeout: lec0 [ 775.188540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 775.469447][T27513] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 775.478685][T27513] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 775.496602][T27513] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 775.555552][T27519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5271'. [ 775.863305][T27531] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5275'. [ 776.001239][T27536] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.011260][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'. [ 776.028767][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.054076][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'. [ 776.076588][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.081114][T27540] netlink: 'syz.2.5279': attribute type 1 has an invalid length. [ 776.085724][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'. [ 776.124957][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.151934][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.182080][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.283913][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.310292][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 776.396376][T27553] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 776.466580][T27534] netlink: 'syz.1.5276': attribute type 29 has an invalid length. [ 777.267594][T27606] bond9: option arp_missed_max: invalid value (0) [ 777.275544][T27606] bond9: option arp_missed_max: allowed values 1 - 255 [ 777.292148][T27606] bond9 (unregistering): Released all slaves [ 777.482355][T27618] 8021q: adding VLAN 0 to HW filter on device bond11 [ 777.490950][T27620] x_tables: unsorted entry at hook 2 [ 777.577081][T27623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.596554][T27623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.157522][T27644] bond4: left promiscuous mode [ 778.163074][T27644] bond5: left promiscuous mode [ 778.172765][T27644] bond6: left promiscuous mode [ 778.179636][T27644] bridge4: left promiscuous mode [ 778.196053][T27644] bridge5: left promiscuous mode [ 778.201895][T27644] macvlan2: left promiscuous mode [ 778.207729][T27644] bond9: left promiscuous mode [ 778.212636][T27644] gre1: left promiscuous mode [ 778.218517][T27644] bond11: left promiscuous mode [ 778.247007][T27657] ip6tnl5: entered allmulticast mode [ 778.268555][ T6478] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.294406][ T6478] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.321623][ T6478] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.372972][ T6478] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.403937][T27669] netlink: 'syz.0.5312': attribute type 11 has an invalid length. [ 778.451198][T27671] nbd: must specify a device to reconfigure [ 778.705095][T27680] IPVS: Scheduler module ip_vs_sip not found [ 779.238636][T27704] __nla_validate_parse: 50 callbacks suppressed [ 779.238659][T27704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5322'. [ 779.296498][T27705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5322'. [ 779.358209][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5323'. [ 779.577202][T27716] syzkaller0: entered promiscuous mode [ 779.584052][T27692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5318'. [ 779.585720][T27716] syzkaller0: entered allmulticast mode [ 779.608672][T27719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5327'. [ 779.656227][ T50] block nbd0: Receive control failed (result -1) [ 779.662771][T27720] vti0: entered promiscuous mode [ 779.703142][T27695] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 779.794032][ T6487] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 779.817186][ T6487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 779.857687][ T6487] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.005845][T27725] : option downdelay: invalid value (18446744073709547007) [ 780.032068][T27725] : option downdelay: allowed values 0 - 2147483647 [ 780.059401][T27725]  (unregistering): Released all slaves [ 780.133666][ T6487] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.211747][T27730] tipc: Started in network mode [ 780.234355][T27730] tipc: Node identity a23d81a2d92, cluster identity 4711 [ 780.249215][T27730] tipc: Enabled bearer , priority 0 [ 780.276288][T27730] syzkaller0: entered promiscuous mode [ 780.290607][T27730] syzkaller0: entered allmulticast mode [ 780.436768][T27745] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.458079][T27750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5335'. [ 780.493904][T27734] tipc: Resetting bearer [ 780.513340][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5336'. [ 780.524730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.535258][T27734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.603623][T27745] bond7: (slave geneve3): making interface the new active one [ 780.631364][T27745] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 780.643804][T27729] tipc: Resetting bearer [ 780.684604][T27729] tipc: Disabling bearer [ 780.715951][ T6482] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.747818][ T6482] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.783805][ T6482] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.809753][ T6482] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.974244][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 780.982325][ C1] lec:lec_tx_timeout: lec0 [ 780.987987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 781.196627][T27783] validate_nla: 31 callbacks suppressed [ 781.196647][T27783] netlink: 'syz.3.5343': attribute type 8 has an invalid length. [ 781.210387][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 781.224960][T27783] veth1_to_team: entered promiscuous mode [ 781.231598][T27783] gretap0: entered promiscuous mode [ 781.237728][T27783] batadv_slave_0: entered promiscuous mode [ 781.243762][T27783] batadv_slave_0: left promiscuous mode [ 781.250281][T27783] veth1_to_team: left promiscuous mode [ 781.256913][T27783] gretap0: left promiscuous mode [ 783.788897][T27756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.803882][T27785] netlink: 'syz.3.5344': attribute type 4 has an invalid length. [ 783.835097][T27785] netlink: 'syz.3.5344': attribute type 8 has an invalid length. [ 783.850995][T27785] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5344'. [ 784.070163][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5345'. [ 784.150672][T27794] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 784.630106][T27831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5356'. [ 785.071475][T27848] tun0: tun_chr_ioctl cmd 1074025672 [ 785.078529][T27848] tun0: ignored: set checksum disabled [ 785.086671][T27848] tun0: tun_chr_ioctl cmd 21731 [ 785.123548][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5364'. [ 785.507711][T27870] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5369'. [ 785.517915][T27870] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5369'. [ 785.619084][T27870] bond9: entered allmulticast mode [ 785.645452][T27870] macvlan0: entered promiscuous mode [ 785.651363][T27870] macvlan0: entered allmulticast mode [ 785.659329][T27870] bond9: entered promiscuous mode [ 785.666228][T27870] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 785.686237][T27883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.698819][T27870] bond9: left promiscuous mode [ 785.725776][T27886] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5375'. [ 785.789986][T27889] netlink: 'syz.3.5376': attribute type 21 has an invalid length. [ 785.972100][T27901] netlink: 'syz.0.5379': attribute type 1 has an invalid length. [ 786.012956][T27908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5381'. [ 786.014608][T27901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 786.022051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 786.036689][ C1] lec:lec_tx_timeout: lec0 [ 786.042396][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 786.050095][T27901] bond10: (slave syz_tun): making interface the new active one [ 786.060585][T27901] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 786.244006][T27921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5383'. [ 786.265046][T27921] netlink: 'syz.2.5383': attribute type 30 has an invalid length. [ 786.296748][ T6478] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.308905][T27921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5383'. [ 786.318279][ T6482] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.330492][T27921] netlink: 'syz.2.5383': attribute type 30 has an invalid length. [ 786.345251][ T6482] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.358766][ T6482] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.418583][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 330 seconds [ 786.431721][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 330 seconds [ 786.449831][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 330 seconds [ 786.548497][T27931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5386'. [ 786.590156][T27930] netlink: 'syz.3.5386': attribute type 13 has an invalid length. [ 786.612049][T27936] netlink: 'syz.2.5388': attribute type 11 has an invalid length. [ 786.629264][T27930] netlink: 'syz.3.5386': attribute type 17 has an invalid length. [ 786.747741][T27930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.749517][ T6482] bond0: (slave batadv_slave_0): interface is now down [ 786.758015][T27930] 8021q: adding VLAN 0 to HW filter on device ` [ 786.767073][ T6482] bond0: (slave `): interface is now down [ 786.781924][T27930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 786.796435][ T6482] bond0: (slave batadv_slave_0): interface is now down [ 786.821639][ T6482] bond0: (slave `): interface is now down [ 786.838378][T27943] wg1: entered promiscuous mode [ 786.851169][T27943] wg1: entered allmulticast mode [ 786.856979][ T6482] bond0: (slave batadv_slave_0): interface is now down [ 786.884137][ T6482] bond0: (slave `): interface is now down [ 786.925659][ T6482] bond0: (slave batadv_slave_0): interface is now down [ 786.939951][ T6482] bond0: (slave `): interface is now down [ 786.967748][ T1044] bond0: (slave batadv_slave_0): interface is now down [ 786.985381][ T1044] bond0: (slave `): interface is now down [ 787.009476][T27949] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.020372][T27949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.024767][ T1167] bond0: (slave batadv_slave_0): interface is now down [ 787.047276][ T1167] bond0: (slave `): interface is now down [ 787.088178][ T1044] bond0: (slave batadv_slave_0): interface is now down [ 787.106074][ T1044] bond0: (slave `): interface is now down [ 787.137061][ T6482] bond0: (slave batadv_slave_0): interface is now down [ 787.160905][ T6482] bond0: (slave `): interface is now down [ 787.184434][ T33] bond0: (slave batadv_slave_0): interface is now down [ 787.200232][ T33] bond0: (slave `): interface is now down [ 787.210494][T27949] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.222687][T27949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.235304][ T33] bond0: (slave batadv_slave_0): interface is now down [ 787.242449][ T33] bond0: (slave `): interface is now down [ 787.267562][ T6487] bond0: (slave batadv_slave_0): interface is now down [ 787.278683][ T6487] bond0: (slave `): interface is now down [ 787.315689][ T6487] bond0: now running without any active interface! [ 787.333022][T27949] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.343372][T27949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.450858][T27968] netlink: 'syz.0.5395': attribute type 1 has an invalid length. [ 787.519681][T27969] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.5395'. [ 787.600004][T27949] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.610368][T27949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.712271][T27971] netlink: 'syz.4.5397': attribute type 3 has an invalid length. [ 787.734624][T27971] netlink: 'syz.4.5397': attribute type 2 has an invalid length. [ 787.753503][T27971] netlink: 'syz.4.5397': attribute type 2 has an invalid length. [ 787.878211][ T1167] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.893116][ T1167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.935490][ T5868] Bluetooth: hci3: command 0x0405 tx timeout [ 787.956332][T27989] netlink: 'syz.0.5401': attribute type 1 has an invalid length. [ 787.976268][ T6482] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.987439][ T6482] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.002870][T27987] netlink: 'syz.3.5400': attribute type 1 has an invalid length. [ 788.209558][T27987] bond15: entered promiscuous mode [ 788.215634][T27987] 8021q: adding VLAN 0 to HW filter on device bond15 [ 788.248540][ T6482] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.260774][ T6482] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.315871][T28000] 8021q: adding VLAN 0 to HW filter on device bond16 [ 788.332584][T28000] bond15: (slave bond16): making interface the new active one [ 788.342204][T28000] bond16: entered promiscuous mode [ 788.349433][T28000] bond15: (slave bond16): Enslaving as an active interface with an up link [ 788.358878][T27999] bridge_slave_0: default FDB implementation only supports local addresses [ 788.390758][ T6482] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.410296][ T6482] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.548073][T28010] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 788.636486][T28015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.720573][T28018] syzkaller0: entered promiscuous mode [ 788.751179][T28018] syzkaller0: entered allmulticast mode [ 789.041805][T28030] ip6tnl4: entered allmulticast mode [ 789.104184][T28032] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 789.139509][T28035] delete_channel: no stack [ 789.155830][T28032] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 789.208986][T28032] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 789.277845][T28032] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 789.576517][T28056] ip6erspan0: entered allmulticast mode [ 789.610121][T28056] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 789.945370][T28075] __nla_validate_parse: 18 callbacks suppressed [ 789.945391][T28075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5423'. [ 790.298888][T28088] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5425'. [ 790.719261][T28111] bond17: entered promiscuous mode [ 790.736971][T28111] 8021q: adding VLAN 0 to HW filter on device bond17 [ 790.761303][ T6478] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.775986][ T6478] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.805212][ T6478] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.822755][ T6478] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.884978][T28117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5432'. [ 790.916386][T28117] ip6gre3: entered promiscuous mode [ 790.921902][T28117] ip6gre3: entered allmulticast mode [ 790.993940][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5435'. [ 791.008504][T28119] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 791.022275][T28119] bond8 (unregistering): Released all slaves [ 791.054792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.062942][ C1] lec:lec_tx_timeout: lec0 [ 791.068475][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 791.186729][T28130] Can't find ip_set type hash:ip,por [ 792.083725][T28174] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5444'. [ 792.123238][T28174] 1ªX¹¦À: renamed from 60ªX¹¦À [ 792.173477][T28174] 1ªX¹¦À: entered allmulticast mode [ 792.189596][T28174] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 794.869425][T28164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.118439][T28210] validate_nla: 1 callbacks suppressed [ 795.118469][T28210] netlink: 'syz.3.5451': attribute type 1 has an invalid length. [ 795.245410][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5450'. [ 795.314082][T28209] vlan4: entered promiscuous mode [ 795.354085][T28209] team0: entered promiscuous mode [ 795.377610][T28209] macvlan2: entered promiscuous mode [ 795.439544][T28221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5450'. [ 795.477637][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 210 seconds [ 795.489164][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 210 seconds [ 795.500754][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 210 seconds [ 795.512405][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 210 seconds [ 795.581812][T28209] vlan4: left promiscuous mode [ 795.587683][T28209] team0: left promiscuous mode [ 795.970818][T28233] gretap0: entered promiscuous mode [ 795.997800][T28233] vlan4: entered promiscuous mode [ 796.071242][T28238] bridge_slave_0: default FDB implementation only supports local addresses [ 796.084842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 796.092946][ C1] lec:lec_tx_timeout: lec0 [ 796.098290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 796.460034][T28261] netlink: 'syz.1.5463': attribute type 21 has an invalid length. [ 796.471341][T28261] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5463'. [ 796.483265][T28263] syzkaller0: entered promiscuous mode [ 796.491374][T28263] syzkaller0: entered allmulticast mode [ 796.501694][T28261] netlink: 'syz.1.5463': attribute type 4 has an invalid length. [ 796.513047][T28260] netlink: 'syz.3.5464': attribute type 3 has an invalid length. [ 796.522205][T28261] netlink: 'syz.1.5463': attribute type 5 has an invalid length. [ 796.531497][T28260] netlink: 'syz.3.5464': attribute type 3 has an invalid length. [ 796.539905][T28261] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5463'. [ 796.549365][T28260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5464'. [ 796.629961][T28256] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 796.637430][T28256] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 796.949615][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5467'. [ 797.537255][T28326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5474'. [ 797.609341][T28325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5475'. [ 798.052970][T28338] syzkaller1: entered promiscuous mode [ 798.062791][T28338] syzkaller1: entered allmulticast mode [ 798.159603][T28338] syzkaller1: left promiscuous mode [ 798.166310][T28338] syzkaller1: left allmulticast mode [ 798.333709][T28320] infiniband !yz!: set down [ 798.338523][T28320] infiniband !yz!: added team_slave_0 [ 798.395181][T28320] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 798.410938][T28320] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 798.428948][T28320] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 798.462139][T28320] RDS/IB: !yz!: added [ 798.468441][T28320] smc: adding ib device !yz! with port count 1 [ 798.475226][T28320] smc: ib device !yz! port 1 has no pnetid [ 800.006243][T28290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.713114][T28391] 0ªX¹¦À: left allmulticast mode [ 800.726309][T28391] veth1_to_bridge: left allmulticast mode [ 800.748555][T28391] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 800.770558][T28391] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 800.788076][T28391] vlan2: left promiscuous mode [ 800.801252][T28391] bridge0: left promiscuous mode [ 800.807318][T28391] bond1: left promiscuous mode [ 800.812271][T28391] bond1: left allmulticast mode [ 800.828587][T28391] bond2: left promiscuous mode [ 800.857937][T28391] team1: left promiscuous mode [ 800.863046][T28391] team1: left allmulticast mode [ 800.888535][T28391] team2: left promiscuous mode [ 800.901307][T28391] team2: left allmulticast mode [ 800.910013][T28391] bond4: left promiscuous mode [ 800.927629][T28391] bond4: left allmulticast mode [ 800.949937][T28391] bond5: left promiscuous mode [ 800.980950][T28391] veth7: left allmulticast mode [ 801.017659][T28391] ip6tnl5: left allmulticast mode [ 801.033123][T28391] bond9: left allmulticast mode [ 801.099421][T28394] veth1_to_bond: entered promiscuous mode [ 801.114830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 801.122927][ C1] lec:lec_tx_timeout: lec0 [ 801.128808][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 801.138662][T28395] veth1_to_bond: entered allmulticast mode [ 801.260378][ T6482] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 801.301413][ T6482] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 801.407753][ T6482] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 801.434530][ T6482] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 801.556740][T28395] veth1_to_bond: left allmulticast mode [ 801.572834][T28395] veth1_to_bond: left promiscuous mode [ 802.026241][T28442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5495'. [ 802.635475][T28467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5500'. [ 802.748680][T28471] : renamed from veth0_to_bond [ 803.065945][T28482] syzkaller0: entered promiscuous mode [ 803.076224][T28482] syzkaller0: entered allmulticast mode [ 804.304126][T28504] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5504'. [ 804.923442][T28506] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 805.178127][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5506'. [ 805.827101][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 805.881199][T28539] veth1_to_team: entered promiscuous mode [ 805.900949][T28539] veth1: entered promiscuous mode [ 805.917397][T28539] hsr1: entered promiscuous mode [ 806.144852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 806.152965][ C1] lec:lec_tx_timeout: lec0 [ 806.157716][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 807.105685][T28570] blkio.reset_stats is deprecated [ 808.682937][T28533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.829148][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.187735][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5529'. [ 809.500099][T28614] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5536'. [ 810.076782][T28631] netlink: 'syz.2.5540': attribute type 8 has an invalid length. [ 810.195518][T28635] dvmrp0: entered allmulticast mode [ 810.213187][T28637] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 810.448911][T28643] syzkaller0: entered promiscuous mode [ 810.458909][T28643] syzkaller0: entered allmulticast mode [ 811.078099][T28671] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 811.107576][T28674] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5555'. [ 811.164906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 811.173031][ C1] lec:lec_tx_timeout: lec0 [ 811.178446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 811.201729][T28684] IPVS: ip_vs_edit_dest(): server weight less than zero [ 811.534002][T28700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5563'. [ 811.555458][T28700] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 812.036101][T28726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5572'. [ 812.088538][T28726] tunl0: Caught tx_queue_len zero misconfig [ 812.148128][T28726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5572'. [ 812.393119][T28754] lo: Caught tx_queue_len zero misconfig [ 812.454162][T28758] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 812.606508][T28761] bond18 (unregistering): Released all slaves [ 812.621077][T28768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5580'. [ 812.733174][T28768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5580'. [ 812.761792][T28768] ip6tnl1: entered promiscuous mode [ 812.783130][T28777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5582'. [ 812.952279][T28783] netlink: 'syz.3.5584': attribute type 2 has an invalid length. [ 812.969229][T28787] netlink: 'syz.0.5583': attribute type 10 has an invalid length. [ 812.991792][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5584'. [ 813.017030][T28787] team0: Port device dummy0 added [ 813.027134][T28783] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 813.030278][T28787] netlink: 'syz.0.5583': attribute type 10 has an invalid length. [ 813.086877][T28787] team0: Port device dummy0 removed [ 813.121958][T28787] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 813.192588][T28801] netlink: 'syz.3.5587': attribute type 12 has an invalid length. [ 814.018027][T28836] netlink: 'syz.1.5597': attribute type 9 has an invalid length. [ 814.173266][T28837] syz_tun: entered allmulticast mode [ 814.432306][T28870] x_tables: unsorted underflow at hook 2 [ 816.194813][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 816.202924][ C1] lec:lec_tx_timeout: lec0 [ 816.208053][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 816.496330][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 360 seconds [ 816.507254][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 360 seconds [ 816.519789][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 360 seconds [ 816.975154][T28836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.208307][T28883] __nla_validate_parse: 11 callbacks suppressed [ 817.208330][T28883] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.5606'. [ 817.241282][T28883] openvswitch: netlink: Message has 16 unknown bytes. [ 817.465514][T28898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5612'. [ 817.538817][T28899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5611'. [ 817.543399][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5610'. [ 817.711296][T28901] macvlan4: entered allmulticast mode [ 817.755733][T28901] hsr0: entered allmulticast mode [ 817.784128][T28912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5615'. [ 817.793810][T28901] hsr_slave_0: entered allmulticast mode [ 817.822918][T28901] hsr_slave_1: entered allmulticast mode [ 818.065312][T28922] sctp: [Deprecated]: syz.0.5617 (pid 28922) Use of int in max_burst socket option. [ 818.065312][T28922] Use struct sctp_assoc_value instead [ 818.128121][T28927] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5618'. [ 818.399360][T28937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5622'. [ 818.448212][T28937] ipvlan1: entered promiscuous mode [ 818.471919][T28937] ipvlan1: left promiscuous mode [ 818.787406][T28954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5625'. [ 818.831138][T28959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5626'. [ 818.921517][T28961] tipc: Enabled bearer , priority 0 [ 818.956470][T28961] syzkaller0: entered promiscuous mode [ 818.971106][T28961] syzkaller0: entered allmulticast mode [ 818.993510][T28966] netlink: 'syz.4.5629': attribute type 29 has an invalid length. [ 819.147687][T28961] tipc: Resetting bearer [ 819.163827][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5627'. [ 819.221097][T28960] tipc: Resetting bearer [ 819.285873][T28960] tipc: Disabling bearer [ 819.672533][T28980] nicvf0: tun_chr_ioctl cmd 1074812117 [ 819.686975][T28984] nicvf0: tun_chr_ioctl cmd 2147767519 [ 819.722466][T28992] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.735924][T28992] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.880462][T28992] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.912732][T28992] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.043038][T28992] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.069902][T28992] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.177126][T28992] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.192021][T28992] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.232608][T29018] netlink: 'syz.4.5639': attribute type 1 has an invalid length. [ 820.350199][ T33] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.372974][ T33] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.456249][ T33] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.467516][ T33] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.499881][ T33] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.518684][ T33] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.561777][ T33] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.574754][ T33] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.795831][T29034] ipvlan3: entered promiscuous mode [ 821.636530][T29071] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 821.644004][T29071] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 821.666466][T29071] veth1_virt_wifi: entered allmulticast mode [ 821.680654][T29071] veth1_virt_wifi: left allmulticast mode [ 821.902566][T29083] netlink: 'syz.4.5662': attribute type 16 has an invalid length. [ 821.912493][T29084] netlink: 'syz.4.5662': attribute type 16 has an invalid length. [ 821.957824][T29085] tap0: tun_chr_ioctl cmd 1074025677 [ 821.970389][T29085] tap0: linktype set to 6 [ 822.006289][T29088] xt_hashlimit: size too large, truncated to 1048576 [ 822.022677][T29084] xt_hashlimit: size too large, truncated to 1048576 [ 822.135359][T29092] netlink: 'syz.2.5664': attribute type 2 has an invalid length. [ 822.146586][T29084] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 822.164709][T29088] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 822.254286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 822.262390][ C1] lec:lec_tx_timeout: lec0 [ 822.267648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 822.288593][T29094] sctp: [Deprecated]: syz.2.5664 (pid 29094) Use of int in maxseg socket option. [ 822.288593][T29094] Use struct sctp_assoc_value instead [ 822.645739][T29099] syzkaller0: entered promiscuous mode [ 822.664724][T29099] syzkaller0: entered allmulticast mode [ 824.798749][T29076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.096917][T29108] __nla_validate_parse: 16 callbacks suppressed [ 825.096939][T29108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5668'. [ 825.136436][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5668'. [ 825.586041][T29137] syzkaller1: entered promiscuous mode [ 825.642291][T29137] syzkaller1: entered allmulticast mode [ 826.100091][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 240 seconds [ 826.104428][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5678'. [ 826.111522][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 240 seconds [ 826.131976][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 240 seconds [ 826.154797][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 240 seconds [ 826.630234][T29166] netlink: 'syz.4.5682': attribute type 12 has an invalid length. [ 826.710538][T29161] tipc: Enabled bearer , priority 0 [ 826.729362][T29161] syzkaller0: entered promiscuous mode [ 826.754575][T29161] syzkaller0: entered allmulticast mode [ 826.829273][T29179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5685'. [ 826.879441][T29160] tipc: Resetting bearer [ 826.959213][T29160] tipc: Disabling bearer [ 827.526971][T29199] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5688'. [ 827.712147][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5694'. [ 827.739244][T29211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5692'. [ 827.758069][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5694'. [ 827.776676][T29208] netlink: 1460 bytes leftover after parsing attributes in process `syz.3.5694'. [ 828.011474][T29223] x_tables: duplicate underflow at hook 2 [ 828.017359][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 828.017390][ C1] lec:lec_tx_timeout: lec0 [ 828.026766][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 828.043234][T29223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5695'. [ 828.119328][T29223] sctp: [Deprecated]: syz.3.5695 (pid 29223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 828.119328][T29223] Use struct sctp_sack_info instead [ 829.137603][T29294] tipc: Enabling of bearer rejected, already enabled [ 829.672867][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.687207][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.696807][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.709697][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.719311][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.123108][T29324] __nla_validate_parse: 7 callbacks suppressed [ 830.123131][T29324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5722'. [ 830.499865][T29332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5724'. [ 830.537734][T29332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5724'. [ 830.620127][ T6478] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 830.650624][T29339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5724'. [ 830.661291][T29340] netlink: 'syz.4.5727': attribute type 1 has an invalid length. [ 830.769768][T29340] bond11: entered promiscuous mode [ 830.782595][T29340] 8021q: adding VLAN 0 to HW filter on device bond11 [ 830.905792][T29346] bond11: (slave veth17): making interface the new active one [ 830.917350][T29346] veth17: entered promiscuous mode [ 830.926725][T29346] bond11: (slave veth17): Enslaving as an active interface with an up link [ 830.964300][ T6478] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 831.048496][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5729'. [ 831.061130][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5729'. [ 831.110185][ T6478] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 831.181685][ T6478] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 831.292039][T29313] chnl_net:caif_netlink_parms(): no params data found [ 831.379574][T29368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5732'. [ 831.552859][T29381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5735'. [ 831.668594][T29313] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.678538][T29313] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.686946][T29313] bridge_slave_0: entered allmulticast mode [ 831.697750][T29313] bridge_slave_0: entered promiscuous mode [ 831.707741][T29313] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.715357][T29313] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.722740][T29313] bridge_slave_1: entered allmulticast mode [ 831.731320][T29313] bridge_slave_1: entered promiscuous mode [ 831.774508][ T5868] Bluetooth: hci4: command tx timeout [ 832.046075][T29313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.090134][T29313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.170103][T29408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5743'. [ 832.300440][T29313] team0: Port device team_slave_0 added [ 832.313133][T29313] team0: Port device team_slave_1 added [ 832.461693][ T6478] batadv1: left allmulticast mode [ 832.471927][ T6478] batadv1: left promiscuous mode [ 832.482925][ T6478] bridge0: port 2(batadv1) entered disabled state [ 832.494016][ T6478] bridge_slave_0: left allmulticast mode [ 832.502080][ T6478] bridge_slave_0: left promiscuous mode [ 832.508991][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.034683][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 833.042781][ C1] lec:lec_tx_timeout: lec0 [ 833.113083][ T6478] bond12 (unregistering): (slave geneve3): Releasing backup interface [ 833.408738][ T6478] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 833.417374][ T6478] bridge6 (unregistering): left promiscuous mode [ 833.423768][ T6478] bridge6 (unregistering): left allmulticast mode [ 833.584019][ T6478] team0: Port device bond0 removed [ 833.597616][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.609334][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.619335][ T6478] bond0 (unregistering): Released all slaves [ 833.631770][ T6478] bond1 (unregistering): Released all slaves [ 833.646922][ T6478] bond2 (unregistering): Released all slaves [ 833.661405][ T6478] bond3 (unregistering): Released all slaves [ 833.683032][ T6478] bond4 (unregistering): Released all slaves [ 833.698349][ T6478] bond5 (unregistering): Released all slaves [ 833.712651][ T6478] bond6 (unregistering): Released all slaves [ 833.731792][ T6478] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 833.740175][ T6478] vcan1: left promiscuous mode [ 833.747309][ T6478] bond7 (unregistering): Released all slaves [ 833.767367][ T6478] bond8 (unregistering): Released all slaves [ 833.785472][ T6478] bond9 (unregistering): Released all slaves [ 833.803078][ T6478] bond10 (unregistering): Released all slaves [ 833.825107][ T6478] bond11 (unregistering): Released all slaves [ 833.839929][ T6478] bond12 (unregistering): Released all slaves [ 833.854793][ T5868] Bluetooth: hci4: command tx timeout [ 833.855112][ T6478] bond13 (unregistering): Released all slaves [ 833.899664][T29313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.907217][T29313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.933786][T29313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.962757][T29427] pimreg: entered allmulticast mode [ 834.042689][T29434] syzkaller0: entered allmulticast mode [ 834.071118][ T6478] : left promiscuous mode [ 834.137106][T29313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.168903][T29313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.208763][T29313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.338344][ T6478] tipc: Disabling bearer [ 834.349735][ T6478] tipc: Left network mode [ 834.529319][T29466] rdma_rxe: rxe_newlink: failed to add wg1 [ 834.559564][T29313] hsr_slave_0: entered promiscuous mode [ 834.566379][T29466] rdma_rxe: rxe_newlink: failed to add wg1 [ 834.582212][T29313] hsr_slave_1: entered promiscuous mode [ 834.599279][T29313] debugfs: 'hsr0' already exists in 'hsr' [ 834.608616][T29313] Cannot create hsr debugfs directory [ 834.616566][T29470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5754'. [ 835.432679][T29512] syzkaller0: entered promiscuous mode [ 835.453895][T29512] syzkaller0: entered allmulticast mode [ 835.861048][T29537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5766'. [ 835.936110][ T5868] Bluetooth: hci4: command tx timeout [ 837.648280][T29581] tunl0: Caught tx_queue_len zero misconfig [ 838.015857][ T5868] Bluetooth: hci4: command tx timeout [ 838.607802][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5779'. [ 838.676063][T29621] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 838.783499][ T6478] pim6reg (unregistering): left allmulticast mode [ 838.989796][T29637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5784'. [ 839.093322][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 839.158431][T29644] xt_hashlimit: size too large, truncated to 1048576 [ 839.388187][T29621] bond12: entered promiscuous mode [ 839.417377][T29621] bond12: entered allmulticast mode [ 839.439308][T29621] 8021q: adding VLAN 0 to HW filter on device bond12 [ 839.731271][T29663] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5789'. [ 839.737666][T29313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 839.805656][T29313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.813945][T29313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 839.851629][T29313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.871186][T29313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 839.909006][T29313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 839.967045][T29669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5790'. [ 840.084949][T29313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 840.097524][T29313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.166716][T29659] geneve3: entered promiscuous mode [ 840.196773][ T33] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.216998][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.244815][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.263736][ T6478] IPVS: stop unused estimator thread 0... [ 840.306432][ T33] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.327988][T29669] x_tables: unsorted entry at hook 2 [ 840.583534][T29313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.674794][T29313] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.709967][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.717268][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.756474][T29690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5794'. [ 840.780103][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.787377][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.371064][T29714] sock: sock_set_timeout: `syz.0.5801' (pid 29714) tries to set negative timeout [ 841.503585][T29313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.638994][T29725] netlink: 'syz.2.5804': attribute type 89 has an invalid length. [ 841.675091][T29313] veth0_vlan: entered promiscuous mode [ 841.723248][T29313] veth1_vlan: entered promiscuous mode [ 841.850600][T29313] veth0_macvtap: entered promiscuous mode [ 841.888159][T29313] veth1_macvtap: entered promiscuous mode [ 841.940336][T29313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.980844][T29313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.011723][ T33] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.042275][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.070730][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.117128][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.248813][T29735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'. [ 842.410217][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.441171][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.508616][T29722] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5803'. [ 842.522608][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.543565][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.604726][T29722] bond0: (slave dummy0): Releasing backup interface [ 842.876649][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5718'. [ 843.035994][T29760] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5814'. [ 843.989482][T29806] x_tables: duplicate underflow at hook 1 [ 844.312633][T29823] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5830'. [ 844.491433][T29835] syzkaller0: entered promiscuous mode [ 844.510376][T29835] syzkaller0: entered allmulticast mode [ 844.665395][T29842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5834'. [ 844.726267][T29837] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 844.766373][T29839] syzkaller1: entered promiscuous mode [ 844.772158][T29839] syzkaller1: entered allmulticast mode [ 844.992495][T29852] netlink: 'syz.2.5837': attribute type 2 has an invalid length. [ 845.018819][T29852] tipc: Cannot configure node identity twice [ 845.082456][T29859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 845.119232][T29858] netlink: 'syz.4.5840': attribute type 1 has an invalid length. [ 845.127899][T29861] x_tables: duplicate underflow at hook 2 [ 845.160735][T29858] netlink: 'syz.4.5840': attribute type 2 has an invalid length. [ 846.391642][T29913] syz_tun: left allmulticast mode [ 846.435786][T29916] bond18: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 846.506622][T29916] bond18 (unregistering): Released all slaves [ 846.607770][ T1662] block nbd1: Possible stuck request ffff888026ede000: control (read@0,1024B). Runtime 390 seconds [ 846.619741][ T1662] block nbd1: Possible stuck request ffff888026ede1c0: control (read@1024,1024B). Runtime 390 seconds [ 846.631498][ T1662] block nbd1: Possible stuck request ffff888026ede380: control (read@2048,1024B). Runtime 390 seconds [ 846.706508][T29930] ip6erspan0: entered allmulticast mode [ 846.724030][T29932] netlink: 'syz.1.5856': attribute type 2 has an invalid length. [ 846.771457][T29932] netlink: 'syz.1.5856': attribute type 2 has an invalid length. [ 846.781516][T29932] netlink: 'syz.1.5856': attribute type 2 has an invalid length. [ 846.819353][T29935] netlink: 'syz.3.5858': attribute type 13 has an invalid length. [ 846.835694][T29935] netlink: 'syz.3.5858': attribute type 17 has an invalid length. [ 846.940271][T29935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 847.105362][T29957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5864'. [ 847.117198][T29940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5858'. [ 847.168602][T29961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5865'. [ 847.186355][T29959] netlink: 'syz.1.5865': attribute type 10 has an invalid length. [ 847.206172][T29961] netlink: 'syz.1.5865': attribute type 10 has an invalid length. [ 847.227982][T29959] team0: Port device dummy0 added [ 847.259989][T29959] team0: Port device dummy0 removed [ 847.295179][T29959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 847.456136][T29972] __nla_validate_parse: 1 callbacks suppressed [ 847.456157][T29972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5864'. [ 847.858405][T29988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5870'. [ 848.293672][T30008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5876'. [ 848.420988][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5878'. [ 848.813732][T30018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5880'. [ 848.983859][T30023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5881'. [ 849.321830][T30031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.332655][T30025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5882'. [ 849.354754][T30025] dvmrp0: entered allmulticast mode [ 849.643042][T30045] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5889'. [ 849.653398][T30045] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5889'. [ 849.776454][T30042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5887'. [ 850.138964][T30061] validate_nla: 7 callbacks suppressed [ 850.138985][T30061] netlink: 'syz.0.5893': attribute type 21 has an invalid length. [ 850.187778][T30067] bond0: (slave batadv_slave_0): Releasing backup interface [ 850.195960][T30067] bond0: (slave batadv_slave_0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 850.248187][T30061] netlink: 'syz.0.5893': attribute type 4 has an invalid length. [ 850.257431][T30061] netlink: 'syz.0.5893': attribute type 5 has an invalid length. [ 850.280764][T30064] ip6tnl0: entered promiscuous mode [ 850.755689][T30086] netlink: 'syz.3.5900': attribute type 13 has an invalid length. [ 850.763800][T30086] netlink: 'syz.3.5900': attribute type 17 has an invalid length. [ 852.863912][T21161] lec:lec_start_xmit: lec0:No lecd attached [ 853.765233][T30085] hsr0: left allmulticast mode [ 853.773648][T30085] hsr_slave_0: left allmulticast mode [ 853.776713][T30090] netlink: 'syz.4.5901': attribute type 32 has an invalid length. [ 853.781902][T30085] hsr_slave_1: left allmulticast mode [ 853.788024][T30090] __nla_validate_parse: 8 callbacks suppressed [ 853.788040][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5901'. [ 853.829648][T30098] batadv_slave_0: Caught tx_queue_len zero misconfig [ 853.935134][T30090] bond12: option coupled_control: invalid value (12) [ 853.944073][T30090] bond12 (unregistering): Released all slaves [ 854.003029][T30112] tipc: Started in network mode [ 854.039921][T30112] tipc: Node identity 322597f1a167, cluster identity 4711 [ 854.065790][T30112] tipc: Enabled bearer , priority 0 [ 854.073109][T30113] syzkaller0: entered promiscuous mode [ 854.093195][T30113] syzkaller0: entered allmulticast mode [ 854.146709][T30119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5908'. [ 854.184629][T30112] tipc: Resetting bearer [ 854.239309][T30111] tipc: Resetting bearer [ 854.330261][T30111] tipc: Disabling bearer [ 854.597687][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 854.615394][T30135] nbd: must specify a size in bytes for the device [ 854.665124][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5916'. [ 855.070795][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5916'. [ 855.096397][T30145] netlink: 'syz.1.5916': attribute type 7 has an invalid length. [ 855.118670][T30145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5916'. [ 855.145333][T30161] netlink: 'syz.3.5921': attribute type 1 has an invalid length. [ 855.172950][T30161] netlink: 352 bytes leftover after parsing attributes in process `syz.3.5921'. [ 855.232309][T30145] bridge0: entered promiscuous mode [ 855.258787][T30145] ip6gretap0: entered promiscuous mode [ 855.276958][T30145] debugfs: 'hsr1' already exists in 'hsr' [ 855.294938][T30145] Cannot create hsr debugfs directory [ 855.309828][T30161] netlink: 'syz.3.5921': attribute type 1 has an invalid length. [ 855.328584][T30161] netlink: 352 bytes leftover after parsing attributes in process `syz.3.5921'. [ 855.374948][T14961] [ 855.377336][T14961] ====================================================== [ 855.384374][T14961] WARNING: possible circular locking dependency detected [ 855.391414][T14961] syzkaller #0 Not tainted [ 855.395846][T14961] ------------------------------------------------------ [ 855.402886][T14961] kworker/0:11/14961 is trying to acquire lock: [ 855.409142][T14961] ffff88807b4955c0 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_rcv+0x3b5f/0x7640 [ 855.419025][T14961] [ 855.419025][T14961] but task is already holding lock: [ 855.426397][T14961] ffff88804872cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 855.435457][T14961] [ 855.435457][T14961] which lock already depends on the new lock. [ 855.435457][T14961] [ 855.445865][T14961] [ 855.445865][T14961] the existing dependency chain (in reverse order) is: [ 855.454892][T14961] [ 855.454892][T14961] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 855.462637][T14961] _raw_spin_lock_bh+0x36/0x50 [ 855.467944][T14961] hsr_dev_xmit+0x237/0x360 [ 855.472982][T14961] dev_hard_start_xmit+0x2cd/0x830 [ 855.478627][T14961] __dev_queue_xmit+0x14d9/0x3950 [ 855.484183][T14961] br_dev_queue_push_xmit+0x370/0x4b0 [ 855.490094][T14961] __br_multicast_send_query+0x2f4a/0x4630 [ 855.496432][T14961] br_multicast_send_query+0x509/0x6b0 [ 855.502421][T14961] br_ip6_multicast_port_query_expired+0x2b5/0x380 [ 855.509455][T14961] call_timer_fn+0x192/0x5e0 [ 855.514571][T14961] __run_timer_base+0x652/0x8b0 [ 855.519958][T14961] run_timer_softirq+0xb7/0x170 [ 855.525341][T14961] handle_softirqs+0x22a/0x840 [ 855.530640][T14961] __irq_exit_rcu+0xca/0x220 [ 855.535762][T14961] irq_exit_rcu+0x9/0x30 [ 855.540546][T14961] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 855.546713][T14961] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 855.553216][T14961] console_flush_all+0x801/0xb20 [ 855.558683][T14961] console_unlock+0xd1/0x1c0 [ 855.563796][T14961] vprintk_emit+0x485/0x560 [ 855.568819][T14961] _printk+0xdd/0x130 [ 855.573326][T14961] br_multicast_set_startup_query_intvl+0x158/0x160 [ 855.580440][T14961] br_changelink+0x1073/0x18d0 [ 855.585734][T14961] rtnl_newlink+0x1607/0x1bb0 [ 855.590936][T14961] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 855.596406][T14961] netlink_rcv_skb+0x232/0x4b0 [ 855.601690][T14961] netlink_unicast+0x75c/0x8e0 [ 855.606986][T14961] netlink_sendmsg+0x813/0xb40 [ 855.612271][T14961] ____sys_sendmsg+0x972/0x9f0 [ 855.617558][T14961] ___sys_sendmsg+0x2a5/0x360 [ 855.622758][T14961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 855.628217][T14961] do_syscall_64+0x15f/0xf80 [ 855.633337][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.639752][T14961] [ 855.639752][T14961] -> #0 (&br->multicast_lock){+.-.}-{3:3}: [ 855.647748][T14961] __lock_acquire+0x15a5/0x2cf0 [ 855.653132][T14961] lock_acquire+0x106/0x350 [ 855.658166][T14961] _raw_spin_lock+0x2e/0x40 [ 855.663192][T14961] br_multicast_rcv+0x3b5f/0x7640 [ 855.668748][T14961] br_dev_xmit+0xb67/0x1990 [ 855.673777][T14961] dev_hard_start_xmit+0x2cd/0x830 [ 855.679409][T14961] __dev_queue_xmit+0x14d9/0x3950 [ 855.684962][T14961] hsr_forward_skb+0x167e/0x2a80 [ 855.690424][T14961] hsr_dev_xmit+0x242/0x360 [ 855.695472][T14961] dev_hard_start_xmit+0x2cd/0x830 [ 855.701133][T14961] __dev_queue_xmit+0x14d9/0x3950 [ 855.706698][T14961] ip6_output+0x340/0x550 [ 855.711566][T14961] NF_HOOK+0x177/0x4f0 [ 855.716169][T14961] mld_sendpack+0x8b4/0xe40 [ 855.721207][T14961] mld_ifc_work+0x835/0xe70 [ 855.726241][T14961] process_scheduled_works+0xb5d/0x1860 [ 855.732321][T14961] worker_thread+0xa53/0xfc0 [ 855.737443][T14961] kthread+0x388/0x470 [ 855.742034][T14961] ret_from_fork+0x514/0xb70 [ 855.747152][T14961] ret_from_fork_asm+0x1a/0x30 [ 855.752445][T14961] [ 855.752445][T14961] other info that might help us debug this: [ 855.752445][T14961] [ 855.762682][T14961] Possible unsafe locking scenario: [ 855.762682][T14961] [ 855.770140][T14961] CPU0 CPU1 [ 855.775510][T14961] ---- ---- [ 855.780879][T14961] lock(&hsr->seqnr_lock); [ 855.785391][T14961] lock(&br->multicast_lock); [ 855.792682][T14961] lock(&hsr->seqnr_lock); [ 855.799714][T14961] lock(&br->multicast_lock); [ 855.804488][T14961] [ 855.804488][T14961] *** DEADLOCK *** [ 855.804488][T14961] [ 855.812642][T14961] 11 locks held by kworker/0:11/14961: [ 855.818102][T14961] #0: ffff88803218d940 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 855.828826][T14961] #1: ffffc90006967c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 855.841972][T14961] #2: ffff8880685e8530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 855.851209][T14961] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 855.860446][T14961] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 855.869510][T14961] #5: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 855.879440][T14961] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 855.888584][T14961] #7: ffff88804872cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 855.898072][T14961] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 855.907567][T14961] #9: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 855.917498][T14961] #10: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 855.926820][T14961] [ 855.926820][T14961] stack backtrace: [ 855.932713][T14961] CPU: 0 UID: 0 PID: 14961 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 855.932733][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.932746][T14961] Workqueue: mld mld_ifc_work [ 855.932770][T14961] Call Trace: [ 855.932777][T14961] [ 855.932784][T14961] dump_stack_lvl+0xe8/0x150 [ 855.932810][T14961] print_circular_bug+0x2e1/0x300 [ 855.932830][T14961] check_noncircular+0x12e/0x150 [ 855.932850][T14961] __lock_acquire+0x15a5/0x2cf0 [ 855.932880][T14961] ? ipv6_mc_check_mld+0xeef/0x1ee0 [ 855.932900][T14961] ? unwind_next_frame+0xa6/0x2550 [ 855.932919][T14961] ? br_multicast_rcv+0x3b5f/0x7640 [ 855.932942][T14961] lock_acquire+0x106/0x350 [ 855.932965][T14961] ? br_multicast_rcv+0x3b5f/0x7640 [ 855.932989][T14961] ? __pfx_ipv6_mc_check_mld+0x10/0x10 [ 855.933008][T14961] ? __skb_flow_dissect+0x3e1/0x6e80 [ 855.933024][T14961] ? membarrier_private_expedited+0x340/0x7c0 [ 855.933042][T14961] _raw_spin_lock+0x2e/0x40 [ 855.933061][T14961] ? br_multicast_rcv+0x3b5f/0x7640 [ 855.933084][T14961] br_multicast_rcv+0x3b5f/0x7640 [ 855.933107][T14961] ? __skb_flow_dissect+0x2545/0x6e80 [ 855.933133][T14961] ? __pfx_br_multicast_rcv+0x10/0x10 [ 855.933162][T14961] ? __pfx___skb_flow_dissect+0x10/0x10 [ 855.933178][T14961] ? lapic_next_event+0x11/0x20 [ 855.933192][T14961] ? clockevents_program_event+0x491/0x630 [ 855.933210][T14961] ? __pfx_clockevents_program_event+0x10/0x10 [ 855.933229][T14961] ? __lock_acquire+0x6b5/0x2cf0 [ 855.933254][T14961] ? __lock_acquire+0x6b5/0x2cf0 [ 855.933280][T14961] ? unwind_next_frame+0xa6/0x2550 [ 855.933297][T14961] ? remove_pagetable+0x1096/0x14e0 [ 855.933318][T14961] ? lock_acquire+0x106/0x350 [ 855.933347][T14961] ? __lock_acquire+0x6b5/0x2cf0 [ 855.933371][T14961] ? unwind_next_frame+0xa6/0x2550 [ 855.933388][T14961] ? __lock_acquire+0x6b5/0x2cf0 [ 855.933412][T14961] ? unwind_next_frame+0xa6/0x2550 [ 855.933426][T14961] ? unwind_next_frame+0x1bbf/0x2550 [ 855.933443][T14961] ? br_allowed_ingress+0xda/0x1330 [ 855.933464][T14961] ? lock_acquire+0x106/0x350 [ 855.933487][T14961] ? br_dev_xmit+0x193/0x1990 [ 855.933506][T14961] ? ret_from_fork_asm+0x1a/0x30 [ 855.933525][T14961] br_dev_xmit+0xb67/0x1990 [ 855.933545][T14961] ? br_dev_xmit+0x193/0x1990 [ 855.933566][T14961] ? __pfx_br_dev_xmit+0x10/0x10 [ 855.933588][T14961] ? __netif_set_xps_queue+0x1c0/0x1e00 [ 855.933609][T14961] dev_hard_start_xmit+0x2cd/0x830 [ 855.933632][T14961] __dev_queue_xmit+0x14d9/0x3950 [ 855.933653][T14961] ? __dev_queue_xmit+0x2b6/0x3950 [ 855.933671][T14961] ? rcu_is_watching+0x15/0xb0 [ 855.933688][T14961] ? trace_kmalloc+0x2a/0xf0 [ 855.933706][T14961] ? skb_copy_bits+0xf7/0x8f0 [ 855.933723][T14961] ? __pfx___dev_queue_xmit+0x10/0x10 [ 855.933741][T14961] ? __copy_skb_header+0xa3/0x4a0 [ 855.933758][T14961] ? __asan_memcpy+0x40/0x70 [ 855.933774][T14961] ? skb_copy_expand+0x3a9/0xb90 [ 855.933792][T14961] ? __asan_memcpy+0x40/0x70 [ 855.933812][T14961] ? hsr_addr_subst_dest+0x30d/0xa90 [ 855.933832][T14961] hsr_forward_skb+0x167e/0x2a80 [ 855.933850][T14961] ? ret_from_fork_asm+0x1a/0x30 [ 855.933869][T14961] ? hsr_forward_skb+0xbb/0x2a80 [ 855.933888][T14961] ? __pfx_hsr_forward_skb+0x10/0x10 [ 855.933906][T14961] ? do_raw_spin_lock+0x12b/0x2f0 [ 855.933926][T14961] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 855.933945][T14961] ? __pfx_netif_skb_features+0x10/0x10 [ 855.933963][T14961] ? hsr_dev_xmit+0x237/0x360 [ 855.933980][T14961] hsr_dev_xmit+0x242/0x360 [ 855.933994][T14961] ? hsr_dev_xmit+0x2d/0x360 [ 855.934010][T14961] dev_hard_start_xmit+0x2cd/0x830 [ 855.934033][T14961] __dev_queue_xmit+0x14d9/0x3950 [ 855.934054][T14961] ? __dev_queue_xmit+0x2b6/0x3950 [ 855.934076][T14961] ? __pfx___dev_queue_xmit+0x10/0x10 [ 855.934096][T14961] ? neigh_connected_output+0x1ea/0x460 [ 855.934121][T14961] ? eth_header+0x11b/0x200 [ 855.934139][T14961] ? __asan_memcpy+0x40/0x70 [ 855.934163][T14961] ? ip6_output+0x126/0x550 [ 855.934190][T14961] ip6_output+0x340/0x550 [ 855.934216][T14961] ? __pfx_ip6_output+0x10/0x10 [ 855.934243][T14961] NF_HOOK+0x177/0x4f0 [ 855.934272][T14961] ? __pfx_NF_HOOK+0x10/0x10 [ 855.934300][T14961] ? __pfx_dst_output+0x10/0x10 [ 855.934325][T14961] ? lockdep_hardirqs_on+0x7a/0x110 [ 855.934358][T14961] ? __local_bh_enable_ip+0xd0/0x130 [ 855.934385][T14961] ? icmp6_dst_alloc+0x3a6/0x440 [ 855.934416][T14961] mld_sendpack+0x8b4/0xe40 [ 855.934451][T14961] ? mld_sendpack+0x213/0xe40 [ 855.934478][T14961] ? __pfx_mld_sendpack+0x10/0x10 [ 855.934514][T14961] mld_ifc_work+0x835/0xe70 [ 855.934543][T14961] ? process_scheduled_works+0xa70/0x1860 [ 855.934571][T14961] process_scheduled_works+0xb5d/0x1860 [ 855.934614][T14961] ? __pfx_process_scheduled_works+0x10/0x10 [ 855.934644][T14961] ? assign_work+0x3d5/0x5e0 [ 855.934673][T14961] worker_thread+0xa53/0xfc0 [ 855.934714][T14961] kthread+0x388/0x470 [ 855.934735][T14961] ? __pfx_worker_thread+0x10/0x10 [ 855.934759][T14961] ? __pfx_kthread+0x10/0x10 [ 855.934776][T14961] ret_from_fork+0x514/0xb70 [ 855.934801][T14961] ? __pfx_ret_from_fork+0x10/0x10 [ 855.934823][T14961] ? __switch_to+0xc79/0x1410 [ 855.934843][T14961] ? __pfx_kthread+0x10/0x10 [ 855.934860][T14961] ret_from_fork_asm+0x1a/0x30 [ 855.934882][T14961] [ 856.452619][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5923'. [ 856.521288][ T1662] block nbd4: Possible stuck request ffff888027095080: control (read@0,1024B). Runtime 270 seconds [ 856.546652][ T1662] block nbd4: Possible stuck request ffff888027095240: control (read@1024,1024B). Runtime 270 seconds [ 856.558265][ T1662] block nbd4: Possible stuck request ffff888027095400: control (read@2048,1024B). Runtime 270 seconds [ 856.570038][ T1662] block nbd4: Possible stuck request ffff8880270955c0: control (read@3072,1024B). Runtime 270 seconds [ 856.685841][T30155] netlink: 'syz.2.5918': attribute type 13 has an invalid length. [ 856.693723][T30155] netlink: 'syz.2.5918': attribute type 17 has an invalid length. [ 856.707044][T30155] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 856.716279][T30155] caif:caif_disconnect_client(): nothing to disconnect [ 856.723257][T30155] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 856.732873][T30155] chnl_net:chnl_net_open(): state disconnected [ 856.739398][T30155] 1ªX¹¦À: left allmulticast mode [ 856.745384][T30155] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 858.014324][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 858.022354][ C1] lec:lec_tx_timeout: lec0