last executing test programs: 5.204011649s ago: executing program 1 (id=11621): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom$inet6(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x10140, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) (async) recvfrom$inet6(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x10140, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) (async) close(0x4) 4.623725832s ago: executing program 1 (id=11629): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x298, 0x278, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x84, 0x0, 0x0, 0x15}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x0, 0x4, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfe, 0x3, 0x0, 0x1]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0xff, 0xff000000], [0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth0_to_team\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0xfff, 0xb70, 0xb, 'syz1\x00', 'syz0\x00', {0xbd4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649405007295", 0xa}], 0x2}, 0x880) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20048440) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="64000000020201040000000000000000070000050500060000000000080004400000000538000a80080001400000000008000140000d000000000140000000010c00028095ff034000000000000002800000010061000000080001400000000108000140000000010800044000000007"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000480)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) getsockname$packet(r9, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.113763926s ago: executing program 1 (id=11636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x48, 0x31, 0x3f, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008240)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x2, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}, 0x80, 0x0, 0x0, 0x0, 0x1358}}], 0x1, 0x20048014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="3f9d0000000000dcdf251700000008000300", @ANYRES32=r3, @ANYBLOB="880030800500020040000000050002001000000024000300ca78ce2ef14f35dee3659c84df2c757ee8ae4b983ec92df41dc0800594464d5614000400dfbb9be536a8431977a5a8f0d6836078240001800c00050007000000000000000c000500040000000000000005000200010000000400018014000180080001"], 0xa4}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) 2.683866119s ago: executing program 0 (id=11648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r0, 0x80084000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 2.612987739s ago: executing program 3 (id=11649): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x23c}}, 0x8000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) 2.420471604s ago: executing program 0 (id=11651): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) unshare(0x8040480) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701369eff"}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', r7, 0x0, 0x8, 0x8, 0x0, {{0xe, 0x4, 0x0, 0x22, 0x38, 0x65, 0x0, 0xfb, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x24, 0xcc, 0x1, 0x9, [{@broadcast, 0x800}, {@multicast1, 0x8}, {@multicast2, 0x97c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x1b8, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40c0801) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2.404523036s ago: executing program 3 (id=11652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000a40012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000300000400"/20], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000004, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x6aa8, 0x7, 0x1, 0x15ea, 0x7, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0xe]}}, {{0x1c, 0x1, {0x7, 0x0, 0x4, 0x8001, 0x1, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x803]}}, {{0x1c, 0x1, {0x7, 0x5, 0x9, 0x3ff, 0x0, 0x9, 0x9, 0x1}}, {0x6, 0x2, [0x8ad5]}}, {{0x1c, 0x1, {0x0, 0x6, 0x5, 0xcc1, 0x0, 0x2, 0xfffffbff, 0x1}}, {0x6, 0x2, [0x8388]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200c011}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = socket(0x6, 0x4, 0x1ff) syz_genetlink_get_family_id$ipvs(&(0x7f0000001180), r6) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000600)="7afc5d080800000000030095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r12 = socket$isdn(0x22, 0x3, 0x26) ioctl$F2FS_IOC_FLUSH_DEVICE(r12, 0x4008f50a, &(0x7f0000000200)={0x80000000, 0x6}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 2.169493759s ago: executing program 3 (id=11654): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9c1fe0ad824544b2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x342}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0x15, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendto$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000040)=""/123, &(0x7f00000000c0)=0x7b) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$MRT6_PIM(r6, 0x29, 0xcf, &(0x7f0000000100)=0x3, 0x4) 1.78475041s ago: executing program 4 (id=11656): pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x8884d000) 1.735113989s ago: executing program 0 (id=11657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000080000008500000019000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x137, 0x137, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x5, 0x2}, {0x7, 0x1}, {0xc, 0x2}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @restrict={0x9}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x6e7, [{0xb, 0x1, 0x3}, {0xd, 0x5, 0x66b}, {0x5, 0x5, 0x2bcc5443}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x5f1, 0x1de0435d}, {0x4, 0x200, 0x3ff}]}, @union={0xc, 0x6, 0x0, 0x5, 0x0, 0xffffffff, [{0x7, 0x2, 0x80000001}, {0xc, 0x5, 0x7}, {0xd, 0x1, 0x100}, {0x0, 0x3, 0x6}, {0x0, 0x1, 0xfffffffd}, {0x0, 0x3, 0x6}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @datasec={0xb, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x7fffffff, 0x9}, {0x3, 0x10, 0x1}], "fb70e0"}]}, {0x0, [0x61, 0x0, 0x0, 0x2e, 0x61, 0x61]}}, &(0x7f0000000540)=""/254, 0x158, 0xfe, 0x0, 0x81}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7ff, 0x0}, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x27}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x18, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x0, 0x5, 0x5, 0x4, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='GPL\x00', 0xb0, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, @fallback=0x20, r8, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x5, 0x7, 0x8}, 0x10, r9, r0}, 0x94) 1.632627525s ago: executing program 4 (id=11659): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e20, 0x3, 'wlc\x00', 0x7, 0x660f537f, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0xcd, 0x1}}, 0x44) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@nfc={0x27, r3, 0xffffffffffffffff, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.554534546s ago: executing program 4 (id=11660): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001400), 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$inet(0x2, 0xa, 0x8) r6 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x6, 0x8000}, 0x4) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270238004600003f0000a893"], 0xfd6c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @private1, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, "00eb00", 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @srh={0x2c, 0x0, 0x4, 0x0, 0x8, 0x40, 0x100}]}}}}}}}, 0x0) r7 = socket(0x11, 0x5, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}}) socket$inet6(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x66a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x46, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000037c0)={0x0, @remote, @private}, &(0x7f0000003800)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003a80)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x44}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @volatile={0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0xa, 0x5}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000003980)=""/218, 0x6f, 0xda, 0x1ff, 0x5}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="1b00000000000000000000000002000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500000000103d70880fdd5c7587000000000000"], 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) 1.454659941s ago: executing program 3 (id=11662): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd03}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280), 0x7c3500, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x6]}, {0xdde, 0x1, 0xa, 0x9}}, 0xfe, &(0x7f0000000300), &(0x7f0000000340)=0xffffffad}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000c000000021d000006000000000000020500000000002182268947749d802178433d1f72952fa2aae7228425ac4bcadcf8ee8ff8d65f73d604edfe62380062d42dde73012415ffe4f7c6fcc51efeb82aaf31d4bb63b8541848b27e3a72f8bebaa98e0c12105dd6d824f460fd10d7c79c851f0e28251a21ae24e76469ac670dabb07a909fdd96fa7017da3b67cbed81fac56b1fa09f840bccae06ad94bf26e35aed3a1e8f0e3af0833a701ed8e885e4cdc1c7c660ed3b333ccd69104f36f20cbdb58851febdcf744dc71cdc324eada36c90fa300d5aa75f790fe9ec516820ce03f2aa4f22b46de091"], &(0x7f0000000080)=""/182, 0x26, 0xb6, 0x1}, 0x28) 1.400287652s ago: executing program 2 (id=11663): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000b80)='ns/net\x00') (async, rerun: 32) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast1={0xff, 0x5}, 0x200004, 0x5, 0x6, 0x500, 0xfc8, 0x20c200a3}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40) 1.331036957s ago: executing program 3 (id=11664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000080)) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r4, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) getsockname$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="00009100000102008bcf14000180aaaaaaaaaa2caaaaaaaaaabb88a8360081003700080502011b07c43309419868e34195c100cf589f9993eaf10ec6233b97e182c016db834a0731058b7edf1ff2fc2da86de9885f7faf4b7858eef931e800caf3f5035a7446728e97753decccabcb4d15c368cde48451556e3b89d52125fd4409df8fe549eca653bd308dca6f67506c49fca6c128612f924c5e26163611aad53f05b3a366eb6fc1072dd64ababdd34a0ebb2df015070ba547a58ab126b782d8188758ce02fceee5143ab92df9c8"], 0xc6) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, r7, 0x8, 0x10, 0xa}, [@NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="b1aaaaaaaaaa0180c200000086dd60121f2600083cfffe8000000000000000000000000000ff00000000000000000000000000000001"], 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) write(r10, &(0x7f0000000000)="1c0000001a005f0214f9f407000901ff80000000fe03000100000000", 0x1c) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) 1.172437912s ago: executing program 2 (id=11665): r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffffc, @loopback}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffffc, @loopback}}}, 0x108) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r8, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 985.173624ms ago: executing program 4 (id=11666): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xd, 0x30, 0xffffffffffffffff, 0x523b000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 967.858168ms ago: executing program 0 (id=11667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100019002cbd7080fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="362b0470366772657461700000000c000280067c4d99000e00030000001400030069703667726574617030000000"], 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) r1 = socket(0x2, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x200, 0x9, 0x8000, 0xffff58ca, 0x8, 0x9, 0x0, 0x1, r4}, &(0x7f0000000080)=0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x158, 0x7, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x85, 0x6, {0x400, 'raw\x00', 0x5, 0x7, "e7baf755bed1ecc3f5fc2df03b3d0f06d09ccf684e4411ebfca469e487dfafc236a2bd68996c4dd4ae902cbfc9d7f59928859ad2d968df34a1ed9135ff9e64c3c00d2e5d74e326e9476228c1aadf95b61690dc9047103ce3b7c636"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x75, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_int(r7, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000059a0d0bb1636ff2a8ac1d0b7030000673b0f5d8500000006"], &(0x7f0000000200)='GPL\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x41000, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000026c0)={'batadv_slave_0\x00'}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) 763.997789ms ago: executing program 4 (id=11668): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 622.372609ms ago: executing program 4 (id=11669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @private}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @private, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_deladdr={0x74, 0x15, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x18, 0xfe, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffd}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x0, 0xc0000, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_deladdr={0x74, 0x15, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x18, 0xfe, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffd}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x0, 0xc0000, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x4, 0x66, 0x21000, r0, 0x6, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0xd}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x1800, {[@generic={0x4, 0x7, "0000c9f498"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x1800, {[@generic={0x4, 0x7, "0000c9f498"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) socket$unix(0x1, 0x5, 0x0) 599.111961ms ago: executing program 1 (id=11670): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000080)={0x4, 0x38, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5dc, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 416.050037ms ago: executing program 1 (id=11671): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x22, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}}, 0x0) 368.515517ms ago: executing program 1 (id=11672): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) epoll_create1(0x80000) epoll_create1(0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r4, &(0x7f0000015b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/122, 0x7a}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x160, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x61, &(0x7f0000000140)=""/97, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0xf, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x5, 0x5, 0x6, 0x7}, {0x5, 0x1, 0x2, 0x7}, {0x3, 0x1, 0x10, 0x3}, {0x4, 0x5, 0xe, 0x7}, {0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r5, 0x8, 0x1, 0x87b0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 356.066411ms ago: executing program 2 (id=11673): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000091103b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100000000000000000000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800010000000000000000000000010000000033"], 0xf8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000091103b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100000000000000000000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800010000000000000000000000010000000033"], 0xf8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) (async) 291.528653ms ago: executing program 0 (id=11674): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x29, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643d", 0x68}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d", 0x5c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000500)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x4}, {0x6, 0x1}]}) write(r2, &(0x7f0000000280)="73a39012", 0x4) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x102) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x7, &(0x7f0000000040)}, &(0x7f00000002c0)=0xfffffffffffffd7f) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) 214.959232ms ago: executing program 2 (id=11675): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r5, 0x11}, 0x14) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x3, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x4, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newlinkprop={0x30, 0x6c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x40, 0x8204}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) unshare(0x6a040000) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x14, 0x0, 0x239}, 0x14}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) (async) r8 = socket$kcm(0xa, 0x922000000003, 0x11) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x5, 0x1000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 101.530155ms ago: executing program 2 (id=11676): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) r0 = socket(0x8, 0x2, 0x1) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000010c0)={0x1, 0x2, 0x1000, 0x42, &(0x7f0000000040)="b131d32e22c254a06b834a93b0d966481beb608585ff5364b9ac7d00c27eff169802154aed78c55f9bfa9b4c70c6e6446040595e54afb6f93161e93e53144ee11569", 0x1000, 0x0, &(0x7f00000000c0)="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"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001180)={0x5ed2, 0x6, 0x6, 0x0, 0x0, [{{r1}, 0xb8b}, {{r0}, 0x4}, {{r1}, 0x6}, {{r2}, 0x1}, {{r1}, 0x1}, {{r1}, 0x40}]}) poll(&(0x7f0000001280)=[{r1, 0x9080}, {r1, 0x24c6}, {r1, 0x208}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000012c0)={0x0, 0x9}, &(0x7f0000001300)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000001340)={r3, @in6={{0xa, 0x4e21, 0x23ff9b2c, @mcast1, 0x5}}}, 0x84) r4 = accept4(r1, &(0x7f0000001400)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001480)=0x80, 0x40800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000014c0)=0x0) bind$nfc_llcp(r4, &(0x7f0000001500)={0x27, r5, 0x1, 0x2, 0xe, 0x2, "ec38297798c7a30bfe30ee3b9edb2f41fb84d88248cf768bd9b8b067298b1150a3ea3ac49dfddff215e56eb55aedcf0d339dabfe95505bd43eed1222bef3d7", 0x30}, 0x60) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000001580)) r6 = accept(0xffffffffffffffff, &(0x7f00000015c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001640)=0x80) clock_gettime(0x0, &(0x7f0000004a80)={0x0, 0x0}) recvmmsg(r7, &(0x7f00000048c0)=[{{&(0x7f0000001680)=@sco={0x1f, @none}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001700)=""/190, 0xbe}, {&(0x7f00000017c0)=""/30, 0x1e}], 0x2}, 0x3}, {{&(0x7f0000001840)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)}], 0x1, &(0x7f0000001940)=""/122, 0x7a}, 0xa}, {{&(0x7f00000019c0)=@x25, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a40)=""/23, 0x17}], 0x1, &(0x7f0000001ac0)=""/21, 0x15}, 0x8001}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/118, 0x76}], 0x2, &(0x7f0000001c00)=""/91, 0x5b}, 0x400}, {{&(0x7f0000001c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001d00)=""/146, 0x92}, {&(0x7f0000001dc0)=""/215, 0xd7}, {&(0x7f0000001ec0)=""/132, 0x84}, {&(0x7f0000001f80)=""/220, 0xdc}, {&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/203, 0xcb}, {&(0x7f0000002200)=""/124, 0x7c}, {&(0x7f0000002280)=""/97, 0x61}], 0x8}, 0x2}, {{&(0x7f0000002380)=@hci, 0x80, &(0x7f0000002580)=[{&(0x7f0000002400)=""/59, 0x3b}, {&(0x7f0000002440)=""/221, 0xdd}, {&(0x7f0000002540)=""/30, 0x1e}], 0x3, &(0x7f00000025c0)=""/4096, 0x1000}, 0x60000}, {{&(0x7f00000035c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000003640)=""/112, 0x70}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/139, 0x8b}, {&(0x7f0000004780)=""/211, 0xd3}], 0x4, 0xfffffffffffffffc}, 0x1}], 0x7, 0x10000, &(0x7f0000004ac0)={r8, r9+10000000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005d00)={0xffffffffffffffff, 0x0, 0x1000, 0x7, &(0x7f0000004b00)="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", &(0x7f0000005b00)=""/7, 0xc2fe, 0x0, 0xcc, 0x89, &(0x7f0000005b40)="7fa52943034f597dec59777e2f1fa5c7f484169469c4a20b4d64fe938c703cefd56c7a0e1958916e73f9a284e7351184dca98ed0db85d287d33e193e771ca44d5d1f2380ebc8e2a5393eff3a041884ace8773bd0814dc52b0fd62b9ad0bf41f462e085b869ff913e33f3f79b7fd510557f49201bc1e3f6f5da285c724af9e8785bbc2b5e2122f93592ff4e07769cade7f30efe991c42d0f577c387e8933ead97c24aff12a83f1a97ed90adb1f762c23409b27fbd483d2640e8305ba943b5ab406bc95f07cb49a49b1e42d0d5", &(0x7f0000005c40)="00edc519487ca51242dc0c0b03f5aeef0ee578068851b2cc03e5a8aeff18cca6627130f69484795e972e3af212b20aeeb7f2ba4009aa0edb5f3b3c241b8fe44f03283b4b5679a00cd5e0bf119cc0668bcd1c67855ff6d6902daed6edd76319ae8d1d5f72514476621737d0f9d2b1f637cd558ab3033b0cfc6b92095dfef3aea89774a3cfd35e73f2b5", 0x1, 0x0, 0x7}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000005d80)={r3, 0x3a, 0x5, 0x5}, &(0x7f0000005dc0)=0x10) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000005e00)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000005f40)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005f00)={&(0x7f0000005ec0)={0x28, r12, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040055) r13 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r13, 0x8982, &(0x7f0000005f80)={0x0, 'syzkaller1\x00', {}, 0x6}) listen(r10, 0x5) r14 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000005fc0), 0x800) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000006040)={{r14}, 0x2, &(0x7f0000006000)=[0x7, 0x1000], 0x5, 0x5, 0x1}) connect$bt_l2cap(r4, &(0x7f00000060c0)={0x1f, 0x1, @none, 0x7, 0x2}, 0xe) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000006100)={'filter\x00', 0x4}, 0x68) 4.180542ms ago: executing program 3 (id=11677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r3}, 0x99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x80000fc, 0x3, 0x0, 0x10fff, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xd, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000080)=0xfffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000440)={r6, &(0x7f0000000000)='syzkaller\x00', 0x200040, &(0x7f0000000300)={@_ha_fsid={[0x4, 0x1]}, {0x9, 0x1a6c, 0x7, 0xfffffffffffffffd}}, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x8000}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) 1.489284ms ago: executing program 0 (id=11678): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)={@val={0xa}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2007f15b8c8446b7e7e3167d75149f314f61b678"], 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) 0s ago: executing program 2 (id=11679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xae, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000001000)=""/31, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r4, &(0x7f0000006e80)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) kernel console output (not intermixed with test programs): k socket, switching to perfect channel medium [ 1325.514902][T12106] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1325.537531][T12106] ipvlan2: entered allmulticast mode [ 1325.542881][T12106] syz_tun: entered allmulticast mode [ 1325.624799][T12107] lo speed is unknown, defaulting to 1000 [ 1325.973058][T12110] lo speed is unknown, defaulting to 1000 [ 1326.212242][T12116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1326.330484][T12122] bond1: entered allmulticast mode [ 1326.336850][T12124] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1326.518649][T12138] lo speed is unknown, defaulting to 1000 [ 1327.085078][T12147] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1327.256982][T12151] sctp: [Deprecated]: syz.1.9727 (pid 12151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1327.256982][T12151] Use struct sctp_sack_info instead [ 1328.356173][T12100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1328.368915][T12152] netlink: 'syz.1.9727': attribute type 1 has an invalid length. [ 1328.415807][T12152] __nla_validate_parse: 9 callbacks suppressed [ 1328.415847][T12152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9727'. [ 1328.588474][T12158] netlink: 'syz.2.9729': attribute type 4 has an invalid length. [ 1328.604818][T12158] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9729'. [ 1329.212363][T12204] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1329.224037][T12204] bond2 (unregistering): Released all slaves [ 1329.439989][T12213] macsec2: entered promiscuous mode [ 1329.448774][T12213] erspan0: entered promiscuous mode [ 1329.457714][T12213] erspan0: left promiscuous mode [ 1329.515994][T12079] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1329.547979][T12218] netlink: 'syz.3.9745': attribute type 1 has an invalid length. [ 1329.585692][T12218] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9745'. [ 1329.624080][T12218] netlink: 'syz.3.9745': attribute type 1 has an invalid length. [ 1329.652488][T12218] netlink: 'syz.3.9745': attribute type 8 has an invalid length. [ 1329.671336][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9746'. [ 1329.685805][T12218] netlink: 606 bytes leftover after parsing attributes in process `syz.3.9745'. [ 1329.970482][T12238] lo speed is unknown, defaulting to 1000 [ 1330.023536][T29993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1330.438482][T21063] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1330.661205][T12271] netlink: 'syz.1.9756': attribute type 1 has an invalid length. [ 1330.668977][T12271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9756'. [ 1330.733426][T12271] netlink: 'syz.1.9756': attribute type 1 has an invalid length. [ 1330.881510][T12285] netlink: 'syz.4.9760': attribute type 12 has an invalid length. [ 1330.889406][T12285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9760'. [ 1330.979261][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9756'. [ 1330.993078][T12287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9756'. [ 1331.037679][T12285] netlink: 'syz.4.9760': attribute type 39 has an invalid length. [ 1331.268236][T12291] lo speed is unknown, defaulting to 1000 [ 1331.693052][T21063] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1331.731424][T21063] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1331.753223][T12318] netlink: 400 bytes leftover after parsing attributes in process `syz.0.9766'. [ 1331.763141][T12315] netlink: 'syz.1.9765': attribute type 1 has an invalid length. [ 1331.953796][T29993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1331.972634][T29993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1332.012048][T12315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1332.045146][T12333] ¾x9ÿ: renamed from bridge_slave_0 [ 1332.051504][T12296] lo speed is unknown, defaulting to 1000 [ 1332.078537][T12329] syzkaller0: entered promiscuous mode [ 1332.084018][T12329] syzkaller0: entered allmulticast mode [ 1332.237646][T12337] tipc: Started in network mode [ 1332.242931][T12337] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1332.250785][T12337] tipc: Enabled bearer , priority 14 [ 1332.303552][T29993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1332.667264][T12345] nbd4: detected capacity change from 0 to 63 [ 1332.674486][T12350] block nbd4: NBD_DISCONNECT [ 1332.684793][T12350] block nbd4: Disconnected due to user request. [ 1332.694282][T12006] blk_print_req_error: 54 callbacks suppressed [ 1332.694297][T12006] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.711543][T12350] block nbd4: shutting down sockets [ 1332.731958][T12006] buffer_io_error: 54 callbacks suppressed [ 1332.731973][T12006] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1332.767743][ T5213] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1332.776998][ T5213] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1332.784859][ T5213] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1332.794245][ T5213] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1332.821096][T12006] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.830739][T12006] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1332.838591][T12006] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.847629][T12006] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1332.895097][T18422] Bluetooth: hci4: command 0x0405 tx timeout [ 1332.914362][T12006] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.923419][T12006] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1332.931258][T12006] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.940297][T12006] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1332.948186][T12006] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.957727][T12006] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1332.965799][T12006] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1332.974840][T12006] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1332.993881][T12006] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1333.003195][T12006] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1333.014690][T12006] ldm_validate_partition_table(): Disk read failed. [ 1333.023185][T12006] Dev nbd4: unable to read RDB block 0 [ 1333.030565][T12006] nbd4: unable to read partition table [ 1333.048177][T12006] ldm_validate_partition_table(): Disk read failed. [ 1333.056750][T12006] Dev nbd4: unable to read RDB block 0 [ 1333.064811][T12006] nbd4: unable to read partition table [ 1333.132209][T12378] bridge_slave_0: left allmulticast mode [ 1333.138083][T12378] bridge_slave_0: left promiscuous mode [ 1333.143824][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.158446][T12378] bridge_slave_1: left allmulticast mode [ 1333.164163][T12378] bridge_slave_1: left promiscuous mode [ 1333.169824][T12378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.192505][T12378] bond0: (slave bond_slave_0): Releasing backup interface [ 1333.202775][T12378] bond0: (slave bond_slave_1): Releasing backup interface [ 1333.264509][T12378] team0: Port device team_slave_0 removed [ 1333.279660][T12378] team0: Port device team_slave_1 removed [ 1333.288812][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.296572][T12378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.305452][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.312926][T12378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.359234][T12378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1333.393746][ T8257] tipc: Node number set to 10463914 [ 1333.446629][T12389] lo speed is unknown, defaulting to 1000 [ 1333.514514][T12399] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1333.527379][T12400] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1333.633027][T21063] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.821929][T12418] __nla_validate_parse: 7 callbacks suppressed [ 1333.821948][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9791'. [ 1334.283478][T12429] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9795'. [ 1334.686897][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9798'. [ 1334.789207][T12442] macsec2: entered promiscuous mode [ 1334.794467][T12442] virt_wifi0: entered promiscuous mode [ 1335.200342][T12459] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1335.225565][T12453] lo speed is unknown, defaulting to 1000 [ 1335.684238][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9807'. [ 1335.793653][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1336.167856][T12483] macsec2: entered promiscuous mode [ 1336.173081][T12483] erspan0: entered promiscuous mode [ 1336.243238][T12483] erspan0: left promiscuous mode [ 1336.250520][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1336.433153][T12509] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9814'. [ 1336.568940][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1336.611262][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1336.652107][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1336.685137][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1336.715766][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.726100][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.735959][T12504] dummy0: left promiscuous mode [ 1336.740869][T12504] dummy0: left allmulticast mode [ 1336.748128][T12504] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1336.770558][T12486] lo speed is unknown, defaulting to 1000 [ 1336.814050][T12505] lo speed is unknown, defaulting to 1000 [ 1337.369942][T12532] validate_nla: 3 callbacks suppressed [ 1337.369960][T12532] netlink: 'syz.1.9821': attribute type 1 has an invalid length. [ 1337.426068][T12532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1337.443626][T12532] bond3: up delay (489) is not a multiple of miimon (100), value rounded to 400 ms [ 1337.463501][T12532] bond3: entered allmulticast mode [ 1337.522559][T12544] netlink: 'syz.1.9825': attribute type 2 has an invalid length. [ 1337.779197][T12555] syzkaller0: entered promiscuous mode [ 1337.786790][T12555] syzkaller0: entered allmulticast mode [ 1337.985715][T12561] syzkaller0: entered promiscuous mode [ 1337.997889][T12561] syzkaller0: entered allmulticast mode [ 1338.073730][T12568] netlink: 'syz.2.9832': attribute type 8 has an invalid length. [ 1338.132606][T12568] veth1_to_team: entered promiscuous mode [ 1338.140062][T12568] gretap0: entered promiscuous mode [ 1338.146836][T12568] veth1_to_batadv: entered promiscuous mode [ 1338.154914][T12568] debugfs: 'hsr1' already exists in 'hsr' [ 1338.161022][T12568] Cannot create hsr debugfs directory [ 1338.175430][T12568] hsr1: entered promiscuous mode [ 1338.209586][T12572] pim6reg: entered allmulticast mode [ 1338.273187][T12574] tipc: Started in network mode [ 1338.280432][T12574] tipc: Node identity 92fb94156c07, cluster identity 4711 [ 1338.290308][T12574] tipc: Enabled bearer , priority 0 [ 1338.298314][T12574] syzkaller0: entered promiscuous mode [ 1338.307043][T12574] syzkaller0: entered allmulticast mode [ 1338.326124][T12573] tipc: Resetting bearer [ 1338.389858][T12573] tipc: Disabling bearer [ 1338.476007][T12582] netlink: 'syz.2.9835': attribute type 1 has an invalid length. [ 1338.508938][T12582] netlink: 'syz.2.9835': attribute type 2 has an invalid length. [ 1338.542743][T12584] netlink: 'syz.0.9837': attribute type 12 has an invalid length. [ 1339.089695][T12597] __nla_validate_parse: 22 callbacks suppressed [ 1339.089713][T12597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9841'. [ 1339.438159][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9847'. [ 1339.560226][T12614] syzkaller0: entered promiscuous mode [ 1339.591684][T12614] syzkaller0: entered allmulticast mode [ 1339.871190][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9850'. [ 1340.063676][T12644] netlink: 'syz.3.9850': attribute type 4 has an invalid length. [ 1340.253524][T12646] netlink: 'syz.3.9850': attribute type 4 has an invalid length. [ 1340.659439][T12658] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.9852'. [ 1340.789301][T12666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9855'. [ 1341.127804][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9855'. [ 1342.816690][T12631] syzkaller0: entered promiscuous mode [ 1342.822571][T12631] syzkaller0: entered allmulticast mode [ 1343.071021][T12676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1343.107110][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1343.171432][T12684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9859'. [ 1343.407508][T12701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1343.900906][T12731] pim6reg1: entered promiscuous mode [ 1343.931125][T12731] pim6reg1: entered allmulticast mode [ 1344.128921][T12745] netlink: 'syz.0.9876': attribute type 21 has an invalid length. [ 1344.193488][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1344.587069][T12766] __nla_validate_parse: 2 callbacks suppressed [ 1344.587087][T12766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9878'. [ 1344.730480][T12752] lo speed is unknown, defaulting to 1000 [ 1345.380081][T12800] smc: net device veth1_to_team erased user defined pnetid S [ 1345.431566][T12803] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1345.464280][T12803] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1345.507236][T12809] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1345.522729][T12809] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1345.697903][T12814] lo speed is unknown, defaulting to 1000 [ 1345.813930][T12822] syzkaller0: entered promiscuous mode [ 1345.829729][T12822] syzkaller0: entered allmulticast mode [ 1346.104987][T12752] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9877'. [ 1346.125123][T12830] Bluetooth: MGMT ver 1.23 [ 1346.340634][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9897'. [ 1346.340893][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1346.548079][T12840] tipc: MTU too low for tipc bearer [ 1346.881435][T12850] netlink: 'syz.4.9905': attribute type 11 has an invalid length. [ 1346.951410][T12846] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1347.030387][T12858] netlink: 'syz.3.9907': attribute type 1 has an invalid length. [ 1347.088931][T12858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1347.345673][T12875] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1347.466816][T12881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9913'. [ 1347.543149][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9915'. [ 1347.647856][T12890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1347.705957][T12893] veth1_to_bridge: entered allmulticast mode [ 1347.871701][T12905] vxcan3: entered promiscuous mode [ 1348.344136][T12923] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1348.486795][T12938] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1348.542249][T12930] lo speed is unknown, defaulting to 1000 [ 1349.019719][T12959] syzkaller0: entered promiscuous mode [ 1349.031022][T12959] syzkaller0: entered allmulticast mode [ 1349.125044][T12968] netlink: 'syz.4.9941': attribute type 1 has an invalid length. [ 1349.599140][T13011] netlink: 'syz.2.9950': attribute type 1 has an invalid length. [ 1349.607110][T13011] netlink: 'syz.2.9950': attribute type 2 has an invalid length. [ 1349.615475][T13011] netlink: 'syz.2.9950': attribute type 1 has an invalid length. [ 1349.623379][T13011] netlink: 'syz.2.9950': attribute type 3 has an invalid length. [ 1349.631122][T13011] __nla_validate_parse: 21 callbacks suppressed [ 1349.631131][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9950'. [ 1352.237146][T12984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1352.381650][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9955'. [ 1352.433593][T13046] netlink: 'syz.2.9957': attribute type 12 has an invalid length. [ 1352.453100][T13046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1352.474363][T13045] syzkaller0: entered promiscuous mode [ 1352.490794][T13045] 0: reclassify loop, rule prio 0, protocol 800 [ 1352.519964][T13046] netlink: 'syz.2.9957': attribute type 39 has an invalid length. [ 1352.681224][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9963'. [ 1352.799582][T13088] netlink: 'syz.0.9963': attribute type 8 has an invalid length. [ 1352.848412][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9963'. [ 1352.910388][T13077] lo speed is unknown, defaulting to 1000 [ 1353.162964][T13105] netlink: 'syz.0.9971': attribute type 12 has an invalid length. [ 1353.170821][T13105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1353.250999][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1353.260209][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9976'. [ 1353.281476][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9974'. [ 1353.299950][T13105] netlink: 'syz.0.9971': attribute type 39 has an invalid length. [ 1353.302532][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9973'. [ 1353.643121][T13124] netem: change failed [ 1353.815736][T13140] netlink: 'syz.2.9981': attribute type 1 has an invalid length. [ 1353.823533][T13140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1353.857740][T13141] syzkaller1: entered promiscuous mode [ 1353.873483][T13141] syzkaller1: entered allmulticast mode [ 1354.190813][T13158] lo speed is unknown, defaulting to 1000 [ 1354.564470][T13193] batadv_slave_0: entered promiscuous mode [ 1354.711463][T13201] __nla_validate_parse: 7 callbacks suppressed [ 1354.711482][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9997'. [ 1354.746680][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9997'. [ 1354.761849][T13201] validate_nla: 5 callbacks suppressed [ 1354.761866][T13201] netlink: 'syz.3.9997': attribute type 7 has an invalid length. [ 1354.780600][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1354.837681][T13212] netlink: 'syz.4.10000': attribute type 2 has an invalid length. [ 1354.864269][T13191] batadv_slave_0: left promiscuous mode [ 1354.872507][T13200] lo speed is unknown, defaulting to 1000 [ 1354.974703][T13020] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.996203][T13020] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.005032][T13020] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.073025][T13020] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.368710][T13238] netlink: 'syz.1.10008': attribute type 2 has an invalid length. [ 1355.391727][T13240] tipc: Enabling of bearer rejected, failed to enable media [ 1355.577301][T13224] IPv6: NLM_F_CREATE should be specified when creating new route [ 1355.586071][T13224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1355.593299][T13224] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.600641][T13224] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.607861][T13224] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.865503][T13236] infiniband !yz!: set down [ 1355.880795][T13236] infiniband !yz!: added team_slave_0 [ 1355.969654][T13236] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1355.986105][T13236] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1356.003662][T13236] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1356.046064][T13236] RDS/IB: !yz!: added [ 1356.055400][T13236] smc: adding ib device !yz! with port count 1 [ 1356.061615][T13236] smc: ib device !yz! port 1 has no pnetid [ 1356.459315][T13279] gre1: entered allmulticast mode [ 1356.468151][T13281] netlink: 'syz.3.10018': attribute type 1 has an invalid length. [ 1356.513007][T13281] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1356.964900][T13307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1357.082180][T13312] netlink: 'syz.0.10026': attribute type 1 has an invalid length. [ 1357.187429][T13320] netlink: 'syz.4.10027': attribute type 10 has an invalid length. [ 1357.256502][T13319] netlink: 'syz.4.10027': attribute type 10 has an invalid length. [ 1357.290790][T13320] team0: Port device dummy0 added [ 1357.326765][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1357.352359][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10027'. [ 1357.374197][T13319] team0: Port device dummy0 removed [ 1357.451939][T13319] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1357.504207][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1357.541732][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1357.655722][T13338] team1: entered promiscuous mode [ 1357.660955][T13338] team1: entered allmulticast mode [ 1357.667724][T13338] 8021q: adding VLAN 0 to HW filter on device team1 [ 1357.751833][T13339] team2: entered promiscuous mode [ 1357.764180][T13339] team2: entered allmulticast mode [ 1357.772263][T13339] 8021q: adding VLAN 0 to HW filter on device team2 [ 1358.058715][T13352] netlink: 'syz.3.10035': attribute type 1 has an invalid length. [ 1358.470014][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10040'. [ 1359.577419][T13400] netlink: 'syz.3.10047': attribute type 1 has an invalid length. [ 1359.631547][T13400] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1359.796160][T13407] netlink: 'syz.0.10049': attribute type 3 has an invalid length. [ 1360.494711][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10053'. [ 1360.503910][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10053'. [ 1360.512980][T13424] netlink: 'syz.2.10053': attribute type 12 has an invalid length. [ 1360.554941][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10053'. [ 1360.599472][T13057] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.612094][T13057] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.628077][T13057] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.473583][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1361.488810][ T1311] lec:lec_start_xmit: lec0:No lecd attached [ 1361.720915][T13376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1361.732419][T13421] netlink: 'syz.1.10052': attribute type 1 has an invalid length. [ 1361.778680][T13421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10052'. [ 1361.812015][T13421] workqueue: Failed to create a rescuer kthread for wq "phy8": -EINTR [ 1362.264968][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10061'. [ 1362.337806][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10060'. [ 1362.346887][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10060'. [ 1362.399235][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10063'. [ 1362.538340][T13458] xt_CONNSECMARK: invalid mode: 254 [ 1362.666371][T13463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10065'. [ 1362.676751][T13466] Cannot find set identified by id 0 to match [ 1363.058428][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1363.076814][T13486] netlink: 'syz.1.10071': attribute type 4 has an invalid length. [ 1364.616976][T13558] netlink: 'syz.4.10094': attribute type 1 has an invalid length. [ 1365.037229][T13567] ip6gretap0: entered promiscuous mode [ 1365.052726][T13567] syz_tun: entered promiscuous mode [ 1365.732691][T13580] __nla_validate_parse: 5 callbacks suppressed [ 1365.732860][T13580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10102'. [ 1365.976603][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1366.307220][T13596] bond4: entered promiscuous mode [ 1366.312338][T13596] bond4: entered allmulticast mode [ 1366.317946][T13596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1366.551760][T13604] lo speed is unknown, defaulting to 1000 [ 1366.753459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1366.761529][ C0] lec:lec_tx_timeout: lec0 [ 1366.984116][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10114'. [ 1367.005210][T13619] netlink: 'syz.4.10114': attribute type 2 has an invalid length. [ 1367.019438][T13619] netlink: 'syz.4.10114': attribute type 1 has an invalid length. [ 1367.041856][T13619] netlink: 'syz.4.10114': attribute type 21 has an invalid length. [ 1367.060162][T13619] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10114'. [ 1367.075042][T13619] netlink: 'syz.4.10114': attribute type 4 has an invalid length. [ 1367.087454][T13619] netlink: 'syz.4.10114': attribute type 3 has an invalid length. [ 1367.095823][T13619] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10114'. [ 1367.551191][T13624] veth1_to_bond: entered allmulticast mode [ 1368.075265][T13621] veth1_to_bond: left allmulticast mode [ 1368.092601][T13635] netlink: 'syz.0.10118': attribute type 1 has an invalid length. [ 1368.532397][T13646] netlink: 'syz.4.10121': attribute type 1 has an invalid length. [ 1369.053942][T13661] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1369.498857][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10135'. [ 1369.526562][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10135'. [ 1369.571435][T13694] lo speed is unknown, defaulting to 1000 [ 1369.909444][T13700] netlink: 'syz.4.10136': attribute type 1 has an invalid length. [ 1370.328055][T13721] netlink: 'syz.2.10142': attribute type 39 has an invalid length. [ 1370.397614][T13719] netlink: 'syz.2.10142': attribute type 12 has an invalid length. [ 1370.406702][T13719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10142'. [ 1370.603873][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1370.805315][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10149'. [ 1371.246598][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10153'. [ 1371.504422][T13763] syzkaller0: entered promiscuous mode [ 1371.534754][T13763] syzkaller0: entered allmulticast mode [ 1371.562387][T13763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10154'. [ 1371.575133][T13771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10155'. [ 1371.586715][T13763] netlink: 680 bytes leftover after parsing attributes in process `syz.2.10154'. [ 1371.613578][T13763] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10154'. [ 1371.683021][T13777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10157'. [ 1371.790352][T28247] lec:lec_start_xmit: lec0:No lecd attached [ 1371.846810][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10159'. [ 1371.929338][T13782] IPVS: ip_vs_add_dest(): server weight less than zero [ 1371.947472][T29993] IPVS: starting estimator thread 0... [ 1371.963593][T13782] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1372.053538][T13785] IPVS: using max 41 ests per chain, 98400 per kthread [ 1372.173493][T13797] sctp: [Deprecated]: syz.1.10163 (pid 13797) Use of int in max_burst socket option. [ 1372.173493][T13797] Use struct sctp_assoc_value instead [ 1372.250179][T13803] validate_nla: 4 callbacks suppressed [ 1372.250216][T13803] netlink: 'syz.4.10168': attribute type 12 has an invalid length. [ 1372.284782][T13803] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10168'. [ 1372.345637][T13803] netlink: 'syz.4.10168': attribute type 39 has an invalid length. [ 1372.796635][T13825] lo speed is unknown, defaulting to 1000 [ 1372.844602][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1372.944026][T13842] netlink: 'syz.4.10181': attribute type 12 has an invalid length. [ 1373.011494][T13842] netlink: 'syz.4.10181': attribute type 39 has an invalid length. [ 1373.104823][T13802] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1373.610176][T13876] bridge2: entered promiscuous mode [ 1373.615475][T13876] bridge2: entered allmulticast mode [ 1373.772844][T13865] bond6: (slave bond_slave_1): Device is not bonding slave [ 1373.781208][T13865] bond6: option active_slave: invalid value (bond_slave_1) [ 1373.792350][T13865] bond6 (unregistering): Released all slaves [ 1373.857595][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 1374.185376][T13892] syzkaller0: entered promiscuous mode [ 1374.197074][T13892] syzkaller0: entered allmulticast mode [ 1374.283728][T18422] Bluetooth: hci2: command 0x0405 tx timeout [ 1374.406647][T13896] macvtap0: entered promiscuous mode [ 1374.549674][T13898] netlink: 'syz.4.10201': attribute type 4 has an invalid length. [ 1374.767290][T13915] siw: device registration error -23 [ 1374.797510][T13917] siw: device registration error -23 [ 1375.138503][T13934] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1375.189114][T13934] bond9: (slave lo): Enslaving as an active interface with an up link [ 1375.229897][T13934] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1375.448073][T13941] tipc: Enabling of bearer rejected, failed to enable media [ 1376.151550][T13978] __nla_validate_parse: 8 callbacks suppressed [ 1376.151571][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10226'. [ 1376.803357][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1376.811482][ C0] lec:lec_tx_timeout: lec0 [ 1376.910879][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10228'. [ 1377.306212][T14013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.318520][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1377.553716][T13959] bond1: left allmulticast mode [ 1377.609440][T13978] : entered promiscuous mode [ 1377.687468][T14015] siw: device registration error -23 [ 1377.692437][T13072] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.701667][T13072] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.704288][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10231'. [ 1377.736748][T13072] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.745892][T13072] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.770363][T13072] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1377.779599][T13072] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.809469][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10232'. [ 1378.121143][T14032] delete_channel: no stack [ 1378.177914][T14041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1378.198803][T14041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1378.421394][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10240'. [ 1378.486405][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10241'. [ 1378.495446][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10241'. [ 1379.177657][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1379.319714][T14093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10255'. [ 1379.663604][T14109] lo speed is unknown, defaulting to 1000 [ 1380.021261][T14121] syzkaller0: entered promiscuous mode [ 1380.026813][T14121] syzkaller0: entered allmulticast mode [ 1381.208378][T14176] tipc: Cannot configure node identity twice [ 1381.295375][T14182] __nla_validate_parse: 1 callbacks suppressed [ 1381.295395][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10282'. [ 1382.074811][T14213] bridge0: left promiscuous mode [ 1382.107073][T14213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.273294][T14213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1382.406603][T14227] lo speed is unknown, defaulting to 1000 [ 1382.495299][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10300'. [ 1382.621087][T14234] lo speed is unknown, defaulting to 1000 [ 1382.817207][T14243] block nbd0: reconnected socket [ 1382.822425][T14243] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1382.884697][T13054] bridge_slave_1: left promiscuous mode [ 1382.893122][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.961315][T13054] bridge_slave_0: left allmulticast mode [ 1382.989379][T13054] bridge_slave_0: left promiscuous mode [ 1383.021210][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.108075][T13054] dvmrp0: left allmulticast mode [ 1383.547590][T13054] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1383.644992][ T5853] block nbd0: Receive control failed (result -32) [ 1383.970719][T14261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10305'. [ 1384.092142][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.103795][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.114261][T13054] bond0 (unregistering): Released all slaves [ 1384.127578][T13054] bond1 (unregistering): Released all slaves [ 1384.148622][T13054] bond2 (unregistering): Released all slaves [ 1384.183072][T13054] bond3 (unregistering): Released all slaves [ 1384.205246][T13054] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 1384.213610][T13054] wireguard0: left promiscuous mode [ 1384.219618][T13054] bond4 (unregistering): Released all slaves [ 1384.241103][T13054] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1384.249604][T13054] bond6 (unregistering): left promiscuous mode [ 1384.256571][T13054] bond5 (unregistering): Released all slaves [ 1384.270170][T13054] bond6 (unregistering): Released all slaves [ 1384.284130][T13054] bond7 (unregistering): Released all slaves [ 1384.304451][T13054] bond8 (unregistering): Released all slaves [ 1384.321831][T13054] bond9 (unregistering): left promiscuous mode [ 1384.329347][T13054] team0: Port device bond9 removed [ 1384.335730][T13054] bond9 (unregistering): Released all slaves [ 1384.349492][T13054] bond10 (unregistering): (slave lo): Releasing backup interface [ 1384.364288][T13054] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1384.375587][T13054] bond10 (unregistering): Released all slaves [ 1384.393902][T13054] bond11 (unregistering): Released all slaves [ 1384.428279][T13054] bond12 (unregistering): Released all slaves [ 1384.445592][T14262] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10305'. [ 1384.457083][T14243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10302'. [ 1384.797473][T14278] tipc: Enabled bearer , priority 0 [ 1384.849109][T14278] syzkaller0: entered promiscuous mode [ 1384.910433][T14278] syzkaller0: entered allmulticast mode [ 1385.011843][T14278] tipc: Resetting bearer [ 1385.029330][T14277] tipc: Resetting bearer [ 1385.096248][T14277] tipc: Disabling bearer [ 1385.236556][T13054] tipc: Left network mode [ 1385.295185][T13054] IPVS: stopping master sync thread 624 ... [ 1385.416338][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10314'. [ 1385.425876][T14303] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1385.476208][T14299] macvlan2: entered allmulticast mode [ 1385.481738][T14299] hsr0: entered allmulticast mode [ 1385.487318][T14299] hsr_slave_0: entered allmulticast mode [ 1385.493009][T14299] hsr_slave_1: entered allmulticast mode [ 1385.500141][T14299] hsr0: entered promiscuous mode [ 1385.506182][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10316'. [ 1385.623793][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10317'. [ 1385.679034][T14314] bond2: (slave vlan2): Opening slave failed [ 1385.698797][T14318] netlink: 'syz.1.10318': attribute type 1 has an invalid length. [ 1385.706650][T14318] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1386.069690][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10321'. [ 1386.254316][T14333] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1386.424506][T14342] netlink: 'syz.0.10330': attribute type 9 has an invalid length. [ 1386.537928][T14349] syzkaller0: entered promiscuous mode [ 1386.557863][T14349] syzkaller0: entered allmulticast mode [ 1386.599351][T14348] tipc: Enabled bearer , priority 0 [ 1386.758676][T14348] tipc: Resetting bearer [ 1386.807046][T14357] netlink: 'syz.4.10333': attribute type 1 has an invalid length. [ 1386.860618][T14348] tipc: Disabling bearer [ 1387.482994][T14385] batadv_slave_0: entered promiscuous mode [ 1387.498256][T14388] __nla_validate_parse: 1 callbacks suppressed [ 1387.498278][T14388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10339'. [ 1387.540371][T14382] batadv_slave_0: left promiscuous mode [ 1387.743702][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10343'. [ 1387.800851][ T29] audit: type=1107 audit(1777027331.629:10): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1387.950577][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1388.062814][T13054] dummy0: left promiscuous mode [ 1388.080527][T13054] team0: left promiscuous mode [ 1388.082646][T14406] netlink: 'syz.4.10346': attribute type 10 has an invalid length. [ 1388.085330][T13054] team_slave_0: left promiscuous mode [ 1388.085623][T13054] team_slave_1: left promiscuous mode [ 1388.148716][T14408] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10347'. [ 1388.176876][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10342'. [ 1388.277185][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.323506][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.610095][T13054] team0 (unregistering): Port device team_slave_1 removed [ 1388.637018][T13054] team0 (unregistering): Port device team_slave_0 removed [ 1388.807965][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.825282][T14406] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1388.927917][T14427] lo speed is unknown, defaulting to 1000 [ 1388.975009][T14426] lo speed is unknown, defaulting to 1000 [ 1389.389749][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10357'. [ 1389.404234][T14460] openvswitch: netlink: Flow key attr not present in new flow. [ 1389.824882][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10363'. [ 1390.431348][T13054] IPVS: stop unused estimator thread 0... [ 1390.824483][T12074] IPVS: starting estimator thread 0... [ 1390.917223][T14504] IPVS: using max 27 ests per chain, 64800 per kthread [ 1391.667805][T14526] netlink: 'syz.3.10374': attribute type 2 has an invalid length. [ 1391.676941][T14526] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.10374'. [ 1391.697096][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10375'. [ 1391.813082][T13053] smc: removing ib device !yz! [ 1391.843122][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10377'. [ 1391.852667][T14535] netem: invalid attributes len -1 [ 1391.861935][T14535] netem: change failed [ 1391.876747][T13053] smbdirect: ib_dev[!yz!] removed [ 1391.952131][T14540] syzkaller0: entered promiscuous mode [ 1391.964709][T14540] syzkaller0: entered allmulticast mode [ 1392.281707][T14542] syzkaller0: entered promiscuous mode [ 1392.294780][T14542] syzkaller0: entered allmulticast mode [ 1392.513243][T14555] netlink: 'syz.1.10382': attribute type 2 has an invalid length. [ 1392.781908][T14566] __nla_validate_parse: 2 callbacks suppressed [ 1392.781928][T14566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10384'. [ 1392.830272][T14557] bond6 (unregistering): Released all slaves [ 1393.589329][T14564] team1: left promiscuous mode [ 1393.600212][T14564] team1: left allmulticast mode [ 1393.617209][T14564] team2: left promiscuous mode [ 1393.623039][T14564] team2: left allmulticast mode [ 1393.639506][T14564] bridge2: left promiscuous mode [ 1393.648477][T14564] bridge2: left allmulticast mode [ 1393.746794][T13054] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.758973][T13054] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.866273][T13054] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.908782][T13054] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.018873][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10388'. [ 1394.058140][T14593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10389'. [ 1394.139261][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10389'. [ 1394.241964][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1394.694495][T14618] lo speed is unknown, defaulting to 1000 [ 1394.753546][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1395.987633][T14635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10399'. [ 1396.231091][T14581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.430468][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10403'. [ 1396.451453][T14647] netlink: 'syz.0.10403': attribute type 5 has an invalid length. [ 1396.468786][T14647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10403'. [ 1396.486892][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10401'. [ 1396.530763][T14640] netlink: 'syz.4.10401': attribute type 1 has an invalid length. [ 1396.607651][T14638] lo speed is unknown, defaulting to 1000 [ 1396.679393][T14651] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1396.724369][T14651] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1396.890109][T14640] bond4: (slave gretap1): making interface the new active one [ 1396.904259][T14640] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1396.929872][T14669] macvlan3: entered promiscuous mode [ 1396.953508][T14669] macvlan3: entered allmulticast mode [ 1396.960120][T14669] bond4: entered promiscuous mode [ 1396.965512][T14669] gretap1: entered promiscuous mode [ 1396.971602][T14669] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1396.983498][T14669] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1397.016295][T14669] bond4: left promiscuous mode [ 1397.023452][T14669] gretap1: left promiscuous mode [ 1397.127974][T14659] lo speed is unknown, defaulting to 1000 [ 1397.175844][T14671] syzkaller0: entered promiscuous mode [ 1397.181334][T14671] syzkaller0: entered allmulticast mode [ 1397.224665][T14671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.252142][T14678] veth7: entered promiscuous mode [ 1397.460182][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1399.397422][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 1399.854929][ T29] audit: type=1800 audit(1777027343.689:11): pid=14692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10412" name="memory.events" dev="tmpfs" ino=1227 res=0 errno=0 [ 1399.942592][T14701] netlink: 'syz.1.10414': attribute type 1 has an invalid length. [ 1400.315717][T14719] __nla_validate_parse: 1 callbacks suppressed [ 1400.315737][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1400.599367][T14739] netlink: 'syz.2.10428': attribute type 16 has an invalid length. [ 1400.614230][T14739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10428'. [ 1400.652658][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10429'. [ 1400.665383][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1400.731433][T14741] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1400.897941][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10432'. [ 1401.039642][T14764] Can't find ip_set type hash:ip,por [ 1401.302984][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1401.339460][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1401.520054][T14802] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10445'. [ 1401.542050][T14804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.742587][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1401.751979][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1402.390107][T14837] netlink: 'syz.1.10454': attribute type 13 has an invalid length. [ 1402.982270][T14851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1403.283067][T14859] netlink: 'syz.3.10459': attribute type 4 has an invalid length. [ 1403.434496][T14871] dummy0: mtu less than device minimum [ 1403.938052][T14879] lo speed is unknown, defaulting to 1000 [ 1404.674225][T14919] netlink: 'syz.0.10476': attribute type 4 has an invalid length. [ 1404.775614][T14927] netlink: 'syz.3.10478': attribute type 9 has an invalid length. [ 1405.597788][T14967] tipc: Enabled bearer , priority 0 [ 1405.663022][T14954] lo speed is unknown, defaulting to 1000 [ 1405.765047][T14978] __nla_validate_parse: 3 callbacks suppressed [ 1405.765067][T14978] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10488'. [ 1405.867428][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10489'. [ 1405.877875][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10489'. [ 1405.877880][T14953] tipc: Resetting bearer [ 1405.912103][T14953] tipc: Disabling bearer [ 1405.917716][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1405.938402][T14981] erspan0: entered promiscuous mode [ 1405.947372][T14981] erspan0: left promiscuous mode [ 1405.985264][T14986] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1406.225288][T15001] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10495'. [ 1406.249973][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10495'. [ 1406.259852][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10495'. [ 1406.522666][T15020] rdma_op ffff88804d6249f0 conn xmit_rdma 0000000000000000 [ 1406.594961][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10499'. [ 1406.606145][T15027] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1406.656940][T15027] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10501'. [ 1406.746700][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10504'. [ 1406.917551][T12074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.090455][T15047] netlink: 'syz.2.10508': attribute type 10 has an invalid length. [ 1407.352143][T15058] syzkaller0: entered promiscuous mode [ 1407.358959][T15058] syzkaller0: entered allmulticast mode [ 1407.394900][T15058] tcf_pedit_act: 7 callbacks suppressed [ 1407.394915][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.409468][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.416260][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.423022][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.429824][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.436624][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.443412][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.450212][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.457015][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.463803][T15058] tc action pedit offset must be on 32 bit boundaries [ 1407.470577][T15058] 0: reclassify loop, rule prio 0, protocol 800 [ 1407.554703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.730445][T15076] SET target dimension over the limit! [ 1407.919986][T15085] openvswitch: netlink: IPv4 tun info is not correct [ 1407.953471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.342015][T15103] lo speed is unknown, defaulting to 1000 [ 1408.512414][T15110] macsec3: entered allmulticast mode [ 1408.532792][T15110] macsec0: entered allmulticast mode [ 1408.832550][T15127] vlan3: entered promiscuous mode [ 1408.836536][T15133] netlink: 'syz.0.10529': attribute type 1 has an invalid length. [ 1408.856192][T15127] bond0: entered promiscuous mode [ 1408.881704][T15127] geneve0: entered promiscuous mode [ 1408.993510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.132784][T15133] bond3: entered promiscuous mode [ 1409.156206][T15133] bond3: entered allmulticast mode [ 1409.184782][T15133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1409.270855][T15134] macvlan2: entered promiscuous mode [ 1409.293616][T15134] macvlan2: entered allmulticast mode [ 1409.326850][T15134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1409.415933][T15128] lo speed is unknown, defaulting to 1000 [ 1410.033858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.136806][T15154] lo speed is unknown, defaulting to 1000 [ 1410.874350][T15183] lo speed is unknown, defaulting to 1000 [ 1411.079537][T15190] can: request_module (can-proto-0) failed. [ 1411.083442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.124771][T15198] netlink: 'syz.4.10550': attribute type 1 has an invalid length. [ 1411.419164][T15202] ip6gre1: entered promiscuous mode [ 1411.477245][T15202] ip6gre1: entered allmulticast mode [ 1411.547180][T15202] __nla_validate_parse: 12 callbacks suppressed [ 1411.547200][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10552'. [ 1411.610365][T15200] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1411.661183][T15200] netlink: 'syz.3.10552': attribute type 11 has an invalid length. [ 1411.900973][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10558'. [ 1412.113458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.145064][T15236] sit2: entered allmulticast mode [ 1412.434081][T13056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.457415][T13056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.465558][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.713047][T15255] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1412.736607][T15255] bond6 (unregistering): Released all slaves [ 1412.742516][T15258] netlink: 'syz.2.10566': attribute type 1 has an invalid length. [ 1412.923573][T31285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1412.967232][T15254] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1412.999695][T15254] bond6 (unregistering): Released all slaves [ 1413.134423][T31285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1413.153708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.698288][T15269] lo speed is unknown, defaulting to 1000 [ 1414.193449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.184695][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10583'. [ 1415.233505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.349364][T15324] netlink: 'syz.4.10583': attribute type 1 has an invalid length. [ 1415.450860][T15339] netlink: 'syz.2.10588': attribute type 21 has an invalid length. [ 1415.460012][T15339] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1415.469439][T15339] netlink: 'syz.2.10588': attribute type 5 has an invalid length. [ 1415.481636][T15339] netlink: 'syz.2.10588': attribute type 6 has an invalid length. [ 1415.501270][T15339] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1415.517732][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10589'. [ 1415.656984][T15342] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1415.695549][T15348] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10591'. [ 1415.768334][T15344] tipc: Enabling of bearer rejected, failed to enable media [ 1415.903034][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10593'. [ 1415.938650][T15342] syzkaller0: entered promiscuous mode [ 1415.967816][T15342] syzkaller0: entered allmulticast mode [ 1415.988274][T15360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10593'. [ 1416.029691][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10593'. [ 1416.185240][T15366] lo speed is unknown, defaulting to 1000 [ 1416.200819][T15368] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1416.222460][T15368] syzkaller1: linktype set to 780 [ 1416.353528][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1416.471876][T15374] lo speed is unknown, defaulting to 1000 [ 1416.495309][T15377] netlink: 'syz.0.10600': attribute type 4 has an invalid length. [ 1416.518722][T15377] netlink: 'syz.0.10600': attribute type 8 has an invalid length. [ 1416.524299][T12074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.861903][T15390] __nla_validate_parse: 1 callbacks suppressed [ 1416.861925][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10605'. [ 1416.900104][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10607'. [ 1416.922549][T15396] netlink: 580 bytes leftover after parsing attributes in process `syz.1.10607'. [ 1416.931856][T15390] netlink: 348 bytes leftover after parsing attributes in process `syz.4.10605'. [ 1416.931889][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10605'. [ 1416.931903][T15390] netlink: 348 bytes leftover after parsing attributes in process `syz.4.10605'. [ 1416.931984][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10605'. [ 1417.025745][T15401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1417.145369][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10610'. [ 1417.145379][T15414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10610'. [ 1417.387456][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10613'. [ 1417.460605][T18422] Bluetooth: hci2: link tx timeout [ 1417.461968][T15430] bond10: option resend_igmp: invalid value (2878) [ 1417.473932][T15430] bond10: option resend_igmp: allowed values 0 - 255 [ 1417.476238][T18422] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1417.491979][T15430] bond10 (unregistering): Released all slaves [ 1417.553508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.702334][T15443] IPVS: length: 225 != 8 [ 1417.779615][T15454] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 1417.943743][T15447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.951450][T15447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.262076][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.291107][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.501009][T15447] tipc: Resetting bearer [ 1418.707847][T15447] hsr0: left allmulticast mode [ 1418.717931][T15447] hsr_slave_0: left allmulticast mode [ 1418.726983][T15447] hsr_slave_1: left allmulticast mode [ 1418.829927][T13053] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.854330][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1418.864244][T13053] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.896337][T13053] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.922653][T13053] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.932664][T15488] xt_bpf: check failed: parse error [ 1419.011593][T15490] bridge4: port 1(macvtap1) entered blocking state [ 1419.021564][T15490] bridge4: port 1(macvtap1) entered disabled state [ 1419.043858][T15490] macvtap1: entered allmulticast mode [ 1419.056356][T15490] bridge4: entered allmulticast mode [ 1419.061715][T15490] bridge4: entered promiscuous mode [ 1419.082071][T15490] macvtap1: left allmulticast mode [ 1419.087397][T15490] bridge4: left allmulticast mode [ 1419.123631][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1419.184436][T15492] bond10: entered promiscuous mode [ 1419.190172][T15492] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1419.197907][ T1010] bridge4: left promiscuous mode [ 1419.221295][T15497] bridge3: entered promiscuous mode [ 1419.239825][T15497] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 1419.379955][T15512] FAULT_INJECTION: forcing a failure. [ 1419.379955][T15512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.395790][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.0.10636 Not tainted syzkaller #0 PREEMPT(full) [ 1419.395813][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1419.395824][T15512] Call Trace: [ 1419.395831][T15512] [ 1419.395838][T15512] dump_stack_lvl+0xe8/0x150 [ 1419.395872][T15512] should_fail_ex+0x412/0x560 [ 1419.395904][T15512] _copy_from_user+0x2d/0xb0 [ 1419.395925][T15512] do_sock_getsockopt+0x200/0x7e0 [ 1419.395949][T15512] ? __pfx_vfs_write+0x10/0x10 [ 1419.395970][T15512] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1419.395989][T15512] ? do_sys_openat2+0x14c/0x200 [ 1419.396005][T15512] ? kmem_cache_free+0x182/0x650 [ 1419.396026][T15512] ? fd_install+0x94/0x3d0 [ 1419.396083][T15512] ? ksys_write+0x1fc/0x270 [ 1419.396110][T15512] __x64_sys_getsockopt+0x1a4/0x240 [ 1419.396136][T15512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.396157][T15512] do_syscall_64+0x15f/0xf80 [ 1419.396180][T15512] ? trace_irq_disable+0x3b/0x140 [ 1419.396204][T15512] ? clear_bhb_loop+0x40/0x90 [ 1419.396227][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.396244][T15512] RIP: 0033:0x7fe9d9f9cdd9 [ 1419.396262][T15512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.396278][T15512] RSP: 002b:00007fe9d81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1419.396297][T15512] RAX: ffffffffffffffda RBX: 00007fe9da215fa0 RCX: 00007fe9d9f9cdd9 [ 1419.396311][T15512] RDX: 0000000000000005 RSI: 0000000000000114 RDI: 0000000000000003 [ 1419.396322][T15512] RBP: 00007fe9d81f6090 R08: 00002000000000c0 R09: 0000000000000000 [ 1419.396334][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.396345][T15512] R13: 00007fe9da216038 R14: 00007fe9da215fa0 R15: 00007ffeb6d2a288 [ 1419.396375][T15512] [ 1419.608425][ T5853] Bluetooth: hci2: command 0x0405 tx timeout [ 1419.725378][T15521] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1419.865244][T15521] bond11 (unregistering): Released all slaves [ 1419.926900][T15527] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1419.992130][T15535] netlink: 'syz.0.10643': attribute type 3 has an invalid length. [ 1420.010399][T15535] netlink: 'syz.0.10643': attribute type 3 has an invalid length. [ 1420.278598][T15556] netlink: 'syz.4.10648': attribute type 1 has an invalid length. [ 1420.403593][T15563] bond11: (slave bond_slave_1): Device is not bonding slave [ 1420.420160][T15563] bond11: option active_slave: invalid value (bond_slave_1) [ 1420.452962][T15563] bond11 (unregistering): Released all slaves [ 1421.720769][T15627] batadv_slave_0: entered promiscuous mode [ 1421.735252][T15627] batadv_slave_0: entered allmulticast mode [ 1422.326681][T15661] __nla_validate_parse: 13 callbacks suppressed [ 1422.326702][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10676'. [ 1422.352521][T15662] netlink: 'syz.3.10677': attribute type 1 has an invalid length. [ 1422.414604][T15661] xt_hashlimit: size too large, truncated to 1048576 [ 1422.559078][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10682'. [ 1422.920149][ T1311] lec:lec_start_xmit: lec0:No lecd attached [ 1423.165523][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10693'. [ 1423.284540][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10695'. [ 1423.305780][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10695'. [ 1423.386737][T15732] netlink: 'syz.0.10699': attribute type 1 has an invalid length. [ 1423.438949][T15734] tipc: Enabled bearer , priority 0 [ 1423.455102][T15734] syzkaller0: entered promiscuous mode [ 1423.468912][T15734] syzkaller0: entered allmulticast mode [ 1423.526269][T15740] netlink: 'syz.0.10701': attribute type 1 has an invalid length. [ 1423.536838][T15734] tipc: Resetting bearer [ 1423.562683][T15733] tipc: Resetting bearer [ 1423.586733][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1423.625403][T15733] tipc: Disabling bearer [ 1423.640380][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1423.671778][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1423.744129][T15746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1423.940102][T15765] netlink: 'syz.2.10706': attribute type 4 has an invalid length. [ 1423.964707][T15759] syzkaller0: entered promiscuous mode [ 1423.974858][T15765] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10706'. [ 1423.983473][T15759] syzkaller0: entered allmulticast mode [ 1424.162415][T15780] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1424.196994][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1425.237223][T15793] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1426.364984][T15775] tipc: Enabled bearer , priority 0 [ 1426.380750][T15780] dvmrp6: entered allmulticast mode [ 1426.390057][T15775] tipc: Disabling bearer [ 1426.470566][T15792] vlan1: entered promiscuous mode [ 1426.487881][T15792] vlan1: entered allmulticast mode [ 1426.497653][T15792] veth0_vlan: entered allmulticast mode [ 1426.545545][T15796] lo speed is unknown, defaulting to 1000 [ 1426.589030][T15808] netlink: 'syz.4.10713': attribute type 1 has an invalid length. [ 1426.726279][T15808] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1426.778502][T15811] hsr_slave_0: left promiscuous mode [ 1426.789503][T15811] hsr_slave_1: left promiscuous mode [ 1426.903970][ T5740] IPVS: starting estimator thread 0... [ 1426.912541][T15833] netlink: 'syz.2.10717': attribute type 5 has an invalid length. [ 1426.943733][T15833] netlink: 'syz.2.10717': attribute type 1 has an invalid length. [ 1426.989650][T15839] sctp: [Deprecated]: syz.4.10720 (pid 15839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1426.989650][T15839] Use struct sctp_sack_info instead [ 1427.002924][T15829] lo speed is unknown, defaulting to 1000 [ 1427.033401][T15834] IPVS: using max 32 ests per chain, 76800 per kthread [ 1427.349485][T15864] __nla_validate_parse: 3 callbacks suppressed [ 1427.349502][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10725'. [ 1427.366834][T15864] netlink: 'syz.3.10725': attribute type 2 has an invalid length. [ 1427.385444][T15864] netlink: 'syz.3.10725': attribute type 1 has an invalid length. [ 1427.411726][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10726'. [ 1427.488410][T15873] openvswitch: netlink: Flow key attribute not present in set flow. [ 1427.633927][T15883] netlink: 272 bytes leftover after parsing attributes in process `syz.0.10732'. [ 1427.665079][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10731'. [ 1427.683939][T15884] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10731'. [ 1427.709190][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10731'. [ 1427.830763][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10734'. [ 1428.002038][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10738'. [ 1428.042966][T15898] netlink: 'syz.2.10737': attribute type 3 has an invalid length. [ 1428.061107][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10737'. [ 1428.120904][T15898] netlink: 'syz.2.10737': attribute type 1 has an invalid length. [ 1428.143452][T15898] netlink: 'syz.2.10737': attribute type 1 has an invalid length. [ 1428.319950][T15923] lo speed is unknown, defaulting to 1000 [ 1428.643821][T15934] bond8: option updelay: invalid value (18446744073709493611) [ 1428.652449][T15934] bond8: option updelay: allowed values 0 - 2147483647 [ 1428.664694][T15934] bond8 (unregistering): Released all slaves [ 1428.753377][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.761460][ C0] lec:lec_tx_timeout: lec0 [ 1429.043503][T15952] dvmrp6: entered allmulticast mode [ 1429.604071][T15968] netpci0: tun_chr_ioctl cmd 1074025678 [ 1429.614459][T15971] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10754'. [ 1429.643700][T15968] netpci0: group set to 0 [ 1432.494926][T15984] lo speed is unknown, defaulting to 1000 [ 1432.609366][T15996] __nla_validate_parse: 1 callbacks suppressed [ 1432.609384][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10762'. [ 1432.748758][T16008] netlink: 'syz.1.10764': attribute type 8 has an invalid length. [ 1432.758372][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10764'. [ 1432.930417][T16013] : entered promiscuous mode [ 1432.952273][T16013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.964289][T16013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.028265][T16021] lo speed is unknown, defaulting to 1000 [ 1433.149185][T16035] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1433.606984][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10773'. [ 1433.760842][T16061] netlink: 'syz.4.10775': attribute type 142 has an invalid length. [ 1433.979096][T16075] syzkaller0: entered promiscuous mode [ 1434.000956][T16075] syzkaller0: entered allmulticast mode [ 1434.018061][T16072] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1434.149958][T16078] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1434.166617][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10783'. [ 1434.268024][T16095] Bluetooth: MGMT ver 1.23 [ 1434.282258][T16063] lo speed is unknown, defaulting to 1000 [ 1434.519126][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10788'. [ 1434.534487][T16103] lo speed is unknown, defaulting to 1000 [ 1434.824477][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10790'. [ 1434.850672][T16111] lo speed is unknown, defaulting to 1000 [ 1434.860445][T16117] lo: Caught tx_queue_len zero misconfig [ 1434.871586][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10790'. [ 1434.884664][T16117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10790'. [ 1435.705414][T16164] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1436.074753][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10805'. [ 1436.115150][T16173] netlink: 'syz.1.10802': attribute type 1 has an invalid length. [ 1436.285733][T16190] FAULT_INJECTION: forcing a failure. [ 1436.285733][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.299225][T16190] CPU: 1 UID: 0 PID: 16190 Comm: syz.4.10806 Not tainted syzkaller #0 PREEMPT(full) [ 1436.299249][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1436.299260][T16190] Call Trace: [ 1436.299267][T16190] [ 1436.299275][T16190] dump_stack_lvl+0xe8/0x150 [ 1436.299307][T16190] should_fail_ex+0x412/0x560 [ 1436.299337][T16190] _copy_from_user+0x2d/0xb0 [ 1436.299358][T16190] do_sock_getsockopt+0x200/0x7e0 [ 1436.299380][T16190] ? __pfx_vfs_write+0x10/0x10 [ 1436.299403][T16190] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1436.299422][T16190] ? do_sys_openat2+0x14c/0x200 [ 1436.299437][T16190] ? kmem_cache_free+0x182/0x650 [ 1436.299458][T16190] ? fd_install+0x94/0x3d0 [ 1436.299488][T16190] ? ksys_write+0x1fc/0x270 [ 1436.299513][T16190] __x64_sys_getsockopt+0x1a4/0x240 [ 1436.299537][T16190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.299562][T16190] do_syscall_64+0x15f/0xf80 [ 1436.299586][T16190] ? trace_irq_disable+0x3b/0x140 [ 1436.299610][T16190] ? clear_bhb_loop+0x40/0x90 [ 1436.299630][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.299655][T16190] RIP: 0033:0x7f7e1659cdd9 [ 1436.299671][T16190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.299686][T16190] RSP: 002b:00007f7e173be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1436.299706][T16190] RAX: ffffffffffffffda RBX: 00007f7e16815fa0 RCX: 00007f7e1659cdd9 [ 1436.299719][T16190] RDX: 0000000000000005 RSI: 0000000000000114 RDI: 0000000000000003 [ 1436.299730][T16190] RBP: 00007f7e173be090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.299742][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.299752][T16190] R13: 00007f7e16816038 R14: 00007f7e16815fa0 R15: 00007fffbb0dfcb8 [ 1436.299782][T16190] [ 1436.504890][T28247] lec:lec_start_xmit: lec0:No lecd attached [ 1436.841625][T16213] netlink: zone id is out of range [ 1436.853876][T16213] netlink: zone id is out of range [ 1437.042674][T16219] lo speed is unknown, defaulting to 1000 [ 1437.545223][T16256] lo speed is unknown, defaulting to 1000 [ 1437.779428][T16262] syzkaller0: entered promiscuous mode [ 1437.799770][T16262] syzkaller0: entered allmulticast mode [ 1438.286284][T16278] netlink: 'syz.3.10829': attribute type 1 has an invalid length. [ 1438.500464][T16281] netlink: 'syz.4.10830': attribute type 210 has an invalid length. [ 1438.699660][T16286] veth15: entered allmulticast mode [ 1438.721194][T16286] bond11: (slave veth15): Enslaving as a backup interface with a down link [ 1438.754020][T16291] __nla_validate_parse: 6 callbacks suppressed [ 1438.754039][T16291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10833'. [ 1438.773479][T16293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10833'. [ 1438.904734][T16303] netlink: 'syz.0.10836': attribute type 29 has an invalid length. [ 1438.926613][T16303] netlink: 'syz.0.10836': attribute type 29 has an invalid length. [ 1438.945781][T16303] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10836'. [ 1438.964507][T16306] syzkaller0: entered promiscuous mode [ 1438.976922][T16306] syzkaller0: entered allmulticast mode [ 1439.242812][T16324] netlink: 'syz.0.10844': attribute type 6 has an invalid length. [ 1439.340684][T16324] lo speed is unknown, defaulting to 1000 [ 1439.553578][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1439.919091][T16345] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10849'. [ 1439.928731][T16345] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10849'. [ 1440.236944][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10854'. [ 1440.259162][T16360] netlink: 'syz.1.10854': attribute type 14 has an invalid length. [ 1440.459003][T16371] netlink: 'syz.3.10855': attribute type 1 has an invalid length. [ 1440.508256][T16374] netlink: 64134 bytes leftover after parsing attributes in process `syz.0.10858'. [ 1440.600951][T16378] netlink: 'syz.2.10856': attribute type 13 has an invalid length. [ 1440.613809][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10856'. [ 1440.658085][T16378] bond0: option fail_over_mac: invalid value (64) [ 1440.827120][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10866'. [ 1441.182199][T16426] lo speed is unknown, defaulting to 1000 [ 1441.266800][T16439] netlink: 13456 bytes leftover after parsing attributes in process `syz.0.10873'. [ 1441.405832][T16446] x_tables: duplicate underflow at hook 1 [ 1441.551875][T16457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.713468][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 1441.721530][ C0] lec:lec_tx_timeout: lec0 [ 1441.846664][T16468] netlink: 'syz.2.10883': attribute type 14 has an invalid length. [ 1441.855457][T16468] netlink: 'syz.2.10883': attribute type 13 has an invalid length. [ 1442.241361][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.251532][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.261557][T16500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1442.312681][T16491] lo speed is unknown, defaulting to 1000 [ 1442.520221][T16508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1442.726263][T16513] bond2: (slave veth7): Enslaving as an active interface with a down link [ 1442.826825][T16514] bond2: (slave veth9): Enslaving as an active interface with a down link [ 1442.902030][T16520] bond6 (unregistering): Released all slaves [ 1442.943808][T16525] veth7: entered promiscuous mode [ 1443.250475][T16544] tipc: New replicast peer: 255.255.255.255 [ 1443.258609][T16544] tipc: Enabled bearer , priority 10 [ 1443.266369][T16547] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1443.311787][T16551] syzkaller0: entered promiscuous mode [ 1443.324140][T16551] syzkaller0: entered allmulticast mode [ 1443.402932][T16562] validate_nla: 2 callbacks suppressed [ 1443.402954][T16562] netlink: 'syz.3.10910': attribute type 1 has an invalid length. [ 1443.521573][T16554] lo speed is unknown, defaulting to 1000 [ 1444.112591][T16599] __nla_validate_parse: 29 callbacks suppressed [ 1444.112611][T16599] netlink: 212272 bytes leftover after parsing attributes in process `syz.0.10919'. [ 1444.344046][T16613] netlink: 'syz.4.10922': attribute type 1 has an invalid length. [ 1444.373734][T12079] tipc: Node number set to 752151381 [ 1444.462507][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10923'. [ 1444.508545][T16625] bridge4: entered promiscuous mode [ 1444.758224][T16638] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1444.962365][T16655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1445.255609][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10931'. [ 1445.313073][T16676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10933'. [ 1445.364816][T16666] bond3: entered promiscuous mode [ 1445.384821][T16666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1445.483835][T16666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1445.505241][T16666] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 1445.521701][T16666] bond3: (slave sit2): Error -95 calling set_mac_address [ 1445.560984][T16675] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1445.573225][T16684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10935'. [ 1445.578765][T16675] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1445.609387][T16675] veth0_to_bridge: entered allmulticast mode [ 1445.633965][T16675] veth0_to_bridge: entered promiscuous mode [ 1445.822030][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10937'. [ 1445.960374][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10935'. [ 1445.980214][T16685] netlink: 'syz.1.10935': attribute type 25 has an invalid length. [ 1445.989108][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10935'. [ 1446.105203][T16703] lo speed is unknown, defaulting to 1000 [ 1446.241258][T16710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1446.265836][T16714] netlink: 'syz.0.10942': attribute type 10 has an invalid length. [ 1446.288013][T16714] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1446.395564][T16720] lo speed is unknown, defaulting to 1000 [ 1446.466920][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10944'. [ 1446.782545][T16749] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1447.139871][T16765] netlink: 'syz.3.10950': attribute type 1 has an invalid length. [ 1447.207481][T16766] veth11: entered promiscuous mode [ 1447.369867][T16765] bond12: entered promiscuous mode [ 1447.386680][T16765] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1447.468615][T16765] bond12: (slave bridge5): making interface the new active one [ 1447.477142][T16765] bridge5: entered promiscuous mode [ 1447.486627][T16765] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 1447.668128][T16791] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1447.812204][T16812] tipc: Enabling of bearer rejected, failed to enable media [ 1448.083167][T16824] lo speed is unknown, defaulting to 1000 [ 1448.232317][T16838] lo speed is unknown, defaulting to 1000 [ 1448.261812][T16846] bond0: entered promiscuous mode [ 1448.267414][T16846] bond_slave_0: entered promiscuous mode [ 1448.273655][T16846] bond_slave_1: entered promiscuous mode [ 1448.279739][T16846] dummy0: entered promiscuous mode [ 1448.285319][T16846] batadv0: entered promiscuous mode [ 1448.373916][T16846] bond0: left promiscuous mode [ 1448.378991][T16846] bond_slave_0: left promiscuous mode [ 1448.392998][T16846] bond_slave_1: left promiscuous mode [ 1448.402035][T16846] dummy0: left promiscuous mode [ 1448.407315][T16846] batadv0: left promiscuous mode [ 1448.437287][T16847] bond0: entered promiscuous mode [ 1448.442534][T16847] bond_slave_0: entered promiscuous mode [ 1448.450661][T16847] bond_slave_1: entered promiscuous mode [ 1448.460806][T16847] dummy0: entered promiscuous mode [ 1448.466526][T16847] batadv0: entered promiscuous mode [ 1448.474061][T16847] bond0: left promiscuous mode [ 1448.478979][T16847] bond_slave_0: left promiscuous mode [ 1448.485016][T16847] bond_slave_1: left promiscuous mode [ 1448.490685][T16847] dummy0: left promiscuous mode [ 1448.496108][T16847] batadv0: left promiscuous mode [ 1448.947532][T16879] netlink: 'syz.1.10976': attribute type 1 has an invalid length. [ 1449.592687][T16921] xt_hashlimit: invalid rate [ 1449.634603][T16928] batadv_slave_0: entered promiscuous mode [ 1449.661155][T16928] sch_fq: defrate 53322 ignored. [ 1450.256708][T16966] __nla_validate_parse: 7 callbacks suppressed [ 1450.256741][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11001'. [ 1450.451322][T16919] batadv_slave_0: left promiscuous mode [ 1450.492898][T16975] xt_cgroup: xt_cgroup: no path or classid specified [ 1450.658531][T16984] wg2: entered allmulticast mode [ 1450.664497][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11005'. [ 1450.681738][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11005'. [ 1450.734982][T16979] bridge0: entered promiscuous mode [ 1450.751036][T16979] ip6gretap0: entered promiscuous mode [ 1450.790867][T16979] ip6gretap0: left promiscuous mode [ 1450.800819][T16979] bridge0: left promiscuous mode [ 1450.819743][T16999] netlink: 'syz.3.11009': attribute type 58 has an invalid length. [ 1450.825199][T16995] vlan0: entered promiscuous mode [ 1450.832970][T16995] batadv0: entered promiscuous mode [ 1450.846536][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11004'. [ 1450.855718][T16996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11004'. [ 1450.987557][T17009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.084340][T17013] lo speed is unknown, defaulting to 1000 [ 1451.293129][T17029] netlink: 'syz.0.11016': attribute type 1 has an invalid length. [ 1451.332477][T17029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1451.421617][T17029] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1451.464779][T17034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.503178][T17034] bond5: (slave batadv0): making interface the new active one [ 1451.530353][T17034] batadv0: entered promiscuous mode [ 1451.540703][T17034] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 1451.580097][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11018'. [ 1451.838195][T17053] syzkaller1: entered promiscuous mode [ 1451.859039][T17053] syzkaller1: entered allmulticast mode [ 1451.899315][T17053] netlink: 'syz.3.11022': attribute type 66 has an invalid length. [ 1452.090335][T17073] netlink: 'syz.2.11026': attribute type 21 has an invalid length. [ 1452.101741][T17083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1452.139822][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1452.140341][T17073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11026'. [ 1452.184347][T17073] netlink: 'syz.2.11026': attribute type 4 has an invalid length. [ 1452.223192][T17088] openvswitch: netlink: Duplicate key (type 21). [ 1452.225520][T17073] netlink: 'syz.2.11026': attribute type 5 has an invalid length. [ 1452.241926][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1452.312342][T17092] bond9: (slave lo): Releasing backup interface [ 1452.336861][T17092] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1452.365609][T17092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1452.582248][T17104] IPVS: Error connecting to the multicast addr [ 1452.976558][T17122] syzkaller0: entered promiscuous mode [ 1452.985796][T17122] syzkaller0: entered allmulticast mode [ 1453.624353][T17145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1453.629737][T17155] block nbd0: reconnected socket [ 1453.635294][T17145] team0: Port device bond4 added [ 1453.644239][T17146] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1453.660002][T17155] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1453.695483][T17146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.739085][T17146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.762920][T18422] block nbd0: Receive control failed (result -32) [ 1453.797060][T17146] bond0: (slave batadv0): Releasing backup interface [ 1453.887531][T17165] netlink: 'syz.1.11051': attribute type 21 has an invalid length. [ 1453.916552][T17165] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 1453.978092][T17178] syzkaller0: entered promiscuous mode [ 1453.983995][T17178] syzkaller0: entered allmulticast mode [ 1453.998513][T17178] tipc: Started in network mode [ 1454.003947][T17178] tipc: Node identity c2f62b9f286e, cluster identity 4711 [ 1454.012307][T17178] tipc: Enabled bearer , priority 0 [ 1454.030131][T17178] tipc: Resetting bearer [ 1454.050801][T17177] tipc: Resetting bearer [ 1454.080325][T17177] tipc: Disabling bearer [ 1454.399550][T17210] netlink: 'syz.2.11061': attribute type 61 has an invalid length. [ 1454.565092][T17222] netlink: 'syz.1.11064': attribute type 1 has an invalid length. [ 1454.625960][T17222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1455.097509][T17236] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1455.351282][T17259] __nla_validate_parse: 6 callbacks suppressed [ 1455.351303][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11075'. [ 1455.498898][T17270] ip6gretap0: entered promiscuous mode [ 1455.529945][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11077'. [ 1455.594575][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11077'. [ 1455.646620][T17275] C: renamed from team_slave_0 [ 1455.658591][T17275] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11080'. [ 1455.767009][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11082'. [ 1455.808519][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11086'. [ 1455.999356][T17299] syzkaller0: entered promiscuous mode [ 1456.013812][T17299] syzkaller0: entered allmulticast mode [ 1456.212837][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1456.232515][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1456.309119][T17325] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11096'. [ 1456.358491][T17333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1456.377552][T17333] netlink: 'syz.4.11099': attribute type 2 has an invalid length. [ 1456.388138][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11099'. [ 1456.452409][T17333] bond9: option primary_reselect: invalid value (133) [ 1456.461928][T17333] bond9 (unregistering): Released all slaves [ 1456.528956][T17332] pim6reg1: entered promiscuous mode [ 1456.534527][T17332] pim6reg1: entered allmulticast mode [ 1456.545692][T17333] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1456.845000][T17363] xt_recent: Unsupported userspace flags (000000b1) [ 1456.871800][T17363] netlink: 'syz.0.11107': attribute type 27 has an invalid length. [ 1456.898224][T17363] veth1_to_bridge: left allmulticast mode [ 1456.916662][T17363] vlan1: left promiscuous mode [ 1456.921613][T17363] vlan1: left allmulticast mode [ 1456.942521][T17363] veth0_vlan: left allmulticast mode [ 1456.948794][T17363] veth0_macvtap: left allmulticast mode [ 1456.997686][T17363] virt_wifi0: left promiscuous mode [ 1457.013037][T17363] macsec2: left promiscuous mode [ 1457.100988][T17363] macsec0: left allmulticast mode [ 1457.107216][T17363] macsec3: left allmulticast mode [ 1457.114859][T17363] bond3: left promiscuous mode [ 1457.121874][T17363] bond3: left allmulticast mode [ 1457.151473][T17363] veth7: left promiscuous mode [ 1457.185116][T17358] lo speed is unknown, defaulting to 1000 [ 1457.215534][T17380] bond9 (unregistering): Released all slaves [ 1457.395942][T17388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 1457.762578][T17405] netlink: 'syz.0.11116': attribute type 29 has an invalid length. [ 1457.776078][T17404] netlink: 'syz.2.11117': attribute type 29 has an invalid length. [ 1457.957357][T17429] netlink: 'syz.2.11121': attribute type 1 has an invalid length. [ 1458.075729][T13056] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.101543][T13056] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.145760][T13056] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.270647][T17446] netlink: 'syz.2.11124': attribute type 44 has an invalid length. [ 1458.580702][T17463] lo speed is unknown, defaulting to 1000 [ 1459.080827][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.106306][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.183001][T17501] bond6: entered promiscuous mode [ 1459.195137][T17501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1459.208808][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.211116][T17508] netlink: 'syz.4.11140': attribute type 12 has an invalid length. [ 1459.388717][T17511] dvmrp6: entered allmulticast mode [ 1459.568870][T17493] infiniband syz1: set active [ 1459.576071][ T5732] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.585143][T17493] infiniband syz1: added ip6gretap0 [ 1459.607930][T17493] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1459.635508][T17493] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1459.656761][T17493] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1459.696570][T17493] RDS/IB: syz1: added [ 1459.702735][T17493] smc: adding ib device syz1 with port count 1 [ 1459.709387][T17493] smc: ib device syz1 port 1 has no pnetid [ 1459.716110][ T5732] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.726085][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1459.853254][T17520] lo speed is unknown, defaulting to 1000 [ 1459.861637][T17532] netlink: 'syz.3.11147': attribute type 12 has an invalid length. [ 1460.077875][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1460.206396][ T29] audit: type=1800 audit(1777027404.039:12): pid=17537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11149" name="r" dev="tmpfs" ino=2211 res=0 errno=0 [ 1460.597152][T17520] ip6gretap0 speed is unknown, defaulting to 1000 [ 1460.610487][T17560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1460.800381][T17569] __nla_validate_parse: 10 callbacks suppressed [ 1460.800400][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11158'. [ 1460.835529][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1461.022111][T17577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11161'. [ 1461.032006][T17575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11160'. [ 1461.202419][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1461.337774][T17591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11165'. [ 1461.523800][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1461.600032][T17602] netlink: 'syz.3.11168': attribute type 2 has an invalid length. [ 1461.619792][T17608] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11170'. [ 1461.643673][T17608] netlink: Unknown conntrack attr (0) [ 1461.770689][T17614] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1461.851630][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1462.096377][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1462.220587][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1462.345399][T17493] ip6gretap0 speed is unknown, defaulting to 1000 [ 1462.474177][T17606] lo speed is unknown, defaulting to 1000 [ 1462.769475][T17634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11178'. [ 1463.047758][T17646] netlink: 'syz.4.11182': attribute type 1 has an invalid length. [ 1463.131621][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11183'. [ 1463.179831][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11184'. [ 1463.189660][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11182'. [ 1463.344262][T17653] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1463.365905][T17653] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1463.377451][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11182'. [ 1463.447535][T17658] bond9: (slave bridge3): Enslaving as an active interface with a down link [ 1463.459112][T17646] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1463.490957][T17660] macvlan3: entered promiscuous mode [ 1463.521050][T17660] macvlan3: entered allmulticast mode [ 1463.560327][T17660] bond9: entered promiscuous mode [ 1463.576565][T17660] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1463.587996][T17660] bond9: left promiscuous mode [ 1463.640183][T17672] lo speed is unknown, defaulting to 1000 [ 1463.647853][T17672] ip6gretap0 speed is unknown, defaulting to 1000 [ 1464.517352][T17713] netlink: 'syz.0.11200': attribute type 22 has an invalid length. [ 1464.559711][T17713] netlink: 'syz.0.11200': attribute type 1 has an invalid length. [ 1464.718331][T17706] lo speed is unknown, defaulting to 1000 [ 1464.738371][T17706] ip6gretap0 speed is unknown, defaulting to 1000 [ 1464.878523][T17722] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1465.487411][T17757] netlink: 'syz.4.11214': attribute type 3 has an invalid length. [ 1465.509679][T17757] netlink: 'syz.4.11214': attribute type 3 has an invalid length. [ 1465.539347][T17757] netlink: 'syz.4.11214': attribute type 3 has an invalid length. [ 1465.561484][T17757] netlink: 'syz.4.11214': attribute type 3 has an invalid length. [ 1465.938525][T17782] netlink: 'syz.4.11220': attribute type 1 has an invalid length. [ 1465.948166][T17785] netlink: 'syz.4.11220': attribute type 1 has an invalid length. [ 1466.087356][T17789] __nla_validate_parse: 9 callbacks suppressed [ 1466.087376][T17789] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11223'. [ 1466.553770][T17813] macvtap0: left promiscuous mode [ 1466.559915][T17813] hsr1: left promiscuous mode [ 1466.592335][ T5736] ip6gretap0 speed is unknown, defaulting to 1000 [ 1466.599876][T13073] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.614188][ T5736] syz1: Port: 1 Link DOWN [ 1466.620276][T13073] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.631915][ T5732] ip6gretap0 speed is unknown, defaulting to 1000 [ 1466.631920][T13073] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.735789][T17821] syzkaller1: entered promiscuous mode [ 1466.753787][T17821] syzkaller1: entered allmulticast mode [ 1466.875394][T17827] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1466.902760][T17827] team0: Failed to send port change of device bond13 via netlink (err -105) [ 1466.924985][T17827] team0: Failed to send options change via netlink (err -105) [ 1466.932533][T17827] team0: Port device bond13 added [ 1466.966231][T17822] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1466.974967][T17822] team0: Failed to send port change of device bond14 via netlink (err -105) [ 1466.984487][T17822] team0: Failed to send options change via netlink (err -105) [ 1466.992188][T17822] team0: Port device bond14 added [ 1467.280519][T17851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.307102][T17851] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11238'. [ 1467.402602][T17861] batadv_slave_1: entered promiscuous mode [ 1467.486522][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11240'. [ 1467.525907][T17861] batadv_slave_1 (unregistering): left promiscuous mode [ 1467.607492][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1467.830668][T17895] netlink: 'syz.0.11249': attribute type 8 has an invalid length. [ 1467.865198][T17891] xt_CT: No such helper "netbios-ns" [ 1467.928738][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1468.004049][T17909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1468.270247][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11255'. [ 1468.447475][T17933] lo speed is unknown, defaulting to 1000 [ 1468.467898][T17933] ip6gretap0 speed is unknown, defaulting to 1000 [ 1468.499930][T17928] syzkaller1: entered promiscuous mode [ 1468.514663][T17928] syzkaller1: entered allmulticast mode [ 1468.709247][T17945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1469.000556][T17960] netlink: 'syz.0.11267': attribute type 15 has an invalid length. [ 1469.025886][T17960] netlink: 666 bytes leftover after parsing attributes in process `syz.0.11267'. [ 1469.056914][T17963] netlink: 'syz.1.11268': attribute type 3 has an invalid length. [ 1469.244776][T17975] netlink: 'syz.1.11273': attribute type 1 has an invalid length. [ 1469.308290][T17981] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.11273'. [ 1469.320796][T17975] bond7: entered promiscuous mode [ 1469.330859][T17975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1469.341239][T17981] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.11273'. [ 1469.681431][T17995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1469.689149][T17995] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1469.700016][T17995] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1469.718903][T17995] bond7: (slave ip6gre2): making interface the new active one [ 1469.750769][T17995] ip6gre2: entered promiscuous mode [ 1469.769991][T17995] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 1470.589591][T18047] xt_hashlimit: size too large, truncated to 1048576 [ 1470.913612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1472.518454][T18422] Bluetooth: hci2: command 0x0405 tx timeout [ 1472.925798][T18037] C: renamed from team_slave_0 [ 1472.934390][T18037] netlink: 'syz.1.11284': attribute type 4 has an invalid length. [ 1472.942254][T18037] __nla_validate_parse: 2 callbacks suppressed [ 1472.942269][T18037] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11284'. [ 1472.959439][T18037] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1473.071729][T18060] x_tables: duplicate underflow at hook 3 [ 1473.094042][T18061] x_tables: duplicate underflow at hook 3 [ 1473.107391][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11292'. [ 1473.766698][T18099] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1473.829001][T18093] ieee80211 phy134: Failed to add default virtual iface [ 1473.977082][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11303'. [ 1474.188182][T18125] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11310'. [ 1474.303157][T18116] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11309'. [ 1474.528889][T18141] netlink: 'syz.4.11315': attribute type 4 has an invalid length. [ 1474.561325][T18143] netlink: 'syz.0.11314': attribute type 1 has an invalid length. [ 1475.340348][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11320'. [ 1475.921785][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11331'. [ 1476.687461][T18262] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11338'. [ 1476.791504][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11344'. [ 1476.810849][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11344'. [ 1476.873205][T18279] ip6gretap0: left promiscuous mode [ 1476.884909][T18279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.894400][T18279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.907807][T18279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.931475][T18280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.976091][ T5732] ip6gretap0 speed is unknown, defaulting to 1000 [ 1476.997510][ T5732] syz1: Port: 1 Link ACTIVE [ 1477.012864][ T5732] ip6gretap0 speed is unknown, defaulting to 1000 [ 1477.096261][T18301] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1477.255959][T18307] xt_hashlimit: size too large, truncated to 1048576 [ 1477.275529][T18307] xt_hashlimit: invalid interval [ 1477.289659][T18315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1478.040260][T18351] __nla_validate_parse: 38 callbacks suppressed [ 1478.040278][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11359'. [ 1478.311708][T18367] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11364'. [ 1479.478705][T18394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11368'. [ 1481.042160][T18424] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11376'. [ 1481.073453][T18424] netlink: 'syz.1.11376': attribute type 1 has an invalid length. [ 1481.114567][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11377'. [ 1481.228445][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11380'. [ 1481.259069][T18434] bond7: option ad_user_port_key: invalid value (65535) [ 1481.275795][T18434] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 1481.306511][T18434] bond7 (unregistering): Released all slaves [ 1481.471323][T18453] openvswitch: netlink: IP tunnel dst address not specified [ 1481.481841][T18453] netlink: 'syz.1.11383': attribute type 13 has an invalid length. [ 1481.496893][T18453] netlink: 'syz.1.11383': attribute type 17 has an invalid length. [ 1481.569770][T18453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.608199][T18461] syzkaller0: entered promiscuous mode [ 1481.614018][T18461] syzkaller0: entered allmulticast mode [ 1481.676646][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11383'. [ 1481.883992][T18477] netlink: 'syz.4.11390': attribute type 9 has an invalid length. [ 1481.892042][T18477] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.11390'. [ 1481.914850][T18477] netlink: 116 bytes leftover after parsing attributes in process `syz.4.11390'. [ 1481.931407][T18477] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11390'. [ 1481.956715][T18482] tipc: Enabling of bearer rejected, failed to enable media [ 1482.010400][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.182091][T18502] siw: device registration error -23 [ 1482.220159][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.571112][T18521] netlink: 'syz.1.11402': attribute type 13 has an invalid length. [ 1482.592630][T18521] netlink: 'syz.1.11402': attribute type 17 has an invalid length. [ 1482.756470][T18516] lo speed is unknown, defaulting to 1000 [ 1482.775821][T18516] ip6gretap0 speed is unknown, defaulting to 1000 [ 1482.782461][T13053] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.816257][T13053] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.840816][T13053] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.859745][T13053] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.924388][T18535] netlink: 'syz.3.11406': attribute type 11 has an invalid length. [ 1482.946221][T18535] netlink: 'syz.3.11406': attribute type 23 has an invalid length. [ 1483.295711][T18551] __nla_validate_parse: 7 callbacks suppressed [ 1483.295731][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11410'. [ 1483.314993][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11410'. [ 1484.072071][T18562] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1484.131874][T18568] syzkaller1: tun_chr_ioctl cmd 35108 [ 1484.232126][T18575] netlink: 'syz.4.11418': attribute type 1 has an invalid length. [ 1484.240980][T18575] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11418'. [ 1484.325686][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11419'. [ 1484.361703][ T1311] lec:lec_start_xmit: lec0:No lecd attached [ 1484.443229][T18581] netlink: 'syz.2.11421': attribute type 1 has an invalid length. [ 1484.854322][T18602] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1484.863992][T18602] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1484.873716][T18602] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1485.004416][T18609] tipc: Resetting bearer [ 1485.014390][T18611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.248238][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11432'. [ 1485.267096][T18626] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.11434'. [ 1485.302568][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11433'. [ 1485.381396][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11433'. [ 1485.419792][T18628] netlink: 348 bytes leftover after parsing attributes in process `syz.1.11433'. [ 1485.429513][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11433'. [ 1485.857446][T18661] netlink: 'syz.2.11445': attribute type 1 has an invalid length. [ 1485.988634][T18657] syzkaller0: entered promiscuous mode [ 1485.995460][T18657] syzkaller0: entered allmulticast mode [ 1486.006766][T18667] syzkaller0: entered promiscuous mode [ 1486.021838][T18667] syzkaller0: entered allmulticast mode [ 1486.106285][T18680] netlink: 'syz.1.11448': attribute type 1 has an invalid length. [ 1488.409308][T18678] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1488.410206][T18680] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1488.420609][T18682] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1488.574101][ T5739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1488.594441][T18699] __nla_validate_parse: 6 callbacks suppressed [ 1488.594457][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11452'. [ 1488.858707][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11458'. [ 1488.859010][T18715] lo speed is unknown, defaulting to 1000 [ 1488.873949][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1488.919747][T18715] ip6gretap0 speed is unknown, defaulting to 1000 [ 1489.175531][T18738] sctp: [Deprecated]: syz.2.11460 (pid 18738) Use of int in max_burst socket option. [ 1489.175531][T18738] Use struct sctp_assoc_value instead [ 1489.257130][T18744] bond7 (unregistering): Released all slaves [ 1489.378962][T18759] netlink: 'syz.4.11463': attribute type 3 has an invalid length. [ 1489.398364][T18756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.442143][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11464'. [ 1489.617820][T18766] lo speed is unknown, defaulting to 1000 [ 1489.628251][T18766] ip6gretap0 speed is unknown, defaulting to 1000 [ 1489.721339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 1489.729414][ C0] lec:lec_tx_timeout: lec0 [ 1489.899039][T18789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11471'. [ 1490.001807][T18793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1490.015391][T18793] 8021q: VLANs not supported on lo [ 1490.390449][T18800] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1490.390692][T18801] netlink: 'syz.1.11475': attribute type 17 has an invalid length. [ 1490.408127][T18801] netlink: 'syz.1.11475': attribute type 49 has an invalid length. [ 1490.418717][T18806] bridge0: port 1(syz_tun) entered blocking state [ 1490.434596][T18806] bridge0: port 1(syz_tun) entered disabled state [ 1490.445144][T18806] syz_tun: entered promiscuous mode [ 1490.506082][T18808] netlink: 'syz.1.11477': attribute type 1 has an invalid length. [ 1490.533517][T18808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11477'. [ 1490.584322][T18812] netlink: 'syz.4.11478': attribute type 4 has an invalid length. [ 1490.613673][T18812] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11478'. [ 1490.727475][T18814] netem: incorrect ge model size [ 1490.743631][T18814] netem: change failed [ 1490.764738][T18819] x_tables: duplicate underflow at hook 2 [ 1490.795464][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11481'. [ 1490.916006][T18823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1490.943225][T18816] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1490.962393][T18816] bond7: (slave batadv4): Enslaving as an active interface with an up link [ 1491.001897][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11484'. [ 1491.122998][T18836] lo speed is unknown, defaulting to 1000 [ 1491.129882][T18834] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1491.147680][T18836] ip6gretap0 speed is unknown, defaulting to 1000 [ 1491.196888][T18834] lo speed is unknown, defaulting to 1000 [ 1491.464613][T18834] ip6gretap0 speed is unknown, defaulting to 1000 [ 1491.755246][T18865] openvswitch: netlink: Multiple metadata blocks provided [ 1491.877476][T18870] netlink: 'syz.3.11495': attribute type 4 has an invalid length. [ 1491.892467][T18870] .`: renamed from bond0 [ 1492.109470][T18880] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1492.342040][T18871] lo speed is unknown, defaulting to 1000 [ 1492.365650][T18871] ip6gretap0 speed is unknown, defaulting to 1000 [ 1492.922801][T18903] lo speed is unknown, defaulting to 1000 [ 1493.043112][T18903] ip6gretap0 speed is unknown, defaulting to 1000 [ 1493.270208][T18916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1493.793394][T18924] __nla_validate_parse: 11 callbacks suppressed [ 1493.793413][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11508'. [ 1493.848826][T18924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11508'. [ 1493.894088][T18924] netlink: 'syz.0.11508': attribute type 5 has an invalid length. [ 1493.978299][T18945] Cannot find add_set index 0 as target [ 1494.009090][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11511'. [ 1494.389732][T18955] lo speed is unknown, defaulting to 1000 [ 1494.407169][T18955] ip6gretap0 speed is unknown, defaulting to 1000 [ 1494.478068][T18966] tun0: tun_chr_ioctl cmd 1074025672 [ 1494.491290][T18966] tun0: ignored: set checksum disabled [ 1494.558701][T18969] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11518'. [ 1495.229284][T18995] bridge0: port 1(erspan0) entered blocking state [ 1495.242815][T18995] bridge0: port 1(erspan0) entered disabled state [ 1495.249922][T18995] erspan0: entered allmulticast mode [ 1495.257372][T18995] erspan0: entered promiscuous mode [ 1495.266396][T18996] erspan0: left allmulticast mode [ 1495.272488][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11525'. [ 1495.281537][T18996] erspan0: left promiscuous mode [ 1495.286865][T18996] bridge0: port 1(erspan0) entered disabled state [ 1495.293536][T18993] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1495.343275][T18993] syzkaller0: entered promiscuous mode [ 1495.349850][T18993] syzkaller0: entered allmulticast mode [ 1495.878195][T19004] netlink: 'syz.4.11529': attribute type 13 has an invalid length. [ 1495.886359][T19004] netlink: 'syz.4.11529': attribute type 17 has an invalid length. [ 1496.401241][T18998] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1496.410198][T18998] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1497.904734][T19004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.912523][T19004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.934370][T19004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.026512][T19011] netlink: 'syz.2.11532': attribute type 1 has an invalid length. [ 1498.092298][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.112116][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.120574][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.129255][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.139702][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.151700][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.161655][T19026] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1498.170328][T19026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.182058][T19017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.199497][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11533'. [ 1498.210624][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11533'. [ 1498.824724][T19060] tipc: Enabling of bearer rejected, failed to enable media [ 1499.066684][T19070] syzkaller1: entered allmulticast mode [ 1499.120172][T19074] block nbd0: NBD_DISCONNECT [ 1499.125456][T19035] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1499.125665][T19074] block nbd0: Send disconnect failed -32 [ 1499.137874][T19074] block nbd0: shutting down sockets [ 1499.209355][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11547'. [ 1499.246171][T19077] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11547'. [ 1499.270152][T19083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11549'. [ 1499.327039][T19083] vlan4: entered promiscuous mode [ 1499.342322][T19083] bridge0: entered promiscuous mode [ 1499.476958][T19091] syzkaller0: entered promiscuous mode [ 1499.494532][T19091] syzkaller0: entered allmulticast mode [ 1499.538121][T19091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11550'. [ 1499.697748][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11555'. [ 1500.062893][T19123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1500.147366][T28247] lec:lec_start_xmit: lec0:No lecd attached [ 1500.353542][T18422] Bluetooth: hci3: command 0x0406 tx timeout [ 1500.997075][T19146] xt_hashlimit: invalid rate [ 1503.034579][T19117] kthread_run failed with err -4 [ 1503.248711][T19115] lo speed is unknown, defaulting to 1000 [ 1503.276806][T19115] ip6gretap0 speed is unknown, defaulting to 1000 [ 1503.847598][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11568'. [ 1503.888863][T19183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11568'. [ 1504.933034][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11572'. [ 1504.985616][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11572'. [ 1505.713370][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1505.721444][ C0] lec:lec_tx_timeout: lec0 [ 1506.311799][T19198] tun0: tun_chr_ioctl cmd 1074025675 [ 1506.320764][T19198] tun0: persist enabled [ 1506.325343][T19199] tun0: tun_chr_ioctl cmd 1074025675 [ 1506.331058][T19199] tun0: persist disabled [ 1506.377286][T19204] tipc: Enabling of bearer rejected, failed to enable media [ 1506.477483][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11574'. [ 1506.554375][T19222] net_ratelimit: 1 callbacks suppressed [ 1506.554394][T19222] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1506.555219][T19224] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1506.569039][T19222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.577066][T19224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.650914][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11576'. [ 1506.653145][T19225] netlink: 'syz.1.11577': attribute type 13 has an invalid length. [ 1506.677288][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11577'. [ 1506.705027][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11576'. [ 1506.740259][T19230] netlink: 'syz.1.11577': attribute type 14 has an invalid length. [ 1506.855794][T19242] netlink: 'syz.4.11579': attribute type 61 has an invalid length. [ 1506.962526][T19235] lo speed is unknown, defaulting to 1000 [ 1507.092005][T19235] ip6gretap0 speed is unknown, defaulting to 1000 [ 1507.518460][T19265] netlink: 'syz.3.11586': attribute type 1 has an invalid length. [ 1507.527460][T19265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11586'. [ 1507.843127][T19284] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.11585'. [ 1508.996145][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11595'. [ 1509.005614][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11595'. [ 1510.441342][T19260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1510.707766][T19323] __nla_validate_parse: 112 callbacks suppressed [ 1510.707786][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11598'. [ 1510.876376][T19333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11602'. [ 1510.896265][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11598'. [ 1511.074389][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11607'. [ 1511.096954][T19339] bond6 (unregistering): Released all slaves [ 1511.121452][T19352] netlink: 'syz.3.11606': attribute type 25 has an invalid length. [ 1511.146515][T19352] netlink: 'syz.3.11606': attribute type 3 has an invalid length. [ 1511.166847][T19352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1511.176213][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1511.388691][T19366] xt_CT: No such helper "syz1" [ 1511.620758][T19384] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1511.656705][T19385] bond0: option min_links: invalid value (18446744073709551612) [ 1511.666072][T19385] bond0: option min_links: allowed values 0 - 2147483647 [ 1511.678516][T19385] bond0 (unregistering): Released all slaves [ 1511.751636][T19396] netlink: 'syz.4.11622': attribute type 4 has an invalid length. [ 1511.774311][T19396] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11622'. [ 1511.796243][T19394] tipc: Enabling of bearer rejected, failed to enable media [ 1511.811326][T19396] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1511.824004][T19398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.908323][T19397] netlink: 'syz.1.11621': attribute type 13 has an invalid length. [ 1512.078122][T19404] tap0: tun_chr_ioctl cmd 1074025677 [ 1512.088216][T19412] netlink: 'syz.4.11628': attribute type 1 has an invalid length. [ 1512.090266][T19404] tap0: linktype set to 6 [ 1512.103881][T19409] sctp: [Deprecated]: syz.2.11626 (pid 19409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1512.103881][T19409] Use struct sctp_sack_info instead [ 1512.174632][T19412] bond10: entered promiscuous mode [ 1512.180424][T19412] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1512.270634][T19412] bond10: (slave bridge4): making interface the new active one [ 1512.294717][T19424] netlink: 'syz.1.11629': attribute type 1 has an invalid length. [ 1512.310624][T19412] bridge4: entered promiscuous mode [ 1512.324665][T19412] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1512.347230][T19421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1512.359067][T19421] netlink: 19 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1512.381626][T19421] netlink: 19 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1512.527731][T19424] vlan0: entered allmulticast mode [ 1512.539587][T19424] gretap0: entered allmulticast mode [ 1512.784925][T19448] netlink: 'syz.1.11636': attribute type 3 has an invalid length. [ 1512.930698][T19439] lo speed is unknown, defaulting to 1000 [ 1512.960778][T19439] ip6gretap0 speed is unknown, defaulting to 1000 [ 1514.279955][T19493] sctp: [Deprecated]: syz.0.11648 (pid 19493) Use of int in maxseg socket option. [ 1514.279955][T19493] Use struct sctp_assoc_value instead [ 1514.559833][T19507] netlink: 'syz.3.11652': attribute type 6 has an invalid length. [ 1514.567900][T19502] žÿ: renamed from team_slave_1 [ 1514.579640][T19502] syzkaller0: entered promiscuous mode [ 1514.600597][T19502] syzkaller0: entered allmulticast mode [ 1514.616401][T19505] netlink: 'syz.4.11653': attribute type 11 has an invalid length. [ 1514.639927][T19505] netlink: 'syz.4.11653': attribute type 4 has an invalid length. [ 1514.731766][T19514] netlink: 'syz.3.11654': attribute type 1 has an invalid length. [ 1514.760384][T19514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.177048][T19514] 8021q: adding VLAN 0 to HW filter on device .` [ 1515.196612][T19514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.234671][T19514] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1515.536851][T19537] bond8 (unregistering): Released all slaves [ 1515.973743][T19567] __nla_validate_parse: 24 callbacks suppressed [ 1515.973764][T19567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11667'. [ 1516.310955][T19582] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2630780435/2630780437 [ 1516.324230][T19582] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2630780435/2630780437 [ 1516.969533][T19609] lo speed is unknown, defaulting to 1000 [ 1516.996246][T19614] netlink: 'syz.2.11679': attribute type 11 has an invalid length. [ 1517.003214][T19612] [ 1517.006492][T19612] ====================================================== [ 1517.013498][T19612] WARNING: possible circular locking dependency detected [ 1517.020504][T19612] syzkaller #0 Not tainted [ 1517.024901][T19612] ------------------------------------------------------ [ 1517.031898][T19612] syz.0.11678/19612 is trying to acquire lock: [ 1517.038032][T19612] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1517.047348][T19612] [ 1517.047348][T19612] but task is already holding lock: [ 1517.054707][T19612] ffff888091e3f370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1517.064112][T19612] [ 1517.064112][T19612] which lock already depends on the new lock. [ 1517.064112][T19612] [ 1517.074506][T19612] [ 1517.074506][T19612] the existing dependency chain (in reverse order) is: [ 1517.083510][T19612] [ 1517.083510][T19612] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1517.091494][T19612] _raw_spin_lock_bh+0x36/0x50 [ 1517.096779][T19612] nr_rt_device_down+0x153/0x860 [ 1517.102227][T19612] nr_device_event+0x137/0x150 [ 1517.107508][T19612] notifier_call_chain+0x1ad/0x3d0 [ 1517.113127][T19612] __dev_notify_flags+0x16d/0x310 [ 1517.118660][T19612] netif_change_flags+0xe8/0x1a0 [ 1517.124116][T19612] dev_change_flags+0x130/0x270 [ 1517.129473][T19612] dev_ioctl+0x7b4/0x1150 [ 1517.134319][T19612] sock_do_ioctl+0x23e/0x320 [ 1517.139418][T19612] sock_ioctl+0x5c6/0x7f0 [ 1517.144260][T19612] __se_sys_ioctl+0xfc/0x170 [ 1517.149361][T19612] do_syscall_64+0x15f/0xf80 [ 1517.154466][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.160868][T19612] [ 1517.160868][T19612] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 1517.168683][T19612] _raw_spin_lock_bh+0x36/0x50 [ 1517.173982][T19612] nr_rt_device_down+0xbe/0x860 [ 1517.179341][T19612] nr_device_event+0x137/0x150 [ 1517.184622][T19612] notifier_call_chain+0x1ad/0x3d0 [ 1517.190250][T19612] __dev_notify_flags+0x16d/0x310 [ 1517.195790][T19612] netif_change_flags+0xe8/0x1a0 [ 1517.201243][T19612] dev_change_flags+0x130/0x270 [ 1517.206604][T19612] dev_ioctl+0x7b4/0x1150 [ 1517.211451][T19612] sock_do_ioctl+0x23e/0x320 [ 1517.216555][T19612] sock_ioctl+0x5c6/0x7f0 [ 1517.221395][T19612] __se_sys_ioctl+0xfc/0x170 [ 1517.226500][T19612] do_syscall_64+0x15f/0xf80 [ 1517.231613][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.238032][T19612] [ 1517.238032][T19612] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1517.245937][T19612] __lock_acquire+0x15a5/0x2cf0 [ 1517.251312][T19612] lock_acquire+0x106/0x350 [ 1517.256339][T19612] _raw_spin_lock_bh+0x36/0x50 [ 1517.261619][T19612] nr_remove_neigh+0x25/0xe0 [ 1517.266720][T19612] nr_add_node+0x1e41/0x2630 [ 1517.271817][T19612] nr_rt_ioctl+0xe59/0xf90 [ 1517.276738][T19612] sock_do_ioctl+0x101/0x320 [ 1517.281839][T19612] sock_ioctl+0x5c6/0x7f0 [ 1517.286675][T19612] __se_sys_ioctl+0xfc/0x170 [ 1517.291773][T19612] do_syscall_64+0x15f/0xf80 [ 1517.296875][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.303276][T19612] [ 1517.303276][T19612] other info that might help us debug this: [ 1517.303276][T19612] [ 1517.313487][T19612] Chain exists of: [ 1517.313487][T19612] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1517.313487][T19612] [ 1517.327296][T19612] Possible unsafe locking scenario: [ 1517.327296][T19612] [ 1517.334734][T19612] CPU0 CPU1 [ 1517.340083][T19612] ---- ---- [ 1517.345430][T19612] lock(&nr_node->node_lock); [ 1517.350186][T19612] lock(nr_node_list_lock); [ 1517.357281][T19612] lock(&nr_node->node_lock); [ 1517.364553][T19612] lock(nr_neigh_list_lock); [ 1517.369217][T19612] [ 1517.369217][T19612] *** DEADLOCK *** [ 1517.369217][T19612] [ 1517.377341][T19612] 1 lock held by syz.0.11678/19612: [ 1517.382518][T19612] #0: ffff888091e3f370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1517.392340][T19612] [ 1517.392340][T19612] stack backtrace: [ 1517.398217][T19612] CPU: 0 UID: 0 PID: 19612 Comm: syz.0.11678 Not tainted syzkaller #0 PREEMPT(full) [ 1517.398250][T19612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1517.398267][T19612] Call Trace: [ 1517.398276][T19612] [ 1517.398284][T19612] dump_stack_lvl+0xe8/0x150 [ 1517.398314][T19612] print_circular_bug+0x2e1/0x300 [ 1517.398335][T19612] check_noncircular+0x12e/0x150 [ 1517.398356][T19612] __lock_acquire+0x15a5/0x2cf0 [ 1517.398390][T19612] ? nr_remove_neigh+0x25/0xe0 [ 1517.398406][T19612] lock_acquire+0x106/0x350 [ 1517.398430][T19612] ? nr_remove_neigh+0x25/0xe0 [ 1517.398447][T19612] ? do_raw_spin_lock+0x12b/0x2f0 [ 1517.398468][T19612] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1517.398489][T19612] ? nr_remove_neigh+0x25/0xe0 [ 1517.398505][T19612] _raw_spin_lock_bh+0x36/0x50 [ 1517.398525][T19612] ? nr_remove_neigh+0x25/0xe0 [ 1517.398541][T19612] nr_remove_neigh+0x25/0xe0 [ 1517.398558][T19612] nr_add_node+0x1e41/0x2630 [ 1517.398577][T19612] ? dev_get_by_name+0x21/0x200 [ 1517.398596][T19612] ? dev_get_by_name+0x21/0x200 [ 1517.398615][T19612] ? nr_call_to_digi+0x136/0x1b0 [ 1517.398631][T19612] nr_rt_ioctl+0xe59/0xf90 [ 1517.398651][T19612] ? kasan_quarantine_put+0xbb/0x1f0 [ 1517.398670][T19612] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1517.398689][T19612] ? apparmor_capable+0x126/0x170 [ 1517.398714][T19612] ? capable+0x88/0xe0 [ 1517.398738][T19612] ? nr_ioctl+0x1b1/0x3b0 [ 1517.398761][T19612] sock_do_ioctl+0x101/0x320 [ 1517.398783][T19612] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1517.398803][T19612] ? do_futex+0x395/0x420 [ 1517.398825][T19612] sock_ioctl+0x5c6/0x7f0 [ 1517.398845][T19612] ? __pfx_sock_ioctl+0x10/0x10 [ 1517.398865][T19612] ? __fget_files+0x2a/0x420 [ 1517.398882][T19612] ? __fget_files+0x3a0/0x420 [ 1517.398897][T19612] ? __fget_files+0x2a/0x420 [ 1517.398914][T19612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1517.398936][T19612] ? __pfx_sock_ioctl+0x10/0x10 [ 1517.398955][T19612] __se_sys_ioctl+0xfc/0x170 [ 1517.398976][T19612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.398993][T19612] do_syscall_64+0x15f/0xf80 [ 1517.399016][T19612] ? clear_bhb_loop+0x40/0x90 [ 1517.399035][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.399051][T19612] RIP: 0033:0x7fe9d9f9cdd9 [ 1517.399068][T19612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.399082][T19612] RSP: 002b:00007fe9d81d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1517.399100][T19612] RAX: ffffffffffffffda RBX: 00007fe9da216090 RCX: 00007fe9d9f9cdd9 [ 1517.399113][T19612] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000d [ 1517.399124][T19612] RBP: 00007fe9da032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1517.399135][T19612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.399145][T19612] R13: 00007fe9da216128 R14: 00007fe9da216090 R15: 00007ffeb6d2a288 [ 1517.399165][T19612] [ 1517.690961][T19609] ip6gretap0 speed is unknown, defaulting to 1000