last executing test programs: 2.140904614s ago: executing program 1 (id=4494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a21deed386870f436efead273c89bad45e30423"], 0x20}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x178, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0xdd90912c5f8d2c95) 1.971670568s ago: executing program 1 (id=4496): syz_emit_ethernet(0x10b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x38, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x4, 0x46, 0x0, 0x1}]}}, "bc"}}}}}, 0x0) (async) syz_emit_ethernet(0x10b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x38, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x4, 0x46, 0x0, 0x1}]}}, "bc"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x168, 0x1, [@m_ctinfo={0x164, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) (async) bind$l2tp(r8, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0) shutdown(r9, 0x0) (async) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r7, @ANYBLOB="e177fea33e1c167be170deea0195c64c3e024940a0be4835aa54621458d2aa51bb1ed61c0591e9520cae49a16cc8d7b532e02670f85b1aaa56bd69ee688a6ff0e77275093686526b2eb5d2f407014d01040b"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.948019516s ago: executing program 2 (id=4499): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="1bc387f31bf6681b5b3659b930e91df15fc28876f3", 0x15}], 0x1}, 0x48005) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 1.725457537s ago: executing program 4 (id=4502): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.520957367s ago: executing program 4 (id=4504): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x97, 0x7f, &(0x7f0000000280)="49564a2034229a348ef9098b91438aa5961a38ca1f193cb7cb35f6d6f86d67eaded85b23ce814b53f1fb64cd681b53cebee504d586567b1c6d921cc589ee5161eaef084e30c530831ca1bf6aa6e9e99c983a64f7ef649a0d1411269a5c87efab495cd8f551c8152a4e5b7de3f3a32faebacd02601a2f3d4461f199c5a3e698588c66a6c0d3577dc1cc3d89979bcef063cead03cfe53a07", &(0x7f0000000040)=""/127, 0x3ff, 0x0, 0x97, 0x26, &(0x7f0000000340)="9d373ad0c41de4080446bb9a280d844e72d89ea302826a0f50628f11f1b3d5707101f0e49dc92a951a6cb9684dba2dc1c289d0454dd549212969e4ebd325beda69bc6423734da7f847eb46b28064746ae202061bb6649a3a30f85a92ef9240226cbf8aecd86ae2e5460ab654ef026b17b53cdea9f8efb7961e0aea98f60cdc659fe2e884eecd4f73c0637fe3b3532a2782ea3a69bd26af", &(0x7f0000000200)="ec0b1adeb1ada55d371ea215d0fc8ce07acde1f9fabe744151dbcf86a76470a845fa9a73bd2a", 0x0, 0x0, 0x8ae}, 0x50) socket(0x2d, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.435856813s ago: executing program 4 (id=4506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="08001efbb07d7742", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x6}}}, 0x3a) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.274961539s ago: executing program 1 (id=4508): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000100)={{r1}, 0x7, &(0x7f00000000c0)=[0x7ff, 0x0, 0xc, 0x10, 0x6, 0x200, 0xfffffffffffffffc], 0x4, 0x6, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffeffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc1}, 0x4080) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x5, 0x400}}) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40880) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r10 = epoll_create1(0x0) epoll_pwait(r10, 0xfffffffffffffffc, 0x0, 0x8000002, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000180)={'netpci0\x00', {0x2, 0x4e22, @multicast2}}) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 1.063252149s ago: executing program 2 (id=4510): socket$kcm(0x21, 0x2, 0xa) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 912.971126ms ago: executing program 2 (id=4511): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4040801) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xb4, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '([\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf23}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x44055) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 792.743746ms ago: executing program 2 (id=4514): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000002140), &(0x7f0000002180)=0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r3 = accept4(r2, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80, 0x80400) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x8c, 0xfff, {{0x25, 0x4, 0x0, 0x1, 0x94, 0x65, 0x0, 0x9, 0x2b, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0xb3, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @loopback, @local]}, @lsrr={0x83, 0x7, 0x84, [@multicast2]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x2, 0xd, "9e570d5770c489106e5b1e"}, {0x1, 0x4, "170f"}, {0x7, 0x10, "b3b7919564ef48aa643b8da85d41"}, {0x6, 0xe, "a3f8f4c697d893e15b59e95f"}, {0x5, 0x8, "ada89c881b78"}]}, @ssrr={0x89, 0x13, 0xb, [@local, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@getqdisc={0x4c, 0x26, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {0xffff}, {0x5, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1041}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmmsg$inet(r6, &(0x7f0000002040)=[{{&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="6aafa739b8a39b700ea4a17d2bd4304d13e0e7a7db108cced2be63e42caf149f814b7d014c4763ec0c496bfc220e799678acee7bcd1c2f0ec057287133a7928cf692b642ab3c632d57cae5c143d0b66e25c9e178289197d74d29da3605b99ccd784d0316ebd1111b3a7680bf35ec4b3ad6f0bfa185983cede4dbfebb255d802e96d6e4d852b744676ca107ef72466b9e07a47174df76c58e27b3a0ee32215eb089841a730f88fb4dc9d4adfd8b1f5474d106794f4034f7d0f0284c6b65ee6df3", 0xc0}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="649a44fa64eb44925bc7e8464b1a5ee4c95c6c297f7d6e3be4b477e00cab0ffe4a13e29d514a4bd7d94b9dfa2ca441f54f2287805bca36572b8b9d02eeaa6bceeefb91655d2799b84395793c669091c23a5a066118263c5bca9dec868a333adb760ee76460e9670202bdf58fe561c1630a2a1a997dc70c7a7028a7ea1a5e7b4899c725cccb56214c34b66c4f054f6dc394bc37918293c48e766527c8ded237a520a38a281f72ab3a09cfa348699b414b8f1bc5dc54fc8e68f410a3a1bfe24e677a3c41ffefcba72eb04cb4edcf1e61850076826eb955be8b34d08d7a48100a06df3324d36bfa7271351904eced28a2209f3cf0c5e75f22", 0xf7}], 0x1, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000700)="beb74fa0d9de42afa3f7566b98f5941c132cc48a01984966b967e85c337501cd9aeb790d2e2a00ebfd5f40c07cc6a73c3fdc27a047ffbcf1ce1c76d311983c637be059f20626379305aafc363fa9d7a988c4cc8bc40ce1865441f445150dc7eea1f989a4040a93144c32264345f232ed2d858820087cc0329bae6754ca05b4003c6295da6ff79f7809e6b962e537159fa448066340f6a8ba2579c64a294f38f26807773469dea75d17483ac0158abd19ab4bd39dac24009c9ca3309851989012b6a06e56b9b169728002231299ffdaae920e5abce32ff491ed6c5bf2951320f2b045400ee17b31a722643fc3dee843a63879deaa", 0xf4}, {&(0x7f0000000800)="f971506eea9f556320729c6affb7cb385df39674440775eac36a834676537acd75d102a8dff0b369a3a40f7a8e5eaf96d5860edcb962acc5410192bb6a357b9666d96a53b17ca75e9d6b22e8784b82df3e39a221434e08fcd7a8764444369982fe7b4bf6169423733416b24449fafff195fd354ea0551358dad13f4ad4efdbe4deb2465fca843b415474ade153575fa84bd09e9d12c098f4af92a1c0bc73273b34f2454c49f4a87270a506612c9f9cc045a7ab04fa8505c647d9cd68619c6be16552a72d9c817994e83344c89ba92794284386bd8f139a315738836bc4", 0xdd}, {&(0x7f0000000900)="20dfd00872805d9497e52390ed8071a55ab9b64b2d293b33c47cd864b2ba1b85004b6bceda042a775f6b15ceda392b52ee9d1210503806cfa062718c36a7e67b8511e06592a58c766146d93d9b35dfae9d034b4ab8eaf7929cc8787a7500d0e5afd972fc045b824c0132c77a1b8c098e66a62c33c33c4b63b6a0fe38acc1362e0915760526b932fdbb8ff7161e23784826f5d1b78e0c28408661da3c46e24365aafde691821556e0f2c64a4c79fff0c7e13ef206dc902b7781319c4d2852145176684772aeaafdfc7090eb93c7e3abbb40deee7c8cf2cb51fb3572912538802214879bf119", 0xe5}, {&(0x7f0000000a00)="674063716c6b2f802d9879ea738eb466c26ebc65d118695930d7aadb8894c89b6dbace5ddbbc177eef069832eea996fc39dfeb86d1e3292ccbd37f01747d622e9cccf30dcd9162799d48852be465c24322aa3eb27aff3ac8ef92ceaa62e8c8198641d0c845e71159fc8834f3ff92803a096fa09521cb29709c0a5e3ee0cb0be942e108875bf0327707141835daec9e28847a11723d796a0300b61417d218a06bd5530afef077fa94219f8aba0d9ca4f5673fd56e6a99f0ee1a289db1a84275cce596db699bf57819ebb8da9ff42fdb98e28581b582f49557a04b91a38284efc9e3a3191599ab32528b19898ac0b7a7d4a4e6d530", 0xf4}, {&(0x7f0000000b00)="a9368cd40510b0660067ad79bb8b242915204ad63c472d5f28c5a68a3761484f0e3273f7436faed008db6f4f0fbd31c0b52acf75bd9c2089782d0f7a8bd103f84b703453e227961b07a23f4117266ea46ed477d87a867a43a9076a3454a93972c7cb447621", 0x65}], 0x5, &(0x7f0000000c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000c80)="735c2717202d008e169271832a52558b671bffd0661a46bb41777532c273e2f33a0563fd949949ebab69cc59a113c6644fd9e841ce47df40a5d7f37fa502051d609a13053b407c71a349488df16573569c9fd412945e10506a6bda28f25eb4defb777bdccba9ff9c418c83fbfecd7f54e0cde7a669e2dcc5d7cfd93c68011eb044f3b462649bfcf45342a98b9f0843631139f1ed6142e9bf9dcf8ad41306db58529d0e52ee10f3", 0xa7}, {&(0x7f0000000d40)="0f314c247ad4d49a26513977bd7862d183371d71412468991cf90919a2416e7dbe392a5fb0e0d5f2e7173c14d16750a690b9f67069f281d46faae96bdba0c0d8b9a05f442fe9af61c3bc1833cc45f2c5fbc4", 0x52}, {&(0x7f0000000dc0)="d8f2879788da2067885157cabc37d0ff7f510a5961f70bb4d2723fbf3c57a953c909ca499b9c5a27144ca3f0137a489ec658fc4886a8d24cc3ebe531bbeb6fbe284d18f26e829e102528b630f007daf504b0e0d41c75dcd69d3dccbae4974fa35321a78916f49ce66b419ce3e23c0b938fcb9aa00057dc1b3d16ac8f83b212e4516d8139bcf974e0cc3dd163fbdbf2bb2c4de8e81ca23a09678e4330c3b43dbaeca58705d7833cab84b516e9768deda6d0872d36f0d76fc575f7ccaaaf7cdec7fd58c46409f4538d572394240e50a7fc02db0f6ec0dfdf496ca2d326f4c5fe64c1903bf34fc4b6d05d8c7abcb003ccacb020e0fc345174a33de810e6eb1456889e98806a9f2c68428a76b37a2594b073eef87cffc59755ab398b49a33bf18bb326156d11fba03823da4017ae94b32f24da444c745106d0aed04ebf6abc58f1694c2452a6bfec1caca7657f483d323bcd7c25673844782f335171f5e868bd98826961d7f7f549766bec30ae50e437ecdb0b6f2078f0313a5828e3b7cea6551ffece942f98349aa0c8c7a7e20531967977342a56c20804d9b586a3315109fee10f1cc660ee245c1eacadb0d6d122282793568b7a999935938d15f08f3edbd442cca1470309019ad70c07017bc8a87dfc33a8cb3f6aceebd1196526fdd08d0f6f5840f59072d25cdcd39dae4b5fc6fd096276fa82285491ad766d2d164fd0b7df24fe4d2e33ea454478da8ff841330f8e2b5d39bed1a417eae0a55cf9ea9897d5d4db87157509de399719b64982cd9aa16b8819fd844d10719f7481d1d0a4041d22a5aeb3f75ebce1716fa90860ca0087db19ade70ebff3b9619f6c614483f48413c004bdef1365dfb785a83bb11f39bd17d373ba38ee01fd48dd2cf0eba88e8ab6e5d6b9bc144a594fa5ccd3ca49eef4e557caddb54106e664b3add99ef0a154a1c44c1dc445a614fedd3dd42258e4f3e6c0fc9b7d640033bce97a6bbb6871cc7ab4fe15918d361cffceb1d4717be668d1983ce70361ddb61522b391fe7aba614da02905fc6442cc9e56368af9ac7fcb9ba528deac140d664361e1df0e1303b7f508fdff59ab903c322b84168cdcbd5dafac2c841f0b5a0bb970a739a8be12d78c83219dc8c6f7a441033980073a3f93d8b0ebf5d655e828a539eddc3e48cbff63fcc40c4d4804e1cf2cee3e82d470b1cd4286aae849d25f1e5a7f90f474218926739918873b273643d752e787d83367720c3c04828768101843ce4c77a2abece42d4084b6d92724d889f5db859fd8b265fa314a0ac2e5f92a9d653790223a584009a9719da25db38dca33f616d02b6fd1c72c85623d74da6570d2253ce0f1665d4797f490c7da6c20ed98ca4ff3544dd8e9d57605c2c78e44e285807ac69ae53666c7d41b9d02a57dbc05b8c295f4319578f7ec0d013df75242888894f78e8fe7610617020933b914f438b201373a970d818296998f3f1e5222bac2f1611e89fff7af3585b9e26712bbeb6fe125ba457f57c38b6bb497100968010a0d16a997d3ce405ec83331bcc654844ca33b512e755d7eec60def57a4ffc423d0e39b395b01b70b9952e8d4a3aae52c1c403034ce65f326abc9e2507db9fd03c7f1eae0843f921b20d61c0002acf8c511911441675fd2bc4d2c74bc799595ac5808abcfa5713ae29a8c7a45768d3a5c50190aa1671eef1b830905cbe52fa2c777a0a543f2fd5841c98c71c2c5f0eab8445769d083ad002d0e291c5234a4ddd8372de7d0b32aea3928b4f1c173410b650c969ba803c00437d15228366592b95a3a963e995f5e296bb31b4153cd58f16aae079eb754fe3fc837b033cefa38e5ff41b7303b54c0c961423cfab3eec03f62b3dd8c9ef213cdeb397636ff88ac64ce9ea9b8608e6a95cbfefad80356740f2fab78de2453dfcaced73d59a751da733925fa6f24736735dd798f11b28a5d312cf1acb976341dc9f90c4ef3947bae1e7fa7fd6db8fcf07fcfa31b442660b1420d876bfb187b82feff807f58a663917acca99e511a712390a780cd6a81af38797dc99f13b893ddebd96727a27c3b1e8649a3a221ad0890b0678f458c69f95a4e2b350ad72c74b6cd906a301d8356f2e5a2227f06381367a55b8aa0ab69dac3f2862224b90e30564f9ad54714946b49947467204c1fb89e672e02072d511318c21ac74d4d2bb5d2168f8f9a68e7baca8b5538ad1e048bce7d78d4b556f5cdd3b58aee76fc1dc9f21829cd7eb5ef021728371f2d8beff55e910fa509909edb58f7e0e7edecd1c80dd956ac02da5d377efc887f2451dc9a64313aef6a68fae69565a35c99a3e00c8b909f666d7106d4a5f9504313855975af1122449a7564c02a551c8203a1b5ae7929268afc8c54cce0d1f2eee20578555f98db82b39b250babd634f06eb13870590266b570250f71636c5a6164d87eca4ad9753c400c5617104a9289d3d6e002fbc76c3171960a23f66e062d2ffb6b6c16d1fe76863010204fc8074346c07d97f613e2780f5d14ff70604a9ecde45e8f6b48ea175f9c8b21a5a5f49d71d1a33ea7b9fa3717c31280c5d049bb7c9140290e13e00c015d2ee8a582cfaca28da1a18bfb8ba1e1078b9a9babecb8c657bf38b42b30eecf3029300d8c34ddbad58fb009967261cd4ff62194a3328726874c2ff1799c61ed66a7b638e9aa900ddba6dada3c68eb23396323cc94b75a9cd4f8a0c5ecd2dc61116fd70418bd3ddfa2877d339a4aa88b99fe0124e8f3b64a7420104435282162ffe2c8cc107d6bbd066948101e6018ec5afcff7ee50c3f6f8324afa6268be5d722af6ca2806df72adb1c8c9433e5c42fe48804359ff29fe79cd3e072cb6a777597f6cb7603e572184866ee6b06527ddf2ca3b19b0c619594614191289da4bfe2810c4d78fe39e9a286782c6b44a011c9dbd7a9a7ef4996bf1eda33ff1f493fb381cc7ccef1155492a905f6f6ae8e102984b421ce57b54ea2daa10946d7863c4d5ae24f8d21de0161d48805884f0087f353ab72c481e36519ca9e2e2727a8799f2e631ef3af7a8fc4424d1e4670f926cad51162318e1257be0267755853111e32190736d957832e56aaaefab8ffba51825023770f4b37eab9bfa7e61e334f44391a75470915d0e1a31c4c3df99ae13b0bb03761c5549fa1cd99a0dd794b0dda71d74182652241a5e34f9fb040458ce966ddf7555602d3717c8440cb9dc688703994a4a2694221f6419d4b4d19a9466703da64e79d68e2d787809db67736991608f4285f97d00cc056dcd19aa39f5314d4f2026fb9c35f9ec21150c305e070f01e2fe2f7e44a792d6daf21d5fb5b40bac5bda5c2dad51e35500e151cd8e525045049a503e9c59b0c0f1062a72d395f8589625a62bfd7b0abf5c063f35e625650148e755128b91f6536bd0935d8115eb04ca1af38ef4d6af711147b5b32268d0a83f9bdc6f5012ab4d55fa3e360d4050225cdb392e2c610498605d35315f9ee7981bb8020f33418e2b0497fa17c80a50c943f4c09fa4b9cf778ff4c3db785fcce91a376604b6ff49d7d74648b09e2362103e50b0e171c7cde8aebe065ad2311fe0ac6a50b6e1340a32403f17455d86f041a27a5c99b5d087c6a71bd8f7231dab956e69331081ad4afede0c8bdc4e75f8570f5f3a744941f6c538b8c77c12f752a47845ea4f017ca8a69deade4f6eba4a0e4a6242887e6ea50ba318fa4a165d2c652cc791bc6c047268db6ec70232b52f430f3fb40105b6b2f6d50b19b44d1e9321685afc350e9c163227dfcdf380e74203bfc282d40725fde8400f0f84511510242192e7e2a04a20d90170b61f9b046a69f481b8c1eaa4fdd9f8668facaf700525d181d40c4c0c7822e0e1b6ba21671d1cd3d2e54b2e69932bd4e6796c9250a343b074e3fb974cb5139b61d92beb0acc7a3b315a7ee6db7a2afd4f9bcde1af0783a0b2bd4559a4ac37939d699655774a44e2e4da456a5fdfa62cbea0fb7952c981e8f7eaedf6c4ebb98b6bfa71a637cd6799e48688597bca2399ebe3208c2b1c16cb28868d98649f2abf33bccbd5e18ebf84ed9a4b7c389370ebaaa4bab7f6bde3589488d6ab9ed2bfe057e994df7ccd690b7b41684b997dea72b6d63b6cc416be8694383101d1bc20c4eeb652a97e6ce2418f55996b0889374833102bfb90e92402ee41c67b99fcd7da5d6fc4395dc26cff7dbf9433849f20bb533d4572ec496e0444bf551a9b65efdf22d96342a7c99b4a77add28856ccd4281f169ce08769660428e470dd25bcfefb6843fa827d556e5da303d8d246bdc75b5014fc93bbb30b1517a0aa919129d0243c85a90d31d2635fdae0e9a65e3c0d95c9cfc9343c1065fce5f40d87f98ae33d26d66906ca1c0c75a9978fa6c63b7aae4e4673d17220e79effe93c88a253a169e19c8143ef3c5b667b0af754654c4ee9c58d8ffdf4c13b2ad4a47b7f876ad4af03ef0241a837605db52e3ea7326579dbb84f0db28a123cd33e8bc21595985bf7fd9324b0641b251ec1098173f897f4d88b6bc84afb23e4282cde571513af272226827ee6459e33874477bf3420a59ff0d4a8862265c2ee34903a2c99a5ec7a8f825570fba12f58aeb846c40ccd913afaf8d62681d6c932f547adbb6e9e89f3b4f5139683228a282886fceb96da0dfd0e0aec950f93a276004485a422f320bf371170af00fe24a78dced88b4e8e6b2237b4e9351a1257a4e533e72cf61e811dee4b83f1305259e337e13022771a245fc9b69368baaa0ecc8159a42edb5cdad7db8779317e9dec5c18f87ecf1802cc50f004ae7d314a72dd0d24c1649c019de0eb525be2064738a31f041a0eda5f2d969250ff69540a29205848a3250392ebf0e4d629f6447ff1ac2059c7e53ddfb83146db1d204fcd7ae74ea44ea1e612225727955740a9d8baa7d1c2775b90a9849ad1c6e13a75a328f7c80f1b225d07e086f7da698703efcfcd6a75f985c616905e3165bec2351160b6ede6ea4796c8ed5529b14b7fa5eeb90ac24be019c4f7d6d127c4210e266d478d166a4d778592b2e85b7ecf26f2d100a1f4c0d9b828c113db127557e29c4a6d28eb4d24f326b37d4a4510172bdce3ada21b92056f82c3f3aa3c05e7637999b85d0b1c520d4834191fc80db116e60f196c6f8531777499233528ef840dec31a90273b9a20f6142d3f18d76adbcaf04aed1b8ed0e68c3d80f33a9bb1b901f17ac35891312a10765436bbd69ba053471179fcaefd74aeb3e0c993e2b49fb6965678fab09964f8890812212e25d600f8b28e062589ca30733610b1cb52455346b13e47c753ef7e2fa7d339ec0c822e2ad0486acf64ec254c280bb3e47e81c11162ba30cf6370e1a5e71885cc5896e2650377e77f6685d3f2ebdc6e19479957bc8d2e137a0a3f62d731ff8f8aa430753c4a0ced18d2981982b32a2bd0304f18bb4c034322eed725e153ca35e68e65284cca31be1321130c0b8ee78431c379902a516a3eac94e740e0cb6a7a0509b6b8604c2e1e40707e8e85631272ab4a2c1a988861ab1f529546a95585b47989f850b11d937d14c44f19dcc650aa676abc7cf07a893059f1a048744f5fd7e2cac4ce278fae416b9368abb2bc50d2250d174af423d99f86e1db3a7c516e821b85cc89855c180872ad8af5255e17127c1608fab8268350424bc38a4a4134d5e78972b9c6c0f33e996841956109110849d2a1d2d0cce5cce501b515540b26591683d2d9b02c24cfdd3db75eed390b86379e6d93ba0378523c6984e706285e55b39d4236e3570a4a4aefc339fb10ef0bfd9e4b8", 0x1000}, {&(0x7f0000001dc0)="68deecb0878979b1297c278a07e15b822ba92bb3b388ef746e081c2a1b64e4829002cc79a8f9ae0d17298f9bdc87bbb0d8efcbe2126be4dddd6cc15ec2d9cd91d94b317f8d7b9a3e8ca5f9db9593a92a7ada8aad51157e706bd19e7b3bcf793ac584f53f6aa51b17aa1bbda288ab7da9c4260a0e9dc87aee3203668f25e69bd6060069c77ebed44b8d1ad366b883c8aead1e2ae6924ccbfa3ed8a6c549f9425835392a393af225466ee8d57e10935a542023128c7f10b3d8bc087a09", 0xbc}, {&(0x7f0000001e80)="a19846fb378c7e997c4f793ea35f8e45ab984ca69a079061daf190db63a69203916e569423630670f6a29bc0daf56564819adebf699f81d26ea29a808f098e821aec1ae2a5df2e1ce5", 0x49}, {&(0x7f0000001f00)="fcc766b002685f2caf054a0a34ef7164439b1e0dfe8e21e13ace12fa77d033928b516c9c63fa876a2ab9d7b774efaca32417a55a9ce77992c10f868addd587afc9b287799b626775b218b8ad3dfc90aaeb674a54de5ca8c8fc0c675221cfd4b7f1ff0872941bf79626002293935bc65256a42ec221938e747e1da97f228f829ed2162aa87cba0e", 0x87}], 0x6}}], 0x4, 0x804) 792.111226ms ago: executing program 0 (id=4515): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xfffffffc) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 784.379135ms ago: executing program 3 (id=4516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004001a8014000300697036746e6c30000000000000000000140012800b000100697036746e6c000004000280"], 0x4c}}, 0x0) 743.449691ms ago: executing program 2 (id=4517): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2}, &(0x7f0000000340)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) pread64(r4, &(0x7f0000000080)=""/74, 0x4a, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180), 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f00000001c0)=""/100, &(0x7f0000000000)=0xa4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$packet(0x11, 0x0, 0x300) 723.367902ms ago: executing program 3 (id=4518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000840000090000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 620.812331ms ago: executing program 2 (id=4519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000000)) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r2, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080018"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xe, &(0x7f0000000100)=ANY=[@ANYRESHEX=r7], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) r9 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r10 = socket$kcm(0xa, 0x2, 0x73) (rerun: 32) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x160}, {}, {}, 0x0, 0x0, 0x1, 0x1, 0x9833bf88d1b218f5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x4d6, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 64) r12 = socket(0x2, 0x80805, 0x0) (rerun: 64) sendmmsg$inet(r12, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) bind$bt_sco(r12, &(0x7f0000000040), 0x8) 617.57558ms ago: executing program 0 (id=4520): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0xfffff801, 0x8, 0x9}, 0xc) (async, rerun: 64) listen(r0, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @mcast1, @mcast2, 0x1, 0x6, 0x2, 0x100, 0x100000001, 0x4000090, r3}) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 616.674284ms ago: executing program 3 (id=4521): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0000000000"], 0x50}}, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0xfffd, 0x0, 0x4e1e, 0x800, 0x2, 0x80}, {0x4, 0x4, 0x200000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x10000006, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f00000002c0)="88870fefba01c2cc909905a0c7e5ead8444fe1cd4a3b5edd3dc94cf5068bcd0894d810115bab2fa1fdcca615d1337171dd8926af317841a7aa9d4540c2b4124e3c3e5a2b8a2a43a545aac70ec5") (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd70000076b181dcdf251f0000000a0001007770616e30000000"], 0x20}}, 0x20000010) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="010a45000101040008001b"], 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) tee(r3, r2, 0x2, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="8fc6744bf0de81cb9c2e74f828e93d645fbe05435bd2378aaa80da43a85f05db4adcce", @ANYRES16=r9, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) 553.964093ms ago: executing program 4 (id=4522): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 547.173046ms ago: executing program 0 (id=4523): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000001a40)={0x2, 'erspan0\x00'}, 0x18) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000080)="20fe2170f0252cc7d3053e8532a4d844f933056ca2fa4a6063cd5599fa28b37259f45815d2a7fbefdb20d59c54109a8c6e788206eba307e1fadc61cd604ed1f6c810e5a02cf904d31cdeedb8386d47afc52ab5b9aa756a6e4197edaa9c22385cc9759fedc713da8b46e8c0cf54daa9", 0x6f}, {&(0x7f0000000000)="ada944e44eefbc2d95cdfa7d358627e5e17e46d9adafbeab4eda6b364efba3ab3df123aed6e38ca29e1c959a35f2cd", 0x2f}, {&(0x7f0000000100)="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", 0xed3}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 436.908367ms ago: executing program 4 (id=4524): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140099018000000000000000280011000100115aa5e9d0abe22babc259d2ac9ba34a9582b686a2c37d84860000000000"], 0x28}}, 0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async) socket$tipc(0x1e, 0x5, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000140099018000000000000000280011000100115aa5e9d0abe22babc259d2ac9ba34a9582b686a2c37d84860000000000"], 0x28}}, 0x800) (async) 426.941877ms ago: executing program 3 (id=4525): syz_emit_ethernet(0x33, &(0x7f0000000180)={@random="e90c610faca2", @random="ce607294b061", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0x4, 0x0, @void}, "7d82d5d010"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x6}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x330, 0x15, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x320, 0x36, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}, @typed={0xf4, 0x128, 0x0, 0x0, @binary="8918fe74efebc6beb0d919a3f3f2e6518d0dd9c5c4b8228616c7d6260b7f1f219c8e2595d8b81af585a6bff95fafca6971f7ec61e768666e2263d183d2b8d980750464cb1b5b3f8b480c921c62caf0aaba1bb457f66e3de44559d55000100aae7d2f5360a31d8707411a902684fbdb7e0bfbc9fb737369d45d60c1548e3832641711608aff8697bb37392db43b2f6382ad5d783e0760e422b35cb9c13aa372f0299a37e24e11709d1506a6b6c06f6513edf1fd9338149da2b7f3d1f75c2514c94fa2e543753fc1a27229966121ad24dd0aaa069c38a4deb0c3dd90782dcf723457602458975fb0f26782e10cbf043529"}, @generic="7cac6a0f624d885baa8619470957e912ad75ff2d5abc737f08588b73e90b999784f7eb74763e12be126cc1f2483accb8f0a2a381c021014f72", @generic="079fa5d57f4062746dade32aa603a1", @nested={0xc, 0x4d, 0x0, 0x1, [@nested={0x4, 0x7c}, @nested={0x4, 0x10b}]}, @nested={0x1c9, 0xe4, 0x0, 0x1, [@typed={0x4, 0xf6}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="2eb1650625cacbcd33d0f05307ffe1f0be83408778010f2034e6a66885aa8653c251b16794862bea93e0e39b3ad9e8061c19fab342108e114ff9637d131600c3ab0010d6c683cf859b2aa06f18aacfe3537bb7c807900b909b60a1abe75a43f7a8d74873273216eabcc099ee9860dd81de4273ab42acc0d9230f0218f0afa87db31a522a9d62249e0fbe0c5f246e5e61b7c80fafd996e856ac769b4f6cd5733aacbac942535ea56085afb739c8f7c82ea384ff4fd498d247c5a02e7ad7baca1dc938c04b880734b1b28727326ba107", @typed={0x4, 0x8a, 0x0, 0x0, @binary}, @generic="89e3754f4f16178e57a4bbccd2bce6567423830a3b04ba848bec2ad4cc59aa8d3cda07ee31790bbca001c4b9c26533f9ccc145b013d85f4f33bb43b2bafca4167aafc45d4769f585e7b6723427b5a622f5ceef9bc8467aba65de77b9e5e3d0178c6e1c166eefd3a3889bb0782d122335ff976e82ba09b34f66cfd39a572d5c928218ac2a44684a5c9a441dd783dd2e8b265ae4c4471d9172800954ab4dce7f727b8749e464b4ab1b6b282dbafe4b63f79092ec3fd54d3571dfb984017908685300b48e8959c5e625a46ac1a12cd35f045129f246c52842916fbc"]}]}]}, 0x330}], 0x1, 0x0, 0x0, 0x2000}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r4, 0x1, 0x70bd2c, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xfc, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 395.3272ms ago: executing program 0 (id=4526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) 290.149948ms ago: executing program 0 (id=4527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x40}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000080) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061147c000000000004000000000000009500000000000000880cd4eaad8bee567f7e9da5e03ede268c705442fdeb6266c99f1ec8c937ac16a436656d50aa515381d056499eb52e6f57f2e758f4a74409461779"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a310000000009000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x24000010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x4000000) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) accept(0xffffffffffffffff, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='fsi_master_aspeed_opb_write\x00', r5, 0x0, 0x7fff8000000}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x60, 0x10, 0x401, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b4a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044090}, 0x20000000) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r2) 281.210097ms ago: executing program 1 (id=4528): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x10, 0x3ff, 0x55b, {{0x2a, 0x4, 0x2, 0x30, 0xa8, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x8, 0x67, 0x0, 0x5, [0x8]}, @timestamp_addr={0x44, 0x34, 0xe4, 0x1, 0x4, [{@broadcast}, {@local, 0xfffffffb}, {@multicast2, 0xdf}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xffffffff}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0xffffffff}]}, @cipso={0x86, 0x53, 0x2, [{0x5, 0x8, "0b84bd593c07"}, {0x4, 0x11, "9c458020ce0b2d1d565620dec2a177"}, {0x5, 0x10, "dd40be8853e07ad3802526b62295"}, {0x2, 0x9, "1f8aa6fc08b55e"}, {0x5, 0x7, "ca362fb168"}, {0x5, 0x9, "0143113258dbb8"}, {0x2, 0xb, "83684f40fb58dbe7ab"}]}, @generic={0x59, 0x5, "f4bbe9"}]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004030000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000003c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="03000000000000000000000000000000000000004ca51c30d08d482426c84d5fe9dc1a697a07d1ac7565", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000020040000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000fdffffff000000000000000000e7000000000000003eb900"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r6 = socket(0x28, 0x5, 0x2) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x1, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x100000a, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="9f8fa87a9f9ee98f2d04e8065aaf438d5a92d117ec75e4cc8c90072db0b71902766c05e808042f4a503554a3a4315ef4bf300a4b316b10aef6844723bf0526d08ee0441e366f8981c94ee1", 0x4b}], 0x1}}, {{&(0x7f00000005c0)=@caif=@dgm={0x25, 0xfffffff0, 0x3}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="20000000000000002c000000050000004caaa8ab92dac3d2e0528447000000004001000000000000010000000a000000dc7b4f3527a7048ff775d2752bf8d2b54b6a6554650878dc23de4bdc706a5c566789766de4f60b0d81aff14eb2fb37db07bd0144687e3bf509f57ae73956624a260b543237090000001f919532e36f2d17ef94d3c3fee619e86b9398bbfca0768802736813aa52afc6aba80953e394a3fbe77e44faa00eb85ef930478a63c0ed94d21e2b44789314550be50ac5351574f5c79ae1969e135b44a11bb3cca8d40036b9651e46343994e59cac2e0422c386b1474e1d027fc66825ae8323444743ca4db2981d59634c3ec5bd60bc76873be5482c12cef7741be7a00788bda3ca80e0da9d88941b3eeb1d36df83acef8945a937e3eb0b7bf84f93f566be52a06024c3ca72a6790fd85a89545ef402f42b704c12bea7f76fa074f2b9612510e4fb3a61318f9e6c8913cfa5a04ce0222caa7fbff00000000000000013010000018000003c062d139c54066dc38d740946919b1ec11aa2fe165ecfe1f2edad584f13748f2d0b808949e6eb60ab338a7453113f3a14ce31e35b283d2b96f6f7b26c6f1577eea336591afb06d59a95362650a198174a36cef34227ffbda4072019c3a885133ff3241f05ad9adcb8749d5150ffe03e0194590595ae34c11e5788d63f279adb95ce42f0d5cf268602f0eea9020f1ea17d75a8555a916acf9cd92e1b1ee6b615f8a3a990f1d77f00000000000000c840030e7b79746c6beb7e182c34723b7e3afd8ad7dd8fc8d7ef13e850948ae78ed2d0132e36accc7aee53c16bc273f29bdbf0000000000000002900000016000000984729218fe4c8ced34317f8df79308d62350a6c0c3eb69acefa24a1adefcdb23baed87bbb57535a86584e713e281370ebe7a5e2e70402b9aca235a4de98465405964dacfe215c4ad9d56449172f656d3722a0b02f849841edbb6eedd403b38250df3db85a5b9c9ac8c2914c8a2f406702f91dcea0007f81d690461fd6dadcdf11fa45846407781423df33c3481524d493a2a404f48aff8afd04152bcbf6e9f464c69b58781be77bb85b697dede005abc11ae03c80cf393b9f96a764ab9ee06bf89425d9d6cc8e559e7742283d64dec49a78bf1db503d41b7e00000000000000"], 0x340}}], 0x2, 0x24008094) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req={0x30000000, 0x3, 0x1, 0x7eb}, 0x10) 266.876597ms ago: executing program 3 (id=4529): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="0f90e322ed6d8cd6b2b7ec79bbcdd0c42a19c602b551d9f1ce1439a65496a0e7e3cff224c77238bd6835bc319bc56161f719721751c8110bafe7c2cebd73c7168a12b0353be544423d1a6ef0b3469402f36d80076af18ad57cae53a2ece1e2b7375aeb9ed17f67dd7c30ae633c55829247", 0x71}, {&(0x7f0000000080)="4c1feda0d8282bdda5ffe1e94d435c2ca53521c6273041e416a533e66ae278172c274c784f09f24cc344ad8b256cc79586d2f116634d032b496c72c880b5a46ec86dbaf09ab3f5f229df2628637c", 0x4e}, {&(0x7f0000000100)="108fde0eb10d28f52d93e9d2732c419466867396dd13af6e044b0dcff4eea1b1a6cdfe861f44f277c9e0a70f72e470475ed37bef235fcc0d8acad6c592a78c03a018bb07a12c8769b14bbf9b8089673af21a0345e2f7d2a75f875abec82ac4d533a30d7baeff241694fa3cc1b0950401c2111a742f9a06703a7c7b6e9eda49bb8c8bc0d7", 0x84}], 0x3, 0x0, 0x0, 0x800}, 0x4000001) (async, rerun: 64) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) (rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000280)=""/178, &(0x7f0000000340)=0xb2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000002}, 0x4040) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000004c0)) (async) r5 = socket$kcm(0x29, 0x7, 0x0) (async) read$alg(r0, &(0x7f0000000500)=""/197, 0xc5) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000600)={r5, 0x5, 0x4, 0x10000}) recvmmsg$unix(r6, &(0x7f0000003cc0)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/104, 0x68}], 0x1, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000001980)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000001900)=""/111, 0x6f}], 0x3, &(0x7f00000019c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001b00)=""/254, 0xfe}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/225, 0xe1}, {&(0x7f0000002d00)=""/222, 0xde}, {&(0x7f0000002e00)=""/106, 0x6a}, {&(0x7f0000002e80)=""/212, 0xd4}], 0x6, &(0x7f0000003000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003100)=""/63, 0x3f}], 0x1, &(0x7f0000003180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003200), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003280)=""/49, 0x31}, {&(0x7f00000032c0)=""/155, 0x9b}, {&(0x7f0000003380)=""/176, 0xb0}, {&(0x7f0000003440)=""/182, 0xb6}, {&(0x7f0000003500)=""/183, 0xb7}], 0x5, &(0x7f0000003640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003700)=""/115, 0x73}, {&(0x7f0000003780)=""/96, 0x60}], 0x2, &(0x7f0000003840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003900)=""/52, 0x34}], 0x1, &(0x7f0000003980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/41, 0x29}, {&(0x7f0000003ac0)=""/164, 0xa4}, {&(0x7f0000003b80)=""/22, 0x16}], 0x3, &(0x7f0000003c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}], 0x8, 0x3, &(0x7f0000003ec0)={0x0, 0x989680}) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f0000003f00), &(0x7f0000003f40)=0x30) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000003f80), &(0x7f0000003fc0)=0x4) setsockopt$inet6_IPV6_HOPOPTS(r15, 0x29, 0x36, &(0x7f0000004000)={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x18) (async) r16 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r16, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x18, 0x3f9, 0x800, 0x70bd27, 0x25dfdbfe, {0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0xc050) (async) getsockname$packet(r9, &(0x7f0000004180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000041c0)=0x14) sendmsg$nl_route_sched_retired(r14, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)=@newqdisc={0x78, 0x24, 0x0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {0x0, 0x5}, {0x3, 0x3}, {0x2, 0x7}}, [@q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r18 = accept$inet(r8, 0x0, &(0x7f0000004300)) recvmmsg(r18, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004340)=""/205, 0xcd}], 0x1, &(0x7f0000004480)=""/44, 0x2c}, 0xb}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000044c0)=""/49, 0x31}, {&(0x7f0000004500)=""/147, 0x93}, {&(0x7f00000045c0)=""/155, 0x9b}, {&(0x7f0000004680)=""/162, 0xa2}, {&(0x7f0000004740)=""/29, 0x1d}, {&(0x7f0000004780)=""/69, 0x45}, {&(0x7f0000004800)=""/55, 0x37}, {&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/136, 0x88}], 0x9, &(0x7f0000004a00)=""/96, 0x60}, 0x8}, {{&(0x7f0000004a80)=@nfc_llcp, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004b00)=""/56, 0x38}, {&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/229, 0xe5}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004d40)=""/243, 0xf3}, {&(0x7f0000004e40)=""/211, 0xd3}, {&(0x7f0000004f40)=""/53, 0x35}, {&(0x7f0000004f80)=""/2, 0x2}], 0x4, &(0x7f0000005000)=""/164, 0xa4}, 0x6}, {{&(0x7f00000050c0)=@nfc, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005140)=""/66, 0x42}], 0x1, &(0x7f0000005200)=""/4096, 0x1000}, 0x9b}, {{&(0x7f0000006200)=@qipcrtr, 0x80, &(0x7f0000006480)=[{&(0x7f0000006280)=""/193, 0xc1}, {&(0x7f0000006380)=""/249, 0xf9}], 0x2, &(0x7f00000064c0)=""/232, 0xe8}}, {{0x0, 0x0, &(0x7f0000007a40)=[{&(0x7f00000065c0)=""/30, 0x1e}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/243, 0xf3}, {&(0x7f0000007700)=""/96, 0x60}, {&(0x7f0000007780)=""/248, 0xf8}, {&(0x7f0000007880)=""/168, 0xa8}, {&(0x7f0000007940)=""/198, 0xc6}], 0x7, &(0x7f0000007ac0)=""/231, 0xe7}, 0x7}, {{&(0x7f0000007bc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000007c40)=""/247, 0xf7}, {&(0x7f0000007d40)=""/11, 0xb}, {&(0x7f0000007d80)=""/4096, 0x1000}, {&(0x7f0000008d80)=""/129, 0x81}, {&(0x7f0000008e40)=""/108, 0x6c}], 0x5, &(0x7f0000008f40)=""/32, 0x20}, 0x8000000}, {{&(0x7f0000008f80)=@isdn, 0x80, &(0x7f0000009180)=[{&(0x7f0000009000)=""/14, 0xe}, {&(0x7f0000009040)=""/112, 0x70}, {&(0x7f00000090c0)=""/147, 0x93}], 0x3}, 0x3}], 0x9, 0x0, &(0x7f0000009400)={0x77359400}) (async) sendmsg(r7, &(0x7f0000009740)={&(0x7f0000009440)=@ethernet={0x6, @multicast}, 0x80, &(0x7f0000009680)=[{&(0x7f00000094c0)="931e8489c8f57397cb207c019ce7f7a18b59181dd6d7ec85ee9fa73fa1d5e32224c4d3ab2ce1141b269847297a418cb9ee24b93e3d8d0b546970c91b87ca515dcb71eae9245bb645e8b2c9487bedc1c38ca19e5ebbe26ec94d59a9b11f8af59f0bcb29632b52eed4a0", 0x69}, {&(0x7f0000009540)="c6762dfe512e439213f51b72838055d09be25d8173a46b3eddb16220cfa85be3014cf22cbea438d9541312c198c9b796e15d56", 0x33}, {&(0x7f0000009580)="852c2ab1a250f436f50ed89f8ec40c591a7f6ca59349a7c4dcdd5af06f497a41050cf40eead7154a745dd4a840c13609adc977f229b8c422c527a4f216d053f98ee9d88d1cc6f8aa94d3e79b46aef231de408ce5af7500726c33cbce3bc184caffcdbcd098c5e2492921e57be8e80d564afdbc97766bd5937179a4a31217f48a9fd7282c2727dfd7d4ce6af2e94b96dad55b902af9a358f0c6172624c6e25d1b656811fb1ea1982f9570603d297632efcfeba02f2ba2b176406cbd8758dfcded18638229103b3c2a06d63a431a96addb3705ed52ef20f9a2a3171f6229d5a001d36036713b79e7", 0xe7}], 0x3, &(0x7f00000096c0)=[{0x78, 0x101, 0x9, "025cf5a19f6ee2b9826eefccdc19630e7488a78960c09aa39562c61bdc78412b8414d529d82510c4b06a68ec3c0ea8af64832d17260320fe9a4b82b6ca32566fef7b6db6fdc83c130602910002008b7cda5b820d2da22e66ac46ef9c95b05b1181ac0e58"}], 0x78}, 0x40040) (async) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000009780)=""/4096, &(0x7f000000a780)=0x1000) (async, rerun: 32) read$alg(r13, &(0x7f000000a7c0)=""/20, 0x14) (rerun: 32) getsockopt$MRT6(r11, 0x29, 0x5cf69387ea7341ae, &(0x7f000000a800), &(0x7f000000a840)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r12, 0x80089418, &(0x7f000000a880)) (async) sendmsg$kcm(r13, &(0x7f000000ae40)={&(0x7f000000a8c0)=@l2tp6={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x4}, 0x80, &(0x7f000000adc0)=[{&(0x7f000000a940)}, {&(0x7f000000a980)="1d58ac1b17fa5a3f10ed41c6a4eab1d621065694065858258f27c9aaeb0ebeea1b5ba37d0e108d2a98fcd1d7c2e1513b804a8f42a02df07f08ca30ff2524875d9e9b3ec30298ab7f4f04c421e70483e7c2e57e800ef0eef4a7e3b98fbe23c899fe142e40c5a7c9d957139d3e732539a40f00858ad12e74c9bf61fd6175e304664e5d5aedda48cda56435c9eb7377bf919e5ae3e459ef1efda5aeae2cfdef081813ed0227581d024447c5481b8e874d3b102fa4ed2d41271571bf475f17944fb7b47e4636b9e5160c49aca1", 0xcb}, {&(0x7f000000aa80)="2c363352663fe9b201b8473f73372f8958ca33eec2b7b413dfb43530587f9c8a34a71c8066cc1e6fd8bd331b62968ed7afb2d49a9568fc192fdd178fe0a5c5067e57", 0x42}, {&(0x7f000000ab00)="8f78335fc2500c0ce35ed48022375e30cdc7f62844c5be536c5b624f2aa8a2", 0x1f}, {&(0x7f000000ab40)="fc29f0acc10d0c14ece82775c36525f07c65f66c5ab950f9c7c79e7d00c41463046c0bb5c1403e09a29ebfecf92165ed495bba080ce6158560c2367cb8979c2f9184e33c658825e5fc86f9", 0x4b}, {&(0x7f000000abc0)="e751ed0aed0bebe612369fbb2977130ec456c785dc4e14994c198a9ec3b29df42e6710ba5054149d2a99b4ecd05427f404b8581f02cfc3a0a49d9cb5f06a76dbebdcc9d6d8708240f46d70090e83de4c35e9dfdea643eb79559b5f8696aacd321458da62a17d9c2717cbe9c89e8b990fd50c2fe2b2d398fabd07b0f671353959ad664a070ae8cc3b4c5172a492b25c614aa0c8d6f7", 0x95}, {&(0x7f000000ac80)="b164c86e02826fa7079263bdce9dc2594c120723f2fc0605ed627e6ec125d9854a2e89da2c7e5dcc99bc3108172b1b710ce8f75690d49229a380", 0x3a}, {&(0x7f000000acc0)="de6ec7cf083a93e4f72a1cdc0ebe437df9f787e428ba79bfc6438d27bd466eebe2d2b7d124444bde922036a6adbcbc1cdf0d3d4a0736370644cef53615426c13b73beb0b36befc5ac5b5d6115d0146d5e1123581519c7260a8301d021f550562330da45b4d624debe58267baac823177166d0213c9d740c5f0ef01ad19519296396ee3b5d772d7586cddcc267eb78543dc0cd7edcd5bf124f08db28b0476d7084f2cc82406d301dc8b8ec167f20e732a771bb4894555ec07a0d92686ee8d5f79c9302b52e0a1295910f9", 0xca}], 0x8}, 0x8804) 251.681814ms ago: executing program 4 (id=4530): r0 = socket(0x2000000015, 0x80005, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) syz_emit_ethernet(0x1d5, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x19f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0xd, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba"}]}}}}}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) 124.976019ms ago: executing program 3 (id=4531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7793a4b38de2a4c469bbcf2d5a84a6db766090208fcca9581d0c8845f5cf6b3bec87f51e203ef38f2aa18d7c4e80ec3b42d0894b9c33d506db3e8840022924b52ca493b971cb0371990f59b81bb7aaa0905c2036b8ef1a69d9269fecdfa3207d48c99da2561f8d6871e8e5a858a9b301264447d52f621a4b769fdc9d59fdc8b4287da1a6ccb857797d34544f4a17e69c1c9f1e9023c8486b"], 0x0) 115.005502ms ago: executing program 1 (id=4532): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0xfffffff2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xce, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES8=r1, @ANYRESOCT=r1], 0x40}}, 0x0) 64.118816ms ago: executing program 0 (id=4533): r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r6, 0x0, 0x1c0d}, [@IFLA_LINK={0x8, 0x5, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x12) sendto$packet(r1, &(0x7f0000000400)="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", 0x1000, 0x4008000, &(0x7f0000000000)={0x11, 0x10, r6, 0x1, 0x1, 0x6, @link_local}, 0x14) 0s ago: executing program 1 (id=4534): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000580)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x18) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xc3, "09f13e3377cf960f24b181b4eaa834262ac45a90d092cbccc98dee41b5d7b9ee373b3efdbcdb47a677c5dcb0e892bd36116325524db55aea9a3f4b8cb5767dfaee6cad350eb03cecbe4a0b9742fd1fb077446e144ebfdb1baef2fde5c557ccbb3593e73626986c47278ab595d150422a5489d809917673d5e934f00c09ea0745570a1b00253fc81d85abb2669b9bb3e99d6cd94be17e007080c676bc9f6b29b8176c7dc9f941b9349b54f3a3f20d882874b96fe0f2b877f7bed8d44eb5e0b2d4667b70"}, &(0x7f0000000400)=0xcb) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="840009000000000000007000ffdbdf250a8020070001000200040000050014003000000008000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="0800170000040000480008809e4e4a6de39031c2607f1ea218427ed560ae305a06aef931a2b582e4cccda32469a1049e3331ffba53522d1b0cf7f44b0c10f4f116ccaac8141f56f5212187cfd10a7820"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newtclass={0x54, 0x28, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0xfff3, 0xf}, {0xe, 0x2}, {0x5, 0xfffa}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xaa, 0x2}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x20, 0x6}}, @tclass_kind_options=@c_prio={0x9}]}, 0x54}}, 0x4015) connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0x2, {0x2, 0xff, 0x1}, 0xfe}, 0x18) connect$can_bcm(r1, &(0x7f00000002c0)={0x1d, r15}, 0x10) ioctl$SIOCNRDECOBS(r9, 0x89e2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 24B). Runtime 90 seconds [ 267.387274][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.397924][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.559620][T15489] lo speed is unknown, defaulting to 1000 [ 268.411506][T15531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.432988][ T5877] Bluetooth: hci5: command tx timeout [ 268.453105][ T5867] lo speed is unknown, defaulting to 1000 [ 268.474579][ T5867] syz0: Port: 1 Link DOWN [ 268.507095][T15538] __nla_validate_parse: 3 callbacks suppressed [ 268.507116][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 268.523264][ T5961] lo speed is unknown, defaulting to 1000 [ 268.854127][T15557] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2890'. [ 268.879324][T15557] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2890'. [ 269.131469][T15582] delete_channel: no stack [ 269.147996][T15582] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.267024][T15591] netlink: 'syz.2.2901': attribute type 33 has an invalid length. [ 269.278850][T15591] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 269.397717][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'. [ 269.606534][T15554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.625216][T15554] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 269.642073][T15554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.657621][T15554] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 269.842951][T15554] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 269.856644][T15554] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 270.054232][T15628] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.063309][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 270.066531][T15626] netlink: 'syz.4.2915': attribute type 4 has an invalid length. [ 270.077572][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 270.892808][T15683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2931'. [ 271.038040][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 271.214255][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 271.440333][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.465668][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.474447][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.483544][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.492683][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.558824][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.566973][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.579710][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.597537][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.606012][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.678011][ T5864] syz_tun (unregistering): left allmulticast mode [ 271.737928][T15714] tipc: Enabling of bearer rejected, failed to enable media [ 271.824447][T15707] lo speed is unknown, defaulting to 1000 [ 272.204982][T15737] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.403780][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 272.442260][T15749] macvlan2: entered allmulticast mode [ 272.449165][T15749] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 272.482418][T15746] lo speed is unknown, defaulting to 1000 [ 272.731698][T15755] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 272.745806][T15756] netlink: 'syz.3.2948': attribute type 1 has an invalid length. [ 272.753574][T15756] netlink: 'syz.3.2948': attribute type 1 has an invalid length. [ 272.806570][T15755] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.057154][ T55] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 180 seconds [ 273.064232][T15707] chnl_net:caif_netlink_parms(): no params data found [ 273.068164][ T55] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 180 seconds [ 273.086754][ T55] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 180 seconds [ 273.098137][ T55] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 180 seconds [ 273.119142][T15766] bridge_slave_1: left allmulticast mode [ 273.127323][T15766] bridge_slave_1: left promiscuous mode [ 273.141393][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.169321][T15766] bridge_slave_0: left allmulticast mode [ 273.182434][T15766] bridge_slave_0: left promiscuous mode [ 273.193281][T15766] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.522325][T15789] __nla_validate_parse: 1 callbacks suppressed [ 273.522343][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'. [ 273.562637][T15707] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.575444][T15707] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.582706][T15707] bridge_slave_0: entered allmulticast mode [ 273.627661][T15707] bridge_slave_0: entered promiscuous mode [ 273.663326][T15707] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.670581][T15707] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.689154][T15707] bridge_slave_1: entered allmulticast mode [ 273.696354][ T5871] Bluetooth: hci4: command tx timeout [ 273.723164][T15707] bridge_slave_1: entered promiscuous mode [ 273.852735][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 273.924556][T15804] netlink: 'syz.4.2960': attribute type 16 has an invalid length. [ 273.949812][T15707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.960705][T15804] netlink: 'syz.4.2960': attribute type 17 has an invalid length. [ 273.972080][T15707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.053606][T15804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.057355][T15809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'. [ 274.082918][T15811] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 274.180214][T15707] team0: Port device team_slave_0 added [ 274.217355][T15707] team0: Port device team_slave_1 added [ 274.228760][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 274.365978][T15707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.377825][T15707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.415751][T15707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.429998][T15707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.437239][T15707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.463976][T15707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.480244][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 274.492884][T15823] bridge0: port 1(batadv1) entered blocking state [ 274.506562][T15823] bridge0: port 1(batadv1) entered disabled state [ 274.507781][T15829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.513974][T15823] batadv1: entered allmulticast mode [ 274.536757][T15823] batadv1: entered promiscuous mode [ 274.573168][T15833] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2971'. [ 274.722617][T15707] hsr_slave_0: entered promiscuous mode [ 274.730966][T15707] hsr_slave_1: entered promiscuous mode [ 274.743946][T15707] debugfs: 'hsr0' already exists in 'hsr' [ 274.750622][T15707] Cannot create hsr debugfs directory [ 274.762485][T15836] wg2: entered promiscuous mode [ 274.768455][T15836] wg2: entered allmulticast mode [ 274.937181][T15855] netlink: 'syz.3.2977': attribute type 21 has an invalid length. [ 274.947391][T15856] netlink: 'syz.3.2977': attribute type 2 has an invalid length. [ 274.985503][ T60] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 274.995030][ T60] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 275.154496][ T5867] IPVS: starting estimator thread 0... [ 275.168320][T15870] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 275.219327][T15878] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2984'. [ 275.225082][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 275.239242][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 275.257461][T15873] IPVS: using max 31 ests per chain, 74400 per kthread [ 275.285416][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 275.651874][T15897] netlink: 'syz.3.2990': attribute type 29 has an invalid length. [ 275.733434][T15897] netlink: 'syz.3.2990': attribute type 29 has an invalid length. [ 275.756007][T15897] unsupported nla_type 58 [ 275.786879][ T5871] Bluetooth: hci4: command tx timeout [ 276.131993][T15707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.165775][T15707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.197760][T15707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.237882][T15707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.277002][T15931] netlink: 'syz.2.2999': attribute type 8 has an invalid length. [ 276.550953][T15955] netlink: 'syz.3.3003': attribute type 21 has an invalid length. [ 276.570639][T15955] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 276.638260][T15707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.690250][T15707] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.723048][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.730244][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.873767][T15966] team0 (unregistering): Port device team_slave_0 removed [ 276.884297][T15966] team0 (unregistering): Port device team_slave_1 removed [ 276.913795][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.920930][ T8334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.324429][T15707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.588278][T15707] veth0_vlan: entered promiscuous mode [ 277.620405][T16001] bridge0: port 2(syz_tun) entered blocking state [ 277.639569][T16001] bridge0: port 2(syz_tun) entered disabled state [ 277.688175][T16001] syz_tun: entered promiscuous mode [ 277.775502][T15707] veth1_vlan: entered promiscuous mode [ 277.856923][ T5871] Bluetooth: hci4: command tx timeout [ 277.898778][T15707] veth0_macvtap: entered promiscuous mode [ 277.917363][T15707] veth1_macvtap: entered promiscuous mode [ 277.979196][T16020] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 278.006665][T16020] CPU: 0 UID: 0 PID: 16020 Comm: syz.3.3014 Not tainted syzkaller #0 PREEMPT(full) [ 278.006690][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.006700][T16020] Call Trace: [ 278.006708][T16020] [ 278.006716][T16020] dump_stack_lvl+0x189/0x250 [ 278.006742][T16020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.006760][T16020] ? __pfx__printk+0x10/0x10 [ 278.006788][T16020] ? kernfs_path_from_node+0x2f/0x290 [ 278.006806][T16020] ? kernfs_path_from_node+0x250/0x290 [ 278.006821][T16020] ? kernfs_path_from_node+0x2f/0x290 [ 278.006841][T16020] sysfs_warn_dup+0x8e/0xa0 [ 278.006860][T16020] sysfs_do_create_link_sd+0xc0/0x110 [ 278.006881][T16020] device_add_class_symlinks+0x1cf/0x240 [ 278.006904][T16020] device_add+0x475/0xb50 [ 278.006927][T16020] wiphy_register+0x1ba6/0x28d0 [ 278.006967][T16020] ? __pfx_wiphy_register+0x10/0x10 [ 278.006989][T16020] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 278.007017][T16020] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 278.007042][T16020] ieee80211_register_hw+0x3425/0x4080 [ 278.007079][T16020] ? ieee80211_register_hw+0x14e1/0x4080 [ 278.007106][T16020] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 278.007130][T16020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.007160][T16020] ? __hrtimer_setup+0x187/0x210 [ 278.007176][T16020] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 278.007210][T16020] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 278.007262][T16020] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 278.007281][T16020] ? trace_kmalloc+0x1f/0xd0 [ 278.007299][T16020] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 278.007319][T16020] ? kstrndup+0xbf/0x160 [ 278.007348][T16020] hwsim_new_radio_nl+0xea4/0x1b10 [ 278.007371][T16020] ? __pfx___nla_validate_parse+0x10/0x10 [ 278.007411][T16020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.007446][T16020] ? __nla_parse+0x40/0x60 [ 278.007473][T16020] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 278.007500][T16020] genl_family_rcv_msg_doit+0x215/0x300 [ 278.007529][T16020] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.007564][T16020] ? bpf_lsm_capable+0x9/0x20 [ 278.007584][T16020] ? security_capable+0x7e/0x2e0 [ 278.007614][T16020] genl_rcv_msg+0x60e/0x790 [ 278.007641][T16020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.007658][T16020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.007698][T16020] netlink_rcv_skb+0x205/0x470 [ 278.007719][T16020] ? __lock_acquire+0xab9/0xd20 [ 278.007740][T16020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.007761][T16020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.007806][T16020] ? down_read+0x1ad/0x2e0 [ 278.007826][T16020] genl_rcv+0x28/0x40 [ 278.007843][T16020] netlink_unicast+0x82c/0x9e0 [ 278.007874][T16020] ? __pfx_netlink_unicast+0x10/0x10 [ 278.007898][T16020] ? netlink_sendmsg+0x642/0xb30 [ 278.007912][T16020] ? skb_put+0x11b/0x210 [ 278.007934][T16020] netlink_sendmsg+0x805/0xb30 [ 278.007961][T16020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.007982][T16020] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.008002][T16020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.008020][T16020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.008037][T16020] __sock_sendmsg+0x219/0x270 [ 278.008063][T16020] ____sys_sendmsg+0x505/0x830 [ 278.008089][T16020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.008119][T16020] ? import_iovec+0x74/0xa0 [ 278.008143][T16020] ___sys_sendmsg+0x21f/0x2a0 [ 278.008166][T16020] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.008234][T16020] ? __fget_files+0x2a/0x420 [ 278.008256][T16020] ? __fget_files+0x3a0/0x420 [ 278.008290][T16020] __x64_sys_sendmsg+0x19b/0x260 [ 278.008312][T16020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.008343][T16020] ? rcu_is_watching+0x15/0xb0 [ 278.008366][T16020] ? do_syscall_64+0xbe/0x3b0 [ 278.008388][T16020] do_syscall_64+0xfa/0x3b0 [ 278.008403][T16020] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.008424][T16020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.008441][T16020] ? clear_bhb_loop+0x60/0xb0 [ 278.008463][T16020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.008479][T16020] RIP: 0033:0x7f128d38ebe9 [ 278.008496][T16020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.008511][T16020] RSP: 002b:00007f128e219038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.008530][T16020] RAX: ffffffffffffffda RBX: 00007f128d5c5fa0 RCX: 00007f128d38ebe9 [ 278.008543][T16020] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 278.008554][T16020] RBP: 00007f128d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 278.008564][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.008575][T16020] R13: 00007f128d5c6038 R14: 00007f128d5c5fa0 R15: 00007ffcfe98ff28 [ 278.008608][T16020] [ 278.522273][T15707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.599133][T15707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.659196][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.668381][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.682545][T16026] netlink: 'syz.3.3016': attribute type 49 has an invalid length. [ 278.727307][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.738542][T16023] __nla_validate_parse: 3 callbacks suppressed [ 278.738557][T16023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'. [ 278.745287][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.841883][T16024] vlan2: entered promiscuous mode [ 278.847657][T16024] bridge0: entered promiscuous mode [ 278.949354][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.997388][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.099195][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.116842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.410609][T16063] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3028'. [ 279.708725][T16076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3030'. [ 279.848952][T16082] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.3033'. [ 279.888495][T16076] lo speed is unknown, defaulting to 1000 [ 279.944860][ T5871] Bluetooth: hci4: command tx timeout [ 280.058256][T16088] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 280.106062][T16088] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3035'. [ 280.427879][ T5865] syz_tun (unregistering): left allmulticast mode [ 280.441303][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.457338][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.468193][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.470931][ T5865] syz_tun (unregistering): left promiscuous mode [ 280.484666][ T5865] bridge0: port 2(syz_tun) entered disabled state [ 280.494497][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.505736][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.574137][T16104] : renamed from hsr0 (while UP) [ 280.823873][T16101] lo speed is unknown, defaulting to 1000 [ 280.992309][T16129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.999603][T16129] IPv6: NLM_F_CREATE should be set when creating new route [ 281.006979][T16129] IPv6: NLM_F_CREATE should be set when creating new route [ 281.014195][T16129] IPv6: NLM_F_CREATE should be set when creating new route [ 281.051079][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3048'. [ 281.312936][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 281.661441][T16160] netlink: 'syz.0.3057': attribute type 39 has an invalid length. [ 281.893519][ T6049] batadv1: left allmulticast mode [ 281.911840][ T6049] batadv1: left promiscuous mode [ 281.942041][T16171] netlink: 'syz.4.3063': attribute type 39 has an invalid length. [ 281.943200][ T6049] bridge0: port 1(batadv1) entered disabled state [ 282.018256][T16179] netlink: 'syz.4.3063': attribute type 11 has an invalid length. [ 282.048160][T16179] netlink: 'syz.4.3063': attribute type 11 has an invalid length. [ 282.082379][T16179] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3063'. [ 282.295638][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3065'. [ 282.313050][T16191] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3065'. [ 282.444591][ T6049] bond3 (unregistering): (slave geneve2): Releasing active interface [ 282.575112][ T5877] Bluetooth: hci1: command tx timeout [ 282.944293][ T6049] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.953984][ T6049] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.964393][ T6049] ` (unregistering): (slave team0): Releasing backup interface [ 282.977551][ T6049] ` (unregistering): Released all slaves [ 283.073628][ T6049] bond1 (unregistering): Released all slaves [ 283.179559][ T6049] bond2 (unregistering): Released all slaves [ 283.273309][ T6049] bond3 (unregistering): Released all slaves [ 283.301200][ T6049] bond0 (unregistering): Released all slaves [ 283.401537][ T6049] bond4 (unregistering): Released all slaves [ 283.497762][ T6049] bond5 (unregistering): Released all slaves [ 283.512509][ T6049] bond6 (unregistering): Released all slaves [ 283.527233][ T6049] bond7 (unregistering): Released all slaves [ 283.671907][ T6049] : left promiscuous mode [ 283.773075][T16101] chnl_net:caif_netlink_parms(): no params data found [ 283.820857][T16201] pim6reg: entered allmulticast mode [ 283.855092][ T6049] tipc: Left network mode [ 283.859770][T16201] pim6reg: left allmulticast mode [ 284.090762][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 284.248168][T16101] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.264187][T16101] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.272867][T16101] bridge_slave_0: entered allmulticast mode [ 284.281109][T16101] bridge_slave_0: entered promiscuous mode [ 284.351796][T16101] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.364654][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.376786][T16101] bridge_slave_1: entered allmulticast mode [ 284.384611][T16101] bridge_slave_1: entered promiscuous mode [ 284.575607][ T97] block nbd2: Possible stuck request ffff8880255ae000: control (read@0,1024B). Runtime 90 seconds [ 284.586502][ T97] block nbd2: Possible stuck request ffff8880255ae1c0: control (read@1024,1024B). Runtime 90 seconds [ 284.597920][ T97] block nbd2: Possible stuck request ffff8880255ae380: control (read@2048,1024B). Runtime 90 seconds [ 284.608997][ T97] block nbd2: Possible stuck request ffff8880255ae540: control (read@3072,1024B). Runtime 90 seconds [ 284.655065][ T5877] Bluetooth: hci1: command tx timeout [ 284.699427][T16101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.743448][T16101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.959210][T16256] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.005741][T16260] netlink: 'syz.0.3083': attribute type 10 has an invalid length. [ 285.060027][T16101] team0: Port device team_slave_0 added [ 285.119427][T16101] team0: Port device team_slave_1 added [ 285.149483][T16256] tipc: Enabled bearer , priority 0 [ 285.423709][T16256] tipc: Resetting bearer [ 285.491799][ T6049] hsr_slave_0: left promiscuous mode [ 285.498903][ T6049] hsr_slave_1: left promiscuous mode [ 285.511285][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.520743][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.544569][T16275] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 285.657020][T16278] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 285.666989][T16278] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3086'. [ 285.712595][ T6049] vlan1 (unregistering): left allmulticast mode [ 285.720097][ T6049] veth0_vlan (unregistering): left allmulticast mode [ 285.972777][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 286.017704][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 286.367618][T16101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.375222][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.401393][T16101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.416166][T16101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.423285][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.451705][T16101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.480811][T16254] tipc: Resetting bearer [ 286.506950][T16254] tipc: Disabling bearer [ 286.713302][T16283] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.737125][ T5877] Bluetooth: hci1: command tx timeout [ 286.978282][T16101] hsr_slave_0: entered promiscuous mode [ 286.992446][T16101] hsr_slave_1: entered promiscuous mode [ 287.004166][T16101] debugfs: 'hsr0' already exists in 'hsr' [ 287.011012][T16101] Cannot create hsr debugfs directory [ 287.218834][T16303] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 287.260710][ T6049] IPVS: stop unused estimator thread 0... [ 287.690906][T16331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.799403][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'. [ 287.821794][T16331] lo speed is unknown, defaulting to 1000 [ 287.947552][T16339] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3105'. [ 288.246223][T16346] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 288.249289][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 288.273600][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3106'. [ 288.545775][T16366] geneve3: entered promiscuous mode [ 288.551012][T16366] geneve3: entered allmulticast mode [ 288.567280][ T6049] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 288.577355][ T6049] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 288.589245][ T6049] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 288.598716][ T6049] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 288.815427][ T5877] Bluetooth: hci1: command tx timeout [ 288.838973][T16371] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 288.849041][T16371] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3112'. [ 288.859116][T16371] xt_socket: unknown flags 0xd0 [ 289.051414][T16101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.102491][T16101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.162604][T16101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.211164][T16101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.320449][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3121'. [ 289.514110][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3123'. [ 289.525338][T16415] netlink: 'syz.4.3124': attribute type 6 has an invalid length. [ 289.533997][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.589459][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.610627][T16417] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 289.631599][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.638790][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.672556][T16415] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3124'. [ 289.682934][T16415] unsupported nlmsg_type 40 [ 289.689800][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.696240][T16415] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3124'. [ 289.696995][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.803317][T16426] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 [ 289.886737][T16428] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 289.906008][T16428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3128'. [ 290.112868][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3132'. [ 290.363513][T16101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.378884][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 290.394481][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 290.432678][T16459] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3137'. [ 290.452694][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 290.583285][T16464] syzkaller1: entered promiscuous mode [ 290.604778][T16464] syzkaller1: entered allmulticast mode [ 290.619479][T16101] veth0_vlan: entered promiscuous mode [ 290.626560][T16464] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 290.651412][T16101] veth1_vlan: entered promiscuous mode [ 290.744096][T16475] pim6reg1: entered promiscuous mode [ 290.752271][T16475] pim6reg1: entered allmulticast mode [ 290.754040][T16477] netlink: 'syz.4.3144': attribute type 3 has an invalid length. [ 290.896061][T16486] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 290.904197][T16486] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 290.968941][T16101] veth0_macvtap: entered promiscuous mode [ 291.016084][T16101] veth1_macvtap: entered promiscuous mode [ 291.141012][T16101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.186929][T16101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.214416][ T8332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.223688][ T5877] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 291.233124][ T8332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.254181][ T8332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.275548][ T8332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.550597][T16515] lo speed is unknown, defaulting to 1000 [ 291.572778][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.600631][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.726851][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.740719][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.000735][T16532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.011131][T16532] netlink: 'syz.4.3160': attribute type 4 has an invalid length. [ 292.037384][T16532] netlink: 'syz.4.3160': attribute type 4 has an invalid length. [ 293.416593][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.429140][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.442227][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.469440][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.477436][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.711163][ T5860] syz_tun (unregistering): left allmulticast mode [ 293.804580][ C1] vcan0: j1939_session_tx_dat: 0xffff88803153d800: queue data error: -100 [ 294.037968][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.077866][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.092500][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 294.112975][ T6049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 294.152087][T16585] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 294.169629][T16585] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 294.198560][T16572] lo speed is unknown, defaulting to 1000 [ 294.239553][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.264866][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.285742][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 294.304864][ T6049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 294.459894][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.485405][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.509263][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 294.538944][ T6049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 294.654470][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.666929][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.686879][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 294.710163][ T6049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 294.732827][T16599] tipc: Started in network mode [ 294.741759][T16599] tipc: Node identity , cluster identity 4711 [ 294.748577][T16599] tipc: Failed to set node id, please configure manually [ 294.760555][T16599] tipc: Enabling of bearer rejected, failed to enable media [ 295.035325][ T6049] batadv1: left allmulticast mode [ 295.043534][ T6049] batadv1: left promiscuous mode [ 295.050463][ T6049] bridge0: port 2(batadv1) entered disabled state [ 295.061899][ T6049] bridge_slave_0: left allmulticast mode [ 295.068095][ T6049] bridge_slave_0: left promiscuous mode [ 295.074029][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.541803][ T5871] Bluetooth: hci0: command tx timeout [ 295.612710][T16622] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 295.742602][T16624] netlink: 'syz.4.3184': attribute type 18 has an invalid length. [ 295.817186][T16625] __nla_validate_parse: 3 callbacks suppressed [ 295.817204][T16625] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3184'. [ 296.318554][ T6049] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 296.334559][ T6049] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 62:36:5b:8d:a0:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 296.565885][ T6049] bond1 (unregistering): (slave gretap0): Releasing active interface [ 296.589450][ T6049] bond5 (unregistering): (slave gretap1): Releasing active interface [ 296.645368][ T6049] dvmrp0 (unregistering): left allmulticast mode [ 297.020388][ T6049] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 297.029872][ T6049] !€ÿ: left allmulticast mode [ 297.040493][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.050504][ T6049] bond_slave_1: left allmulticast mode [ 297.059467][ T6049] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 297.069522][ T6049] bridge_slave_1: left allmulticast mode [ 297.076204][ T6049] bond0 (unregistering): Released all slaves [ 297.175133][ T6049] bond1 (unregistering): Released all slaves [ 297.189983][ T6049] bond2 (unregistering): (slave veth5): Releasing backup interface [ 297.199602][ T6049] bond2 (unregistering): Released all slaves [ 297.302050][ T6049] bond3 (unregistering): Released all slaves [ 297.389785][ T55] block nbd1: Possible stuck request ffff888025555080: control (read@0,1024B). Runtime 120 seconds [ 297.400702][ T55] block nbd1: Possible stuck request ffff888025555240: control (read@1024,1024B). Runtime 120 seconds [ 297.411755][ T55] block nbd1: Possible stuck request ffff888025555400: control (read@2048,1024B). Runtime 120 seconds [ 297.423444][ T55] block nbd1: Possible stuck request ffff8880255555c0: control (read@3072,1024B). Runtime 120 seconds [ 297.436464][ T6049] bond4 (unregistering): Released all slaves [ 297.536878][ T6049] bond5 (unregistering): Released all slaves [ 297.551054][ T6049] bond6 (unregistering): Released all slaves [ 297.564812][ T6049] bond7 (unregistering): (slave veth17): Releasing backup interface [ 297.574433][ T6049] bond7 (unregistering): Released all slaves [ 297.614798][ T5871] Bluetooth: hci0: command tx timeout [ 297.724172][T16644] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3186'. [ 297.753409][T16630] syzkaller0: entered promiscuous mode [ 297.759001][T16630] syzkaller0: entered allmulticast mode [ 297.771314][T16572] chnl_net:caif_netlink_parms(): no params data found [ 297.805325][ T6049] tipc: Disabling bearer [ 297.831060][ T6049] tipc: Left network mode [ 298.137141][T16652] syzkaller0: entered allmulticast mode [ 298.213834][T16572] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.221523][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.230276][T16572] bridge_slave_0: entered allmulticast mode [ 298.237889][T16572] bridge_slave_0: entered promiscuous mode [ 298.245580][T16652] tipc: Started in network mode [ 298.250466][T16652] tipc: Node identity , cluster identity 4711 [ 298.258834][T16652] tipc: Failed to obtain node identity [ 298.264422][T16652] tipc: Enabling of bearer rejected, failed to enable media [ 298.283920][T16572] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.291480][T16572] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.298984][T16572] bridge_slave_1: entered allmulticast mode [ 298.306999][T16572] bridge_slave_1: entered promiscuous mode [ 299.705501][ T5871] Bluetooth: hci0: command tx timeout [ 299.791125][T16572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.831825][T16675] vlan2: entered promiscuous mode [ 299.844193][T16675] bridge0: entered promiscuous mode [ 299.961032][T16572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.976796][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 300.124085][T16572] team0: Port device team_slave_0 added [ 300.133793][T16572] team0: Port device team_slave_1 added [ 300.204514][T16693] bridge_slave_0: entered allmulticast mode [ 300.258533][T16692] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 300.281569][T16696] bridge_slave_0: entered promiscuous mode [ 300.340633][T16698] dvmrp0: entered allmulticast mode [ 300.386355][T16572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.398947][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.426909][T16572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.433362][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 300.447898][T16698] dvmrp0: left allmulticast mode [ 300.453730][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 300.487471][T16572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.506309][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.534384][T16572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.643415][T16714] netlink: 'syz.4.3206': attribute type 4 has an invalid length. [ 300.841057][T16572] hsr_slave_0: entered promiscuous mode [ 300.863909][T16572] hsr_slave_1: entered promiscuous mode [ 300.883099][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3209'. [ 300.893425][T16572] debugfs: 'hsr0' already exists in 'hsr' [ 300.913955][T16690] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 300.914445][T16572] Cannot create hsr debugfs directory [ 301.108977][T16732] gretap1: entered allmulticast mode [ 301.171050][ T6049] hsr_slave_0: left promiscuous mode [ 301.189142][ T6049] hsr_slave_1: left promiscuous mode [ 301.221521][ T6049] veth1_macvtap: left promiscuous mode [ 301.232224][ T6049] veth0_macvtap: left promiscuous mode [ 301.238352][ T6049] veth1_vlan: left promiscuous mode [ 301.248648][ T6049] veth0_vlan: left promiscuous mode [ 301.785669][ T5871] Bluetooth: hci0: command tx timeout [ 301.994806][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 302.033095][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 302.174827][ T5871] Bluetooth: hci4: command 0x0401 tx timeout [ 302.432742][ T1155] smc: removing ib device syz0 [ 302.485673][T16736] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3212'. [ 302.534094][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.664562][T16760] netlink: 'syz.0.3216': attribute type 11 has an invalid length. [ 302.878706][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3219'. [ 302.889831][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3219'. [ 302.943141][T16775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3220'. [ 303.171826][ T55] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 210 seconds [ 303.183156][ T55] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 210 seconds [ 303.195636][ T55] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 210 seconds [ 303.207373][ T55] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 210 seconds [ 303.225244][T16786] netlink: 'syz.4.3222': attribute type 33 has an invalid length. [ 303.238606][T16786] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3222'. [ 303.509854][T16792] lo: left promiscuous mode [ 303.514558][T16792] tunl0: left promiscuous mode [ 303.523517][T16792] gre0: left promiscuous mode [ 303.636986][T16792] ip6erspan0: left promiscuous mode [ 303.806067][T16795] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 303.896639][T16797] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3228'. [ 304.231510][T16807] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 304.243086][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 304.261572][T16815] netlink: 'syz.2.3231': attribute type 3 has an invalid length. [ 304.273700][T16815] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 304.281826][T16809] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 304.368549][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 304.379292][T16815] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3231'. [ 304.652827][T16572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.681897][T16572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.713488][T16572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.741514][T16572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.007022][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.090763][T16572] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.121200][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.128419][ T8332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.231613][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.238807][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.287370][T16848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.294952][T16848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.312545][T16848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.331251][T16848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.438946][ T6049] IPVS: stop unused estimator thread 0... [ 305.782048][T16872] netlink: 'syz.0.3247': attribute type 10 has an invalid length. [ 305.807611][T16872] team0: Device ipvlan1 failed to register rx_handler [ 305.969265][T16882] netlink: 'syz.2.3251': attribute type 7 has an invalid length. [ 305.988122][T16880] tipc: Started in network mode [ 305.993034][T16880] tipc: Node identity 66dc179d2bd, cluster identity 4711 [ 306.007193][T16880] tipc: Enabled bearer , priority 0 [ 306.030599][T16872] tipc: Enabling of bearer rejected, already enabled [ 306.037881][T16886] __nla_validate_parse: 5 callbacks suppressed [ 306.037898][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 306.066617][T16870] tipc: Resetting bearer [ 306.576077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.055809][ T5961] tipc: Node number set to 1292638109 [ 307.613732][T16870] tipc: Disabling bearer [ 307.673068][T16572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.807126][T16907] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3258'. [ 307.820812][T16907] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.957630][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 307.975533][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'. [ 308.088576][T16572] veth0_vlan: entered promiscuous mode [ 308.159875][T16572] veth1_vlan: entered promiscuous mode [ 308.183992][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3265'. [ 308.266369][T16572] veth0_macvtap: entered promiscuous mode [ 308.283749][T16572] veth1_macvtap: entered promiscuous mode [ 308.343262][T16572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.373658][T16572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.396318][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.425708][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.469648][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.485505][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.602557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.620371][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.680111][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.691179][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.691304][T16955] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3272'. [ 308.810541][T16961] netlink: 'syz.1.3165': attribute type 23 has an invalid length. [ 309.170300][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 309.275498][T16983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3279'. [ 309.560480][T16997] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3284'. [ 309.595536][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'. [ 310.051689][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.063537][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.072812][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.082821][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.091008][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.400569][T17026] tipc: Started in network mode [ 310.406154][T17026] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 310.415775][T17026] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 310.427360][T17026] tipc: Enabled bearer , priority 10 [ 310.522749][T17019] chnl_net:caif_netlink_parms(): no params data found [ 310.771347][T17019] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.816263][T17019] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.835589][T17019] bridge_slave_0: entered allmulticast mode [ 310.843473][T17019] bridge_slave_0: entered promiscuous mode [ 310.852903][T17019] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.860518][T17019] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.868757][T17019] bridge_slave_1: entered allmulticast mode [ 310.877516][T17019] bridge_slave_1: entered promiscuous mode [ 310.901231][T17040] macvlan0: entered promiscuous mode [ 310.915683][T17040] macvlan0: entered allmulticast mode [ 311.048606][T17019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.073827][T17019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.232826][T17019] team0: Port device team_slave_0 added [ 311.271631][T17019] team0: Port device team_slave_1 added [ 311.295720][T17055] nbd3: detected capacity change from 0 to 127 [ 311.377431][ T5871] block nbd3: Receive control failed (result -104) [ 311.413967][T17019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.423059][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.451057][T17019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.491968][T17019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.499145][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.528992][T17019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.542467][ T5871] Bluetooth: hci0: command tx timeout [ 311.548480][ T56] tipc: Node number set to 1 [ 311.561820][T17071] __nla_validate_parse: 3 callbacks suppressed [ 311.561835][T17071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3303'. [ 311.656075][T17019] hsr_slave_0: entered promiscuous mode [ 311.683099][T17019] hsr_slave_1: entered promiscuous mode [ 311.704527][T17019] debugfs: 'hsr0' already exists in 'hsr' [ 311.714236][T17019] Cannot create hsr debugfs directory [ 311.755038][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3305'. [ 311.774232][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3305'. [ 311.821584][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3304'. [ 311.965470][T17082] openvswitch: netlink: Key type 85 is out of range max 32 [ 312.033305][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 312.185692][ T5871] Bluetooth: hci2: command tx timeout [ 312.747617][T17019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.802226][T17019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.833116][T17019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.928366][T17019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.062961][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3314'. [ 313.426602][T17019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.521649][T17019] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.572542][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.579788][ T8332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.661361][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.668622][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.957858][T17160] sctp: [Deprecated]: syz.0.3323 (pid 17160) Use of int in max_burst socket option. [ 313.957858][T17160] Use struct sctp_assoc_value instead [ 314.066595][T17160] netlink: 'syz.0.3323': attribute type 21 has an invalid length. [ 314.077099][T17160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3323'. [ 314.256252][ T5871] Bluetooth: hci2: command tx timeout [ 314.308046][T17019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.423929][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'. [ 314.498500][T17019] veth0_vlan: entered promiscuous mode [ 314.523789][T17019] veth1_vlan: entered promiscuous mode [ 314.654866][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.665621][T17019] veth0_macvtap: entered promiscuous mode [ 314.671636][ T97] block nbd2: Possible stuck request ffff8880255ae000: control (read@0,1024B). Runtime 120 seconds [ 314.681204][T17019] veth1_macvtap: entered promiscuous mode [ 314.688378][ T97] block nbd2: Possible stuck request ffff8880255ae1c0: control (read@1024,1024B). Runtime 120 seconds [ 314.699416][ T97] block nbd2: Possible stuck request ffff8880255ae380: control (read@2048,1024B). Runtime 120 seconds [ 314.710753][ T97] block nbd2: Possible stuck request ffff8880255ae540: control (read@3072,1024B). Runtime 120 seconds [ 314.907685][T17019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.954589][T17019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.011080][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.040896][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.060889][T17193] Unsupported ieee802154 address type: 0 [ 315.088201][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.110588][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.132359][T17157] infiniband syz2: set active [ 315.152224][T17157] infiniband syz2: added bond_slave_0 [ 315.158276][T17193] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 315.167831][T17157] syz2: rxe_create_cq: returned err = -12 [ 315.176014][T17157] infiniband syz2: Couldn't create ib_mad CQ [ 315.182318][T17157] infiniband syz2: Couldn't open port 1 [ 315.195164][T17197] : renamed from bridge_slave_0 (while UP) [ 315.212861][T17199] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3333'. [ 315.323591][T17157] RDS/IB: syz2: added [ 315.336268][T17157] smc: adding ib device syz2 with port count 1 [ 315.351078][T17157] smc: ib device syz2 port 1 has pnetid [ 315.420348][ T8332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.450528][ T8332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.558775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.572099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.334888][ T5871] Bluetooth: hci2: command tx timeout [ 316.525995][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 316.781745][T17253] __nla_validate_parse: 1 callbacks suppressed [ 316.781762][T17253] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3349'. [ 316.981285][T17259] netlink: 'syz.0.3351': attribute type 1 has an invalid length. [ 317.098740][T17259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.141770][T17263] bond1: (slave gretap1): making interface the new active one [ 317.151766][T17263] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 317.168999][T17267] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 317.220786][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.572057][T17286] syzkaller0: entered promiscuous mode [ 317.577768][T17286] syzkaller0: entered allmulticast mode [ 318.419172][ T5871] Bluetooth: hci2: command tx timeout [ 318.984949][ T5233] udevd[5233]: worker [6001] /devices/virtual/block/nbd0 timeout; kill it [ 318.993702][ T5233] udevd[5233]: seq 11389 '/devices/virtual/block/nbd0' killed [ 319.368515][T17302] Bluetooth: MGMT ver 1.23 [ 319.498361][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 319.525381][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 319.742947][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.751556][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.066742][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.092243][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.355116][T17302] vlan2: left promiscuous mode [ 320.359995][T17302] bridge0: left promiscuous mode [ 320.444802][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.446014][T17328] netlink: 'syz.0.3366': attribute type 13 has an invalid length. [ 320.463086][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.483797][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.493096][ T1104] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.916359][T17347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 321.145197][T17355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.152476][T17355] IPv6: NLM_F_CREATE should be set when creating new route [ 321.346546][T17359] netlink: 'syz.1.3377': attribute type 11 has an invalid length. [ 321.354502][T17359] netlink: 'syz.1.3377': attribute type 11 has an invalid length. [ 321.364625][T17359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3377'. [ 321.595355][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 321.631131][T17359] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3377'. [ 321.857574][T17372] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 321.981466][T17372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.045019][T17377] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 322.093082][T17379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.358168][T17394] netlink: 'syz.4.3388': attribute type 1 has an invalid length. [ 322.425658][T17394] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3388'. [ 322.625905][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 323.038532][T17411] netlink: 'syz.4.3393': attribute type 10 has an invalid length. [ 323.095619][T17411] netlink: 'syz.4.3393': attribute type 10 has an invalid length. [ 323.199140][T17411] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 323.259761][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3394'. [ 323.411182][T17412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.761140][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 323.836073][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 323.865293][T17441] netlink: 'syz.3.3400': attribute type 2 has an invalid length. [ 323.872618][T17438] netlink: 'syz.4.3398': attribute type 6 has an invalid length. [ 324.009281][T17450] netlink: 'syz.0.3401': attribute type 6 has an invalid length. [ 324.044219][T17452] smc: net device erspan0 applied user defined pnetid SYZ0 [ 324.189672][T17462] netlink: 'syz.0.3405': attribute type 32 has an invalid length. [ 324.481231][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 324.722790][T17492] netlink: 'syz.0.3412': attribute type 12 has an invalid length. [ 325.188579][T17528] bridge0: port 3(team0) entered blocking state [ 325.197069][T17528] bridge0: port 3(team0) entered disabled state [ 325.203725][T17528] team0: entered allmulticast mode [ 325.212653][T17528] team_slave_0: entered allmulticast mode [ 325.232333][T17528] team_slave_1: entered allmulticast mode [ 325.257071][T17528] team0: entered promiscuous mode [ 325.272444][T17528] team_slave_0: entered promiscuous mode [ 325.287008][T17528] team_slave_1: entered promiscuous mode [ 325.362757][T17538] : entered promiscuous mode [ 325.390654][T17530] IPVS: Error connecting to the multicast addr [ 325.577056][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 325.587171][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 325.603153][T17551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3427'. [ 325.799938][T17566] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3433'. [ 325.983756][T17576] bridge2: entered promiscuous mode [ 325.989536][T17576] bridge2: entered allmulticast mode [ 326.016159][T17579] bridge3: entered promiscuous mode [ 326.021403][T17579] bridge3: entered allmulticast mode [ 326.097635][T17581] vlan2: entered promiscuous mode [ 326.102798][T17581] vlan2: entered allmulticast mode [ 326.109137][T17581] hsr_slave_1: entered allmulticast mode [ 326.570307][T17595] tipc: Started in network mode [ 326.575868][T17595] tipc: Node identity 22e4a7730eb8, cluster identity 4711 [ 326.583179][T17595] tipc: Enabled bearer , priority 0 [ 326.610004][T17595] syzkaller0: entered promiscuous mode [ 326.631465][T17595] syzkaller0: entered allmulticast mode [ 326.754297][T17594] tipc: Resetting bearer [ 326.833438][T17594] tipc: Disabling bearer [ 327.069160][T17618] bridge2: entered promiscuous mode [ 327.074406][T17618] bridge2: entered allmulticast mode [ 327.227824][T17630] tipc: Enabled bearer , priority 0 [ 327.234545][T17626] validate_nla: 1 callbacks suppressed [ 327.234561][T17626] netlink: 'syz.4.3454': attribute type 4 has an invalid length. [ 327.264086][T17623] tipc: Resetting bearer [ 327.339007][T17622] tipc: Disabling bearer [ 327.383679][T17640] netlink: 'syz.2.3459': attribute type 7 has an invalid length. [ 327.443707][T17640] : entered promiscuous mode [ 327.481118][ T55] block nbd1: Possible stuck request ffff888025555080: control (read@0,1024B). Runtime 150 seconds [ 327.492240][ T55] block nbd1: Possible stuck request ffff888025555240: control (read@1024,1024B). Runtime 150 seconds [ 327.503934][ T55] block nbd1: Possible stuck request ffff888025555400: control (read@2048,1024B). Runtime 150 seconds [ 327.515223][ T55] block nbd1: Possible stuck request ffff8880255555c0: control (read@3072,1024B). Runtime 150 seconds [ 327.724481][T17648] __nla_validate_parse: 4 callbacks suppressed [ 327.724500][T17648] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3462'. [ 327.984745][T17653] netlink: 'syz.2.3464': attribute type 12 has an invalid length. [ 328.277520][T17659] netlink: 'syz.3.3467': attribute type 16 has an invalid length. [ 328.305668][T17659] netlink: 'syz.3.3467': attribute type 17 has an invalid length. [ 328.411724][T17659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.660410][T17682] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 329.010382][T17699] veth0_to_bridge: entered promiscuous mode [ 329.021708][T17699] veth0_to_bridge: left promiscuous mode [ 329.190100][T17710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3484'. [ 329.212750][T17710] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3484'. [ 329.242934][T17711] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 329.496666][T17726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3491'. [ 329.703444][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3495'. [ 329.732303][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3495'. [ 329.855020][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 329.866576][T17753] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3499'. [ 329.877513][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 329.878552][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 329.903875][T17754] lo: entered allmulticast mode [ 329.932265][T17754] lo: left allmulticast mode [ 329.949691][ T6049] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.959420][ T6049] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.979461][ T6049] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.018829][ T6049] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.033496][T17710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.040096][T17710] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 330.131360][T17710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.138830][T17768] sctp: [Deprecated]: syz.2.3506 (pid 17768) Use of int in maxseg socket option. [ 330.138830][T17768] Use struct sctp_assoc_value instead [ 330.142414][T17710] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 330.168027][T17764] syzkaller1: entered promiscuous mode [ 330.173571][T17764] syzkaller1: entered allmulticast mode [ 330.302109][T17710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 330.338421][T17710] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 330.377298][ T5871] block nbd4: Receive control failed (result -32) [ 330.557510][T17710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.584563][T17710] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 330.655236][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.832860][T17809] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 331.019610][T17823] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 331.179998][T17822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.201269][T17822] bond2: (slave bond3): making interface the new active one [ 331.211368][T17822] bond2: (slave bond3): Enslaving as an active interface with an up link [ 331.253292][T17823] bond2: entered promiscuous mode [ 331.301586][T17823] bond3: entered promiscuous mode [ 331.311088][T17823] bond2: entered allmulticast mode [ 331.325555][T17823] bond3: entered allmulticast mode [ 331.342261][T17823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.345561][T17907] netlink: 'syz.4.3543': attribute type 1 has an invalid length. [ 332.421294][T17907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.472904][T17913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.481950][T17913] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 332.495543][T17913] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 332.580321][T17907] veth3: entered promiscuous mode [ 332.595585][T17907] bond4: (slave veth3): Enslaving as an active interface with a down link [ 332.610276][T17918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.730914][T17928] __nla_validate_parse: 11 callbacks suppressed [ 332.730934][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 332.779340][T17926] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 332.792518][T17928] tipc: Started in network mode [ 332.798025][T17928] tipc: Node identity 720c13250d4c, cluster identity 4711 [ 332.804010][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3547'. [ 332.815053][T17928] tipc: Enabled bearer , priority 0 [ 332.850424][T17926] team0: Port device geneve0 added [ 332.869595][T17928] syzkaller0: entered promiscuous mode [ 332.880474][T17928] syzkaller0: entered allmulticast mode [ 332.928834][T17928] tipc: Resetting bearer [ 332.958451][T17927] tipc: Resetting bearer [ 332.993369][T17927] tipc: Disabling bearer [ 333.121125][T17943] openvswitch: netlink: IP tunnel dst address not specified [ 333.167702][T17948] bridge0: port 4(batadv1) entered blocking state [ 333.171116][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 333.174244][T17948] bridge0: port 4(batadv1) entered disabled state [ 333.220202][T17948] batadv1: entered allmulticast mode [ 333.228678][ T55] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 240 seconds [ 333.228758][T17948] batadv1: entered promiscuous mode [ 333.244428][ T55] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 240 seconds [ 333.256061][ T55] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 240 seconds [ 333.268204][ T55] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 240 seconds [ 333.368822][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 333.501924][T17966] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 333.544794][T17966] CPU: 1 UID: 0 PID: 17966 Comm: syz.1.3559 Not tainted syzkaller #0 PREEMPT(full) [ 333.544820][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.544838][T17966] Call Trace: [ 333.544846][T17966] [ 333.544855][T17966] dump_stack_lvl+0x189/0x250 [ 333.544886][T17966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.544908][T17966] ? __pfx__printk+0x10/0x10 [ 333.544937][T17966] ? kernfs_path_from_node+0x2f/0x290 [ 333.544954][T17966] ? kernfs_path_from_node+0x250/0x290 [ 333.544969][T17966] ? kernfs_path_from_node+0x2f/0x290 [ 333.544992][T17966] sysfs_warn_dup+0x8e/0xa0 [ 333.545009][T17966] sysfs_do_create_link_sd+0xc0/0x110 [ 333.545029][T17966] device_add_class_symlinks+0x1cf/0x240 [ 333.545054][T17966] device_add+0x475/0xb50 [ 333.545079][T17966] wiphy_register+0x1ba6/0x28d0 [ 333.545123][T17966] ? __pfx_wiphy_register+0x10/0x10 [ 333.545146][T17966] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 333.545176][T17966] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 333.545201][T17966] ieee80211_register_hw+0x3425/0x4080 [ 333.545248][T17966] ? ieee80211_register_hw+0x14e1/0x4080 [ 333.545277][T17966] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 333.545303][T17966] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.545336][T17966] ? __hrtimer_setup+0x187/0x210 [ 333.545352][T17966] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 333.545380][T17966] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 333.545436][T17966] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 333.545458][T17966] ? trace_kmalloc+0x1f/0xd0 [ 333.545477][T17966] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 333.545498][T17966] ? kstrndup+0xbf/0x160 [ 333.545528][T17966] hwsim_new_radio_nl+0xea4/0x1b10 [ 333.545553][T17966] ? __pfx___nla_validate_parse+0x10/0x10 [ 333.545593][T17966] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.545631][T17966] ? __nla_parse+0x40/0x60 [ 333.545656][T17966] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 333.545686][T17966] genl_family_rcv_msg_doit+0x215/0x300 [ 333.545715][T17966] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 333.545750][T17966] ? bpf_lsm_capable+0x9/0x20 [ 333.545771][T17966] ? security_capable+0x7e/0x2e0 [ 333.545801][T17966] genl_rcv_msg+0x60e/0x790 [ 333.545829][T17966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.545849][T17966] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 333.545887][T17966] netlink_rcv_skb+0x205/0x470 [ 333.545909][T17966] ? __lock_acquire+0xab9/0xd20 [ 333.545933][T17966] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.545955][T17966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.546001][T17966] ? down_read+0x1ad/0x2e0 [ 333.546021][T17966] genl_rcv+0x28/0x40 [ 333.546039][T17966] netlink_unicast+0x82c/0x9e0 [ 333.546069][T17966] ? __pfx_netlink_unicast+0x10/0x10 [ 333.546093][T17966] ? netlink_sendmsg+0x642/0xb30 [ 333.546106][T17966] ? skb_put+0x11b/0x210 [ 333.546129][T17966] netlink_sendmsg+0x805/0xb30 [ 333.546156][T17966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.546177][T17966] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.546197][T17966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.546215][T17966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.546233][T17966] __sock_sendmsg+0x219/0x270 [ 333.546266][T17966] ____sys_sendmsg+0x505/0x830 [ 333.546293][T17966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.546323][T17966] ? import_iovec+0x74/0xa0 [ 333.546349][T17966] ___sys_sendmsg+0x21f/0x2a0 [ 333.546372][T17966] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.546435][T17966] ? __fget_files+0x2a/0x420 [ 333.546458][T17966] ? __fget_files+0x3a0/0x420 [ 333.546493][T17966] __x64_sys_sendmsg+0x19b/0x260 [ 333.546516][T17966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.546548][T17966] ? rcu_is_watching+0x15/0xb0 [ 333.546572][T17966] ? do_syscall_64+0xbe/0x3b0 [ 333.546594][T17966] do_syscall_64+0xfa/0x3b0 [ 333.546612][T17966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.546628][T17966] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.546646][T17966] ? clear_bhb_loop+0x60/0xb0 [ 333.546668][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.546691][T17966] RIP: 0033:0x7f452af8ebe9 [ 333.546709][T17966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.546724][T17966] RSP: 002b:00007f452bea5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.546744][T17966] RAX: ffffffffffffffda RBX: 00007f452b1c5fa0 RCX: 00007f452af8ebe9 [ 333.546758][T17966] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 333.546770][T17966] RBP: 00007f452b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.546781][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.546792][T17966] R13: 00007f452b1c6038 R14: 00007f452b1c5fa0 R15: 00007ffe11359f88 [ 333.546825][T17966] [ 333.587278][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3563'. [ 333.612999][T17976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3562'. [ 333.665938][ T8334] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 333.928445][T17986] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.929953][ T8334] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 334.662259][T18021] netlink: 'syz.4.3575': attribute type 2 has an invalid length. [ 334.672014][T18021] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3575'. [ 334.682359][T18021] nbd: must specify a device to reconfigure [ 334.793513][T18032] tipc: Enabled bearer , priority 0 [ 335.073499][T18026] tipc: Disabling bearer [ 335.104206][T18049] netlink: 'syz.0.3586': attribute type 30 has an invalid length. [ 335.113075][T18049] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 335.123149][T18049] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 335.349213][T18062] bridge_slave_0: left allmulticast mode [ 335.386391][T18062] bridge_slave_0: left promiscuous mode [ 335.409370][T18062] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.423817][T18062] bridge_slave_1: left allmulticast mode [ 335.440493][T18072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3591'. [ 335.450714][T18062] bridge_slave_1: left promiscuous mode [ 335.465117][T18062] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.493201][T18062] bond0: (slave bond_slave_0): Releasing backup interface [ 335.512961][T18062] bond0: (slave bond_slave_1): Releasing backup interface [ 335.556113][T18062] team0: Port device team_slave_0 removed [ 335.577063][T18062] team0: Port device team_slave_1 removed [ 335.597352][T18062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.631879][T18062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.658300][T18062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.671336][T18062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.846872][T18093] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3595'. [ 335.912212][T18096] nftables ruleset with unbound chain [ 335.996053][T18098] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 336.041876][T18107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.089912][T18107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.098787][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 336.242449][T18121] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 336.933597][T18172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.942681][T18172] team0: Failed to send port change of device bond2 via netlink (err -105) [ 336.957023][T18172] team0: Failed to send options change via netlink (err -105) [ 336.979870][T18172] team0: Port device bond2 added [ 337.429960][T18206] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 337.450676][T18209] IPv6: sit1: Disabled Multicast RS [ 337.780151][T18225] dvmrp1: entered allmulticast mode [ 337.987423][T18235] netlink: 'syz.1.3636': attribute type 1 has an invalid length. [ 338.071619][T18240] syzkaller1: entered allmulticast mode [ 338.155659][T18246] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 338.165179][T18246] __nla_validate_parse: 4 callbacks suppressed [ 338.165194][T18246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3637'. [ 338.187660][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'. [ 338.194456][T18248] netlink: 'syz.1.3638': attribute type 8 has an invalid length. [ 338.650358][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'. [ 338.674501][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'. [ 338.702108][T18280] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.722675][T18281] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.733672][T18283] netlink: 'syz.4.3650': attribute type 2 has an invalid length. [ 338.764693][T18283] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3650'. [ 338.885654][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'. [ 338.901779][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'. [ 338.928231][T18303] bridge0: port 1(vlan2) entered blocking state [ 338.942313][T18303] bridge0: port 1(vlan2) entered disabled state [ 338.950486][T18303] vlan2: entered allmulticast mode [ 338.961358][T18303] bridge0: entered allmulticast mode [ 338.974362][T18303] vlan2: left allmulticast mode [ 338.984575][T18303] bridge0: left allmulticast mode [ 339.166314][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'. [ 339.183775][T18323] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 339.191769][T18323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.216112][T18323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3661'. [ 339.230912][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3662'. [ 339.631153][T18343] syzkaller0: entered promiscuous mode [ 339.643989][T18343] syzkaller0: entered allmulticast mode [ 339.792548][T18369] netlink: 'syz.3.3673': attribute type 4 has an invalid length. [ 341.535871][ T97] block nbd3: Possible stuck request ffff8880255e5080: control (read@0,1024B). Runtime 30 seconds [ 341.547482][ T97] block nbd3: Possible stuck request ffff8880255e5240: control (read@1024,1024B). Runtime 30 seconds [ 341.558634][ T97] block nbd3: Possible stuck request ffff8880255e5400: control (read@2048,1024B). Runtime 30 seconds [ 341.569881][ T97] block nbd3: Possible stuck request ffff8880255e55c0: control (read@3072,1024B). Runtime 30 seconds [ 341.619433][T18378] syzkaller1: entered promiscuous mode [ 341.632844][T18378] syzkaller1: entered allmulticast mode [ 341.784062][T18405] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 341.806296][T18407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.833215][T18405] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 341.841544][T18407] tipc: Enabled bearer , priority 0 [ 341.869027][T18398] syzkaller0: entered promiscuous mode [ 341.874527][T18398] syzkaller0: entered allmulticast mode [ 341.968232][T18398] tipc: Resetting bearer [ 342.004349][T18397] tipc: Resetting bearer [ 342.021894][T18420] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 342.047204][T18397] tipc: Disabling bearer [ 342.717199][T18470] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 342.746797][T18470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.824084][T18478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.290308][T18497] netlink: 'syz.1.3702': attribute type 10 has an invalid length. [ 343.346966][T18507] netlink: 'syz.1.3702': attribute type 10 has an invalid length. [ 343.515688][ T8339] bond3 (unregistering): (slave bridge0): Releasing active interface [ 343.740199][ T8339] bond0 (unregistering): Released all slaves [ 343.851046][ T8339] bond1 (unregistering): Released all slaves [ 343.960929][ T8339] bond2 (unregistering): Released all slaves [ 343.974937][ T8339] bond3 (unregistering): Released all slaves [ 343.986864][T18486] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 344.041163][T18497] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.224246][T18508] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 344.244941][ T8339] tipc: Disabling bearer [ 344.347816][ T8339] tipc: Left network mode [ 344.526166][T18538] __nla_validate_parse: 10 callbacks suppressed [ 344.526184][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 344.654455][T18538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3710'. [ 344.670505][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 344.735183][ T97] block nbd2: Possible stuck request ffff8880255ae000: control (read@0,1024B). Runtime 150 seconds [ 344.751844][ T97] block nbd2: Possible stuck request ffff8880255ae1c0: control (read@1024,1024B). Runtime 150 seconds [ 344.763391][ T97] block nbd2: Possible stuck request ffff8880255ae380: control (read@2048,1024B). Runtime 150 seconds [ 344.775485][ T97] block nbd2: Possible stuck request ffff8880255ae540: control (read@3072,1024B). Runtime 150 seconds [ 344.816938][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3713'. [ 344.891983][T18554] vcan0: entered allmulticast mode [ 344.911077][T18556] netlink: 'syz.2.3716': attribute type 1 has an invalid length. [ 344.922565][T18556] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3716'. [ 345.371221][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 345.382727][T18582] x_tables: ip_tables: udp match: only valid for protocol 17 [ 345.397485][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3724'. [ 345.451429][T18574] bond5 (unregistering): Released all slaves [ 345.721679][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 345.873000][T18620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3733'. [ 346.010450][T18629] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.133890][T18605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 346.152956][T18605] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.160918][T18605] gretap1: entered allmulticast mode [ 346.186121][T18634] nbd5: detected capacity change from 0 to 127 [ 346.211698][ T5871] block nbd5: Receive control failed (result -104) [ 346.322877][T18636] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 346.363332][T18636] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3738'. [ 346.396203][T18638] netlink: 'syz.3.3739': attribute type 4 has an invalid length. [ 346.407821][T18636] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 346.530446][ T8339] hsr_slave_0: left promiscuous mode [ 346.564392][ T8339] : left allmulticast mode [ 346.580835][ T8339] veth0_vlan: left allmulticast mode [ 346.585276][T18649] sctp: [Deprecated]: syz.2.3743 (pid 18649) Use of int in max_burst socket option deprecated. [ 346.585276][T18649] Use struct sctp_assoc_value instead [ 346.587963][ T8339] : left promiscuous mode [ 346.617762][ T8339] veth1_macvtap: left promiscuous mode [ 346.627870][ T8339] veth0_macvtap: left promiscuous mode [ 346.638928][ T8339] veth1_vlan: left promiscuous mode [ 346.761519][ T8339] pim6reg527 (unregistering): left allmulticast mode [ 347.622431][T18655] tipc: Enabling of bearer rejected, failed to enable media [ 347.787990][T18667] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 348.001144][T18684] netlink: 'syz.4.3754': attribute type 3 has an invalid length. [ 348.160753][T18690] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 348.500969][T18710] netlink: 'syz.3.3762': attribute type 7 has an invalid length. [ 348.526859][ T8339] IPVS: stop unused estimator thread 0... [ 348.925735][T18735] netlink: 'syz.1.3770': attribute type 21 has an invalid length. [ 349.136434][T18741] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 349.193764][T18741] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.424415][T18754] netlink: 'syz.3.3775': attribute type 1 has an invalid length. [ 349.440779][T18741] veth7: entered promiscuous mode [ 349.465488][T18741] bond5: (slave veth7): Enslaving as an active interface with a down link [ 349.584555][T18758] bond3: entered allmulticast mode [ 349.592969][T18758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.604232][T18758] bridge0: port 3(bond3) entered blocking state [ 349.615203][T18758] bridge0: port 3(bond3) entered disabled state [ 349.654357][T18758] bond3: entered promiscuous mode [ 349.663222][T18758] bridge0: port 3(bond3) entered blocking state [ 349.669676][T18758] bridge0: port 3(bond3) entered forwarding state [ 349.676041][T18768] __nla_validate_parse: 8 callbacks suppressed [ 349.676058][T18768] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3780'. [ 349.723596][T18289] bridge0: port 3(bond3) entered disabled state [ 349.862548][T18781] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3783'. [ 350.100243][T18791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.188917][T18802] batadv_slave_1: entered promiscuous mode [ 350.212952][T18802] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3790'. [ 350.244553][T18802] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 350.247588][T18805] IPv6: sit1: Disabled Multicast RS [ 350.261454][T18805] sit1: entered allmulticast mode [ 350.284417][T18802] openvswitch: netlink: Message has 6332 unknown bytes. [ 350.408684][T18800] batadv_slave_1: left promiscuous mode [ 350.673114][ T30] audit: type=1804 audit(1756532925.439:2): pid=18831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3797" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=897 res=1 errno=0 [ 350.731964][T18834] netlink: 'syz.2.3799': attribute type 11 has an invalid length. [ 350.743177][ T30] audit: type=1800 audit(1756532925.439:3): pid=18831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3797" name="cgroup.controllers" dev="tmpfs" ino=897 res=0 errno=0 [ 350.779434][T18834] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3799'. [ 350.819339][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3801'. [ 351.048551][T18863] netlink: 'syz.0.3806': attribute type 1 has an invalid length. [ 351.279447][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 351.317711][T18883] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3814'. [ 351.371927][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'. [ 351.399034][T18891] ip6gre1: entered allmulticast mode [ 351.400127][T18892] netlink: 'syz.3.3812': attribute type 1 has an invalid length. [ 351.441271][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3813'. [ 351.785171][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3820'. [ 351.826129][T18912] netlink: 'syz.4.3820': attribute type 12 has an invalid length. [ 351.834083][T18912] netlink: 'syz.4.3820': attribute type 11 has an invalid length. [ 351.863634][T18912] netlink: 'syz.4.3820': attribute type 12 has an invalid length. [ 351.885078][T18912] netlink: 'syz.4.3820': attribute type 11 has an invalid length. [ 353.631146][T19022] bridge0: port 5(batadv2) entered blocking state [ 353.642757][T19022] bridge0: port 5(batadv2) entered disabled state [ 353.649730][T19023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.664011][T19022] batadv2: entered allmulticast mode [ 353.672123][T19022] batadv2: entered promiscuous mode [ 353.772030][T19028] validate_nla: 1 callbacks suppressed [ 353.772049][T19028] netlink: 'syz.1.3856': attribute type 1 has an invalid length. [ 353.805781][T19028] netlink: 'syz.1.3856': attribute type 21 has an invalid length. [ 353.956774][T19038] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 354.046624][T19044] netlink: 'syz.1.3861': attribute type 15 has an invalid length. [ 354.129839][ T8339] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 354.139321][ T8339] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 354.145611][T19046] netlink: 'syz.0.3855': attribute type 1 has an invalid length. [ 354.223596][T19026] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 354.236573][T19026] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 354.269647][T19046] gretap2: entered promiscuous mode [ 354.293010][T19046] bond2: (slave gretap2): making interface the new active one [ 354.306600][T19046] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 354.350766][T19057] macvlan2: entered promiscuous mode [ 354.356741][T19057] macvlan2: entered allmulticast mode [ 354.363444][T19057] bond2: entered promiscuous mode [ 354.369986][T19057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.389080][T19057] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 354.410939][T19057] bond2: left promiscuous mode [ 354.571301][T19068] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 354.718334][T19073] __nla_validate_parse: 15 callbacks suppressed [ 354.718351][T19073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3869'. [ 355.358285][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 355.407183][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 355.474625][T19096] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 355.502789][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3881'. [ 355.677604][T19113] veth3: entered allmulticast mode [ 355.780644][T19118] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 356.073852][T19131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3887'. [ 356.742212][T19164] netlink: 'syz.4.3896': attribute type 18 has an invalid length. [ 356.984407][T19177] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.417547][T19195] pim6reg: entered allmulticast mode [ 357.487944][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 357.504059][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3908'. [ 357.540415][ T55] block nbd1: Possible stuck request ffff888025555080: control (read@0,1024B). Runtime 180 seconds [ 357.552047][ T55] block nbd1: Possible stuck request ffff888025555240: control (read@1024,1024B). Runtime 180 seconds [ 357.563381][ T55] block nbd1: Possible stuck request ffff888025555400: control (read@2048,1024B). Runtime 180 seconds [ 357.574556][ T55] block nbd1: Possible stuck request ffff8880255555c0: control (read@3072,1024B). Runtime 180 seconds [ 357.669677][T19214] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 357.710676][T19212] can: request_module (can-proto-0) failed. [ 357.766212][T19214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.989828][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 358.017281][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 358.286646][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 358.385730][T19259] syzkaller1: entered promiscuous mode [ 358.407994][T19259] syzkaller1: entered allmulticast mode [ 358.575684][T19280] netlink: 'syz.3.3927': attribute type 6 has an invalid length. [ 358.586117][T19280] sctp: [Deprecated]: syz.3.3927 (pid 19280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.586117][T19280] Use struct sctp_sack_info instead [ 358.838751][T19299] netlink: 'syz.4.3932': attribute type 28 has an invalid length. [ 358.848965][T19299] netlink: 'syz.4.3932': attribute type 3 has an invalid length. [ 359.230036][T19325] openvswitch: netlink: Missing key (keys=40, expected=100) [ 359.496513][T19352] netlink: 'syz.2.3948': attribute type 2 has an invalid length. [ 359.778471][T19369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.785779][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 359.793060][T19369] IPv6: NLM_F_CREATE should be set when creating new route [ 359.844454][T19369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.109883][T19396] __nla_validate_parse: 18 callbacks suppressed [ 360.109900][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3961'. [ 360.130108][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 360.574328][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'. [ 360.590064][T19419] xfrm1: entered promiscuous mode [ 360.595268][T19419] xfrm1: entered allmulticast mode [ 360.941150][T19432] netlink: 'syz.0.3971': attribute type 1 has an invalid length. [ 360.962263][T19433] netlink: 'syz.0.3971': attribute type 1 has an invalid length. [ 360.987677][T19432] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3971'. [ 361.008900][T19433] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3971'. [ 361.091357][T19439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.140708][T19442] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3974'. [ 361.300835][T19457] netlink: 'syz.0.3978': attribute type 1 has an invalid length. [ 361.311547][T19457] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3978'. [ 361.721036][T19476] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3982'. [ 361.798494][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3985'. [ 361.811019][T19483] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 361.823896][T19483] tipc: Enabled bearer , priority 10 [ 361.884557][T19486] team0: Device gtp0 is of different type [ 361.945331][T19483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3985'. [ 362.193533][T19502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 362.227454][T19502] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.236156][T19502] gretap2: entered promiscuous mode [ 362.248146][T19502] gretap2: entered allmulticast mode [ 362.300461][T19506] dvmrp1: entered allmulticast mode [ 362.383928][T19508] bond4: entered promiscuous mode [ 362.395500][T19508] bond4: entered allmulticast mode [ 362.401138][T19508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.638588][T19517] tipc: Enabled bearer , priority 0 [ 362.650685][T19517] syzkaller0: entered promiscuous mode [ 362.662287][T19517] syzkaller0: entered allmulticast mode [ 362.727732][T19517] tipc: Resetting bearer [ 362.733770][T19517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.742318][T19517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.826724][ T5961] tipc: Node number set to 744269683 [ 362.859461][T19515] tipc: Resetting bearer [ 362.866247][T19525] netlink: 'syz.2.3996': attribute type 21 has an invalid length. [ 362.882761][T19525] netlink: 'syz.2.3996': attribute type 22 has an invalid length. [ 362.891763][T19515] tipc: Disabling bearer [ 362.896820][T19525] netlink: 'syz.2.3996': attribute type 23 has an invalid length. [ 362.906012][T19525] netlink: 'syz.2.3996': attribute type 25 has an invalid length. [ 363.315074][ T55] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 270 seconds [ 363.325933][ T55] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 270 seconds [ 363.337136][ T55] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 270 seconds [ 363.348253][ T55] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 270 seconds [ 363.371536][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.379308][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.444817][T19554] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.452064][T19554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.459676][T19554] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.466900][T19554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.526411][T19554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 363.905811][T19583] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 363.915496][T19583] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 363.923946][T19583] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 363.935405][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.965397][T19582] validate_nla: 2 callbacks suppressed [ 363.965415][T19582] netlink: 'syz.4.4013': attribute type 2 has an invalid length. [ 364.122054][T19595] macvlan3: entered promiscuous mode [ 364.127894][T19595] macvlan3: entered allmulticast mode [ 364.136057][T19595] bond1: entered promiscuous mode [ 364.142011][T19595] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 364.172939][T19595] bond1: left promiscuous mode [ 364.310591][T19605] netlink: 'syz.0.4019': attribute type 6 has an invalid length. [ 364.333346][T19607] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 364.353312][T19605] netlink: 'syz.0.4019': attribute type 6 has an invalid length. [ 364.443839][T19607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.502284][T19610] bond2: (slave geneve2): making interface the new active one [ 364.531947][T19610] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 364.950973][T19626] bridge_slave_1 (unregistering): left allmulticast mode [ 364.964414][T19626] bridge_slave_1 (unregistering): left promiscuous mode [ 364.977946][T19626] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.301301][T19651] netlink: 'syz.1.4033': attribute type 1 has an invalid length. [ 365.315368][T19651] __nla_validate_parse: 8 callbacks suppressed [ 365.315383][T19651] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4033'. [ 365.351138][T19647] netlink: 'syz.3.4032': attribute type 1 has an invalid length. [ 365.402584][T19655] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 365.432668][T19647] bond2 (unregistering): Released all slaves [ 365.443682][T19651] can: request_module (can-proto-0) failed. [ 365.498313][T19652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4032'. [ 365.851173][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4039'. [ 365.891501][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4041'. [ 366.077246][T19689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.414600][T19712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4051'. [ 366.447698][T19710] veth3: entered promiscuous mode [ 366.557224][T19716] netlink: 'syz.3.4052': attribute type 10 has an invalid length. [ 366.595888][T19720] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 366.677467][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4053'. [ 366.707010][T19720] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.801706][T19734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4057'. [ 366.992297][T19747] veth0_to_bridge: entered promiscuous mode [ 367.130339][T19756] 8021q: VLANs not supported on tunl0 [ 367.156886][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4064'. [ 367.177334][T19762] netlink: 'syz.3.4066': attribute type 2 has an invalid length. [ 367.185764][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 367.272663][T19766] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.292406][T19766] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.373773][T19773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4068'. [ 367.397725][T19745] veth0_to_bridge: left promiscuous mode [ 368.660569][T19862] tipc: Enabling of bearer rejected, media not registered [ 368.755542][T19869] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 369.108340][T19900] validate_nla: 1 callbacks suppressed [ 369.108356][T19900] netlink: 'syz.0.4106': attribute type 6 has an invalid length. [ 369.175899][T19905] netlink: 'syz.0.4106': attribute type 6 has an invalid length. [ 369.243825][T19912] tipc: Enabled bearer , priority 0 [ 369.273484][T19912] syzkaller0: entered promiscuous mode [ 369.315168][T19912] syzkaller0: entered allmulticast mode [ 369.373881][T19921] netlink: 'syz.1.4107': attribute type 3 has an invalid length. [ 369.381048][T19912] tipc: Resetting bearer [ 369.382165][T19921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.409872][T19922] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 369.443551][T19911] tipc: Resetting bearer [ 369.507846][T19911] tipc: Disabling bearer [ 369.734585][T19943] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 370.013448][ T5233] udevd[5233]: worker [6384] /devices/virtual/block/nbd1 timeout; kill it [ 370.036157][ T5233] udevd[5233]: seq 14575 '/devices/virtual/block/nbd1' killed [ 370.098814][T19971] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 370.395915][T19990] tipc: Started in network mode [ 370.424798][T19990] tipc: Node identity be7ce59266e1, cluster identity 4711 [ 370.432106][T19990] tipc: Enabled bearer , priority 0 [ 370.508729][T19990] syzkaller0: entered promiscuous mode [ 370.535853][T19990] syzkaller0: entered allmulticast mode [ 370.557309][T19990] tipc: Resetting bearer [ 370.585281][T19985] tipc: Resetting bearer [ 370.612023][T19985] tipc: Disabling bearer [ 370.617991][T20003] __nla_validate_parse: 19 callbacks suppressed [ 370.618007][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 370.654935][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 370.896585][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'. [ 370.900802][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'. [ 370.905787][T20018] netlink: 'syz.1.4144': attribute type 30 has an invalid length. [ 370.932550][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'. [ 370.941575][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 370.961767][T20020] netlink: 'syz.1.4144': attribute type 30 has an invalid length. [ 370.972172][T20019] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4143'. [ 370.980831][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 371.147660][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4149'. [ 371.170039][T20030] tipc: Enabled bearer , priority 0 [ 371.186735][T20030] syzkaller0: entered promiscuous mode [ 371.201474][T20030] syzkaller0: entered allmulticast mode [ 371.207709][T20035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4150'. [ 371.213903][T20030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 371.252609][T20035] tipc: Enabled bearer , priority 0 [ 371.262289][T20035] syzkaller0: entered promiscuous mode [ 371.268252][T20035] syzkaller0: entered allmulticast mode [ 371.272133][T20038] netlink: 'syz.1.4152': attribute type 2 has an invalid length. [ 371.277992][T20035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 371.326068][T20030] tipc: Resetting bearer [ 371.335887][T20035] tipc: Resetting bearer [ 371.358617][T20033] tipc: Resetting bearer [ 371.375672][T20033] tipc: Disabling bearer [ 371.384082][T20028] tipc: Resetting bearer [ 371.400346][T20028] tipc: Disabling bearer [ 371.622655][ T97] block nbd3: Possible stuck request ffff8880255e5080: control (read@0,1024B). Runtime 60 seconds [ 371.633622][ T97] block nbd3: Possible stuck request ffff8880255e5240: control (read@1024,1024B). Runtime 60 seconds [ 371.645178][ T97] block nbd3: Possible stuck request ffff8880255e5400: control (read@2048,1024B). Runtime 60 seconds [ 371.656415][ T97] block nbd3: Possible stuck request ffff8880255e55c0: control (read@3072,1024B). Runtime 60 seconds [ 371.688823][T20054] netlink: 'syz.0.4158': attribute type 142 has an invalid length. [ 372.152523][T20088] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.127400][T20163] netlink: 'syz.4.4190': attribute type 2 has an invalid length. [ 373.172606][T20164] netlink: 'syz.4.4190': attribute type 2 has an invalid length. [ 373.344238][T20174] bridge_slave_0: left allmulticast mode [ 373.351896][T20174] bridge_slave_0: left promiscuous mode [ 373.373847][T20174] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.389314][T20174] bridge_slave_1: left allmulticast mode [ 373.395821][T20174] bridge_slave_1: left promiscuous mode [ 373.401588][T20174] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.424262][T20174] bond0: (slave bond_slave_0): Releasing backup interface [ 373.458888][T20174] bond0: (slave bond_slave_1): Releasing backup interface [ 373.495328][T20174] team0: Port device team_slave_0 removed [ 373.522618][T20174] team0: Port device team_slave_1 removed [ 373.530069][T20174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.541891][T20174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.553344][T20174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.561972][T20174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.582683][T20174] team0: Port device geneve0 removed [ 373.592390][T20174] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 373.627138][T20179] macvlan2: entered promiscuous mode [ 373.632465][T20179] macvlan2: entered allmulticast mode [ 373.639297][T20179] bond5: entered promiscuous mode [ 373.645554][T20179] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.656113][T20179] bond5: left promiscuous mode [ 373.834129][T20185] syzkaller1: entered promiscuous mode [ 373.845006][T20185] syzkaller1: entered allmulticast mode [ 374.166105][T20198] validate_nla: 3 callbacks suppressed [ 374.166122][T20198] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 374.187066][T20198] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 374.291162][T20198] veth3: entered promiscuous mode [ 374.504593][T20230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.631261][T20235] netlink: 'syz.1.4211': attribute type 14 has an invalid length. [ 374.708631][T20238] netlink: 'syz.2.4213': attribute type 4 has an invalid length. [ 374.815297][ T97] block nbd2: Possible stuck request ffff8880255ae000: control (read@0,1024B). Runtime 180 seconds [ 374.829977][ T97] block nbd2: Possible stuck request ffff8880255ae1c0: control (read@1024,1024B). Runtime 180 seconds [ 374.841292][ T97] block nbd2: Possible stuck request ffff8880255ae380: control (read@2048,1024B). Runtime 180 seconds [ 374.852661][ T97] block nbd2: Possible stuck request ffff8880255ae540: control (read@3072,1024B). Runtime 180 seconds [ 374.916369][T20251] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 375.537863][T20291] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 375.687298][T20304] __nla_validate_parse: 21 callbacks suppressed [ 375.687316][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 375.970929][T20316] smc: net device erspan0 erased user defined pnetid SYZ0 [ 376.007034][T20320] syzkaller1: entered promiscuous mode [ 376.024926][T20320] syzkaller1: entered allmulticast mode [ 376.305218][T20314] netlink: 'syz.0.4233': attribute type 1 has an invalid length. [ 376.422561][T20314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.473365][T20331] bond4: (slave veth5): Enslaving as an active interface with a down link [ 376.502304][T20344] IPVS: Error connecting to the multicast addr [ 376.521859][T20345] bond0: Error: Cannot enslave bond to itself. [ 376.554086][T20314] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 376.573829][T20342] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4241'. [ 376.587139][T20350] netlink: 'syz.3.4243': attribute type 10 has an invalid length. [ 376.630046][T20314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4233'. [ 376.654086][T20354] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 376.656162][T20342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.672934][ T5961] IPVS: starting estimator thread 0... [ 376.680829][T20331] bond4: (slave veth7): Enslaving as an active interface with a down link [ 376.707816][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.719310][T20350] bridge_slave_1: left allmulticast mode [ 376.725847][T20350] bridge_slave_1: left promiscuous mode [ 376.731755][T20350] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.749478][ T55] block nbd5: Possible stuck request ffff8880256b7000: control (read@0,1024B). Runtime 30 seconds [ 376.760332][ T55] block nbd5: Possible stuck request ffff8880256b71c0: control (read@1024,1024B). Runtime 30 seconds [ 376.771358][ T55] block nbd5: Possible stuck request ffff8880256b7380: control (read@2048,1024B). Runtime 30 seconds [ 376.782608][T20357] IPVS: using max 29 ests per chain, 69600 per kthread [ 376.783113][T20362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4245'. [ 376.791653][ T55] block nbd5: Possible stuck request ffff8880256b7540: control (read@3072,1024B). Runtime 30 seconds [ 376.807537][T20350] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 376.909174][T20367] netlink: 'syz.2.4246': attribute type 4 has an invalid length. [ 376.949526][T20361] netlink: 'syz.4.4245': attribute type 1 has an invalid length. [ 377.268721][T20386] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.277412][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'. [ 377.428056][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'. [ 377.472877][T20396] netem: change failed [ 377.517253][T20400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4255'. [ 377.658933][T20407] netlink: 'syz.1.4258': attribute type 1 has an invalid length. [ 377.666832][T20407] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4258'. [ 377.746398][T20413] tipc: Enabled bearer , priority 0 [ 377.754549][T20407] syzkaller0: entered promiscuous mode [ 377.784457][T20407] syzkaller0: entered allmulticast mode [ 377.816555][T20407] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.894076][T20407] tipc: Resetting bearer [ 377.940930][T20406] tipc: Resetting bearer [ 378.011714][T20406] tipc: Disabling bearer [ 378.071666][T20436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 378.091566][T20436] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 378.181009][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 378.334594][T20451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.457500][T20462] rdma_rxe: rxe_newlink: failed to add bond0 [ 378.486239][T20464] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4275'. [ 378.501297][T20457] syzkaller0: entered promiscuous mode [ 378.508913][T20457] syzkaller0: entered allmulticast mode [ 380.588098][T20507] C: renamed from lo (while UP) [ 380.713137][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 380.731538][T20519] batman_adv: batadv0: Adding interface: wlan1 [ 380.739119][T20519] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.770428][T20519] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 380.935461][T20539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4297'. [ 380.979185][T20546] netlink: 'syz.2.4299': attribute type 2 has an invalid length. [ 381.204781][ T5233] udevd[5233]: worker [15713] /devices/virtual/block/nbd3 is taking a long time [ 381.232185][ T5233] udevd[5233]: worker [5915] /devices/virtual/block/nbd2 timeout; kill it [ 381.250720][ T5233] udevd[5233]: seq 15134 '/devices/virtual/block/nbd2' killed [ 381.356563][T20571] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4305'. [ 381.818511][T20598] netlink: 'syz.0.4310': attribute type 13 has an invalid length. [ 381.846538][T20598] macvtap0: entered allmulticast mode [ 381.856940][T20598] macvtap0: refused to change device tx_queue_len [ 382.144623][T20615] netlink: 'syz.4.4318': attribute type 1 has an invalid length. [ 382.320506][T20615] gretap3: entered promiscuous mode [ 382.724536][T20656] netlink: 'syz.1.4331': attribute type 1 has an invalid length. [ 382.732687][T20656] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4331'. [ 382.852227][T20671] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 382.861870][T20674] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 382.910433][T20677] syzkaller0: create flow: hash 2664741427 index 1 [ 382.922550][T20671] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 382.923712][T20674] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 383.132246][T20677] syzkaller0: delete flow: hash 2664741427 index 1 [ 383.229421][T20694] delete_channel: no stack [ 384.821610][T20701] tipc: Enabling of bearer rejected, failed to enable media [ 384.862181][T20715] netlink: 'syz.3.4341': attribute type 11 has an invalid length. [ 384.904756][T20715] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4341'. [ 385.126658][T20737] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4347'. [ 385.166246][T20737] NCSI netlink: No device for ifindex 0 [ 385.501534][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 385.553708][T20759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4352'. [ 385.568429][T20772] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4355'. [ 385.578216][T20759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4352'. [ 385.737523][T20777] tipc: Enabling of bearer rejected, already enabled [ 385.747443][T20777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.748351][T20780] netlink: 'syz.1.4359': attribute type 7 has an invalid length. [ 386.028966][T20805] __nla_validate_parse: 1 callbacks suppressed [ 386.028984][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 386.086034][T20806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4367'. [ 386.097785][T20808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4368'. [ 386.227894][T20818] veth0_to_team: entered promiscuous mode [ 386.253096][T20820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4371'. [ 386.253899][T20821] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4371'. [ 386.271922][T20818] veth0_to_team: entered allmulticast mode [ 386.291794][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4370'. [ 386.429230][T20833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4378'. [ 386.601437][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 386.612703][T20820] bond0 (unregistering): Released all slaves [ 386.672069][T20844] chnl_net:caif_netlink_parms(): no params data found [ 387.064449][T20856] bond8: entered promiscuous mode [ 387.100515][T20856] bond8: entered allmulticast mode [ 387.126985][T20856] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.259693][T20843] netlink: 'syz.1.4380': attribute type 8 has an invalid length. [ 387.314167][T20867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4380'. [ 387.319171][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4389'. [ 387.615318][ T55] block nbd1: Possible stuck request ffff888025555080: control (read@0,1024B). Runtime 210 seconds [ 387.626539][ T55] block nbd1: Possible stuck request ffff888025555240: control (read@1024,1024B). Runtime 210 seconds [ 387.637769][ T55] block nbd1: Possible stuck request ffff888025555400: control (read@2048,1024B). Runtime 210 seconds [ 387.649009][ T55] block nbd1: Possible stuck request ffff8880255555c0: control (read@3072,1024B). Runtime 210 seconds [ 388.143774][T20900] netlink: 'syz.0.4398': attribute type 2 has an invalid length. [ 388.871979][T20948] team_slave_1 (unregistering): left promiscuous mode [ 388.880624][T20948] team_slave_1 (unregistering): left allmulticast mode [ 388.906270][T20948] team0: Port device team_slave_1 removed [ 389.517157][T18289] tipc: Subscription rejected, illegal request [ 389.744538][T20995] netlink: 'syz.2.4425': attribute type 23 has an invalid length. [ 390.757396][T21019] netlink: 'syz.1.4431': attribute type 16 has an invalid length. [ 390.768314][T21019] netlink: 'syz.1.4431': attribute type 17 has an invalid length. [ 391.884612][T21017] __nla_validate_parse: 6 callbacks suppressed [ 391.916308][T21017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4430'. [ 391.941350][T21019] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.967370][T21019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.178262][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4436'. [ 392.214588][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 392.367315][T21047] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 392.688999][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.709447][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.795664][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.828902][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.913502][T21073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.938513][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4448'. [ 392.994187][T21073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4448'. [ 393.034519][T21085] netlink: 'syz.3.4455': attribute type 5 has an invalid length. [ 393.035599][T21088] netlink: 'syz.3.4455': attribute type 5 has an invalid length. [ 393.101611][T21085] tipc: Enabling of bearer rejected, failed to enable media [ 393.133105][T21088] tipc: Enabling of bearer rejected, failed to enable media [ 393.170383][T21084] delete_channel: no stack [ 393.229037][T21095] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 393.295891][T21099] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 393.389630][ T55] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 300 seconds [ 393.403544][ T55] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 300 seconds [ 393.415547][ T55] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 300 seconds [ 393.426573][ T55] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 300 seconds [ 393.540360][T21118] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 393.585257][T21123] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 393.601669][T21118] netlink: 'syz.4.4465': attribute type 2 has an invalid length. [ 393.623305][T21118] netlink: 'syz.4.4465': attribute type 8 has an invalid length. [ 393.786115][T21130] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.614045][T21185] netlink: 'syz.0.4487': attribute type 7 has an invalid length. [ 394.636364][T21185] netlink: 'syz.0.4487': attribute type 8 has an invalid length. [ 394.868699][T21205] team0: Device gtp0 is of different type [ 395.320577][T21237] IPVS: length: 141 != 24 [ 395.379384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ee0d000: rx timeout, send abort [ 395.570520][T21247] netlink: 'syz.0.4505': attribute type 5 has an invalid length. [ 395.582780][T21249] bridge_slave_1: default FDB implementation only supports local addresses [ 395.775849][T21254] erspan0: entered promiscuous mode [ 395.792856][T21254] erspan0: entered allmulticast mode [ 395.887662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ee0d000: abort rx timeout. Force session deactivation [ 396.388560][T21291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.523564][T21306] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 396.627896][T21314] pim6reg: entered allmulticast mode [ 396.706900][T21316] netlink: 'syz.0.4527': attribute type 3 has an invalid length. [ 396.834009][T21327] netlink: 'syz.4.4530': attribute type 1 has an invalid length. [ 396.894125][T21324] netlink: 'syz.4.4530': attribute type 29 has an invalid length. [ 396.894973][T21327] __nla_validate_parse: 23 callbacks suppressed [ 396.894986][T21327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4530'. [ 396.923846][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 396.940234][T21324] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4530'. [ 396.955259][T21331] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 396.972277][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4533'. [ 397.023895][T21335] [ 397.026250][T21335] ====================================================== [ 397.033269][T21335] WARNING: possible circular locking dependency detected [ 397.040294][T21335] syzkaller #0 Not tainted [ 397.044703][T21335] ------------------------------------------------------ [ 397.051721][T21335] syz.1.4534/21335 is trying to acquire lock: [ 397.057779][T21335] ffffffff8f68e058 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 397.066914][T21335] [ 397.066914][T21335] but task is already holding lock: [ 397.074257][T21335] ffff88805bb5d570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 397.083467][T21335] [ 397.083467][T21335] which lock already depends on the new lock. [ 397.083467][T21335] [ 397.093858][T21335] [ 397.093858][T21335] the existing dependency chain (in reverse order) is: [ 397.103202][T21335] [ 397.103202][T21335] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 397.111182][T21335] lock_acquire+0x120/0x360 [ 397.116197][T21335] _raw_spin_lock_bh+0x36/0x50 [ 397.121469][T21335] nr_rt_device_down+0x12a/0x720 [ 397.126909][T21335] nr_device_event+0x137/0x150 [ 397.132187][T21335] notifier_call_chain+0x1b6/0x3e0 [ 397.137802][T21335] netif_close_many+0x29c/0x410 [ 397.143159][T21335] netif_close+0x158/0x210 [ 397.148080][T21335] dev_close+0x10a/0x220 [ 397.152829][T21335] bpq_device_event+0x377/0x6a0 [ 397.158198][T21335] notifier_call_chain+0x1b6/0x3e0 [ 397.163813][T21335] __dev_notify_flags+0x18d/0x2e0 [ 397.169343][T21335] netif_change_flags+0xe8/0x1a0 [ 397.174782][T21335] dev_change_flags+0x130/0x260 [ 397.180132][T21335] dev_ioctl+0x7b4/0x1150 [ 397.184966][T21335] sock_do_ioctl+0x22c/0x300 [ 397.190059][T21335] sock_ioctl+0x576/0x790 [ 397.194888][T21335] __se_sys_ioctl+0xf9/0x170 [ 397.200332][T21335] do_syscall_64+0xfa/0x3b0 [ 397.205334][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.211738][T21335] [ 397.211738][T21335] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 397.219537][T21335] lock_acquire+0x120/0x360 [ 397.224549][T21335] _raw_spin_lock_bh+0x36/0x50 [ 397.229818][T21335] nr_rt_device_down+0xa9/0x720 [ 397.235176][T21335] nr_device_event+0x137/0x150 [ 397.240444][T21335] notifier_call_chain+0x1b6/0x3e0 [ 397.246056][T21335] netif_close_many+0x29c/0x410 [ 397.251412][T21335] netif_close+0x158/0x210 [ 397.256333][T21335] dev_close+0x10a/0x220 [ 397.261077][T21335] bpq_device_event+0x377/0x6a0 [ 397.266432][T21335] notifier_call_chain+0x1b6/0x3e0 [ 397.272046][T21335] __dev_notify_flags+0x18d/0x2e0 [ 397.277574][T21335] netif_change_flags+0xe8/0x1a0 [ 397.283018][T21335] dev_change_flags+0x130/0x260 [ 397.288369][T21335] dev_ioctl+0x7b4/0x1150 [ 397.293203][T21335] sock_do_ioctl+0x22c/0x300 [ 397.298294][T21335] sock_ioctl+0x576/0x790 [ 397.303127][T21335] __se_sys_ioctl+0xf9/0x170 [ 397.308219][T21335] do_syscall_64+0xfa/0x3b0 [ 397.313225][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.319620][T21335] [ 397.319620][T21335] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 397.327511][T21335] validate_chain+0xb9b/0x2140 [ 397.332780][T21335] __lock_acquire+0xab9/0xd20 [ 397.337963][T21335] lock_acquire+0x120/0x360 [ 397.342970][T21335] _raw_spin_lock_bh+0x36/0x50 [ 397.348240][T21335] nr_rt_ioctl+0x390/0xd50 [ 397.353161][T21335] sock_do_ioctl+0xdc/0x300 [ 397.358173][T21335] sock_ioctl+0x576/0x790 [ 397.363005][T21335] __se_sys_ioctl+0xf9/0x170 [ 397.368100][T21335] do_syscall_64+0xfa/0x3b0 [ 397.373103][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.379500][T21335] [ 397.379500][T21335] other info that might help us debug this: [ 397.379500][T21335] [ 397.389710][T21335] Chain exists of: [ 397.389710][T21335] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 397.389710][T21335] [ 397.403510][T21335] Possible unsafe locking scenario: [ 397.403510][T21335] [ 397.410940][T21335] CPU0 CPU1 [ 397.416283][T21335] ---- ---- [ 397.421631][T21335] lock(&nr_node->node_lock); [ 397.426378][T21335] lock(nr_node_list_lock); [ 397.433472][T21335] lock(&nr_node->node_lock); [ 397.440736][T21335] lock(nr_neigh_list_lock); [ 397.445396][T21335] [ 397.445396][T21335] *** DEADLOCK *** [ 397.445396][T21335] [ 397.453514][T21335] 2 locks held by syz.1.4534/21335: [ 397.458691][T21335] #0: ffffffff8f68e0b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 397.468160][T21335] #1: ffff88805bb5d570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 397.477806][T21335] [ 397.477806][T21335] stack backtrace: [ 397.483685][T21335] CPU: 0 UID: 0 PID: 21335 Comm: syz.1.4534 Not tainted syzkaller #0 PREEMPT(full) [ 397.483702][T21335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.483711][T21335] Call Trace: [ 397.483717][T21335] [ 397.483724][T21335] dump_stack_lvl+0x189/0x250 [ 397.483744][T21335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.483759][T21335] ? __pfx__printk+0x10/0x10 [ 397.483775][T21335] ? stack_trace_save+0x9c/0xe0 [ 397.483795][T21335] print_circular_bug+0x2ee/0x310 [ 397.483811][T21335] check_noncircular+0x134/0x160 [ 397.483832][T21335] validate_chain+0xb9b/0x2140 [ 397.483853][T21335] __lock_acquire+0xab9/0xd20 [ 397.483873][T21335] ? nr_rt_ioctl+0x390/0xd50 [ 397.483889][T21335] lock_acquire+0x120/0x360 [ 397.483906][T21335] ? nr_rt_ioctl+0x390/0xd50 [ 397.483922][T21335] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 397.483939][T21335] ? nr_rt_ioctl+0x390/0xd50 [ 397.483954][T21335] _raw_spin_lock_bh+0x36/0x50 [ 397.483971][T21335] ? nr_rt_ioctl+0x390/0xd50 [ 397.483985][T21335] nr_rt_ioctl+0x390/0xd50 [ 397.484005][T21335] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 397.484024][T21335] ? apparmor_capable+0x137/0x1b0 [ 397.484043][T21335] ? capable+0x89/0xe0 [ 397.484055][T21335] ? nr_ioctl+0x1b1/0x3b0 [ 397.484069][T21335] sock_do_ioctl+0xdc/0x300 [ 397.484087][T21335] ? __pfx_sock_do_ioctl+0x10/0x10 [ 397.484101][T21335] ? __lock_acquire+0xab9/0xd20 [ 397.484123][T21335] sock_ioctl+0x576/0x790 [ 397.484139][T21335] ? __pfx_sock_ioctl+0x10/0x10 [ 397.484154][T21335] ? __fget_files+0x2a/0x420 [ 397.484172][T21335] ? __fget_files+0x3a0/0x420 [ 397.484189][T21335] ? __fget_files+0x2a/0x420 [ 397.484207][T21335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 397.484224][T21335] ? __pfx_sock_ioctl+0x10/0x10 [ 397.484239][T21335] __se_sys_ioctl+0xf9/0x170 [ 397.484255][T21335] do_syscall_64+0xfa/0x3b0 [ 397.484267][T21335] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.484284][T21335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.484298][T21335] ? clear_bhb_loop+0x60/0xb0 [ 397.484312][T21335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.484325][T21335] RIP: 0033:0x7f452af8ebe9 [ 397.484339][T21335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.484351][T21335] RSP: 002b:00007f452bea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.484366][T21335] RAX: ffffffffffffffda RBX: 00007f452b1c5fa0 RCX: 00007f452af8ebe9 [ 397.484376][T21335] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000009 [ 397.484385][T21335] RBP: 00007f452b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 397.484394][T21335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.484402][T21335] R13: 00007f452b1c6038 R14: 00007f452b1c5fa0 R15: 00007ffe11359f88 [ 397.484418][T21335] [ 401.694893][ T97] block nbd3: Possible stuck request ffff8880255e5080: control (read@0,1024B). Runtime 90 seconds [ 401.705807][ T97] block nbd3: Possible stuck request ffff8880255e5240: control (read@1024,1024B). Runtime 90 seconds [ 401.716736][ T97] block nbd3: Possible stuck request ffff8880255e5400: control (read@2048,1024B). Runtime 90 seconds [ 401.727783][ T97] block nbd3: Possible stuck request ffff8880255e55c0: control (read@3072,1024B). Runtime 90 seconds [ 404.905197][ T97] block nbd2: Possible stuck request ffff8880255ae000: control (read@0,1024B). Runtime 210 seconds [ 404.916819][ T97] block nbd2: Possible stuck request ffff8880255ae1c0: control (read@1024,1024B). Runtime 210 seconds [ 404.929194][ T97] block nbd2: Possible stuck request ffff8880255ae380: control (read@2048,1024B). Runtime 210 seconds [ 404.941363][ T97] block nbd2: Possible stuck request ffff8880255ae540: control (read@3072,1024B). Runtime 210 seconds [ 406.815105][ T55] block nbd5: Possible stuck request ffff8880256b7000: control (read@0,1024B). Runtime 60 seconds [ 406.825875][ T55] block nbd5: Possible stuck request ffff8880256b71c0: control (read@1024,1024B). Runtime 60 seconds [ 406.836775][ T55] block nbd5: Possible stuck request ffff8880256b7380: control (read@2048,1024B). Runtime 60 seconds [ 406.847704][ T55] block nbd5: Possible stuck request ffff8880256b7540: control (read@3072,1024B). Runtime 60 seconds