last executing test programs: 2.921364689s ago: executing program 2 (id=5802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="bea33ad33ee0a207266fcb224bb47c35f1c0a35918039d", 0x17}, {&(0x7f0000000040)="9b94074dd265c17c834a01d92706b73dfc9aa7b589a916db30a7f1ecb15698544849d9c9a30e4302bfcb2a06faa0fde8e732fc6e4e1b8983544d8aa56a50bc282ce2277c298ba892dc12a92f77ee46c0aac47c3612a1b68c508f2f739437e85cbb6cd53cfeeb52cd7e288906488471bfdbfc805dd2a346d4f35f63e570d2cb330db965f09e1d47d5f8359c8c54e8d037a8894ba4cfd43b0cfcaa124c5eb419f31fc082beca9f8a2ff6a813f1cdee639d16047f58e29ad5f4df9fa3", 0xbb}, {&(0x7f0000000100)="326a268d78848929462611eb79bd220c78f17d508cb6f9789275c52bc74d8a7fb9f07a9b15001dc2c8b7483ff0a556b1e3b1662372c1a8a599ffbd628d2aab5db628c6e6af02b707e1d4d408c0aedb0bbd08990f780ca6bd6cd22e4b9fb948bb25a7857d59c120c660b5bcd0a3b7ff4fff6d10398ec6d8c60aa7e95c0e368f860f40a9c783497a4efdeb72a7de22f2019f743a48ee76e866699f0be22005f30583b78889c1892e9e165d9b5622e2e776cd1eb20f5e0d12e12dd4ed94583aed27bffdb6fb37602e26c9533321432810d58f6c4f44cdd310b5856afad31cdc7fdfcff6ae22613ca32126dae68e06c840938b04f933a4f49fe6", 0xf8}, {&(0x7f0000000200)="09f984cf9efd6e70e43eea37f2fb01372d8b7d3d5536082d80f89c4f2a317e01027c583ee84a0fcda04e0363587891f200dca8150566c7fac0952658778974868eab0100f78573bb870ad64b13c7bf774d442c2b6fc5c18df252075de7bc921c447986545c4915067636e973c66bc76390caa06ee9a89d14082de1c5863ce34b0fd3b19c3bc1a9a233622cdd966a447b283cb13eb6f6db63f57b007e6c0fa0448bab", 0xa2}, {&(0x7f00000002c0)="bc3a094296c1dca9e3ede90cbc470baa437f51303f4b32457946058c43d4387fca15678cd9021b55e3ed9f179a53daea0fa72fb26a867bb7a91ea1bec6ae79cdfdbb4f76c1f65eb848627ca40294cac59f7abb2a5974dd5aad766915029aff29ef4671ce70a3e0f2b319122b104108405ed96af042108e7dc6ef609a13fb50088943c2927096ba96ff2ab49d8fd0400e20f39918451ed89e64753c044c3a5d2ef986877d7f60c6e3a6801c9a7f78ef63959c783ae0ec702108a75e1a", 0xbc}], 0x5, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}, 0x40000) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000480)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0xf819, 0x6, 0xc, 0x2, 0x4, 0x2, 0x10000, 0x2, 0x0}, &(0x7f0000000500)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000540)={r1, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000640)=0x2, 0x12) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000680)={0x1, 0x8010, 0x6, 0x1000, r1}, &(0x7f00000006c0)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000021}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000800)='ns/cgroup\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000840)={@remote, 0xfffffffd, 0x1, 0x1, 0x4, 0xe21, 0xdd4}, 0x20) sendfile(r3, r3, &(0x7f0000000880)=0xffffffff, 0xe4c6) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000008c0)) syz_emit_ethernet(0x100e, &(0x7f0000000900)={@broadcast, @remote, @void, {@generic={0x6005, "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"}}}, &(0x7f0000001940)={0x1, 0x4, [0xde2, 0xca2, 0xf7, 0x6a8]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, 0x3, 0x3, 0x201, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x80000001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x48080) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000001a80)='wg1\x00', 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$inet6(r3, &(0x7f0000001d00)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x9, @remote, 0x2}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="618db1da36b492028cd96922b60aa0a36f562840bc405ee52482e27147781f7b9b9bbf2554bc29e146ea24a807feb106e01c54a06054076e76237496e0cdc11d0612c382ae4cb620bd495decf8500c7630164bab249880863ec4cb40e2b3f36677eca2f794a9c2453d94fd07afe1eeee226c7832bd4e79791b209c510900302dfc0f", 0x82}, {&(0x7f0000001bc0)="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", 0xfa}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001d40)={r1, 0x3, 0x9}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001d80)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001dc0)={0x5, 0x8201, 0x0, 0x38bd, r1}, &(0x7f0000001e00)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ec0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000002100)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x4c, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004810) 2.665811897s ago: executing program 2 (id=5805): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x20, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2.483542557s ago: executing program 3 (id=5808): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffeffffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffeffffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x0, 0x54) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100003, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140200002000010000000000fcdbdf250400f280"], 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xd, &(0x7f0000000440)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f0000000280)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xc, 0x23, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r4], &(0x7f00000006c0)=[{0x0, 0x4, 0x8}, {0x2, 0x3, 0xe, 0x4}, {0x4, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xd, 0x3}, {0x3, 0x80000000, 0xd, 0x9}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xd, &(0x7f0000000440)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], &(0x7f0000000280)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xc, 0x23, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r4], &(0x7f00000006c0)=[{0x0, 0x4, 0x8}, {0x2, 0x3, 0xe, 0x4}, {0x4, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xd, 0x3}, {0x3, 0x80000000, 0xd, 0x9}], 0x10, 0x7}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)={0x14, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x10}]}, 0x14}], 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="420000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65766500001000028005000300eb00000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="420000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65766500001000028005000300eb00000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r9, @ANYBLOB="030300000000000000000600000008000300", @ANYBLOB="7f58ee2f28ae6a6ff1f16d280c1011af90cd0a0324523a2b2dbf5bc5c870904d57794afd9baeaee6a3cc971aed9ebeee1edb6fb9ee6173fb166af84ee6313411ca8cf60237df0a07d8e12b5231798c1d9fd164a0", @ANYBLOB="0b51293a451129159bd89ce459f5895d9dde021f48f844297b5b9ba5ae03e7dfb8a4b3dde232d8a281c04c47"], 0x1c}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)={0xbb8, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x2d6200301d5b903e, 0x7}, 0x0, 0x6, 0x1, 0x5, 0xa, 'syz0\x00', "b134d2919cb7f1421f152e382adac06099e9dff8f49e4c828b023094c607b36f", "e7ef18039b4ffb2bd014a9320e5ffb6ca5dff7e94925888abd8d5886a9d323e5", [{0x8, 0x101, {0x0, 0x5}}, {0x7e57, 0x6, {0x2, 0x8}}, {0x1, 0xffff, {0x2, 0xfffffff9}}, {0x3, 0x8, {0x0, 0x53}}, {0x7162, 0x8, {0x1, 0x1305}}, {0x7, 0xa6, {0x3, 0x7fffffff}}, {0x4, 0x1, {0x2, 0x2}}, {0x1ff, 0x2, {0x2, 0xe78}}, {0x1ff, 0x3ff, {0x2, 0x7}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x7fff, 0x400, {0x2, 0x10}}, {0x40, 0x7fff, {0x2, 0x24}}, {0x4, 0x4, {0x1, 0xac}}, {0x9, 0xffff, {0x0, 0x7f}}, {0x6, 0x2, {0x3, 0x6}}, {0x7, 0x1, {0x0, 0x9}}, {0x5, 0xa, {0x2, 0x7000}}, {0x2b63, 0x3, {0x2, 0x2}}, {0x8, 0x5, {0x2, 0x1ccf}}, {0x7, 0x3, {0x2, 0x1}}, {0x1c9, 0x5, {0x1, 0x5}}, {0xa3f, 0x1, {0x0, 0x2}}, {0x3c88, 0x9, {0x1, 0x8}}, {0x6, 0xca, {0x3, 0xc}}, {0xfff9, 0x48, {0x1, 0x40}}, {0x3, 0xfffc, {0x2, 0x2b2}}, {0x9ec, 0x3, {0x1, 0x8001}}, {0xf92f, 0x7, {0x0, 0x7}}, {0x6, 0x7, {0x1, 0x3}}, {0xf, 0x7, {0x0, 0x5}}, {0x0, 0x7, {0x1, 0x4f8}}, {0x0, 0x7, {0x3, 0x7}}, {0x401, 0xf, {0x3, 0x100}}, {0x6, 0x6, {0x2, 0x6}}, {0x7, 0x5, {0x1, 0x3}}, {0x944, 0x2, {0x0, 0xa743}}, {0x2, 0x8, {0x0, 0x4}}, {0x7f, 0x5, {0x3, 0x6}}, {0x101, 0x5, {0x0, 0x5}}, {0x8, 0x0, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffa7d}, 0x9, 0x5, 0x7, 0x9, 0x21, 'syz0\x00', "d0d992e43929437f3a49f119533b71ebe7f1f6a68fbc2d8599c745eaf5b1a60c", "b10864e2fe21d5f3c5e0acee32c77eb9c74740174785c5cee7ace7e092cd6ce7", [{0x1000, 0x4, {0x2, 0x6}}, {0x2, 0x8, {0x2, 0x4}}, {0x3, 0x8, {0x0, 0x6}}, {0xa, 0x4, {0x3, 0x4}}, {0x2, 0x665f, {0x3, 0xd9}}, {0x75, 0x0, {0x2, 0x2}}, {0x4, 0x5, {0x3, 0x8000}}, {0x9, 0x0, {0x2, 0xc}}, {0x6, 0x7, {0x1, 0x4}}, {0xac36, 0x7, {0x0, 0x3}}, {0x101, 0x9, {0x1, 0xc0000000}}, {0x9, 0x400, {0x3, 0x7}}, {0x4, 0x2, {0x1, 0x8993}}, {0x6, 0xc, {0x2, 0x200}}, {0x4, 0x6e, {0x1, 0x32}}, {0x7, 0x2, {0x2, 0x8}}, {0x9, 0x3, {0x3, 0x7}}, {0x0, 0x9, {0x3}}, {0x5, 0x9, {0x2}}, {0x0, 0x1, {0x1, 0x400000}}, {0x1000, 0x401, {0x1, 0x7}}, {0x1, 0xa, {0x0, 0x7ff}}, {0x8, 0x6, {0x1, 0x7}}, {0x80, 0x5035, {0x0, 0x8}}, {0x8, 0xf8, {0x1, 0x2}}, {0x7f, 0x4, {0x1, 0x5}}, {0x4, 0x2}, {0xa, 0x4, {0x1, 0x6}}, {0xfff4, 0x0, {0x1, 0xfffffffa}}, {0x2, 0x401, {0x3, 0x7fffffff}}, {0x5, 0x0, {0x1, 0x4}}, {0x84d, 0x6, {0x1, 0x8}}, {0x3, 0x0, {0x0, 0x8000}}, {0x8, 0x15ef, {0x3, 0x8cb}}, {0x101, 0x8f, {0x1, 0x200}}, {0x0, 0xfffe, {0x0, 0x2}}, {0x1, 0x1, {0x0, 0x7}}, {0x7, 0xb814, {0x2, 0xfff}}, {0x1ff, 0x7c, {0x0, 0x9}}, {0x101, 0x1c0, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x27d}, 0x5, 0x7, 0x7, 0x0, 0x27, 'syz0\x00', "48f41a92c3739f9d384e2cab11b414d05ff20708cf79ed0ad6fc48288b1d49dc", "d5324e6af34d2b215f0454101c150ab4fd96f2a151caf701253e2eefaa92ac54", [{0x40, 0x3, {0x1, 0xc}}, {0x94, 0x5c, {0x0, 0x8000}}, {0xc, 0xffff, {0x3, 0x8b36}}, {0x9, 0x2, {0x3, 0x9}}, {0x8, 0xf, {0x1, 0x2}}, {0x1ff, 0x6, {0x0, 0x7}}, {0x6, 0x2, {0x0, 0x504a}}, {0x1, 0x7, {0x1, 0x3}}, {0x3}, {0x43cf, 0xa, {0x2, 0x4}}, {0x4, 0x7, {0x2, 0x6}}, {0xfffc, 0x2, {0x3}}, {0x7f, 0x7fff, {0x0, 0xdf}}, {0xfff9, 0x1c, {0x2, 0x3}}, {0x1ff, 0x1, {0x0, 0xfff}}, {0x1, 0x1, {0x2, 0x2}}, {0x2b, 0x0, {0x1, 0x5}}, {0x7, 0x29, {0x3, 0x7}}, {0x9, 0x8, {0x1, 0x9c}}, {0x7, 0x7, {0x3, 0xfffffffb}}, {0x3, 0xff, {0x1, 0x7}}, {0x7, 0x80, {0x0, 0x4}}, {0x2, 0x4, {0x2, 0xf6d3}}, {0x0, 0x8, {0x2, 0x5}}, {0x4, 0x7321, {0x1, 0x6}}, {0x3, 0x4, {0x2, 0x29}}, {0xb, 0x4000, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x662a}}, {0x1, 0xa}, {0x6, 0xd89e, {0x1, 0xde000}}, {0x2, 0xe4ec, {0x3, 0x7eb7ac9e}}, {0x81, 0x5, {0x2, 0x3}}, {0x7, 0xffff, {0x0, 0x4}}, {0x8001, 0xfffa, {0x2, 0x7}}, {0x3, 0x7ff, {0x0, 0x8000}}, {0xeac, 0x7, {0x3, 0x5}}, {0x7, 0x7, {0x2, 0x10001}}, {0x1ff, 0x0, {0x0, 0x3}}, {0x57, 0x8, {0x3, 0x1}}, {0x5, 0x3ff, {0x0, 0xb}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x5, 0x1, 0x2, 0x5, 'syz1\x00', "da4e6d1dc461a8cc6941a142cc11b8e588496d56b0fab073df096f9956b6f61b", "335adaace836d083eb3dcc3c21bb20ba6afbe22243b7c18598c9ae59a2ed7fc6", [{0x2, 0x4, {0x3, 0x5}}, {0x3, 0xffff, {0x2, 0x80000001}}, {0x10, 0x9, {0x3}}, {0x7, 0xff, {0x2, 0xffffffff}}, {0x7f, 0xbc5, {0x0, 0x8000}}, {0x5, 0x7, {0x0, 0x80000001}}, {0x5, 0x1ff, {0x0, 0x6}}, {0x2, 0x3, {0x0, 0x7}}, {0x201b, 0x101, {0x3, 0xae49}}, {0x8001, 0x7, {0x0, 0x5}}, {0x2, 0xffff, {0x0, 0x2}}, {0xfff, 0x4, {0x2, 0x7}}, {0x9, 0x6, {0x3, 0x200}}, {0x6, 0xf, {0x0, 0x3}}, {0x5, 0x6, {0x0, 0x7f}}, {0x8, 0x8, {0x2, 0x8}}, {0x9, 0x2, {0x2, 0x1}}, {0x0, 0x9d, {0x1, 0x4}}, {0x5, 0x7, {0x1, 0xffff83bd}}, {0x0, 0xfff7, {0x0, 0x5}}, {0x7, 0x1, {0x2, 0x7d}}, {0x7fff, 0x1, {0x3, 0x80000001}}, {0x9, 0x0, {0x1, 0x4}}, {0xe117, 0xb, {0x3, 0x1}}, {0x7, 0x8, {0x3, 0x5}}, {0x9, 0x2, {0x2, 0xfff}}, {0x1, 0x4e6a, {0x1, 0x80000001}}, {0x5609, 0xff01, {0x2, 0x600}}, {0x91b2, 0x6, {0x1, 0x4}}, {0x9, 0x2, {0x0, 0x2}}, {0x7, 0x0, {0x0, 0x8001}}, {0xd, 0x80, {0x0, 0x4b59}}, {0x3, 0x81, {0x0, 0xc}}, {0xc42, 0x8, {0x0, 0x7}}, {0x5, 0x2, {0x2, 0x5}}, {0x18e4, 0x6, {0x4, 0xc166}}, {0x3, 0x8, {0x2, 0x8}}, {0x3, 0x1ff, {0x0, 0x1}}, {0x5, 0xfffc, {0x0, 0x6}}, {0xfff7, 0x5, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x1, 0x8, 0x3, 0x1000, 0x1d, 'syz0\x00', "42b5d05c81f7884d1a63321bd70d04795f75ece1177b9f377f4c7e2db4b35281", "7bce32e54ef5f794647acdda1d595539b2da62e1c630fe91d6491b86966a363b", [{0xa, 0x8, {0x1, 0x8}}, {0x80, 0x73, {0x2, 0x3}}, {0xb865, 0xfff8, {0x0, 0x9}}, {0xfff5, 0x6, {0x3, 0x5}}, {0x6, 0x100, {0x0, 0x6}}, {0x7, 0x5, {0x2}}, {0x4, 0x2, {0x2, 0x3995}}, {0x3fa, 0x2, {0x1, 0x30bc}}, {0x8, 0x4d0, {0x2, 0x7b}}, {0xff, 0x1000, {0x1, 0x33a0}}, {0x80, 0x4, {0x0, 0x8}}, {0x0, 0x9, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8}}, {0x8, 0xfff9, {0x3, 0x6}}, {0x8663, 0x7, {0x2, 0xc3d8}}, {0x9, 0xfffb, {0x3, 0x33a57570}}, {0x5, 0xf7, {0x1, 0x1}}, {0x5, 0x7ff, {0x2, 0x1}}, {0x14f2, 0x7ff, {0x2, 0x1}}, {0xb, 0x200, {0x3, 0x7}}, {0xb57, 0x4, {0x1, 0x7}}, {0x0, 0x3, {0x2, 0x2}}, {0x5, 0x1, {0x1, 0x4}}, {0x4004, 0x7ff, {0x0, 0x12}}, {0x8, 0x9, {0x2, 0x935}}, {0xc6, 0x7, {0x2, 0xe}}, {0x8001, 0x3, {0x1, 0xfffffff7}}, {0x8, 0x1, {0x3, 0x4}}, {0x6, 0x5, {0x2, 0x6}}, {0xfa54, 0x6, {0x3}}, {0x3, 0x1, {0x1, 0xb}}, {0x2, 0xd54e, {0x2, 0xf}}, {0x80d8, 0x101, {0x2, 0x9}}, {0xffff, 0x5, {0x3, 0x8}}, {0x3, 0xc9, {0x3}}, {0x6, 0x9, {0x2, 0x6}}, {0x6, 0x709, {0x2}}, {0x4, 0x7, {0x1, 0x1}}, {0xb, 0x100, {0x0, 0xf1a}}, {0x6, 0xff59, {0x0, 0xdd}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)={0xbb8, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x2d6200301d5b903e, 0x7}, 0x0, 0x6, 0x1, 0x5, 0xa, 'syz0\x00', "b134d2919cb7f1421f152e382adac06099e9dff8f49e4c828b023094c607b36f", "e7ef18039b4ffb2bd014a9320e5ffb6ca5dff7e94925888abd8d5886a9d323e5", [{0x8, 0x101, {0x0, 0x5}}, {0x7e57, 0x6, {0x2, 0x8}}, {0x1, 0xffff, {0x2, 0xfffffff9}}, {0x3, 0x8, {0x0, 0x53}}, {0x7162, 0x8, {0x1, 0x1305}}, {0x7, 0xa6, {0x3, 0x7fffffff}}, {0x4, 0x1, {0x2, 0x2}}, {0x1ff, 0x2, {0x2, 0xe78}}, {0x1ff, 0x3ff, {0x2, 0x7}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x7fff, 0x400, {0x2, 0x10}}, {0x40, 0x7fff, {0x2, 0x24}}, {0x4, 0x4, {0x1, 0xac}}, {0x9, 0xffff, {0x0, 0x7f}}, {0x6, 0x2, {0x3, 0x6}}, {0x7, 0x1, {0x0, 0x9}}, {0x5, 0xa, {0x2, 0x7000}}, {0x2b63, 0x3, {0x2, 0x2}}, {0x8, 0x5, {0x2, 0x1ccf}}, {0x7, 0x3, {0x2, 0x1}}, {0x1c9, 0x5, {0x1, 0x5}}, {0xa3f, 0x1, {0x0, 0x2}}, {0x3c88, 0x9, {0x1, 0x8}}, {0x6, 0xca, {0x3, 0xc}}, {0xfff9, 0x48, {0x1, 0x40}}, {0x3, 0xfffc, {0x2, 0x2b2}}, {0x9ec, 0x3, {0x1, 0x8001}}, {0xf92f, 0x7, {0x0, 0x7}}, {0x6, 0x7, {0x1, 0x3}}, {0xf, 0x7, {0x0, 0x5}}, {0x0, 0x7, {0x1, 0x4f8}}, {0x0, 0x7, {0x3, 0x7}}, {0x401, 0xf, {0x3, 0x100}}, {0x6, 0x6, {0x2, 0x6}}, {0x7, 0x5, {0x1, 0x3}}, {0x944, 0x2, {0x0, 0xa743}}, {0x2, 0x8, {0x0, 0x4}}, {0x7f, 0x5, {0x3, 0x6}}, {0x101, 0x5, {0x0, 0x5}}, {0x8, 0x0, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xfffffa7d}, 0x9, 0x5, 0x7, 0x9, 0x21, 'syz0\x00', "d0d992e43929437f3a49f119533b71ebe7f1f6a68fbc2d8599c745eaf5b1a60c", "b10864e2fe21d5f3c5e0acee32c77eb9c74740174785c5cee7ace7e092cd6ce7", [{0x1000, 0x4, {0x2, 0x6}}, {0x2, 0x8, {0x2, 0x4}}, {0x3, 0x8, {0x0, 0x6}}, {0xa, 0x4, {0x3, 0x4}}, {0x2, 0x665f, {0x3, 0xd9}}, {0x75, 0x0, {0x2, 0x2}}, {0x4, 0x5, {0x3, 0x8000}}, {0x9, 0x0, {0x2, 0xc}}, {0x6, 0x7, {0x1, 0x4}}, {0xac36, 0x7, {0x0, 0x3}}, {0x101, 0x9, {0x1, 0xc0000000}}, {0x9, 0x400, {0x3, 0x7}}, {0x4, 0x2, {0x1, 0x8993}}, {0x6, 0xc, {0x2, 0x200}}, {0x4, 0x6e, {0x1, 0x32}}, {0x7, 0x2, {0x2, 0x8}}, {0x9, 0x3, {0x3, 0x7}}, {0x0, 0x9, {0x3}}, {0x5, 0x9, {0x2}}, {0x0, 0x1, {0x1, 0x400000}}, {0x1000, 0x401, {0x1, 0x7}}, {0x1, 0xa, {0x0, 0x7ff}}, {0x8, 0x6, {0x1, 0x7}}, {0x80, 0x5035, {0x0, 0x8}}, {0x8, 0xf8, {0x1, 0x2}}, {0x7f, 0x4, {0x1, 0x5}}, {0x4, 0x2}, {0xa, 0x4, {0x1, 0x6}}, {0xfff4, 0x0, {0x1, 0xfffffffa}}, {0x2, 0x401, {0x3, 0x7fffffff}}, {0x5, 0x0, {0x1, 0x4}}, {0x84d, 0x6, {0x1, 0x8}}, {0x3, 0x0, {0x0, 0x8000}}, {0x8, 0x15ef, {0x3, 0x8cb}}, {0x101, 0x8f, {0x1, 0x200}}, {0x0, 0xfffe, {0x0, 0x2}}, {0x1, 0x1, {0x0, 0x7}}, {0x7, 0xb814, {0x2, 0xfff}}, {0x1ff, 0x7c, {0x0, 0x9}}, {0x101, 0x1c0, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x27d}, 0x5, 0x7, 0x7, 0x0, 0x27, 'syz0\x00', "48f41a92c3739f9d384e2cab11b414d05ff20708cf79ed0ad6fc48288b1d49dc", "d5324e6af34d2b215f0454101c150ab4fd96f2a151caf701253e2eefaa92ac54", [{0x40, 0x3, {0x1, 0xc}}, {0x94, 0x5c, {0x0, 0x8000}}, {0xc, 0xffff, {0x3, 0x8b36}}, {0x9, 0x2, {0x3, 0x9}}, {0x8, 0xf, {0x1, 0x2}}, {0x1ff, 0x6, {0x0, 0x7}}, {0x6, 0x2, {0x0, 0x504a}}, {0x1, 0x7, {0x1, 0x3}}, {0x3}, {0x43cf, 0xa, {0x2, 0x4}}, {0x4, 0x7, {0x2, 0x6}}, {0xfffc, 0x2, {0x3}}, {0x7f, 0x7fff, {0x0, 0xdf}}, {0xfff9, 0x1c, {0x2, 0x3}}, {0x1ff, 0x1, {0x0, 0xfff}}, {0x1, 0x1, {0x2, 0x2}}, {0x2b, 0x0, {0x1, 0x5}}, {0x7, 0x29, {0x3, 0x7}}, {0x9, 0x8, {0x1, 0x9c}}, {0x7, 0x7, {0x3, 0xfffffffb}}, {0x3, 0xff, {0x1, 0x7}}, {0x7, 0x80, {0x0, 0x4}}, {0x2, 0x4, {0x2, 0xf6d3}}, {0x0, 0x8, {0x2, 0x5}}, {0x4, 0x7321, {0x1, 0x6}}, {0x3, 0x4, {0x2, 0x29}}, {0xb, 0x4000, {0x1, 0x2}}, {0x0, 0x0, {0x0, 0x662a}}, {0x1, 0xa}, {0x6, 0xd89e, {0x1, 0xde000}}, {0x2, 0xe4ec, {0x3, 0x7eb7ac9e}}, {0x81, 0x5, {0x2, 0x3}}, {0x7, 0xffff, {0x0, 0x4}}, {0x8001, 0xfffa, {0x2, 0x7}}, {0x3, 0x7ff, {0x0, 0x8000}}, {0xeac, 0x7, {0x3, 0x5}}, {0x7, 0x7, {0x2, 0x10001}}, {0x1ff, 0x0, {0x0, 0x3}}, {0x57, 0x8, {0x3, 0x1}}, {0x5, 0x3ff, {0x0, 0xb}}]}}}, {{0x254, 0x1, {{0x2}, 0x7, 0x5, 0x1, 0x2, 0x5, 'syz1\x00', "da4e6d1dc461a8cc6941a142cc11b8e588496d56b0fab073df096f9956b6f61b", "335adaace836d083eb3dcc3c21bb20ba6afbe22243b7c18598c9ae59a2ed7fc6", [{0x2, 0x4, {0x3, 0x5}}, {0x3, 0xffff, {0x2, 0x80000001}}, {0x10, 0x9, {0x3}}, {0x7, 0xff, {0x2, 0xffffffff}}, {0x7f, 0xbc5, {0x0, 0x8000}}, {0x5, 0x7, {0x0, 0x80000001}}, {0x5, 0x1ff, {0x0, 0x6}}, {0x2, 0x3, {0x0, 0x7}}, {0x201b, 0x101, {0x3, 0xae49}}, {0x8001, 0x7, {0x0, 0x5}}, {0x2, 0xffff, {0x0, 0x2}}, {0xfff, 0x4, {0x2, 0x7}}, {0x9, 0x6, {0x3, 0x200}}, {0x6, 0xf, {0x0, 0x3}}, {0x5, 0x6, {0x0, 0x7f}}, {0x8, 0x8, {0x2, 0x8}}, {0x9, 0x2, {0x2, 0x1}}, {0x0, 0x9d, {0x1, 0x4}}, {0x5, 0x7, {0x1, 0xffff83bd}}, {0x0, 0xfff7, {0x0, 0x5}}, {0x7, 0x1, {0x2, 0x7d}}, {0x7fff, 0x1, {0x3, 0x80000001}}, {0x9, 0x0, {0x1, 0x4}}, {0xe117, 0xb, {0x3, 0x1}}, {0x7, 0x8, {0x3, 0x5}}, {0x9, 0x2, {0x2, 0xfff}}, {0x1, 0x4e6a, {0x1, 0x80000001}}, {0x5609, 0xff01, {0x2, 0x600}}, {0x91b2, 0x6, {0x1, 0x4}}, {0x9, 0x2, {0x0, 0x2}}, {0x7, 0x0, {0x0, 0x8001}}, {0xd, 0x80, {0x0, 0x4b59}}, {0x3, 0x81, {0x0, 0xc}}, {0xc42, 0x8, {0x0, 0x7}}, {0x5, 0x2, {0x2, 0x5}}, {0x18e4, 0x6, {0x4, 0xc166}}, {0x3, 0x8, {0x2, 0x8}}, {0x3, 0x1ff, {0x0, 0x1}}, {0x5, 0xfffc, {0x0, 0x6}}, {0xfff7, 0x5, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x1, 0x8, 0x3, 0x1000, 0x1d, 'syz0\x00', "42b5d05c81f7884d1a63321bd70d04795f75ece1177b9f377f4c7e2db4b35281", "7bce32e54ef5f794647acdda1d595539b2da62e1c630fe91d6491b86966a363b", [{0xa, 0x8, {0x1, 0x8}}, {0x80, 0x73, {0x2, 0x3}}, {0xb865, 0xfff8, {0x0, 0x9}}, {0xfff5, 0x6, {0x3, 0x5}}, {0x6, 0x100, {0x0, 0x6}}, {0x7, 0x5, {0x2}}, {0x4, 0x2, {0x2, 0x3995}}, {0x3fa, 0x2, {0x1, 0x30bc}}, {0x8, 0x4d0, {0x2, 0x7b}}, {0xff, 0x1000, {0x1, 0x33a0}}, {0x80, 0x4, {0x0, 0x8}}, {0x0, 0x9, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8}}, {0x8, 0xfff9, {0x3, 0x6}}, {0x8663, 0x7, {0x2, 0xc3d8}}, {0x9, 0xfffb, {0x3, 0x33a57570}}, {0x5, 0xf7, {0x1, 0x1}}, {0x5, 0x7ff, {0x2, 0x1}}, {0x14f2, 0x7ff, {0x2, 0x1}}, {0xb, 0x200, {0x3, 0x7}}, {0xb57, 0x4, {0x1, 0x7}}, {0x0, 0x3, {0x2, 0x2}}, {0x5, 0x1, {0x1, 0x4}}, {0x4004, 0x7ff, {0x0, 0x12}}, {0x8, 0x9, {0x2, 0x935}}, {0xc6, 0x7, {0x2, 0xe}}, {0x8001, 0x3, {0x1, 0xfffffff7}}, {0x8, 0x1, {0x3, 0x4}}, {0x6, 0x5, {0x2, 0x6}}, {0xfa54, 0x6, {0x3}}, {0x3, 0x1, {0x1, 0xb}}, {0x2, 0xd54e, {0x2, 0xf}}, {0x80d8, 0x101, {0x2, 0x9}}, {0xffff, 0x5, {0x3, 0x8}}, {0x3, 0xc9, {0x3}}, {0x6, 0x9, {0x2, 0x6}}, {0x6, 0x709, {0x2}}, {0x4, 0x7, {0x1, 0x1}}, {0xb, 0x100, {0x0, 0xf1a}}, {0x6, 0xff59, {0x0, 0xdd}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x8, 0x4, 0xb0, 0x2}, {0xde2, 0x5, 0x4, 0x5}, {0x92b, 0x3, 0x2, 0xd}, {0x8, 0xdf, 0x3, 0x6}, {0x3, 0x4, 0x36, 0x89a}, {0x0, 0x8, 0x2, 0x3}]}) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x8, 0x4, 0xb0, 0x2}, {0xde2, 0x5, 0x4, 0x5}, {0x92b, 0x3, 0x2, 0xd}, {0x8, 0xdf, 0x3, 0x6}, {0x3, 0x4, 0x36, 0x89a}, {0x0, 0x8, 0x2, 0x3}]}) close(r7) (async) close(r7) 2.226576054s ago: executing program 3 (id=5809): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) read(r0, &(0x7f0000004bc0)=""/199, 0xc7) 2.024180464s ago: executing program 1 (id=5811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x400001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) (async) sendmmsg$sock(r0, 0x0, 0x0, 0x48044) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/178, 0xb2, 0x0, 0x0}, &(0x7f0000000680)=0x40) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "6faf4a4e5900355d", "9f1ef007a1be605ba69d435ae81ac9b20d6b01b2922855aba6e7edd1b31531c7", "ef6451cf", "78d4d17a782e7197"}, 0x38) 1.883467554s ago: executing program 1 (id=5813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff850000ea00000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.703264586s ago: executing program 1 (id=5815): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8c6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x1}, @cb_func={0x18, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000180)=""/196, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x8fa2, 0x8f2b1e31}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x1, 0x5, 0x1, 0x686b9f70edabcac9}, {0x2, 0x3, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x9}, {0x5, 0x3, 0x6, 0x2}, {0x3, 0x1, 0x6, 0xa}, {0x4, 0x2, 0x4, 0xb}], 0x10, 0xffffffff}, 0x94) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060300000034e4000000000a000004050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a6e65742c6e6574000000001400078005001400a900000008000840"], 0x60}}, 0x2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8c6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x1}, @cb_func={0x18, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xc4, &(0x7f0000000180)=""/196, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x8fa2, 0x8f2b1e31}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x1, 0x5, 0x1, 0x686b9f70edabcac9}, {0x2, 0x3, 0x2, 0x9}, {0x1, 0x4, 0xf, 0x9}, {0x5, 0x3, 0x6, 0x2}, {0x3, 0x1, 0x6, 0xa}, {0x4, 0x2, 0x4, 0xb}], 0x10, 0xffffffff}, 0x94) (async) socket$inet(0x2, 0x3, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060300000034e4000000000a000004050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a6e65742c6e6574000000001400078005001400a900000008000840"], 0x60}}, 0x2) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) 1.508492087s ago: executing program 1 (id=5817): r0 = socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1.447468378s ago: executing program 2 (id=5818): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.387800802s ago: executing program 0 (id=5819): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @netrom, @default, @bcast, @rose, @rose, @default, @netrom]}, &(0x7f0000000100)=0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x3, 'lo\x00', {0x2}, 0x7ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) 1.326505411s ago: executing program 3 (id=5821): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="000086000000000000282c00fe8000000000000000000000000000aaff02000000000000000000000c000001890290780000000000000000f5ffffff000000000000000100000000250100000000ffbfe0000001"], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x2, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)) setsockopt(r4, 0x40005, 0x7, &(0x7f0000000280)="cab8b34d35370a81dec9c2b394110a031337e9759ef64544c2fac0034262130f31fce8135eb373fdfe40aed5dbfc4ad7aa1f9eaa34da078c4e11047d3b81d38f8d2c0d0f6b7893d70461ffc9dca9d08329506021af129ca6519fb618ad247ae00d243b6a8750f19c8cb7325b01e6dd77db", 0x71) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d96f7f83477ca178e3e4018a34844b9d62cbd7cd2a6200000000000000008f71a7a50000000000", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000980)=r9, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000e73effffff000000000800000091117100000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.268168402s ago: executing program 0 (id=5822): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) 1.189480634s ago: executing program 2 (id=5824): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = epoll_create(0x10) tee(r1, r0, 0x1, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000240)=@generic={0x1, 0x3, 0x400}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) 1.078780613s ago: executing program 4 (id=5825): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff4, 0xf, 0x6, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) sendmsg$nl_route_sched(r5, 0x0, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x68}, @fragment={0x2c, 0x0, 0xfa, 0x0, 0x0, 0x5, 0x64}], "01a102e9493a5d5b"}}}}}}}, 0x0) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1) 936.379251ms ago: executing program 2 (id=5826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt(r2, 0x84, 0x83, &(0x7f00000000c0)="1a00008d02000000", 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000380)={'wlan1\x00', 0x7}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000080)=':([\\+\x00', 0x801, &(0x7f00000000c0)={@align=0x6, {0x2901, 0x100, 0x1ec0, 0x5}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0xfd6, 0x400, 0x0, 0x7f]}, 0x1, 0x99, &(0x7f0000000240)=""/153}) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f00000001c0)={@empty, @local, 0x1, "8941add7586dfb01e7f3ae70fcdcdc09acb9cf7e364f1fee6e047fa936ee9035", 0x9, 0xce, 0x4, 0xf0000000}, 0x3c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @broadcast}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt(r2, 0x84, 0x83, &(0x7f00000000c0)="1a00008d02000000", 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000380)={'wlan1\x00', 0x7}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000080)=':([\\+\x00', 0x801, &(0x7f00000000c0)={@align=0x6, {0x2901, 0x100, 0x1ec0, 0x5}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0xfd6, 0x400, 0x0, 0x7f]}, 0x1, 0x99, &(0x7f0000000240)=""/153}) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f00000001c0)={@empty, @local, 0x1, "8941add7586dfb01e7f3ae70fcdcdc09acb9cf7e364f1fee6e047fa936ee9035", 0x9, 0xce, 0x4, 0xf0000000}, 0x3c) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce) (async) 826.002102ms ago: executing program 0 (id=5827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4010880) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 518.607ms ago: executing program 3 (id=5828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x32}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000000000000feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000004) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x36}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4050}, 0x20000090) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x2008, 0x11}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000002d80)={0x3, 0x3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @multicast, @void, {@generic={0x88f5}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) 464.940463ms ago: executing program 0 (id=5829): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x0, 0x4, 0xffff}}, 0x80, 0x0}, 0x2008c044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x4011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 459.773019ms ago: executing program 4 (id=5830): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @loopback}, &(0x7f0000000040)=0xc) (async) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) 402.242297ms ago: executing program 2 (id=5831): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) read(r0, &(0x7f0000004bc0)=""/199, 0xc7) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/131, 0x83}], 0x1, &(0x7f0000000180)=""/231, 0xe7}, 0x7}, {{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000940)=""/222, 0xde}], 0xa, &(0x7f0000000b00)=""/56, 0x38}, 0x80}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/160, 0xa0}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/239, 0xef}], 0x4, &(0x7f0000002840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/214, 0xd6}, {&(0x7f0000000f80)=""/146, 0x92}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000001080)=""/220, 0xdc}], 0x2, &(0x7f00000011c0)=""/189, 0xbd}, 0x9e}, {{&(0x7f0000001280)=@x25, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)}, {&(0x7f0000001340)=""/147, 0x93}], 0x2, &(0x7f0000001440)=""/254, 0xfe}, 0x7458}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000001540)=""/185, 0xb9}, {&(0x7f0000001600)=""/164, 0xa4}, {&(0x7f00000016c0)=""/36, 0x24}, {&(0x7f0000001700)=""/225, 0xe1}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000004880)=""/73, 0x49}, {&(0x7f0000004900)=""/255, 0xff}, {&(0x7f0000004a00)=""/104, 0x68}, {&(0x7f0000004a80)=""/95, 0x5f}], 0x9, &(0x7f0000006500)=""/193, 0xc1}, 0xdb90}, {{&(0x7f0000004cc0)=@nl=@proc, 0x80, &(0x7f0000005f00)=[{&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/249, 0xf9}], 0x3, &(0x7f0000005f40)=""/163, 0xa3}, 0x5}, {{&(0x7f0000006000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000006180), 0x0, &(0x7f00000061c0)=""/252, 0xfc}}], 0x9, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 387.001004ms ago: executing program 1 (id=5832): unshare(0x22020400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x47}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x20000080) 328.314722ms ago: executing program 3 (id=5833): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 226.419509ms ago: executing program 1 (id=5834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="95df8a585580a60b3d69c8423de2b4e3d342a6e5ef1ea5d88afb334ba512c14adf23c841210fe3a4a43b744c8023fed13cae06961f0c5ff6a864e8dd86daeee6e6c8903e2316611d93a22655617fe09ffe67f11233e5641ac62789073adcc7070fc7e5341ad202156bdd7f8df144a9ac7cb25d41d1886e0d215d158827bf18d826b3f361f9485cae4a0e0404c5936e4044082b32398f07d1aaa87f9fe23f3642a63717aa8aa4b97d0b9b890340f9d2a81e5c3b3c58375f8e1980f1d854bc94ef67c5a953c00e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@rdma_args={0x48, 0x114, 0x1, {{0x7fffffff, 0xf5}, {&(0x7f0000000200)=""/76, 0xffca}, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0xc, 0x7f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffff09}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x3}, &(0x7f00000002c0)=0x10, &(0x7f00000005c0)=0x80000001, 0x3ff, 0x3, 0x8, 0xa3, 0x1, 0xd5f}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/131, 0x83}, &(0x7f00000008c0), 0x4b}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x2}, &(0x7f0000000380)=0x6, &(0x7f00000009c0)=0x100000000002, 0x3, 0x7fff, 0x2, 0x8, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @zcopy_cookie={0x18, 0x114, 0xc, 0x81}], 0x188}, 0x24008880) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a00000004000000040000000cb16a8a149954996abe25d9343d9509de823c0ec164fd7a0b6c402dcba9dfd0bc847cdfb5989a4a2aae17c1dc07593a7ea9254965b174ac81ec4057c36c31497ee366287cbbeac9a5fa14d7a66fbc14e22345f4b8bf2d355d615f859220ede9ae627391ed275c0e2ad97ad1b551e3ee314e4d16a108bcabeda45b90421feb5f398e6840bbdeee1bf1e58202c816280dae699b6286276fcec028e085727584810ede1fa7d0c96a589b637a01c1aa329d0659aeffdaeb418db0bfdaad0b23f59eec25d13fcfcb679258a7fd9c06b4190df83d4da86efc152875d4aa609a"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe22, 0xd99, @private0, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x7e, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'gretap0\x00', r5, 0x40, 0x7800, 0x0, 0x7, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0x3, 0xad}, @end]}}}}}) recvfrom$packet(r2, &(0x7f0000000540)=""/12, 0xc, 0x2, &(0x7f00000006c0)={0x11, 0x2, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa179bfea6ba9b4709860bc1d0a8b462500000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5a}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) 226.204126ms ago: executing program 4 (id=5835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000000000000ff010000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0800000000000000000000000000000000000000000000000000000000000000000000000200048000000000000000004c001400736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600ff0700eda9ef52cfe1002bb5e7014d"], 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 225.788173ms ago: executing program 0 (id=5836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0160000000000000240013800900010069706970000000001400b612eb2771e7a1f6a55018028008000100c3463301f9435efd105bf7b269e14d6af8564498945ce1a6ce606b67137e48103a884fd083d797d0a7fd8e2e9bf0a17e00de47e6dd75476f94eb17ce", @ANYRES32=r2, @ANYBLOB="08000300ac1e0001"], 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) socket(0xa, 0x5, 0x0) (async) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x108, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x52, 0x43}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4e54163862ab7bfea0773258faaf510e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e4b86061db222c33ee89a599f55e68ee"}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9}, 0x4000004) 165.874407ms ago: executing program 4 (id=5837): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/9, 0x9}) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 133.719224ms ago: executing program 3 (id=5838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d052abd70000000000000000000", @ANYBLOB="0000000010000000240012800c0001006d6163766c616e001400028008000900ffffffff0800030002000000140035006d6163766c616e30"], 0x58}}, 0x8000) syz_emit_ethernet(0x124, &(0x7f00000002c0)={@empty, @remote, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @tipc={{0x3d, 0x4, 0x1, 0x4, 0x10e, 0x64, 0x0, 0xf, 0x6, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x6, "c8a524f6"}, @generic={0x82, 0xb, "5ffa0e406689db852a"}, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x2, [{@private=0xa010101}, {@broadcast}]}, @timestamp_prespec={0x44, 0x4c, 0x99, 0x3, 0x5, [{@remote, 0x52dba096}, {@multicast1}, {@empty, 0xfcbf}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x3}, {@local, 0x7ff}, {@local, 0x7}, {@empty, 0x3}, {@empty, 0x8}]}, @ssrr={0x89, 0x3, 0x2b}, @timestamp_prespec={0x44, 0x14, 0x48, 0x3, 0x9, [{@multicast1, 0x2}, {@multicast1}]}, @noop, @cipso={0x86, 0x36, 0x3, [{0x1, 0x9, "2aaae29a925494"}, {0x7, 0x4, "77e0"}, {0x0, 0x2}, {0x5, 0x10, "a81434cafb94bd8f810999632a98"}, {0x6, 0x7, "0a469ccb79"}, {0x2, 0x7, "a95850c104"}, {0x6, 0x3, 't'}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0xd, [0x2, 0xfffffffc, 0x8, 0x7, 0xc39, 0x9b]}]}}, @payload_conn={{{0x1a, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x37ca, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x9, 0x3, 0x4e24, 0x4e24}}, [0x0, 0x0]}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0xa, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x4, &(0x7f00000005c0)=""/106, 0x6a}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f00000000c0)="e3c1fed4d945863cbd9402e92680a6d1d53ee5b88e84e95eb3c4ce59aabcf2c5cbe910f89f6c9f3f8da880f28782f49891cb2f1d1888d18438504c6a485b95f296ae843962c68b1f0c51686cc4c3b8939b76f3be", 0x54, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0xfffffc34}, {0x0, 0x12}], 0x2}, 0x5}], 0x1, 0x102, 0x0) 50.153058ms ago: executing program 0 (id=5839): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r1, 0x4, r1}, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000000)={@default, @null, @default, 0x63, 0x5, 0x7, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000210029bd70000000000003000000140001"], 0x28}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010800000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000400000000000000000000000004400050000000000000000000000000000000000000004d53c00000000000000ff"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000140)='\x00', 0x20001, &(0x7f0000000280)={@align=0x80000000, {0xe1, 0x6, 0x100, 0x7f}}, 0x10, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x8}, 0x2, &(0x7f0000000400)=[{0x1, 0xff, &(0x7f0000000340)='[\x00', &(0x7f0000000a80)="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", 0x1000, 0x18}, {0x1, 0xb, &(0x7f0000000380)='^@\x14-$({!$@-.\x00', &(0x7f00000003c0)="411f8d6196f1b5d74384dc821c784c2ff73ef4fb7bf04d", 0x17, 0x28}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000680)=r1}, 0x20) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r11 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x10000004}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x7, 0xa8, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xb6, 0x3, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r1}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x8, 0x89, 0x1, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbaff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@call={0x85, 0x0, 0x0, 0x37}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x5, 0x7a, &(0x7f0000000900)=""/122, 0x41100, 0x40, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000740)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x80, 0xd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c00)=[r12, r13, r14, r15, r16, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x2, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x9, 0x9}, {0x4, 0x3, 0x3, 0x9}], 0x10, 0x7}, 0x94) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d40)=0x14) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000180)=@ll={0x11, 0x4, r17, 0x1, 0x9, 0x6, @broadcast}, 0x80, 0x0}, 0xe07e872420df678e) 42.849692ms ago: executing program 4 (id=5840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 0s ago: executing program 4 (id=5841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) unshare(0x26020480) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYBLOB="654e2dbd7000fcdbdf2503000000083ea3000100d4848205ba6706615e98e046e7192747e9736f42b8cf08da5c0f083f171ef119c97ea396eb8312fc615834e064664eaa883879b149780114419f48e5f90a390a4a0da2fde3dbc7aa8bc08f3bf0ff3f0ed270b881d99c2f964f707b45620a2c5731cfb47da8d5d787afe1259a035f7396277f2581aec8cfe861d857ed12872a", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040054}, 0x10802) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xb5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000d4e97f49b5b754baebaea54b76", @ANYBLOB="5565d5bbb186253f00cdb5acf2aa023522c599ec08758d00", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYRESHEX=r4, @ANYRESHEX=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r2, 0x25, 0x0, @void}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000004acd0768fcb5dc8989c01a453bcd8c4a80b61131971222421ecca69384e4db6a71340d96bbde4664214a09db0181174a14a90b3d943a72d64d7793cff16836a9d6f5322fac8641c7914d91ff628b5222e501e5325fcb787d93f2c083f2c587193ae24a548bf9b885d3c647043824c836c2a15d70c88922292f771347ad3771dab8fbdb940586bb3ce7c4780a5224d40ce3285884e7bd584cc22af1f1b4a4620d36095a600e45139295e1f918a6bdabc459240807", @ANYRES32=0x0, @ANYRES64], 0x38}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r9, 0x89e2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.198340][T21687] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 517.253442][T21697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'. [ 517.300296][T21687] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 517.460304][T21698] lo speed is unknown, defaulting to 1000 [ 517.544321][T21707] netpci0: tun_chr_ioctl cmd 1074025678 [ 517.554877][T21707] netpci0: group set to 0 [ 517.605168][T21709] netlink: 'syz.4.4036': attribute type 3 has an invalid length. [ 517.916903][T21722] lo speed is unknown, defaulting to 1000 [ 518.346452][T21751] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 518.430225][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'. [ 518.501839][T21759] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4048'. [ 518.677530][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4049'. [ 518.772658][T21775] macvtap0: entered promiscuous mode [ 519.290726][T21805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.479089][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 520.009421][T21840] xt_cgroup: path and classid specified [ 520.032111][T21841] xt_cgroup: path and classid specified [ 520.122699][T21836] lo speed is unknown, defaulting to 1000 [ 520.204953][T21845] syzkaller0: entered promiscuous mode [ 520.210769][T21845] syzkaller0: entered allmulticast mode [ 520.359620][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 520.373522][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'. [ 520.525312][T21862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.602764][T21867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4078'. [ 520.626970][T21867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4078'. [ 520.667265][T21867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.989550][T21895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.043453][T21895] ip6erspan0: entered promiscuous mode [ 521.303561][T21919] netlink: 'syz.1.4088': attribute type 1 has an invalid length. [ 521.533382][T21920] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 521.555579][T21926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.594084][T21917] lo speed is unknown, defaulting to 1000 [ 521.795165][T21926] tipc: Enabling of bearer rejected, failed to enable media [ 522.483930][T21952] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 522.490330][T21951] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 522.550038][T21956] __nla_validate_parse: 5 callbacks suppressed [ 522.550060][T21956] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4097'. [ 522.562926][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 522.595357][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 522.614973][T21951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4096'. [ 522.633363][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4096'. [ 522.763154][T21959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4099'. [ 522.936093][T21966] lo speed is unknown, defaulting to 1000 [ 523.263471][T21990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4106'. [ 523.272980][T21992] syzkaller0: entered promiscuous mode [ 523.278639][T21992] syzkaller0: entered allmulticast mode [ 523.299281][T21992] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4105'. [ 523.315499][T21992] netlink: 'syz.4.4105': attribute type 9 has an invalid length. [ 523.354119][T21992] 0: reclassify loop, rule prio 0, protocol 800 [ 523.517125][T22006] netlink: 'syz.3.4110': attribute type 15 has an invalid length. [ 523.542715][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 523.657642][T21538] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 523.676653][T21538] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 523.706954][T21538] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 523.741634][T21538] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 523.917276][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 524.080514][T17473] Bluetooth: hci2: command 0x0406 tx timeout [ 524.377251][T22046] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 524.453647][T22047] lo speed is unknown, defaulting to 1000 [ 524.684376][T22050] netlink: 'syz.0.4122': attribute type 23 has an invalid length. [ 524.961504][T22066] nbd: must specify a device to reconfigure [ 525.468869][T22092] vlan4: entered promiscuous mode [ 525.474265][T22092] gretap0: entered promiscuous mode [ 525.480273][T22092] vlan4: entered allmulticast mode [ 525.485677][T22092] gretap0: entered allmulticast mode [ 525.715006][T10238] lec:lec_start_xmit: lec0:No lecd attached [ 526.253161][T22132] pimreg3: entered allmulticast mode [ 526.788402][T22158] netlink: 'syz.0.4150': attribute type 11 has an invalid length. [ 526.796268][T22158] netlink: 'syz.0.4150': attribute type 23 has an invalid length. [ 526.955012][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.962886][T22174] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.983291][T22174] bridge0: entered allmulticast mode [ 527.711661][T22187] team0 (unregistering): Port device team_slave_0 removed [ 528.000901][T22187] team0 (unregistering): Port device team_slave_1 removed [ 528.011551][T22187] team0 (unregistering): Port device veth3 removed [ 528.151076][T22211] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 528.164568][T22210] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 528.200127][T22211] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 528.228216][T22210] netlink: 'syz.1.4159': attribute type 1 has an invalid length. [ 528.502444][T22229] lo speed is unknown, defaulting to 1000 [ 528.518995][T22230] lo speed is unknown, defaulting to 1000 [ 528.700498][T22242] __nla_validate_parse: 11 callbacks suppressed [ 528.700522][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4168'. [ 529.004945][T22248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4169'. [ 529.017057][T22236] lo speed is unknown, defaulting to 1000 [ 529.400348][ T30] audit: type=1804 audit(1772400701.093:18): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4172" name="/newroot/195/cgroup.controllers" dev="tmpfs" ino=1007 res=1 errno=0 [ 529.455457][T22262] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 529.498748][T22263] netlink: 'syz.1.4175': attribute type 4 has an invalid length. [ 529.506964][ T30] audit: type=1800 audit(1772400701.093:19): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4172" name="cgroup.controllers" dev="tmpfs" ino=1007 res=0 errno=0 [ 529.507022][ T30] audit: type=1800 audit(1772400701.113:20): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4172" name="cgroup.controllers" dev="tmpfs" ino=1007 res=0 errno=0 [ 529.545794][T22263] netlink: 'syz.1.4175': attribute type 8 has an invalid length. [ 529.604082][T22263] netlink: 'syz.1.4175': attribute type 1 has an invalid length. [ 529.627104][T22263] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4175'. [ 529.646068][T22263] NCSI netlink: No device for ifindex 0 [ 529.654792][T22270] netlink: 'syz.0.4179': attribute type 21 has an invalid length. [ 529.678731][T22265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4176'. [ 529.901075][T22285] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4182'. [ 530.108021][T22302] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 530.113369][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4188'. [ 530.130639][T22304] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 530.138819][T22304] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4188'. [ 530.149035][T22304] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4188'. [ 530.280475][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4187'. [ 530.316810][T22306] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 530.353043][T22319] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 530.393397][T22319] bond2 (unregistering): Released all slaves [ 530.626180][T22340] netlink: 'syz.3.4197': attribute type 1 has an invalid length. [ 530.634955][T22340] netlink: 'syz.3.4197': attribute type 2 has an invalid length. [ 530.640152][T22338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4198'. [ 530.642905][T22340] netlink: 'syz.3.4197': attribute type 1 has an invalid length. [ 530.674059][T22338] nbd: illegal input index 38656 [ 530.823255][T22348] netlink: 'syz.3.4202': attribute type 9 has an invalid length. [ 530.895019][T22351] IPv6: Can't replace route, no match found [ 530.946707][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 530.954772][ C0] lec:lec_tx_timeout: lec0 [ 531.005181][T22363] Cannot find set identified by id 0 to match [ 531.248338][T22366] lo speed is unknown, defaulting to 1000 [ 533.955324][T22391] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 534.122403][T22416] __nla_validate_parse: 7 callbacks suppressed [ 534.122427][T22416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4218'. [ 534.243225][T22419] lo speed is unknown, defaulting to 1000 [ 534.376392][T22432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.394881][T22435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.413922][ T5967] lo speed is unknown, defaulting to 1000 [ 534.422890][ T5967] syz2: Port: 1 Link ACTIVE [ 534.523494][T22431] lo speed is unknown, defaulting to 1000 [ 534.658171][T22457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4230'. [ 534.669166][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4230'. [ 534.927139][T22464] validate_nla: 4 callbacks suppressed [ 534.927159][T22464] netlink: 'syz.0.4233': attribute type 13 has an invalid length. [ 534.945671][T22464] netlink: 'syz.0.4233': attribute type 17 has an invalid length. [ 535.056791][T22472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4233'. [ 535.129941][T22464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.181766][T22479] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4234'. [ 535.444801][T22483] netlink: 'syz.4.4235': attribute type 9 has an invalid length. [ 535.609636][T22488] lo speed is unknown, defaulting to 1000 [ 535.797242][T22492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.291334][T22502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4241'. [ 536.563779][T22518] lo speed is unknown, defaulting to 1000 [ 538.128930][T22577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4261'. [ 538.158864][T22577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4261'. [ 538.234059][T22580] bridge0: port 3(veth0_to_bridge) entered blocking state [ 538.252340][T22580] bridge0: port 3(veth0_to_bridge) entered disabled state [ 538.276816][T22580] veth0_to_bridge: entered allmulticast mode [ 538.298403][T22580] veth0_to_bridge: entered promiscuous mode [ 538.304592][T22580] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.335541][T22580] bridge0: port 3(veth0_to_bridge) entered blocking state [ 538.343036][T22580] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 538.463013][T22591] syzkaller1: entered promiscuous mode [ 538.491211][T22591] syzkaller1: entered allmulticast mode [ 538.732554][T22601] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 538.745743][T22601] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4268'. [ 538.762908][T22601] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4268'. [ 539.069606][T22616] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 539.105112][T22616] bond4 (unregistering): Released all slaves [ 539.316923][T22632] xt_connbytes: Forcing CT accounting to be enabled [ 539.333888][T22632] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 539.793722][T22660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4286'. [ 539.836964][T22665] IPv6: NLM_F_REPLACE set, but no existing node found! [ 539.890747][T22652] syzkaller0: entered promiscuous mode [ 539.906752][T22652] syzkaller0: entered allmulticast mode [ 540.193107][T22692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4295'. [ 540.321584][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 542.095001][T22715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.128359][T22716] xt_hashlimit: size too large, truncated to 1048576 [ 542.286445][T22722] lo speed is unknown, defaulting to 1000 [ 542.462238][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4307'. [ 542.470555][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'. [ 542.475933][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 60 seconds [ 542.492021][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 60 seconds [ 542.503631][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 60 seconds [ 542.515369][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 60 seconds [ 542.764209][T22756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'. [ 542.841726][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'. [ 543.068880][T22780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4316'. [ 543.151244][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4320'. [ 543.199317][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4320'. [ 543.343857][T22797] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.360553][T22797] syzkaller1: linktype set to 778 [ 543.366259][T22799] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.373010][T22799] syzkaller1: linktype set to 778 [ 543.522021][T22808] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 543.623604][T22808] bond4: entered promiscuous mode [ 543.652382][T22808] bond4: entered allmulticast mode [ 543.659187][T22808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.690273][T22813] erspan1: entered allmulticast mode [ 543.711693][T22813] bond4: (slave erspan1): making interface the new active one [ 543.719364][T22813] erspan1: entered promiscuous mode [ 543.729434][T22813] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 543.912495][T22815] lo speed is unknown, defaulting to 1000 [ 544.193338][T22844] lo speed is unknown, defaulting to 1000 [ 544.250480][T22852] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 544.419031][T22852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.446377][T22857] bond3: (slave gretap2): making interface the new active one [ 544.464414][T22857] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 545.064851][T22860] bond3 (unregistering): (slave gretap2): Releasing active interface [ 545.080759][T22860] bond3 (unregistering): Released all slaves [ 545.114158][T22853] pimreg: tun_chr_ioctl cmd 1074025677 [ 545.120229][T22853] pimreg: linktype set to 0 [ 545.387631][T22869] __nla_validate_parse: 12 callbacks suppressed [ 545.387647][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4341'. [ 545.518990][T22880] netlink: 'syz.3.4344': attribute type 29 has an invalid length. [ 545.593648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.607091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.621169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.634167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.646981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.659896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.672778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.685582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.698352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.716000][T22880] netlink: 'syz.3.4344': attribute type 29 has an invalid length. [ 547.096684][ C1] net_ratelimit: 3140 callbacks suppressed [ 547.096706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.115144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.127729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.140227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.152904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.165494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.178021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.190621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.203220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.215988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.601037][T22928] xt_bpf: check failed: parse error [ 547.775395][T22936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4355'. [ 547.897579][ T796] IPVS: starting estimator thread 0... [ 547.995144][T22941] IPVS: using max 25 ests per chain, 60000 per kthread [ 548.092840][T22947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4358'. [ 548.177549][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4358'. [ 548.748461][T22969] "syz.2.4363" (22969) uses obsolete ecb(arc4) skcipher [ 548.944436][T22970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.955397][T22982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4367'. [ 550.633194][T23006] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 550.738219][T22990] xfrm0: entered promiscuous mode [ 550.744680][T22990] xfrm0: entered allmulticast mode [ 551.132872][T23012] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 551.534804][ T5191] udevd[5191]: worker [20232] /devices/virtual/block/nbd3 is taking a long time [ 551.654566][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'. [ 551.664604][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4377'. [ 551.712238][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'. [ 552.109564][ C1] net_ratelimit: 7664 callbacks suppressed [ 552.109586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 552.128468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 552.141173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.153970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.166855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.179731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.192448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.205132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.220994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 552.234080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 552.304658][T23044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4381'. [ 552.495548][T23043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4381'. [ 552.883777][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4386'. [ 553.918319][T23090] geneve3: entered promiscuous mode [ 553.952072][T21554] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.985235][T21554] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.036243][T21554] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.092664][T21554] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.543554][T23105] syzkaller0: entered promiscuous mode [ 554.591280][T23105] syzkaller0: entered allmulticast mode [ 555.910339][T23156] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4414'. [ 555.937622][T23158] netlink: 'syz.1.4415': attribute type 8 has an invalid length. [ 555.998739][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4415'. [ 556.110957][T23156] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4414'. [ 556.177317][T23156] bridge0: left promiscuous mode [ 556.196686][T23156] bridge0: left allmulticast mode [ 556.203681][T23159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4412'. [ 556.727754][ T5141] block nbd4: Receive control failed (result -32) [ 556.743026][T23182] x_tables: duplicate underflow at hook 1 [ 556.765849][T23182] __nla_validate_parse: 1 callbacks suppressed [ 556.765870][T23182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4420'. [ 557.116745][ C1] net_ratelimit: 7115 callbacks suppressed [ 557.116769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.135187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.147820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.160310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.173970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 557.186694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 557.199221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.212652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.225251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.237574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.534126][T23183] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.4420'. [ 557.607332][T23183] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 557.855554][T23196] netlink: 'syz.0.4424': attribute type 3 has an invalid length. [ 557.929621][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 558.052901][T23197] lo speed is unknown, defaulting to 1000 [ 558.348496][T23207] block nbd5: server does not support multiple connections per device. [ 558.390009][T23207] block nbd5: shutting down sockets [ 558.772057][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4430'. [ 558.928296][T23223] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 559.694798][T23246] netlink: 'syz.4.4433': attribute type 13 has an invalid length. [ 559.743958][T23248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4434'. [ 559.803488][T23246] netlink: 'syz.4.4433': attribute type 17 has an invalid length. [ 559.833561][T23250] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4435'. [ 559.896973][T23250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4435'. [ 560.002984][T23252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4435'. [ 560.059477][T23252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4435'. [ 560.124850][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4436'. [ 561.172294][T23246] syz_tun: left promiscuous mode [ 561.232718][T23246] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.755203][T23273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.127017][ C1] net_ratelimit: 7411 callbacks suppressed [ 562.127041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 562.145631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 562.158229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.170783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.183312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.195869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.208397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.220878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.236947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 562.241706][T23273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.249656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 562.584709][T23287] netlink: 'syz.3.4445': attribute type 1 has an invalid length. [ 562.858317][T23276] lo speed is unknown, defaulting to 1000 [ 562.959191][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 562.979994][T23273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.249084][T23273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.886027][T21560] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.014512][T21558] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.143300][T23308] bond4: option fail_over_mac: invalid value (127) [ 564.182079][T23308] bond4 (unregistering): Released all slaves [ 564.296976][T21557] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.340477][T21560] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.615250][T23321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.622781][T23321] IPv6: NLM_F_CREATE should be set when creating new route [ 564.630275][T23321] IPv6: NLM_F_CREATE should be set when creating new route [ 564.722699][T23325] __nla_validate_parse: 2 callbacks suppressed [ 564.722720][T23325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4454'. [ 564.747675][T23321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4453'. [ 564.800912][T23330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4453'. [ 564.817946][T23331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4454'. [ 564.855651][T23331] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4454'. [ 564.902476][T23331] netlink: 'syz.3.4454': attribute type 6 has an invalid length. [ 564.940088][T23331] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4454'. [ 565.378569][T23342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4459'. [ 565.774212][T23350] syzkaller0: entered promiscuous mode [ 565.814616][T23350] syzkaller0: entered allmulticast mode [ 567.136893][ C1] net_ratelimit: 7162 callbacks suppressed [ 567.136915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.155424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.168031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.180532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.195547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 567.197767][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 567.208196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 567.231312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.243847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.256533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.269799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.281477][T23378] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4466'. [ 567.966804][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.974985][ C0] lec:lec_tx_timeout: lec0 [ 568.004766][ T5141] block nbd5: Receive control failed (result -32) [ 568.038456][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 568.982786][T23434] netlink: 'syz.4.4478': attribute type 18 has an invalid length. [ 569.717103][T21560] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.744003][T21560] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.822029][T21560] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.048894][T21560] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.067353][T23464] mac80211_hwsim hwsim66 wlan1: entered promiscuous mode [ 570.128505][T23463] lo speed is unknown, defaulting to 1000 [ 570.411801][T23473] netlink: 'syz.4.4489': attribute type 4 has an invalid length. [ 570.439643][T23473] __nla_validate_parse: 3 callbacks suppressed [ 570.439662][T23473] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4489'. [ 570.827875][T23485] vlan3: entered allmulticast mode [ 570.848326][T23485] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 571.721750][T23493] lo speed is unknown, defaulting to 1000 [ 572.146742][ C1] net_ratelimit: 7182 callbacks suppressed [ 572.146765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.165356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.178051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.191157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.203722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.218549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 572.231519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:2f:eb:11:c6:f1, vlan:0) [ 572.244059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.256661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.269641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.547459][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 90 seconds [ 572.558986][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 90 seconds [ 572.570071][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 90 seconds [ 572.581647][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 90 seconds [ 573.064365][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4501'. [ 573.511304][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 573.523791][T23540] bridge0: port 3(veth0_to_bridge) entered disabled state [ 573.531953][T23540] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.539513][T23540] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.592124][T23540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.603197][T23540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.742644][T21560] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.769681][T21560] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.799388][T21560] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.820492][T21560] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.836551][T21560] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.845552][T21560] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.859900][T21560] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 573.871252][T21560] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.892630][T23558] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4508'. [ 573.976360][T23562] lo speed is unknown, defaulting to 1000 [ 574.105045][T23567] geneve1: entered allmulticast mode [ 574.299628][T23590] netlink: 'syz.4.4517': attribute type 1 has an invalid length. [ 574.335477][T23590] bond7: entered promiscuous mode [ 574.342111][T23590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.362924][T23590] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.370077][T23590] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 574.381113][T23590] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 574.399174][T23590] bond7: (slave wireguard0): making interface the new active one [ 574.407146][T23590] wireguard0: entered promiscuous mode [ 574.414339][T23590] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 574.599922][T23608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4523'. [ 574.633549][T23608] bond3: entered promiscuous mode [ 574.639323][T23608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 574.663733][T23608] bond3 (unregistering): Released all slaves [ 574.954791][T23625] netlink: 'syz.4.4530': attribute type 1 has an invalid length. [ 574.958913][T23623] dummy0: entered promiscuous mode [ 574.972551][T23622] dummy0: left promiscuous mode [ 575.045683][T23629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4531'. [ 575.144998][T23631] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 575.206881][T23631] bridge4: entered allmulticast mode [ 575.770640][T23672] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4542'. [ 575.853919][T23676] syzkaller0: entered promiscuous mode [ 575.873847][T23676] syzkaller0: entered allmulticast mode [ 576.099188][T23688] lo speed is unknown, defaulting to 1000 [ 576.210590][T23698] ip6gre1: entered promiscuous mode [ 576.335780][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4549'. [ 576.793389][T23719] lo speed is unknown, defaulting to 1000 [ 576.844700][T23723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4558'. [ 576.925060][T23722] syzkaller1: entered promiscuous mode [ 576.963409][T23722] syzkaller1: entered allmulticast mode [ 576.990153][T23726] netlink: 'syz.0.4559': attribute type 2 has an invalid length. [ 577.306431][T23732] lo speed is unknown, defaulting to 1000 [ 577.393239][T23730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4560'. [ 577.557906][T23751] syzkaller0: entered promiscuous mode [ 577.565072][T23751] syzkaller0: entered allmulticast mode [ 578.123014][T23777] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4575'. [ 578.494185][T23801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4580'. [ 578.640388][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4579'. [ 578.985888][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4586'. [ 579.182920][T23840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4588'. [ 579.326058][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4593'. [ 579.361027][ T5869] IPVS: starting estimator thread 0... [ 579.486947][T23855] IPVS: using max 29 ests per chain, 69600 per kthread [ 579.569154][T23862] netlink: 'syz.3.4597': attribute type 1 has an invalid length. [ 579.692372][T23871] lo speed is unknown, defaulting to 1000 [ 579.907206][T21560] wlan1: Trigger new scan to find an IBSS to join [ 581.099954][T23935] netlink: 'syz.2.4617': attribute type 10 has an invalid length. [ 581.123937][T23935] team0: Port device syz_tun added [ 581.138917][T23936] syzkaller0: entered promiscuous mode [ 581.151537][T23936] syzkaller0: entered allmulticast mode [ 581.239600][T23939] net_ratelimit: 1994 callbacks suppressed [ 581.239621][T23939] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 581.256223][T23939] openvswitch: netlink: Flow actions attr not present in new flow. [ 581.376256][T23944] netlink: 'syz.0.4620': attribute type 11 has an invalid length. [ 581.659344][T23946] __nla_validate_parse: 3 callbacks suppressed [ 581.659365][T23946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4621'. [ 581.675665][T23946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4621'. [ 581.771941][T23948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4622'. [ 582.003765][T23958] gretap0: entered promiscuous mode [ 582.008141][T23963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4627'. [ 582.012693][T23958] vlan3: entered promiscuous mode [ 582.069309][T23961] netlink: 'syz.2.4626': attribute type 12 has an invalid length. [ 582.101580][T23964] netlink: 'syz.2.4626': attribute type 3 has an invalid length. [ 582.112259][T23964] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4626'. [ 582.312051][T23970] syzkaller0: entered promiscuous mode [ 582.318009][T23970] syzkaller0: entered allmulticast mode [ 582.353554][T23973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4630'. [ 583.340790][T24001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4636'. [ 583.346981][T23999] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.357692][T24001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4636'. [ 583.544805][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4639'. [ 584.316903][T24027] veth8: entered allmulticast mode [ 584.360104][T24028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4645'. [ 584.500039][T24028] bond3: entered promiscuous mode [ 584.505592][T24028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.610309][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033aba000: rx timeout, send abort [ 584.621568][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033aba000: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.866648][T21560] wlan1: Trigger new scan to find an IBSS to join [ 585.011574][T23910] Set syz1 is full, maxelem 65536 reached [ 585.021267][T24001] SET target dimension over the limit! [ 585.170085][T24050] netlink: 'syz.1.4651': attribute type 1 has an invalid length. [ 585.204691][T24048] lo speed is unknown, defaulting to 1000 [ 585.769937][T21558] wlan1: Creating new IBSS network, BSSID 06:b2:9d:e9:d4:08 [ 585.870007][T24085] siw: device registration error -23 [ 585.913514][T24073] lo speed is unknown, defaulting to 1000 [ 586.229282][ T5869] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 60 sec [ 586.635193][T24130] netlink: 'syz.2.4676': attribute type 2 has an invalid length. [ 586.992923][T24147] __nla_validate_parse: 12 callbacks suppressed [ 586.992945][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'. [ 587.439393][T24147] netlink: 'syz.4.4680': attribute type 10 has an invalid length. [ 587.448564][T24149] netlink: 'syz.4.4680': attribute type 10 has an invalid length. [ 587.481839][T24149] veth0_vlan: left promiscuous mode [ 587.491596][T24149] veth0_vlan: entered promiscuous mode [ 587.502278][T24149] team0: Device veth0_vlan failed to register rx_handler [ 587.519265][T24147] veth0_vlan: left promiscuous mode [ 587.525638][T24147] veth0_vlan: entered promiscuous mode [ 587.534131][T24147] team0: Device veth0_vlan failed to register rx_handler [ 587.732087][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'. [ 587.760247][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4691'. [ 588.366013][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4703'. [ 588.423373][T24224] syzkaller0: entered promiscuous mode [ 588.441068][T24224] syzkaller0: entered allmulticast mode [ 588.686093][T24223] netlink: 'syz.4.4702': attribute type 21 has an invalid length. [ 588.703687][T24223] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4702'. [ 588.714827][T24223] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4702'. [ 588.768725][T10238] lec:lec_start_xmit: lec0:No lecd attached [ 588.905502][T24246] vlan5: entered allmulticast mode [ 588.911858][T24246] team0: entered allmulticast mode [ 588.917803][T24246] team_slave_0: entered allmulticast mode [ 588.923723][T24246] team_slave_1: entered allmulticast mode [ 588.933198][T24246] syz_tun: entered allmulticast mode [ 588.940303][T24248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4711'. [ 589.266783][T24264] netlink: 'syz.4.4716': attribute type 1 has an invalid length. [ 589.338016][T24268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4716'. [ 589.374366][T24264] bond8: entered promiscuous mode [ 589.390300][T24264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 590.070760][T24294] netlink: 'syz.1.4724': attribute type 1 has an invalid length. [ 590.079587][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 590.092225][T24291] lo speed is unknown, defaulting to 1000 [ 590.106667][T24294] netlink: 364 bytes leftover after parsing attributes in process `syz.1.4724'. [ 590.287471][T24299] sctp: [Deprecated]: syz.1.4726 (pid 24299) Use of int in maxseg socket option. [ 590.287471][T24299] Use struct sctp_assoc_value instead [ 590.499521][T24302] IPv6: sit1: Disabled Multicast RS [ 590.622088][T24306] netlink: 'syz.1.4728': attribute type 2 has an invalid length. [ 590.757866][T24311] ipvlan0: entered promiscuous mode [ 590.764617][T24311] ipvlan0: left promiscuous mode [ 590.821377][T24314] ipvlan0: entered promiscuous mode [ 590.828652][T24314] ipvlan0: left promiscuous mode [ 593.906558][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 593.914681][ C0] lec:lec_tx_timeout: lec0 [ 602.631667][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 120 seconds [ 602.642466][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 120 seconds [ 602.654120][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 120 seconds [ 602.665702][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 120 seconds [ 615.859044][T21558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.392938][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 629.906540][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 629.914678][ C0] lec:lec_tx_timeout: lec0 [ 632.707069][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 150 seconds [ 632.718055][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 150 seconds [ 632.729446][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 150 seconds [ 632.740696][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 150 seconds [ 639.213085][T24362] __nla_validate_parse: 9 callbacks suppressed [ 639.213108][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'. [ 639.239601][T24363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4740'. [ 639.329364][T24363] netlink: 'syz.1.4740': attribute type 5 has an invalid length. [ 639.418388][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'. [ 639.445050][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'. [ 639.495263][T24387] netlink: 'syz.3.4747': attribute type 21 has an invalid length. [ 639.577864][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4747'. [ 639.684012][T24395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.698920][T24395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.741364][T24395] batman_adv: batadv0: Interface deactivated: 0 [ 639.798606][T24401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4750'. [ 639.801662][T24395] batman_adv: batadv0: Removing interface: 0 [ 639.818064][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4750'. [ 639.918319][T24395] batman_adv: batadv0: Removing interface: gretap1 [ 640.046134][T24402] macsec2: entered promiscuous mode [ 640.067735][T24402] macsec2: entered allmulticast mode [ 640.128242][T24403] lo speed is unknown, defaulting to 1000 [ 640.322136][T24412] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.463001][T24412] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.752128][T24412] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.886401][T24438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4758'. [ 640.964806][T24412] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.058886][T24442] lo speed is unknown, defaulting to 1000 [ 641.241664][T21557] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.292352][T21557] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.323896][T24448] lo: entered allmulticast mode [ 641.399783][T21538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.558707][T24456] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4763'. [ 641.582354][T24456] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 641.706789][T21560] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.753343][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'. [ 641.800175][T24478] netlink: 'syz.2.4762': attribute type 14 has an invalid length. [ 642.081234][T24485] syzkaller0: entered promiscuous mode [ 642.099641][T24485] syzkaller0: entered allmulticast mode [ 642.263974][T24500] bond2: option packets_per_slave: invalid value (1048582) [ 642.271508][T24500] bond2: option packets_per_slave: allowed values 0 - 65535 [ 642.280828][T24500] bond2 (unregistering): Released all slaves [ 642.375829][T24499] syzkaller0: entered promiscuous mode [ 642.383285][T24499] syzkaller0: entered allmulticast mode [ 642.478965][T24508] xt_hashlimit: size too large, truncated to 1048576 [ 642.846377][T24525] syzkaller0: entered promiscuous mode [ 642.852790][T24525] syzkaller0: entered allmulticast mode [ 642.864182][T24525] tipc: Enabled bearer , priority 0 [ 642.879785][T24524] tipc: Resetting bearer [ 642.919560][T24524] tipc: Disabling bearer [ 644.805903][T24538] lo speed is unknown, defaulting to 1000 [ 644.842250][T24542] __nla_validate_parse: 8 callbacks suppressed [ 644.842271][T24542] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4782'. [ 644.859276][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'. [ 644.891524][T24541] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4782'. [ 644.935630][T24545] syzkaller1: entered allmulticast mode [ 645.258633][T24558] sctp: [Deprecated]: syz.3.4789 (pid 24558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.258633][T24558] Use struct sctp_sack_info instead [ 645.619811][T24576] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 646.290765][T24593] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4798'. [ 646.337280][T24593] bond0: (slave dummy0): Releasing backup interface [ 646.550808][ T5887] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 121 sec [ 646.614815][T24605] netlink: 'syz.4.4801': attribute type 1 has an invalid length. [ 646.772290][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 646.782654][T24618] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 646.793476][T21534] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 646.817299][T24620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4807'. [ 646.842392][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4807'. [ 646.907886][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 646.937758][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4810'. [ 646.944155][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 646.956198][T21551] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.965549][T21551] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.980157][T24633] tipc: Enabling of bearer rejected, failed to enable media [ 647.018433][T21551] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.065384][T21551] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.105413][T24642] netlink: 'syz.2.4811': attribute type 1 has an invalid length. [ 647.128317][T24643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 647.164449][T24642] netlink: 'syz.2.4811': attribute type 1 has an invalid length. [ 647.176879][T24642] netlink: 'syz.2.4811': attribute type 1 has an invalid length. [ 647.222721][T24646] netlink: 'syz.3.4813': attribute type 2 has an invalid length. [ 650.371754][T24650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.689683][T24699] netlink: 'syz.4.4827': attribute type 1 has an invalid length. [ 650.743455][T24699] __nla_validate_parse: 5 callbacks suppressed [ 650.743474][T24699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4827'. [ 651.149298][T24728] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4834'. [ 651.229532][T24728] lo speed is unknown, defaulting to 1000 [ 651.611116][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4843'. [ 651.679963][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4843'. [ 651.964230][T24755] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.078527][T24755] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.164552][T24771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4846'. [ 652.192568][T24770] lo speed is unknown, defaulting to 1000 [ 652.205531][T24755] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.240368][T24773] batadv_slave_1: entered allmulticast mode [ 652.272709][T24771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4846'. [ 652.317400][T24755] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.677575][T24776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 654.171791][T24775] lo speed is unknown, defaulting to 1000 [ 654.491067][T24793] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4849'. [ 654.764385][T24810] tipc: Trying to set illegal importance in message [ 654.790956][T21537] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.848342][T24797] veth1: entered promiscuous mode [ 654.854920][T24797] macsec1: entered promiscuous mode [ 654.908557][T24797] veth1: left promiscuous mode [ 654.946237][T24795] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4850'. [ 655.088342][T21557] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.161729][T21557] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.205432][T21557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.440606][T10238] lec:lec_start_xmit: lec0:No lecd attached [ 655.706393][T24839] bridge0: left allmulticast mode [ 656.066283][T24839] xfrm0: left promiscuous mode [ 656.097027][T24839] xfrm0: left allmulticast mode [ 656.114775][T24862] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4858'. [ 656.574924][T24839] gretap1: left promiscuous mode [ 656.590874][T24839] sit1: left promiscuous mode [ 656.670939][T24839] vlan3: left allmulticast mode [ 656.675885][T24839] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 656.683390][T24839] bridge4: left allmulticast mode [ 656.689526][T24839] ip6gre1: left promiscuous mode [ 656.715486][T21537] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.729677][T21537] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.750336][T21537] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.760540][T21537] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.770212][T21537] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.780288][T21537] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.838479][T21537] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.870976][T21537] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.084063][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4864'. [ 657.134342][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4864'. [ 657.197769][T24896] netlink: 'syz.0.4864': attribute type 1 has an invalid length. [ 657.205577][T24896] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4864'. [ 657.277414][T24896] block nbd7: Unsupported socket: should be TCP or UNIX. [ 657.860935][T24945] syzkaller0: entered promiscuous mode [ 657.867726][T24945] syzkaller0: entered allmulticast mode [ 657.891163][T24946] lo speed is unknown, defaulting to 1000 [ 658.061357][T24939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4871'. [ 658.538813][T24977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4879'. [ 658.688701][T24977] hsr1: entered promiscuous mode [ 658.711090][T24981] lo speed is unknown, defaulting to 1000 [ 658.783858][T24935] netlink: 'syz.2.4870': attribute type 4 has an invalid length. [ 658.905854][ T5887] lo speed is unknown, defaulting to 1000 [ 658.916911][ T5887] syz2: Port: 1 Link DOWN [ 659.007961][T24996] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4883'. [ 659.467476][T25021] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 659.475346][T25021] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4889'. [ 659.491603][T25023] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 659.500719][T25023] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4889'. [ 659.989289][T25045] tipc: New replicast peer: 255.255.255.255 [ 660.027007][T25045] tipc: Enabled bearer , priority 10 [ 660.078997][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4896'. [ 660.098010][T25049] netlink: 'syz.2.4897': attribute type 5 has an invalid length. [ 660.385195][T25059] syzkaller0: entered promiscuous mode [ 660.390900][T25059] syzkaller0: entered allmulticast mode [ 660.449714][T25061] sctp: [Deprecated]: syz.1.4902 (pid 25061) Use of int in maxseg socket option. [ 660.449714][T25061] Use struct sctp_assoc_value instead [ 660.511661][T25065] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 660.657479][T25068] bond2: entered promiscuous mode [ 660.662667][T25068] bond2: entered allmulticast mode [ 660.699721][T25068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 660.900057][T25065] bridge6: entered promiscuous mode [ 660.910041][T25065] bridge6: entered allmulticast mode [ 660.930500][T25065] bond2: (slave bridge6): Enslaving as a backup interface with an up link [ 660.946545][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 660.954640][ C0] lec:lec_tx_timeout: lec0 [ 660.976886][T21557] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 661.006871][T25080] netlink: 'syz.3.4909': attribute type 49 has an invalid length. [ 661.118283][T21555] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 661.138495][ T5967] tipc: Node number set to 3070893541 [ 661.195330][T25087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.206131][T25088] __nla_validate_parse: 5 callbacks suppressed [ 661.206151][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 661.257755][T21551] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.266118][T21551] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.276267][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 661.299400][T21551] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.313672][T25092] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 661.318015][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 661.332473][T21551] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.341925][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4913'. [ 661.359879][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 661.447341][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4914'. [ 661.466825][T25102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4910'. [ 661.475996][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4914'. [ 661.497830][T25092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.639725][T25100] bond4: (slave gretap1): making interface the new active one [ 661.689008][T25100] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 661.757388][T25102] bond4 (unregistering): (slave gretap1): Releasing active interface [ 661.802958][T25102] bond4 (unregistering): Released all slaves [ 661.942545][T25107] ip6gre1: entered promiscuous mode [ 661.978739][T25110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.008210][T25107] ip6gre1: entered allmulticast mode [ 662.019995][T21555] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.037735][T21555] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.047727][ T5908] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.148290][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.412949][T25123] netlink: 'syz.0.4920': attribute type 13 has an invalid length. [ 662.437888][T25123] netlink: 'syz.0.4920': attribute type 17 has an invalid length. [ 662.458445][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'. [ 662.799445][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 180 seconds [ 662.810575][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 180 seconds [ 662.822354][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 180 seconds [ 662.833776][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 180 seconds [ 662.868286][T25132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4924'. [ 662.981642][ T5191] udevd[5191]: worker [20232] /devices/virtual/block/nbd3 timeout; kill it [ 662.999613][ T5191] udevd[5191]: seq 35439 '/devices/virtual/block/nbd3' killed [ 663.027289][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.309225][T25152] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 663.619341][T25172] SET target dimension over the limit! [ 663.810718][T25182] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 663.846872][T25176] lo speed is unknown, defaulting to 1000 [ 664.127470][T25200] netlink: 'syz.1.4943': attribute type 15 has an invalid length. [ 664.152461][T25200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.173890][T25200] netlink: 'syz.1.4943': attribute type 10 has an invalid length. [ 664.182848][T25200] team0: Cannot enslave team device to itself [ 664.755473][T25228] lo speed is unknown, defaulting to 1000 [ 665.220777][T25254] netlink: 'syz.1.4957': attribute type 10 has an invalid length. [ 665.247119][T25254] veth1_macvtap: left promiscuous mode [ 665.264166][T25254] team0: Device veth1_macvtap failed to register rx_handler [ 665.321755][T25257] team0 (unregistering): Port device team_slave_0 removed [ 665.356031][T25257] team0 (unregistering): Port device team_slave_1 removed [ 665.395255][T25257] team0 (unregistering): Port device bridge3 removed [ 665.702395][T25283] batman_adv: batadv0: Adding interface: vlan5 [ 665.708797][T25283] batman_adv: batadv0: The MTU of interface vlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.762464][T25283] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active [ 665.866261][T25296] tipc: Enabling of bearer rejected, failed to enable media [ 665.906662][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.022459][T25311] syzkaller0: entered promiscuous mode [ 666.031239][T25311] syzkaller0: entered allmulticast mode [ 666.381994][T25328] gre0: entered promiscuous mode [ 666.432090][T25328] gre0: entered allmulticast mode [ 666.492868][T25333] xt_TCPMSS: Only works on TCP SYN packets [ 666.585639][T25338] __nla_validate_parse: 12 callbacks suppressed [ 666.585663][T25338] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4982'. [ 666.610446][T25344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 666.615847][T25338] .70: renamed from hsr0 [ 666.660778][T25338] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 666.677723][T25338] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.705582][T25338] .70: entered allmulticast mode [ 666.720547][T25338] hsr_slave_0: entered allmulticast mode [ 666.737207][T25348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4986'. [ 666.761804][T25338] hsr_slave_1: entered allmulticast mode [ 666.788660][T25338] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 666.881115][T25340] vlan2: entered promiscuous mode [ 666.892699][T25356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4986'. [ 666.903391][T25340] geneve1: entered promiscuous mode [ 666.922432][T25340] vlan2: entered allmulticast mode [ 666.963505][T25340] geneve1: entered allmulticast mode [ 666.993739][T25359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4988'. [ 667.099483][T25358] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 667.109264][ T30] audit: type=1107 audit(1772400838.783:21): pid=25357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 667.189212][T25361] lo speed is unknown, defaulting to 1000 [ 667.878333][T25398] netlink: 'syz.3.4999': attribute type 39 has an invalid length. [ 667.908379][T25398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4999'. [ 667.956798][T25398] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4999'. [ 667.965808][T25398] netlink: 'syz.3.4999': attribute type 5 has an invalid length. [ 667.968598][T25407] vlan1: entered allmulticast mode [ 667.999130][T25410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 668.008300][T25398] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4999'. [ 668.019148][T25410] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5000'. [ 668.390561][T25422] lo speed is unknown, defaulting to 1000 [ 668.508293][T21557] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 668.674883][T25432] macsec2: entered promiscuous mode [ 668.683135][T25432] macsec2: entered allmulticast mode [ 668.709722][T25445] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 668.893395][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5013'. [ 668.960335][T25455] vlan3: entered promiscuous mode [ 668.983854][T25455] bond0: entered promiscuous mode [ 669.022902][T25460] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 669.079998][T25462] syzkaller0: entered promiscuous mode [ 669.110082][T25462] syzkaller0: entered allmulticast mode [ 669.230209][T25471] netlink: 'syz.3.5019': attribute type 1 has an invalid length. [ 669.886128][T25511] bond0: entered promiscuous mode [ 669.917195][T25511] bond_slave_0: entered promiscuous mode [ 669.929936][T25511] bond_slave_1: entered promiscuous mode [ 669.941724][T25511] batadv0: entered promiscuous mode [ 669.949749][T25511] debugfs: 'hsr0' already exists in 'hsr' [ 669.955608][T25511] Cannot create hsr debugfs directory [ 669.962036][T25511] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 669.974071][T25511] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 669.986023][T25511] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 670.006615][T25506] lo speed is unknown, defaulting to 1000 [ 670.744318][T25547] 8021q: adding VLAN 0 to HW filter on device bond9 [ 671.079968][T25563] netlink: 'syz.2.5046': attribute type 4 has an invalid length. [ 671.571546][T25598] tipc: Enabling of bearer rejected, failed to enable media [ 671.712204][T25603] netlink: 'syz.3.5056': attribute type 4 has an invalid length. [ 671.724425][T25603] netlink: 'syz.3.5056': attribute type 4 has an invalid length. [ 672.192080][T25635] __nla_validate_parse: 4 callbacks suppressed [ 672.192102][T25635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5066'. [ 672.238081][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5066'. [ 672.473277][T25650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5070'. [ 672.492725][T25656] netlink: 'syz.2.5073': attribute type 1 has an invalid length. [ 672.633135][T25655] bond3: (slave bridge7): making interface the new active one [ 672.667742][T25655] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 672.748528][T25664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5076'. [ 672.885210][T25673] hsr0: entered promiscuous mode [ 673.271044][T25698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5083'. [ 673.397270][T25706] 9iLL: renamed from lo (while UP) [ 673.401705][T25704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5086'. [ 673.429634][T25704] siw: device registration error -23 [ 673.433382][T25708] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 673.443464][T25708] netlink: 'syz.0.5088': attribute type 1 has an invalid length. [ 673.451567][T25708] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 673.460139][T25708] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 673.468084][T25708] netlink: 'syz.0.5088': attribute type 1 has an invalid length. [ 673.478058][T25708] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 673.501790][T25711] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5084'. [ 673.519702][T25711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5084'. [ 673.573313][T25712] netlink: 'syz.0.5088': attribute type 39 has an invalid length. [ 673.588642][T25717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5087'. [ 673.607807][T25715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5089'. [ 673.666694][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.960484][T25724] netlink: 'syz.0.5092': attribute type 1 has an invalid length. [ 674.034124][T25725] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.193373][T25725] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.310105][T25725] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.420144][T25725] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.607914][T21555] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.675907][T21555] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.684511][T21555] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.713758][T25763] FAULT_INJECTION: forcing a failure. [ 674.713758][T25763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.728184][T25760] tipc: Enabled bearer , priority 0 [ 674.760453][T25763] CPU: 0 UID: 0 PID: 25763 Comm: syz.2.5105 Not tainted syzkaller #0 PREEMPT(full) [ 674.760484][T25763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.760496][T25763] Call Trace: [ 674.760504][T25763] [ 674.760513][T25763] dump_stack_lvl+0xe8/0x150 [ 674.760548][T25763] should_fail_ex+0x412/0x560 [ 674.760578][T25763] _copy_to_user+0x31/0xb0 [ 674.760619][T25763] simple_read_from_buffer+0xe1/0x170 [ 674.760653][T25763] proc_fail_nth_read+0x1bb/0x230 [ 674.760685][T25763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.760717][T25763] ? rw_verify_area+0x2a6/0x4d0 [ 674.760737][T25763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.760766][T25763] vfs_read+0x20c/0xa70 [ 674.760785][T25763] ? fdget_pos+0x246/0x320 [ 674.760818][T25763] ? __pfx___mutex_lock+0x10/0x10 [ 674.760849][T25763] ? __pfx_vfs_read+0x10/0x10 [ 674.760870][T25763] ? __fget_files+0x2a/0x420 [ 674.760901][T25763] ? __fget_files+0x3a0/0x420 [ 674.760927][T25763] ? __fget_files+0x2a/0x420 [ 674.760964][T25763] ksys_read+0x150/0x270 [ 674.760987][T25763] ? __pfx_ksys_read+0x10/0x10 [ 674.761021][T25763] do_syscall_64+0x14d/0xf80 [ 674.761048][T25763] ? trace_irq_disable+0x3b/0x150 [ 674.761076][T25763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.761097][T25763] ? clear_bhb_loop+0x40/0x90 [ 674.761123][T25763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.761143][T25763] RIP: 0033:0x7fab9495cfce [ 674.761163][T25763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 674.761181][T25763] RSP: 002b:00007fab957b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.761205][T25763] RAX: ffffffffffffffda RBX: 00007fab957b36c0 RCX: 00007fab9495cfce [ 674.761220][T25763] RDX: 000000000000000f RSI: 00007fab957b30a0 RDI: 0000000000000004 [ 674.761232][T25763] RBP: 00007fab957b3090 R08: 0000000000000000 R09: 0000000000000000 [ 674.761245][T25763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.761257][T25763] R13: 00007fab94c16038 R14: 00007fab94c15fa0 R15: 00007ffc81e7f7a8 [ 674.761292][T25763] [ 674.810506][T21555] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.090622][T25765] syzkaller0: entered promiscuous mode [ 675.102939][T25765] syzkaller0: entered allmulticast mode [ 675.121682][T25760] tipc: Resetting bearer [ 675.144277][T25756] tipc: Resetting bearer [ 675.163074][T25756] tipc: Disabling bearer [ 675.281342][T25782] netlink: 'syz.2.5109': attribute type 46 has an invalid length. [ 675.859748][T25815] lo speed is unknown, defaulting to 1000 [ 676.064538][T25829] xt_hashlimit: size too large, truncated to 1048576 [ 676.312430][T25849] netlink: 'syz.1.5128': attribute type 3 has an invalid length. [ 676.420965][T25856] lo speed is unknown, defaulting to 1000 [ 676.672900][T25873] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 677.693446][T21559] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.713957][T21559] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.750003][T21559] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.776810][T21559] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.833734][T25923] siw: device registration error -23 [ 677.989611][T25931] __nla_validate_parse: 8 callbacks suppressed [ 677.989634][T25931] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5151'. [ 678.021761][T25930] syzkaller0: entered promiscuous mode [ 678.029871][T25930] syzkaller0: entered allmulticast mode [ 678.064217][T25941] dummy0: entered promiscuous mode [ 678.073579][T25941] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 678.243578][T25952] geneve2: entered promiscuous mode [ 678.249192][T25952] geneve2: entered allmulticast mode [ 678.274665][T25948] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.283813][T25948] bond4: (slave bond5): making interface the new active one [ 678.294665][T25948] bond4: (slave bond5): Enslaving as an active interface with an up link [ 678.328214][T25957] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 678.340787][T25948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5156'. [ 678.353606][T25948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.372898][T25948] vlan1: entered promiscuous mode [ 678.379652][T25948] bond4: entered promiscuous mode [ 678.385268][T25948] bond5: entered promiscuous mode [ 678.842197][T25984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.857075][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'. [ 679.500369][T25993] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5167'. [ 680.604356][T25989] lo speed is unknown, defaulting to 1000 [ 681.024609][T26024] lo speed is unknown, defaulting to 1000 [ 681.229050][T26028] tipc: Enabled bearer , priority 0 [ 681.242848][T26028] syzkaller0: entered promiscuous mode [ 681.249067][T26028] syzkaller0: entered allmulticast mode [ 681.302849][T26028] tipc: Resetting bearer [ 681.394384][T26026] tipc: Resetting bearer [ 681.428765][T26026] tipc: Disabling bearer [ 681.721913][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5186'. [ 681.791731][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5185'. [ 681.934455][T26070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5192'. [ 681.974711][T26054] macvtap1: entered promiscuous mode [ 681.980523][T26054] bridge0: entered promiscuous mode [ 681.985862][T26054] macvtap1: entered allmulticast mode [ 681.992414][T26054] bridge0: entered allmulticast mode [ 682.000166][T26054] bridge0: port 3(macvtap1) entered blocking state [ 682.007589][T26054] bridge0: port 3(macvtap1) entered disabled state [ 682.019280][T26054] bridge0: left allmulticast mode [ 682.024410][T26054] bridge0: left promiscuous mode [ 682.472831][T26091] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5198'. [ 682.568967][T26095] validate_nla: 4 callbacks suppressed [ 682.568988][T26095] netlink: 'syz.2.5200': attribute type 4 has an invalid length. [ 682.596936][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 682.724055][T26100] netlink: 'syz.0.5202': attribute type 1 has an invalid length. [ 682.732923][T26100] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.5202'. [ 683.049923][T26115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5207'. [ 683.141317][T26123] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5209'. [ 683.228087][T26127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5211'. [ 683.238179][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5211'. [ 683.309261][T26130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5212'. [ 683.476007][T26137] tipc: Enabling of bearer rejected, failed to enable media [ 684.266793][T26165] netlink: 'syz.4.5224': attribute type 1 has an invalid length. [ 684.275626][T26165] netlink: 'syz.4.5224': attribute type 1 has an invalid length. [ 684.591099][T26170] syzkaller0: entered promiscuous mode [ 684.596928][T26170] syzkaller0: entered allmulticast mode [ 684.893756][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5232'. [ 684.995816][T26189] netlink: 'syz.2.5233': attribute type 3 has an invalid length. [ 685.008915][T26189] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5233'. [ 685.089208][T26193] nbd: socks must be embedded in a SOCK_ITEM attr [ 685.517270][T26207] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 685.793451][T26225] netlink: 'syz.4.5241': attribute type 29 has an invalid length. [ 685.838248][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 686.168193][T26237] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5245'. [ 686.207487][T26237] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5245'. [ 686.535868][T26233] C: renamed from team_slave_0 [ 686.543656][T26233] netlink: 'syz.0.5244': attribute type 2 has an invalid length. [ 686.560477][T26233] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5244'. [ 686.585787][T26233] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 686.788776][T26258] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 686.818435][T26261] tc_dump_action: action bad kind [ 687.179720][T26272] lo speed is unknown, defaulting to 1000 [ 687.239567][T26281] netlink: 'syz.0.5257': attribute type 1 has an invalid length. [ 687.266876][T26281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.739887][T26342] __nla_validate_parse: 2 callbacks suppressed [ 688.739908][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5272'. [ 688.800886][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5272'. [ 688.983773][T26362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5275'. [ 689.015857][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5275'. [ 689.091558][T26370] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 689.220405][T26363] lo speed is unknown, defaulting to 1000 [ 689.347563][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5280'. [ 689.361682][T26382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 689.400676][T26364] lo speed is unknown, defaulting to 1000 [ 689.666697][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.924425][T26401] lo speed is unknown, defaulting to 1000 [ 690.000199][T26408] netlink: 'syz.3.5287': attribute type 1 has an invalid length. [ 690.028881][T26408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 690.064533][T26408] bond6: (slave veth13): Enslaving as an active interface with a down link [ 690.088040][T26408] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 690.095081][T26408] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 690.601793][T26425] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5294'. [ 690.647682][T26433] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 690.748161][T26436] lo speed is unknown, defaulting to 1000 [ 690.941824][T26445] lo speed is unknown, defaulting to 1000 [ 690.946901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.955821][ C0] lec:lec_tx_timeout: lec0 [ 691.184950][T26466] tipc: Enabled bearer , priority 0 [ 691.234934][T26452] tipc: Resetting bearer [ 691.251086][T26452] ip6t_rpfilter: unknown options [ 691.397715][T26451] tipc: Disabling bearer [ 691.538280][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5304'. [ 691.721542][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'. [ 691.769508][T26493] netlink: 'syz.1.5305': attribute type 13 has an invalid length. [ 691.795945][T26493] netlink: 'syz.1.5305': attribute type 17 has an invalid length. [ 691.949307][T26493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.969666][T26493] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.992416][T26493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.114596][ T5486] veth0_vlan: left promiscuous mode [ 692.149847][ T5486] veth0_vlan: entered promiscuous mode [ 692.406940][T26527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5315'. [ 692.517405][T26533] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5316'. [ 692.631030][T26533] wg1 speed is unknown, defaulting to 1000 [ 692.639948][T26533] wg1 speed is unknown, defaulting to 1000 [ 692.657606][T26533] wg1 speed is unknown, defaulting to 1000 [ 692.731012][T26533] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 692.803885][T26533] wg1 speed is unknown, defaulting to 1000 [ 692.848208][T26533] wg1 speed is unknown, defaulting to 1000 [ 692.870768][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 210 seconds [ 692.886887][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 210 seconds [ 692.898225][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 210 seconds [ 692.909708][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 210 seconds [ 692.982859][T26548] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 693.000066][T26548] bond4 (unregistering): Released all slaves [ 693.101322][T26533] wg1 speed is unknown, defaulting to 1000 [ 693.186921][T26533] wg1 speed is unknown, defaulting to 1000 [ 693.195077][T26533] wg1 speed is unknown, defaulting to 1000 [ 693.710347][ T30] audit: type=1107 audit(1772400865.403:22): pid=26592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 693.723879][T26596] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 693.846515][T26595] __nla_validate_parse: 2 callbacks suppressed [ 693.846537][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 693.910201][T26595] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 694.039024][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5329'. [ 694.220791][T26621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5330'. [ 694.459327][T26625] IPVS: Scheduler module ip_vs_ not found [ 694.488244][T26636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 694.543288][T26636] vlan4: entered promiscuous mode [ 694.587241][T26636] bridge0: entered promiscuous mode [ 694.887497][T26652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5339'. [ 694.915466][T26653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5338'. [ 694.981056][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5340'. [ 695.379771][T26682] netlink: 'syz.1.5346': attribute type 1 has an invalid length. [ 695.400668][T26679] sctp: [Deprecated]: syz.4.5348 (pid 26679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.400668][T26679] Use struct sctp_sack_info instead [ 695.585534][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5352'. [ 695.621975][T26691] syzkaller0: entered promiscuous mode [ 695.642257][T26691] syzkaller0: entered allmulticast mode [ 695.800771][T26712] netlink: 'syz.0.5356': attribute type 21 has an invalid length. [ 695.809479][T26712] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.817927][T26712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 695.825197][T26712] IPv6: NLM_F_CREATE should be set when creating new route [ 695.832577][T26712] IPv6: NLM_F_CREATE should be set when creating new route [ 695.839879][T26712] IPv6: NLM_F_CREATE should be set when creating new route [ 695.849052][T26713] sctp: [Deprecated]: syz.2.5355 (pid 26713) Use of int in maxseg socket option. [ 695.849052][T26713] Use struct sctp_assoc_value instead [ 695.860075][T26717] netlink: 'syz.0.5356': attribute type 21 has an invalid length. [ 695.899381][T26717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.363809][T26723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.890578][T26746] lo speed is unknown, defaulting to 1000 [ 697.909246][T26746] wg1 speed is unknown, defaulting to 1000 [ 697.999566][T26756] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5365'. [ 698.030241][T26756] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5365'. [ 698.197880][T26767] lo speed is unknown, defaulting to 1000 [ 698.205784][T26767] wg1 speed is unknown, defaulting to 1000 [ 698.348298][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.348298][T26776] Use struct sctp_assoc_value instead [ 698.395013][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.395013][T26776] Use struct sctp_assoc_value instead [ 698.417378][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.417378][T26776] Use struct sctp_assoc_value instead [ 698.432376][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.432376][T26776] Use struct sctp_assoc_value instead [ 698.448499][T26779] syzkaller0: entered promiscuous mode [ 698.454199][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.454199][T26776] Use struct sctp_assoc_value instead [ 698.454293][T26779] syzkaller0: entered allmulticast mode [ 698.470320][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.470320][T26776] Use struct sctp_assoc_value instead [ 698.492372][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.492372][T26776] Use struct sctp_assoc_value instead [ 698.508758][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.508758][T26776] Use struct sctp_assoc_value instead [ 698.523559][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.523559][T26776] Use struct sctp_assoc_value instead [ 698.538983][T26776] sctp: [Deprecated]: syz.3.5371 (pid 26776) Use of int in max_burst socket option. [ 698.538983][T26776] Use struct sctp_assoc_value instead [ 699.011536][T26795] __nla_validate_parse: 68 callbacks suppressed [ 699.011560][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5377'. [ 699.043930][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5378'. [ 699.124492][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5378'. [ 699.155260][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5378'. [ 699.390648][T26807] siw: device registration error -23 [ 699.623422][T26816] netlink: 'syz.4.5382': attribute type 1 has an invalid length. [ 699.709933][T26816] bond11: entered promiscuous mode [ 699.715483][T26816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 699.735218][T26822] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 699.757613][T26822] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 699.773043][T26822] bond11: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 699.866036][T26824] hsr0: left promiscuous mode [ 700.015484][T26822] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 700.036301][T26822] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 700.074246][T21537] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.190339][T26831] syzkaller0: entered promiscuous mode [ 700.196016][T26831] syzkaller0: entered allmulticast mode [ 700.222389][T21537] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.243305][T21537] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.349983][T26849] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5390'. [ 702.523602][T21537] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.547500][T26853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 702.556977][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5391'. [ 702.588621][T26853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 702.630407][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5391'. [ 703.037931][T26890] netlink: 644 bytes leftover after parsing attributes in process `syz.2.5397'. [ 703.180170][T26888] lo speed is unknown, defaulting to 1000 [ 703.188449][T26888] wg1 speed is unknown, defaulting to 1000 [ 703.496211][T26903] syzkaller0: entered promiscuous mode [ 703.510709][T26903] syzkaller0: entered allmulticast mode [ 703.863291][T26919] lo speed is unknown, defaulting to 1000 [ 703.871778][T26919] wg1 speed is unknown, defaulting to 1000 [ 703.988200][T26926] netlink: Conntrack attr has 4 unknown bytes [ 704.047460][T26926] __nla_validate_parse: 1 callbacks suppressed [ 704.047484][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5412'. [ 704.102521][T26926] bridge0: port 3(macvtap1) entered blocking state [ 704.109859][T26926] bridge0: port 3(macvtap1) entered disabled state [ 704.118248][T26926] macvtap1: entered allmulticast mode [ 704.124157][T26926] bridge0: entered allmulticast mode [ 704.139115][T26926] macvtap1: left allmulticast mode [ 704.175068][T26926] bridge0: left allmulticast mode [ 704.201136][T26933] netlink: 'syz.2.5415': attribute type 1 has an invalid length. [ 704.905105][ T5901] wg1 speed is unknown, defaulting to 1000 [ 704.911712][ T5916] wg1 speed is unknown, defaulting to 1000 [ 704.963674][T26948] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 704.997612][T26948] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 705.370133][T26973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.513237][T26988] netlink: 464 bytes leftover after parsing attributes in process `syz.1.5431'. [ 705.552344][T26988] netlink: 464 bytes leftover after parsing attributes in process `syz.1.5431'. [ 705.819402][T27003] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 705.875300][T27003] lo: entered promiscuous mode [ 705.902494][T27003] bond0: (slave lo): Enslaving as an active interface with an up link [ 705.929447][T27003] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 706.041312][T27017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.097580][T27016] pim6reg: entered allmulticast mode [ 706.141380][T27008] pim6reg: left allmulticast mode [ 706.247718][T27024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5440'. [ 706.428796][T27041] tipc: Enabled bearer , priority 14 [ 706.438343][T27041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5443'. [ 706.531178][T27041] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5443'. [ 706.540397][T27041] 0X: renamed from caif0 [ 706.553548][T27041] tipc: Disabling bearer [ 706.593020][T27041] 0X: entered allmulticast mode [ 706.611682][T27041] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 706.750986][T27057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5446'. [ 706.774591][T27061] Cannot find add_set index 2 as target [ 706.917090][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5449'. [ 706.967134][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5449'. [ 707.017508][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5452'. [ 707.027720][ T5887] page_pool_release_retry() stalled pool shutdown: id 119, 1 inflight 181 sec [ 707.226197][T27091] delete_channel: no stack [ 707.285172][T27095] netlink: 'syz.0.5458': attribute type 29 has an invalid length. [ 707.494280][T27102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.205252][T27137] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 708.841263][ T999] nci: nci_rsp_packet: unknown rsp opcode 0xa01 [ 709.010550][T27177] lo speed is unknown, defaulting to 1000 [ 709.024388][T27177] wg1 speed is unknown, defaulting to 1000 [ 709.106109][T27186] lo speed is unknown, defaulting to 1000 [ 709.119404][T27186] wg1 speed is unknown, defaulting to 1000 [ 709.393409][T27196] __nla_validate_parse: 11 callbacks suppressed [ 709.393429][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5486'. [ 709.410689][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5486'. [ 709.420971][T27196] netlink: 'syz.3.5486': attribute type 3 has an invalid length. [ 709.493998][T27200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.766321][T27165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.969428][T27246] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 711.977703][T27246] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.5500'. [ 712.082148][T27254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5502'. [ 712.152402][T27259] IPv6: NLM_F_CREATE should be specified when creating new route [ 712.171388][T27257] bond5: entered promiscuous mode [ 712.177290][T27257] bond5: entered allmulticast mode [ 712.184688][T27257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 712.227374][T27259] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 712.268274][T27259] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 712.322473][T27264] ip6tnl3: entered allmulticast mode [ 712.363187][T27272] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5509'. [ 712.413382][T27259] 8021q: adding VLAN 0 to HW filter on device bond12 [ 712.563021][T27284] batadv_slave_0: entered promiscuous mode [ 712.582846][T27283] batadv_slave_0: left promiscuous mode [ 712.629067][T27287] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5510'. [ 712.795317][T27300] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5515'. [ 712.863215][T27302] syzkaller1: entered promiscuous mode [ 712.884941][T27302] syzkaller1: entered allmulticast mode [ 712.887256][T27305] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 713.142258][T27317] netlink: 'syz.4.5520': attribute type 1 has an invalid length. [ 713.192355][T27317] 8021q: adding VLAN 0 to HW filter on device bond13 [ 713.279946][T27321] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 713.377978][T27321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5520'. [ 713.644950][T27349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5527'. [ 713.799671][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5528'. [ 714.028513][T27358] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.044473][T27358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.126106][T27360] lo speed is unknown, defaulting to 1000 [ 714.189762][T27360] wg1 speed is unknown, defaulting to 1000 [ 714.192385][T20235] udevd[20235]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 714.403201][T21534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.413292][T21534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.551353][T27378] __nla_validate_parse: 1 callbacks suppressed [ 714.551374][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5533'. [ 714.661782][T27378] bond4: (slave wg2): Device is not bonding slave [ 714.668638][T27378] bond4: option active_slave: invalid value (wg2) [ 714.679275][T27378] bond4 (unregistering): Released all slaves [ 714.831943][T27385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5535'. [ 715.016177][T27392] netlink: 'syz.4.5538': attribute type 7 has an invalid length. [ 715.078818][T27394] netlink: 316 bytes leftover after parsing attributes in process `syz.2.5539'. [ 715.211827][T27402] netlink: 'syz.4.5541': attribute type 5 has an invalid length. [ 715.327573][T27404] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5542'. [ 715.337357][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5542'. [ 715.544507][T27410] bond0: (slave batadv_slave_0): Error: Device is in use and cannot be enslaved [ 715.797857][T27423] netlink: 'syz.3.5547': attribute type 1 has an invalid length. [ 715.918847][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5547'. [ 715.965780][T27423] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.992105][T27426] bond8: (slave gretap1): making interface the new active one [ 716.001520][T27426] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 716.015854][T27438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5550'. [ 716.015935][T27431] bond8 (unregistering): (slave gretap1): Releasing active interface [ 716.036665][T27431] bond8 (unregistering): Released all slaves [ 716.306305][T27447] syz.1.5554 uses old SIOCAX25GETINFO [ 716.315043][T27446] delete_channel: no stack [ 716.360686][T27451] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.533887][T27451] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.652155][T27451] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.795012][T27451] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.040893][T21537] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.098748][T21538] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.162257][T21538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.213078][T21537] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.682378][T27515] netlink: 'syz.1.5574': attribute type 1 has an invalid length. [ 717.941770][T27530] sctp: [Deprecated]: syz.4.5578 (pid 27530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.941770][T27530] Use struct sctp_sack_info instead [ 718.055568][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5581'. [ 718.311430][T27549] netlink: 'syz.1.5585': attribute type 1 has an invalid length. [ 718.333107][T27549] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5585'. [ 718.346401][T27541] netlink: 'syz.3.5582': attribute type 16 has an invalid length. [ 718.354576][T27541] netlink: 'syz.3.5582': attribute type 17 has an invalid length. [ 718.372221][T27541] ..0{X: left allmulticast mode [ 718.405565][T27541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.459562][T27541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.739350][T27562] bond3 (unregistering): Released all slaves [ 718.838302][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5590'. [ 719.217386][T27585] tipc: Enabling of bearer rejected, already enabled [ 719.614044][T27617] __nla_validate_parse: 2 callbacks suppressed [ 719.614066][T27617] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5604'. [ 719.818115][T27625] vlan0: entered promiscuous mode [ 719.971731][T27632] xt_hashlimit: size too large, truncated to 1048576 [ 720.114435][T27647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5613'. [ 720.164868][T27647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5613'. [ 720.196384][T10238] lec:lec_start_xmit: lec0:No lecd attached [ 720.341082][T27656] netlink: 'syz.0.5615': attribute type 10 has an invalid length. [ 720.349072][T27656] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5615'. [ 720.359341][T27657] netlink: 'syz.0.5615': attribute type 10 has an invalid length. [ 720.368058][T27657] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5615'. [ 720.515432][T27668] x_tables: unsorted underflow at hook 4 [ 721.452211][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5623'. [ 721.501040][T27690] netlink: 'syz.2.5623': attribute type 1 has an invalid length. [ 721.515755][T27690] netlink: 'syz.2.5623': attribute type 2 has an invalid length. [ 721.649867][T27696] syzkaller0: entered promiscuous mode [ 721.655436][T27696] syzkaller0: entered allmulticast mode [ 721.762201][T27701] xt_TCPMSS: Only works on TCP SYN packets [ 721.895465][T27706] syzkaller0: entered promiscuous mode [ 721.903100][T27706] syzkaller0: entered allmulticast mode [ 722.058921][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5630'. [ 722.076324][T27710] vlan6: entered promiscuous mode [ 722.084117][T27710] bridge0: entered promiscuous mode [ 722.155887][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5632'. [ 722.170792][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5632'. [ 722.184418][T27710] netlink: 'syz.2.5630': attribute type 11 has an invalid length. [ 722.192657][T27710] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.5630'. [ 722.198479][T27719] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 722.283571][T27724] Cannot find add_set index 3 as target [ 722.307182][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 722.462029][T27727] lo speed is unknown, defaulting to 1000 [ 722.472863][T27727] wg1 speed is unknown, defaulting to 1000 [ 722.623704][T27726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.955031][ T5175] block nbd3: Possible stuck request ffff8880269f0000: control (read@0,1024B). Runtime 240 seconds [ 722.966753][ T5175] block nbd3: Possible stuck request ffff8880269f0200: control (read@1024,1024B). Runtime 240 seconds [ 722.980276][ T5175] block nbd3: Possible stuck request ffff8880269f0400: control (read@2048,1024B). Runtime 240 seconds [ 722.992251][ T5175] block nbd3: Possible stuck request ffff8880269f0600: control (read@3072,1024B). Runtime 240 seconds [ 723.862975][T27783] syzkaller0: entered promiscuous mode [ 723.868570][T27783] syzkaller0: entered allmulticast mode [ 724.253130][T27801] lo speed is unknown, defaulting to 1000 [ 724.298462][T27801] wg1 speed is unknown, defaulting to 1000 [ 724.621640][T27811] __nla_validate_parse: 80 callbacks suppressed [ 724.621664][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.674420][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.721350][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.762087][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.828272][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.843916][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.887212][T27827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5661'. [ 724.898278][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.904959][T27828] lo speed is unknown, defaulting to 1000 [ 724.932337][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.965011][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 724.968346][T27828] wg1 speed is unknown, defaulting to 1000 [ 725.021298][T27822] netlink: 'syz.4.5659': attribute type 1 has an invalid length. [ 725.121209][T27832] 8021q: adding VLAN 0 to HW filter on device bond14 [ 725.149391][T27840] xt_hashlimit: max too large, truncated to 1048576 [ 725.163052][T27840] netlink: 'syz.1.5663': attribute type 1 has an invalid length. [ 725.207931][T27840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 725.243111][T27822] vlan3: entered promiscuous mode [ 725.249014][T27822] bond14: entered promiscuous mode [ 725.394341][T27843] geneve3: entered promiscuous mode [ 725.400612][T27843] geneve3: entered allmulticast mode [ 725.429061][T21551] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.454108][T21551] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.486572][T21551] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.494909][T21551] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.693654][T27859] xt_connbytes: Forcing CT accounting to be enabled [ 725.898585][T27850] netlink: 'syz.1.5665': attribute type 1 has an invalid length. [ 726.077921][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5880 ms [ 726.085981][ C0] lec:lec_tx_timeout: lec0 [ 726.235912][T27853] xfrm0: entered promiscuous mode [ 726.241056][T27853] xfrm0: entered allmulticast mode [ 726.389710][T27860] veth0_vlan: left promiscuous mode [ 726.535345][T21534] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.574721][T21534] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.632992][T21534] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.667608][T21534] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.688296][T27877] x_tables: duplicate underflow at hook 1 [ 726.802306][T27884] siw: device registration error -23 [ 726.883464][T27896] netlink: 'syz.3.5674': attribute type 142 has an invalid length. [ 728.362522][T27963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.388324][T27963] bond0: (slave bond4): Enslaving as an active interface with an up link [ 728.415140][T27970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.440270][T27970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.451589][T27970] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 728.464123][T27970] bond0 (unregistering): (slave bond4): Releasing backup interface [ 728.481224][T27970] bond0 (unregistering): Released all slaves [ 728.810780][T27985] syzkaller0: entered promiscuous mode [ 728.833412][T27985] syzkaller0: entered allmulticast mode [ 729.245025][T28018] syzkaller0: entered promiscuous mode [ 729.250840][T28018] syzkaller0: entered allmulticast mode [ 729.669218][T28042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.732985][T28041] lo speed is unknown, defaulting to 1000 [ 729.763150][T28041] wg1 speed is unknown, defaulting to 1000 [ 729.788883][T27836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 729.799160][T27836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 729.808371][T27836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 729.817615][T27836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 729.825559][T27836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 729.874316][T28053] Bluetooth: MGMT ver 1.23 [ 730.048555][T28057] __nla_validate_parse: 47 callbacks suppressed [ 730.048576][T28057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5725'. [ 730.100367][T28058] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5725'. [ 730.106928][T28046] lo speed is unknown, defaulting to 1000 [ 730.118136][T28046] wg1 speed is unknown, defaulting to 1000 [ 730.214643][T28064] openvswitch: netlink: Key type 30 is not supported [ 730.226224][T28065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5727'. [ 730.250748][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5726'. [ 730.260357][T28065] openvswitch: netlink: Flow key attr not present in new flow. [ 730.268813][T28064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5726'. [ 730.429865][T21534] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.471497][T21534] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 730.519949][T28080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5731'. [ 730.562255][T28082] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5730'. [ 730.591494][T21534] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.633891][T21534] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 730.775196][T28086] geneve2: entered promiscuous mode [ 730.801285][T28086] geneve2: entered allmulticast mode [ 730.845954][T21551] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 730.855968][T21551] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 730.905063][T21534] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.920430][T21534] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 730.977021][T21551] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 730.985558][T21551] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 731.021829][T21534] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.032956][T21534] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.068520][T28091] syzkaller0: entered promiscuous mode [ 731.074121][T28091] syzkaller0: entered allmulticast mode [ 731.187942][T28046] chnl_net:caif_netlink_parms(): no params data found [ 731.364304][ T796] wg1 speed is unknown, defaulting to 1000 [ 731.397687][ T796] syz0: Port: 1 Link DOWN [ 731.718079][T28046] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.725278][T28046] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.758400][T28046] bridge_slave_0: entered allmulticast mode [ 731.790637][T28046] bridge_slave_0: entered promiscuous mode [ 731.909764][ T5141] Bluetooth: hci4: command tx timeout [ 732.155943][T28130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5738'. [ 732.467922][T21534] team0: Port device bridge0 removed [ 732.720347][T21534] bond0 (unregistering): Released all slaves [ 732.731358][T21534] bond1 (unregistering): Released all slaves [ 732.749600][T21534] bond2 (unregistering): Released all slaves [ 732.763734][T21534] bond3 (unregistering): Released all slaves [ 732.779883][T21534] bond4 (unregistering): Released all slaves [ 732.802184][T21534] bond5 (unregistering): Released all slaves [ 732.815506][T28046] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.823689][T28046] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.831589][T28046] bridge_slave_1: entered allmulticast mode [ 732.840703][T28046] bridge_slave_1: entered promiscuous mode [ 733.008478][T21534] l24): left promiscuous mode [ 733.083115][T28132] lo speed is unknown, defaulting to 1000 [ 733.102272][T28141] netlink: 'syz.4.5740': attribute type 12 has an invalid length. [ 733.117052][T28141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5740'. [ 733.199169][T28046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.253216][T28046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.306666][T28132] wg1 speed is unknown, defaulting to 1000 [ 733.325914][T21534] tipc: Left network mode [ 733.455098][T28158] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 733.457725][T28046] team0: Port device team_slave_0 added [ 733.470437][T21534] IPVS: stopping backup sync thread 24618 ... [ 733.487756][T28164] netlink: 'syz.3.5745': attribute type 12 has an invalid length. [ 733.502288][T28046] team0: Port device team_slave_1 added [ 733.987133][ T5141] Bluetooth: hci4: command tx timeout [ 734.086261][T28046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.113979][T28046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.141188][T28046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.157421][T28046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.164533][T28046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.191025][T28046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.343189][T28046] hsr_slave_0: entered promiscuous mode [ 734.353570][T28046] hsr_slave_1: entered promiscuous mode [ 734.360332][T28046] debugfs: 'hsr0' already exists in 'hsr' [ 734.366186][T28046] Cannot create hsr debugfs directory [ 734.512705][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'. [ 735.676175][T28245] netlink: 'syz.4.5763': attribute type 9 has an invalid length. [ 735.716255][T28245] netlink: 'syz.4.5763': attribute type 6 has an invalid length. [ 735.735413][T21534] hsr_slave_0: left promiscuous mode [ 735.770245][T21534] hsr_slave_1: left promiscuous mode [ 735.799735][T21534] veth1_macvtap: left promiscuous mode [ 735.805566][T21534] veth0_macvtap: left promiscuous mode [ 735.817671][T21534] veth1_vlan: left promiscuous mode [ 735.823047][T21534] veth0_vlan: left promiscuous mode [ 736.069352][ T5141] Bluetooth: hci4: command tx timeout [ 736.659805][T28276] gretap0: entered allmulticast mode [ 736.732734][ T796] lo speed is unknown, defaulting to 1000 [ 736.746176][ T796] syz2: Port: 1 Link ACTIVE [ 736.812199][T28286] __nla_validate_parse: 2 callbacks suppressed [ 736.812220][T28286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5774'. [ 737.110265][T28046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 737.215356][T21534] IPVS: stop unused estimator thread 0... [ 737.222729][T28046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 737.262544][T28303] tc_dump_action: action bad kind [ 737.282247][T28046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 737.327442][T28046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 737.513675][T28325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.684480][T28046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.713042][T28046] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.739596][T21551] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.746822][T21551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.775610][T28335] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5787'. [ 737.851829][T21557] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.859075][T21557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.126947][T28356] Cannot find set identified by id 65534 to match [ 738.146951][ T5141] Bluetooth: hci4: command tx timeout [ 738.476207][T28046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.537800][T28385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5797'. [ 738.610569][T28387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5796'. [ 738.646691][T28387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5796'. [ 738.763137][T28046] veth0_vlan: entered promiscuous mode [ 738.800874][T28046] veth1_vlan: entered promiscuous mode [ 738.989290][T28046] veth0_macvtap: entered promiscuous mode [ 738.997787][T28402] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5801'. [ 739.013534][T28046] veth1_macvtap: entered promiscuous mode [ 739.048484][T28402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5801'. [ 739.188061][T28046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.239705][T28046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.299427][T21557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.320570][T21557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.395488][T21557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.435705][T28416] lo speed is unknown, defaulting to 1000 [ 739.443955][T28426] batadv_slave_0: entered promiscuous mode [ 739.455141][T21557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.458548][T28425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5807'. [ 739.557503][T28425] batadv_slave_0 (unregistering): left promiscuous mode [ 739.742319][T28437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5810'. [ 739.761163][T21551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.781346][T21551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.875288][T21551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.891125][T21551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.994414][T28446] macsec1: entered promiscuous mode [ 740.448701][T28472] netlink: 'syz.2.5818': attribute type 10 has an invalid length. [ 740.484637][T28472] team0: Device veth0_vlan failed to register rx_handler [ 740.737850][T28482] bridge0: entered promiscuous mode [ 740.757013][T28482] vlan2: entered promiscuous mode [ 740.871355][T28497] netlink: 'syz.4.5825': attribute type 3 has an invalid length. [ 741.122524][T28505] ipvlan1: entered promiscuous mode [ 741.134213][T28505] ipvlan1: entered allmulticast mode [ 741.155691][T28505] veth0_vlan: entered allmulticast mode [ 741.188585][T28507] tipc: Started in network mode [ 741.215171][T28507] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 741.258529][T28507] tipc: Enabling of bearer rejected, failed to enable media [ 741.465873][T28516] bond8: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 741.529543][T28520] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5829'. [ 741.681918][T28537] netlink: 'syz.0.5836': attribute type 19 has an invalid length. [ 741.885552][T28549] [ 741.887914][T28549] ====================================================== [ 741.894974][T28549] WARNING: possible circular locking dependency detected [ 741.902075][T28549] syzkaller #0 Not tainted [ 741.906511][T28549] ------------------------------------------------------ [ 741.913613][T28549] syz.4.5841/28549 is trying to acquire lock: [ 741.919693][T28549] ffffffff8fd48618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 741.928848][T28549] [ 741.928848][T28549] but task is already holding lock: [ 741.936241][T28549] ffff888033a74570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 741.945510][T28549] [ 741.945510][T28549] which lock already depends on the new lock. [ 741.945510][T28549] [ 741.955917][T28549] [ 741.955917][T28549] the existing dependency chain (in reverse order) is: [ 741.964985][T28549] [ 741.964985][T28549] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 741.972980][T28549] _raw_spin_lock_bh+0x36/0x50 [ 741.978272][T28549] nr_rt_device_down+0x153/0x860 [ 741.984011][T28549] nr_device_event+0x137/0x150 [ 741.989318][T28549] notifier_call_chain+0x1be/0x400 [ 741.994958][T28549] netif_close_many+0x2ae/0x420 [ 742.000327][T28549] netif_close+0x160/0x220 [ 742.005264][T28549] dev_close+0x10a/0x220 [ 742.010042][T28549] bpq_device_event+0x377/0x6a0 [ 742.015410][T28549] notifier_call_chain+0x1be/0x400 [ 742.021048][T28549] netif_close_many+0x2ae/0x420 [ 742.026439][T28549] netif_close+0x160/0x220 [ 742.031387][T28549] dev_close+0x10a/0x220 [ 742.036162][T28549] bond_setup_by_slave+0x5f/0x3d0 [ 742.041720][T28549] bond_enslave+0x847/0x3c10 [ 742.046956][T28549] bond_do_ioctl+0x6ec/0x8d0 [ 742.052195][T28549] bond_siocdevprivate+0x19c/0x1f0 [ 742.057866][T28549] dev_ifsioc+0xba6/0x1280 [ 742.062835][T28549] dev_ioctl+0x84c/0x1150 [ 742.067723][T28549] sock_ioctl+0x75f/0x7f0 [ 742.072615][T28549] __se_sys_ioctl+0xfc/0x170 [ 742.077762][T28549] do_syscall_64+0x14d/0xf80 [ 742.082913][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.089362][T28549] [ 742.089362][T28549] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 742.097309][T28549] _raw_spin_lock_bh+0x36/0x50 [ 742.102608][T28549] nr_rt_device_down+0xbe/0x860 [ 742.108008][T28549] nr_device_event+0x137/0x150 [ 742.113299][T28549] notifier_call_chain+0x1be/0x400 [ 742.119118][T28549] netif_close_many+0x2ae/0x420 [ 742.124511][T28549] netif_close+0x160/0x220 [ 742.129441][T28549] dev_close+0x10a/0x220 [ 742.134202][T28549] bpq_device_event+0x377/0x6a0 [ 742.139588][T28549] notifier_call_chain+0x1be/0x400 [ 742.145270][T28549] netif_close_many+0x2ae/0x420 [ 742.150731][T28549] netif_close+0x160/0x220 [ 742.155705][T28549] dev_close+0x10a/0x220 [ 742.160482][T28549] bond_setup_by_slave+0x5f/0x3d0 [ 742.166030][T28549] bond_enslave+0x847/0x3c10 [ 742.171141][T28549] bond_do_ioctl+0x6ec/0x8d0 [ 742.176344][T28549] bond_siocdevprivate+0x19c/0x1f0 [ 742.181969][T28549] dev_ifsioc+0xba6/0x1280 [ 742.186909][T28549] dev_ioctl+0x84c/0x1150 [ 742.191795][T28549] sock_ioctl+0x75f/0x7f0 [ 742.196648][T28549] __se_sys_ioctl+0xfc/0x170 [ 742.201778][T28549] do_syscall_64+0x14d/0xf80 [ 742.206919][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.213348][T28549] [ 742.213348][T28549] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 742.221279][T28549] __lock_acquire+0x15a5/0x2cf0 [ 742.226657][T28549] lock_acquire+0xf0/0x2e0 [ 742.231624][T28549] _raw_spin_lock_bh+0x36/0x50 [ 742.236934][T28549] nr_rt_ioctl+0x40c/0xf90 [ 742.241968][T28549] sock_do_ioctl+0x101/0x320 [ 742.247069][T28549] sock_ioctl+0x5c6/0x7f0 [ 742.251995][T28549] __se_sys_ioctl+0xfc/0x170 [ 742.257298][T28549] do_syscall_64+0x14d/0xf80 [ 742.262415][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.268842][T28549] [ 742.268842][T28549] other info that might help us debug this: [ 742.268842][T28549] [ 742.279165][T28549] Chain exists of: [ 742.279165][T28549] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 742.279165][T28549] [ 742.292980][T28549] Possible unsafe locking scenario: [ 742.292980][T28549] [ 742.300468][T28549] CPU0 CPU1 [ 742.305876][T28549] ---- ---- [ 742.311239][T28549] lock(&nr_node->node_lock); [ 742.316003][T28549] lock(nr_node_list_lock); [ 742.323127][T28549] lock(&nr_node->node_lock); [ 742.330513][T28549] lock(nr_neigh_list_lock); [ 742.335208][T28549] [ 742.335208][T28549] *** DEADLOCK *** [ 742.335208][T28549] [ 742.343342][T28549] 2 locks held by syz.4.5841/28549: [ 742.348533][T28549] #0: ffffffff8fd48678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 742.358027][T28549] #1: ffff888033a74570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 742.367707][T28549] [ 742.367707][T28549] stack backtrace: [ 742.373609][T28549] CPU: 0 UID: 0 PID: 28549 Comm: syz.4.5841 Not tainted syzkaller #0 PREEMPT(full) [ 742.373635][T28549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.373649][T28549] Call Trace: [ 742.373657][T28549] [ 742.373665][T28549] dump_stack_lvl+0xe8/0x150 [ 742.373695][T28549] print_circular_bug+0x2e1/0x300 [ 742.373726][T28549] check_noncircular+0x12e/0x150 [ 742.373758][T28549] __lock_acquire+0x15a5/0x2cf0 [ 742.373795][T28549] lock_acquire+0xf0/0x2e0 [ 742.373819][T28549] ? nr_rt_ioctl+0x40c/0xf90 [ 742.373849][T28549] ? nr_rt_ioctl+0x40c/0xf90 [ 742.373875][T28549] _raw_spin_lock_bh+0x36/0x50 [ 742.373900][T28549] ? nr_rt_ioctl+0x40c/0xf90 [ 742.373926][T28549] nr_rt_ioctl+0x40c/0xf90 [ 742.373956][T28549] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 742.373986][T28549] ? apparmor_capable+0x126/0x170 [ 742.374019][T28549] ? capable+0x88/0xe0 [ 742.374044][T28549] ? nr_ioctl+0x1b1/0x3b0 [ 742.374068][T28549] sock_do_ioctl+0x101/0x320 [ 742.374092][T28549] ? __pfx_sock_do_ioctl+0x10/0x10 [ 742.374112][T28549] ? do_futex+0x333/0x420 [ 742.374144][T28549] sock_ioctl+0x5c6/0x7f0 [ 742.374164][T28549] ? __pfx_sock_ioctl+0x10/0x10 [ 742.374186][T28549] ? rcu_is_watching+0x15/0xb0 [ 742.374212][T28549] ? bpf_lsm_file_ioctl+0x9/0x20 [ 742.374236][T28549] ? __pfx_sock_ioctl+0x10/0x10 [ 742.374252][T28549] __se_sys_ioctl+0xfc/0x170 [ 742.374271][T28549] do_syscall_64+0x14d/0xf80 [ 742.374294][T28549] ? trace_irq_disable+0x3b/0x150 [ 742.374317][T28549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.374334][T28549] ? clear_bhb_loop+0x40/0x90 [ 742.374353][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.374369][T28549] RIP: 0033:0x7f2d5099c799 [ 742.374384][T28549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.374400][T28549] RSP: 002b:00007f2d517f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.374419][T28549] RAX: ffffffffffffffda RBX: 00007f2d50c15fa0 RCX: 00007f2d5099c799 [ 742.374432][T28549] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000d [ 742.374442][T28549] RBP: 00007f2d50a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 742.374453][T28549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.374463][T28549] R13: 00007f2d50c16038 R14: 00007f2d50c15fa0 R15: 00007ffd295f14f8 [ 742.374481][T28549] [ 747.269612][ T1301] lec:lec_start_xmit: lec0:No lecd attached