last executing test programs: 5.772511091s ago: executing program 2 (id=5723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414bb00000000000000000000000000006b37293a9acc361a00000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000025bd7000000000000a000000af000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"], 0x158}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 5.311404425s ago: executing program 4 (id=5728): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x4d4, 0x32}, @in=@private=0xa010100, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x10, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "5573d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 5.063839213s ago: executing program 0 (id=5729): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r3, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="58000000020601080000000000000000000000090c0007800500150000000000050005000a0000000500010007000000050004000000000009000000737965742c6966616365000000000000000000000000000000000000e8f88451dd35c934372029a84f7d05a09b75726755fc98a89b7b36a34af2cee9640fe710054181c225c26e521d8d7f31b18690806b344a5b54e722df05cd70f6afdf34e7ba81bfb2944f45072252821bac556e7ab6b4dce2ea91443d085418c4ec5a769922bd080632392cac52ebbe87c761f973cc66d452798ef9c30639ec13d50e0b4a8bdad10fcb7e0164e0fcb8b6d59b29a9bdbeb6f7d8dc3c97a46221b6"], 0x58}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x3}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001cff04801800018007000100637400000400028008000240000000000900010073797a30000000000900020073797a3200000e00140000001100010000000000000000000000000af6f4e1c7ec079ac89ebb673d6df7c6a5caa10c136ae5ac266f6de27e045eca2646921b6fe610b876f446ee0db1fc89fb37943cfa97144a5af9e3c5847669c79d7b6c4f3d7282e6cf5badbc958ab52cf1ebf618dbd4416fe076431daf1b70ae05194b5621"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.756370578s ago: executing program 1 (id=5731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x20040802) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x40, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x16}]}]}}]}, 0x3c}}, 0x0) 2.981177065s ago: executing program 0 (id=5735): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x84, "5b38a3060e2974677202c8f8549646d354beb59303ef073020ceaf20bb6ed2e284e4d5fc1e7638880cad2905483e9bded35c7a914598ff0129217f289c36eedccb80bc63daa2184c9ea754a9f0800e40f4ade43171b58840717c665c15098700f063baf1dcf0a9af0b0bac5c94221110aa9ad85d80914f33f9498153207498908b398ba8"}, &(0x7f00000000c0)=0x8c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x7c66, 0x532f, 0x100000, 0x1, 0xe, r1}, &(0x7f00000001c0)=0x20) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x800000003, 0x100000000, 0x10000109, 0xfffffffffffffff9, 0x6, 0xc, 0x2880000000000009, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48050) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xf, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400000000fbdbdf2500000000", @ANYRES32=r11, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000db6ff927500"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) 2.82730474s ago: executing program 2 (id=5736): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r6, 0xa000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) close(0x3) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) 2.715546096s ago: executing program 3 (id=5737): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=@alg={0x0, 0x10, 0x2, 0x70bd25, 0x25dfdbfd, {{'crct10dif-arm64-neon\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x0, 0x1, 0x4}, {0x0, 0x1, 0x800}, {0x0, 0x1, 0x5}]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r6], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x5) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000301010800000000000000000300000014000f80080002400000d78ff1fb7a7466832dbd2b6e8aa501000800014000000001e2f307821c400550e268f0aa8d6ea5c8e8bb92a41059104873e5c7d04027adf05a3f2ae3c19417bf3492af8ec870b597c7318c823e4ebf94131a"], 0x28}, 0x1, 0x0, 0x0, 0x4c024}, 0x800) (async) r10 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r11, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x4004000) (async) pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 2.668558761s ago: executing program 4 (id=5738): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000), 0x10) socket$inet_icmp(0x2, 0x2, 0x1) (async) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x38, r9, 0x1, 0x1, 0x0, {0x33}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x20000040) (async) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000140)={'batadv_slave_1\x00', @ifru_data=&(0x7f00000000c0)="689e3b45e5cce9f38a0dbfe7d0faaa1180486e8b0a6d5ce05bf4c09b441af3f8"}) (async) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xffff, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.462362748s ago: executing program 1 (id=5739): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8a000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x3c, 0x70, 0x100, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}]}, 0x3c}}, 0x20040880) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.299981108s ago: executing program 2 (id=5740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x60}}]}, 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c) 2.299454986s ago: executing program 3 (id=5741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x803, 0xd) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r4, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010062726964674f0000140002800500000000000000050029000100001008000a00", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.181720881s ago: executing program 4 (id=5742): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.023980378s ago: executing program 1 (id=5743): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x9, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1.948319358s ago: executing program 4 (id=5744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 1.858187326s ago: executing program 0 (id=5745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}, {0x8, 0xa, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4c26, 0x20000002, @loopback, 0x20000007}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)={0xa, 0x0, 0xfffffffe, @local, 0xfffffff2}, 0x1c, 0x0}}], 0x2, 0x40000c4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x45, &(0x7f0000000000), 0x4) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x8, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "29d2f731874499ae02050000"}}}}, 0x3e) 1.839987012s ago: executing program 3 (id=5746): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r1, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.211619866s ago: executing program 2 (id=5747): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020000030000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000b2e2d2a5dcf5904238c989551dcd1a4608b0ff76000000bf9800000000000036080000000000008500000007000000b7"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e060909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16ff3959547f5090587529b2037616ec0fa4f872ba86c902000000004a32000402160009000a0000000000e000e218d1ddf66ed538f25232504c48", 0x78, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40005) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x6d, 0x7e, &(0x7f0000000380)="6aa4fd24af0fca1baf5f3538c9fb650bc336c7ecf381863cadc022390bd04087a83bce918d9fcb3fa5a75980df1f38c6d9b8a8003659e50ac780dd08f763974e797736d4ecaaefcf543462bad477c56f1327b127131400e33f325923c9c65feffa6e4ece10d8f14601d699a29d", &(0x7f0000000400)=""/126, 0x9, 0x0, 0x33, 0xcd, &(0x7f0000000180)="38af4c4916d82330f96f3a88ce78916cf27d789281b3fbf6d35416916b368f77211dce5b1fab0b182a3c9e9b1f49b29bbe7a10", &(0x7f0000000480)="8c4b52375ffafa68814466d1110138a767e26c9ef798c35afc25880d369a75f3c15f5b7e02ea2922190ac9e53a7132c6dbc93374a4be90952e1bca2eb96c26ee27822192ecb3f8193ea160109864ae1f1c3d33f3f2b3056fffc1a5d4593e4be6bcd91a18e95b823db2b470f3463ea492fa46a70ee55b353bcaed8c55ccf300ab7b9fa97eb4597ce3a2a833d1309ec53883cf86809f54a4cef9b841e4cc9518f81fc6ef70686384528d5da83f7bc1420bd204c488a8c43d79cd9c018bfecf4fbd6447be4b8cd747f50c7f531486", 0x1, 0x0, 0x5f5}, 0x50) socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020000030000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000b2e2d2a5dcf5904238c989551dcd1a4608b0ff76000000bf9800000000000036080000000000008500000007000000b7"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e060909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16ff3959547f5090587529b2037616ec0fa4f872ba86c902000000004a32000402160009000a0000000000e000e218d1ddf66ed538f25232504c48", 0x78, 0x4, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40005) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x6d, 0x7e, &(0x7f0000000380)="6aa4fd24af0fca1baf5f3538c9fb650bc336c7ecf381863cadc022390bd04087a83bce918d9fcb3fa5a75980df1f38c6d9b8a8003659e50ac780dd08f763974e797736d4ecaaefcf543462bad477c56f1327b127131400e33f325923c9c65feffa6e4ece10d8f14601d699a29d", &(0x7f0000000400)=""/126, 0x9, 0x0, 0x33, 0xcd, &(0x7f0000000180)="38af4c4916d82330f96f3a88ce78916cf27d789281b3fbf6d35416916b368f77211dce5b1fab0b182a3c9e9b1f49b29bbe7a10", &(0x7f0000000480)="8c4b52375ffafa68814466d1110138a767e26c9ef798c35afc25880d369a75f3c15f5b7e02ea2922190ac9e53a7132c6dbc93374a4be90952e1bca2eb96c26ee27822192ecb3f8193ea160109864ae1f1c3d33f3f2b3056fffc1a5d4593e4be6bcd91a18e95b823db2b470f3463ea492fa46a70ee55b353bcaed8c55ccf300ab7b9fa97eb4597ce3a2a833d1309ec53883cf86809f54a4cef9b841e4cc9518f81fc6ef70686384528d5da83f7bc1420bd204c488a8c43d79cd9c018bfecf4fbd6447be4b8cd747f50c7f531486", 0x1, 0x0, 0x5f5}, 0x50) (async) 1.204248228s ago: executing program 1 (id=5748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r2, &(0x7f0000000040)=""/192, 0xc0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140003"], 0x2c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) 1.151178763s ago: executing program 3 (id=5749): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r2 = socket(0x2b, 0x80000, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000300)=0x1, 0x4) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) connect$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40040) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.100424287s ago: executing program 4 (id=5750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xffff, 0xfffffff9, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000d389b84491c3bc00000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x8, 0x38, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.015102681s ago: executing program 0 (id=5751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = socket$inet6(0xa, 0x6, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x7, 0x7f, {{0x11, 0x4, 0x2, 0x1d, 0x44, 0x65, 0x0, 0x80, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x2, [{@broadcast, 0x1}]}, @cipso={0x86, 0x23, 0x0, [{0x1, 0x6, "9abd6b2d"}, {0x3, 0xa, "524269cedc797d25"}, {0x2, 0x4, "4218"}, {0x2, 0x9, "9aca78a02d51f5"}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@remote, r2}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b8547ed387dbe9abc86f5b7de8", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xfffffffffffffe83) 879.954191ms ago: executing program 1 (id=5752): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100), 0xfffffffffffffd68) 808.454987ms ago: executing program 2 (id=5753): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = accept4$llc(r1, 0x0, &(0x7f0000000000), 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) (async) ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f0000000300)={0x0, r4, r5, 0xa, 0x9, '\x00', {0x61f4, 0x200, 0x6, 0x5, 0x7, 0x2, 0x3, 0x0, {0x8, 0x7}, {0xb, 0x9}, {0x615}, 0x0, 0x7fff, 0x2, 0x0, 0x4, 0x10, 0xe27e, 0x10, 0x7a, 0x3, '\x00', 0x2, 0x8, 0x1ba, 0x3}}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB="680200000005010400000000000000000000000054020100"/40], 0x268}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 807.734458ms ago: executing program 4 (id=5754): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES64, @ANYBLOB="080004"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket(0x2a, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000400)=0x10001, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getpeername$qrtr(r3, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000003c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x14, 0x4d, &(0x7f0000000000)="259a13f271a76d2788a24c6588a81e0ee27b4483", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xfffffffffffffe57) 796.787431ms ago: executing program 3 (id=5755): unshare(0x20000400) r0 = socket$kcm(0x2, 0x1, 0x0) listen(r0, 0x2000000) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 596.098619ms ago: executing program 1 (id=5756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0xff00, 0x6, 0x5}, 0x8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)={0x2, 'veth0_virt_wifi\x00', {0xfffffff9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 427.605834ms ago: executing program 3 (id=5757): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r4, 0x25, 0x4, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) connect$ax25(r5, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_emit_ethernet(0x12e0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x1201}}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x311, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x5, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) 239.655684ms ago: executing program 0 (id=5758): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) 56.751595ms ago: executing program 0 (id=5759): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=0x0, @ANYBLOB="5e7e11dde84d10ba3b3e1655e01682c7a2bd793e00b9ed7b659463b89582e62480c5bf6a0e7f7c7bccd50bbe677d7399c38a5c6cefc04f039ae56dae5ea15c8c17a8b732d7c8a2317c8ade1167f92fd4372c60b3bbbfbcc05ab2b33d93f7adb5a639a7b628a44bedaf3d282423c2e4446a3dc0546ec2ed2ff152fb"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xe, 0x7, 0x2, @private0, @remote, 0x700, 0x700, 0x0, 0x6}}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="720ac4ff0000000071106b000000000095000000000000004035e389a2be3ae9f816f8db00fccf32dc2c0017ee39efda8045218ae3ab084981d4feb3631c60b28f7aea04b102d5383950e2e37aa9598c9f"], 0x0}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r4}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x8, 0x6}, {0x62512821439dd8bc, 0xa}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x319}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb5f1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc811}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000eb10c53a4df950008c010400"/29, @ANYRES32=0x0, @ANYBLOB="0000000000000100200012800b0001006272696467650000100002800c002e000000000003000000"], 0x40}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 0s ago: executing program 2 (id=5760): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x404c810}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000040)='[/\x00', 0x2400, &(0x7f0000000080)={@align=0x8000000000000000, {0x7, 0x3, 0x5, 0xa01f}}, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x6}, {[0x6, 0x5, 0x6, 0x400]}, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xe1, 0x1, 0x2, @empty, @private0, 0x10, 0x40, 0x8, 0x6dd}}) write(r1, &(0x7f0000000440)="1e9e87045857a461d74e6ecb0c69404de93c9d80d7edaa21874589890a6d3f094ba5bfefcbf7b70549a40095475dad1670eb578114eed7388258298b9323db26e0fdad3d777e9baa0e23eccfdb27a894d93000d429283eabd73b80899f2c995ded3e0391874e2356757cdf4cbdd3c729f8fd3933190f8ed127b7dbb6e1130f95a72b79244dba59fc4cbf1fbb7dc7ee96", 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r2, 0x2f, 0x1, 0x5, 0x80000001, 0xc, @mcast1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7, 0x1, 0x10000000, 0x40}}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): rt_xmit: lec0:No lecd attached [ 464.309906][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3467'. [ 464.332469][T19163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3467'. [ 464.401043][T19166] syzkaller0: entered promiscuous mode [ 464.409385][T19166] syzkaller0: entered allmulticast mode [ 464.470911][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 464.584451][T19175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3470'. [ 464.729105][T19185] xt_CONNSECMARK: invalid mode: 0 [ 464.800342][T19189] netlink: 'syz.0.3472': attribute type 2 has an invalid length. [ 464.809928][T19189] netlink: 'syz.0.3472': attribute type 8 has an invalid length. [ 464.828179][T19189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3472'. [ 465.070590][T14169] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 465.125690][T19201] x_tables: duplicate underflow at hook 3 [ 465.233871][T19211] geneve2: entered promiscuous mode [ 465.269999][T10796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 59299 - 0 [ 465.337202][T10796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 59299 - 0 [ 465.356618][T10796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 59299 - 0 [ 465.394934][T10796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 59299 - 0 [ 465.909271][T19242] openvswitch: netlink: Key type 31 is not supported [ 465.960802][T19244] xt_ecn: cannot match TCP bits for non-tcp packets [ 466.263456][T19258] bridge0: entered promiscuous mode [ 466.269157][T19258] macsec1: entered promiscuous mode [ 466.274608][T19258] macsec1: entered allmulticast mode [ 466.294999][T19258] bridge0: entered allmulticast mode [ 466.334145][T19258] bridge0: port 3(macsec1) entered blocking state [ 466.342632][T19258] bridge0: port 3(macsec1) entered disabled state [ 466.375002][T19258] bridge0: left allmulticast mode [ 466.380343][T19258] bridge0: left promiscuous mode [ 466.428359][T19264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.443922][T19266] macvtap1: entered allmulticast mode [ 466.465227][T19266] veth0_macvtap: entered allmulticast mode [ 467.153458][T19304] __nla_validate_parse: 5 callbacks suppressed [ 467.153479][T19304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3507'. [ 467.172357][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3508'. [ 467.231267][T19303] bond4: entered promiscuous mode [ 467.237577][T19303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.410592][T19308] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.429447][T19308] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 467.498418][T19308] bond4: (slave sit1): Error -95 calling set_mac_address [ 467.681872][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 467.698915][T19321] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20002 [ 467.730552][T19321] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3511'. [ 467.756622][T19326] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 467.883497][T19331] netlink: 'syz.0.3515': attribute type 12 has an invalid length. [ 467.895113][T19331] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3515'. [ 467.945967][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3513'. [ 467.979803][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 467.997667][T19333] bond2: entered allmulticast mode [ 468.087861][T19333] sctp: [Deprecated]: syz.1.3514 (pid 19333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.087861][T19333] Use struct sctp_sack_info instead [ 468.138505][T19328] bridge2: entered promiscuous mode [ 468.144369][T19328] bridge2: entered allmulticast mode [ 468.163736][T19328] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 468.201968][T19333] ip6gre0: entered allmulticast mode [ 468.226371][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'. [ 468.240598][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'. [ 468.261615][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 468.356398][T14169] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.369881][T14169] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.407805][T14169] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.433721][T14169] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.805005][T19375] bond1 (unregistering): Released all slaves [ 469.244772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 469.252890][ C0] lec:lec_tx_timeout: lec0 [ 469.264834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.379245][ T7174] IPVS: starting estimator thread 0... [ 469.475073][T19421] IPVS: using max 26 ests per chain, 62400 per kthread [ 469.500391][T19428] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.508123][T19428] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.719822][T19445] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 470.092054][T19466] netlink: 'syz.4.3551': attribute type 9 has an invalid length. [ 472.336647][T19417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.563600][T19488] netlink: 'syz.0.3554': attribute type 1 has an invalid length. [ 472.660916][T19493] veth5: entered allmulticast mode [ 472.702057][T19507] __nla_validate_parse: 5 callbacks suppressed [ 472.702076][T19507] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3554'. [ 472.724449][T19488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.758933][T19501] vlan2: entered promiscuous mode [ 472.764056][T19501] bond1: entered promiscuous mode [ 472.792521][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 472.802942][T19501] vlan2: entered allmulticast mode [ 472.816335][T19501] bond1: entered allmulticast mode [ 472.966225][T19516] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.111932][T19524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.204262][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3566'. [ 473.333189][T19528] bond5: entered promiscuous mode [ 473.340260][T19540] netlink: 'syz.0.3569': attribute type 32 has an invalid length. [ 473.348730][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 473.356096][T19528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 473.384403][T19535] bridge2: entered promiscuous mode [ 473.391174][T19535] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 473.432220][T19540] bond2: option coupled_control: invalid value (52) [ 473.509791][T19540] bond2 (unregistering): Released all slaves [ 473.581790][T19528] macvlan2: entered promiscuous mode [ 473.587421][T19528] macvlan2: entered allmulticast mode [ 473.593415][T19528] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 473.774542][T19558] netlink: zone id is out of range [ 473.788805][T19558] netlink: zone id is out of range [ 473.813049][T19558] netlink: zone id is out of range [ 473.832217][T19558] netlink: zone id is out of range [ 473.841491][T19558] netlink: zone id is out of range [ 473.863850][T19560] netlink: 'syz.4.3573': attribute type 4 has an invalid length. [ 473.875279][T19558] netlink: zone id is out of range [ 473.886844][T19558] netlink: zone id is out of range [ 473.907459][T19558] netlink: zone id is out of range [ 473.946201][T19558] netlink: zone id is out of range [ 474.034449][T19563] can: request_module (can-proto-4) failed. [ 474.107004][T19574] netlink: 'syz.4.3577': attribute type 58 has an invalid length. [ 474.129490][T19574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3577'. [ 474.275025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 474.283172][ C0] lec:lec_tx_timeout: lec0 [ 474.288337][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.356889][T19588] veth5: entered allmulticast mode [ 474.492739][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3586'. [ 474.585362][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3586'. [ 474.613566][T19599] macsec1: entered promiscuous mode [ 474.646539][T19603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3588'. [ 474.678586][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 474.741990][T19608] tipc: Started in network mode [ 474.759253][T19608] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 474.765692][T19612] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3587'. [ 474.781124][T19608] tipc: Enabled bearer , priority 10 [ 474.806903][T19612] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.815887][T19612] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.959834][T19618] xt_cgroup: xt_cgroup: no path or classid specified [ 475.349380][T19646] gre0: entered promiscuous mode [ 475.362539][T19646] gre0: entered allmulticast mode [ 475.582103][T19653] No such timeout policy "syz0" [ 475.598600][T19658] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.770079][T19669] netlink: 'syz.2.3605': attribute type 3 has an invalid length. [ 475.797960][T19671] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 475.806118][T19669] netlink: 'syz.2.3605': attribute type 3 has an invalid length. [ 475.874387][T19671] pimreg3: entered allmulticast mode [ 475.896029][T18383] tipc: Node number set to 10136234 [ 476.186061][T19692] netlink: 'syz.4.3612': attribute type 10 has an invalid length. [ 477.386901][T19759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 477.405284][T19759] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.793209][T19773] __nla_validate_parse: 14 callbacks suppressed [ 477.793231][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3630'. [ 477.873924][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3630'. [ 478.120357][T19805] sctp: [Deprecated]: syz.2.3637 (pid 19805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.120357][T19805] Use struct sctp_sack_info instead [ 478.216846][T19811] sctp: [Deprecated]: syz.2.3637 (pid 19811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.216846][T19811] Use struct sctp_sack_info instead [ 478.367007][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3640'. [ 478.406803][T19820] bond0: entered promiscuous mode [ 478.411900][T19820] bond_slave_0: entered promiscuous mode [ 478.432471][T19820] bond_slave_1: entered promiscuous mode [ 478.440971][T19820] batadv0: entered promiscuous mode [ 478.447514][T19820] debugfs: 'hsr1' already exists in 'hsr' [ 478.458396][T19820] Cannot create hsr debugfs directory [ 478.480477][T19820] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 478.514929][T19820] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 478.546060][T19820] hsr1: entered promiscuous mode [ 478.551106][T19820] hsr1: entered allmulticast mode [ 478.584765][T19820] bond0: entered allmulticast mode [ 478.591018][T19820] bond_slave_0: entered allmulticast mode [ 478.605067][T19820] bond_slave_1: entered allmulticast mode [ 478.615156][T19820] batadv0: entered allmulticast mode [ 478.621644][T19820] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 478.667892][T19820] bond0: left promiscuous mode [ 478.681593][T19820] bond_slave_0: left promiscuous mode [ 478.708438][T19820] bond_slave_1: left promiscuous mode [ 478.770482][T19820] batadv0: left promiscuous mode [ 478.843301][T19834] syzkaller1: entered promiscuous mode [ 478.861550][T19834] syzkaller1: entered allmulticast mode [ 478.975003][T19848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 479.171221][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3648'. [ 479.361007][T19868] net_ratelimit: 136 callbacks suppressed [ 479.361030][T19868] openvswitch: netlink: IP tunnel dst address not specified [ 479.513528][T19876] sctp: [Deprecated]: syz.2.3651 (pid 19876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.513528][T19876] Use struct sctp_sack_info instead [ 479.837094][T19894] netlink: 'syz.0.3655': attribute type 4 has an invalid length. [ 479.904386][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3656'. [ 479.942370][T19894] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3655'. [ 480.002371][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3657'. [ 480.055087][T19908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.062407][T19908] IPv6: NLM_F_CREATE should be set when creating new route [ 480.069753][T19908] IPv6: NLM_F_CREATE should be set when creating new route [ 480.074824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 480.077085][T19908] IPv6: NLM_F_CREATE should be set when creating new route [ 480.085046][ C0] lec:lec_tx_timeout: lec0 [ 480.097594][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.179684][T19908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.369921][T19917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3660'. [ 480.403887][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 480.468992][T19915] openvswitch: netlink: Multiple metadata blocks provided [ 481.103883][T19952] bond3: Unable to set up delay as MII monitoring is disabled [ 481.113394][T19952] bond3 (unregistering): Released all slaves [ 481.296662][T19965] netlink: 'syz.0.3667': attribute type 4 has an invalid length. [ 481.804463][T19985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.996927][T20004] netlink: 'syz.0.3678': attribute type 1 has an invalid length. [ 482.150992][T19985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.354459][T19985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.509531][T19985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.778382][T10788] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.820689][T10788] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.875437][T14165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.905247][ T8800] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.224234][T20071] __nla_validate_parse: 10 callbacks suppressed [ 483.224259][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'. [ 483.242661][T20071] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.256682][T20063] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 483.275779][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 483.308122][T20063] bond3 (unregistering): Released all slaves [ 483.354505][T20071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.458645][T20073] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 483.585159][T20087] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 483.696130][T20091] nbd: must specify a size in bytes for the device [ 484.001883][T20113] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3712'. [ 484.001883][T20114] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3712'. [ 484.104933][T20117] netlink: 'syz.0.3713': attribute type 12 has an invalid length. [ 484.112909][T20117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3713'. [ 484.197537][T20126] bond0: entered promiscuous mode [ 484.211484][T20126] bond_slave_0: entered promiscuous mode [ 484.219608][T20126] bond_slave_1: entered promiscuous mode [ 484.243620][T20126] batadv0: entered promiscuous mode [ 484.260722][T20126] debugfs: 'hsr1' already exists in 'hsr' [ 484.275165][T20126] Cannot create hsr debugfs directory [ 484.286639][T20126] hsr1: entered promiscuous mode [ 484.298177][T20126] hsr1: entered allmulticast mode [ 484.305921][T20126] bond0: entered allmulticast mode [ 484.311757][T20126] bond_slave_0: entered allmulticast mode [ 484.334300][T20126] bond_slave_1: entered allmulticast mode [ 484.343906][T20126] batadv0: entered allmulticast mode [ 484.352921][T20126] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 484.477321][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 484.506658][T20126] bond0: left promiscuous mode [ 484.511639][T20126] bond_slave_0: left promiscuous mode [ 484.521145][T20126] bond_slave_1: left promiscuous mode [ 484.563888][T20126] batadv0: left promiscuous mode [ 484.575946][T20142] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3719'. [ 484.591513][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3719'. [ 484.677338][T20144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3721'. [ 484.995713][T20159] openvswitch: netlink: IP tunnel dst address not specified [ 485.055457][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3728'. [ 485.114899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 485.123017][ C0] lec:lec_tx_timeout: lec0 [ 485.128034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 485.513532][T20198] netlink: 'syz.4.3737': attribute type 29 has an invalid length. [ 485.540947][T20198] netlink: 'syz.4.3737': attribute type 29 has an invalid length. [ 485.566738][T20200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.612331][T20200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.128476][T20234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 486.147901][T20237] macvtap1: entered promiscuous mode [ 486.156944][T20237] macvtap1: entered allmulticast mode [ 486.195798][T20237] veth1_vlan: entered allmulticast mode [ 486.222443][T20232] macvtap2: entered promiscuous mode [ 486.235287][T20232] macvtap2: entered allmulticast mode [ 486.345033][T20249] erspan0: entered promiscuous mode [ 486.352025][T20249] gretap0: entered promiscuous mode [ 486.375260][T20249] debugfs: 'hsr1' already exists in 'hsr' [ 486.385564][T20249] Cannot create hsr debugfs directory [ 486.403061][T20249] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 486.559150][T20253] batadv_slave_1: default FDB implementation only supports local addresses [ 486.759532][T20277] netlink: 'syz.2.3761': attribute type 10 has an invalid length. [ 486.880509][T20289] netlink: 'syz.2.3764': attribute type 11 has an invalid length. [ 487.202581][T20306] bridge0: port 3(ipvlan2) entered blocking state [ 487.219368][T20306] bridge0: port 3(ipvlan2) entered disabled state [ 487.227814][T20306] ipvlan2: entered allmulticast mode [ 487.236195][T20306] ipvlan2: left allmulticast mode [ 487.492992][T20315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.507657][T20327] openvswitch: netlink: Key type 268 is out of range max 32 [ 487.520316][T20330] openvswitch: netlink: Key type 268 is out of range max 32 [ 487.618162][T20315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.670309][T20332] netlink: 'syz.1.3779': attribute type 19 has an invalid length. [ 487.727169][T20315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.776291][T14165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.785853][T20332] netlink: 'syz.1.3779': attribute type 19 has an invalid length. [ 487.797283][T14165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.864748][T14165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.951297][T20315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.997510][ T8800] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.228465][T10788] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.269905][T14165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.329739][T20362] __nla_validate_parse: 15 callbacks suppressed [ 488.329760][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 488.378047][T10788] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.389713][T20364] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3787'. [ 488.429939][T10788] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.455701][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 488.497271][T20372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3789'. [ 488.500994][T20362] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 488.520118][T20372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3789'. [ 488.648741][T20379] bridge_slave_1: left allmulticast mode [ 488.658657][T20379] bridge_slave_1: left promiscuous mode [ 488.666480][T20379] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.690362][T20379] bridge_slave_0: left allmulticast mode [ 488.702804][T20379] bridge_slave_0: left promiscuous mode [ 488.747573][T20379] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.909372][T20395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 488.954283][T20398] wireguard: wg1: Could not create IPv4 socket [ 488.975935][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3795'. [ 489.033342][T20401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3798'. [ 489.446906][T20435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3809'. [ 489.598832][T20451] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3811'. [ 489.626940][T20448] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.657152][T20451] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 490.134985][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 490.143049][ C0] lec:lec_tx_timeout: lec0 [ 490.264028][T20486] team0: Device gtp0 is up. Set it down before adding it as a team port [ 490.801559][T20504] gretap0: entered promiscuous mode [ 490.822200][T20504] gretap0: left promiscuous mode [ 493.171843][T20478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.185372][T20496] netlink: 'syz.3.3822': attribute type 1 has an invalid length. [ 493.365150][T20513] __nla_validate_parse: 7 callbacks suppressed [ 493.365171][T20513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3829'. [ 493.562728][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3836'. [ 493.575080][T20529] hsr_slave_0: left promiscuous mode [ 493.603005][T20529] hsr_slave_1: left promiscuous mode [ 493.609942][T20531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3833'. [ 493.761360][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 493.785364][T20541] nft_compat: unsupported protocol 0 [ 493.960518][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 493.973008][T20557] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.196580][T20569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.598394][T20594] xfrm1: entered allmulticast mode [ 494.616381][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3858'. [ 494.753119][T20606] netlink: 'syz.0.3862': attribute type 9 has an invalid length. [ 494.830103][T20609] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 494.860861][T20609] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.894528][T20609] gretap1: entered promiscuous mode [ 494.907469][T20609] gretap1: entered allmulticast mode [ 495.005684][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3866'. [ 495.237222][T20635] veth3: entered allmulticast mode [ 495.531432][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 495.541820][T20660] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3872'. [ 495.801800][T20671] bond0: entered promiscuous mode [ 495.807688][T20671] bond_slave_0: entered promiscuous mode [ 495.813561][T20671] bond_slave_1: entered promiscuous mode [ 495.820701][T20671] batadv0: entered promiscuous mode [ 495.827337][T20671] debugfs: 'hsr1' already exists in 'hsr' [ 495.833240][T20671] Cannot create hsr debugfs directory [ 495.839352][T20671] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 495.849507][T20671] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 495.859760][T20671] hsr1: entered promiscuous mode [ 495.864940][T20671] hsr1: entered allmulticast mode [ 495.870484][T20671] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 495.878373][T20671] bond0: left promiscuous mode [ 495.883175][T20671] bond_slave_0: left promiscuous mode [ 495.888999][T20671] bond_slave_1: left promiscuous mode [ 495.896575][T20671] batadv0: left promiscuous mode [ 496.339746][T20673] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3876'. [ 497.956014][T20621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.210798][T20682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.227532][T20682] bond_slave_0: left allmulticast mode [ 498.258512][T20682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.305891][T20682] bond_slave_1: left allmulticast mode [ 498.325671][T20682] bond0 (unregistering): Released all slaves [ 498.384552][T20696] __nla_validate_parse: 9 callbacks suppressed [ 498.384575][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'. [ 498.388770][T14165] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.395063][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3884'. [ 498.433847][T14165] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.465298][T14165] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.474114][T14165] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.751438][T20717] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3889'. [ 498.830201][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 498.858066][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 498.869669][T20721] openvswitch: netlink: Unknown nsh attribute 0 [ 498.914795][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3890'. [ 498.981043][T20719] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3890'. [ 499.074129][T20719] vlan0: entered allmulticast mode [ 499.096562][T20719] veth0_vlan: entered allmulticast mode [ 499.115745][T14165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.165977][T20735] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3894'. [ 499.280525][T20737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3895'. [ 499.336971][T20737] IPv6: sit2: Disabled Multicast RS [ 499.338743][T20741] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3896'. [ 499.351755][T20741] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 499.362363][T20737] sit2: entered allmulticast mode [ 499.646643][T20754] 8021q: VLANs not supported on ip_vti0 [ 499.716228][T20760] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 499.731982][T20760] netlink: 'syz.0.3903': attribute type 4 has an invalid length. [ 500.204563][T20789] syzkaller0: entered promiscuous mode [ 500.214165][T20789] syzkaller0: entered allmulticast mode [ 500.773429][T20830] ip6t_srh: unknown srh match flags 4000 [ 500.859249][T20838] syzkaller1: entered promiscuous mode [ 500.913060][T20838] syzkaller1: entered allmulticast mode [ 501.053211][T20844] netlink: 'syz.2.3922': attribute type 21 has an invalid length. [ 501.065080][T20844] netlink: 'syz.2.3922': attribute type 22 has an invalid length. [ 501.073785][T20844] netlink: 'syz.2.3922': attribute type 23 has an invalid length. [ 501.082368][T20844] netlink: 'syz.2.3922': attribute type 25 has an invalid length. [ 501.112927][T20844] netlink: 'syz.2.3922': attribute type 26 has an invalid length. [ 501.394051][T20872] xt_hashlimit: size too large, truncated to 1048576 [ 501.442549][T20870] hsr_slave_0 (unregistering): left promiscuous mode [ 501.542194][T20879] syzkaller1: entered promiscuous mode [ 501.547955][T20879] syzkaller1: entered allmulticast mode [ 501.644048][T20885] IPVS: Unknown mcast interface: vcan0 [ 501.679170][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.692306][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.809369][T20892] bridge_slave_0: left allmulticast mode [ 501.831683][T20892] bridge_slave_0: left promiscuous mode [ 501.844476][T20892] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.865320][T20892] bridge_slave_1: left allmulticast mode [ 501.872477][T20892] bridge_slave_1: left promiscuous mode [ 501.881972][T20892] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.908187][T20892] bond0: (slave bond_slave_0): Releasing backup interface [ 501.920279][T20892] bond0: (slave bond_slave_1): Releasing backup interface [ 501.944282][T20892] team0: Port device team_slave_0 removed [ 501.958755][T20892] team0: Port device team_slave_1 removed [ 501.969682][T20898] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 501.978767][T20892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.988962][T20892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.009291][T20892] vlan2: left promiscuous mode [ 502.014132][T20892] bond1: left promiscuous mode [ 502.198848][T20909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.313609][T20913] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 502.346333][T20913] team0: Port device batadv1 added [ 502.362227][T20915] netlink: 'syz.4.3942': attribute type 29 has an invalid length. [ 502.385256][T20915] netlink: 'syz.4.3942': attribute type 29 has an invalid length. [ 503.093317][T20968] netlink: 'syz.3.3958': attribute type 2 has an invalid length. [ 504.582486][T21060] __nla_validate_parse: 13 callbacks suppressed [ 504.582507][T21060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3982'. [ 504.687417][T21067] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3982'. [ 504.764064][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3984'. [ 504.826735][T21071] : entered promiscuous mode [ 504.934059][T21082] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 505.734507][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3994'. [ 505.876584][T21135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.897075][T21126] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 506.387743][T21169] xt_policy: output policy not valid in PREROUTING and INPUT [ 506.622142][T21185] rdma_op ffff888083fee9f0 conn xmit_rdma 0000000000000000 [ 506.635243][ T29] audit: type=1107 audit(1772151131.310:5): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='â?Ù&'18çIb·-ì"`R³, priority 0 [ 577.956857][T23122] tipc: Resetting bearer [ 577.993286][T23127] IPVS: Scheduler module ip_vs_sip not found [ 578.008733][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4529'. [ 578.042119][T23122] tipc: Disabling bearer [ 578.353829][T23146] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4535'. [ 578.378315][T23146] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4535'. [ 578.800990][T23171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4545'. [ 578.816925][T23173] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20000 [ 578.980486][T23186] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4548'. [ 579.126986][T23186] geneve2: entered promiscuous mode [ 579.140205][T23186] geneve2: entered allmulticast mode [ 579.170475][T14165] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 579.184828][T14165] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 579.222078][T14165] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 579.255824][T14165] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 579.348306][T23204] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4551'. [ 579.364890][T23209] netlink: 'syz.1.4553': attribute type 1 has an invalid length. [ 579.401959][T23209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.445576][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'. [ 579.462220][T23208] bond5: (slave veth0_to_bond): making interface the new active one [ 579.511974][T23208] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 579.539347][T23209] bond5: entered promiscuous mode [ 579.547817][T23209] veth0_to_bond: entered promiscuous mode [ 579.555947][T23209] bond5: entered allmulticast mode [ 579.561500][T23209] veth0_to_bond: entered allmulticast mode [ 579.656034][T23220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4554'. [ 579.756561][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 579.765076][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 579.900372][T23232] veth1_macvtap: left promiscuous mode [ 579.917870][T23232] macsec0: entered promiscuous mode [ 579.923270][T23232] macsec0: entered allmulticast mode [ 579.980130][T23239] x_tables: duplicate underflow at hook 3 [ 580.074702][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 580.082886][ C0] lec:lec_tx_timeout: lec0 [ 580.150533][T23246] sctp: [Deprecated]: syz.1.4563 (pid 23246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.150533][T23246] Use struct sctp_sack_info instead [ 580.307424][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.382348][T23269] netlink: 'syz.1.4569': attribute type 22 has an invalid length. [ 580.446076][T23269] netlink: 'syz.1.4569': attribute type 22 has an invalid length. [ 580.539770][T23274] "syz.2.4570" (23274) uses obsolete ecb(arc4) skcipher [ 580.806747][T23295] erspan0: entered promiscuous mode [ 580.813223][T23295] erspan0: entered allmulticast mode [ 581.863509][T23356] IPv6: sit2: Disabled Multicast RS [ 581.900046][T23356] sit2: entered allmulticast mode [ 581.945914][T23364] lo: Caught tx_queue_len zero misconfig [ 581.957270][T23366] openvswitch: netlink: Flow key attr not present in new flow. [ 582.352209][T23385] openvswitch: netlink: Flow key attribute not present in set flow. [ 582.677838][T23404] __nla_validate_parse: 13 callbacks suppressed [ 582.677860][T23404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4609'. [ 582.713513][T23408] tipc: Started in network mode [ 582.746043][T23408] tipc: Node identity ac14140f, cluster identity 2047 [ 582.753597][T23408] tipc: New replicast peer: 255.255.255.255 [ 582.763330][T23408] tipc: Enabled bearer , priority 10 [ 582.775848][T23406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4608'. [ 582.803401][T23411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4611'. [ 582.926580][T23416] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4613'. [ 583.076538][T23424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4614'. [ 583.113938][T23425] netlink: 'syz.4.4616': attribute type 12 has an invalid length. [ 583.137058][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4616'. [ 583.250386][T23424] bond2: option xmit_hash_policy: invalid value (64) [ 583.266334][T23424] bond2 (unregistering): Released all slaves [ 583.347898][T23431] sctp: [Deprecated]: syz.2.4619 (pid 23431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.347898][T23431] Use struct sctp_sack_info instead [ 583.375860][T23425] netlink: 'syz.4.4616': attribute type 12 has an invalid length. [ 583.385873][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4616'. [ 583.396170][T23431] sctp: [Deprecated]: syz.2.4619 (pid 23431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.396170][T23431] Use struct sctp_sack_info instead [ 583.458283][T23430] syzkaller0: entered promiscuous mode [ 583.468318][T23430] syzkaller0: entered allmulticast mode [ 583.527369][T23435] syzkaller0: entered promiscuous mode [ 583.532923][T23435] syzkaller0: entered allmulticast mode [ 583.558343][T23430] tipc: Enabled bearer , priority 0 [ 583.580417][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4623'. [ 583.609220][T23429] tipc: Resetting bearer [ 583.655102][T23429] tipc: Disabling bearer [ 583.826460][T23447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4626'. [ 583.916024][T20646] tipc: Node number set to 2886997007 [ 583.951213][T23452] netlink: 'syz.2.4631': attribute type 10 has an invalid length. [ 583.960805][T14165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.971031][T14165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.989312][T23452] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4631'. [ 584.003771][T23456] ip6tnl0: Caught tx_queue_len zero misconfig [ 584.013284][T23459] netlink: 'syz.3.4630': attribute type 4 has an invalid length. [ 584.434031][T23488] netlink: 'syz.0.4639': attribute type 39 has an invalid length. [ 586.299822][T23498] bond0: entered promiscuous mode [ 586.309432][T23498] bond_slave_0: entered promiscuous mode [ 586.335126][T23498] bond_slave_1: entered promiscuous mode [ 586.345541][T23498] bridge_slave_1: entered promiscuous mode [ 586.354564][T23498] batadv0: entered promiscuous mode [ 586.362775][T23498] debugfs: 'hsr1' already exists in 'hsr' [ 586.371087][T23498] Cannot create hsr debugfs directory [ 586.377467][T23498] hsr1: entered promiscuous mode [ 586.388078][T23498] hsr1: entered allmulticast mode [ 586.393355][T23498] bond0: entered allmulticast mode [ 586.404744][T23498] bond_slave_0: entered allmulticast mode [ 586.415718][T23498] bond_slave_1: entered allmulticast mode [ 586.431771][T23498] bridge_slave_1: entered allmulticast mode [ 586.451439][T23498] batadv0: entered allmulticast mode [ 586.458320][T23498] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 586.496361][T23498] bond0: left promiscuous mode [ 586.503624][T23498] bond_slave_0: left promiscuous mode [ 586.517004][T23498] bond_slave_1: left promiscuous mode [ 586.523325][T23498] bridge_slave_1: left promiscuous mode [ 586.530836][T23498] batadv0: left promiscuous mode [ 586.688155][T23517] C: Caught tx_queue_len zero misconfig [ 586.874472][T23530] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 586.943454][T23530] team1: entered promiscuous mode [ 586.950855][T23530] team1: entered allmulticast mode [ 587.404269][T23559] netlink: 'syz.1.4660': attribute type 1 has an invalid length. [ 587.736411][T23573] __nla_validate_parse: 13 callbacks suppressed [ 587.736431][T23573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4665'. [ 587.775176][T23573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4665'. [ 587.827217][T23575] dvmrp8: entered allmulticast mode [ 587.841949][T23575] dvmrp8: left allmulticast mode [ 587.893438][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4668'. [ 587.937856][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 587.969703][T23583] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4671'. [ 588.635206][T23608] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 588.682247][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 588.694429][T23613] netlink: 'syz.3.4679': attribute type 13 has an invalid length. [ 588.758915][T23608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 588.771061][T23613] netlink: 'syz.3.4679': attribute type 17 has an invalid length. [ 588.780714][T23615] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4679'. [ 588.850649][T23613] gre0: left promiscuous mode [ 588.887966][T23613] gre0: left allmulticast mode [ 589.198202][T23613] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.249098][T23613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.501365][T23638] syzkaller0: entered promiscuous mode [ 589.524103][T23638] syzkaller0: entered allmulticast mode [ 589.803437][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4692'. [ 590.079394][T14165] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 590.303699][T23671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 590.705986][T23703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.867688][T23705] netlink: 'syz.2.4704': attribute type 1 has an invalid length. [ 591.332652][T23732] netlink: 'syz.3.4711': attribute type 12 has an invalid length. [ 591.374771][T23732] netlink: 'syz.3.4711': attribute type 11 has an invalid length. [ 591.430642][T23743] netlink: 'syz.1.4713': attribute type 11 has an invalid length. [ 591.444154][T23745] netlink: 'syz.1.4713': attribute type 11 has an invalid length. [ 591.455640][T23745] openvswitch: netlink: Message has 1 unknown bytes. [ 591.462627][T23745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.155171][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.298207][T23767] netlink: 'syz.0.4718': attribute type 3 has an invalid length. [ 594.352424][T23771] __nla_validate_parse: 21 callbacks suppressed [ 594.352449][T23771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4721'. [ 594.541394][T23779] vlan0: entered allmulticast mode [ 594.554847][T23779] geneve1: entered allmulticast mode [ 594.593997][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'. [ 594.624402][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 594.730667][T23794] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4730'. [ 594.774242][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4731'. [ 594.783871][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4730'. [ 594.872732][T23800] bond6 (unregistering): Released all slaves [ 594.914472][T23798] tipc: Enabling of bearer rejected, failed to enable media [ 594.968707][T23797] netlink: 'syz.3.4731': attribute type 4 has an invalid length. [ 595.005004][T23797] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4731'. [ 595.436975][T23832] tipc: Enabling of bearer rejected, failed to enable media [ 595.543500][T23840] tipc: Enabled bearer , priority 0 [ 595.551891][T23840] +: renamed from syzkaller0 [ 595.565876][T23840] tipc: Disabling bearer [ 595.667612][T23844] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4746'. [ 595.891887][T23857] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4751'. [ 596.029973][T23866] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4754'. [ 596.981479][T23938] netlink: 'syz.0.4773': attribute type 1 has an invalid length. [ 597.156805][T23951] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 597.166005][T23951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.175635][T23952] tipc: New replicast peer: 255.255.255.255 [ 597.182157][T23952] tipc: Enabled bearer , priority 10 [ 597.433883][T23968] bridge0: port 3(ipvlan0) entered blocking state [ 597.440867][T23968] bridge0: port 3(ipvlan0) entered disabled state [ 597.448270][T23968] ipvlan0: entered allmulticast mode [ 597.453687][T23968] bridge0: entered allmulticast mode [ 597.461336][T23968] ipvlan0: left allmulticast mode [ 597.466778][T23968] bridge0: left allmulticast mode [ 597.878134][T23980] syzkaller0: entered promiscuous mode [ 597.891267][T23988] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 597.906093][T23980] syzkaller0: entered allmulticast mode [ 597.911901][T23989] atomic_op ffff888029278198 conn xmit_atomic 0000000000000000 [ 597.955916][T23988] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 598.015440][T23993] nft_compat: unsupported protocol 0 [ 598.022913][T23992] nft_compat: unsupported protocol 0 [ 598.352825][T24018] netlink: 'syz.4.4791': attribute type 19 has an invalid length. [ 598.415916][T24022] xt_cgroup: xt_cgroup: no path or classid specified [ 600.120945][T24039] __nla_validate_parse: 16 callbacks suppressed [ 600.120967][T24039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4799'. [ 600.232545][T24047] netlink: 'syz.2.4802': attribute type 16 has an invalid length. [ 600.252566][T24047] netlink: 'syz.2.4802': attribute type 17 has an invalid length. [ 600.358286][T24047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.408315][T24055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4804'. [ 600.610123][T24062] syzkaller0: entered promiscuous mode [ 600.628813][T24062] syzkaller0: entered allmulticast mode [ 600.868076][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 601.128357][T24101] openvswitch: netlink: Key type 268 is out of range max 32 [ 601.139650][T24101] syzkaller0: entered promiscuous mode [ 601.147707][T24101] syzkaller0: entered allmulticast mode [ 601.181697][T24054] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 601.350948][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4820'. [ 601.883792][T24145] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4832'. [ 601.943303][T24156] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 602.123005][T24165] tipc: Started in network mode [ 602.139738][T24165] tipc: Node identity 9e8ac89e5471, cluster identity 4711 [ 602.148764][T24165] tipc: Enabled bearer , priority 0 [ 602.155251][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.197485][T24165] syzkaller0: entered promiscuous mode [ 602.203394][T24165] syzkaller0: entered allmulticast mode [ 602.211688][T24173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.220813][T24173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.230921][T24173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.252158][T24173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.360297][T24165] tipc: Resetting bearer [ 602.396247][T21939] Bluetooth: hci0: command 0x0406 tx timeout [ 602.452859][T24164] tipc: Resetting bearer [ 602.473667][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4842'. [ 602.501728][T24164] tipc: Disabling bearer [ 602.546429][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4842'. [ 602.559598][T24193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4841'. [ 602.587512][T24193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 602.684665][T24195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4844'. [ 602.722629][T24199] netlink: 'syz.4.4846': attribute type 1 has an invalid length. [ 602.838247][T24202] bond8: (slave ip6gretap2): making interface the new active one [ 602.854200][T24202] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 602.995874][T24216] netlink: 'syz.3.4852': attribute type 14 has an invalid length. [ 603.021418][T24216] netlink: 'syz.3.4852': attribute type 13 has an invalid length. [ 603.596662][T24239] sctp: [Deprecated]: syz.0.4856 (pid 24239) Use of int in maxseg socket option. [ 603.596662][T24239] Use struct sctp_assoc_value instead [ 605.003937][T24240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.045290][T24240] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 605.084387][T24240] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 605.449600][T24263] xt_hashlimit: size too large, truncated to 1048576 [ 605.610744][T24284] netlink: 'syz.0.4869': attribute type 17 has an invalid length. [ 605.618946][T24284] __nla_validate_parse: 3 callbacks suppressed [ 605.618967][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4869'. [ 605.635370][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 605.649704][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4869'. [ 606.137303][T24311] syzkaller0: entered promiscuous mode [ 606.152022][T24311] syzkaller0: entered allmulticast mode [ 606.261432][T24319] ip6gre1: entered allmulticast mode [ 606.816161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db22800: rx timeout, send abort [ 606.868633][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4892'. [ 606.883180][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4892'. [ 606.979750][T24372] netlink: 'syz.4.4896': attribute type 4 has an invalid length. [ 607.229179][T24379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4899'. [ 607.244787][T24379] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4899'. [ 607.257844][T24379] netlink: 'syz.3.4899': attribute type 5 has an invalid length. [ 607.266958][T24379] netlink: 'syz.3.4899': attribute type 6 has an invalid length. [ 607.279307][T24379] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4899'. [ 607.326255][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db22800: abort rx timeout. Force session deactivation [ 607.454391][T24397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.471848][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4905'. [ 607.528468][T24397] netlink: 'syz.1.4905': attribute type 7 has an invalid length. [ 607.641325][T24405] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4909'. [ 608.856688][T24482] netdevsim0: renamed from gre0 (while UP) [ 608.881618][T24482] netdevsim0: entered promiscuous mode [ 608.913395][T24482] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 609.088295][T24495] tipc: Enabling of bearer rejected, failed to enable media [ 609.190060][T24502] xt_TCPMSS: Only works on TCP SYN packets [ 609.483985][T24516] netlink: 'syz.0.4943': attribute type 1 has an invalid length. [ 609.543287][T24516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 609.834796][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.842090][ C0] bridge0: topology change detected, propagating [ 609.848936][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.856254][ C0] bridge0: topology change detected, propagating [ 609.929828][T24536] bond5: entered promiscuous mode [ 609.935858][T24536] bond5: entered allmulticast mode [ 609.955856][T24538] dvmrp0: entered allmulticast mode [ 610.143347][T24560] openvswitch: netlink: Message has 8 unknown bytes. [ 610.157822][T24562] tunl0: Caught tx_queue_len zero misconfig [ 610.164045][T24560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.346896][T24579] dvmrp0: entered allmulticast mode [ 610.587923][ T6401] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 610.743004][T24600] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 610.818554][T24605] netlink: 'syz.3.4972': attribute type 2 has an invalid length. [ 610.831915][T24606] Cannot find add_set index 65532 as target [ 610.839784][T24609] __nla_validate_parse: 8 callbacks suppressed [ 610.839802][T24609] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4973'. [ 610.841740][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'. [ 610.879615][T24611] openvswitch: netlink: Multiple metadata blocks provided [ 611.018459][T24617] netlink: 'syz.2.4975': attribute type 1 has an invalid length. [ 611.045286][T24617] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.4975'. [ 611.268936][T24636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4983'. [ 611.323080][T24641] xt_hashlimit: size too large, truncated to 1048576 [ 611.605185][T24659] netlink: 'syz.1.4990': attribute type 2 has an invalid length. [ 611.623134][T24659] netlink: 'syz.1.4990': attribute type 11 has an invalid length. [ 611.642651][T24659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4990'. [ 611.827421][T24674] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 611.840028][T24674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4994'. [ 611.850635][T24670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4991'. [ 611.857976][T24674] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 611.869573][T24674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4994'. [ 611.934241][T24674] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 611.952614][T24674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4994'. [ 611.980925][T24674] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 611.990590][T24674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4994'. [ 612.027678][T24674] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 612.713423][T24730] netdevsim0: left promiscuous mode [ 612.788813][T24730] erspan0: left promiscuous mode [ 612.803411][T24730] erspan0: left allmulticast mode [ 612.898281][T24747] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 612.936231][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.951678][T24730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.987607][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.997765][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.155311][T24756] tc_dump_action: action bad kind [ 613.641750][T24736] infiniband syz2: set down [ 613.647835][T20641] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.665066][T24736] infiniband syz2: added ip6_vti0 [ 613.696625][T24736] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 613.705603][T24736] infiniband syz2: Couldn't open port 1 [ 613.787584][T24781] sctp: [Deprecated]: syz.2.5022 (pid 24781) Use of int in max_burst socket option deprecated. [ 613.787584][T24781] Use struct sctp_assoc_value instead [ 613.846284][T24736] RDS/IB: syz2: added [ 613.857307][T24736] smc: adding ib device syz2 with port count 1 [ 613.872337][T24736] smc: ib device syz2 port 1 has no pnetid [ 613.889900][T20638] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.906562][T24783] tipc: Enabled bearer , priority 0 [ 613.916937][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.031953][T24783] syzkaller0: entered promiscuous mode [ 614.055290][T24783] syzkaller0: entered allmulticast mode [ 614.065684][T24783] tipc: Resetting bearer [ 614.102248][T24782] tipc: Resetting bearer [ 615.978079][T24782] tipc: Disabling bearer [ 615.988885][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.069868][T20641] tipc: Node number set to 3405498526 [ 616.157265][T24823] __nla_validate_parse: 42 callbacks suppressed [ 616.157286][T24823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5036'. [ 616.213269][T24826] validate_nla: 29 callbacks suppressed [ 616.213293][T24826] netlink: 'syz.2.5038': attribute type 16 has an invalid length. [ 616.229061][T24830] veth0: entered promiscuous mode [ 616.237727][T24826] netlink: 'syz.2.5038': attribute type 17 has an invalid length. [ 616.265277][T24826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.296220][T24827] veth0: left promiscuous mode [ 616.405641][T24839] netlink: 'syz.3.5041': attribute type 1 has an invalid length. [ 616.418873][T24840] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5040'. [ 616.558271][T24845] bond2: (slave bridge3): making interface the new active one [ 616.567401][T24845] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 616.588612][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.739096][T24858] netlink: 'syz.3.5045': attribute type 2 has an invalid length. [ 616.765095][T24858] netlink: 'syz.3.5045': attribute type 1 has an invalid length. [ 616.786037][T24858] netlink: 'syz.3.5045': attribute type 2 has an invalid length. [ 616.794042][T24858] netlink: 'syz.3.5045': attribute type 2 has an invalid length. [ 617.157771][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.195981][T24879] netlink: 'syz.1.5050': attribute type 1 has an invalid length. [ 617.218114][T24879] netlink: 'syz.1.5050': attribute type 2 has an invalid length. [ 617.227602][T24879] netlink: 'syz.1.5050': attribute type 2 has an invalid length. [ 617.310732][T24881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5052'. [ 617.334921][T24886] syzkaller1: entered promiscuous mode [ 617.341649][T24886] syzkaller1: entered allmulticast mode [ 617.698197][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.959868][T24915] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5061'. [ 618.005417][T24915] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5061'. [ 618.155171][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 618.400212][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.646345][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5073'. [ 618.666195][T24943] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.757350][T24949] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 618.811899][T24951] !: renamed from dummy0 (while UP) [ 618.920303][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 618.973772][T24736] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.998308][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5078'. [ 619.312424][T24973] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 619.731104][T25002] xt_socket: unknown flags 0x50 [ 619.757229][T24999] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 619.790694][T25003] veth7: entered allmulticast mode [ 619.799602][T24991] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5088'. [ 620.148233][T25024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5093'. [ 621.672134][T25014] ip6_vti0 speed is unknown, defaulting to 1000 [ 622.105881][T25043] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5099'. [ 622.567793][T25068] syzkaller0: entered promiscuous mode [ 622.573548][T25068] syzkaller0: entered allmulticast mode [ 622.869291][T25088] Cannot find del_set index 4 as target [ 623.489085][T25125] sctp: [Deprecated]: syz.4.5115 (pid 25125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.489085][T25125] Use struct sctp_sack_info instead [ 623.596383][T25125] sctp: [Deprecated]: syz.4.5115 (pid 25125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.596383][T25125] Use struct sctp_sack_info instead [ 624.306072][T25168] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5126'. [ 624.525319][T25181] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5129'. [ 624.548716][T25183] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5129'. [ 624.566329][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.568661][T25183] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.582291][T25183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.590419][T25183] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.593279][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 624.597890][T25183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.621737][T25183] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5129'. [ 624.668328][T25181] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.675682][T25181] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.866733][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5133'. [ 624.950803][T25201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5133'. [ 624.986138][T25201] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5133'. [ 625.190416][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5139'. [ 625.225307][T25220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5141'. [ 625.245597][T25217] hsr_slave_1: left promiscuous mode [ 625.666238][T25250] validate_nla: 4 callbacks suppressed [ 625.666259][T25250] netlink: 'syz.0.5148': attribute type 1 has an invalid length. [ 625.768742][T25250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.908770][T25273] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 625.917976][ T7153] IPVS: starting estimator thread 0... [ 625.986863][T25273] tc_dump_action: action bad kind [ 626.031326][T25274] IPVS: using max 29 ests per chain, 69600 per kthread [ 626.408125][T25305] netlink: 'syz.4.5159': attribute type 10 has an invalid length. [ 627.232736][T25364] __nla_validate_parse: 4 callbacks suppressed [ 627.232758][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'. [ 627.437591][T25379] IPVS: set_ctl: invalid protocol: 143 255.255.255.255:20004 [ 627.481894][T25386] lo: entered promiscuous mode [ 627.498668][T25386] tunl0: entered promiscuous mode [ 627.516920][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 627.555994][T25386] gre0: entered promiscuous mode [ 627.573897][T25386] gretap0: entered promiscuous mode [ 627.603279][T25386] erspan0: entered promiscuous mode [ 627.619109][T25386] ip_vti0: entered promiscuous mode [ 627.962780][T25394] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5187'. [ 627.996615][T25408] batadv_slave_1: entered promiscuous mode [ 628.004015][T25393] batadv_slave_1: left promiscuous mode [ 628.311816][T25431] ip6_vti0 speed is unknown, defaulting to 1000 [ 628.352968][T25428] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5192'. [ 628.424768][T25428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5192'. [ 628.457600][T25428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5192'. [ 628.472616][T25434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5196'. [ 628.503621][T25436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5197'. [ 628.599892][T25440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5197'. [ 628.761971][T25445] pimreg: entered allmulticast mode [ 628.841255][T25450] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 629.002976][T25456] netlink: 'syz.4.5201': attribute type 12 has an invalid length. [ 629.011464][T25456] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5201'. [ 629.362188][T25473] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 630.028456][T25486] can: request_module (can-proto-4) failed. [ 630.074926][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 630.082988][ C0] lec:lec_tx_timeout: lec0 [ 630.723641][T25507] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 630.970746][T25531] netlink: 'syz.3.5222': attribute type 1 has an invalid length. [ 630.992030][T25528] netlink: 'syz.1.5220': attribute type 4 has an invalid length. [ 631.273821][T25545] bond7: entered promiscuous mode [ 631.279274][T25545] bond7: entered allmulticast mode [ 631.286937][T25545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.327907][T25551] netlink: 'syz.0.5225': attribute type 1 has an invalid length. [ 631.432466][T25564] bond7: (slave gretap2): making interface the new active one [ 631.464084][T25564] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 631.644368][T25572] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.778829][T25582] netlink: 'syz.1.5231': attribute type 2 has an invalid length. [ 631.945855][T25589] dvmrp0: left allmulticast mode [ 632.512712][T25617] __nla_validate_parse: 10 callbacks suppressed [ 632.512733][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 632.741316][T25632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5243'. [ 632.760892][T25632] nbd: must specify a size in bytes for the device [ 632.951417][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5244'. [ 633.186325][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 633.312533][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5247'. [ 633.586195][T25658] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 633.656041][T25658] bond3 (unregistering): Released all slaves [ 633.755729][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5255'. [ 633.999596][T25690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5258'. [ 634.179813][T25705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5258'. [ 634.206909][T25703] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5262'. [ 634.237490][T25690] netlink: 'syz.3.5258': attribute type 13 has an invalid length. [ 634.303098][T25690] macvtap0: entered allmulticast mode [ 634.335212][T25690] macvtap0: refused to change device tx_queue_len [ 634.428684][T25719] syz_tun: entered promiscuous mode [ 634.459727][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 634.626981][T25735] sit0: entered promiscuous mode [ 634.662993][T25739] netlink: 'syz.0.5273': attribute type 1 has an invalid length. [ 634.695473][T25735] netlink: 'syz.4.5269': attribute type 1 has an invalid length. [ 635.250089][T25766] erspan0: entered promiscuous mode [ 635.262081][T25766] gretap0: entered promiscuous mode [ 635.268378][T25766] debugfs: 'hsr1' already exists in 'hsr' [ 635.274262][T25766] Cannot create hsr debugfs directory [ 635.990391][T25806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.997866][T25806] IPv6: NLM_F_CREATE should be set when creating new route [ 636.170256][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.188269][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.199068][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.209520][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.218202][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.227206][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.237582][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.252705][T25823] netlink: 'syz.4.5292': attribute type 1 has an invalid length. [ 636.261186][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.270545][T25818] netlink: 'syz.2.5295': attribute type 3 has an invalid length. [ 636.869969][T25849] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 636.889110][T25853] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 637.086616][T25867] syzkaller0: entered promiscuous mode [ 637.101371][T25867] syzkaller0: entered allmulticast mode [ 637.653353][T25902] __nla_validate_parse: 13 callbacks suppressed [ 637.653374][T25902] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5314'. [ 637.886606][T25917] bond0: Caught tx_queue_len zero misconfig [ 638.064046][T25927] bond3 (unregistering): Released all slaves [ 638.250876][T25939] bond9: option miimon: invalid value (18446744073709551585) [ 638.280206][T25939] bond9: option miimon: allowed values 0 - 2147483647 [ 638.311851][T25939] bond9 (unregistering): Released all slaves [ 638.372083][T25959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5330'. [ 638.411894][T25963] netdevsim0: mtu greater than device maximum [ 638.538677][T11961] lec:lec_start_xmit: lec0:No lecd attached [ 638.551000][T25982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5333'. [ 638.588113][T25984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5333'. [ 638.798923][T26013] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5337'. [ 639.397824][T26080] tipc: Enabled bearer , priority 11 [ 639.654826][T26108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5349'. [ 639.869711][T20640] IPVS: starting estimator thread 0... [ 639.994861][T26146] IPVS: using max 25 ests per chain, 60000 per kthread [ 640.103492][T26151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5355'. [ 640.339464][T26177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5355'. [ 640.340119][T26151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 640.638188][T26195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5362'. [ 640.664294][T26192] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5361'. [ 640.703756][T26192] dvmrp1: entered allmulticast mode [ 641.655910][T26232] validate_nla: 28 callbacks suppressed [ 641.655930][T26232] netlink: 'syz.1.5376': attribute type 1 has an invalid length. [ 641.753754][T26232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 641.882968][T26232] bond9: (slave veth25): Enslaving as an active interface with a down link [ 641.982019][T26248] netlink: 'syz.2.5379': attribute type 2 has an invalid length. [ 642.146271][T26253] team0: Port device team_slave_0 removed [ 643.153555][T26304] netlink: 'syz.1.5396': attribute type 9 has an invalid length. [ 643.186392][T26312] netlink: 'syz.2.5399': attribute type 11 has an invalid length. [ 643.216104][T26312] __nla_validate_parse: 3 callbacks suppressed [ 643.216124][T26312] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5399'. [ 643.266809][T26316] openvswitch: netlink: Message has 1 unknown bytes. [ 643.282708][T26316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.406813][T26318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5402'. [ 643.461000][T26321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5404'. [ 643.542192][T26322] syzkaller1: entered promiscuous mode [ 643.558708][T26322] syzkaller1: entered allmulticast mode [ 643.745624][T26336] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5409'. [ 644.056395][T26362] netlink: 'syz.3.5412': attribute type 16 has an invalid length. [ 644.074875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 644.082991][ C0] lec:lec_tx_timeout: lec0 [ 644.108873][T26362] netlink: 'syz.3.5412': attribute type 17 has an invalid length. [ 644.136159][T26362] lo: left promiscuous mode [ 644.153901][T26364] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5415'. [ 644.165913][T26365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.210957][T26362] tunl0: left promiscuous mode [ 644.241803][T26362] gre0: left promiscuous mode [ 644.269877][T26362] gretap0: left promiscuous mode [ 644.284160][T26362] erspan0: left promiscuous mode [ 644.313612][T26362] ip_vti0: left promiscuous mode [ 644.379049][T26362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.442776][T26369] syzkaller0: entered allmulticast mode [ 644.850099][T26398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.857495][T26398] IPv6: NLM_F_CREATE should be set when creating new route [ 644.898534][T26398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5422'. [ 645.013427][T26402] tipc: Enabled bearer , priority 10 [ 645.252460][T26416] 8021q: adding VLAN 0 to HW filter on device bond10 [ 645.261226][T26421] netlink: 'syz.2.5428': attribute type 1 has an invalid length. [ 645.355717][T14175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.364134][T14175] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.394020][T20640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.491306][T26429] netlink: 'syz.3.5432': attribute type 21 has an invalid length. [ 645.510215][T26429] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.588135][T26434] : renamed from hsr0 (while UP) [ 645.945900][T20640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.159878][T26469] mac80211_hwsim hwsim32 ÿ: renamed from wlan1 (while UP) [ 646.252805][T26475] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.5443'. [ 646.315056][T20640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.425064][T26485] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 646.440600][T26485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.179057][T26520] netlink: 'syz.0.5459': attribute type 1 has an invalid length. [ 647.339825][T26520] bond11: entered promiscuous mode [ 647.357524][T26520] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.444052][T26520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 647.499020][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5459'. [ 647.500358][T26533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5461'. [ 647.524523][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5459'. [ 647.645874][T26529] bond11: (slave bridge3): making interface the new active one [ 647.654206][T26529] bridge3: entered promiscuous mode [ 647.690638][T26529] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 647.730934][T26546] netlink: 'syz.4.5464': attribute type 3 has an invalid length. [ 647.787981][T26546] netlink: 'syz.4.5464': attribute type 1 has an invalid length. [ 647.814865][T26546] NCSI netlink: No device for ifindex 813332851 [ 648.158922][T26563] syzkaller1: entered promiscuous mode [ 648.180492][T26563] syzkaller1: entered allmulticast mode [ 648.209849][T26572] netlink: 'syz.4.5474': attribute type 29 has an invalid length. [ 648.230915][T26572] netlink: 'syz.4.5474': attribute type 32 has an invalid length. [ 648.276406][T26572] netlink: 'syz.4.5474': attribute type 29 has an invalid length. [ 648.297980][T26572] __nla_validate_parse: 4 callbacks suppressed [ 648.298997][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5474'. [ 648.346821][T26567] syzkaller0: entered promiscuous mode [ 648.352455][T26567] syzkaller0: entered allmulticast mode [ 648.523450][T26582] team0: Caught tx_queue_len zero misconfig [ 648.534165][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5477'. [ 648.554074][T26583] tunl0: entered promiscuous mode [ 648.562973][T26583] netlink: 'syz.2.5476': attribute type 3 has an invalid length. [ 648.595056][T26583] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5476'. [ 648.826559][T26589] netlink: 'syz.3.5478': attribute type 13 has an invalid length. [ 649.048887][T26605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5484'. [ 649.071984][T26605] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.079413][T26605] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.232819][T26611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.266353][T26611] netlink: 211896 bytes leftover after parsing attributes in process `syz.0.5486'. [ 649.320351][T26615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.384797][T26617] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 649.435011][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 649.702189][T26631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5493'. [ 649.726024][T26631] chnl_net:caif_netlink_parms(): no params data found [ 649.920405][T26642] sctp: [Deprecated]: syz.3.5496 (pid 26642) Use of int in maxseg socket option. [ 649.920405][T26642] Use struct sctp_assoc_value instead [ 650.037606][T26649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 650.044908][T26649] IPv6: NLM_F_CREATE should be set when creating new route [ 650.080795][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'. [ 650.182834][T26658] netlink: 'syz.0.5503': attribute type 13 has an invalid length. [ 650.202437][T26659] netlink: 'syz.0.5503': attribute type 13 has an invalid length. [ 650.239082][T26658] veth0_macvtap: left promiscuous mode [ 650.249514][T26658] macvtap0: entered allmulticast mode [ 650.270951][T26658] macvtap0: refused to change device tx_queue_len [ 650.277707][T26663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5504'. [ 650.288832][T26659] macvtap0: refused to change device tx_queue_len [ 650.674030][T26691] xt_TPROXY: Can be used only with -p tcp or -p udp [ 650.862370][T26700] syzkaller1: entered promiscuous mode [ 650.887848][T26700] syzkaller1: entered allmulticast mode [ 650.969768][T26704] veth0_macvtap: left promiscuous mode [ 651.065664][T26713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5518'. [ 651.168119][T26716] bond3: Removing last ns target with arp_interval on [ 651.187976][T26721] netlink: 'syz.2.5521': attribute type 11 has an invalid length. [ 651.234460][T26721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5521'. [ 651.705192][T26747] gre0: entered promiscuous mode [ 651.710455][T26747] gre0: entered allmulticast mode [ 652.151896][T26772] xt_policy: too many policy elements [ 652.169662][T26771] vcan0: entered allmulticast mode [ 652.341325][T26782] tipc: Started in network mode [ 652.361694][T26782] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 652.371808][T26782] tipc: Enabled bearer , priority 10 [ 652.677114][T26795] syzkaller0: entered promiscuous mode [ 652.682649][T26795] syzkaller0: entered allmulticast mode [ 652.745526][T26800] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 652.763378][T26800] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 652.838741][T26807] validate_nla: 2 callbacks suppressed [ 652.838761][T26807] netlink: 'syz.0.5545': attribute type 1 has an invalid length. [ 653.210719][T26822] bridge0: port 3(ipvlan0) entered blocking state [ 653.219333][T26822] bridge0: port 3(ipvlan0) entered disabled state [ 653.228633][T26822] ipvlan0: entered allmulticast mode [ 653.234121][T26822] bridge0: entered allmulticast mode [ 653.248732][T26822] ipvlan0: left allmulticast mode [ 653.261590][T26822] bridge0: left allmulticast mode [ 653.341132][T26827] tipc: Disabling bearer [ 653.557383][ T7172] tipc: Node number set to 15444650 [ 653.660257][T26850] __nla_validate_parse: 8 callbacks suppressed [ 653.660279][T26850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5558'. [ 653.891525][T26865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5563'. [ 653.911479][T26870] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 653.915197][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5563'. [ 653.968094][T26870] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5562'. [ 653.985753][T26870] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5562'. [ 654.000884][T26870] netlink: 'syz.3.5562': attribute type 1 has an invalid length. [ 654.009445][T26870] netlink: 634 bytes leftover after parsing attributes in process `syz.3.5562'. [ 654.276025][T26888] netlink: 'syz.3.5573': attribute type 10 has an invalid length. [ 654.304245][T26888] team0: Device ipvlan1 failed to register rx_handler [ 654.337007][T26884] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5569'. [ 654.358969][T26888] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5573'. [ 654.763836][T26920] netem: change failed [ 654.793753][T26920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5579'. [ 654.912494][T26926] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 654.978863][T26926] tipc: Enabled bearer , priority 0 [ 655.016581][T26926] syzkaller0: entered promiscuous mode [ 655.022342][T26926] syzkaller0: entered allmulticast mode [ 655.066045][T26926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5581'. [ 655.083717][T26926] tipc: Resetting bearer [ 655.108233][T26925] tipc: Resetting bearer [ 655.179257][T26925] tipc: Disabling bearer [ 655.283153][T26956] netlink: 'syz.0.5587': attribute type 10 has an invalid length. [ 655.614190][ T29] audit: type=1800 audit(1772151280.300:6): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5594" name="memory.events" dev="tmpfs" ino=2510 res=0 errno=0 [ 655.681454][ T29] audit: type=1804 audit(1772151280.330:7): pid=26983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5594" name="/newroot/487/memory.events" dev="tmpfs" ino=2510 res=1 errno=0 [ 655.762279][T26989] netlink: 'syz.2.5595': attribute type 3 has an invalid length. [ 655.986010][T27003] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 656.022168][T27003] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.040343][T27003] bridge0: entered allmulticast mode [ 656.510745][T27030] netlink: 'syz.4.5607': attribute type 1 has an invalid length. [ 657.194795][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.330042][T27075] gre0: entered promiscuous mode [ 657.345728][T27075] gre0: entered allmulticast mode [ 657.382803][T27078] syzkaller1: entered promiscuous mode [ 657.408879][T27078] syzkaller1: entered allmulticast mode [ 657.743107][T27101] vlan3: entered promiscuous mode [ 658.485113][T27133] netlink: 'syz.3.5633': attribute type 10 has an invalid length. [ 658.543800][T27133] team0: Device vxcan1 is of different type [ 658.607258][T27107] openvswitch: netlink: Flow key attr not present in new flow. [ 658.848702][T27153] bond0: (slave gre0): Error: Device type is different from other slaves [ 658.914338][T27165] netlink: 'syz.1.5637': attribute type 4 has an invalid length. [ 659.071717][T27173] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.177639][T27177] netlink: 'syz.1.5641': attribute type 1 has an invalid length. [ 659.265658][T27182] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 659.299238][T27177] bond10: entered promiscuous mode [ 659.319736][T27177] 8021q: adding VLAN 0 to HW filter on device bond10 [ 659.432053][T27181] bond10: (slave bridge5): making interface the new active one [ 659.456292][T27181] bridge5: entered promiscuous mode [ 659.463394][T27181] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 659.479271][T27182] __nla_validate_parse: 14 callbacks suppressed [ 659.479294][T27182] netlink: 724 bytes leftover after parsing attributes in process `syz.4.5642'. [ 659.845388][T27214] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5648'. [ 659.887855][T27213] syzkaller0: entered promiscuous mode [ 659.903082][T27213] syzkaller0: entered allmulticast mode [ 660.070019][T27223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 660.115923][T27226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5651'. [ 660.352573][T27224] bond4: entered allmulticast mode [ 660.372455][T27238] bridge_slave_0: left allmulticast mode [ 660.407486][T27238] bridge_slave_0: left promiscuous mode [ 660.413436][T27238] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.426308][T27242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5654'. [ 660.455384][T27238] bridge_slave_1: left allmulticast mode [ 660.461328][T27238] bridge_slave_1: left promiscuous mode [ 660.483831][T27238] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.516105][T27238] bond0: (slave bond_slave_0): Releasing backup interface [ 660.537771][T27238] bond_slave_0: left allmulticast mode [ 660.569300][T27238] bond0: (slave bond_slave_1): Releasing backup interface [ 660.580097][T27238] bond_slave_1: left allmulticast mode [ 660.627336][T27238] team0: Port device team_slave_0 removed [ 660.627741][T27249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'. [ 660.677696][T27238] team0: Port device team_slave_1 removed [ 660.707898][T27238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.735273][T27238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.753101][T27238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.763388][T27238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.791168][T27238] bond1: (slave veth3): Releasing active interface [ 660.820396][T27238] bond2: (slave ip6gretap1): Releasing active interface [ 660.852800][T27238] bond5: (slave bridge2): Releasing backup interface [ 660.862132][T27238] bridge2: left promiscuous mode [ 660.889382][T27238] bond8: (slave ip6gretap2): Releasing active interface [ 660.931617][T27217] bond4: left allmulticast mode [ 661.137877][T27271] netlink: 'syz.3.5660': attribute type 25 has an invalid length. [ 661.185173][T27271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5660'. [ 661.277056][T27279] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5661'. [ 661.308444][T27285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.509061][T27293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.608195][T27300] netlink: 'syz.4.5666': attribute type 2 has an invalid length. [ 661.956092][T27322] syzkaller0: entered promiscuous mode [ 661.962124][T27322] syzkaller0: entered allmulticast mode [ 662.211562][T27337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.218934][T27337] IPv6: NLM_F_CREATE should be set when creating new route [ 662.250618][T27337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 662.397652][T27345] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5677'. [ 662.410288][T27345] openvswitch: netlink: Actions may not be safe on all matching packets [ 662.476891][T27345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5677'. [ 662.599604][T27353] syzkaller0: entered promiscuous mode [ 662.615155][T27353] syzkaller0: entered allmulticast mode [ 662.626132][T27353] TC_ACT_REPEAT abuse ? [ 662.932167][T27329] delete_channel: no stack [ 664.816550][T27312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.547542][T27391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.566169][T27403] __nla_validate_parse: 2 callbacks suppressed [ 665.566190][T27403] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5693'. [ 665.626744][T27391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 59299 - 0 [ 666.013494][T27403] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 666.092892][T27397] syzkaller1: entered promiscuous mode [ 666.203543][T27397] syzkaller1: entered allmulticast mode [ 666.246853][T27414] tipc: Enabling of bearer rejected, failed to enable media [ 666.268501][T27420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.561947][T27391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.590008][T27391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 59299 - 0 [ 666.810986][T27435] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5700'. [ 666.882881][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5700'. [ 666.925704][T27437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5701'. [ 666.936742][T27391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.959246][T27391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 59299 - 0 [ 667.330665][T27452] netlink: 'syz.0.5703': attribute type 1 has an invalid length. [ 667.414541][T27458] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 667.474086][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 667.526174][T27461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5702'. [ 667.609478][T27452] 8021q: adding VLAN 0 to HW filter on device bond12 [ 667.724156][T27391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.761873][T27391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 59299 - 0 [ 669.332846][T27457] veth0_macvtap: left allmulticast mode [ 669.601450][T27460] bond12: (slave veth5): Enslaving as an active interface with a down link [ 669.644232][T27461] geneve2: entered promiscuous mode [ 669.655401][T27461] geneve2: entered allmulticast mode [ 669.809118][T27462] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 669.819771][T27462] bond12: (slave batadv2): making interface the new active one [ 669.831957][T27462] batadv2: entered promiscuous mode [ 669.839782][T27462] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 670.056873][ T3490] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.079635][ T3490] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.205571][ T3490] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.323832][T27482] veth5: entered allmulticast mode [ 670.350683][ T3490] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.466400][T16223] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.475868][T16223] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 59299 - 0 [ 670.519816][T27490] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5711'. [ 670.544298][T16223] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.575827][T16223] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 59299 - 0 [ 670.631439][T27494] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5711'. [ 670.767589][T16223] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.817236][T16223] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 59299 - 0 [ 671.478552][T27505] bond11: entered promiscuous mode [ 671.498917][ T3490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.510912][ T3490] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 59299 - 0 [ 671.802950][T27532] sctp: [Deprecated]: syz.3.5718 (pid 27532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.802950][T27532] Use struct sctp_sack_info instead [ 671.997734][T27532] x_tables: duplicate underflow at hook 2 [ 672.037906][T27536] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 672.056789][T27540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5720'. [ 672.078526][T27536] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 672.148978][T27532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5718'. [ 672.961739][T27569] netlink: 'syz.1.5726': attribute type 4 has an invalid length. [ 672.974318][T27569] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5726'. [ 672.987973][T27569] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5726'. [ 673.002304][T27569] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5726'. [ 673.196693][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 673.257726][T27582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5729'. [ 673.320695][T27582] netlink: 'syz.0.5729': attribute type 9 has an invalid length. [ 673.371979][T27586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5729'. [ 675.993263][T27634] netlink: 'syz.3.5741': attribute type 1 has an invalid length. [ 676.223472][T27640] netlink: 'syz.1.5743': attribute type 1 has an invalid length. [ 676.319331][T27645] netlink: 'syz.4.5744': attribute type 4 has an invalid length. [ 676.399763][T27640] bond12: entered promiscuous mode [ 676.421880][T27640] bond12: entered allmulticast mode [ 676.437994][T27647] xt_policy: too many policy elements [ 676.474105][T27640] 8021q: adding VLAN 0 to HW filter on device bond12 [ 676.495420][T27647] netlink: 'syz.4.5744': attribute type 4 has an invalid length. [ 676.538607][T27646] macvlan1: entered promiscuous mode [ 676.555204][T27653] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5745'. [ 676.592646][T27646] macvlan1: entered allmulticast mode [ 676.601410][T27656] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5746'. [ 676.623597][T27654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.646231][T27646] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 677.022991][T27661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5747'. [ 678.007451][T27690] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.413771][T27714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5759'. [ 683.081389][T27701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5757'. [ 683.091456][T27701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5757'. [ 683.106165][T27708] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 683.113197][T27712] [ 683.124017][T27712] ====================================================== [ 683.131809][T27712] WARNING: possible circular locking dependency detected [ 683.139071][T27712] syzkaller #0 Not tainted [ 683.143519][T27712] ------------------------------------------------------ [ 683.150569][T27712] syz.0.5759/27712 is trying to acquire lock: [ 683.156660][T27712] ffffffff8fd47cb8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 683.166213][T27712] [ 683.166213][T27712] but task is already holding lock: [ 683.173599][T27712] ffffffff8fd47c58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 683.183244][T27712] [ 683.183244][T27712] which lock already depends on the new lock. [ 683.183244][T27712] [ 683.193718][T27712] [ 683.193718][T27712] the existing dependency chain (in reverse order) is: [ 683.202903][T27712] [ 683.202903][T27712] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 683.212687][T27712] _raw_spin_lock_bh+0x36/0x50 [ 683.218121][T27712] nr_rt_ioctl+0x40c/0xf90 [ 683.223956][T27712] sock_do_ioctl+0x101/0x320 [ 683.229316][T27712] sock_ioctl+0x5c6/0x7f0 [ 683.234253][T27712] __se_sys_ioctl+0xfc/0x170 [ 683.239772][T27712] do_syscall_64+0x14d/0xf80 [ 683.245033][T27712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.251857][T27712] [ 683.251857][T27712] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 683.260322][T27712] _raw_spin_lock_bh+0x36/0x50 [ 683.265914][T27712] nr_rt_ioctl+0x215/0xf90 [ 683.270942][T27712] sock_do_ioctl+0x101/0x320 [ 683.276105][T27712] sock_ioctl+0x5c6/0x7f0 [ 683.281879][T27712] __se_sys_ioctl+0xfc/0x170 [ 683.287042][T27712] do_syscall_64+0x14d/0xf80 [ 683.292206][T27712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.298671][T27712] [ 683.298671][T27712] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 683.306643][T27712] __lock_acquire+0x15a5/0x2cf0 [ 683.312069][T27712] lock_acquire+0xf0/0x2e0 [ 683.317138][T27712] _raw_spin_lock_bh+0x36/0x50 [ 683.322593][T27712] nr_rt_device_down+0xbe/0x860 [ 683.328197][T27712] nr_device_event+0x137/0x150 [ 683.333701][T27712] notifier_call_chain+0x1be/0x400 [ 683.339648][T27712] __dev_notify_flags+0x16d/0x310 [ 683.345522][T27712] netif_change_flags+0xe8/0x1a0 [ 683.351624][T27712] dev_change_flags+0x130/0x260 [ 683.357049][T27712] dev_ioctl+0x7b4/0x1150 [ 683.361940][T27712] sock_do_ioctl+0x23e/0x320 [ 683.367085][T27712] sock_ioctl+0x5c6/0x7f0 [ 683.371998][T27712] __se_sys_ioctl+0xfc/0x170 [ 683.377136][T27712] do_syscall_64+0x14d/0xf80 [ 683.382380][T27712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.388918][T27712] [ 683.388918][T27712] other info that might help us debug this: [ 683.388918][T27712] [ 683.399177][T27712] Chain exists of: [ 683.399177][T27712] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 683.399177][T27712] [ 683.413083][T27712] Possible unsafe locking scenario: [ 683.413083][T27712] [ 683.420611][T27712] CPU0 CPU1 [ 683.426571][T27712] ---- ---- [ 683.432098][T27712] lock(nr_neigh_list_lock); [ 683.436930][T27712] lock(&nr_node->node_lock); [ 683.444801][T27712] lock(nr_neigh_list_lock); [ 683.452059][T27712] lock(nr_node_list_lock); [ 683.456799][T27712] [ 683.456799][T27712] *** DEADLOCK *** [ 683.456799][T27712] [ 683.465163][T27712] 2 locks held by syz.0.5759/27712: [ 683.470484][T27712] #0: ffffffff8fbcba08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 683.480296][T27712] #1: ffffffff8fd47c58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 683.490671][T27712] [ 683.490671][T27712] stack backtrace: [ 683.496635][T27712] CPU: 0 UID: 0 PID: 27712 Comm: syz.0.5759 Not tainted syzkaller #0 PREEMPT(full) [ 683.496662][T27712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.496680][T27712] Call Trace: [ 683.496688][T27712] [ 683.496697][T27712] dump_stack_lvl+0xe8/0x150 [ 683.496730][T27712] print_circular_bug+0x2e1/0x300 [ 683.496765][T27712] check_noncircular+0x12e/0x150 [ 683.496798][T27712] __lock_acquire+0x15a5/0x2cf0 [ 683.496836][T27712] ? __lock_acquire+0x6b5/0x2cf0 [ 683.496868][T27712] lock_acquire+0xf0/0x2e0 [ 683.496892][T27712] ? nr_rt_device_down+0xbe/0x860 [ 683.496927][T27712] ? nr_rt_device_down+0xbe/0x860 [ 683.496958][T27712] _raw_spin_lock_bh+0x36/0x50 [ 683.496984][T27712] ? nr_rt_device_down+0xbe/0x860 [ 683.497014][T27712] nr_rt_device_down+0xbe/0x860 [ 683.497043][T27712] ? nr_device_event+0x12f/0x150 [ 683.497077][T27712] nr_device_event+0x137/0x150 [ 683.497106][T27712] notifier_call_chain+0x1be/0x400 [ 683.497142][T27712] __dev_notify_flags+0x16d/0x310 [ 683.497172][T27712] ? __pfx___dev_notify_flags+0x10/0x10 [ 683.497200][T27712] ? __dev_change_flags+0x4c6/0x690 [ 683.497231][T27712] ? __pfx___dev_change_flags+0x10/0x10 [ 683.497260][T27712] ? full_name_hash+0x92/0xe0 [ 683.497290][T27712] netif_change_flags+0xe8/0x1a0 [ 683.497321][T27712] dev_change_flags+0x130/0x260 [ 683.497350][T27712] dev_ioctl+0x7b4/0x1150 [ 683.497376][T27712] sock_do_ioctl+0x23e/0x320 [ 683.497398][T27712] ? __pfx_sock_do_ioctl+0x10/0x10 [ 683.497417][T27712] ? do_futex+0x333/0x420 [ 683.497451][T27712] sock_ioctl+0x5c6/0x7f0 [ 683.497471][T27712] ? __pfx_sock_ioctl+0x10/0x10 [ 683.497490][T27712] ? __fget_files+0x2a/0x420 [ 683.497517][T27712] ? __fget_files+0x3a0/0x420 [ 683.497544][T27712] ? __fget_files+0x2a/0x420 [ 683.497572][T27712] ? bpf_lsm_file_ioctl+0x9/0x20 [ 683.497596][T27712] ? __pfx_sock_ioctl+0x10/0x10 [ 683.497614][T27712] __se_sys_ioctl+0xfc/0x170 [ 683.497638][T27712] do_syscall_64+0x14d/0xf80 [ 683.497667][T27712] ? trace_irq_disable+0x3b/0x150 [ 683.497695][T27712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.497716][T27712] ? clear_bhb_loop+0x40/0x90 [ 683.497739][T27712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.497766][T27712] RIP: 0033:0x7effb3f9c799 [ 683.497786][T27712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.497803][T27712] RSP: 002b:00007effb4e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.497825][T27712] RAX: ffffffffffffffda RBX: 00007effb4216180 RCX: 00007effb3f9c799 [ 683.497847][T27712] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 683.497861][T27712] RBP: 00007effb4032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 683.497874][T27712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.497887][T27712] R13: 00007effb4216218 R14: 00007effb4216180 R15: 00007ffca9bb7dc8 [ 683.497912][T27712] [ 685.139412][T14173] batadv2: left promiscuous mode [ 686.000331][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 691.116072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.124122][ C0] lec:lec_tx_timeout: lec0