last executing test programs: 5.758105053s ago: executing program 4 (id=2884): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0a0019000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x5c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000090) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r8 = socket(0x10, 0x803, 0x0) r9 = accept$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000180)=0x8, 0x4) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02f9dd6c745471c8d92cad4f85986908a8", 0x1e}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000500)={'bridge_slave_1\x00', 0x9}) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 5.337164648s ago: executing program 4 (id=2889): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.100261144s ago: executing program 4 (id=2893): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)=""/4106, 0x100a}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) (async) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) socket$phonet(0x23, 0x2, 0x1) (async) r4 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000005f80), r4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@alg={0xe8, 0x10, 0x8, 0x70bd28, 0x25dfdbfb, {{'morus1280-sse2\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x400}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 4.64429722s ago: executing program 4 (id=2897): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x402, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xdffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3ce}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x3c2}}], 0x90}, 0x0) 4.460440189s ago: executing program 4 (id=2900): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x41}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0xc12, 0x4) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='batadv_slave_0\x00'}) 4.394489638s ago: executing program 3 (id=2901): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x2c, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc00", 0x2) splice(r4, 0x0, r3, 0x0, 0x9, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509004200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a2eb525}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xe, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x94, 0x6, 0x2}}]}]}}}]}, 0x6c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r10 = accept4$ax25(r4, 0x0, &(0x7f00000001c0), 0x80000) getpeername$ax25(r10, &(0x7f0000000240)={{}, [@default, @bcast, @null, @netrom, @bcast, @rose, @rose, @default]}, &(0x7f0000000340)=0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="97b26522e5690b18d0aa30fad76e3312710ba389fb41fcc6bcfa3bdb5a26c8c632f77439310d65b5c3d5c9a7cbf07b573a5d923f29e4b01abbc7c8d41c7ac6c178107066b592d3665cf44d266ca466f7a148794db0a5dc0a037fb32a18d2e7c1bc8fc7c3eff8fa4ce779842c34a9aa024f7b06e8b80608a8f5809c111012555781af2af6b6c44cd9f06989ea566cb9e55db9a5d34524062e6d51abd7e6159350effaeff82524f053741477871a39bfca9adcd42e1161155601ee8bb9d111709893cce8", @ANYRES64=0x0], 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r16, r11, 0x0, r11}, 0x5) 4.034946747s ago: executing program 4 (id=2903): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000030429"], 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r4, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000900000014000400"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.836262607s ago: executing program 3 (id=2905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0xc, 0x3c, 0x0, @private0, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100001f0001000000000000000000070100800c0001000400"], 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.556897544s ago: executing program 3 (id=2908): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x600) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000039}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x0) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000003c0)=""/143, &(0x7f0000000300)=0x8f) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) (async) listen(r8, 0x802) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, 0x0, &(0x7f0000001640)) (async) close(r7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x9}, 0x1c) listen(r10, 0x2) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) (async) sendto$inet6(r11, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x5, 0x12, 0x0, &(0x7f0000000280)="71000000224354191668a444702ba8d664da", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.491296652s ago: executing program 3 (id=2909): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x20, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @u32=0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x1bc, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 3.031750513s ago: executing program 1 (id=2916): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x91, 0x1, 0x1, 0x4e}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=@newchain={0x1660, 0x64, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {0x2, 0x2}, {0xffff, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x1634, 0x2, [@TCA_FW_ACT={0x15a8, 0x4, [@m_skbmod={0x120, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xcc, 0x6, "4dacfc3992489e7ded08423821744d441c23a2f9f1d1fa26ae147050ffc8cc21e7e30be8ce22d667a95684f3c4b9ecf0c03ce4d0b3c95100b27ceccc162072fb64e0ac59667df039269dcc3c684adee6dfe15ecb434493985319dbd8e76287947f8a9cf1d45150a5965db1f1dcd230da56304340f10f3c87903ec2acfe82dd5dd10927ac557df3380d8912a0e732cb4ee0254f813d7c4d37d3cc2d955e22fac59bbfddd2a2d73b8fec10e3cb363f80e3ae2383584ded0dbeb7a9efbe891b4810fe45e194c26e602c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xcc, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8ebe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9764}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x7ff, 0x4, 0x0, 0x1}}]}, {0x6e, 0x6, "20877ad507064a76fe5a4ca0727c689e5b00091b2e241b0a05b7f92f44cb52d569409f45ee97ef4fa1faa2ab222ef494a492f424355f9648243de713df2f0f6e6530a5d7745babfe7993e7088777c5f0c9758d812b5abc335448ddb980a8df800127067a3d27f8c4e7c5"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x17c, 0x17, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3ff, 0xfffffe00, 0x10000000, 0xc, 0x9}}, @TCA_CT_LABELS={0x14, 0x7, "95c175a54e8ba96b7e9028451ec72f14"}, @TCA_CT_LABELS={0x14, 0x7, "8f78ab7a996c286994e1256ebcaca4af"}, @TCA_CT_LABELS={0x14, 0x7, "193880a47e40f6df3f6bb864a00f902b"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ad8e1c904be05fd42db9292f30b23533"}]}, {0xec, 0x6, "c686a09a3d22b5c6f90067bdde95f8b49114f792774e0ffb883dc2dba03188c26ff0f03e52968e9563ee4be47407982306b434c6131b5633527b3f1eb12ff13e4cd4f847b4aac17c3fde82ded7a9ff6b6850b5e4898bd967a4f7b463c5c4014f0fb031dcc1a3256e1196afa1078c1ef5e0e046245c74042ce2ce35efe00ca0eba3a91b334fcc4f28806b74e994b90484abd26e7a433155455ebd4af63ca799f22451b7f876a8504fa620d0c186ec0fa7affe1fae549e474726c738578e73f47c5d4813c2d8ddd972469a0b46229a392287707a922607027e1b04db67ce4dd73dd758ce7bf8680ca1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x100, 0xb, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xb23b}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xaf, 0x6, "cb986d039de9dc60f99aad1b07baf2cb79ac938fa3b366bfa4fb32de267165351a9247f645e92cca0608bf105692c2a5aa035729e1ed5a9f88f32a21e1241842dcaaacc5301de801e23e2b7b4efb44595cc09be542bb236d6b3e2030fc52a1755265f30f81079369685854d0f6c1ac30c5d67f4a93069d446cbd3a679cd10f4e085f9ff0029ea8c32e3330aa843b16e7cc9104b77060d9405da6eea8264a0992df3aa19b1d0d6ae7f666f4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_xt={0xb8, 0xe, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x41, 0x6, {0x1913, 'filter\x00', 0x7, 0x0, "bf66672992b249dc6e789850c47f598e839bd7a5cbff2b"}}]}, {0x43, 0x6, "9355c9ee54b76f6e2fd43b292f94eb7031bdfffb9909dd2c6a4c824fd0ba3d862372e9f5f8264276da10df99eb5cec71d58be59582bb2c8a9dd91d546932f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x1084, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa15, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2416, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5175c4c2, 0x18c8a5a7, 0x7, 0x3, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x9, 0x5, 0x4, 0xfad7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1645, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_ACT={0x78, 0x4, [@m_bpf={0x74, 0xc, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x35, 0x6, "235b2b9ac66eeb90074c9a6b4fa6f704c409533c0321250b49ca968562d640f08731e86525c79b89d8e4c5f4ebea66c39f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1660}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) 2.820445263s ago: executing program 1 (id=2919): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000000)="83f1055c", 0x0, 0x4}, 0x75) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x70, &(0x7f0000000100)}, 0x1c) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x4c, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {0x29, 0x63, 0x8, 0x67, {0x4e24, 0x4e24, [0x8, 0x5, 0x6, 0x9], [0x8, 0x1, 0xd, 0x6], 0x0, [0x8c7e, 0x1]}, 0x4, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x99, 0x8, 0x5c, 0x800, {{0x21, 0x4, 0x2, 0x2e, 0x84, 0x65, 0x0, 0x80, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x27, 0xcb, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @remote, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @loopback, @loopback]}, @lsrr={0x83, 0x23, 0x69, [@local, @local, @private=0xa010101, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @generic={0x88, 0x10, "a00823ca02b217ea1798e41bacdb"}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x1, [0x8]}, @timestamp_addr={0x44, 0xc, 0xa9, 0x1, 0x4, [{@private=0xa010100}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x80000001, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x37, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x55}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a3a3de2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @generic={0x83, 0x2, 0x4, 0x7ba, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x2d, &(0x7f00000002c0)=""/45, 0x41000, 0x4, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x7}, 0x10, r10, 0x0, 0x2, &(0x7f0000000580)=[r0, r11, r1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x3, 0x0, 0x3}, {0x2, 0x4, 0x10, 0xb}], 0x10, 0x1ff}, 0x94) 2.725042347s ago: executing program 3 (id=2920): syz_emit_ethernet(0x87, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x4d, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}, {"0079d85b489daf6dc55f192a2971d6ce53036e4f1bd6e8523442bdae8ac9d13ac69092fa70c816e919c0ccf2c5919f920bb779eb5c2198f37e"}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) syz_emit_ethernet(0x87, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x4d, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x7ffe}, {"0079d85b489daf6dc55f192a2971d6ce53036e4f1bd6e8523442bdae8ac9d13ac69092fa70c816e919c0ccf2c5919f920bb779eb5c2198f37e"}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) (async) 2.629248123s ago: executing program 1 (id=2921): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xfff3, 0xfff3}, {0x8, 0x3}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffc00000}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0x67, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4c084) socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000000740)=""/239, 0xef}, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)={0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYRES8=r3], 0x28}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r5 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x977, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001160000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r6 = epoll_create1(0x0) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r8) shutdown(r7, 0x0) close(r6) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x9c) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) bind$llc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 2.472353504s ago: executing program 2 (id=2922): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x200}, @assoc={0x18, 0x117, 0x4, 0x82}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x48}, 0x28000054) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r5, 0x0, "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"}, &(0x7f0000000180)=0xfebd) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140100004600010000800000000000001e00806e"], 0x14}}, 0x0) write$tun(r2, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0xfa4, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYBLOB="280000001300010029bd7000fcdbdf2500000000", @ANYBLOB="0e2a01000904000008000a00", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x34004c01}, 0x48844) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000380)=0x8) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0xfffffffffffffe5d, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x7}, {0x0, 0xa}}}, 0x24}}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r11, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f00000005c0)=""/4101, 0x1005}, {&(0x7f00000001c0)=""/92, 0x5c}], 0x3}, 0x1}], 0x1, 0x2, 0x0) 2.114921435s ago: executing program 3 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e56b28e953"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x3, 0x8000, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7800, 0x7800, 0x1f, 0x2}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x6}, {0xffff, 0xa}, {0x1}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0xdb) close(0x4) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$tun(r5, &(0x7f0000000540)=ANY=[], 0x8b) recvfrom$inet6(r5, &(0x7f0000000600)=""/144, 0x90, 0x2, &(0x7f0000000380)={0xa, 0x4e21, 0xffffff37, @mcast1, 0x10001}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x400, '\x00', 0x0, r5, 0x1, 0x5, 0x2}, 0x50) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffd6a, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000e86e6af8d8951183020038091d5c83ef8718fab727fe8ba7d116a47d61a04a1954d71025911c53b5457613db69897d93c3cfba776aabecc935364738092fb80f2c4a3caa23eb46abb193033dcc5f502b9ac3a89b5dcc98385f0aa4b297bdb04834c9", @ANYRES8=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x400a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000f80)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000002000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.993258619s ago: executing program 0 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x20, 0x0, 0x1, {0x0, 0x0, 0x0, r2, 0x0, 0x80}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r2, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) 1.897023337s ago: executing program 2 (id=2925): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x18, 0x2c, 0x1, 0x0, 0xfffffffc, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000001080)={'tunl0\x00', r1, 0x20, 0x8, 0x1001000, 0x9, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2}}}}) 1.825827917s ago: executing program 0 (id=2926): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56f72939}}, @generic={0xd, 0x1, 0x3, 0x7, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x9a, &(0x7f0000000140)=""/154, 0x40f00, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x6, 0x5}, 0x10, 0xa4fd, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x3, 0x0, 0x4}, {0x5, 0x1, 0xf, 0xb}], 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x91}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="d2ff03076003008ccd9e08f086dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x3c) 1.722701959s ago: executing program 0 (id=2927): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x20000400) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x6b) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host=0x20, 0xff01}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 1.638892208s ago: executing program 1 (id=2928): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x80000000) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r5, r4, 0x26}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140e, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xb000000d}) 1.528202017s ago: executing program 2 (id=2929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000d604000000000000160000de1d8564c4f197f60e59eaed199589e2ad7ab50500000000110000000100000000000000"], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x3d, 0x1000, &(0x7f0000000240)="e9abe6ebd4617113e6c75579c571c0b52a5d15a67ad26515cd59a8c20363e1da875fdcb5eccd20784976c930db0796c5e4645833fc756831fdb1004d4c", &(0x7f0000000b40)=""/4096, 0x6, 0x0, 0x62, 0xd, &(0x7f0000000500)="a2123caba2b263f506d4963759277742d00c42df4873845cf56ec570b762491bf8d5b8da24da1f6bb7a82b1338314272965359796fba3fc0f2261d837f09a02f75502715ee401bfc5709e9c360b417dbe8aea5bd9736fabc4eb7528977a26626d9da", &(0x7f0000000280)="3eef3550718dfb409450c26c0a", 0x5, 0x0, 0x5}, 0x50) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004a000100000000000000800001000003"], 0x14}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x1b, r7, 0x1, 0x2, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="150000000100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="05000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xa, &(0x7f0000000000), 0x75) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f0000000640)) 1.437552205s ago: executing program 0 (id=2930): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0x1d) 1.19230756s ago: executing program 2 (id=2931): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000480)={r4, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x7, @empty}}}, &(0x7f00000001c0)=0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.189699679s ago: executing program 0 (id=2932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x303, 0x0, 0x25dfdbfb, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8024}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000010900010073797a310000000038000480340001800900010068617368000000002400028008000640000000040800024000000014080007400000b72ed9e10440000000000900020073797a3200"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.130324191s ago: executing program 2 (id=2933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x9080}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0xffffffff, 0x25dfdbfd, {}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0xfffffd43, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0xa, 0x4, 0x80000002}, {0x80, 0x3}, {0x0, 0xfd}, {0x0, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "e68634", 0x0, 0x2f, 0x0, @private1, @local, [@hopopts={0xae}]}}}}}}}, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x6, 0x200, 0x4, 0x6, 0x8, 0x6, 0x2, r11}, &(0x7f00000000c0)=0x20) ioctl$FIOCLEX(r0, 0x5451) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 967.615916ms ago: executing program 0 (id=2934): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 684.709395ms ago: executing program 1 (id=2935): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, 0x4, 0xa, 0x7, 0x500, 0x4000000000000004, 0x240102}) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async) shutdown(r1, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@mcast2={0xff, 0x5}, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, 0x4, 0xa, 0x7, 0x500, 0x4000000000000004, 0x240102}) (async) 233.540181ms ago: executing program 1 (id=2936): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x0, 0x1f, 0xfffe}, 0x20) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2a5c56c2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2d0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x29c, 0x2, [@TCA_MATCHALL_ACT={0x298, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x6, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x118, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x24040015}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={0xfffffffffffffffd}}, 0x81) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000190001000000000000000000ac14140d000000000000000000000000000000020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000080d42bdb43b8111500fcffffffffffffff000040000000000000000000000001000000000000000000010100000000000000000000000000000c00150059073500e40c00000c0008"], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x1, &(0x7f0000000100)=0x405, 0x4) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x33, 0x8, 0x26, 0x80}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)) 0s ago: executing program 2 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x8c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400001d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1003, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0xe8c5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): etdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.688245][ T1152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.965203][T10587] tunl0: Caught tx_queue_len zero misconfig [ 172.118082][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 172.177237][T10587] syzkaller0: entered promiscuous mode [ 172.182956][T10587] syzkaller0: entered allmulticast mode [ 172.191296][T10587] tipc: Started in network mode [ 172.197780][T10587] tipc: Node identity eaa147eef022, cluster identity 4711 [ 172.205378][T10587] tipc: Enabled bearer , priority 0 [ 172.319727][T10584] tipc: Resetting bearer [ 172.345387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.404167][T10584] tipc: Disabling bearer [ 172.682084][T10631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1115'. [ 172.693241][T10631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1115'. [ 172.734953][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'. [ 172.775847][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'. [ 172.802708][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'. [ 172.965141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 172.973212][ C1] lec:lec_tx_timeout: lec0 [ 172.978106][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 173.060224][T10661] netlink: 'syz.3.1122': attribute type 51 has an invalid length. [ 173.100696][T10668] netlink: 'syz.0.1124': attribute type 23 has an invalid length. [ 173.112399][T10661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1122'. [ 173.134437][T10658] bond6: entered promiscuous mode [ 173.141932][T10658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.350412][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 173.374569][T10679] netlink: 'syz.2.1125': attribute type 10 has an invalid length. [ 173.429679][T10679] team0: Port device netdevsim0 added [ 173.442523][T10692] netlink: 'syz.0.1131': attribute type 33 has an invalid length. [ 174.076106][T10723] syzkaller0: entered promiscuous mode [ 174.091819][T10723] syzkaller0: entered allmulticast mode [ 174.116124][T10723] netlink: 'syz.3.1138': attribute type 4 has an invalid length. [ 174.431930][T10732] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 174.452080][T10732] netlink: 'syz.4.1141': attribute type 2 has an invalid length. [ 174.585374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.720007][T10749] sctp: [Deprecated]: syz.0.1145 (pid 10749) Use of int in maxseg socket option. [ 174.720007][T10749] Use struct sctp_assoc_value instead [ 174.997463][ T58] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.006008][ T58] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.047913][ T58] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.081423][T10765] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 175.106667][ T58] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.222996][T10777] validate_nla: 4 callbacks suppressed [ 175.223012][T10777] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 175.627529][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.635953][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.643092][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.650963][ T11] block nbd0: Connection timed out, retrying (0/1 alive) [ 175.658739][ T11] block nbd0: Dead connection, failed to find a fallback [ 175.814968][T10812] pimreg: entered allmulticast mode [ 175.829690][T10811] pimreg: left allmulticast mode [ 175.927160][T10824] geneve2: entered promiscuous mode [ 176.041214][T10833] netlink: 'syz.4.1169': attribute type 39 has an invalid length. [ 176.111925][T10835] pim6reg1: entered allmulticast mode [ 176.399345][T10834] lo speed is unknown, defaulting to 1000 [ 176.489543][T10834] lo speed is unknown, defaulting to 1000 [ 176.536157][T10834] lo speed is unknown, defaulting to 1000 [ 176.588338][T10834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.622954][T10834] lo speed is unknown, defaulting to 1000 [ 176.637474][T10834] lo speed is unknown, defaulting to 1000 [ 176.670350][T10834] lo speed is unknown, defaulting to 1000 [ 176.865465][T10858] hsr0: left promiscuous mode [ 176.886141][T10858] vlan3: left allmulticast mode [ 176.897265][T10858] veth0_to_bond: left allmulticast mode [ 176.936271][T10858] ip6gre1: left allmulticast mode [ 176.962111][T10858] bridge5: left promiscuous mode [ 176.973051][T10858] bridge5: left allmulticast mode [ 176.999612][T10834] lo speed is unknown, defaulting to 1000 [ 177.061173][T10834] lo speed is unknown, defaulting to 1000 [ 177.081299][T10834] lo speed is unknown, defaulting to 1000 [ 177.287117][T10869] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.316276][T10871] __nla_validate_parse: 14 callbacks suppressed [ 177.316312][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 177.358669][T10873] netlink: 'syz.2.1176': attribute type 28 has an invalid length. [ 177.563506][T10879] tipc: Failed to remove unknown binding: 66,0,0/0:873639872/873639874 [ 177.585221][T10879] tipc: Failed to remove unknown binding: 66,0,0/0:873639872/873639873 [ 177.608506][T10879] tipc: Failed to remove unknown binding: 66,0,0/0:873639872/873639874 [ 177.645345][T10879] tipc: Failed to remove unknown binding: 66,0,0/0:873639872/873639873 [ 177.720945][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.795552][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.824951][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.856809][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.887158][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.944568][T10892] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1184'. [ 177.968073][T10906] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1184'. [ 178.126628][T10911] netlink: 'syz.1.1187': attribute type 10 has an invalid length. [ 178.178067][T10912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1187'. [ 178.256093][T10911] bond0: (slave dummy0): Releasing backup interface [ 178.272868][T10911] team0: Port device dummy0 added [ 178.292696][T10912] dummy0: entered allmulticast mode [ 178.303147][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1188'. [ 178.327698][T10882] lo speed is unknown, defaulting to 1000 [ 178.388410][T10915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.399903][T10915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.480584][T10917] lo: Caught tx_queue_len zero misconfig [ 178.622893][T10915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.635217][T10915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.771309][T10915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.781942][T10915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 178.825121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 178.833199][ C1] lec:lec_tx_timeout: lec0 [ 178.837938][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.967993][T10915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.983855][T10915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.268216][ T1152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.277939][ T1152] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.345561][ T1152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.355787][ T1152] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.434919][ T1152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.444472][ T1152] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.463593][ T1152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.515978][ T1152] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.528971][T10965] netlink: 'syz.3.1203': attribute type 8 has an invalid length. [ 179.799349][T10956] lo speed is unknown, defaulting to 1000 [ 180.083513][T10995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.090852][T10995] IPv6: NLM_F_CREATE should be set when creating new route [ 180.098153][T10995] IPv6: NLM_F_CREATE should be set when creating new route [ 180.216571][T11002] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 180.628080][T10991] lo speed is unknown, defaulting to 1000 [ 180.765157][T10988] lo speed is unknown, defaulting to 1000 [ 181.773718][T11050] delete_channel: no stack [ 181.796837][T11050] delete_channel: no stack [ 182.674484][T11109] __nla_validate_parse: 8 callbacks suppressed [ 182.674502][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 183.305426][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.333605][T11078] lo speed is unknown, defaulting to 1000 [ 183.446266][T11135] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1249'. [ 183.505522][T11135] openvswitch: netlink: Message has 16 unknown bytes. [ 183.845121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 183.853189][ C1] lec:lec_tx_timeout: lec0 [ 183.858737][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.899031][T11153] syzkaller1: entered promiscuous mode [ 183.904536][T11153] syzkaller1: entered allmulticast mode [ 184.050415][T11109] lo speed is unknown, defaulting to 1000 [ 184.710405][T11182] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1261'. [ 184.834126][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 185.360053][T11222] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1275'. [ 185.409499][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 185.447761][T11227] syzkaller0: entered promiscuous mode [ 185.453265][T11227] syzkaller0: entered allmulticast mode [ 185.473447][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'. [ 185.498769][T11230] tipc: Enabling of bearer rejected, failed to enable media [ 185.638090][T11245] openvswitch: netlink: Message has 592 unknown bytes. [ 185.650030][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.698280][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 185.830723][T11259] openvswitch: netlink: Tunnel attr 190 out of range max 16 [ 186.009660][T11275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1286'. [ 186.090058][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 186.822590][T11287] lo speed is unknown, defaulting to 1000 [ 187.248163][T11328] netlink: 'syz.4.1300': attribute type 13 has an invalid length. [ 187.552347][T11335] tipc: Enabling of bearer rejected, failed to enable media [ 187.577098][T11335] netlink: 'syz.0.1303': attribute type 3 has an invalid length. [ 187.720225][T11341] __nla_validate_parse: 3 callbacks suppressed [ 187.720246][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 187.888070][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 188.176386][T11364] syzkaller0: entered promiscuous mode [ 188.221231][T11364] syzkaller0: entered allmulticast mode [ 188.222785][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 188.327182][T11363] bond5: option arp_all_targets: invalid value (129) [ 188.327882][T11367] openvswitch: netlink: Invalid VLAN frame [ 188.352576][T11363] bond5 (unregistering): Released all slaves [ 188.875122][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 188.883184][ C1] lec:lec_tx_timeout: lec0 [ 188.889199][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.101705][T11404] tipc: Enabled bearer , priority 0 [ 189.110196][T11404] syzkaller0: entered promiscuous mode [ 189.116383][T11404] syzkaller0: entered allmulticast mode [ 189.156845][T11404] tipc: Resetting bearer [ 189.173895][T11401] tipc: Resetting bearer [ 189.222360][T11401] tipc: Disabling bearer [ 189.454442][T11399] lo speed is unknown, defaulting to 1000 [ 189.467709][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1330'. [ 189.582883][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1332'. [ 189.584334][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 189.601766][T11428] openvswitch: netlink: Invalid VLAN frame [ 189.616708][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1332'. [ 190.049734][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1340'. [ 190.071555][T11451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1340'. [ 190.125249][T11451] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1340'. [ 190.272465][T11460] team0: Device veth1 is up. Set it down before adding it as a team port [ 190.339094][T11470] tipc: Enabled bearer , priority 0 [ 190.412409][T11468] tipc: Disabling bearer [ 190.625756][T11484] 8021q: VLANs not supported on gre0 [ 191.145239][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 191.149975][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 191.153194][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 192.054625][T11514] lo speed is unknown, defaulting to 1000 [ 192.518414][T11571] netlink: 'syz.1.1367': attribute type 14 has an invalid length. [ 192.527856][T11570] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 192.851062][T11581] __nla_validate_parse: 4 callbacks suppressed [ 192.851080][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 192.925740][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 193.157813][T11591] lo speed is unknown, defaulting to 1000 [ 193.905178][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.913247][ C1] lec:lec_tx_timeout: lec0 [ 193.917845][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.191174][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279070][T11528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.553365][T11625] vlan1: entered allmulticast mode [ 194.565187][T11625] veth0_vlan: entered allmulticast mode [ 194.696605][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.707414][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.717479][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.737738][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.766980][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'. [ 194.771428][T11640] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 194.793121][T11640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1390'. [ 194.811480][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 194.836124][T11634] vlan2: entered promiscuous mode [ 194.844606][T11634] gretap0: entered promiscuous mode [ 194.875923][T11646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 195.274174][T11671] netlink: zone id is out of range [ 195.280139][T11673] netlink: 'syz.3.1402': attribute type 4 has an invalid length. [ 195.289067][T11671] netlink: get zone limit has 4 unknown bytes [ 195.314411][T11674] netlink: 'syz.3.1402': attribute type 4 has an invalid length. [ 195.327772][T11673] netlink: 'syz.3.1402': attribute type 4 has an invalid length. [ 195.346236][T11674] netlink: 'syz.3.1402': attribute type 4 has an invalid length. [ 195.473195][T11680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.706274][T11660] lo speed is unknown, defaulting to 1000 [ 195.752917][T11688] netlink: 'syz.3.1405': attribute type 5 has an invalid length. [ 196.182033][ T9081] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.205024][ T9081] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.225547][ T9081] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.247461][ T9081] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.618414][T11695] lo speed is unknown, defaulting to 1000 [ 196.652795][T11690] lo speed is unknown, defaulting to 1000 [ 196.901543][T11737] ipvlan3: entered promiscuous mode [ 197.132746][T11749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.422308][T11759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.633243][T11774] batadv0: entered promiscuous mode [ 197.638838][T11774] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 198.925150][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.933248][ C1] lec:lec_tx_timeout: lec0 [ 198.937922][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.105717][T11744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.178919][T11780] __nla_validate_parse: 15 callbacks suppressed [ 200.178941][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 200.420661][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 200.975530][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'. [ 201.225275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.249399][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1446'. [ 201.326457][T11835] nbd: must specify a size in bytes for the device [ 201.355025][T11835] block nbd3: not configured, cannot reconfigure [ 201.384627][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 201.408189][T11837] netlink: 'syz.4.1450': attribute type 2 has an invalid length. [ 201.419742][T11837] netlink: 'syz.4.1450': attribute type 9 has an invalid length. [ 201.428268][T11837] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1450'. [ 201.453020][T11841] bridge4: entered promiscuous mode [ 201.576739][T11847] macsec2: entered promiscuous mode [ 201.583555][T11849] IPVS: set_ctl: invalid protocol: 22 172.30.1.5:8156 [ 201.590743][T11847] ip6gretap0: entered promiscuous mode [ 201.608982][T11847] ip6gretap0: left promiscuous mode [ 201.658983][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 201.665727][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 201.683957][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 201.802391][T11864] netlink: 'syz.2.1459': attribute type 61 has an invalid length. [ 201.822565][T11864] netlink: 'syz.2.1459': attribute type 62 has an invalid length. [ 201.852006][T11870] netlink: 572 bytes leftover after parsing attributes in process `syz.3.1461'. [ 201.994863][T11877] xt_hashlimit: size too large, truncated to 1048576 [ 202.044279][T11879] lo speed is unknown, defaulting to 1000 [ 202.047715][T11883] x9: renamed from bridge_slave_0 (while UP) [ 202.082059][T11879] lo speed is unknown, defaulting to 1000 [ 202.107266][T11879] lo speed is unknown, defaulting to 1000 [ 202.135825][T11887] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 202.311353][T11893] netlink: 'syz.0.1466': attribute type 13 has an invalid length. [ 202.380659][T11893] gretap0: refused to change device tx_queue_len [ 202.400990][T11893] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 202.831453][T11879] infiniband sqz0: set active [ 202.836302][ T5937] lo speed is unknown, defaulting to 1000 [ 202.875211][T11879] infiniband sqz0: added lo [ 202.894144][T11915] tipc: Enabling of bearer rejected, failed to enable media [ 203.061713][T11879] RDS/IB: sqz0: added [ 203.098938][T11879] smc: adding ib device sqz0 with port count 1 [ 203.131618][T11879] smc: ib device sqz0 port 1 has no pnetid [ 203.154803][ T10] lo speed is unknown, defaulting to 1000 [ 203.168691][T11879] lo speed is unknown, defaulting to 1000 [ 203.360075][ T29] audit: type=1800 audit(1771736773.526:5): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1477" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1566 res=0 errno=0 [ 203.523387][T11942] syzkaller0: entered promiscuous mode [ 203.553605][T11942] syzkaller0: entered allmulticast mode [ 203.945173][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.953207][ C1] lec:lec_tx_timeout: lec0 [ 203.958157][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.129645][T11977] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 204.152444][T11879] lo speed is unknown, defaulting to 1000 [ 204.261188][T11980] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 204.282528][T11989] IPVS: Error connecting to the multicast addr [ 204.349120][T11980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.395785][T11996] netlink: 'syz.0.1488': attribute type 2 has an invalid length. [ 204.481676][T11987] bond2: (slave veth5): Enslaving as an active interface with a down link [ 204.591727][T12003] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 204.651487][T11994] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 204.659307][T11994] bond2: (slave wlan0): Opening slave failed [ 204.714556][T11879] lo speed is unknown, defaulting to 1000 [ 204.757543][T12006] IPVS: length: 215 != 8 [ 205.197769][T11879] lo speed is unknown, defaulting to 1000 [ 205.202800][T12032] ip6t_REJECT: ECHOREPLY is not supported [ 205.228540][T12032] __nla_validate_parse: 6 callbacks suppressed [ 205.228558][T12032] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1497'. [ 205.266826][T12034] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 205.427791][T12040] ip6t_REJECT: ECHOREPLY is not supported [ 205.444945][T12038] ip6t_REJECT: ECHOREPLY is not supported [ 205.457563][T11879] lo speed is unknown, defaulting to 1000 [ 205.630784][T12049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'. [ 205.651497][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 205.762043][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 206.043482][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 206.233275][T12049] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 206.247886][T12049] hsr0: left allmulticast mode [ 206.260007][T12049] hsr_slave_0: left allmulticast mode [ 206.274507][T12049] hsr_slave_1: left allmulticast mode [ 206.288034][T12049] macvlan2: left allmulticast mode [ 206.310435][T12049] ipvlan2: left allmulticast mode [ 206.323622][T12049] veth0_vlan: left allmulticast mode [ 206.364358][T12049] vlan2: left allmulticast mode [ 206.378929][T12049] x9: left allmulticast mode [ 206.386494][T12049] geneve2: left promiscuous mode [ 206.396727][T12049] ipvlan3: left promiscuous mode [ 206.430090][ T9081] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.442621][ T9081] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.452554][ T9081] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.462632][ T9081] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.479565][T12073] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 206.496348][ T9081] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.525157][ T9081] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.544267][ T9081] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.566639][ T9081] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.601292][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1509'. [ 206.613502][T12078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1509'. [ 206.629992][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1509'. [ 206.654901][T12080] pim6reg1: entered promiscuous mode [ 206.661473][T12080] pim6reg1: entered allmulticast mode [ 206.681746][T12082] Cannot find set identified by id 0 to match [ 206.690525][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 206.734270][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 207.156353][T12112] validate_nla: 4 callbacks suppressed [ 207.156372][T12112] netlink: 'syz.1.1520': attribute type 309 has an invalid length. [ 207.288879][T12095] lo speed is unknown, defaulting to 1000 [ 207.299267][T12095] lo speed is unknown, defaulting to 1000 [ 207.384099][ T10] lo speed is unknown, defaulting to 1000 [ 207.732196][T12145] netlink: 'syz.2.1529': attribute type 83 has an invalid length. [ 208.460884][T12173] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 208.606363][T12178] netlink: 'syz.4.1541': attribute type 1 has an invalid length. [ 208.633542][T12179] geneve4: entered promiscuous mode [ 208.657807][ T9083] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.678368][T12178] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 208.699904][ T9083] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.779251][ T9083] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.803243][ T9083] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.966361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.974398][ C1] lec:lec_tx_timeout: lec0 [ 208.979027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.004926][T12214] syzkaller1: entered promiscuous mode [ 209.016667][T12214] syzkaller1: entered allmulticast mode [ 209.713313][T12258] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 209.848595][T12204] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 210.302923][T12287] __nla_validate_parse: 103 callbacks suppressed [ 210.302942][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 210.358050][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 210.689916][T12306] veth0: entered promiscuous mode [ 211.087926][T12339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1581'. [ 211.099972][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'. [ 211.116657][T12340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.131709][T12340] netlink: 'syz.0.1583': attribute type 2 has an invalid length. [ 211.163644][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 211.203216][T12344] tipc: Enabling of bearer rejected, failed to enable media [ 211.543321][T12357] syzkaller0: entered promiscuous mode [ 211.562025][T12357] syzkaller0: entered allmulticast mode [ 211.568669][T12365] openvswitch: netlink: Key type 148 is out of range max 32 [ 213.234004][T12391] delete_channel: no stack [ 213.248802][T12391] delete_channel: no stack [ 213.358294][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 213.371130][T12400] xt_TCPMSS: Only works on TCP SYN packets [ 213.407478][T12400] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1603'. [ 213.434501][T12400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.508372][T12400] syzkaller0: entered promiscuous mode [ 213.513981][T12400] syzkaller0: entered allmulticast mode [ 213.524906][T12412] netlink: 'syz.2.1606': attribute type 1 has an invalid length. [ 213.610683][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1607'. [ 213.641579][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1607'. [ 213.797561][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 214.064702][T12439] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 214.082906][T12439] netlink: 'syz.3.1616': attribute type 13 has an invalid length. [ 214.091728][T12439] netlink: 'syz.3.1616': attribute type 17 has an invalid length. [ 214.105019][T12428] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 214.117355][T12428] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 214.228734][T12428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.338581][T12462] bond0: (slave team0): Releasing backup interface [ 214.349434][T12462] team0 (unregistering): left promiscuous mode [ 214.391323][T12462] team_slave_0: left promiscuous mode [ 214.397714][T12462] team_slave_1: left promiscuous mode [ 214.406626][T12462] team0 (unregistering): Port device team_slave_0 removed [ 214.417295][T12462] team0 (unregistering): Port device team_slave_1 removed [ 214.428932][T12464] 8021q: VLANs not supported on vxcan1 [ 215.280872][T12485] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 215.290508][T12485] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 215.305123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 215.313212][ C1] lec:lec_tx_timeout: lec0 [ 215.317908][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 215.379134][T12487] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 215.392525][T12487] __nla_validate_parse: 7 callbacks suppressed [ 215.392542][T12487] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1631'. [ 215.411572][T12487] netlink: 175 bytes leftover after parsing attributes in process `syz.3.1631'. [ 215.452552][T12489] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 215.533166][T12489] bond3: entered promiscuous mode [ 215.539434][T12489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.646837][T12489] bond3: (slave bridge2): making interface the new active one [ 215.656099][T12489] bridge2: entered promiscuous mode [ 215.662216][T12489] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 216.333677][T12518] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 216.613249][T12525] lo speed is unknown, defaulting to 1000 [ 216.620131][T12525] lo speed is unknown, defaulting to 1000 [ 216.847826][T12532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.215746][T12453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.323452][T12537] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 217.353014][T12537] netlink: 'syz.2.1646': attribute type 83 has an invalid length. [ 217.385585][T12540] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 217.605516][T12545] can: request_module (can-proto-0) failed. [ 217.667789][T12555] bond5: entered allmulticast mode [ 217.696483][T12560] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1651'. [ 217.823012][T12555] bridge7: entered promiscuous mode [ 217.828510][T12555] bridge7: entered allmulticast mode [ 217.848947][T12555] bond5: (slave bridge7): making interface the new active one [ 217.857951][T12555] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 217.917018][T12566] netlink: 420 bytes leftover after parsing attributes in process `syz.3.1648'. [ 218.265294][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 218.427842][T12580] syzkaller0: entered promiscuous mode [ 218.433348][T12580] syzkaller0: entered allmulticast mode [ 218.617174][T12588] pim6reg: entered allmulticast mode [ 218.647400][T12597] validate_nla: 1 callbacks suppressed [ 218.647417][T12597] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 218.740940][T12597] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.771167][T12602] pim6reg1: entered promiscuous mode [ 218.776697][T12602] pim6reg1: entered allmulticast mode [ 219.268772][T12612] SET target dimension over the limit! [ 219.282972][T12612] SET target dimension over the limit! [ 219.476067][T12643] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1670'. [ 219.598978][T12647] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 219.607247][T12649] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 219.614477][T12632] lo speed is unknown, defaulting to 1000 [ 219.626150][T12647] veth1_macvtap: left promiscuous mode [ 219.632974][T12647] team0: Device veth1_macvtap failed to register rx_handler [ 219.642568][T12632] lo speed is unknown, defaulting to 1000 [ 219.649543][T12649] team0: Device veth1_macvtap failed to register rx_handler [ 219.685518][T12652] netlink: 'syz.3.1672': attribute type 58 has an invalid length. [ 219.725380][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1672'. [ 219.851302][T12656] netlink: 'syz.4.1675': attribute type 16 has an invalid length. [ 219.859641][T12656] netlink: 'syz.4.1675': attribute type 17 has an invalid length. [ 219.921848][T12656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.926889][T12660] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1675'. [ 219.931176][T12656] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.948009][T12656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.966741][T12638] lo speed is unknown, defaulting to 1000 [ 220.033590][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 220.058143][T12638] lo speed is unknown, defaulting to 1000 [ 220.330643][T12667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1677'. [ 220.582344][T12664] lo speed is unknown, defaulting to 1000 [ 220.590064][T12664] lo speed is unknown, defaulting to 1000 [ 220.854110][T12697] __nla_validate_parse: 1 callbacks suppressed [ 220.854129][T12697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 220.969198][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 220.979855][T12703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.037662][T12702] macsec1: entered promiscuous mode [ 221.065116][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 221.073207][ C1] lec:lec_tx_timeout: lec0 [ 221.078503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.474083][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.481791][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.647086][T12711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.681873][T12711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.859883][ T24] lo speed is unknown, defaulting to 1000 [ 221.878088][ T24] sqz0: Port: 1 Link DOWN [ 221.953688][T12718] bond0: (slave dummy0): Releasing backup interface [ 221.961332][T12718] dummy0: left promiscuous mode [ 221.968445][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.979496][T12718] bridge_slave_1: left allmulticast mode [ 221.986454][T12718] bridge_slave_1: left promiscuous mode [ 221.992431][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.004989][T12718] bond0: (slave bond_slave_0): Releasing backup interface [ 222.022609][T12718] bond_slave_0: left promiscuous mode [ 222.056529][T12718] bond0: (slave bond_slave_1): Releasing backup interface [ 222.065013][T12718] bond_slave_1: left promiscuous mode [ 222.081427][T12718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.094930][T12718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.108278][T12718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.128802][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.137975][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.146981][ T36] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.156402][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.164917][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.174008][ T36] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.182690][ T24] lo speed is unknown, defaulting to 1000 [ 222.182969][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.197113][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.205523][ T36] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.215857][T12708] lo speed is unknown, defaulting to 1000 [ 222.221647][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.230280][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.238904][ T36] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.255447][T12708] lo speed is unknown, defaulting to 1000 [ 222.630546][T12747] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 222.630778][T12749] x_tables: duplicate underflow at hook 2 [ 222.730991][T12747] bond9: entered promiscuous mode [ 222.745485][T12747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 222.800535][T12751] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.813361][T12751] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.824493][T12751] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 223.478819][T12776] 8021q: adding VLAN 0 to HW filter on device bond10 [ 223.628297][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'. [ 223.641793][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1698'. [ 223.653525][T12782] netlink: 'syz.2.1700': attribute type 11 has an invalid length. [ 223.662438][T12782] netlink: 'syz.2.1700': attribute type 23 has an invalid length. [ 223.671289][T12782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1700'. [ 223.921253][T12799] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1706'. [ 224.179753][T12817] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1713'. [ 224.199523][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 224.258276][T12821] netlink: 'syz.3.1710': attribute type 2 has an invalid length. [ 224.300477][T12821] netlink: 'syz.3.1710': attribute type 9 has an invalid length. [ 224.308638][T12821] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1710'. [ 224.357892][T12830] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1715'. [ 224.568174][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.593404][T12842] openvswitch: netlink: Key 19 has unexpected len 6 expected 4 [ 224.805631][T12833] lo speed is unknown, defaulting to 1000 [ 224.813125][T12833] lo speed is unknown, defaulting to 1000 [ 224.970324][T12855] syzkaller1: entered promiscuous mode [ 224.985284][T12855] syzkaller1: entered allmulticast mode [ 225.678099][T12893] netlink: 'syz.3.1733': attribute type 32 has an invalid length. [ 225.794025][T12893] bond4: option coupled_control: invalid value (12) [ 225.809990][T12893] bond4 (unregistering): Released all slaves [ 226.105554][T12917] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 226.133098][T12917] nbd: error processing sock list [ 226.256958][T12923] netlink: 'syz.1.1738': attribute type 2 has an invalid length. [ 226.281448][T12923] : entered promiscuous mode [ 226.498685][T12939] __nla_validate_parse: 4 callbacks suppressed [ 226.498704][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 226.687972][T12925] lo speed is unknown, defaulting to 1000 [ 226.696392][T12925] lo speed is unknown, defaulting to 1000 [ 226.825110][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 226.833129][ C1] lec:lec_tx_timeout: lec0 [ 226.837841][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.116905][T12933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 227.123121][T12933] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 227.153818][T12933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.187269][T12933] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 227.218109][T12933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.226247][T12933] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 227.256671][T12933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.262743][T12933] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 227.607182][T12982] tipc: Enabled bearer , priority 0 [ 227.741107][T12982] syzkaller0: entered promiscuous mode [ 227.746924][T12982] syzkaller0: entered allmulticast mode [ 227.753235][T12982] tipc: Resetting bearer [ 227.774585][T12982] tipc: Resetting bearer [ 228.398837][T12991] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 228.475215][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1760'. [ 229.180272][T12982] tipc: Disabling bearer [ 229.266653][T12992] bond11: (slave bridge5): making interface the new active one [ 229.279514][T12992] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 229.283080][T13009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.313644][ T5937] tipc: Node number set to 276744968 [ 229.368410][T13001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.509038][ T5947] IPVS: starting estimator thread 0... [ 229.533157][T13033] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1763'. [ 229.616273][T13032] IPVS: using max 44 ests per chain, 105600 per kthread [ 229.690137][T13043] netlink: 'syz.1.1772': attribute type 142 has an invalid length. [ 229.825513][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 230.000342][T13037] lo speed is unknown, defaulting to 1000 [ 230.008112][T13037] lo speed is unknown, defaulting to 1000 [ 230.080037][T13064] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 230.112981][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 230.185013][T13069] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1780'. [ 230.225869][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1780'. [ 230.308980][T13074] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 230.326351][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1782'. [ 230.427167][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 230.526477][T13088] netlink: 'syz.3.1786': attribute type 8 has an invalid length. [ 230.559662][T13086] raw_sendmsg: syz.1.1787 forgot to set AF_INET. Fix it! [ 230.870155][T13106] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1788'. [ 230.922680][T13109] tipc: Enabled bearer , priority 10 [ 230.930336][T13109] syzkaller0: entered promiscuous mode [ 230.935984][T13109] syzkaller0: entered allmulticast mode [ 231.110923][T13120] ip6gre0: entered promiscuous mode [ 231.350987][T13084] lo speed is unknown, defaulting to 1000 [ 231.371879][T13084] lo speed is unknown, defaulting to 1000 [ 231.409112][T13137] netlink: 'syz.0.1799': attribute type 28 has an invalid length. [ 231.417901][T13137] syzkaller1: entered promiscuous mode [ 231.423384][T13137] syzkaller1: entered allmulticast mode [ 231.634004][T13107] tipc: Resetting bearer [ 231.683690][T13107] tipc: Disabling bearer [ 231.745231][T13142] bond0: option all_slaves_active: invalid value (99) [ 231.845103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.853197][ C1] lec:lec_tx_timeout: lec0 [ 231.857987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.165172][T13129] lo speed is unknown, defaulting to 1000 [ 232.294015][T13129] lo speed is unknown, defaulting to 1000 [ 232.544424][T13207] __nla_validate_parse: 2 callbacks suppressed [ 232.544442][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1807'. [ 232.831658][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 232.943282][T13224] bond4: option ad_actor_sys_prio: invalid value (0) [ 232.950248][T13224] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 232.973594][T13224] bond4 (unregistering): Released all slaves [ 233.071138][T13128] lo speed is unknown, defaulting to 1000 [ 233.104991][T13233] erspan1: entered promiscuous mode [ 233.111749][T13233] erspan1: entered allmulticast mode [ 233.177038][T13128] lo speed is unknown, defaulting to 1000 [ 233.311835][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 233.363175][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1816'. [ 233.386426][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1816'. [ 233.419558][T13248] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1820'. [ 234.043756][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 234.139405][T13290] netlink: zone id is out of range [ 234.145253][T13290] netlink: zone id is out of range [ 234.150624][T13290] netlink: zone id is out of range [ 234.156399][T13290] netlink: zone id is out of range [ 234.162587][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 234.166126][T13290] netlink: zone id is out of range [ 234.189352][T13290] netlink: zone id is out of range [ 234.206550][T13290] netlink: zone id is out of range [ 234.272719][T13291] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1829'. [ 234.295276][T13291] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1829'. [ 234.503766][T13304] bridge_slave_1: default FDB implementation only supports local addresses [ 234.512645][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.666553][T13304] sctp: [Deprecated]: syz.3.1831 (pid 13304) Use of int in max_burst socket option. [ 234.666553][T13304] Use struct sctp_assoc_value instead [ 234.729923][T13304] netlink: 'syz.3.1831': attribute type 9 has an invalid length. [ 234.763941][T13304] netlink: 'syz.3.1831': attribute type 6 has an invalid length. [ 235.562702][T13302] lo speed is unknown, defaulting to 1000 [ 235.606001][T13302] lo speed is unknown, defaulting to 1000 [ 235.955005][T13322] sctp: [Deprecated]: syz.4.1838 (pid 13322) Use of int in max_burst socket option. [ 235.955005][T13322] Use struct sctp_assoc_value instead [ 236.865133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.873197][ C1] lec:lec_tx_timeout: lec0 [ 236.878444][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.320769][T13358] netlink: 'syz.4.1846': attribute type 2 has an invalid length. [ 237.349355][T13358] netlink: 'syz.4.1846': attribute type 2 has an invalid length. [ 237.368635][T13358] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 237.857191][T13379] __nla_validate_parse: 2 callbacks suppressed [ 237.857210][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 238.004639][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 238.015722][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 238.026872][T13384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.234336][T13398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.283718][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 238.461584][T13408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1863'. [ 238.560389][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 239.159931][T13439] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 239.175267][T13439] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1874'. [ 239.189154][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 239.205624][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 239.220808][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 239.279832][T13445] syzkaller0: entered promiscuous mode [ 239.310581][T13445] syzkaller0: entered allmulticast mode [ 239.561968][T13473] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.611749][T13469] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 239.665292][T13478] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 239.681140][T13478] bond12 (unregistering): Released all slaves [ 240.124251][T13466] lo speed is unknown, defaulting to 1000 [ 240.132268][T13466] lo speed is unknown, defaulting to 1000 [ 240.384500][T13476] lo speed is unknown, defaulting to 1000 [ 240.540990][T13476] lo speed is unknown, defaulting to 1000 [ 241.418779][T13555] syzkaller0: entered promiscuous mode [ 241.424305][T13555] syzkaller0: entered allmulticast mode [ 241.552157][T13555] bond9: (slave bond_slave_1): Device is not our slave [ 241.560038][T13555] bond9: option active_slave: invalid value (bond_slave_1) [ 241.579633][T13555] bond9 (unregistering): Released all slaves [ 241.857123][T13567] macsec0: entered promiscuous mode [ 241.862598][T13568] bridge0: entered allmulticast mode [ 241.876397][T13570] veth1_macvtap: entered promiscuous mode [ 241.882344][T13570] macsec0: left promiscuous mode [ 241.885112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 241.887407][T13570] veth1_macvtap: left promiscuous mode [ 241.895437][ C1] lec:lec_tx_timeout: lec0 [ 241.905669][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.415485][T13601] syzkaller1: entered promiscuous mode [ 242.421287][T13601] syzkaller1: entered allmulticast mode [ 242.684654][T13618] bond12 (unregistering): Released all slaves [ 242.839657][T13627] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 242.855874][T13627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.880805][T13627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.915284][T13627] hsr0: entered promiscuous mode [ 242.937717][T13627] bridge0: port 1(hsr0) entered blocking state [ 242.956691][T13627] bridge0: port 1(hsr0) entered disabled state [ 242.963077][T13627] hsr0: entered allmulticast mode [ 242.981664][T13627] hsr_slave_0: entered allmulticast mode [ 242.995800][T13627] hsr_slave_1: entered allmulticast mode [ 243.117887][T13646] __nla_validate_parse: 12 callbacks suppressed [ 243.117909][T13646] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1930'. [ 243.200475][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 243.467326][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 243.475798][T13663] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1937'. [ 243.489304][T13666] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 243.494176][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 243.508053][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 243.563115][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 243.613332][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 243.682612][T13672] bond4: (slave bridge3): making interface the new active one [ 243.693344][T13672] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 243.704013][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 243.925509][T13690] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 244.138729][T13678] lo speed is unknown, defaulting to 1000 [ 244.156530][T13678] lo speed is unknown, defaulting to 1000 [ 244.293262][T13673] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 244.313793][T13717] bridge4: entered promiscuous mode [ 244.347850][T13717] bridge4: entered allmulticast mode [ 244.367630][T13717] team0: Port device bridge4 added [ 244.376390][T13713] bridge0: port 1(team0) entered blocking state [ 244.395578][T13713] bridge0: port 1(team0) entered disabled state [ 244.406538][T13713] team0: entered allmulticast mode [ 244.412029][T13713] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 244.449646][T13713] team0: entered promiscuous mode [ 244.454791][T13713] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 244.482968][T13721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.483958][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 245.303063][T13764] vlan3: entered promiscuous mode [ 245.308375][T13764] batadv0: entered promiscuous mode [ 245.656679][T13778] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 245.690434][T13778] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 245.804202][T13787] syzkaller0: entered promiscuous mode [ 245.846138][T13787] syzkaller0: entered allmulticast mode [ 246.067886][T13806] erspan1: entered promiscuous mode [ 246.075229][T13806] erspan1: entered allmulticast mode [ 246.402826][T13834] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 246.478629][T13834] bond9: option arp_all_targets: invalid value (129) [ 246.508731][T13834] bond9 (unregistering): Released all slaves [ 246.573599][T13839] bond9: option arp_all_targets: invalid value (129) [ 246.582527][T13839] bond9 (unregistering): Released all slaves [ 246.800596][T13855] : entered promiscuous mode [ 246.850999][T13866] netlink: 'syz.2.1989': attribute type 4 has an invalid length. [ 246.889578][T13866] netlink: 'syz.2.1989': attribute type 4 has an invalid length. [ 246.906958][T13869] wg1: entered promiscuous mode [ 246.915128][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 246.923196][ C1] lec:lec_tx_timeout: lec0 [ 246.927957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.953166][T13869] wg1: entered allmulticast mode [ 247.175623][T13883] syzkaller0: entered promiscuous mode [ 247.194572][T13883] syzkaller0: entered allmulticast mode [ 247.368889][ T5488] veth1_macvtap: left promiscuous mode [ 247.418752][ T5488] veth1_macvtap: entered promiscuous mode [ 247.487155][T13897] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 247.590342][T13901] tap0: tun_chr_ioctl cmd 1074025698 [ 247.626830][T13901] tap0: tun_chr_ioctl cmd 1074025677 [ 247.636047][T13901] tap0: linktype set to 769 [ 247.695260][T13845] lo speed is unknown, defaulting to 1000 [ 247.709846][T13845] lo speed is unknown, defaulting to 1000 [ 248.037670][T13922] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 248.279225][T13927] siw: device registration error -23 [ 248.376742][T13943] __nla_validate_parse: 13 callbacks suppressed [ 248.376769][T13943] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2009'. [ 248.379754][T13947] tipc: Can't bind to reserved service type 2 [ 248.438202][T13943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.493128][T13943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.508188][T13943] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 248.537629][T13943] bond0 (unregistering): Released all slaves [ 248.616653][T13924] lo speed is unknown, defaulting to 1000 [ 248.624754][T13924] lo speed is unknown, defaulting to 1000 [ 248.941328][T13957] syzkaller0: entered promiscuous mode [ 248.956082][T13957] syzkaller0: entered allmulticast mode [ 249.977922][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2018'. [ 250.211502][T14003] netlink: 'syz.0.2020': attribute type 2 has an invalid length. [ 250.307043][T14003] netlink: 'syz.0.2020': attribute type 4 has an invalid length. [ 250.723687][T14023] syzkaller1: entered promiscuous mode [ 250.769165][T14023] syzkaller1: entered allmulticast mode [ 250.892457][T14034] netlink: 'syz.0.2028': attribute type 2 has an invalid length. [ 250.937552][T14034] : entered promiscuous mode [ 251.000207][T14037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2029'. [ 251.288466][T14048] nbd: socks must be embedded in a SOCK_ITEM attr [ 251.295555][T14048] block nbd1: shutting down sockets [ 251.327360][T14050] syzkaller0: entered promiscuous mode [ 251.332870][T14050] syzkaller0: entered allmulticast mode [ 251.520539][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 251.552267][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 251.561793][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 251.573789][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 251.602933][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 251.935174][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 251.943265][ C1] lec:lec_tx_timeout: lec0 [ 251.948030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.059422][T14081] tipc: Enabled bearer , priority 0 [ 252.100285][T14081] syzkaller0: entered promiscuous mode [ 252.106626][T14081] syzkaller0: entered allmulticast mode [ 252.264684][T14094] netlink: 'syz.1.2044': attribute type 2 has an invalid length. [ 252.392907][T14101] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 252.429988][T14101] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2041'. [ 252.445300][T14101] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2041'. [ 253.171732][ T5192] udevd[5192]: worker [6504] /devices/virtual/block/nbd0 is taking a long time [ 254.154052][T14088] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 254.171658][T14097] tipc: Resetting bearer [ 254.187863][T14080] tipc: Resetting bearer [ 254.220448][T14080] tipc: Disabling bearer [ 254.373453][T14160] __nla_validate_parse: 3 callbacks suppressed [ 254.373473][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2053'. [ 254.419624][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 254.449532][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 254.496189][T14164] netlink: 'syz.2.2052': attribute type 2 has an invalid length. [ 254.587962][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 254.625019][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 254.635757][T14181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 254.755925][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'. [ 254.793802][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 254.827527][T14193] openvswitch: netlink: Key type 8170 is out of range max 32 [ 255.286164][T14198] sch_tbf: burst 2 is lower than device ip6gretap0 mtu (1606) ! [ 255.552985][ T5937] lo speed is unknown, defaulting to 1000 [ 255.570742][ T5937] syz2: Port: 1 Link DOWN [ 255.693898][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 255.720737][T14220] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 255.748817][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'. [ 255.756338][T14220] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.780803][T14224] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 255.810223][T14224] bridge6: entered allmulticast mode [ 255.885802][T14220] bond7: (slave gretap1): making interface the new active one [ 255.917730][T14220] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 255.973302][T14225] bond7 (unregistering): (slave gretap1): Releasing active interface [ 255.983256][T14225] bond7 (unregistering): Released all slaves [ 256.508126][T14277] pimreg: entered allmulticast mode [ 256.518724][T14277] netlink: 'syz.2.2084': attribute type 2 has an invalid length. [ 256.955118][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 256.963177][ C1] lec:lec_tx_timeout: lec0 [ 256.967809][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.212675][T14292] lo speed is unknown, defaulting to 1000 [ 257.221323][T14292] lo speed is unknown, defaulting to 1000 [ 257.277691][T14312] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 257.474246][T14316] syzkaller1: entered promiscuous mode [ 257.507700][T14316] syzkaller1: entered allmulticast mode [ 258.664201][T14378] sctp: [Deprecated]: syz.0.2108 (pid 14378) Use of int in max_burst socket option. [ 258.664201][T14378] Use struct sctp_assoc_value instead [ 258.697478][T14377] sctp: [Deprecated]: syz.0.2108 (pid 14377) Use of int in max_burst socket option. [ 258.697478][T14377] Use struct sctp_assoc_value instead [ 259.114172][T14376] bond12: entered promiscuous mode [ 259.119892][T14376] 8021q: adding VLAN 0 to HW filter on device bond12 [ 259.234559][T14396] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 259.421537][T14412] __nla_validate_parse: 5 callbacks suppressed [ 259.421557][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2117'. [ 259.559225][T14419] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 259.622765][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2119'. [ 259.692639][T14428] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2124'. [ 259.959469][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2131'. [ 259.990007][T14458] bond0: ARP target 170.170.170.170 is already present [ 260.010778][T14458] bond0: option arp_ip_target: invalid value (2863311530) [ 260.581797][T14489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.783247][T14493] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 260.858778][T14493] bond0: entered promiscuous mode [ 260.864329][T14493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.254544][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 261.331205][T14538] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 261.382972][T14541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.418751][T14541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.658656][T14553] netlink: 'syz.2.2145': attribute type 6 has an invalid length. [ 261.843792][T14557] dvmrp1: entered allmulticast mode [ 261.856896][T14556] dvmrp1: left allmulticast mode [ 262.163421][T14571] sctp: [Deprecated]: syz.2.2162 (pid 14571) Use of int in max_burst socket option. [ 262.163421][T14571] Use struct sctp_assoc_value instead [ 262.205808][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2161'. [ 262.231020][T14574] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 262.242610][T14574] vxcan1: entered promiscuous mode [ 262.248532][T14574] vxcan1: entered allmulticast mode [ 262.257474][T14574] team0: Device vxcan1 is of different type [ 262.348564][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2164'. [ 262.462286][T14582] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 262.522831][T14582] 8021q: adding VLAN 0 to HW filter on device bond9 [ 262.523877][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 262.537432][T14586] team0: Device gtp0 is of different type [ 262.548064][T14592] netlink: 'syz.1.2168': attribute type 21 has an invalid length. [ 262.570614][T14592] netlink: 'syz.1.2168': attribute type 3 has an invalid length. [ 262.578539][T14592] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2168'. [ 262.592128][T14592] netlink: 'syz.1.2168': attribute type 13 has an invalid length. [ 262.605797][T14592] netlink: 'syz.1.2168': attribute type 12 has an invalid length. [ 262.652912][T14591] batadv2: entered promiscuous mode [ 262.675802][T14591] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 262.745091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 262.753149][ C1] lec:lec_tx_timeout: lec0 [ 262.758166][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.010587][T14611] syzkaller0: entered promiscuous mode [ 263.041735][T14611] syzkaller0: entered allmulticast mode [ 263.301752][T14639] FAULT_INJECTION: forcing a failure. [ 263.301752][T14639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 263.341984][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.0.2177 Not tainted syzkaller #0 PREEMPT(full) [ 263.342009][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.342025][T14639] Call Trace: [ 263.342033][T14639] [ 263.342040][T14639] dump_stack_lvl+0xe8/0x150 [ 263.342068][T14639] should_fail_ex+0x412/0x560 [ 263.342093][T14639] _copy_from_user+0x2d/0xb0 [ 263.342114][T14639] core_sys_select+0x6fd/0xc30 [ 263.342150][T14639] ? __pfx_core_sys_select+0x10/0x10 [ 263.342192][T14639] ? __pfx_set_user_sigmask+0x10/0x10 [ 263.342220][T14639] __se_sys_pselect6+0x267/0x320 [ 263.342246][T14639] ? __pfx___se_sys_pselect6+0x10/0x10 [ 263.342265][T14639] ? __pfx_ksys_write+0x10/0x10 [ 263.342287][T14639] ? __x64_sys_pselect6+0x21/0xf0 [ 263.342308][T14639] do_syscall_64+0x14d/0xf80 [ 263.342333][T14639] ? trace_irq_disable+0x3b/0x150 [ 263.342375][T14639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.342392][T14639] ? clear_bhb_loop+0x40/0x90 [ 263.342411][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.342428][T14639] RIP: 0033:0x7f0ef859c629 [ 263.342452][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.342466][T14639] RSP: 002b:00007f0ef94da028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 263.342490][T14639] RAX: ffffffffffffffda RBX: 00007f0ef8816090 RCX: 00007f0ef859c629 [ 263.342502][T14639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 263.342512][T14639] RBP: 00007f0ef94da090 R08: 0000000000000000 R09: 0000000000000000 [ 263.342522][T14639] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 263.342533][T14639] R13: 00007f0ef8816128 R14: 00007f0ef8816090 R15: 00007ffd1afe0408 [ 263.342557][T14639] [ 266.238830][T14726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2200'. [ 266.490247][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 266.891616][T14775] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2214'. [ 267.238722][T14801] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 267.274576][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2219'. [ 267.297309][T14801] bond10: (slave bridge8): making interface the new active one [ 267.306295][T14801] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 267.325701][T14801] bond10: (slave bridge9): Enslaving as an active interface with a down link [ 267.340722][T14801] macvlan0: entered promiscuous mode [ 267.346496][T14801] macvlan0: entered allmulticast mode [ 267.352808][T14801] bond10: entered promiscuous mode [ 267.355742][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 267.375322][T14801] bridge8: entered promiscuous mode [ 267.381921][T14801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 267.391163][T14801] bond10: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 267.408504][T14801] bond10: left promiscuous mode [ 267.413386][T14801] bridge8: left promiscuous mode [ 267.785123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 267.793200][ C1] lec:lec_tx_timeout: lec0 [ 267.797834][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.898503][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'. [ 267.911509][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2229'. [ 268.257854][T14857] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.409086][T14870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2237'. [ 268.419295][T14870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.731048][T14852] lo speed is unknown, defaulting to 1000 [ 268.741519][T14852] lo speed is unknown, defaulting to 1000 [ 268.818051][T14891] xt_TCPMSS: Only works on TCP SYN packets [ 269.068381][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 269.082691][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 269.151602][T14902] geneve2: entered promiscuous mode [ 269.175228][T14902] geneve2: entered allmulticast mode [ 269.199456][T14910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.216412][T14903] netlink: zone id is out of range [ 269.221572][T14903] netlink: zone id is out of range [ 269.231111][T14903] netlink: zone id is out of range [ 269.236897][T14903] netlink: zone id is out of range [ 269.239817][T14910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.242045][T14903] netlink: zone id is out of range [ 269.269056][ T9081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.279527][T14903] netlink: zone id is out of range [ 269.288218][ T9081] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.325739][ T9081] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.354861][ T9081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.638180][T14934] bond11: option arp_interval: invalid value (18446744073709551615) [ 269.669686][T14934] bond11: option arp_interval: allowed values 0 - 2147483647 [ 269.692985][T14934] bond11 (unregistering): Released all slaves [ 269.827755][T14937] gretap2: entered promiscuous mode [ 270.670677][T14980] lo speed is unknown, defaulting to 1000 [ 270.716988][T14980] lo speed is unknown, defaulting to 1000 [ 271.030320][T14993] lo speed is unknown, defaulting to 1000 [ 271.143859][T14993] lo speed is unknown, defaulting to 1000 [ 271.239635][T15016] hsr_slave_0: left promiscuous mode [ 271.254587][T15016] hsr_slave_1: left promiscuous mode [ 271.401208][T15032] netlink: 'syz.3.2288': attribute type 11 has an invalid length. [ 271.463672][T15037] __nla_validate_parse: 11 callbacks suppressed [ 271.463690][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 271.549883][T15033] netlink: 'syz.1.2287': attribute type 4 has an invalid length. [ 271.611006][T15037] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.639075][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 271.644783][T15032] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 271.658849][T15032] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 271.662379][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 271.757545][T15044] vti0: entered promiscuous mode [ 271.767401][T15044] vti0: entered allmulticast mode [ 271.808470][T15037] bond4 (unregistering): (slave batadv2): Releasing backup interface [ 271.859395][T15037] bond4 (unregistering): Released all slaves [ 272.214499][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2294'. [ 272.240915][T15051] syzkaller0: entered promiscuous mode [ 272.246802][T15051] syzkaller0: entered allmulticast mode [ 272.277736][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 272.819437][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 272.827545][ C1] lec:lec_tx_timeout: lec0 [ 272.832199][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.929460][T15080] syzkaller0: entered promiscuous mode [ 273.943804][T15080] syzkaller0: entered allmulticast mode [ 273.959897][T15080] syzkaller1: entered promiscuous mode [ 273.966536][T15080] syzkaller1: entered allmulticast mode [ 274.052788][T15080] sctp: [Deprecated]: syz.0.2298 (pid 15080) Use of int in max_burst socket option. [ 274.052788][T15080] Use struct sctp_assoc_value instead [ 274.360162][T15109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2306'. [ 274.392910][T15109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2306'. [ 274.561009][T15135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2313'. [ 274.646096][T15135] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 274.654364][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2314'. [ 274.684750][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2314'. [ 274.720210][T15135] 9: entered promiscuous mode [ 275.003018][T15165] : renamed from team_slave_1 [ 275.146148][T15174] bond13: option fail_over_mac: invalid value (127) [ 275.154765][T15174] bond13 (unregistering): Released all slaves [ 275.224078][T15172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.232329][T15172] batadv1: entered promiscuous mode [ 275.238492][T15172] batadv1: entered allmulticast mode [ 275.245389][T15172] team0: Port device batadv1 added [ 275.372173][T15183] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 275.408495][T15183] bond7: entered promiscuous mode [ 275.414155][T15183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.452033][T15183] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.473067][T15183] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 275.483633][T15183] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 275.725311][T13180] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 275.734602][T13180] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 275.854018][T15220] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.948391][T15220] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.094867][T15220] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.242779][T15220] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.403068][T13182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.453207][T13182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.500684][T15263] __nla_validate_parse: 2 callbacks suppressed [ 276.500726][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 276.521624][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2345'. [ 276.534759][T13182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.567500][T13180] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.800168][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'. [ 276.832296][T15283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2350'. [ 276.919906][T15285] bond4: entered promiscuous mode [ 276.927835][T15283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2350'. [ 276.966480][T15297] IPVS: set_ctl: invalid protocol: 108 172.20.20.20:20000 [ 276.978380][T15286] macvlan2: entered promiscuous mode [ 277.009786][T15286] macvlan2: entered allmulticast mode [ 277.066528][T15286] bond4: (slave macvlan2): Opening slave failed [ 277.596592][T15322] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 277.604357][T15322] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2358'. [ 277.822765][T15332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2360'. [ 277.845080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.853160][ C1] lec:lec_tx_timeout: lec0 [ 277.857949][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 277.890616][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2355'. [ 277.917646][T15310] bridge0: port 1(batadv3) entered blocking state [ 277.944587][T15310] bridge0: port 1(batadv3) entered disabled state [ 277.958493][T15310] batadv3: entered allmulticast mode [ 277.972814][T15310] batadv3: entered promiscuous mode [ 278.119261][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2361'. [ 278.148388][T15344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2361'. [ 278.415919][ T9081] batman_adv: batadv3: IGMP Querier appeared [ 278.422308][ T9081] batman_adv: batadv3: MLD Querier appeared [ 278.451831][T15319] lo speed is unknown, defaulting to 1000 [ 278.480299][T15319] lo speed is unknown, defaulting to 1000 [ 278.766823][T15353] lo speed is unknown, defaulting to 1000 [ 279.346050][T15353] lo speed is unknown, defaulting to 1000 [ 279.773931][T15385] lo speed is unknown, defaulting to 1000 [ 279.808099][T15385] lo speed is unknown, defaulting to 1000 [ 280.149114][T15414] vlan0: entered promiscuous mode [ 280.154186][T15414] bridge0: entered promiscuous mode [ 281.393908][T15475] netlink: 'syz.1.2388': attribute type 1 has an invalid length. [ 281.423165][T15475] netlink: 'syz.1.2388': attribute type 2 has an invalid length. [ 281.729736][T15499] pimreg: entered allmulticast mode [ 282.058846][T15514] __nla_validate_parse: 41 callbacks suppressed [ 282.058873][T15514] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2398'. [ 282.084553][T15514] ..0{X: renamed from gretap0 [ 282.093922][T15514] ..0{X: left promiscuous mode [ 282.105681][T15514] ..0{X: entered allmulticast mode [ 282.118468][T15514] net_ratelimit: 49 callbacks suppressed [ 282.118486][T15514] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 282.141292][T15491] lo speed is unknown, defaulting to 1000 [ 282.154483][T15491] lo speed is unknown, defaulting to 1000 [ 282.250260][T15518] IPVS: length: 132 != 8 [ 282.273376][T15518] pimreg: entered allmulticast mode [ 282.286636][T15495] pimreg: left allmulticast mode [ 282.343905][T15526] netlink: 'syz.2.2399': attribute type 12 has an invalid length. [ 282.605607][T15532] netlink: 'syz.0.2400': attribute type 12 has an invalid length. [ 282.615334][T15532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2400'. [ 282.716601][T15540] syzkaller0: entered promiscuous mode [ 282.725484][T15540] syzkaller0: entered allmulticast mode [ 282.865108][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.873161][ C1] lec:lec_tx_timeout: lec0 [ 282.877948][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.024066][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 283.128323][T15531] lo speed is unknown, defaulting to 1000 [ 283.191271][T15531] lo speed is unknown, defaulting to 1000 [ 283.194555][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 283.321694][T15581] openvswitch: netlink: Flow key attr not present in new flow. [ 283.436145][T15578] @: option downdelay: invalid value (18446744073709547007) [ 283.477943][T15578] @: option downdelay: allowed values 0 - 2147483647 [ 283.529630][T15578] @ (unregistering): Released all slaves [ 283.622128][T15579] @: option downdelay: invalid value (18446744073709547007) [ 283.630072][T15579] @: option downdelay: allowed values 0 - 2147483647 [ 283.666713][T15579] @ (unregistering): Released all slaves [ 283.814390][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 283.824588][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'. [ 283.988742][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2424'. [ 284.062982][T15620] bridge0: port 2(batadv4) entered blocking state [ 284.080057][T15620] bridge0: port 2(batadv4) entered disabled state [ 284.106251][T15620] batadv4: entered allmulticast mode [ 284.153174][T15620] batadv4: entered promiscuous mode [ 284.557224][T13182] batman_adv: batadv4: IGMP Querier appeared [ 284.563249][T13182] batman_adv: batadv4: MLD Querier appeared [ 284.906497][T15663] bridge0: port 4(macsec0) entered blocking state [ 284.935491][T15663] bridge0: port 4(macsec0) entered disabled state [ 284.942291][T15663] macsec0: entered allmulticast mode [ 284.959037][T15663] macsec0: entered promiscuous mode [ 284.993515][T15669] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 285.109793][T15673] delete_channel: no stack [ 285.410477][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 285.421585][T15685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2437'. [ 285.585485][T15656] lo speed is unknown, defaulting to 1000 [ 285.668424][T15656] lo speed is unknown, defaulting to 1000 [ 285.710723][T15692] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 285.812717][T15694] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2439'. [ 285.862918][T15694] smc: net device wlan0 applied user defined pnetid SYZ0 [ 287.633886][T15764] tipc: Enabled bearer , priority 0 [ 287.659550][T15764] __nla_validate_parse: 1 callbacks suppressed [ 287.659569][T15764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2460'. [ 287.699387][T15771] ip6tnl3: entered allmulticast mode [ 287.705787][T15764] syzkaller0: entered promiscuous mode [ 287.711275][T15764] syzkaller0: entered allmulticast mode [ 287.732054][T15764] tipc: Resetting bearer [ 287.739358][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 287.761928][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 287.823954][T15763] tipc: Resetting bearer [ 287.885125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.893200][ C1] lec:lec_tx_timeout: lec0 [ 287.897833][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.926157][T15763] tipc: Disabling bearer [ 287.972010][T15790] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 287.995204][T15790] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2467'. [ 288.016367][T15790] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2467'. [ 288.226357][T15797] bond0: option arp_validate: invalid value (55553) [ 288.237709][T15799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2470'. [ 288.249949][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 288.285846][T15801] Cannot find del_set index 1536 as target [ 288.315646][T15799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.346209][T15803] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 288.364227][T15803] bond5: (slave batadv5): Enslaving as an active interface with an up link [ 288.421607][T15799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2470'. [ 288.435695][T15799] erspan0: entered promiscuous mode [ 288.547493][T15796] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 288.561201][T15796] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 288.576830][T15796] team0: Port device netdevsim0 removed [ 288.889050][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 289.168613][T15859] netlink: 'syz.1.2485': attribute type 1 has an invalid length. [ 289.177262][T15859] netlink: 'syz.1.2485': attribute type 2 has an invalid length. [ 289.185094][T15859] netlink: 'syz.1.2485': attribute type 2 has an invalid length. [ 289.192977][T15859] netlink: 'syz.1.2485': attribute type 2 has an invalid length. [ 289.345827][T15864] netlink: 'syz.3.2487': attribute type 5 has an invalid length. [ 289.350062][T15866] batadv_slave_1: entered promiscuous mode [ 289.363698][T15865] batadv_slave_1: left promiscuous mode [ 289.545840][T15874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2490'. [ 290.040309][T15909] SET target dimension over the limit! [ 290.461971][T15928] netlink: 'syz.2.2504': attribute type 64 has an invalid length. [ 290.648557][T15949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.953424][T15982] netlink: 'syz.4.2516': attribute type 2 has an invalid length. [ 290.991259][T15984] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 291.098466][T15970] : entered promiscuous mode [ 291.497036][T16027] tipc: Enabled bearer , priority 0 [ 291.537448][T16027] syzkaller0: entered promiscuous mode [ 291.542925][T16027] syzkaller0: entered allmulticast mode [ 291.552608][T16027] tipc: Resetting bearer [ 291.564835][T16026] tipc: Resetting bearer [ 291.681089][T16037] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 292.905516][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 292.913588][ C1] lec:lec_tx_timeout: lec0 [ 292.918228][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.011694][T16026] tipc: Disabling bearer [ 293.294044][T16069] ipvlan0: entered promiscuous mode [ 293.800415][T16116] __nla_validate_parse: 2 callbacks suppressed [ 293.800434][T16116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2547'. [ 293.827572][T16108] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2546'. [ 293.846209][T16116] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2547'. [ 294.260722][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2554'. [ 294.430804][T16142] ip6t_REJECT: ECHOREPLY is not supported [ 294.678032][T16156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2561'. [ 294.800308][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2562'. [ 294.867855][T16164] bridge0: port 5(batadv6) entered blocking state [ 294.874506][T16164] bridge0: port 5(batadv6) entered disabled state [ 294.892383][T16169] netlink: 'syz.1.2564': attribute type 1 has an invalid length. [ 294.915510][T16164] batadv6: entered allmulticast mode [ 294.922591][T16164] batadv6: entered promiscuous mode [ 294.927950][T16169] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2564'. [ 294.955143][T16169] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2564'. [ 295.012260][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 295.167500][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 295.176907][T16179] netlink: 'syz.3.2567': attribute type 18 has an invalid length. [ 295.233172][T16192] netlink: 'syz.4.2569': attribute type 2 has an invalid length. [ 295.374345][T13154] batman_adv: batadv6: IGMP Querier appeared [ 295.380426][T13154] batman_adv: batadv6: MLD Querier appeared [ 295.418831][T16171] lo speed is unknown, defaulting to 1000 [ 295.448704][T16171] lo speed is unknown, defaulting to 1000 [ 296.004486][T16200] lo speed is unknown, defaulting to 1000 [ 296.024660][T16200] lo speed is unknown, defaulting to 1000 [ 296.846680][T16213] lo speed is unknown, defaulting to 1000 [ 296.853990][T16213] lo speed is unknown, defaulting to 1000 [ 297.580106][T16263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.899696][T16270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.935098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 297.943189][ C1] lec:lec_tx_timeout: lec0 [ 297.947917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.018544][T16272] macsec1: entered promiscuous mode [ 298.038940][T16272] bond6: entered promiscuous mode [ 298.107924][T16272] bond6: left promiscuous mode [ 298.847792][T16321] __nla_validate_parse: 10 callbacks suppressed [ 298.847812][T16321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2594'. [ 298.899757][T16326] netlink: 'syz.2.2594': attribute type 2 has an invalid length. [ 299.037721][T16326] hmac(sha224: entered promiscuous mode [ 299.438335][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2599'. [ 299.474254][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 299.564016][T16358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.675699][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2602'. [ 299.856025][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 299.913547][T16380] netlink: 'syz.1.2605': attribute type 13 has an invalid length. [ 299.926669][T16380] gretap0: refused to change device tx_queue_len [ 299.933043][T16380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.340218][T16414] netlink: 'syz.4.2612': attribute type 1 has an invalid length. [ 300.732381][T16423] batadv0: left promiscuous mode [ 300.751078][T16423] wg1: left promiscuous mode [ 300.758647][T16423] wg1: left allmulticast mode [ 300.781033][T16423] bond5: left allmulticast mode [ 300.792911][T16423] bridge7: left promiscuous mode [ 300.808565][T16423] bridge7: left allmulticast mode [ 300.826722][T16423] erspan1: left promiscuous mode [ 300.833858][T16423] erspan1: left allmulticast mode [ 300.867981][T16423] geneve2: left promiscuous mode [ 300.877963][T16423] geneve2: left allmulticast mode [ 300.914226][T16423] bond7: left promiscuous mode [ 300.921460][T16423] vlan0: left promiscuous mode [ 300.932787][T16423] bridge0: left promiscuous mode [ 300.941809][T16406] lo speed is unknown, defaulting to 1000 [ 300.947690][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.957881][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.966808][T16406] lo speed is unknown, defaulting to 1000 [ 300.973250][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.999342][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.192506][T16473] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2626'. [ 302.509305][T16479] xt_cgroup: invalid path, errno=-2 [ 302.557628][T16485] netlink: 'syz.4.2629': attribute type 21 has an invalid length. [ 302.575201][T16485] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 302.616868][T16485] netlink: 'syz.4.2629': attribute type 2 has an invalid length. [ 302.641930][T16485] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.2629'. [ 302.670761][T16492] netlink: 'syz.2.2631': attribute type 11 has an invalid length. [ 302.794839][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 302.811543][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 302.821605][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2633'. [ 302.822415][T16499] sctp: [Deprecated]: syz.1.2633 (pid 16499) Use of int in maxseg socket option. [ 302.822415][T16499] Use struct sctp_assoc_value instead [ 302.857761][T16496] tipc: Invalid UDP bearer configuration [ 302.857808][T16496] tipc: Enabling of bearer rejected, failed to enable media [ 302.955075][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 302.963108][ C1] lec:lec_tx_timeout: lec0 [ 302.967780][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.013439][T16506] netlink: 'syz.2.2634': attribute type 12 has an invalid length. [ 303.029438][T16505] netlink: 'syz.2.2634': attribute type 7 has an invalid length. [ 303.039726][T16505] netlink: 'syz.2.2634': attribute type 8 has an invalid length. [ 303.105414][T16517] netlink: 'syz.3.2638': attribute type 89 has an invalid length. [ 303.384519][T16536] netlink: 'syz.4.2644': attribute type 9 has an invalid length. [ 303.652002][T16557] Cannot find add_set index 2 as target [ 303.932027][T16572] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 304.029270][T16573] vlan3: entered promiscuous mode [ 304.034344][T16573] ip6gretap0: entered promiscuous mode [ 304.053146][T16567] x_tables: unsorted entry at hook 3 [ 304.088697][T16582] __nla_validate_parse: 5 callbacks suppressed [ 304.088716][T16582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2655'. [ 304.205284][T16584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.329012][T16595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2659'. [ 304.339491][T16593] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2659'. [ 304.759404][T16616] batadv_slave_1: entered promiscuous mode [ 304.789110][T16615] batadv_slave_1: left promiscuous mode [ 304.855991][T16621] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2665'. [ 304.865266][T16621] geneve0: entered allmulticast mode [ 305.168439][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2671'. [ 305.180591][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2672'. [ 305.236202][T16647] xt_TCPMSS: Only works on TCP SYN packets [ 305.247802][T16647] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 305.266645][T16647] openvswitch: netlink: Message has 16 unknown bytes. [ 305.285896][T16647] validate_nla: 4 callbacks suppressed [ 305.285912][T16647] netlink: 'syz.3.2673': attribute type 10 has an invalid length. [ 305.294962][T16650] geneve3: entered promiscuous mode [ 305.310068][T13150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.326762][T16643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2672'. [ 305.345182][T13150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.361009][T13150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.398996][T13150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.443537][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 305.482103][T16663] ip6gre0: left promiscuous mode [ 305.491281][T16667] netlink: 'syz.4.2680': attribute type 3 has an invalid length. [ 305.503761][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 305.505808][T16663] dummy0: left allmulticast mode [ 305.531266][T16663] veth1_macvtap: left promiscuous mode [ 305.552254][T16663] vlan1: left allmulticast mode [ 305.565945][T16663] veth1_macvtap: left allmulticast mode [ 305.589877][T16663] bond5: left promiscuous mode [ 305.618001][T16663] bond5: left allmulticast mode [ 305.634815][T16663] bond6: left promiscuous mode [ 305.651154][T16663] bridge4: left promiscuous mode [ 305.666656][T16663] geneve4: left promiscuous mode [ 305.680689][T16663] macsec1: left promiscuous mode [ 305.695293][T16663] bond9: left promiscuous mode [ 305.704063][T16663] bridge6: left allmulticast mode [ 305.714212][T16663] bond12: left promiscuous mode [ 305.720787][T16663] gretap2: left promiscuous mode [ 305.726524][T16663] vti0: left promiscuous mode [ 305.727776][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 305.731364][T16663] vti0: left allmulticast mode [ 305.769955][T16672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.836239][T16653] lo speed is unknown, defaulting to 1000 [ 305.852475][T16653] lo speed is unknown, defaulting to 1000 [ 305.899903][T16682] sctp: [Deprecated]: syz.1.2682 (pid 16682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.899903][T16682] Use struct sctp_sack_info instead [ 305.991074][T16688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.183424][T16665] lo speed is unknown, defaulting to 1000 [ 306.358780][T16665] lo speed is unknown, defaulting to 1000 [ 306.483714][T16708] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 306.729257][T16720] erspan0: entered allmulticast mode [ 306.762764][T16725] veth0_to_team: entered promiscuous mode [ 306.773692][T16725] veth0_to_team: left promiscuous mode [ 306.822473][T16727] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 306.830548][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.854657][T16729] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.876703][T16703] bridge0: port 6(ip6gretap0) entered blocking state [ 306.883822][T16703] bridge0: port 6(ip6gretap0) entered disabled state [ 306.893904][T16703] ip6gretap0: entered allmulticast mode [ 306.910257][T16703] ip6gretap0: entered promiscuous mode [ 307.510187][T16763] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 307.551173][T16763] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 308.573954][T16831] netlink: 'syz.0.2728': attribute type 13 has an invalid length. [ 308.588520][T16832] netlink: 'syz.1.2725': attribute type 1 has an invalid length. [ 308.687999][T16832] 8021q: adding VLAN 0 to HW filter on device bond13 [ 308.745079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 308.753150][ C1] lec:lec_tx_timeout: lec0 [ 308.757936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.772389][T16841] bond13: (slave veth11): Enslaving as an active interface with a down link [ 308.831494][T16850] bridge10: entered promiscuous mode [ 308.847221][T16850] bridge10: entered allmulticast mode [ 308.917248][T16850] syzkaller0: entered promiscuous mode [ 308.922772][T16850] syzkaller0: entered allmulticast mode [ 309.008694][T16850] netlink: 'syz.0.2732': attribute type 1 has an invalid length. [ 309.035526][T16850] netlink: 'syz.0.2732': attribute type 2 has an invalid length. [ 309.043301][T16850] netlink: 'syz.0.2732': attribute type 1 has an invalid length. [ 309.314645][T16881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.322289][T16882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.354407][T16840] lo speed is unknown, defaulting to 1000 [ 309.364337][T16840] lo speed is unknown, defaulting to 1000 [ 309.426169][T16887] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 309.727121][T16911] __nla_validate_parse: 81 callbacks suppressed [ 309.727141][T16911] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2746'. [ 309.758655][T16913] syzkaller1: entered promiscuous mode [ 309.764166][T16913] syzkaller1: entered allmulticast mode [ 309.958468][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 310.025796][T16923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2751'. [ 310.057130][T16904] lo speed is unknown, defaulting to 1000 [ 310.059350][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2749'. [ 310.073681][T16904] lo speed is unknown, defaulting to 1000 [ 310.192289][T16930] gretap3: entered promiscuous mode [ 310.342894][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2755'. [ 310.352670][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 310.470514][T16933] bridge0: entered allmulticast mode [ 310.476197][T16933] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 310.748865][T16960] veth1_macvtap: left promiscuous mode [ 310.754377][T16960] macsec0: entered promiscuous mode [ 310.814896][T16960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2761'. [ 310.832947][T16960] veth1_macvtap: entered promiscuous mode [ 310.868773][T16960] macsec0: left promiscuous mode [ 311.071299][T16972] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.101596][T16972] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.117707][T16972] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 311.206089][T16980] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2767'. [ 311.240956][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 311.310424][T16984] openvswitch: netlink: Flow key attr not present in new flow. [ 311.440658][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2768'. [ 311.477050][T16972] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.488490][T16972] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.499016][T16972] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 311.610759][T16972] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.622068][T16972] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.638189][T16972] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 311.834998][T16972] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.864265][T16972] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.888046][T16972] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 311.934865][T17014] validate_nla: 3 callbacks suppressed [ 311.934886][T17014] netlink: 'syz.1.2772': attribute type 3 has an invalid length. [ 312.015765][T17017] netlink: 'syz.2.2773': attribute type 5 has an invalid length. [ 312.156783][T13154] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.166065][T13154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.174625][T13154] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 312.207305][T13154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.215993][T13154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.224350][T13154] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 312.254657][T17035] netlink: 'syz.4.2776': attribute type 11 has an invalid length. [ 312.256356][T13154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.262704][T17035] netlink: 'syz.4.2776': attribute type 4 has an invalid length. [ 312.279018][T17035] netlink: 'syz.4.2776': attribute type 5 has an invalid length. [ 312.299503][T17034] openvswitch: netlink: Actions may not be safe on all matching packets [ 312.306775][T13154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.309062][T17035] netlink: 'syz.4.2776': attribute type 6 has an invalid length. [ 312.335938][T13154] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 312.370908][T13154] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.388553][T13154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.407146][T13154] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 312.480382][T17045] bridge0: port 1(batadv0) entered blocking state [ 312.487016][T17045] bridge0: port 1(batadv0) entered disabled state [ 312.493632][T17045] batadv0: entered allmulticast mode [ 312.503132][T17045] batadv0: entered promiscuous mode [ 312.536008][T17041] batadv0: left allmulticast mode [ 312.546330][T17041] batadv0: left promiscuous mode [ 312.555345][T17041] bridge0: port 1(batadv0) entered disabled state [ 312.639728][T17025] lo speed is unknown, defaulting to 1000 [ 312.647370][T17025] lo speed is unknown, defaulting to 1000 [ 312.898977][T17061] openvswitch: netlink: Flow key attr not present in new flow. [ 313.530789][T17095] sctp: [Deprecated]: syz.2.2792 (pid 17095) Use of int in max_burst socket option. [ 313.530789][T17095] Use struct sctp_assoc_value instead [ 313.577030][T17097] sctp: [Deprecated]: syz.2.2792 (pid 17097) Use of int in max_burst socket option. [ 313.577030][T17097] Use struct sctp_assoc_value instead [ 313.785078][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 313.793117][ C1] lec:lec_tx_timeout: lec0 [ 313.797876][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.085799][ T29] audit: type=1800 audit(1771736884.246:6): pid=17131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2803" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2926 res=0 errno=0 [ 314.198001][T17090] lo speed is unknown, defaulting to 1000 [ 314.209470][T17144] netlink: 'syz.3.2806': attribute type 10 has an invalid length. [ 314.229642][T17090] lo speed is unknown, defaulting to 1000 [ 314.245863][T17144] syz_tun: entered promiscuous mode [ 314.259457][T17144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 314.435968][T17156] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 314.680405][T17165] syzkaller0: entered promiscuous mode [ 314.695574][T17165] syzkaller0: entered allmulticast mode [ 314.774934][T17170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.304814][T17195] __nla_validate_parse: 7 callbacks suppressed [ 315.304831][T17195] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2824'. [ 315.355987][T17198] vlan3: entered allmulticast mode [ 315.361156][T17198] veth0_to_bond: entered allmulticast mode [ 315.448844][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 315.526142][T17206] tipc: Enabled bearer , priority 0 [ 315.534678][T17206] syzkaller0: entered promiscuous mode [ 315.542742][T17206] syzkaller0: entered allmulticast mode [ 315.559030][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'. [ 315.585277][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'. [ 315.594823][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'. [ 315.608469][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'. [ 315.642798][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 315.667081][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 315.708380][T17213] SET target dimension over the limit! [ 315.723347][T17213] netlink: 'syz.4.2833': attribute type 6 has an invalid length. [ 315.743346][T17213] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2833'. [ 315.768150][T17211] tipc: Resetting bearer [ 315.818318][T17232] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 315.830094][T17232] tipc: Enabled bearer , priority 10 [ 316.154441][T17248] hsr0: left allmulticast mode [ 316.173142][T17248] hsr_slave_0: left allmulticast mode [ 316.188752][T17248] hsr_slave_1: left allmulticast mode [ 316.201721][T17248] hsr0: left promiscuous mode [ 316.213984][T17248] bridge0: port 1(hsr0) entered disabled state [ 316.232643][T17248] bridge_slave_1: left allmulticast mode [ 316.250113][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.260476][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.269808][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.279625][T17248] bridge_slave_1: left promiscuous mode [ 316.286408][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.294266][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.307755][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.381236][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.389193][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.396776][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.410313][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.418121][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.476181][T17205] tipc: Resetting bearer [ 316.495934][T17205] tipc: Disabling bearer [ 316.558037][ T5825] bond7: (slave syz_tun): Releasing backup interface [ 316.965495][T17273] netlink: 9395 bytes leftover after parsing attributes in process `syz.3.2848'. [ 316.997611][T17273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.085170][T17250] lo speed is unknown, defaulting to 1000 [ 317.093519][T17283] xt_recent: Unsupported userspace flags (000000b1) [ 317.112146][T17250] lo speed is unknown, defaulting to 1000 [ 317.380679][T13177] bridge_slave_1: left allmulticast mode [ 317.393723][T13177] bridge_slave_1: left promiscuous mode [ 317.417399][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.517916][T13177] bridge_slave_0: left allmulticast mode [ 317.523613][T13177] bridge_slave_0: left promiscuous mode [ 317.535383][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.813851][T13177] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 318.088872][T13177] bond11 (unregistering): (slave bridge5): Releasing active interface [ 318.250873][T13177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.260943][T13177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.270745][T13177] bond0 (unregistering): Released all slaves [ 318.280534][T13177] bond1 (unregistering): Released all slaves [ 318.296401][T13177] bond2 (unregistering): (slave bond3): Releasing backup interface [ 318.304353][T13177] bond3 (unregistering): left promiscuous mode [ 318.311428][T13177] bond2 (unregistering): Released all slaves [ 318.326309][T13177] bond3 (unregistering): Released all slaves [ 318.338728][T13177] bond4 (unregistering): Released all slaves [ 318.353012][T13177] bond5 (unregistering): Released all slaves [ 318.372083][T13177] bond6 (unregistering): Released all slaves [ 318.384579][T13177] bond7 (unregistering): Released all slaves [ 318.399699][T13177] bond8 (unregistering): Released all slaves [ 318.416701][T13177] bond9 (unregistering): Released all slaves [ 318.430939][T13177] bond10 (unregistering): Released all slaves [ 318.443394][T13177] bond11 (unregistering): Released all slaves [ 318.467152][T13177] bond12 (unregistering): Released all slaves [ 318.480467][T13177] bond13 (unregistering): (slave veth11): Releasing active interface [ 318.490179][T13177] bond13 (unregistering): Released all slaves [ 318.505416][ T5143] Bluetooth: hci5: command tx timeout [ 318.522950][T17305] erspan0: left promiscuous mode [ 318.547858][T17305] bridge0: port 6(ip6gretap0) entered blocking state [ 318.554693][T17305] bridge0: port 6(ip6gretap0) entered forwarding state [ 318.562365][T17305] bridge0: left allmulticast mode [ 318.570146][T17305] bond0: left promiscuous mode [ 318.579847][T17305] syz_tun: left promiscuous mode [ 318.589384][T17305] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.628141][T13177] : left promiscuous mode [ 318.721163][T17313] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 318.730081][T17315] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 318.749497][T13177] : left promiscuous mode [ 318.805104][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.813125][ C1] lec:lec_tx_timeout: lec0 [ 318.817784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.866946][T17250] chnl_net:caif_netlink_parms(): no params data found [ 318.957147][T13177] IPVS: stopping master sync thread 10498 ... [ 319.087068][T17250] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.094329][T17250] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.101941][T17250] bridge_slave_0: entered allmulticast mode [ 319.109293][T17250] bridge_slave_0: entered promiscuous mode [ 319.121666][T17250] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.142724][T17250] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.150591][T17250] bridge_slave_1: entered allmulticast mode [ 319.151321][T17323] can: request_module (can-proto-3) failed. [ 319.158902][T17250] bridge_slave_1: entered promiscuous mode [ 319.203774][T17250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.217723][T17250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.273002][T17250] team0: Port device team_slave_0 added [ 319.281201][T17250] team0: Port device team_slave_1 added [ 319.309104][T17250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.316407][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.342604][T17250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.355704][T17250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.362651][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.390414][T17250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.443583][T17250] hsr_slave_0: entered promiscuous mode [ 319.451648][T17250] hsr_slave_1: entered promiscuous mode [ 319.459770][T17250] debugfs: 'hsr0' already exists in 'hsr' [ 319.465805][T17250] Cannot create hsr debugfs directory [ 319.923323][T13177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.932764][T13177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.999960][T17275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.305334][T13177] team0 (unregistering): Port device 26 removed [ 320.323639][T13177] team0 (unregistering): Port device team_slave_0 removed [ 320.392374][T13177] team0 (unregistering): Port device dummy0 removed [ 320.435402][ T13] smc: removing ib device sqz0 [ 320.580393][T13154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.586119][ T5143] Bluetooth: hci5: command tx timeout [ 320.621588][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2861'. [ 320.807227][T13154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.840861][T13154] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.938510][T13154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.178912][T17250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.276264][T17250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.353647][T17250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.413533][T17250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.822336][T17408] netlink: zone id is out of range [ 321.847835][T17408] netlink: zone id is out of range [ 321.853050][T17408] netlink: zone id is out of range [ 321.911029][T17408] netlink: zone id is out of range [ 321.918485][T17414] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 321.923044][T17250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.933081][T17408] netlink: zone id is out of range [ 321.939081][T17408] netlink: zone id is out of range [ 321.947731][T17415] wg1: entered promiscuous mode [ 321.955917][T17415] wg1: entered allmulticast mode [ 321.984723][T17408] netlink: zone id is out of range [ 321.990172][T17408] netlink: zone id is out of range [ 322.015960][T17408] net_ratelimit: 8 callbacks suppressed [ 322.015977][T17408] netlink: zone id is out of range [ 322.040575][T17408] netlink: zone id is out of range [ 322.046038][T17408] netlink: zone id is out of range [ 322.051451][T17408] netlink: zone id is out of range [ 322.057405][T17408] netlink: zone id is out of range [ 322.061731][T17414] 8021q: adding VLAN 0 to HW filter on device bond12 [ 322.064605][T17408] netlink: zone id is out of range [ 322.075283][T17408] netlink: zone id is out of range [ 322.080693][T17408] netlink: zone id is out of range [ 322.086282][T17408] netlink: zone id is out of range [ 322.091584][T17408] netlink: zone id is out of range [ 322.126697][T17417] bond12: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 322.153353][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'. [ 322.171487][T17420] bond12: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 322.667954][ T5143] Bluetooth: hci5: command tx timeout [ 322.767546][T17250] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.867261][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.874454][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.900733][T13154] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.907932][T13154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.988679][T17458] netlink: 'syz.4.2884': attribute type 25 has an invalid length. [ 323.211240][T17476] veth1_to_bond: entered allmulticast mode [ 323.243189][T17475] veth1_to_bond: left allmulticast mode [ 323.638310][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.666037][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 323.718617][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'. [ 323.741578][T17250] veth0_vlan: entered promiscuous mode [ 323.810401][T17506] 8021q: adding VLAN 0 to HW filter on device bond8 [ 323.825088][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.833251][ C1] lec:lec_tx_timeout: lec0 [ 323.838124][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.888672][T17250] veth1_vlan: entered promiscuous mode [ 323.978521][T17525] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2896'. [ 324.040691][T17250] veth0_macvtap: entered promiscuous mode [ 324.088183][T17250] veth1_macvtap: entered promiscuous mode [ 324.127768][T17250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.149547][T17250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.316584][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 324.343078][T17534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.360855][T13177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.397991][T13177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.422443][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.440644][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.448773][T17546] netlink: 'syz.3.2901': attribute type 66 has an invalid length. [ 324.550569][T13177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.573443][T13177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.626493][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 324.746932][ T5143] Bluetooth: hci5: command tx timeout [ 324.783931][T13150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.803962][T13150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.871217][T17564] netlink: 'syz.2.2904': attribute type 11 has an invalid length. [ 324.871239][T13150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.891222][T17565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2903'. [ 324.895712][T13150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.915202][T17563] netlink: 'syz.3.2905': attribute type 1 has an invalid length. [ 324.945308][T17563] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2905'. [ 325.009285][T17565] bond0: entered promiscuous mode [ 325.039966][T17570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2906'. [ 325.080208][T17565] bond_slave_0: entered promiscuous mode [ 325.106673][T17565] bond_slave_1: entered promiscuous mode [ 325.129771][T17565] team0: entered promiscuous mode [ 325.141268][T17565] team_slave_0: entered promiscuous mode [ 325.159534][T17585] netlink: 'syz.3.2909': attribute type 11 has an invalid length. [ 325.163861][T17565] team_slave_1: entered promiscuous mode [ 325.175227][T17565] bridge5: entered promiscuous mode [ 325.190223][T17565] bond0: left promiscuous mode [ 325.199504][T17565] bond_slave_0: left promiscuous mode [ 325.205275][T17565] bond_slave_1: left promiscuous mode [ 325.212636][T17565] team0: left promiscuous mode [ 325.219472][T17565] team_slave_0: left promiscuous mode [ 325.226115][T17565] team_slave_1: left promiscuous mode [ 325.231891][T17565] bridge5: left promiscuous mode [ 325.262804][T17572] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 325.289988][T17570] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 325.726977][T17619] __nla_validate_parse: 6 callbacks suppressed [ 325.727000][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2914'. [ 325.828843][T17619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2914'. [ 325.856384][T17624] tipc: Enabled bearer , priority 0 [ 325.948849][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.958695][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.960923][T17622] tipc: Disabling bearer [ 325.969638][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.980840][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.989145][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.273618][T17640] syzkaller1: entered promiscuous mode [ 326.284589][T17640] syzkaller1: entered allmulticast mode [ 326.588287][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'. [ 326.811877][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'. [ 326.970355][T17669] netlink: 'syz.0.2927': attribute type 11 has an invalid length. [ 326.988820][T17669] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2927'. [ 328.026523][ T5836] Bluetooth: hci3: command tx timeout [ 328.088968][T13150] team0: Port device bridge5 removed [ 328.214213][T13150] bond5 (unregistering): (slave bridge7): Releasing active interface [ 328.399316][T13150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.412913][T13150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.423776][T13150] bond0 (unregistering): (slave team0): Releasing backup interface [ 328.432857][T13150] bond0 (unregistering): Released all slaves [ 328.442524][T13150] bond1 (unregistering): Released all slaves [ 328.458382][T13150] bond2 (unregistering): Released all slaves [ 328.471262][T13150] bond3 (unregistering): Released all slaves [ 328.483684][T13150] bond4 (unregistering): Released all slaves [ 328.504439][T13150] bond5 (unregistering): Released all slaves [ 328.517250][T13150] bond6 (unregistering): Released all slaves [ 328.530170][T13150] bond7 (unregistering): Released all slaves [ 328.549920][T13150] bond8 (unregistering): Released all slaves [ 328.580231][T17714] netdevsim netdevsim1: Direct firmware load for & failed with error -2 [ 328.585665][ T31] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 328.594577][T17714] netdevsim netdevsim1: Falling back to sysfs fallback for: & [ 328.617270][ T31] Not tainted syzkaller #0 [ 328.620355][T17626] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.623040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.653685][ T31] task:kworker/0:0H state:D stack:26536 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 328.666122][ T31] Workqueue: kblockd blk_mq_requeue_work [ 328.672035][ T31] Call Trace: [ 328.675421][ T31] [ 328.678374][ T31] __schedule+0x1585/0x5340 [ 328.682934][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.688266][ T31] ? __pfx___schedule+0x10/0x10 [ 328.693155][ T31] ? schedule+0x90/0x360 [ 328.698023][ T31] schedule+0x164/0x360 [ 328.706301][ T31] schedule_timeout+0x158/0x2c0 [ 328.713556][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 328.715746][T17719] vlan0: entered promiscuous mode [ 328.719286][ T31] ? __pfx_process_timeout+0x10/0x10 [ 328.729596][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 328.747538][ T31] ? prepare_to_wait_event+0x436/0x480 [ 328.748240][T13150] 9: left promiscuous mode [ 328.753049][ T31] nbd_queue_rq+0x857/0x1100 [ 328.753091][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 328.753115][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 328.795129][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 328.805322][ T31] ? sbitmap_get+0x229/0x390 [ 328.809964][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 328.822735][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 328.836901][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 328.843307][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 328.850216][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.850244][ C1] lec:lec_tx_timeout: lec0 [ 328.858396][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.895164][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 328.915137][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 328.925108][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 328.930411][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 328.946792][ T31] blk_mq_requeue_work+0x71c/0x780 [ 328.951966][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 328.985142][ T31] ? process_scheduled_works+0xa25/0x1830 [ 329.035176][ T31] ? process_scheduled_works+0xa25/0x1830 [ 329.040959][ T31] process_scheduled_works+0xb02/0x1830 [ 329.068517][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.074572][ T31] ? assign_work+0x3d5/0x5e0 [ 329.095080][ T31] worker_thread+0xa50/0xfc0 [ 329.099753][ T31] kthread+0x388/0x470 [ 329.103847][ T31] ? __pfx_worker_thread+0x10/0x10 [ 329.123964][ T31] ? __pfx_kthread+0x10/0x10 [ 329.132594][ T31] ret_from_fork+0x51e/0xb90 [ 329.137324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.142493][ T31] ? __switch_to+0xc7d/0x1450 [ 329.147793][ T31] ? __pfx_kthread+0x10/0x10 [ 329.152415][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.157339][ T31] [ 329.178532][ T31] [ 329.178532][ T31] Showing all locks held in the system: [ 329.244164][ T31] 1 lock held by pool_workqueue_/3: [ 329.277715][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 329.305389][ T31] 4 locks held by kworker/0:0H/11: [ 329.321948][ T31] #0: ffff88801dec4d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 329.355117][ T31] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 329.405132][ T31] #2: ffff8880263d2998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 329.425153][ T31] #3: ffff888027168780 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 329.441455][ T31] 1 lock held by khungtaskd/31: [ 329.455371][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 329.475134][ T31] 2 locks held by getty/5579: [ 329.495130][ T31] #0: ffff888032d400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 329.504955][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 329.535149][ T31] 1 lock held by syz-executor/5832: [ 329.540522][ T31] 2 locks held by kworker/1:6/5937: [ 329.546053][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 329.575162][ T31] #1: ffffc900045bfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 329.606981][ T31] 1 lock held by udevd/6504: [ 329.611612][ T31] #0: ffff88802709e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 329.645217][ T31] 5 locks held by kworker/u8:20/13150: [ 329.650719][ T31] #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 329.715087][ T31] #1: ffffc900057cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 329.732115][ T31] #2: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 329.743161][ T31] #3: ffffffff8ff469a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 329.752384][ T31] #4: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 329.762439][ T31] 4 locks held by syz-executor/17250: [ 329.767910][ T31] #0: ffff88807bd74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 329.778198][ T31] #1: ffff88807bd740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 329.790014][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 329.800241][ T31] #3: ffff88802f9ccaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 329.809695][ T31] 2 locks held by syz-executor/17626: [ 329.815254][ T31] #0: ffffffff8f33da68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 329.825507][ T31] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 329.834590][ T31] 1 lock held by syz.3.2923/17652: [ 329.839817][ T31] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 329.849056][ T31] 1 lock held by syz.0.2934/17704: [ 329.854169][ T31] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 329.875181][ T31] [ 329.882365][ T31] ============================================= [ 329.882365][ T31] [ 329.925119][ T31] NMI backtrace for cpu 1 [ 329.925139][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 329.925158][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.925168][ T31] Call Trace: [ 329.925174][ T31] [ 329.925182][ T31] dump_stack_lvl+0xe8/0x150 [ 329.925206][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 329.925223][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.925244][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 329.925259][ T31] sys_info+0x135/0x170 [ 329.925274][ T31] watchdog+0xfd9/0x1030 [ 329.925297][ T31] ? watchdog+0x21a/0x1030 [ 329.925319][ T31] kthread+0x388/0x470 [ 329.925334][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.925355][ T31] ? __pfx_kthread+0x10/0x10 [ 329.925372][ T31] ret_from_fork+0x51e/0xb90 [ 329.925392][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.925408][ T31] ? __switch_to+0xc7d/0x1450 [ 329.925427][ T31] ? __pfx_kthread+0x10/0x10 [ 329.925442][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.925474][ T31] [ 329.925479][ T31] Sending NMI from CPU 1 to CPUs 0: [ 330.036747][ C0] NMI backtrace for cpu 0 [ 330.036767][ C0] CPU: 0 UID: 0 PID: 13177 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(full) [ 330.036784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.036794][ C0] Workqueue: krds_cp_wq#12/0 rds_connect_worker [ 330.036820][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 330.036839][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 ab 59 83 f5 cc [ 330.036851][ C0] RSP: 0018:ffffc90000007998 EFLAGS: 00000282 [ 330.036863][ C0] RAX: 000000000000000e RBX: ffff8881404378c0 RCX: 0000000000000100 [ 330.036873][ C0] RDX: 0000000000000002 RSI: ffffffff8def18d2 RDI: 00000000ffffffff [ 330.036883][ C0] RBP: 0000000000a12110 R08: ffffffff901172b7 R09: 1ffffffff2022e56 [ 330.036893][ C0] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: ffff88808738b140 [ 330.036903][ C0] R13: 0000000000000000 R14: ffffea00021ce2c0 R15: ffff88805187509c [ 330.036913][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 330.036925][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.036935][ C0] CR2: 00007ffd235f8038 CR3: 000000003701e000 CR4: 00000000003526f0 [ 330.036947][ C0] Call Trace: [ 330.036952][ C0] [ 330.036958][ C0] kmem_cache_free+0x100/0x630 [ 330.036975][ C0] ? ip6_mc_input+0x8de/0xbd0 [ 330.036997][ C0] ip6_mc_input+0x8de/0xbd0 [ 330.037019][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 330.037039][ C0] ? skb_dst+0x71/0xd0 [ 330.037058][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 330.037078][ C0] NF_HOOK+0x336/0x3c0 [ 330.037099][ C0] ? __pfx_sock_wfree+0x10/0x10 [ 330.037118][ C0] ? skb_orphan+0x4f/0xd0 [ 330.037140][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 330.037159][ C0] ? NF_HOOK+0x9e/0x3c0 [ 330.037176][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 330.037196][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 330.037220][ C0] ? process_backlog+0x3eb/0x1950 [ 330.037237][ C0] process_backlog+0x7dd/0x1950 [ 330.037263][ C0] __napi_poll+0xae/0x340 [ 330.037277][ C0] ? skb_defer_free_flush+0x233/0x260 [ 330.037295][ C0] net_rx_action+0x627/0xf70 [ 330.037319][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 330.037340][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 330.037367][ C0] handle_softirqs+0x22a/0x870 [ 330.037387][ C0] ? do_softirq+0x76/0xd0 [ 330.037407][ C0] ? tcp_sock_set_nodelay+0x2a/0x180 [ 330.037422][ C0] do_softirq+0x76/0xd0 [ 330.037438][ C0] [ 330.037443][ C0] [ 330.037448][ C0] __local_bh_enable_ip+0xf8/0x130 [ 330.037465][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 330.037482][ C0] rds_tcp_tune+0xc7/0x940 [ 330.037497][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 330.037509][ C0] ? __sock_create+0x86d/0x9d0 [ 330.037529][ C0] rds_tcp_conn_path_connect+0x2f9/0x930 [ 330.037550][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 330.037563][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 330.037588][ C0] rds_connect_worker+0x1d8/0x290 [ 330.037605][ C0] ? process_scheduled_works+0xa25/0x1830 [ 330.037625][ C0] process_scheduled_works+0xb02/0x1830 [ 330.037656][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 330.037677][ C0] ? assign_work+0x3d5/0x5e0 [ 330.037701][ C0] worker_thread+0xa50/0xfc0 [ 330.037731][ C0] kthread+0x388/0x470 [ 330.037745][ C0] ? __pfx_worker_thread+0x10/0x10 [ 330.037762][ C0] ? __pfx_kthread+0x10/0x10 [ 330.037776][ C0] ret_from_fork+0x51e/0xb90 [ 330.037794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 330.037811][ C0] ? __switch_to+0xc7d/0x1450 [ 330.037828][ C0] ? __pfx_kthread+0x10/0x10 [ 330.037842][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.037870][ C0] [ 330.127975][ T5836] Bluetooth: hci3: command tx timeout [ 330.133639][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 330.133670][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 330.133691][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.133702][ T31] Call Trace: [ 330.133710][ T31] [ 330.133718][ T31] vpanic+0x56c/0xa60 [ 330.133745][ T31] ? __pfx___schedule+0x10/0x10 [ 330.133769][ T31] ? __pfx_vpanic+0x10/0x10 [ 330.133791][ T31] ? __pfx_console_unlock+0x10/0x10 [ 330.133822][ T31] panic+0xc5/0xd0 [ 330.133843][ T31] ? __pfx_panic+0x10/0x10 [ 330.133866][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 330.133889][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 330.133913][ T31] watchdog+0x1023/0x1030 [ 330.133949][ T31] ? watchdog+0x21a/0x1030 [ 330.133979][ T31] kthread+0x388/0x470 [ 330.133996][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.134017][ T31] ? __pfx_kthread+0x10/0x10 [ 330.134035][ T31] ret_from_fork+0x51e/0xb90 [ 330.134059][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.134078][ T31] ? __switch_to+0xc7d/0x1450 [ 330.134101][ T31] ? __pfx_kthread+0x10/0x10 [ 330.134118][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.134155][ T31] [ 330.140997][ T31] Kernel Offset: disabled