last executing test programs: 5.363234367s ago: executing program 4 (id=20214): epoll_create(0x400) pipe(&(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.323472578s ago: executing program 4 (id=20215): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 5.244572488s ago: executing program 4 (id=20216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x1, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) writev(r2, &(0x7f0000000300)=[{0x0}], 0x1) readv(r2, &(0x7f0000002940)=[{&(0x7f0000008c40)=""/4111, 0x100f}, {0x0}, {0x0}, {&(0x7f0000007940)=""/142, 0x8e}, {0x0}, {0x0}], 0x6) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) socket$inet(0x2, 0x3, 0x81) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 5.151620349s ago: executing program 2 (id=20217): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x2010, r2, 0xaa0f4000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8000000180081064e81f782db44b904021d080006007c09e8f655810a001500090014260b3cfc1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ed7a7cef4090000001fb791643a45e4ce1b14d6d909e42df3fa30dfe1d9d322fe7c9f8775730d16a4683f00000040fad95667e006dcdf63951f215ce3bb9a1009d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97019338705e8a1e2532bcfd436fa036d1a66665", 0xdf}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000300)={@remote, @rand_addr, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffa}], &(0x7f0000000140)='GPL\x00', 0x81, 0x1c, &(0x7f00000002c0)=""/28, 0x40f00, 0x10, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r2, r4, r0, r1, r4, r2, r1, r1], &(0x7f00000006c0)=[{0x0, 0x2, 0x5, 0x6}, {0x1, 0x3, 0xb, 0x7}], 0x10, 0x8}, 0x94) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800000042000100fffffffffddbdf2502000000100038800c001aea2de9661db580038008001100", @ANYRES32=r1, @ANYBLOB="100001800c00c800020000000000000024776b3991b138c94782f34fcb804c82599708862f3a2dea0b68d3812a905abf4df31cbd6763f65ce6ad1d1fb0a2077afd44d799c15069b1d715636b3228e2026357e67fcbc5dc6c0771a445b4d6d7d33fc8fb6cc5c7e9ddaebd3a48b5d85315f74c1cc184515a20ee3c164d97844d6b3378ec8c17c61316e88900ebf68e49c2219861b8"], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 4.924430468s ago: executing program 4 (id=20218): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) shutdown(r3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4085) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept(r2, 0x0, 0x0) 4.802027922s ago: executing program 4 (id=20219): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x400801) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, 0x0, &(0x7f0000000700)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b", 0x77}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0580506", 0x98}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb0", 0x9c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900b", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}]}]}, 0x38}}, 0x40000) 4.798496584s ago: executing program 2 (id=20220): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc2072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x2000004, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x44040011}, 0x20044004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e23, @local}}) socket$inet6(0xa, 0x2, 0xa2d) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000100039040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02000000000000000000da1e00000095ccab43128221b22545e79c34af3822042020c87ad7c160017d27e02dad9f170a2800770a60187fdf1a7d81df908bc8a94a04e6b0ef62df9e964c75cb2264728fcc1c1621d05d00321571c9e8bfeb2b2d499e88b98199a232c1340270d0609e667b84618aa0ab7f8c4f7888765eb6061cae6dca97e546"], 0x5c}}, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) close(0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffffffff000) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f00000001c0)=0xd, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) 4.152937721s ago: executing program 2 (id=20225): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x80, 0x6, 0x41}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x15, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.08169708s ago: executing program 0 (id=20226): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.01754314s ago: executing program 4 (id=20227): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r2, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmsg(r6, &(0x7f00000004c0)={&(0x7f0000000180), 0x80, &(0x7f0000000400)}, 0x2003) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000408050000000000006300000000000006000240000000000500030001000000"], 0x24}}, 0x0) bind$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 3.941028463s ago: executing program 0 (id=20228): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 3.895673718s ago: executing program 2 (id=20229): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) socket(0x10, 0x803, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000019480)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 3.879621994s ago: executing program 0 (id=20230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="e07d43fcedd78dd71068ef74db7fe96d4b80ca8afb5369a7e38af2f0e5d58678a58175f85807619aa810a94f99e61c80ba3691b9d107b1083a19ea3c256df094fcfd438a7d354ed9f721c9721dcf2ad4ad063c7745a2be818513e055b1f28c4caddd5016cdc6ed233a2036ed96588b9366013521b4b0e553a062e2f8be05213b6a4516af09c9f73056b8312e3b88329d15"], 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x4040040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000000)='*-\x00', 0x230c9f629679dce4, &(0x7f0000000180)={@align=0x100, {0xa, 0xc000, 0x80000000, 0x3}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x80000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0xa, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f1, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x2, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x7, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x7, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 3.774190335s ago: executing program 0 (id=20231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a801800"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.623024966s ago: executing program 3 (id=20232): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="f78b", 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x2, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x29, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r10, r10, &(0x7f0000000040)=0x8000000000000000, 0x9) ppoll(&(0x7f0000000280)=[{r10, 0x1000}, {r0, 0xc2}], 0x2, &(0x7f00000002c0), &(0x7f0000000340)={[0xffffffff00000001]}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000001c0)={r5, r10}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3.343298929s ago: executing program 3 (id=20234): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) close(r7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) writev(r6, &(0x7f0000000100), 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x218, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.900060245s ago: executing program 3 (id=20236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619}, 0x38) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00018000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="2000308014000400359f6ef711e7273d"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$netlink(0x10, 0x3, 0x5) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x2a, 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000480)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@null, @bcast, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)=@newtfilter={0x290, 0x2c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x258, 0x2, [@TCA_FLOWER_ACT={0x254, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1c9f1, 0x4, 0x10000005, 0x40, 0x7fffffff}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x74, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4f, 0xffffffffffffffff, 0xfffffd9a, 0x239}, 0x1}}]}, {0x2d, 0x6, "8bf01b0695fed30c1f4677250b62cdd1780137d3fd189770ef02870187967a74c366171c689954faa4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x108, 0x15, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6c000000, 0x5, 0x0, 0x81}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x1, 0x0, 0x5, 0x1000}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x0, 0x6, 0x4}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xe4, 0x7, 0x669f, 0x80}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xa5b, 0xffffffffffffffff, 0xa6bc, 0x19b5}, 0x64}}]}, {0x4e, 0x6, "ebc7009a32a2ab937e2a51957817c3758775e5920e6e5e6b9b25297971d4f794b77bd21789258b6e4e1bd606cadf279dad5410d8beea077ac2f980378ce40b2e426c5f4fa8c1a94f3a47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x84, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x0, 0x8, 0x9, 0xcdf}}]}, {0x3f, 0x6, "1ea8e949931341fc72f443f89e627c59509878d8fabaf469568a50d255aa5b14665f685dd178c1d27af8ff7232836e23f5f014e5036e66f9af425b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x290}}, 0x24000040) 2.846298882s ago: executing program 2 (id=20237): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3062b, 0x980c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25180000001800308014000400c1c6fcb751a3b5f4691be9f7cf7882bb08000300", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x20040080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000005c0)='xfrm0\x00') sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 2.609361606s ago: executing program 0 (id=20239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.524806791s ago: executing program 3 (id=20240): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) 2.39292s ago: executing program 3 (id=20242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x12}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1003}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {0x0, 0x0, 0x0, 0x1ff}, {}, {}, {0x8, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x1, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(r3, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r9, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r6, r4, 0x32, 0x14, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x131, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10f, 0x0, @opaque="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"}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xffff, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x48) r10 = syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.975528508s ago: executing program 1 (id=20243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/132, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) sendmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) getpeername$netlink(r0, 0x0, &(0x7f0000000100)) 1.100096163s ago: executing program 0 (id=20244): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept(r3, &(0x7f0000000280)=@generic, &(0x7f0000000140)=0x80) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0x7, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) close(0x3) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)={0x44, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0xc820) getsockname$packet(r9, 0x0, 0x0) 1.007777176s ago: executing program 1 (id=20245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, 0x0, 0x800) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3d, 0x107, 0x0, 0x7, {0x1, 0x7c}}, 0x14}}, 0x4010) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025008000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r7 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) close(r6) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 631.29201ms ago: executing program 1 (id=20246): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 420.300427ms ago: executing program 1 (id=20247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 266.87984ms ago: executing program 1 (id=20248): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) listen(0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}], 0x2, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$sock(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)="7ee8a49ccf0a17cee6e98b3d766a88eea99b4bac07aea94e9986ac8e3833ab68f0bc71e8dfc7deaa9db42b66f354d88299020c010bbfd56745eddf087ebd359a19992825edf3ff429ed8f1c0", 0x4c}, {0x0}, {&(0x7f0000000580)="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", 0x271}], 0x3}, 0x20000080) listen(0xffffffffffffffff, 0x0) 124.499901ms ago: executing program 1 (id=20249): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000015600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101540, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = accept4(r1, &(0x7f0000000280)=@ieee802154={0x24, @short}, 0x0, 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) socket(0x2a, 0x2, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) gettid() r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 38.798003ms ago: executing program 2 (id=20250): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x40010, 0x0, 0x0) read$alg(r3, &(0x7f0000000700)=""/244, 0xf4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x48, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xf, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28) 0s ago: executing program 3 (id=20251): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): 6][ C0] lec:lec_tx_timeout: lec0 [ 825.877695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 827.148458][T16073] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 827.149451][T16077] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 827.159120][T16036] syzkaller0 speed is unknown, defaulting to 1000 [ 827.185968][T16036] gre0 speed is unknown, defaulting to 1000 [ 827.306232][T16097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19008'. [ 827.467856][T16101] netlink: 'syz.2.19009': attribute type 13 has an invalid length. [ 828.283012][T16132] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 828.290968][T16132] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 828.299904][T16132] tipc: Resetting bearer [ 828.584940][T16148] netlink: 76 bytes leftover after parsing attributes in process `syz.1.19026'. [ 829.270896][T16141] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 829.279453][T16141] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 829.903085][T16182] syzkaller0: entered promiscuous mode [ 829.908864][T16182] syzkaller0: entered allmulticast mode [ 830.503559][T16192] syzkaller0: entered promiscuous mode [ 830.510925][T16192] syzkaller0: entered allmulticast mode [ 830.884513][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 830.892583][ C0] lec:lec_tx_timeout: lec0 [ 830.897320][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.232424][T16125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.464241][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19044'. [ 832.212665][T16224] tipc: Resetting bearer [ 832.489451][T16238] netlink: 'syz.4.19053': attribute type 4 has an invalid length. [ 832.508252][T16238] netlink: 'syz.4.19053': attribute type 4 has an invalid length. [ 832.580742][T16240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19054'. [ 832.887330][T16249] syzkaller0: entered promiscuous mode [ 832.905305][T16249] syzkaller0: entered allmulticast mode [ 833.001160][T16251] wg1 speed is unknown, defaulting to 1000 [ 833.181692][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19063'. [ 833.294046][T16251] syzkaller0 speed is unknown, defaulting to 1000 [ 833.343073][T16251] gre0 speed is unknown, defaulting to 1000 [ 833.815694][T16289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19072'. [ 833.828854][T16292] netlink: 'syz.0.19073': attribute type 14 has an invalid length. [ 834.722484][T16319] syzkaller0: entered promiscuous mode [ 834.728905][T16319] syzkaller0: entered allmulticast mode [ 834.824589][T16323] syzkaller0: entered promiscuous mode [ 834.831928][T16323] syzkaller0: entered allmulticast mode [ 834.973383][ T36] nci: nci_rsp_packet: unknown rsp opcode 0xd06 [ 834.994942][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19084'. [ 835.009972][T16338] ipvlan2: entered allmulticast mode [ 835.021507][T16338] syz_tun: entered allmulticast mode [ 835.048507][T16335] syzkaller0: entered promiscuous mode [ 835.054012][T16335] syzkaller0: entered allmulticast mode [ 835.203320][T16350] wg1 speed is unknown, defaulting to 1000 [ 835.369161][T16350] syzkaller0 speed is unknown, defaulting to 1000 [ 835.377629][T16350] gre0 speed is unknown, defaulting to 1000 [ 835.414142][T16356] syzkaller0: entered promiscuous mode [ 835.420286][T16356] syzkaller0: entered allmulticast mode [ 835.529033][T16358] Cannot find del_set index 1536 as target [ 835.543117][T16358] netlink: 'syz.2.19090': attribute type 39 has an invalid length. [ 835.684552][T16325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.687607][T16361] syzkaller0: entered promiscuous mode [ 835.699213][T16361] syzkaller0: entered allmulticast mode [ 835.707964][T16348] netlink: 'syz.1.19085': attribute type 1 has an invalid length. [ 835.727816][T16348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19085'. [ 835.904564][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 835.912669][ C0] lec:lec_tx_timeout: lec0 [ 835.917587][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 836.060591][T16372] netlink: 'syz.0.19095': attribute type 27 has an invalid length. [ 836.108216][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19097'. [ 836.130699][T16372] tipc: Resetting bearer [ 836.179862][T16372] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 836.219448][T16372] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 836.261363][T16372] bond5: left promiscuous mode [ 836.303562][T16372] veth13: left promiscuous mode [ 836.353006][T16372] team1: left promiscuous mode [ 836.357974][T16372] team1: left allmulticast mode [ 836.364023][T16372] team2: left promiscuous mode [ 836.369528][T16372] team2: left allmulticast mode [ 836.376366][T16372] ipip1: left promiscuous mode [ 836.428465][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.446740][T16387] bridge0: port 3(dummy0) entered blocking state [ 836.453641][T16387] bridge0: port 3(dummy0) entered listening state [ 836.462828][T16387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 836.657166][T16405] netlink: 'syz.4.19103': attribute type 1 has an invalid length. [ 836.740141][T16405] 8021q: adding VLAN 0 to HW filter on device bond21 [ 836.803301][T16410] bond0: (slave dummy0): Releasing backup interface [ 836.832155][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19108'. [ 836.851872][T16410] bond21: (slave dummy0): making interface the new active one [ 836.864350][T16410] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 836.891184][T16414] wg1 speed is unknown, defaulting to 1000 [ 836.939622][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19108'. [ 837.128941][T16414] syzkaller0 speed is unknown, defaulting to 1000 [ 837.138252][T16414] gre0 speed is unknown, defaulting to 1000 [ 837.271416][T16432] netlink: 140 bytes leftover after parsing attributes in process `syz.0.19112'. [ 837.281613][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19112'. [ 837.411361][T16436] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 837.420037][T16436] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 837.434110][T16436] tipc: Resetting bearer [ 837.668540][T16444] tap0: tun_chr_ioctl cmd 2148553947 [ 837.917192][T16456] syzkaller0: entered promiscuous mode [ 837.922704][T16456] syzkaller0: entered allmulticast mode [ 838.139478][T16462] tipc: Enabled bearer , priority 0 [ 838.239960][T16467] netlink: 'syz.2.19124': attribute type 1 has an invalid length. [ 838.323742][T16462] syzkaller0: entered promiscuous mode [ 838.339318][T16462] syzkaller0: entered allmulticast mode [ 838.355951][T16462] tipc: Resetting bearer [ 838.427010][T16467] 8021q: adding VLAN 0 to HW filter on device bond15 [ 838.468789][T16470] bond15: (slave geneve4): making interface the new active one [ 838.496333][T16470] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 838.565798][T16461] tipc: Resetting bearer [ 838.610317][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19126'. [ 839.641994][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19131'. [ 839.653353][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19131'. [ 840.037206][T16461] tipc: Disabling bearer [ 840.046372][ T1134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.924605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 840.932789][ C0] lec:lec_tx_timeout: lec0 [ 840.937354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 841.569326][T16499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 841.641094][T16500] bond8: (slave ip6gretap2): making interface the new active one [ 841.658276][T16500] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 841.700882][ T1134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.711269][ T1134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.751081][ T1134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.303237][T16556] xt_hashlimit: size too large, truncated to 1048576 [ 842.329131][T16553] netlink: 332 bytes leftover after parsing attributes in process `syz.0.19147'. [ 842.350444][T16553] netlink: 'syz.0.19147': attribute type 9 has an invalid length. [ 842.368978][T16553] netlink: 108 bytes leftover after parsing attributes in process `syz.0.19147'. [ 842.405862][T16553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19147'. [ 842.548687][T16569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19151'. [ 842.832186][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19156'. [ 842.996718][T16581] bond9: (slave vcan0): refused to change device type [ 843.047099][T16591] syzkaller0: entered promiscuous mode [ 843.055095][T16591] syzkaller0: entered allmulticast mode [ 843.262598][T16608] wg1 speed is unknown, defaulting to 1000 [ 843.267991][T16611] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 843.720232][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19172'. [ 843.750866][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19172'. [ 843.764839][T16608] syzkaller0 speed is unknown, defaulting to 1000 [ 843.773211][T16608] gre0 speed is unknown, defaulting to 1000 [ 844.169884][T16637] wg1 speed is unknown, defaulting to 1000 [ 844.449939][T16641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19176'. [ 844.585216][T16648] syzkaller0: entered promiscuous mode [ 844.595641][T16648] syzkaller0: entered allmulticast mode [ 844.666270][T16637] syzkaller0 speed is unknown, defaulting to 1000 [ 844.698022][T16637] gre0 speed is unknown, defaulting to 1000 [ 844.732190][T16652] syzkaller0: entered promiscuous mode [ 844.744854][T16652] syzkaller0: entered allmulticast mode [ 844.910186][T16657] syzkaller0: entered promiscuous mode [ 844.918549][T16657] syzkaller0: entered allmulticast mode [ 845.944509][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 845.952562][ C0] lec:lec_tx_timeout: lec0 [ 845.957433][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 845.996140][T16674] syzkaller0: entered promiscuous mode [ 846.001738][T16674] syzkaller0: entered allmulticast mode [ 846.242814][T16677] netlink: 'syz.2.19187': attribute type 1 has an invalid length. [ 846.367332][T16667] lec:lec_atm_close: lec0: Shut down! [ 846.367467][T16677] 8021q: adding VLAN 0 to HW filter on device bond16 [ 846.518546][T16683] vlan0: entered allmulticast mode [ 846.524965][T16683] bond16: entered allmulticast mode [ 846.573582][T16685] bond16: (slave geneve5): making interface the new active one [ 846.581460][T16685] geneve5: entered allmulticast mode [ 846.592958][T16685] bond16: (slave geneve5): Enslaving as an active interface with an up link [ 846.761745][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19189'. [ 847.517795][T16724] netlink: 'syz.2.19199': attribute type 10 has an invalid length. [ 847.559985][T16723] syzkaller0: entered promiscuous mode [ 847.571260][T16723] syzkaller0: entered allmulticast mode [ 847.706616][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19204'. [ 847.979537][T16746] syzkaller0: entered promiscuous mode [ 847.986126][T16746] syzkaller0: entered allmulticast mode [ 848.081635][T16748] syzkaller0: entered promiscuous mode [ 848.087477][T16748] syzkaller0: entered allmulticast mode [ 848.094357][T16743] syzkaller0: entered promiscuous mode [ 848.100925][T16743] syzkaller0: entered allmulticast mode [ 848.321291][T16761] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.19213'. [ 848.363406][T16764] syzkaller0: entered promiscuous mode [ 848.371876][T16764] syzkaller0: entered allmulticast mode [ 848.533998][T16773] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 848.557293][T16772] lo: Caught tx_queue_len zero misconfig [ 848.740998][T16783] syzkaller0: entered promiscuous mode [ 848.746951][T16783] syzkaller0: entered allmulticast mode [ 848.755305][T16781] netlink: 'syz.2.19219': attribute type 83 has an invalid length. [ 848.760057][T16783] tipc: Enabled bearer , priority 0 [ 848.798904][T16782] tipc: Resetting bearer [ 848.854993][T16782] tipc: Disabling bearer [ 848.896793][T16786] wg1 speed is unknown, defaulting to 1000 [ 848.927381][T16790] IPVS: sh: FWM 3 0x00000003 - no destination available [ 849.037812][T16793] syzkaller0: entered promiscuous mode [ 849.043402][T16793] syzkaller0: entered allmulticast mode [ 849.228029][T16786] syzkaller0 speed is unknown, defaulting to 1000 [ 849.236741][T16786] gre0 speed is unknown, defaulting to 1000 [ 849.310277][T16799] xt_HMARK: spi-set and port-set can't be combined [ 849.367504][T16801] syzkaller0: entered promiscuous mode [ 849.373009][T16801] syzkaller0: entered allmulticast mode [ 849.697573][T16810] syzkaller0: entered promiscuous mode [ 849.703106][T16810] syzkaller0: entered allmulticast mode [ 849.718709][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19234'. [ 849.852536][T16816] 8021q: adding VLAN 0 to HW filter on device bond17 [ 849.949661][ T1101] syzkaller0: tun_net_xmit 76 [ 849.956683][ T1101] syzkaller0: tun_net_xmit 48 [ 849.985764][ T796] syzkaller0: tun_net_xmit 76 [ 850.084852][T13060] syzkaller0: tun_net_xmit 76 [ 850.093552][T16826] bond17: entered promiscuous mode [ 850.129372][T16826] bond17: entered allmulticast mode [ 850.214082][T16816] vxcan1: entered promiscuous mode [ 850.242976][T16816] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address [ 850.267275][T16816] bond17: (slave vxcan1): Error -95 calling set_mac_address [ 851.744547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms [ 851.752590][ C0] lec:lec_tx_timeout: lec0 [ 851.757504][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 852.065263][ C0] bridge0: port 3(dummy0) entered learning state [ 852.208091][T16872] netlink: 'syz.0.19244': attribute type 3 has an invalid length. [ 852.216276][T16872] netlink: 'syz.0.19244': attribute type 3 has an invalid length. [ 852.317388][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19246'. [ 852.338397][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19246'. [ 852.456531][T16879] syzkaller0: entered promiscuous mode [ 852.495541][T16879] syzkaller0: entered allmulticast mode [ 852.525104][T16886] syzkaller0: entered promiscuous mode [ 852.545945][T16886] syzkaller0: entered allmulticast mode [ 852.628081][T16892] syzkaller0: entered promiscuous mode [ 852.633593][T16892] syzkaller0: entered allmulticast mode [ 852.732573][T16899] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 852.740146][T16880] lec:lec_atm_close: lec0: Shut down! [ 852.919498][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19254'. [ 852.936445][T16904] wg1 speed is unknown, defaulting to 1000 [ 852.942445][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19254'. [ 852.971653][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19256'. [ 853.243768][T16904] syzkaller0 speed is unknown, defaulting to 1000 [ 853.265511][T16904] gre0 speed is unknown, defaulting to 1000 [ 853.404249][T16922] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 853.438241][T16922] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 853.501978][T16923] syzkaller0: entered promiscuous mode [ 853.525338][T16923] syzkaller0: entered allmulticast mode [ 853.543947][T16931] bond4: (slave lo): Releasing backup interface [ 853.551829][T16931] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 853.572171][T16931] `: Port device C removed [ 853.582882][T16931] `: Port device team_slave_1 removed [ 853.588816][T16931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.597847][T16931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 853.614950][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19263'. [ 853.730783][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19265'. [ 853.803502][T16938] tipc: Resetting bearer [ 853.822260][T16943] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 853.872045][T16938] netlink: 'syz.0.19265': attribute type 1 has an invalid length. [ 853.893795][T16945] syzkaller0: entered promiscuous mode [ 853.899666][T16945] syzkaller0: entered allmulticast mode [ 853.917439][T16942] wg1 speed is unknown, defaulting to 1000 [ 854.166144][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19270'. [ 854.212330][T16954] ip6gretap0: entered promiscuous mode [ 854.216456][T16956] netlink: 168 bytes leftover after parsing attributes in process `syz.2.19270'. [ 854.250907][T16954] ip6gretap0: left promiscuous mode [ 854.316493][T16942] syzkaller0 speed is unknown, defaulting to 1000 [ 854.328159][T16942] gre0 speed is unknown, defaulting to 1000 [ 854.589487][T16962] tipc: Enabled bearer , priority 0 [ 854.613881][T16962] syzkaller0: entered promiscuous mode [ 854.629061][T16962] syzkaller0: entered allmulticast mode [ 854.654942][T16962] tipc: Resetting bearer [ 854.677806][T16961] tipc: Resetting bearer [ 854.716485][T16961] tipc: Disabling bearer [ 854.928361][T16964] wg1 speed is unknown, defaulting to 1000 [ 855.047131][ T30] audit: type=1800 audit(1775526721.888:24): pid=16977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19277" name="memory.events" dev="tmpfs" ino=19555 res=0 errno=0 [ 855.271924][T16970] syzkaller0: entered promiscuous mode [ 855.280034][T16970] syzkaller0: entered allmulticast mode [ 855.287211][T16964] syzkaller0 speed is unknown, defaulting to 1000 [ 855.307858][T16964] gre0 speed is unknown, defaulting to 1000 [ 857.147213][T16993] wg1 speed is unknown, defaulting to 1000 [ 857.487808][T17023] syzkaller0: entered promiscuous mode [ 857.493963][T17023] syzkaller0: entered allmulticast mode [ 857.505454][T16993] syzkaller0 speed is unknown, defaulting to 1000 [ 857.595265][T16993] gre0 speed is unknown, defaulting to 1000 [ 857.631695][T17025] wg1 speed is unknown, defaulting to 1000 [ 857.744501][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 857.752592][ C0] lec:lec_tx_timeout: lec0 [ 857.757812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 857.812068][T17032] syzkaller0: entered promiscuous mode [ 857.817865][T17032] syzkaller0: entered allmulticast mode [ 858.015811][T17025] syzkaller0 speed is unknown, defaulting to 1000 [ 858.104955][T17025] gre0 speed is unknown, defaulting to 1000 [ 858.582270][T17043] syzkaller0: entered promiscuous mode [ 858.609192][T17043] syzkaller0: entered allmulticast mode [ 858.787011][T17045] lo: Caught tx_queue_len zero misconfig [ 858.869321][T17047] syzkaller0: entered promiscuous mode [ 858.885196][T17047] syzkaller0: entered allmulticast mode [ 859.086993][T17050] syzkaller0: entered promiscuous mode [ 859.092493][T17050] syzkaller0: entered allmulticast mode [ 859.545588][T17066] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 859.878763][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19309'. [ 859.969076][T17084] tipc: Enabling of bearer rejected, failed to enable media [ 860.299300][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19311'. [ 860.629132][T17113] wg1 speed is unknown, defaulting to 1000 [ 860.883672][T17118] tipc: Enabled bearer , priority 0 [ 860.935670][T17118] syzkaller0: entered promiscuous mode [ 860.968655][T17118] syzkaller0: entered allmulticast mode [ 860.985970][T17087] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 860.994038][T17087] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 861.022062][T17118] tipc: Resetting bearer [ 861.071349][T17117] tipc: Resetting bearer [ 861.175408][T17117] tipc: Disabling bearer [ 861.279786][T17113] syzkaller0 speed is unknown, defaulting to 1000 [ 861.300807][T17113] gre0 speed is unknown, defaulting to 1000 [ 861.418477][T17134] syzkaller0: entered promiscuous mode [ 861.437261][T17134] syzkaller0: entered allmulticast mode [ 861.670312][T17141] wg1 speed is unknown, defaulting to 1000 [ 861.886435][T17152] syzkaller0: entered promiscuous mode [ 861.898377][T17152] syzkaller0: entered allmulticast mode [ 862.230024][T17141] syzkaller0 speed is unknown, defaulting to 1000 [ 862.266418][T17141] gre0 speed is unknown, defaulting to 1000 [ 862.335476][T17164] geneve8: left promiscuous mode [ 862.585067][T17172] syzkaller0: entered promiscuous mode [ 862.600756][T17172] syzkaller0: entered allmulticast mode [ 862.649610][T17172] tipc: Enabled bearer , priority 0 [ 862.670200][T17171] tipc: Resetting bearer [ 862.712583][T17171] tipc: Disabling bearer [ 862.784828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 862.792920][ C0] lec:lec_tx_timeout: lec0 [ 862.798195][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 863.410241][T17193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19339'. [ 863.444686][T17193] netlink: 'syz.3.19339': attribute type 1 has an invalid length. [ 863.460733][T17190] wg1 speed is unknown, defaulting to 1000 [ 863.466651][T17194] wg1: left promiscuous mode [ 863.470128][T17194] bond15: left promiscuous mode [ 863.478298][T17194] wireguard0: left promiscuous mode [ 863.624190][T17196] netlink: 'syz.3.19340': attribute type 1 has an invalid length. [ 863.746534][T17198] bond18: (slave veth15): Enslaving as an active interface with a down link [ 863.851374][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19340'. [ 863.883135][T17196] bond18: (slave veth17): Enslaving as an active interface with a down link [ 863.921304][T17198] 8021q: adding VLAN 0 to HW filter on device bond18 [ 863.929165][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19343'. [ 863.938694][T17190] syzkaller0 speed is unknown, defaulting to 1000 [ 863.945788][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19343'. [ 864.045518][T17190] gre0 speed is unknown, defaulting to 1000 [ 864.061299][T17210] syzkaller0: entered promiscuous mode [ 864.083704][T17210] syzkaller0: entered allmulticast mode [ 864.332251][T17222] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.19348'. [ 864.893930][T17227] tipc: Enabled bearer , priority 0 [ 864.908306][T17227] syzkaller0: entered promiscuous mode [ 864.924661][T17227] syzkaller0: entered allmulticast mode [ 864.966404][T17227] tipc: Resetting bearer [ 864.974242][T17226] tipc: Resetting bearer [ 865.025390][T17226] tipc: Disabling bearer [ 865.265968][T17229] syzkaller0: entered promiscuous mode [ 865.274778][T17229] syzkaller0: entered allmulticast mode [ 865.556290][T17243] syzkaller0: entered promiscuous mode [ 865.578550][T17243] syzkaller0: entered allmulticast mode [ 866.489142][T17273] bond22: entered allmulticast mode [ 866.497093][T17273] 8021q: adding VLAN 0 to HW filter on device bond22 [ 866.581808][T17274] wg1 speed is unknown, defaulting to 1000 [ 866.832798][T17274] syzkaller0 speed is unknown, defaulting to 1000 [ 866.860234][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19366'. [ 866.869744][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19366'. [ 866.886757][T17274] gre0 speed is unknown, defaulting to 1000 [ 867.109391][T17288] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.19368'. [ 867.205105][T17290] syzkaller0: entered promiscuous mode [ 867.210621][T17290] syzkaller0: entered allmulticast mode [ 867.426047][ C0] bridge0: port 3(dummy0) entered forwarding state [ 867.579558][T17304] syzkaller0: entered promiscuous mode [ 867.586327][T17304] syzkaller0: entered allmulticast mode [ 867.804519][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 867.812590][ C0] lec:lec_tx_timeout: lec0 [ 867.817369][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 867.843259][T17319] tipc: Enabling of bearer rejected, already enabled [ 867.937774][T17309] syzkaller0: entered promiscuous mode [ 867.955106][T17309] syzkaller0: entered allmulticast mode [ 869.747205][T17351] netlink: 108 bytes leftover after parsing attributes in process `syz.0.19385'. [ 869.821955][T17356] netlink: 72 bytes leftover after parsing attributes in process `syz.3.19389'. [ 869.899979][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19391'. [ 869.987742][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.008188][T17363] syzkaller0: entered promiscuous mode [ 870.013863][T17363] syzkaller0: entered allmulticast mode [ 870.283474][T17379] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 870.303869][T17378] syzkaller0: entered promiscuous mode [ 870.310155][T17378] syzkaller0: entered allmulticast mode [ 870.324226][T17377] syzkaller0: entered promiscuous mode [ 870.332759][T17377] syzkaller0: entered allmulticast mode [ 870.345160][T17379] tipc: Enabled bearer , priority 0 [ 870.871719][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19408'. [ 870.881208][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19408'. [ 870.938737][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19409'. [ 871.031133][T17408] lo: entered allmulticast mode [ 871.037405][T17408] tunl0: entered allmulticast mode [ 871.042605][T17408] gre0: entered allmulticast mode [ 871.048029][T17408] gretap0: entered allmulticast mode [ 871.053427][T17408] erspan0: entered allmulticast mode [ 871.059096][T17408] ip_vti0: entered allmulticast mode [ 871.066377][T17408] ip6_vti0: entered allmulticast mode [ 871.072026][T17408] sit0: entered allmulticast mode [ 871.077437][T17408] ip6tnl0: entered allmulticast mode [ 871.083217][T17408] ip6gre0: entered allmulticast mode [ 871.088831][T17408] ip6gretap0: entered allmulticast mode [ 871.094760][T17408] bridge0: entered allmulticast mode [ 871.100233][T17408] vcan0: entered allmulticast mode [ 871.106174][T17408] bond0: entered allmulticast mode [ 871.111478][T17408] team0: entered allmulticast mode [ 871.117097][T17408] geneve0: entered allmulticast mode [ 871.122701][T17408] dummy0: entered allmulticast mode [ 871.133992][T17408] nlmon0: entered allmulticast mode [ 871.139905][T17408] caif0: entered allmulticast mode [ 871.145428][T17408] batadv0: entered allmulticast mode [ 871.150901][T17408] veth0: entered allmulticast mode [ 871.156538][T17408] veth1: entered allmulticast mode [ 871.161865][T17408] wg0: entered allmulticast mode [ 871.167182][T17408] wg1: entered allmulticast mode [ 871.172879][T17408] wg2: entered allmulticast mode [ 871.179045][T17408] veth1_to_bridge: entered allmulticast mode [ 871.185441][T17408] bridge_slave_1: entered allmulticast mode [ 871.191580][T17408] : entered allmulticast mode [ 871.196598][T17408] bond_slave_0: entered allmulticast mode [ 871.202476][T17408] veth1_to_bond: entered allmulticast mode [ 871.208559][T17408] bond_slave_1: entered allmulticast mode [ 871.214403][T17408] veth0_to_team: entered allmulticast mode [ 871.220681][T17408] team_slave_0: entered allmulticast mode [ 871.239020][T17408] veth1_to_team: entered allmulticast mode [ 871.246011][T17408] team_slave_1: entered allmulticast mode [ 871.251907][T17408] veth0_to_batadv: entered allmulticast mode [ 871.259231][T17408] batadv_slave_0: entered allmulticast mode [ 871.265590][T17408] veth1_to_batadv: entered allmulticast mode [ 871.271667][T17408] batadv_slave_1: entered allmulticast mode [ 871.281915][T17408] xfrm0: entered allmulticast mode [ 871.304833][T17408] veth0_to_hsr: entered allmulticast mode [ 871.310727][T17408] hsr_slave_0: entered allmulticast mode [ 871.339754][T17408] veth1_virt_wifi: entered allmulticast mode [ 871.364967][T17408] veth0_virt_wifi: entered allmulticast mode [ 871.371145][T17408] veth1_vlan: entered allmulticast mode [ 871.404830][T17408] veth0_vlan: entered allmulticast mode [ 871.410600][T17408] vlan0: entered allmulticast mode [ 871.416103][T17408] vlan1: entered allmulticast mode [ 871.421382][T17408] macvlan0: entered allmulticast mode [ 871.427041][T17408] macvlan1: entered allmulticast mode [ 871.432565][T17408] ipvlan0: entered allmulticast mode [ 871.440148][T17408] ipvlan1: entered allmulticast mode [ 871.445698][T17408] veth1_macvtap: entered allmulticast mode [ 871.452212][T17408] veth0_macvtap: entered allmulticast mode [ 871.473839][T17408] macvtap0: entered allmulticast mode [ 871.479837][T17408] macsec0: entered allmulticast mode [ 871.485822][T17408] geneve1: entered allmulticast mode [ 871.491700][T17408] ip6gretap1: entered allmulticast mode [ 871.498208][T17408] ip6gretap2: entered allmulticast mode [ 871.504176][T17408] l24): entered allmulticast mode [ 871.510512][T17408] ip6erspan0: entered allmulticast mode [ 871.517350][T17408] xfrm1: entered allmulticast mode [ 871.523559][T17408] ip6gretap3: entered allmulticast mode [ 871.529502][T17408] bridge1: entered allmulticast mode [ 871.535245][T17408] bond1: entered allmulticast mode [ 871.540486][T17408] ip6erspan1: entered allmulticast mode [ 871.546466][T17408] bond2: entered allmulticast mode [ 871.551708][T17408] erspan1: entered allmulticast mode [ 871.557533][T17408] bridge_slave_1.: entered allmulticast mode [ 871.563697][T17408] ip6tnl1: entered allmulticast mode [ 871.572904][T17408] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 871.580433][T17408] veth2: entered allmulticast mode [ 871.585856][T17408] veth3: entered allmulticast mode [ 871.591124][T17408] : entered allmulticast mode [ 871.596341][T17408] syztnl2: entered allmulticast mode [ 871.601766][T17408] ip6gre1: entered allmulticast mode [ 871.607312][T17408] bond3: entered allmulticast mode [ 871.612558][T17408] ip6tnl2: entered allmulticast mode [ 871.618104][T17408] bond4: entered allmulticast mode [ 871.623335][T17408] bridge2: entered allmulticast mode [ 871.629333][T17408] mac80211_hwsim hwsim26 wlan3: entered allmulticast mode [ 871.636967][T17408] mac80211_hwsim hwsim30 wlan4: entered allmulticast mode [ 871.644195][T17408] veth4: entered allmulticast mode [ 871.664864][T17408] veth5: entered allmulticast mode [ 871.671215][T17408] bridge3: entered allmulticast mode [ 871.677324][T17408] ip6gre2: entered allmulticast mode [ 871.683886][T17408] ip6gre3: entered allmulticast mode [ 871.690038][T17408] geneve2: entered allmulticast mode [ 871.696345][T17408] ip6tnl3: entered allmulticast mode [ 871.701984][T17408] sit1: entered allmulticast mode [ 871.707722][T17408] gretap1: entered allmulticast mode [ 871.713214][T17408] vxlan0: entered allmulticast mode [ 871.719729][T17408] ip6tnl4: entered allmulticast mode [ 871.725334][T17408] macsec1: entered allmulticast mode [ 871.730820][T17408] bond5: entered allmulticast mode [ 871.737246][T17408] vxlan1: entered allmulticast mode [ 871.742622][T17408] bridge4: entered allmulticast mode [ 871.749330][T17408] ipvlan2: entered allmulticast mode [ 871.755071][T17408] bridge5: entered allmulticast mode [ 871.760563][T17408] vlan3: entered allmulticast mode [ 871.766035][T17408] bond6: entered allmulticast mode [ 871.771301][T17408] vxlan2: entered allmulticast mode [ 871.777081][T17408] bond7: entered allmulticast mode [ 871.782317][T17408] syztnl0: entered allmulticast mode [ 871.787917][T17408] netdevsim netdevsim4 eth0: entered allmulticast mode [ 871.795630][T17408] netdevsim netdevsim4 eth1: entered allmulticast mode [ 871.802762][T17408] netdevsim netdevsim4 eth2: entered allmulticast mode [ 871.809871][T17408] netdevsim netdevsim4 eth3: entered allmulticast mode [ 871.817169][T17408] macvlan3: entered allmulticast mode [ 871.822780][T17408] macsec3: entered allmulticast mode [ 871.828542][T17408] vxcan2: entered allmulticast mode [ 871.833837][T17408] vxcan3: entered allmulticast mode [ 871.839888][T17408] sit2: entered allmulticast mode [ 871.845104][T17408] gtp0: entered allmulticast mode [ 871.850390][T17408] vlan4: entered allmulticast mode [ 871.856247][T17408] gtp1: entered allmulticast mode [ 871.871622][T17408] bridge6: entered allmulticast mode [ 871.881705][T17408] ipip0: entered allmulticast mode [ 871.898441][T17408] vti60: entered allmulticast mode [ 871.903726][T17408] bond9: entered allmulticast mode [ 871.913891][T17408] bond10: entered allmulticast mode [ 871.923910][T17408] gretap2: entered allmulticast mode [ 871.929453][T17408] @: entered allmulticast mode [ 871.934435][T17408] bond11: entered allmulticast mode [ 871.940151][T17408] sit3: entered allmulticast mode [ 871.945520][T17408] bond12: entered allmulticast mode [ 871.950780][T17408] bond13: entered allmulticast mode [ 871.956216][T17408] vcan1: entered allmulticast mode [ 871.961504][T17408] bond14: entered allmulticast mode [ 871.966870][T17408] geneve3: entered allmulticast mode [ 871.972292][T17408] bridge7: entered allmulticast mode [ 871.977829][T17408] : entered allmulticast mode [ 871.982676][T17408] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 871.990130][T17408] gretap3: entered allmulticast mode [ 871.995726][T17408] bond15: entered allmulticast mode [ 872.001025][T17408] : entered allmulticast mode [ 872.005969][T17408] bond16: entered allmulticast mode [ 872.011239][T17408] bridge8: entered allmulticast mode [ 872.016876][T17408] bond17: entered allmulticast mode [ 872.022263][T17408] bond18: entered allmulticast mode [ 872.027706][T17408] gre1: entered allmulticast mode [ 872.032802][T17408] bond19: entered allmulticast mode [ 872.038668][T17408] bridge9: entered allmulticast mode [ 872.045719][T17408] pim6reg1: entered allmulticast mode [ 872.051223][T17408] veth6: entered allmulticast mode [ 872.056599][T17408] veth7: entered allmulticast mode [ 872.061837][T17408] mac80211_hwsim hwsim46 wlan5: entered allmulticast mode [ 872.069829][T17408] bridge11: entered allmulticast mode [ 872.076933][T17408] bond20: entered allmulticast mode [ 872.082659][T17408] bond21: entered allmulticast mode [ 872.090235][T17408] mac80211_hwsim hwsim42 nicvf0: entered allmulticast mode [ 872.098537][T17408] tipc: Resetting bearer [ 872.110531][T17408] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 872.121059][T17408] ip6tnl5: entered allmulticast mode [ 872.189412][T17430] syzkaller0: entered promiscuous mode [ 872.199757][T17430] syzkaller0: entered allmulticast mode [ 872.219226][T17410] wg1 speed is unknown, defaulting to 1000 [ 872.826138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 872.834150][ C0] lec:lec_tx_timeout: lec0 [ 872.839012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 873.775245][T17410] syzkaller0 speed is unknown, defaulting to 1000 [ 873.782732][T17410] gre0 speed is unknown, defaulting to 1000 [ 873.800150][T17454] wg1 speed is unknown, defaulting to 1000 [ 874.173812][T17468] syzkaller0: entered promiscuous mode [ 874.181398][T17468] syzkaller0: entered allmulticast mode [ 874.247849][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19423'. [ 874.290287][T17454] syzkaller0 speed is unknown, defaulting to 1000 [ 874.306400][T17473] ipvlan3: entered allmulticast mode [ 874.366523][T17454] gre0 speed is unknown, defaulting to 1000 [ 874.405248][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19425'. [ 874.579508][T17479] bridge13: port 1(veth17) entered blocking state [ 874.598275][T17479] bridge13: port 1(veth17) entered disabled state [ 874.625620][T17479] veth17: entered allmulticast mode [ 874.636814][T17479] veth17: entered promiscuous mode [ 874.678531][T17485] bridge13: port 2(veth19) entered blocking state [ 874.705339][T17485] bridge13: port 2(veth19) entered disabled state [ 874.714833][T17485] veth19: entered allmulticast mode [ 874.734344][T17485] veth19: entered promiscuous mode [ 874.946651][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19429'. [ 875.040451][T17497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19430'. [ 875.148012][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19429'. [ 875.252615][T17499] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 875.305933][T17492] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 875.323242][T17492] bond12 (unregistering): Released all slaves [ 876.062673][T17531] netlink: 'syz.4.19438': attribute type 1 has an invalid length. [ 876.100795][T17531] 8021q: adding VLAN 0 to HW filter on device bond23 [ 876.151472][T17531] vlan2: entered promiscuous mode [ 876.166037][T17531] bond23: entered promiscuous mode [ 876.171275][T17531] vlan2: entered allmulticast mode [ 876.191994][T17531] bond23: entered allmulticast mode [ 876.233529][T17531] bond23: (slave bridge12): making interface the new active one [ 876.274605][T17531] bridge12: entered promiscuous mode [ 876.279473][ T5823] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 876.280079][T17531] bridge12: entered allmulticast mode [ 876.315248][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 876.315273][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 876.315283][ T5823] Call Trace: [ 876.315290][ T5823] [ 876.315298][ T5823] dump_stack_lvl+0xe8/0x150 [ 876.315328][ T5823] dump_header+0xd3/0x4c0 [ 876.315351][ T5823] oom_kill_process+0x3ab/0x970 [ 876.315375][ T5823] out_of_memory+0x106c/0x1410 [ 876.315393][ T5823] ? percpu_ref_put+0x19/0x180 [ 876.315415][ T5823] ? __pfx___mutex_lock+0x10/0x10 [ 876.315442][ T5823] ? preempt_schedule_common+0x82/0xd0 [ 876.315474][ T5823] ? __pfx_out_of_memory+0x10/0x10 [ 876.315505][ T5823] try_charge_memcg+0xc53/0x1560 [ 876.315546][ T5823] ? __pfx_try_charge_memcg+0x10/0x10 [ 876.315580][ T5823] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 876.315607][ T5823] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 876.315633][ T5823] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 876.315659][ T5823] __swap_cache_prepare_and_add+0xe8/0x760 [ 876.315692][ T5823] ? page_rmappable_folio+0x9a/0x170 [ 876.315722][ T5823] swap_cache_alloc_folio+0xf1/0x240 [ 876.315754][ T5823] swap_cluster_readahead+0x369/0x690 [ 876.315778][ T5823] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 876.315810][ T5823] ? get_vma_policy+0x27b/0x3c0 [ 876.315836][ T5823] swapin_readahead+0x196/0xc50 [ 876.315853][ T5823] ? filemap_map_pages+0x185/0x2050 [ 876.315885][ T5823] ? __pfx_swapin_readahead+0x10/0x10 [ 876.315904][ T5823] ? swap_table_get+0x1e/0x260 [ 876.315928][ T5823] ? swap_table_get+0x1e/0x260 [ 876.315950][ T5823] ? swap_table_get+0x1e/0x260 [ 876.315975][ T5823] ? swap_table_get+0x216/0x260 [ 876.316001][ T5823] ? swap_cache_get_folio+0x513/0x520 [ 876.316034][ T5823] do_swap_page+0x56f/0x5a20 [ 876.316080][ T5823] ? do_swap_page+0x127/0x5a20 [ 876.316106][ T5823] ? __pfx_do_swap_page+0x10/0x10 [ 876.316129][ T5823] ? __pte_offset_map+0x1ae/0x240 [ 876.316151][ T5823] ? pte_offset_map_rw_nolock+0xea/0x160 [ 876.316172][ T5823] handle_mm_fault+0x12d2/0x3310 [ 876.316213][ T5823] ? handle_mm_fault+0xee/0x3310 [ 876.316248][ T5823] ? __pfx_handle_mm_fault+0x10/0x10 [ 876.316272][ T5823] ? lock_vma_under_rcu+0x45a/0x500 [ 876.316330][ T5823] do_user_addr_fault+0xa73/0x1340 [ 876.316362][ T5823] ? rcu_is_watching+0x15/0xb0 [ 876.316387][ T5823] ? trace_page_fault_user+0x84/0x210 [ 876.316412][ T5823] exc_page_fault+0x6a/0xc0 [ 876.316434][ T5823] asm_exc_page_fault+0x26/0x30 [ 876.316457][ T5823] RIP: 0033:0x7fac67c6a837 [ 876.316473][ T5823] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 39 7c 24 [ 876.316487][ T5823] RSP: 002b:00007ffcb4efc9d0 EFLAGS: 00010202 [ 876.316503][ T5823] RAX: 0000001b30924000 RBX: 0000000000001ff4 RCX: 00000000000d5de0 [ 876.316515][ T5823] RDX: 000000000256278c RSI: 00007ffcb4efca60 RDI: 000000000000000d [ 876.316526][ T5823] RBP: 00007ffcb4efca0c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 876.316539][ T5823] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 876.316550][ T5823] R13: 00000000000927c0 R14: 00000000000d5c7c R15: 00007ffcb4efca60 [ 876.316582][ T5823] [ 876.317004][ T5823] memory: usage 307200kB, limit 307200kB, failcnt 610 [ 876.387192][T17531] bond23: (slave bridge12): Enslaving as an active interface with an up link [ 876.654167][ T5823] memory+swap: usage 301136kB, limit 9007199254740988kB, failcnt 0 [ 876.662342][ T5823] kmem: usage 300188kB, limit 9007199254740988kB, failcnt 0 [ 876.671553][ T5823] Memory cgroup stats for /syz3: [ 876.671691][ T5823] cache 0 [ 876.682156][ T5823] rss 20480 [ 876.685713][ T5823] rss_huge 0 [ 876.689007][ T5823] shmem 0 [ 876.691949][ T5823] mapped_file 0 [ 876.699399][ T5823] dirty 0 [ 876.702358][ T5823] writeback 0 [ 876.706588][ T5823] workingset_refault_anon 11 [ 876.711186][ T5823] workingset_refault_file 1 [ 876.716335][ T5823] swap 180224 [ 876.719676][ T5823] swapcached 278528 [ 876.723478][ T5823] pgpgin 330340 [ 876.727121][ T5823] pgpgout 330327 [ 876.730665][ T5823] pgfault 696374 [ 876.734207][ T5823] pgmajfault 7 [ 876.741575][ T5823] inactive_anon 0 [ 876.764442][ T5823] active_anon 53248 [ 876.768937][ T5823] inactive_file 0 [ 876.772566][ T5823] active_file 0 [ 876.802630][ T5823] unevictable 0 [ 876.811765][ T5823] hierarchical_memory_limit 314572800 [ 876.928490][ T5823] hierarchical_memsw_limit 9223372036854771712 [ 876.944525][ T5823] total_cache 0 [ 876.951850][ T5823] total_rss 20480 [ 876.956238][ T5823] total_rss_huge 0 [ 876.960037][ T5823] total_shmem 0 [ 876.963508][ T5823] total_mapped_file 0 [ 876.967775][ T5823] total_dirty 0 [ 876.971297][ T5823] total_writeback 0 [ 877.016206][ T5823] total_workingset_refault_anon 11 [ 877.021347][ T5823] total_workingset_refault_file 1 [ 877.027634][ T5823] total_swap 180224 [ 877.036878][ T5823] total_swapcached 278528 [ 877.044874][ T5823] total_pgpgin 330340 [ 877.054504][ T5823] total_pgpgout 330327 [ 877.058577][ T5823] total_pgfault 696374 [ 877.072871][ T5823] total_pgmajfault 7 [ 877.094992][ T5823] total_inactive_anon 0 [ 877.103156][ T5823] total_active_anon 53248 [ 877.130012][ T5823] total_inactive_file 0 [ 877.134186][ T5823] total_active_file 0 [ 877.154984][ T5823] total_unevictable 0 [ 877.158991][ T5823] anon_cost 0 [ 877.185074][ T5823] file_cost 0 [ 877.188392][ T5823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.19435,pid=17513,uid=0 [ 877.254427][ T5823] Memory cgroup out of memory: Killed process 17513 (syz.3.19435) total-vm:104468kB, anon-rss:1260kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 877.298467][T17552] siw: device registration error -23 [ 877.461166][T17555] syzkaller0: entered promiscuous mode [ 877.496850][T17555] syzkaller0: entered allmulticast mode [ 877.705177][T17562] netlink: 'syz.1.19447': attribute type 2 has an invalid length. [ 877.740330][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19447'. [ 877.854518][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 877.862582][ C0] lec:lec_tx_timeout: lec0 [ 877.867255][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 878.062496][T17573] tipc: Enabled bearer , priority 0 [ 878.070160][T17573] syzkaller0: entered promiscuous mode [ 878.075739][T17573] syzkaller0: entered allmulticast mode [ 878.094395][T17573] tipc: Resetting bearer [ 878.103248][T17572] tipc: Resetting bearer [ 878.122084][T17572] tipc: Disabling bearer [ 878.594536][T17584] netlink: 284 bytes leftover after parsing attributes in process `syz.0.19452'. [ 878.810754][T17592] netlink: 'syz.3.19453': attribute type 2 has an invalid length. [ 878.860791][T17592] netlink: 'syz.3.19453': attribute type 2 has an invalid length. [ 878.909118][T17594] macsec1: entered promiscuous mode [ 879.055589][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19458'. [ 879.275688][T17604] veth17: entered allmulticast mode [ 879.339161][T17604] bond18: (slave veth17): Enslaving as an active interface with an up link [ 879.404897][T17608] bond18 (unregistering): (slave veth17): Releasing backup interface [ 879.480291][T17608] bond18 (unregistering): Released all slaves [ 879.506224][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19460'. [ 879.517025][T17611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19460'. [ 879.526333][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19460'. [ 879.536207][T17611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19460'. [ 879.705267][T17617] syzkaller0: entered promiscuous mode [ 879.711327][T17617] syzkaller0: entered allmulticast mode [ 879.728243][T17618] netlink: 'syz.1.19463': attribute type 1 has an invalid length. [ 879.766548][T17618] bond12: entered promiscuous mode [ 879.772225][T17618] 8021q: adding VLAN 0 to HW filter on device bond12 [ 879.931088][T17618] macvtap1: entered allmulticast mode [ 880.025404][T17623] bond12: (slave bridge14): making interface the new active one [ 880.074649][T17623] bridge14: entered promiscuous mode [ 880.086555][T17623] bond12: (slave bridge14): Enslaving as an active interface with an up link [ 880.397178][T17633] syzkaller0: entered promiscuous mode [ 880.402685][T17633] syzkaller0: entered allmulticast mode [ 880.409553][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19468'. [ 880.490314][T17638] netlink: 'syz.2.19469': attribute type 1 has an invalid length. [ 880.563319][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19468'. [ 880.682654][T17639] bond18: entered promiscuous mode [ 880.714721][T17639] bond18: entered allmulticast mode [ 880.757187][T17639] 8021q: adding VLAN 0 to HW filter on device bond18 [ 880.918254][T17641] bridge15: entered promiscuous mode [ 880.932519][T17641] bridge15: entered allmulticast mode [ 880.940315][T17641] bond18: (slave bridge15): Enslaving as a backup interface with an up link [ 880.950583][T17625] syzkaller0 speed is unknown, defaulting to 1000 [ 880.959549][T17625] gre0 speed is unknown, defaulting to 1000 [ 880.994368][T17638] bridge16: entered promiscuous mode [ 881.012138][T17638] bridge16: entered allmulticast mode [ 881.018242][ T1101] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 881.032682][T17638] bond18: (slave bridge16): Enslaving as a backup interface with a down link [ 881.154822][ T1124] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 881.605002][T17658] syzkaller0: entered promiscuous mode [ 881.610655][T17658] syzkaller0: entered allmulticast mode [ 881.648382][T17673] bridge14: port 1(macvlan1) entered blocking state [ 881.656704][T17673] bridge14: port 1(macvlan1) entered disabled state [ 881.663528][T17673] macvlan1: entered allmulticast mode [ 881.673469][T17673] ip6gretap0: entered allmulticast mode [ 881.681174][T17673] macvlan1: entered promiscuous mode [ 882.281266][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19485'. [ 882.874560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 882.882590][ C0] lec:lec_tx_timeout: lec0 [ 882.887246][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 883.278601][T17685] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 883.286429][T17685] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 883.294042][T17685] tipc: Resetting bearer [ 883.558414][T17701] syzkaller0: entered promiscuous mode [ 883.575015][T17701] syzkaller0: entered allmulticast mode [ 883.713555][T17704] syzkaller0: entered promiscuous mode [ 885.363755][T17690] syzkaller0 speed is unknown, defaulting to 1000 [ 885.377164][T17690] gre0 speed is unknown, defaulting to 1000 [ 885.509091][T17730] syzkaller0: entered promiscuous mode [ 885.514866][T17730] syzkaller0: entered allmulticast mode [ 885.588403][T17732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19491'. [ 885.758390][T17738] syzkaller0: entered promiscuous mode [ 885.767626][T17738] syzkaller0: entered allmulticast mode [ 885.919615][T17744] nbd4: detected capacity change from 0 to 63 [ 885.955477][T17746] netlink: 'syz.3.19495': attribute type 1 has an invalid length. [ 885.978247][T17746] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19495'. [ 886.629460][ T51] block nbd4: Receive control failed (result -104) [ 886.846821][T17769] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 886.866631][T17769] tipc: Resetting bearer [ 887.061536][T17772] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.19504'. [ 887.143821][T17775] tipc: Enabling of bearer rejected, already enabled [ 887.154199][T17775] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 887.161878][T17775] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 887.206582][T17775] tipc: Resetting bearer [ 887.225687][T17777] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.19506'. [ 887.309973][T17775] syzkaller0: mtu less than device minimum [ 887.402021][T17787] netlink: 'syz.0.19510': attribute type 1 has an invalid length. [ 887.499531][T17787] 8021q: adding VLAN 0 to HW filter on device bond10 [ 887.507617][T17789] tipc: Enabling of bearer rejected, already enabled [ 887.521051][T17791] ipvlan3: entered allmulticast mode [ 887.543117][T17791] bond10: entered allmulticast mode [ 887.549234][T17785] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 887.599448][T17796] netlink: 'syz.2.19512': attribute type 10 has an invalid length. [ 887.607461][T17787] bond10: (slave bridge13): making interface the new active one [ 887.607486][T17787] bridge13: entered allmulticast mode [ 887.620724][T17787] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 887.645665][T17785] tipc: Resetting bearer [ 887.775894][T17800] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 887.790255][T17800] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 887.894560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 887.902610][ C0] lec:lec_tx_timeout: lec0 [ 887.907625][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 887.983404][T17815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19519'. [ 888.106338][T17823] syzkaller0: entered promiscuous mode [ 888.111909][T17823] syzkaller0: entered allmulticast mode [ 888.183137][T17826] netlink: 'syz.4.19524': attribute type 39 has an invalid length. [ 888.327252][T17840] syzkaller0: entered promiscuous mode [ 888.333065][T17840] syzkaller0: entered allmulticast mode [ 888.781196][T17853] syzkaller0: entered promiscuous mode [ 888.788287][T17853] syzkaller0: entered allmulticast mode [ 889.438248][T17877] openvswitch: netlink: Flow actions attr not present in new flow. [ 889.481247][T17877] ieee802154 phy1 wpan1: encryption failed: -22 [ 889.739438][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19539'. [ 889.749016][T17880] netlink: 'syz.3.19539': attribute type 7 has an invalid length. [ 889.756990][T17880] netlink: 'syz.3.19539': attribute type 8 has an invalid length. [ 889.765000][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19539'. [ 889.851336][T17865] syzkaller0 speed is unknown, defaulting to 1000 [ 889.868080][T17865] gre0 speed is unknown, defaulting to 1000 [ 890.750091][T17906] syzkaller0: entered promiscuous mode [ 890.834368][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19551'. [ 890.872823][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19551'. [ 890.909300][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19551'. [ 891.123589][T17902] syzkaller0 speed is unknown, defaulting to 1000 [ 891.130513][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19556'. [ 891.164280][T17902] gre0 speed is unknown, defaulting to 1000 [ 891.196338][T17921] vlan7: entered allmulticast mode [ 891.212887][T17921] bridge15: entered allmulticast mode [ 891.252911][T17921] bridge15: port 1(erspan0) entered blocking state [ 891.279439][T17921] bridge15: port 1(erspan0) entered disabled state [ 891.295407][T17921] erspan0: entered allmulticast mode [ 891.310279][T17921] erspan0: entered promiscuous mode [ 891.640593][T17945] syzkaller0: entered promiscuous mode [ 891.646950][T17945] syzkaller0: entered allmulticast mode [ 891.887605][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19566'. [ 891.921120][T17954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19567'. [ 891.946804][T17954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19567'. [ 891.958286][T17952] ipvlan0: entered allmulticast mode [ 891.963591][T17952] syz_tun: entered allmulticast mode [ 892.313337][T17961] tipc: Enabled bearer , priority 0 [ 892.338677][T17961] syzkaller0: entered promiscuous mode [ 892.344180][T17961] syzkaller0: entered allmulticast mode [ 892.362804][T17961] tipc: Resetting bearer [ 892.370612][T17960] tipc: Resetting bearer [ 892.392108][T17960] tipc: Disabling bearer [ 892.539083][T17981] syzkaller0: entered promiscuous mode [ 892.651758][T17981] syzkaller0: entered allmulticast mode [ 892.785367][T17981] 0: reclassify loop, rule prio 0, protocol 800 [ 892.870836][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19576'. [ 892.914603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 892.922627][ C0] lec:lec_tx_timeout: lec0 [ 892.927362][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 893.077185][T17993] bridge0: port 3(dummy0) entered disabled state [ 893.116720][T17993] tipc: Resetting bearer [ 893.370044][T18004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19582'. [ 893.383285][T18004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19582'. [ 893.566191][T18019] netlink: 'syz.1.19585': attribute type 27 has an invalid length. [ 893.574985][T18018] netlink: 'syz.3.19587': attribute type 13 has an invalid length. [ 893.600511][T18021] xt_CT: No such helper "syz1" [ 893.690544][T18019] bond12: left promiscuous mode [ 893.695686][T18019] bridge14: left promiscuous mode [ 893.705043][T18019] macvtap1: left allmulticast mode [ 893.731121][T18027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.741805][T18027] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.750378][T18027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.786683][T18026] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 894.043633][T18044] tipc: Enabling of bearer rejected, already enabled [ 894.207347][T18053] tipc: Enabling of bearer rejected, already enabled [ 894.265460][T18045] syzkaller0 speed is unknown, defaulting to 1000 [ 894.286321][T18045] gre0 speed is unknown, defaulting to 1000 [ 894.597260][T18066] syzkaller0: entered promiscuous mode [ 894.609575][T18066] syzkaller0: entered allmulticast mode [ 894.632190][T18066] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 894.948575][T18076] netlink: 'syz.4.19604': attribute type 1 has an invalid length. [ 895.129753][T18076] 8021q: adding VLAN 0 to HW filter on device bond24 [ 895.141517][T18071] syzkaller0: entered promiscuous mode [ 895.157785][T18071] syzkaller0: entered allmulticast mode [ 895.212971][T18083] bond24: (slave veth9): Enslaving as an active interface with a down link [ 895.301554][T18091] netlink: 'syz.0.19605': attribute type 1 has an invalid length. [ 895.350115][T18088] bond24: (slave veth11): Enslaving as an active interface with a down link [ 895.370793][T18076] bond24: (slave bridge13): Enslaving as an active interface with a down link [ 895.413064][T18092] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 895.424440][T18092] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 895.505698][T18091] bond11: (slave gretap5): making interface the new active one [ 895.528014][T18091] bond11: (slave gretap5): Enslaving as an active interface with an up link [ 895.581913][T18099] macvlan0: entered promiscuous mode [ 895.595778][T18099] macvlan0: entered allmulticast mode [ 895.601765][T18099] bond11: entered promiscuous mode [ 895.612174][T18099] gretap5: entered promiscuous mode [ 895.623930][T18099] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 895.639283][T18099] bond11: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap5 [ 895.658325][T18099] bond11: left promiscuous mode [ 895.674754][T18099] gretap5: left promiscuous mode [ 895.757626][T18077] syzkaller0 speed is unknown, defaulting to 1000 [ 895.757880][T18106] tipc: Enabled bearer , priority 0 [ 895.794175][T18077] gre0 speed is unknown, defaulting to 1000 [ 895.858013][T18102] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 895.889411][T18102] tipc: Resetting bearer [ 895.924008][T18108] syzkaller0: entered promiscuous mode [ 895.929833][T18108] syzkaller0: entered allmulticast mode [ 895.939275][T18101] tipc: Resetting bearer [ 896.005302][T18101] tipc: Disabling bearer [ 896.400560][T18104] syzkaller0 speed is unknown, defaulting to 1000 [ 896.467723][T18104] gre0 speed is unknown, defaulting to 1000 [ 897.443986][T18117] syzkaller0 speed is unknown, defaulting to 1000 [ 897.465623][T18095] syzkaller0 speed is unknown, defaulting to 1000 [ 897.485853][T18117] gre0 speed is unknown, defaulting to 1000 [ 897.926577][T18166] tipc: Enabled bearer , priority 0 [ 897.934587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 897.934668][ C0] lec:lec_tx_timeout: lec0 [ 897.947829][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 897.960877][T18166] syzkaller0: entered promiscuous mode [ 897.966516][T18166] syzkaller0: entered allmulticast mode [ 897.976354][T18166] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 898.005392][T18166] tipc: Resetting bearer [ 898.011373][T18095] gre0 speed is unknown, defaulting to 1000 [ 898.017556][T18165] tipc: Resetting bearer [ 898.033975][T18165] tipc: Disabling bearer [ 898.173150][T18169] erspan0: left allmulticast mode [ 898.178439][T18169] erspan0: left promiscuous mode [ 898.183660][T18169] bridge15: port 1(erspan0) entered disabled state [ 898.215776][T18169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 898.243600][T18169] team0: Mode changed to "broadcast" [ 899.426023][T18182] syzkaller0: entered promiscuous mode [ 899.431637][T18182] syzkaller0: entered allmulticast mode [ 899.557740][T18184] netlink: zone id is out of range [ 899.562990][T18184] netlink: zone id is out of range [ 899.568453][T18184] netlink: zone id is out of range [ 899.573662][T18184] netlink: zone id is out of range [ 899.579010][T18184] netlink: zone id is out of range [ 899.584215][T18184] netlink: zone id is out of range [ 899.589862][T18184] netlink: zone id is out of range [ 899.596715][T18184] netlink: zone id is out of range [ 899.601958][T18184] netlink: zone id is out of range [ 899.698053][T18188] netlink: 'syz.4.19621': attribute type 1 has an invalid length. [ 899.777403][T18192] netlink: 'syz.0.19622': attribute type 1 has an invalid length. [ 899.802422][T18190] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address [ 899.813430][T18190] bond25: (slave vxcan1): Error -95 calling set_mac_address [ 899.822114][T18188] __nla_validate_parse: 3 callbacks suppressed [ 899.822130][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19621'. [ 899.855004][T18188] bond25: (slave bridge14): Enslaving as an active interface with a down link [ 899.896536][T18194] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 899.907742][T18194] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 899.927651][T18188] macvlan2: entered promiscuous mode [ 899.932974][T18188] macvlan2: entered allmulticast mode [ 899.940263][T18188] bond25: entered promiscuous mode [ 899.946295][T18188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.954283][T18188] bond25: left promiscuous mode [ 899.975450][T18196] macvlan0: entered promiscuous mode [ 899.980844][T18196] macvlan0: entered allmulticast mode [ 899.987312][T18196] bond12: entered promiscuous mode [ 899.993122][T18196] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 900.005041][T18196] bond12: left promiscuous mode [ 900.319798][T18210] netlink: 'syz.1.19629': attribute type 1 has an invalid length. [ 900.340720][T18208] syzkaller0: entered promiscuous mode [ 900.346519][T18208] syzkaller0: entered allmulticast mode [ 900.406386][T18210] veth21: entered promiscuous mode [ 900.414358][T18210] bond14: (slave veth21): Enslaving as a backup interface with a down link [ 900.532481][T18223] syzkaller0: entered promiscuous mode [ 900.538215][T18223] syzkaller0: entered allmulticast mode [ 901.489340][T18267] tipc: Enabled bearer , priority 0 [ 901.497175][T18267] syzkaller0: entered promiscuous mode [ 901.502748][T18267] syzkaller0: entered allmulticast mode [ 901.546887][T18267] tipc: Resetting bearer [ 901.564372][T18266] tipc: Resetting bearer [ 901.599968][T18266] tipc: Disabling bearer [ 901.636090][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19644'. [ 901.645854][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19644'. [ 901.679831][T18269] syzkaller0: entered promiscuous mode [ 902.868044][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19652'. [ 902.877378][T18297] bond0: option resend_igmp: invalid value (30863185) [ 902.884172][T18297] bond0: option resend_igmp: allowed values 0 - 255 [ 902.954611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 902.962679][ C0] lec:lec_tx_timeout: lec0 [ 902.967551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 904.740736][T18275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.879853][T18310] xt_cgroup: invalid path, errno=-2 [ 904.918172][T18315] netlink: 'syz.2.19658': attribute type 1 has an invalid length. [ 904.938698][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19657'. [ 904.977739][T18315] 8021q: adding VLAN 0 to HW filter on device bond19 [ 904.988606][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19659'. [ 905.090493][T18320] bond19: (slave veth19): Enslaving as an active interface with a down link [ 905.108587][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19659'. [ 905.166268][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19659'. [ 905.185099][T18320] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19658'. [ 905.194370][T18326] vlan8: entered allmulticast mode [ 905.216278][T18326] bridge16: entered allmulticast mode [ 905.251375][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19659'. [ 905.251429][T18317] bridge16: port 1(erspan0) entered blocking state [ 905.267532][T18317] bridge16: port 1(erspan0) entered disabled state [ 905.274159][T18317] erspan0: entered allmulticast mode [ 905.280969][T18317] erspan0: entered promiscuous mode [ 905.289858][ T1124] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.302599][ T1124] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.337878][T18331] bridge16: port 2(bond19) entered blocking state [ 905.344836][T18331] bridge16: port 2(bond19) entered disabled state [ 905.351639][T18331] bond19: entered allmulticast mode [ 905.363186][T18331] bond19: entered promiscuous mode [ 905.370451][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19660'. [ 905.383145][T18323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19660'. [ 905.402413][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19660'. [ 905.417679][T18323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19660'. [ 905.428609][T18335] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 905.502245][ T1134] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.518451][ T1134] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.953130][T18365] tipc: Enabled bearer , priority 0 [ 905.966935][T18363] tipc: Resetting bearer [ 905.986040][T18362] tipc: Disabling bearer [ 906.920149][T18379] syzkaller0 speed is unknown, defaulting to 1000 [ 906.927686][T18379] gre0 speed is unknown, defaulting to 1000 [ 907.212813][T18390] nbd: socks must be embedded in a SOCK_ITEM attr [ 907.255159][T18392] nbd: nbd64 already in use [ 907.261806][T17751] block nbd64: NBD_DISCONNECT [ 907.501456][T17752] udevd[17752]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 907.774914][T18416] net_ratelimit: 11 callbacks suppressed [ 907.774931][T18416] openvswitch: netlink: Message has 8 unknown bytes. [ 907.797055][T18418] ip6t_rpfilter: unknown options [ 908.136003][T18427] IPVS: Scheduler module ip_vs_ not found [ 908.148986][T18424] syzkaller0: entered promiscuous mode [ 908.168387][T18424] syzkaller0: entered allmulticast mode [ 908.201314][T18438] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 908.569659][T18449] macvtap1: entered promiscuous mode [ 908.607465][T18449] bridge0: entered promiscuous mode [ 908.623045][T18449] macvtap1: entered allmulticast mode [ 908.665911][T18443] macvtap0: entered promiscuous mode [ 908.671253][T18443] virtio_net virtio1 eth0: entered promiscuous mode [ 908.706570][T18443] macvtap0: entered allmulticast mode [ 908.722392][T18443] virtio_net virtio1 eth0: entered allmulticast mode [ 908.781510][T18452] bridge0: left promiscuous mode [ 909.024504][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 909.032579][ C0] lec:lec_tx_timeout: lec0 [ 909.038411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 909.284013][T18443] virtio_net virtio1 eth0: left allmulticast mode [ 909.315806][T18443] virtio_net virtio1 eth0: left promiscuous mode [ 909.322523][ T5270] IPVS: starting estimator thread 0... [ 909.415334][T18478] IPVS: using max 34 ests per chain, 81600 per kthread [ 909.758621][T18489] bond0: option lp_interval: invalid value (0) [ 909.778033][T18489] bond0: option lp_interval: allowed values 1 - 2147483647 [ 909.802470][T18492] dvmrp1: entered allmulticast mode [ 910.278303][T18511] syzkaller0: entered promiscuous mode [ 910.296464][T18511] syzkaller0: entered allmulticast mode [ 910.337081][T18514] __nla_validate_parse: 10 callbacks suppressed [ 910.337099][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19708'. [ 910.511750][T18514] bond0: option min_links: invalid value (18446744071972701165) [ 910.525002][T18514] bond0: option min_links: allowed values 0 - 2147483647 [ 910.545092][T18473] syzkaller0 speed is unknown, defaulting to 1000 [ 910.553240][T18473] gre0 speed is unknown, defaulting to 1000 [ 910.611346][T18522] syzkaller0: entered promiscuous mode [ 910.617051][T18522] syzkaller0: entered allmulticast mode [ 910.696852][T18524] syzkaller0: entered promiscuous mode [ 910.702435][T18524] syzkaller0: entered allmulticast mode [ 910.742744][T18524] syzkaller0: tun_net_xmit 14 [ 910.748223][T18524] syzkaller0: tun_net_xmit 14 [ 910.898743][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19714'. [ 911.140759][T18541] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 911.262030][T18539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19716'. [ 911.337315][T18539] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 911.602026][T18572] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 911.753388][T18576] syzkaller0: entered promiscuous mode [ 911.759527][T18576] syzkaller0: entered allmulticast mode [ 911.878628][T18553] lec:lec_atm_close: lec0: Shut down! [ 914.054159][T18619] ieee802154 phy1 wpan1: encryption failed: -22 [ 914.064178][T18622] netlink: 'syz.4.19730': attribute type 1 has an invalid length. [ 914.072203][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19728'. [ 914.085214][T18622] netlink: 'syz.4.19730': attribute type 2 has an invalid length. [ 914.366120][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19734'. [ 914.551717][T18650] syzkaller0: entered promiscuous mode [ 914.575162][T18650] syzkaller0: entered allmulticast mode [ 914.622888][T18650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.796442][T18663] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 914.803615][T18663] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 914.818314][T18663] tipc: Resetting bearer [ 914.892486][T18670] tipc: Disabling bearer [ 915.014582][T18674] syzkaller0: entered promiscuous mode [ 915.020507][T18674] syzkaller0: entered allmulticast mode [ 915.250697][T18683] netlink: 'syz.3.19745': attribute type 3 has an invalid length. [ 915.313609][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19745'. [ 915.714112][T18692] syzkaller0 speed is unknown, defaulting to 1000 [ 915.722677][T18692] gre0 speed is unknown, defaulting to 1000 [ 916.075029][ T2414] block nbd4: Possible stuck request ffff8880271b0000: control (read@0,1024B). Runtime 30 seconds [ 916.086972][ T2414] block nbd4: Possible stuck request ffff8880271b0200: control (read@1024,1024B). Runtime 30 seconds [ 916.098310][ T2414] block nbd4: Possible stuck request ffff8880271b0400: control (read@2048,1024B). Runtime 30 seconds [ 916.110551][ T2414] block nbd4: Possible stuck request ffff8880271b0600: control (read@3072,1024B). Runtime 30 seconds [ 916.172584][T18720] tipc: Enabling of bearer rejected, failed to enable media [ 916.246099][T18719] 8021q: adding VLAN 0 to HW filter on device bond20 [ 916.256247][T18719] team0: Port device bond20 added [ 916.466896][T18727] syzkaller0: entered promiscuous mode [ 916.623371][T18731] tipc: Enabling of bearer rejected, already enabled [ 916.884510][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 916.892582][ C0] lec:lec_tx_timeout: lec0 [ 916.897939][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 917.128374][T18744] syzkaller0: entered promiscuous mode [ 917.133877][T18744] syzkaller0: entered allmulticast mode [ 917.437623][T18739] syzkaller0 speed is unknown, defaulting to 1000 [ 917.448267][T18739] gre0 speed is unknown, defaulting to 1000 [ 917.637614][T18755] 0: reclassify loop, rule prio 0, protocol 800 [ 917.688127][T18759] tipc: Enabled bearer , priority 0 [ 917.706383][T18759] syzkaller0: entered promiscuous mode [ 917.711884][T18759] syzkaller0: entered allmulticast mode [ 917.788753][T18759] tipc: Resetting bearer [ 917.826326][T18756] tipc: Resetting bearer [ 917.933733][T18756] tipc: Disabling bearer [ 918.361186][T18761] syzkaller0 speed is unknown, defaulting to 1000 [ 918.370913][T18761] gre0 speed is unknown, defaulting to 1000 [ 918.473110][T18779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19769'. [ 918.484740][T18779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19769'. [ 918.613732][T18784] syzkaller0: entered promiscuous mode [ 918.619489][T18784] syzkaller0: entered allmulticast mode [ 918.680136][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab30400: rx timeout, send abort [ 918.787072][T18789] netlink: 'syz.2.19773': attribute type 1 has an invalid length. [ 918.969103][T18792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19773'. [ 918.992878][T18791] bond20: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 919.150118][T18789] veth25: entered promiscuous mode [ 919.175338][T18789] bond20: (slave veth25): Enslaving as a backup interface with a down link [ 919.188745][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab30400: abort rx timeout. Force session deactivation [ 919.194536][ T58] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 919.201504][T18792] 8021q: adding VLAN 0 to HW filter on device bond20 [ 919.314901][ T1134] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 919.563525][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19776'. [ 919.586656][T18796] batman_adv: batadv0: Interface activated: vlan4 [ 919.665867][T18796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.679158][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e5c800: rx timeout, send abort [ 919.696211][T18796] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.722837][T18796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.761142][T10157] gre0 speed is unknown, defaulting to 1000 [ 919.767989][T10157] syz1: Port: 1 Link ACTIVE [ 919.804741][T10157] gre0 speed is unknown, defaulting to 1000 [ 920.069793][T18812] netlink: 'syz.2.19777': attribute type 1 has an invalid length. [ 920.142923][T18812] bond21: entered promiscuous mode [ 920.171262][T18812] bond21: entered allmulticast mode [ 920.184980][T18812] 8021q: adding VLAN 0 to HW filter on device bond21 [ 920.191706][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e5c800: abort rx timeout. Force session deactivation [ 920.265361][T18815] macvlan2: entered promiscuous mode [ 920.270695][T18815] macvlan2: entered allmulticast mode [ 920.278349][T18815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 920.355256][T18819] syzkaller0: entered promiscuous mode [ 920.441430][T18819] syzkaller0: entered allmulticast mode [ 920.577722][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19782'. [ 920.604613][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19782'. [ 920.668330][ T1134] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.684831][ T1134] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.701887][ T1134] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.721681][ T1134] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 920.878488][T18834] netlink: 'syz.4.19785': attribute type 1 has an invalid length. [ 920.955798][T18834] 8021q: adding VLAN 0 to HW filter on device bond26 [ 920.991493][T18836] bond21: (slave dummy0): Releasing active interface [ 921.025320][T18836] dummy0: left allmulticast mode [ 921.066616][T18836] bond26: (slave dummy0): making interface the new active one [ 921.086466][T18836] bond26: (slave dummy0): Enslaving as an active interface with an up link [ 921.367207][T18843] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 921.658757][T18855] netlink: 'syz.1.19790': attribute type 4 has an invalid length. [ 921.685226][T18855] netlink: 'syz.1.19790': attribute type 4 has an invalid length. [ 921.723724][T18855] netlink: 'syz.1.19790': attribute type 4 has an invalid length. [ 921.794206][T18858] netlink: 'syz.3.19793': attribute type 39 has an invalid length. [ 921.905411][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 921.913467][ C0] lec:lec_tx_timeout: lec0 [ 921.918330][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 922.021380][T18866] syzkaller0: entered promiscuous mode [ 922.035736][T18866] syzkaller0: entered allmulticast mode [ 922.055938][T18866] TC_ACT_REPEAT abuse ? [ 922.293379][T18877] syzkaller0: entered promiscuous mode [ 922.299785][T18877] syzkaller0: entered allmulticast mode [ 922.653461][T18882] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 922.661075][T18882] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 922.668927][T18882] tipc: Resetting bearer [ 923.226697][T18901] syzkaller0: entered promiscuous mode [ 923.233164][T18901] syzkaller0: entered allmulticast mode [ 923.243694][T18896] TC_ACT_REPEAT abuse ? [ 923.468531][T18913] tipc: Enabling of bearer rejected, already enabled [ 923.695721][T18929] siw: device registration error -23 [ 923.915728][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19814'. [ 924.105478][T18922] bond1: entered promiscuous mode [ 924.205263][T18922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.261049][T18931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.305400][T18931] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 924.355877][T18931] bond1: (slave vti0): Error -95 calling set_mac_address [ 924.495286][T18928] syzkaller0 speed is unknown, defaulting to 1000 [ 924.517144][T18928] gre0 speed is unknown, defaulting to 1000 [ 924.706907][T18951] netlink: 'syz.0.19819': attribute type 10 has an invalid length. [ 924.715605][T18951] team0: left allmulticast mode [ 924.720490][T18951] : left allmulticast mode [ 924.754664][T18951] bridge5: left allmulticast mode [ 924.759745][T18951] bridge6: left allmulticast mode [ 924.797403][T18951] team0: left promiscuous mode [ 924.802278][T18951] : left promiscuous mode [ 924.807365][T18951] bridge5: left promiscuous mode [ 924.812568][T18951] bridge6: left promiscuous mode [ 924.818061][T18951] bridge0: port 5(team0) entered disabled state [ 925.420410][T18963] syzkaller0 speed is unknown, defaulting to 1000 [ 925.447405][T18978] lo: entered allmulticast mode [ 925.456652][T18978] tunl0: entered allmulticast mode [ 925.465588][T18978] gre0: entered allmulticast mode [ 925.471224][T18978] gretap0: entered allmulticast mode [ 925.478156][T18978] erspan0: entered allmulticast mode [ 925.483643][T18978] ip_vti0: entered allmulticast mode [ 925.490735][T18978] ip6_vti0: entered allmulticast mode [ 925.496871][T18978] sit0: entered allmulticast mode [ 925.502129][T18978] ip6tnl0: entered allmulticast mode [ 925.507665][T18978] ip6gre0: entered allmulticast mode [ 925.513356][T18978] `: entered allmulticast mode [ 925.518583][T18978] nlmon0: entered allmulticast mode [ 925.524008][T18978] caif0: entered allmulticast mode [ 925.529371][T18978] batadv0: entered allmulticast mode [ 925.534900][T18978] veth0: entered allmulticast mode [ 925.540096][T18978] veth1: entered allmulticast mode [ 925.545462][T18978] wg0: entered allmulticast mode [ 925.550556][T18978] wg1: entered allmulticast mode [ 925.555882][T18978] wg2: entered allmulticast mode [ 925.560922][T18978] veth0_to_bridge: entered allmulticast mode [ 925.567295][T18978] bridge_slave_0: entered allmulticast mode [ 925.573409][T18978] veth0_to_bond: entered allmulticast mode [ 925.579656][T18978] bond_slave_0: entered allmulticast mode [ 925.586378][T18978] veth1_to_bond: entered allmulticast mode [ 925.592278][T18978] bond_slave_1: entered allmulticast mode [ 925.599191][T18978] veth0_to_team: entered allmulticast mode [ 925.605656][T18978] C: entered allmulticast mode [ 925.610651][T18978] veth1_to_team: entered allmulticast mode [ 925.616740][T18978] team_slave_1: entered allmulticast mode [ 925.622609][T18978] veth1_to_batadv: entered allmulticast mode [ 925.628931][T18978] batadv_slave_1: entered allmulticast mode [ 925.635202][T18978] xfrm0: entered allmulticast mode [ 925.640426][T18978] veth0_to_hsr: entered allmulticast mode [ 925.646357][T18978] hsr_slave_0: entered allmulticast mode [ 925.652101][T18978] veth1_to_hsr: entered allmulticast mode [ 925.658105][T18978] hsr_slave_1: entered allmulticast mode [ 925.663829][T18978] hsr0: entered allmulticast mode [ 925.669716][T18978] veth1_virt_wifi: entered allmulticast mode [ 925.676041][T18978] veth0_virt_wifi: entered allmulticast mode [ 925.682548][T18978] virt_wifi0: entered allmulticast mode [ 925.688678][T18978] veth1_macvtap: entered allmulticast mode [ 925.695145][T18978] veth0_macvtap: entered allmulticast mode [ 925.701138][T18978] macvtap0: entered allmulticast mode [ 925.707055][T18978] macsec0: entered allmulticast mode [ 925.712476][T18978] geneve0: entered allmulticast mode [ 925.718670][T18978] geneve1: entered allmulticast mode [ 925.724129][T18978] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 925.731413][T18978] bridge1: entered allmulticast mode [ 925.736919][T18978] batadv1: entered allmulticast mode [ 925.742307][T18978] ip6gretap1: entered allmulticast mode [ 925.749321][T18978] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 925.756908][T18978] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode [ 925.764165][T18978] ip6gretap2: entered allmulticast mode [ 925.769929][T18978] ip6erspan0: entered allmulticast mode [ 925.775707][T18978] bond1: entered allmulticast mode [ 925.780892][T18978] gre1: entered allmulticast mode [ 925.786105][T18978] mac80211_hwsim hwsim18 wlan4: entered allmulticast mode [ 925.793408][T18978] geneve2: entered allmulticast mode [ 925.799041][T18978] syztnl2: entered allmulticast mode [ 925.804426][T18978] bridge2: entered allmulticast mode [ 925.810361][T18978] mac80211_hwsim hwsim19 wlan5: entered allmulticast mode [ 925.818007][T18978] geneve3: entered allmulticast mode [ 925.823370][T18978] bridge3: entered allmulticast mode [ 925.828960][T18978] gretap1: entered allmulticast mode [ 925.834385][T18978] mac80211_hwsim hwsim23 wlan6: entered allmulticast mode [ 925.841883][T18978] bridge4: entered allmulticast mode [ 925.847342][T18978] erspan1: entered allmulticast mode [ 925.852711][T18978] ipip0: entered allmulticast mode [ 925.858076][T18978] bridge5: entered allmulticast mode [ 925.863467][T18978] gtp0: entered allmulticast mode [ 925.868746][T18978] wireguard0: entered allmulticast mode [ 925.874370][T18978] bond2: entered allmulticast mode [ 925.879785][T18978] ip6gre1: entered allmulticast mode [ 925.885223][T18978] gretap2: entered allmulticast mode [ 925.890580][T18978] ip6gre2: entered allmulticast mode [ 925.896092][T18978] syztnl1: entered allmulticast mode [ 925.901458][T18978] ipip1: entered allmulticast mode [ 925.906803][T18978] 7: entered allmulticast mode [ 925.911640][T18978] ip6tnl1: entered allmulticast mode [ 925.917496][T18978] sit1: entered allmulticast mode [ 925.922588][T18978] macsec1: entered allmulticast mode [ 925.928200][T18978] bond3: entered allmulticast mode [ 925.933429][T18978] tap0: entered allmulticast mode [ 925.938744][T18978] macvlan0: entered allmulticast mode [ 925.944214][T18978] gtp1: entered allmulticast mode [ 925.949466][T18978] ipvlan0: entered allmulticast mode [ 925.955180][T18978] vxlan0: entered allmulticast mode [ 925.960491][T18978] vxlan1: entered allmulticast mode [ 925.965812][T18978] mac80211_hwsim hwsim9 veth1_to_bod: entered allmulticast mode [ 925.973655][T18978] netdevsim netdevsim2 eth0: entered allmulticast mode [ 925.980847][T18978] netdevsim netdevsim2 eth1: entered allmulticast mode [ 925.987946][T18978] netdevsim netdevsim2 eth2: entered allmulticast mode [ 925.995182][T18978] netdevsim netdevsim2 eth3: entered allmulticast mode [ 926.002169][T18978] ip6erspan1: entered allmulticast mode [ 926.007901][T18978] gretap3: entered allmulticast mode [ 926.013271][T18978] bond0: entered allmulticast mode [ 926.018631][T18978] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 926.026036][T18978] sit2: entered allmulticast mode [ 926.031126][T18978] sit3: entered allmulticast mode [ 926.036432][T18978] bond4: entered allmulticast mode [ 926.041649][T18978] sit4: entered allmulticast mode [ 926.046880][T18978] sit5: entered allmulticast mode [ 926.051983][T18978] bond5: entered allmulticast mode [ 926.057327][T18978] bridge0: entered allmulticast mode [ 926.062691][T18978] vti60: entered allmulticast mode [ 926.068496][T18978] gretap4: entered allmulticast mode [ 926.073879][T18978] gtp2: entered allmulticast mode [ 926.079249][T18978] bond6: entered allmulticast mode [ 926.084603][T18978] bond7: entered allmulticast mode [ 926.089723][T18978] gretap5: entered allmulticast mode [ 926.095433][T18978] bond8: entered allmulticast mode [ 926.100626][T18978] gre2: entered allmulticast mode [ 926.106013][T18978] ipvlan1: entered allmulticast mode [ 926.111389][T18978] gretap6: entered allmulticast mode [ 926.117075][T18978] >: entered allmulticast mode [ 926.121912][T18978] sit6: entered allmulticast mode [ 926.127182][T18978] bridge6: entered allmulticast mode [ 926.132547][T18978] sit7: entered allmulticast mode [ 926.137918][T18978] bond9: entered allmulticast mode [ 926.143021][T18978] gretap7: entered allmulticast mode [ 926.149161][T18978] bond10: entered allmulticast mode [ 926.154448][T18978] !9: entered allmulticast mode [ 926.160027][T18978] bridge7: entered allmulticast mode [ 926.165491][T18978] bridge8: entered allmulticast mode [ 926.170891][T18978] veth2: entered allmulticast mode [ 926.176271][T18978] veth3: entered allmulticast mode [ 926.181886][T18978] veth4: entered allmulticast mode [ 926.187227][T18978] veth5: entered allmulticast mode [ 926.192427][T18978] veth6: entered allmulticast mode [ 926.198015][T18978] veth7: entered allmulticast mode [ 926.203204][T18978] veth8: entered allmulticast mode [ 926.208495][T18978] veth9: entered allmulticast mode [ 926.213695][T18978] veth10: entered allmulticast mode [ 926.219168][T18978] veth11: entered allmulticast mode [ 926.224634][T18978] veth12: entered allmulticast mode [ 926.229982][T18978] veth13: entered allmulticast mode [ 926.235385][T18978] bridge9: entered allmulticast mode [ 926.240732][T18978] veth14: entered allmulticast mode [ 926.246215][T18978] veth15: entered allmulticast mode [ 926.251505][T18978] : entered allmulticast mode [ 926.256493][T18978] bond11: entered allmulticast mode [ 926.261765][T18978] mac80211_hwsim hwsim44 wlan7: entered allmulticast mode [ 926.269105][T18978] : entered allmulticast mode [ 926.274009][T18978] bond12: entered allmulticast mode [ 926.279503][T18978] gretap8: entered allmulticast mode [ 926.285356][T18978] bridge10: entered allmulticast mode [ 926.293726][T18978] bridge11: entered allmulticast mode [ 926.301675][T18978] bond13: left promiscuous mode [ 926.306777][T18978] bond13: entered allmulticast mode [ 926.313403][T18978] bridge12: entered allmulticast mode [ 926.321301][T18978] gre3: entered allmulticast mode [ 926.328278][T18978] bond14: entered allmulticast mode [ 926.333605][T18978] bridge13: entered allmulticast mode [ 926.339318][T18978] gtp3: entered allmulticast mode [ 926.346172][T18978] bond15: entered allmulticast mode [ 926.351371][T18978] geneve4: entered allmulticast mode [ 926.363588][T18978] sit8: entered allmulticast mode [ 926.368917][T18978] bridge14: entered allmulticast mode [ 926.374355][T18978] veth16: entered allmulticast mode [ 926.380755][T18978] bond18: left promiscuous mode [ 926.385804][T18978] bridge15: left promiscuous mode [ 926.390962][T18978] bridge16: left promiscuous mode [ 926.401964][T18978] ieee802154 phy3 wpan0: entered allmulticast mode [ 926.409099][T18978] bond19: entered allmulticast mode [ 926.415418][T18978] veth18: entered allmulticast mode [ 926.420964][T18978] veth19: entered allmulticast mode [ 926.428471][T18978] veth20: entered allmulticast mode [ 926.433876][T18978] veth21: entered allmulticast mode [ 926.439444][T18978] veth22: entered allmulticast mode [ 926.445121][T18978] veth23: entered allmulticast mode [ 926.450738][T18978] bond20: entered allmulticast mode [ 926.456386][T18978] ip6gretap3: entered allmulticast mode [ 926.461926][T18978] veth25: entered allmulticast mode [ 926.470257][T18978] veth24: entered allmulticast mode [ 926.476007][T18978] veth25: left promiscuous mode [ 926.481882][T18978] bond21: left promiscuous mode [ 926.487676][T18963] gre0 speed is unknown, defaulting to 1000 [ 926.510102][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.522050][T18982] tipc: Resetting bearer [ 926.593812][ T1124] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.641518][ T1124] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.650095][ T1124] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.690009][ T1124] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.924660][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 926.932725][ C0] lec:lec_tx_timeout: lec0 [ 926.937551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 927.093817][T18994] tipc: Resetting bearer [ 927.423555][T19010] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 927.445038][T19010] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 927.478849][T19010] tipc: Resetting bearer [ 927.729694][T19020] netlink: 656 bytes leftover after parsing attributes in process `syz.0.19837'. [ 928.072049][T19033] netlink: 'syz.0.19840': attribute type 21 has an invalid length. [ 928.105039][T19033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19840'. [ 928.273074][T19038] syzkaller0: entered promiscuous mode [ 928.294837][T19038] syzkaller0: entered allmulticast mode [ 928.336435][T19038] simple: basic_2 [ 928.340504][T19038] simple: basic_4 [ 928.344147][T19038] simple: basic_6 [ 928.347828][T19038] simple: basic_8 [ 928.351482][T19038] simple: basic_10 [ 928.355240][T19038] simple: basic_12 [ 928.358962][T19038] simple: basic_14 [ 928.362678][T19038] simple: basic_16 [ 928.366421][T19038] simple: basic_18 [ 928.370144][T19038] simple: basic_20 [ 928.371650][T19046] netlink: 'syz.0.19843': attribute type 1 has an invalid length. [ 928.373867][T19038] simple: basic_22 [ 928.385423][T19038] simple: basic_24 [ 928.389151][T19038] simple: basic_26 [ 928.392876][T19038] simple: basic_28 [ 928.396644][T19038] simple: basic_30 [ 928.400369][T19038] simple: basic_32 [ 928.404091][T19038] simple: basic_34 [ 928.407847][T19038] 0: reclassify loop, rule prio 0, protocol 800 [ 928.580696][T19046] 8021q: adding VLAN 0 to HW filter on device bond13 [ 928.681693][T19046] netlink: 'syz.0.19843': attribute type 1 has an invalid length. [ 928.823053][T19040] mpoa:mpoad_close: () going down [ 928.828458][T19046] bond13: (slave batadv1): Opening slave failed [ 928.855606][T19060] syzkaller0: entered promiscuous mode [ 928.875954][T19060] syzkaller0: entered allmulticast mode [ 929.030763][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19846'. [ 929.239174][T19081] netlink: 'syz.4.19850': attribute type 39 has an invalid length. [ 929.312466][T19087] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19848'. [ 930.838685][T19083] tipc: Enabled bearer , priority 14 [ 930.845604][T19087] 0X: renamed from caif0 [ 930.851338][T19087] tipc: Disabling bearer [ 930.858434][T19087] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 930.890374][T19094] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 930.914720][T19094] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 930.922643][T19094] tipc: Resetting bearer [ 930.933184][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19849'. [ 930.944817][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19849'. [ 930.996815][T19095] syzkaller0: entered promiscuous mode [ 931.002329][T19095] syzkaller0: entered allmulticast mode [ 931.036787][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19855'. [ 931.947014][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 931.955058][ C0] lec:lec_tx_timeout: lec0 [ 931.959641][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 932.828650][T19149] tipc: Enabling of bearer rejected, already enabled [ 932.996128][T19151] vlan0: entered allmulticast mode [ 933.091700][T19166] netlink: 'syz.2.19863': attribute type 2 has an invalid length. [ 933.109054][T19166] : entered promiscuous mode [ 933.134201][T19166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19863'. [ 933.148907][T19166] netlink: 67 bytes leftover after parsing attributes in process `syz.2.19863'. [ 933.201628][T19168] tipc: Enabled bearer , priority 0 [ 933.225963][T19168] syzkaller0: entered promiscuous mode [ 933.234071][T19168] syzkaller0: entered allmulticast mode [ 933.301473][T19168] tipc: Resetting bearer [ 933.324444][T19167] tipc: Resetting bearer [ 933.375722][T19167] tipc: Disabling bearer [ 933.402179][T19172] scsi_nl_rcv_msg: discarding partial skb [ 933.598673][T19185] tipc: Enabled bearer , priority 0 [ 933.619507][T19185] syzkaller0: entered promiscuous mode [ 933.627395][T19185] syzkaller0: entered allmulticast mode [ 933.709989][T19185] tipc: Resetting bearer [ 933.765824][T19184] tipc: Resetting bearer [ 933.855732][T19184] tipc: Disabling bearer [ 933.916262][T19197] syzkaller0: entered promiscuous mode [ 933.937084][T19197] syzkaller0: entered allmulticast mode [ 933.945070][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19872'. [ 934.129043][T19207] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 934.144946][T19207] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 934.246908][T19214] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 934.292752][T19212] syzkaller0: entered promiscuous mode [ 934.298563][T19212] syzkaller0: entered allmulticast mode [ 934.310165][T19212] 0: reclassify loop, rule prio 0, protocol 800 [ 934.613555][T19234] netlink: 'syz.1.19887': attribute type 5 has an invalid length. [ 934.962999][T19253] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 935.129030][T19257] netlink: 'syz.3.19893': attribute type 10 has an invalid length. [ 935.338573][T19262] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 935.349079][T19262] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 935.357547][T19262] tipc: Resetting bearer [ 935.415689][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19896'. [ 935.491670][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19897'. [ 935.516774][T19266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 935.641442][T19270] netlink: 148 bytes leftover after parsing attributes in process `syz.4.19898'. [ 935.670206][T19270] netlink: 116 bytes leftover after parsing attributes in process `syz.4.19898'. [ 935.672570][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19900'. [ 935.691791][T19270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19898'. [ 935.706427][T19273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19899'. [ 935.726671][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19900'. [ 935.745387][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19900'. [ 935.758556][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19900'. [ 935.955065][T19286] netlink: 'syz.1.19904': attribute type 1 has an invalid length. [ 935.972634][T19284] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 935.980307][T19284] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 935.988880][T19284] tipc: Resetting bearer [ 936.024656][T19286] 8021q: adding VLAN 0 to HW filter on device bond15 [ 936.056528][T19292] bond15: (slave veth23): Enslaving as an active interface with a down link [ 936.079000][T19287] syzkaller0: entered promiscuous mode [ 936.085149][T19287] syzkaller0: entered allmulticast mode [ 936.105389][T19295] tipc: Enabled bearer , priority 0 [ 936.115742][T19295] syzkaller0: entered promiscuous mode [ 936.121227][T19295] syzkaller0: entered allmulticast mode [ 936.202155][T19298] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 936.209552][T19298] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 936.217263][T19298] tipc: Resetting bearer [ 936.232710][T19292] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 936.240274][T19292] bond15: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 936.277644][T19295] tipc: Resetting bearer [ 936.290424][T19294] tipc: Resetting bearer [ 936.331554][T19294] tipc: Disabling bearer [ 936.592773][T19318] syzkaller0: entered promiscuous mode [ 936.607485][T19318] syzkaller0: entered allmulticast mode [ 936.819263][T19331] syzkaller0: entered promiscuous mode [ 936.828482][T19331] syzkaller0: entered allmulticast mode [ 936.966390][T19339] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 936.982010][T19339] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 937.096431][T19345] syzkaller0: entered promiscuous mode [ 937.101937][T19345] syzkaller0: entered allmulticast mode [ 937.317111][T19352] netlink: 'syz.0.19926': attribute type 58 has an invalid length. [ 937.613561][T19360] netlink: 'syz.1.19929': attribute type 1 has an invalid length. [ 937.623946][T19360] netlink: 'syz.1.19929': attribute type 1 has an invalid length. [ 937.744535][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 937.752611][ C0] lec:lec_tx_timeout: lec0 [ 937.757624][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 938.088787][T19365] syzkaller0 speed is unknown, defaulting to 1000 [ 938.109607][T19365] gre0 speed is unknown, defaulting to 1000 [ 938.354097][T19380] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 938.362009][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 939.296668][T19398] syzkaller0 speed is unknown, defaulting to 1000 [ 939.305019][T19398] gre0 speed is unknown, defaulting to 1000 [ 939.673974][T19427] bond0: option packets_per_slave: invalid value (18446744071972701165) [ 939.704700][T19427] bond0: option packets_per_slave: allowed values 0 - 65535 [ 941.369852][T19496] __nla_validate_parse: 29 callbacks suppressed [ 941.369872][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19952'. [ 941.386142][T19496] netlink: 'syz.1.19952': attribute type 7 has an invalid length. [ 941.393975][T19496] netlink: 'syz.1.19952': attribute type 8 has an invalid length. [ 941.402496][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19952'. [ 941.423282][T19496] team0: entered promiscuous mode [ 941.430018][T19496] bond0: entered promiscuous mode [ 941.436045][T19496] batadv_slave_0: entered promiscuous mode [ 941.442846][T19496] erspan0: entered promiscuous mode [ 941.459203][T19496] erspan0: left promiscuous mode [ 941.464855][T19496] team0: left promiscuous mode [ 941.479171][T19496] bond0: left promiscuous mode [ 941.494265][T19496] batadv_slave_0: left promiscuous mode [ 941.671801][T19439] syzkaller0 speed is unknown, defaulting to 1000 [ 941.680597][T19455] syzkaller0 speed is unknown, defaulting to 1000 [ 941.721355][T19439] gre0 speed is unknown, defaulting to 1000 [ 942.426094][T19480] syzkaller0 speed is unknown, defaulting to 1000 [ 942.492126][T19455] gre0 speed is unknown, defaulting to 1000 [ 942.549148][T19525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19956'. [ 942.784726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 942.792781][ C0] lec:lec_tx_timeout: lec0 [ 942.797875][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 942.901567][T19480] gre0 speed is unknown, defaulting to 1000 [ 943.749813][T19559] syzkaller0: entered promiscuous mode [ 943.762242][T19558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19959'. [ 943.785635][T19559] syzkaller0: entered allmulticast mode [ 944.032398][T19567] siw: device registration error -23 [ 944.166804][T19574] netlink: 'syz.2.19962': attribute type 1 has an invalid length. [ 944.188856][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19962'. [ 944.600201][T19584] netlink: 324 bytes leftover after parsing attributes in process `syz.2.19964'. [ 945.360619][T19595] syzkaller1: entered promiscuous mode [ 945.384944][T19595] syzkaller1: entered allmulticast mode [ 945.516286][T19601] xt_hashlimit: size too large, truncated to 1048576 [ 945.533808][T19601] xt_hashlimit: max too large, truncated to 1048576 [ 945.855465][T19621] tipc: Enabling of bearer rejected, already enabled [ 945.866990][T19623] netlink: 'syz.1.19977': attribute type 1 has an invalid length. [ 945.953559][T19631] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 945.961618][T19631] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 945.986279][T19631] tipc: Resetting bearer [ 946.003513][T19632] bond16: (slave vxcan7): The slave device specified does not support setting the MAC address [ 946.016142][T19632] bond16: (slave vxcan7): Error -95 calling set_mac_address [ 946.041201][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19977'. [ 946.150709][T19623] bond16: (slave bridge15): Enslaving as an active interface with a down link [ 946.156806][ T2414] block nbd4: Possible stuck request ffff8880271b0000: control (read@0,1024B). Runtime 60 seconds [ 946.170679][ T2414] block nbd4: Possible stuck request ffff8880271b0200: control (read@1024,1024B). Runtime 60 seconds [ 946.184571][ T2414] block nbd4: Possible stuck request ffff8880271b0400: control (read@2048,1024B). Runtime 60 seconds [ 946.195789][ T2414] block nbd4: Possible stuck request ffff8880271b0600: control (read@3072,1024B). Runtime 60 seconds [ 946.246394][T19623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19977'. [ 946.311508][T19623] 8021q: adding VLAN 0 to HW filter on device bond16 [ 946.418384][T19632] macvlan0: entered promiscuous mode [ 946.429529][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19983'. [ 946.449218][T19632] macvlan0: entered allmulticast mode [ 946.495467][T19632] bond16: entered promiscuous mode [ 946.501486][T19632] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 946.518956][T19632] bond16: left promiscuous mode [ 946.539593][T19616] syzkaller0 speed is unknown, defaulting to 1000 [ 946.576498][T19651] syzkaller0: entered promiscuous mode [ 946.582010][T19651] syzkaller0: entered allmulticast mode [ 946.603041][T19616] gre0 speed is unknown, defaulting to 1000 [ 946.807392][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19988'. [ 947.571616][T19696] netlink: 84 bytes leftover after parsing attributes in process `syz.4.19995'. [ 947.597072][T19696] netlink: 84 bytes leftover after parsing attributes in process `syz.4.19995'. [ 947.649822][T19696] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 947.780751][T19702] sctp: [Deprecated]: syz.1.19996 (pid 19702) Use of int in maxseg socket option. [ 947.780751][T19702] Use struct sctp_assoc_value instead [ 947.804525][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 947.812540][ C0] lec:lec_tx_timeout: lec0 [ 947.824604][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 948.358964][T19701] syzkaller0 speed is unknown, defaulting to 1000 [ 948.436107][T19701] gre0 speed is unknown, defaulting to 1000 [ 948.454925][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20000'. [ 948.555320][T19719] netlink: 11 bytes leftover after parsing attributes in process `syz.3.20001'. [ 948.588212][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20000'. [ 948.699444][T19715] 8021q: adding VLAN 0 to HW filter on device bond14 [ 948.733960][T19723] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20000'. [ 948.850640][T19717] 8021q: adding VLAN 0 to HW filter on device bond15 [ 948.916914][T19717] bond14: (slave bond15): Enslaving as an active interface with an up link [ 949.001291][T19720] bond14 (unregistering): (slave bond15): Releasing backup interface [ 949.026229][T19720] bond14 (unregistering): Released all slaves [ 949.054912][T19726] syzkaller0: entered promiscuous mode [ 949.060426][T19726] syzkaller0: entered allmulticast mode [ 949.249434][T19744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20005'. [ 949.272921][T19745] netlink: 'syz.4.20004': attribute type 1 has an invalid length. [ 949.475806][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20007'. [ 949.820368][T19766] x_tables: duplicate underflow at hook 3 [ 950.095845][T19776] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 950.981818][T19765] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 951.101272][T19798] IPVS: stopping backup sync thread 23037 ... [ 951.824693][T16223] Bluetooth: hci4: command 0x0406 tx timeout [ 952.116949][T19829] __nla_validate_parse: 1 callbacks suppressed [ 952.116966][T19829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20024'. [ 952.360230][T19831] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 952.655275][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20027'. [ 952.675509][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20027'. [ 952.834573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 952.842681][ C0] lec:lec_tx_timeout: lec0 [ 952.847300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 953.010632][T19860] netlink: zone id is out of range [ 953.016990][T19860] netlink: zone id is out of range [ 953.022297][T19860] netlink: zone id is out of range [ 953.028223][T19860] netlink: zone id is out of range [ 953.049238][T19860] netlink: zone id is out of range [ 953.054386][T19860] netlink: zone id is out of range [ 953.070140][T19860] netlink: zone id is out of range [ 953.084810][T19860] netlink: zone id is out of range [ 953.090009][T19860] netlink: zone id is out of range [ 953.100155][T19860] netlink: zone id is out of range [ 953.231289][T19865] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.20035'. [ 953.546902][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20038'. [ 953.608965][T19877] bond14: entered promiscuous mode [ 953.614517][T19877] 8021q: adding VLAN 0 to HW filter on device bond14 [ 953.905491][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 953.921278][T19887] netlink: 72 bytes leftover after parsing attributes in process `syz.1.20044'. [ 953.938032][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20044'. [ 953.947832][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20044'. [ 953.965407][T19871] syzkaller0 speed is unknown, defaulting to 1000 [ 953.973957][T19871] gre0 speed is unknown, defaulting to 1000 [ 954.382028][T19900] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 954.400313][T19900] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 955.065716][T19912] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 955.126963][T19918] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.140710][T19904] syzkaller0 speed is unknown, defaulting to 1000 [ 955.159805][T19904] gre0 speed is unknown, defaulting to 1000 [ 955.519506][T19928] netlink: 'syz.4.20053': attribute type 24 has an invalid length. [ 955.528546][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20053'. [ 955.537643][T19928] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 955.721530][T19935] netlink: 'syz.4.20056': attribute type 2 has an invalid length. [ 955.732892][T19935] netlink: 164 bytes leftover after parsing attributes in process `syz.4.20056'. [ 955.734046][T19937] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 955.864293][T19939] tipc: Enabled bearer , priority 0 [ 955.904236][T19939] syzkaller0: entered promiscuous mode [ 955.922960][T19939] syzkaller0: entered allmulticast mode [ 956.040533][T19942] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 956.049549][T19942] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 956.072013][T19939] tipc: Resetting bearer [ 956.099519][T19938] tipc: Resetting bearer [ 956.123041][T19938] tipc: Disabling bearer [ 956.281543][T19948] syzkaller0: entered promiscuous mode [ 956.290943][T19948] syzkaller0: entered allmulticast mode [ 956.947714][T19950] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 956.960557][T19950] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 957.053900][T19950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 957.064589][T19950] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 957.122617][T19950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 957.137015][T19950] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 957.162786][T19950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 957.168910][T19950] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 957.854554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 957.862638][ C0] lec:lec_tx_timeout: lec0 [ 957.867396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 958.179514][T19957] syzkaller0 speed is unknown, defaulting to 1000 [ 958.180493][T19950] tipc: Resetting bearer [ 958.208300][T19950] tipc: Resetting bearer [ 958.256338][T19957] gre0 speed is unknown, defaulting to 1000 [ 958.574011][T19989] __nla_validate_parse: 2 callbacks suppressed [ 958.574031][T19989] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20069'. [ 959.003296][T20009] gretap2: entered promiscuous mode [ 959.090632][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20071'. [ 959.131288][T20011] batman_adv: batadv0: Adding interface: ipvlan4 [ 959.298425][T20011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.377448][T20011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.434924][T20011] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 959.670973][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20072'. [ 959.815558][T19988] syzkaller0 speed is unknown, defaulting to 1000 [ 959.831144][T19988] gre0 speed is unknown, defaulting to 1000 [ 961.819704][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20079'. [ 961.836654][T20058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20079'. [ 962.111188][T20074] xt_hashlimit: size too large, truncated to 1048576 [ 962.112183][T20076] netlink: 'syz.4.20081': attribute type 29 has an invalid length. [ 962.122748][T20074] xt_hashlimit: max too large, truncated to 1048576 [ 962.173477][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20081'. [ 962.253910][T20076] netlink: 'syz.4.20081': attribute type 29 has an invalid length. [ 962.287054][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20081'. [ 962.372260][T20088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20085'. [ 962.677307][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20090'. [ 962.719550][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20090'. [ 962.779651][T20113] geneve4: entered promiscuous mode [ 962.800657][ T1101] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.829135][ T1101] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.863399][ T1101] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.874507][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 962.882544][ C0] lec:lec_tx_timeout: lec0 [ 962.887223][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 962.921228][ T1101] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.687538][T20156] netlink: 'syz.3.20100': attribute type 1 has an invalid length. [ 963.733919][T20156] __nla_validate_parse: 1 callbacks suppressed [ 963.733940][T20156] netlink: 240 bytes leftover after parsing attributes in process `syz.3.20100'. [ 963.740827][T20157] veth0: Caught tx_queue_len zero misconfig [ 964.225427][T20164] xt_hashlimit: size too large, truncated to 1048576 [ 964.241562][T20164] xt_hashlimit: max too large, truncated to 1048576 [ 964.393562][T20170] xt_hashlimit: size too large, truncated to 1048576 [ 964.474794][T20152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20097'. [ 964.806165][T20187] netlink: 'syz.1.20106': attribute type 21 has an invalid length. [ 964.814130][T20187] IPv6: NLM_F_CREATE should be specified when creating new route [ 965.020754][ T5198] udevd[5198]: worker [17698] /devices/virtual/block/nbd4 is taking a long time [ 966.669033][T20231] syzkaller0 speed is unknown, defaulting to 1000 [ 966.677546][T20231] gre0 speed is unknown, defaulting to 1000 [ 966.884383][ T30] audit: type=1107 audit(1775526833.718:25): pid=20277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 966.941213][T20278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20119'. [ 967.056989][T20280] netlink: 'syz.3.20120': attribute type 16 has an invalid length. [ 967.067531][T20280] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20120'. [ 967.091342][T20283] netlink: 380 bytes leftover after parsing attributes in process `syz.0.20121'. [ 967.333595][T20283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20121'. [ 967.894596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 967.902643][ C0] lec:lec_tx_timeout: lec0 [ 967.907416][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 967.980345][T20308] tipc: Enabling of bearer rejected, already enabled [ 968.042243][T20312] netlink: 'syz.1.20128': attribute type 89 has an invalid length. [ 968.066302][T20300] syzkaller0 speed is unknown, defaulting to 1000 [ 968.079584][T20300] gre0 speed is unknown, defaulting to 1000 [ 968.712522][T20327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20133'. [ 968.754696][T20327] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20133'. [ 968.811711][T20329] netlink: 'syz.3.20133': attribute type 13 has an invalid length. [ 968.842891][T20329] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20133'. [ 969.523993][T20356] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 970.144845][T20366] netlink: 'syz.1.20145': attribute type 1 has an invalid length. [ 970.316885][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20147'. [ 970.605369][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20147'. [ 971.741717][T20417] debugfs: 'netdev:syzkaller0' already exists in 'phy5' [ 972.223127][T20429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20166'. [ 972.249083][T20429] tipc: Enabling of bearer rejected, already enabled [ 972.461203][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20171'. [ 972.464986][T20435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20169'. [ 972.601259][T20435] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.20169'. [ 972.617793][T20435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20169'. [ 972.640236][T20426] syzkaller0 speed is unknown, defaulting to 1000 [ 972.674321][T20426] gre0 speed is unknown, defaulting to 1000 [ 972.914731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 972.922830][ C0] lec:lec_tx_timeout: lec0 [ 972.927639][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 973.027108][T20463] netlink: 'syz.1.20181': attribute type 1 has an invalid length. [ 973.036225][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20181'. [ 973.094264][T20446] lo speed is unknown, defaulting to 1000 [ 973.102573][T20446] lo speed is unknown, defaulting to 1000 [ 973.109939][T20446] lo speed is unknown, defaulting to 1000 [ 973.678565][T20446] infiniband syz0: set active [ 973.683547][ T796] lo speed is unknown, defaulting to 1000 [ 973.724645][T20446] infiniband syz0: added lo [ 973.730980][T20446] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 973.754951][T20446] infiniband syz0: Couldn't open port 1 [ 973.848697][T20446] RDS/IB: syz0: added [ 973.852792][T20446] smc: adding ib device syz0 with port count 1 [ 973.874684][T20446] smc: ib device syz0 port 1 has no pnetid [ 973.880969][ T796] lo speed is unknown, defaulting to 1000 [ 973.904818][T20446] lo speed is unknown, defaulting to 1000 [ 974.293526][T20511] __nla_validate_parse: 2 callbacks suppressed [ 974.293546][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20192'. [ 974.329856][T20446] lo speed is unknown, defaulting to 1000 [ 974.654829][T20446] lo speed is unknown, defaulting to 1000 [ 974.701419][T20520] syzkaller0: entered promiscuous mode [ 974.728202][T20520] syzkaller0: entered allmulticast mode [ 974.902244][T20527] veth0: left allmulticast mode [ 975.062386][T20535] netlink: 'syz.2.20198': attribute type 1 has an invalid length. [ 975.207867][T20540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20198'. [ 975.284098][T20537] bond22: (slave geneve6): making interface the new active one [ 975.305338][T20537] bond22: (slave geneve6): Enslaving as an active interface with an up link [ 975.412949][T20539] bond16: option lacp_active: invalid value (8) [ 975.421537][T20539] bond16 (unregistering): Released all slaves [ 975.464339][ T83] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.475911][T20540] 8021q: adding VLAN 0 to HW filter on device bond22 [ 975.485160][T20446] lo speed is unknown, defaulting to 1000 [ 975.505919][ T83] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.514767][T20513] syzkaller0 speed is unknown, defaulting to 1000 [ 975.643906][T20552] netlink: 76 bytes leftover after parsing attributes in process `syz.3.20200'. [ 975.697585][T20544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.708607][T20544] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.723423][T20544] net_ratelimit: 431 callbacks suppressed [ 975.723433][T20544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 975.749404][ T83] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 975.758604][T20513] gre0 speed is unknown, defaulting to 1000 [ 975.767200][ T83] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 976.024354][T20558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.145583][T20563] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 976.165875][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20204'. [ 976.175245][T20567] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 976.234549][ T2414] block nbd4: Possible stuck request ffff8880271b0000: control (read@0,1024B). Runtime 90 seconds [ 976.245600][ T2414] block nbd4: Possible stuck request ffff8880271b0200: control (read@1024,1024B). Runtime 90 seconds [ 976.256585][ T2414] block nbd4: Possible stuck request ffff8880271b0400: control (read@2048,1024B). Runtime 90 seconds [ 976.267522][ T2414] block nbd4: Possible stuck request ffff8880271b0600: control (read@3072,1024B). Runtime 90 seconds [ 976.321104][T20446] lo speed is unknown, defaulting to 1000 [ 976.847187][T20584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20205'. [ 976.890369][T20565] syzkaller0 speed is unknown, defaulting to 1000 [ 977.139024][T20565] gre0 speed is unknown, defaulting to 1000 [ 977.213919][T20513] lo speed is unknown, defaulting to 1000 [ 977.776483][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20207'. [ 977.841824][T20446] lo speed is unknown, defaulting to 1000 [ 977.898255][ T51] block nbd5: Receive control failed (result -1) [ 977.934608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 977.942667][ C0] lec:lec_tx_timeout: lec0 [ 977.947387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 979.393470][T20613] netlink: 41 bytes leftover after parsing attributes in process `syz.4.20212'. [ 979.405544][T20613] netlink: 116 bytes leftover after parsing attributes in process `syz.4.20212'. [ 979.417809][T20613] netlink: 41 bytes leftover after parsing attributes in process `syz.4.20212'. [ 979.569283][T20615] netlink: 'syz.3.20213': attribute type 1 has an invalid length. [ 979.632906][T20621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20213'. [ 979.667682][T20615] 8021q: adding VLAN 0 to HW filter on device bond21 [ 980.018993][T20627] netlink: 'syz.2.20217': attribute type 21 has an invalid length. [ 980.091604][T20634] netlink: 'syz.2.20217': attribute type 1 has an invalid length. [ 980.099684][T20634] netlink: 124 bytes leftover after parsing attributes in process `syz.2.20217'. [ 980.237348][T20640] batman_adv: batadv0: Interface deactivated: vlan4 [ 980.747325][ T796] gre0 speed is unknown, defaulting to 1000 [ 980.762207][ T796] syz1: Port: 1 Link DOWN [ 980.802694][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.813168][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.831952][ T5270] gre0 speed is unknown, defaulting to 1000 [ 980.839202][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.862487][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.880741][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.904986][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.925956][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.934317][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.408761][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20232'. [ 981.699383][T20694] syzkaller0: entered promiscuous mode [ 981.721876][T20694] syzkaller0: entered allmulticast mode [ 982.268559][T20713] netlink: 'syz.2.20237': attribute type 2 has an invalid length. [ 982.306176][T20713] !: entered promiscuous mode [ 982.465213][T20721] smc: removing ib device !yz! [ 982.592604][T20725] syzkaller0: entered promiscuous mode [ 982.605952][T20725] syzkaller0: entered allmulticast mode [ 982.798300][T20733] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20242'. [ 982.839755][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20242'. [ 982.954727][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 982.962766][ C0] lec:lec_tx_timeout: lec0 [ 982.968640][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 983.103369][T20735] syzkaller0 speed is unknown, defaulting to 1000 [ 983.137797][T20735] gre0 speed is unknown, defaulting to 1000 [ 983.198591][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.209556][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.244342][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 983.299924][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.426544][T20740] tipc: Resetting bearer [ 983.606204][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.664695][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.715550][T13060] syzkaller0 speed is unknown, defaulting to 1000 [ 984.055534][T20745] netlink: 'syz.1.20245': attribute type 4 has an invalid length. [ 984.362318][T20735] lo speed is unknown, defaulting to 1000 [ 984.594186][T20758] veth1_macvtap: renamed from vlan1 [ 984.779811][T20760] xt_hashlimit: size too large, truncated to 1048576 [ 984.804778][T20760] xt_hashlimit: max too large, truncated to 1048576 [ 985.022644][T20766] [ 985.025010][T20766] ====================================================== [ 985.032061][T20766] WARNING: possible circular locking dependency detected [ 985.039089][T20766] syzkaller #0 Not tainted [ 985.043511][T20766] ------------------------------------------------------ [ 985.050525][T20766] syz.2.20250/20766 is trying to acquire lock: [ 985.056673][T20766] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 985.066007][T20766] [ 985.066007][T20766] but task is already holding lock: [ 985.073368][T20766] ffff8880597d6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 985.083117][T20766] [ 985.083117][T20766] which lock already depends on the new lock. [ 985.083117][T20766] [ 985.093527][T20766] [ 985.093527][T20766] the existing dependency chain (in reverse order) is: [ 985.102537][T20766] [ 985.102537][T20766] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 985.110459][T20766] lock_sock_nested+0x41/0x100 [ 985.115815][T20766] mptcp_sendmsg_fastopen+0x128/0x580 [ 985.121775][T20766] mptcp_sendmsg+0x17af/0x19d0 [ 985.127046][T20766] __sys_sendto+0x4a3/0x710 [ 985.132114][T20766] __x64_sys_sendto+0xde/0x100 [ 985.137387][T20766] do_syscall_64+0x14d/0xf80 [ 985.142528][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.148927][T20766] [ 985.148927][T20766] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 985.156641][T20766] lock_sock_nested+0x41/0x100 [ 985.161918][T20766] inet_shutdown+0x6a/0x390 [ 985.166929][T20766] nbd_mark_nsock_dead+0x2e9/0x560 [ 985.172603][T20766] recv_work+0x1c7f/0x1d90 [ 985.177557][T20766] process_scheduled_works+0xb6e/0x18c0 [ 985.183610][T20766] worker_thread+0xa53/0xfc0 [ 985.188707][T20766] kthread+0x388/0x470 [ 985.193279][T20766] ret_from_fork+0x51e/0xb90 [ 985.198377][T20766] ret_from_fork_asm+0x1a/0x30 [ 985.203653][T20766] [ 985.203653][T20766] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 985.211279][T20766] __mutex_lock+0x19f/0x1300 [ 985.216380][T20766] nbd_queue_rq+0x37b/0x1100 [ 985.221477][T20766] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 985.227606][T20766] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 985.234474][T20766] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 985.240970][T20766] blk_mq_run_hw_queue+0x348/0x4f0 [ 985.246586][T20766] blk_mq_dispatch_list+0xd16/0xe10 [ 985.252292][T20766] blk_mq_flush_plug_list+0x48d/0x570 [ 985.258172][T20766] __blk_flush_plug+0x3ed/0x4d0 [ 985.263609][T20766] __submit_bio+0x28d/0x580 [ 985.268619][T20766] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 985.274756][T20766] block_read_full_folio+0x599/0x830 [ 985.280548][T20766] filemap_read_folio+0x137/0x3b0 [ 985.286077][T20766] do_read_cache_folio+0x358/0x590 [ 985.291695][T20766] read_part_sector+0xb6/0x2b0 [ 985.297018][T20766] adfspart_check_ICS+0xa5/0xa40 [ 985.302464][T20766] bdev_disk_changed+0x7ba/0x1550 [ 985.307993][T20766] blkdev_get_whole+0x380/0x510 [ 985.313395][T20766] bdev_open+0x31e/0xd30 [ 985.318179][T20766] blkdev_open+0x470/0x610 [ 985.323107][T20766] do_dentry_open+0x785/0x14e0 [ 985.328382][T20766] vfs_open+0x3b/0x340 [ 985.332959][T20766] path_openat+0x2e08/0x3860 [ 985.338056][T20766] do_file_open+0x23e/0x4a0 [ 985.343063][T20766] do_sys_openat2+0x113/0x200 [ 985.348248][T20766] __x64_sys_openat+0x138/0x170 [ 985.353612][T20766] do_syscall_64+0x14d/0xf80 [ 985.358710][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.365113][T20766] [ 985.365113][T20766] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 985.372315][T20766] __mutex_lock+0x19f/0x1300 [ 985.377414][T20766] nbd_queue_rq+0xc6/0x1100 [ 985.382423][T20766] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 985.388474][T20766] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 985.395312][T20766] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 985.401799][T20766] blk_mq_run_hw_queue+0x348/0x4f0 [ 985.407417][T20766] blk_mq_dispatch_list+0xd16/0xe10 [ 985.413130][T20766] blk_mq_flush_plug_list+0x48d/0x570 [ 985.419020][T20766] __blk_flush_plug+0x3ed/0x4d0 [ 985.424401][T20766] __submit_bio+0x28d/0x580 [ 985.429417][T20766] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 985.435559][T20766] block_read_full_folio+0x599/0x830 [ 985.441357][T20766] filemap_read_folio+0x137/0x3b0 [ 985.446892][T20766] do_read_cache_folio+0x358/0x590 [ 985.452515][T20766] read_part_sector+0xb6/0x2b0 [ 985.457795][T20766] adfspart_check_ICS+0xa5/0xa40 [ 985.463259][T20766] bdev_disk_changed+0x7ba/0x1550 [ 985.468793][T20766] blkdev_get_whole+0x380/0x510 [ 985.474161][T20766] bdev_open+0x31e/0xd30 [ 985.478913][T20766] blkdev_open+0x470/0x610 [ 985.483854][T20766] do_dentry_open+0x785/0x14e0 [ 985.489152][T20766] vfs_open+0x3b/0x340 [ 985.493744][T20766] path_openat+0x2e08/0x3860 [ 985.498843][T20766] do_file_open+0x23e/0x4a0 [ 985.503857][T20766] do_sys_openat2+0x113/0x200 [ 985.509046][T20766] __x64_sys_openat+0x138/0x170 [ 985.514411][T20766] do_syscall_64+0x14d/0xf80 [ 985.519516][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.525920][T20766] [ 985.525920][T20766] -> #3 (set->srcu){.+.+}-{0:0}: [ 985.533032][T20766] __synchronize_srcu+0xca/0x300 [ 985.538481][T20766] elevator_switch+0x1e8/0x7a0 [ 985.543754][T20766] elevator_change+0x2cc/0x450 [ 985.549025][T20766] elevator_set_default+0x36c/0x430 [ 985.554740][T20766] blk_register_queue+0x366/0x430 [ 985.560290][T20766] __add_disk+0x677/0xd50 [ 985.565133][T20766] add_disk_fwnode+0xfb/0x480 [ 985.570324][T20766] nbd_dev_add+0x72c/0xb50 [ 985.575251][T20766] nbd_init+0x168/0x1f0 [ 985.579961][T20766] do_one_initcall+0x250/0x8d0 [ 985.585246][T20766] do_initcall_level+0x104/0x190 [ 985.590740][T20766] do_initcalls+0x59/0xa0 [ 985.595585][T20766] kernel_init_freeable+0x2a6/0x3e0 [ 985.601299][T20766] kernel_init+0x1d/0x1d0 [ 985.606133][T20766] ret_from_fork+0x51e/0xb90 [ 985.611237][T20766] ret_from_fork_asm+0x1a/0x30 [ 985.616517][T20766] [ 985.616517][T20766] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 985.624322][T20766] __mutex_lock+0x19f/0x1300 [ 985.629425][T20766] elevator_change+0x1b3/0x450 [ 985.634696][T20766] elevator_set_none+0xb5/0x140 [ 985.640057][T20766] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 985.646512][T20766] nbd_start_device+0x17f/0xb10 [ 985.651881][T20766] nbd_genl_connect+0x165b/0x1cf0 [ 985.657418][T20766] genl_family_rcv_msg_doit+0x22a/0x330 [ 985.663554][T20766] genl_rcv_msg+0x61c/0x7a0 [ 985.668568][T20766] netlink_rcv_skb+0x232/0x4b0 [ 985.673839][T20766] genl_rcv+0x28/0x40 [ 985.678334][T20766] netlink_unicast+0x80f/0x9b0 [ 985.683602][T20766] netlink_sendmsg+0x813/0xb40 [ 985.688873][T20766] ____sys_sendmsg+0x972/0x9f0 [ 985.694148][T20766] ___sys_sendmsg+0x2a5/0x360 [ 985.699332][T20766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 985.704778][T20766] do_syscall_64+0x14d/0xf80 [ 985.709878][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.716284][T20766] [ 985.716284][T20766] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 985.724881][T20766] blk_alloc_queue+0x546/0x680 [ 985.730158][T20766] __blk_mq_alloc_disk+0x197/0x390 [ 985.735874][T20766] nbd_dev_add+0x499/0xb50 [ 985.740800][T20766] nbd_init+0x168/0x1f0 [ 985.745466][T20766] do_one_initcall+0x250/0x8d0 [ 985.750744][T20766] do_initcall_level+0x104/0x190 [ 985.756198][T20766] do_initcalls+0x59/0xa0 [ 985.761041][T20766] kernel_init_freeable+0x2a6/0x3e0 [ 985.766767][T20766] kernel_init+0x1d/0x1d0 [ 985.771620][T20766] ret_from_fork+0x51e/0xb90 [ 985.776725][T20766] ret_from_fork_asm+0x1a/0x30 [ 985.782002][T20766] [ 985.782002][T20766] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 985.789208][T20766] __lock_acquire+0x15a5/0x2cf0 [ 985.794579][T20766] lock_acquire+0xf0/0x2e0 [ 985.799513][T20766] fs_reclaim_acquire+0x71/0x100 [ 985.804960][T20766] __kmalloc_cache_noprof+0x40/0x660 [ 985.810772][T20766] tcp_fastopen_defer_connect+0x250/0x390 [ 985.817088][T20766] tcp_v4_connect+0x10ac/0x19b0 [ 985.822484][T20766] tcp_v6_connect+0xbbb/0x1b10 [ 985.827790][T20766] __inet_stream_connect+0x25a/0xdd0 [ 985.833594][T20766] inet_stream_connect+0x66/0xa0 [ 985.839041][T20766] __sys_connect+0x312/0x450 [ 985.844142][T20766] __x64_sys_connect+0x7a/0x90 [ 985.849413][T20766] do_syscall_64+0x14d/0xf80 [ 985.854514][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.860913][T20766] [ 985.860913][T20766] other info that might help us debug this: [ 985.860913][T20766] [ 985.871120][T20766] Chain exists of: [ 985.871120][T20766] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 985.871120][T20766] [ 985.884057][T20766] Possible unsafe locking scenario: [ 985.884057][T20766] [ 985.891487][T20766] CPU0 CPU1 [ 985.896833][T20766] ---- ---- [ 985.902179][T20766] lock(k-sk_lock-AF_INET6); [ 985.906842][T20766] lock(sk_lock-AF_INET6); [ 985.913848][T20766] lock(k-sk_lock-AF_INET6); [ 985.921025][T20766] lock(fs_reclaim); [ 985.924993][T20766] [ 985.924993][T20766] *** DEADLOCK *** [ 985.924993][T20766] [ 985.933115][T20766] 1 lock held by syz.2.20250/20766: [ 985.938291][T20766] #0: ffff8880597d6e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 985.948379][T20766] [ 985.948379][T20766] stack backtrace: [ 985.954251][T20766] CPU: 1 UID: 0 PID: 20766 Comm: syz.2.20250 Not tainted syzkaller #0 PREEMPT(full) [ 985.954268][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 985.954279][T20766] Call Trace: [ 985.954287][T20766] [ 985.954295][T20766] dump_stack_lvl+0xe8/0x150 [ 985.954318][T20766] print_circular_bug+0x2e1/0x300 [ 985.954343][T20766] check_noncircular+0x12e/0x150 [ 985.954368][T20766] __lock_acquire+0x15a5/0x2cf0 [ 985.954390][T20766] ? __tcp_get_metrics+0x7ec/0x870 [ 985.954416][T20766] lock_acquire+0xf0/0x2e0 [ 985.954434][T20766] ? __kmalloc_cache_noprof+0x40/0x660 [ 985.954455][T20766] fs_reclaim_acquire+0x71/0x100 [ 985.954474][T20766] ? __kmalloc_cache_noprof+0x40/0x660 [ 985.954494][T20766] __kmalloc_cache_noprof+0x40/0x660 [ 985.954515][T20766] ? tcp_fastopen_defer_connect+0x250/0x390 [ 985.954539][T20766] tcp_fastopen_defer_connect+0x250/0x390 [ 985.954563][T20766] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 985.954587][T20766] ? sk_setup_caps+0x9ef/0xc40 [ 985.954609][T20766] ? sk_setup_caps+0x29/0xc40 [ 985.954629][T20766] tcp_v4_connect+0x10ac/0x19b0 [ 985.954657][T20766] ? __pfx_tcp_v4_connect+0x10/0x10 [ 985.954677][T20766] ? aa_label_sk_perm+0x52b/0x6e0 [ 985.954754][T20766] ? tcp_v6_connect+0x62d/0x1b10 [ 985.954775][T20766] tcp_v6_connect+0xbbb/0x1b10 [ 985.954794][T20766] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 985.954825][T20766] ? __pfx_tcp_v6_connect+0x10/0x10 [ 985.954848][T20766] __inet_stream_connect+0x25a/0xdd0 [ 985.954868][T20766] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.954885][T20766] ? __pfx___inet_stream_connect+0x10/0x10 [ 985.954903][T20766] ? inet_stream_connect+0x51/0xa0 [ 985.954921][T20766] ? __local_bh_enable_ip+0xd0/0x130 [ 985.954942][T20766] inet_stream_connect+0x66/0xa0 [ 985.954961][T20766] __sys_connect+0x312/0x450 [ 985.954980][T20766] ? __pfx___sys_connect+0x10/0x10 [ 985.955000][T20766] ? rcu_is_watching+0x15/0xb0 [ 985.955024][T20766] __x64_sys_connect+0x7a/0x90 [ 985.955041][T20766] do_syscall_64+0x14d/0xf80 [ 985.955063][T20766] ? trace_irq_disable+0x3b/0x150 [ 985.955077][T20766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.955092][T20766] ? clear_bhb_loop+0x40/0x90 [ 985.955108][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.955123][T20766] RIP: 0033:0x7f678199c819 [ 985.955138][T20766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.955152][T20766] RSP: 002b:00007f67827ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 985.955168][T20766] RAX: ffffffffffffffda RBX: 00007f6781c15fa0 RCX: 00007f678199c819 [ 985.955179][T20766] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000006 [ 985.955189][T20766] RBP: 00007f6781a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 985.955199][T20766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.955209][T20766] R13: 00007f6781c16038 R14: 00007f6781c15fa0 R15: 00007fffd2020ac8 [ 985.955226][T20766] [ 986.302256][T20764] syzkaller0 speed is unknown, defaulting to 1000 [ 986.313271][T20764] gre0 speed is unknown, defaulting to 1000 [ 986.400366][T20764] lo speed is unknown, defaulting to 1000 [ 989.024522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6050 ms [ 989.032543][ C0] lec:lec_tx_timeout: lec0 [ 989.037131][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 994.784524][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 994.792552][ C0] lec:lec_tx_timeout: lec0 [ 994.797368][ C0] lec:lec_start_xmit: lec0:No lecd attached