last executing test programs: 2.12825564s ago: executing program 0 (id=1597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x2, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xe103}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4091}, 0x4000840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000480)="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", &(0x7f0000000140)=""/230, 0x4}, 0x52) 1.744006459s ago: executing program 1 (id=1603): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.743447364s ago: executing program 2 (id=1604): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newqdisc={0x178, 0x24, 0xd0f, 0x1fffff, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x75de0fa8, 0x5, 0x9, 0x81, 0x101, 0x7, 0x5, 0x7fffffff, 0x1, 0xd, 0xb, 0x3, 0x6, 0xca11, 0xffff}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x81}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x0) 1.735538353s ago: executing program 3 (id=1605): r0 = socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f0000000040)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) r8 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004b850}, 0x80004) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r15 = getpid() write$cgroup_pid(r13, &(0x7f0000000180)=r15, 0x12) (async) r16 = openat$cgroup_procs(r14, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r16, &(0x7f0000000380), 0x12) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r11, 0x0) (async) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r17, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r9, 0x0) (rerun: 64) 1.73537932s ago: executing program 0 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x7, 0x1, 0xb, 0x3, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[{0x2, 0x2, 0x9, 0x9}, {0x2, 0x2, 0x9, 0x4}, {0x0, 0x1, 0x7}], 0x10, 0xfffffe00}, 0x94) socket(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) 1.710993705s ago: executing program 2 (id=1608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xfffffffffffffe42, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYRES64], 0x18}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r4, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r5, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x60}}, 0x4000) 1.649759526s ago: executing program 3 (id=1609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x40, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x200, 0x2, 0x20, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0x1000000, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0xc000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000900)={{r2}, "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"}) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000900)={{r2}, "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"}) 1.616065712s ago: executing program 0 (id=1610): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa4}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1ac, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2de35b26}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xa3d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x79}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa92a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5d9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x527}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x8814) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r1, 0xfffffffffffff9f5, 0x3, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000800)={{r6}, r7, 0x8, @unused=[0x6605, 0x2, 0x6, 0x401], @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000480)={{r0}, r7, 0x14, @inherit={0x50, &(0x7f0000000400)={0x1, 0x1, 0x3980e8bc, 0x3, {0x5b, 0xc19, 0x4, 0xb8, 0x3}, [0x9]}}, @subvolid}) 1.543326793s ago: executing program 4 (id=1611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="81b8000000000000300012800b000100697036746e6c000020000280140003002001000000000000000000000000000008000800ec"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r4}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 1.477719613s ago: executing program 3 (id=1612): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0xd}, {0x1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff00633d740900000064010101008902003f0188be000c9078410300010000000000000000000000000000000011d4c144ee9b0ec2737108ee7fa63bb6259f1fb061f6ead92967832a5b331d6ebf684c84ce3607a41d3f1d861a2f7aaa4b723c73461bcae522cc372a7abda6505879288d4a03b9c8e45149ebadc08e10b6e828d9e7c7947c9a9347cc689dc92e97309728e0026e4e77b302ff63404f8b1adc420b770f99578f7311e1dc4ed6a5f506101cb063dd12806524b2e8a3226383be923cc122ffcfa6238ba31cbc90d30572"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0xfece, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.467741976s ago: executing program 1 (id=1613): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FICLONE(r0, 0x40049409, r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @loopback}, 0xc) 1.440573801s ago: executing program 2 (id=1614): r0 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x3, 0x7, 0x8, 0x4e}, {0x81, 0x5, 0x3, 0x5}]}) 1.390024701s ago: executing program 0 (id=1615): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) 1.303643116s ago: executing program 4 (id=1616): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000092000000000000f1700004000000e5a2695935a1de5eb67d57c602925a86bfada094820ade7e9d0d2c51b8129a25ebd8cdf6ff2b765897b0287723afb7021b38edf227167dbda0a8e033b68d129ce7d06956bdafe0d2588c5c73ed9c1ae85659d98c78e62f93b6bd5f7aa73a84447459492576ada7cd34dea7a97c9098ddd1b983a09695a30f222c9caa22fea24f7"], 0x0, 0x26, 0x0, 0x9, 0x1000}, 0x28) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000fd0800006114ac000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0xd0}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}, 0x1c) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x3}, 0x4) 1.21957373s ago: executing program 1 (id=1617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\tE'], 0xc) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) 1.129551129s ago: executing program 4 (id=1618): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe) shutdown(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r7, 0xb}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000004c0)={@broadcast, @multicast2, 0x0}, &(0x7f0000000540)=0xc) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a0, 0x12, 0x200, 0x70bd27, 0x25dfdbfe, {0x22, 0x3, 0x0, 0x7f, {0x4e20, 0x4e22, [0xd88, 0x300, 0x3, 0x9000], [0x7, 0x7, 0x2, 0x3], r9, [0xd46c, 0x8]}, 0xffffffff, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "755d49fed53ed81664f4fb14c601586ab5cdbcff33f9a53be091978d7cbcca7278e34d77e4776cc22e92512ab423e0ebbe7ed4d78f33616d99cabb53c8c9114455c5830def421ff61cb3499fc5e3fdf9c1197c7e66bcb1dfbe624c98febe33e199c9ffe9bb83afb43debac1f3887a91b0b37d8a66318647d"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "1e16e34356a47e20012d68c522e187cbccf8b8b64c24367b8e7391e3f3d54d3a4b0c12b02383b269a5ad7059ca66d182c3a9f58a00a2894688707eac59fccb1277608aaba56dc24b691d3e79464f5785ed536ecf66865dfca2f21317b48791c60100ae640e27c9919a3f60e5bd3bf85a9b382280b4ccfc890d5003555cd996102cbd2ce3357055ee8d0a1fb96db69ba293e8c4670624e9a1c62fb51b59a7ca998a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "2fc17a5f7c9c6c2d9f0e3b2f3ab51221807f8af6d64b52908a8fd800e32a0c9ff9304c097ade97b7368799"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x3, 0x3, 0xa, 0x2, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @call={0x85, 0x0, 0x0, 0x50}], &(0x7f0000000180)='GPL\x00', 0x6, 0x25, &(0x7f0000000240)=""/37, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x3ff, 0xffff540a}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf9c0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x2000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffffd6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0xbbd, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) 1.129001866s ago: executing program 3 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000080000470000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39241}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null]}) 932.041538ms ago: executing program 3 (id=1620): r0 = socket(0xa, 0x1, 0x39) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x80, 0x0, 0x2}, 0xc) 776.803926ms ago: executing program 1 (id=1621): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x82}]}, 0x34}}, 0x4000) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) close(0x4) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26030080) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r6, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) unshare(0x24020400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000163f010a000000000108000002000000421657b9924d12856f0159ad4eb850aaad3379df0e3446d2cbf0493126c939ab6b7dd20af236ac17a6e85634b0d1295cc943e929da855f7c834b593c54f72e3e8765a44e7c097028f33e22d1599ba752d18545edfd36341ba295b1fed22d300350016fd6281f6a1207089862307bd097a1943385de82baed"], 0x14}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 668.927571ms ago: executing program 3 (id=1622): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040), 0x0, 0x20008090) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) unshare(0x6020400) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x3) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$inet(r4, 0x0, 0x8000880) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x61d1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001100010029bd700000000000e9ffffff", @ANYRES32=r4, @ANYBLOB="150000000000000014000300776c616e30"], 0x48}, 0x1, 0x0, 0x0, 0x20004089}, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 667.401536ms ago: executing program 2 (id=1623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) 579.234961ms ago: executing program 2 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x108, 0x218, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xe, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x4b}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x90, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) unshare(0x2000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000f76b000000000000000000008500000053000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000001800020000020900030073797a32000000000c0004800b000140000000020900010073797a31"], 0x60}}, 0x4000) 563.189795ms ago: executing program 1 (id=1625): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc000}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local, @local}, 0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000580)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x5e23, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8400022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3028b1be}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4000010) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xffffffffffffff3a) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r3, 0x0, 0x0, 0x80000) recvmmsg(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/208, 0xd0}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x2}], 0x1, 0x40000180, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 477.408701ms ago: executing program 4 (id=1626): r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x2) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 476.618901ms ago: executing program 0 (id=1627): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0xfc, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x4, 0x5753a39e}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r3}, 0x20) close(0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x8cf, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xbbb}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x50000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}}, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000100)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x5c, r11, 0x0, 0x70bd2a, 0x2, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r12, @ANYRES32=0x0, @ANYRES8, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$netlink(0x10, 0x3, 0x0) 229.344158ms ago: executing program 4 (id=1628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, 0x0, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x9b6089b472e23384) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 208.626063ms ago: executing program 2 (id=1629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r1, 0x1, 0xfffffffe, 0x4, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 37.757364ms ago: executing program 0 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x0) (rerun: 64) recvmmsg(r5, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001800)=0x3, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e", 0x12}], 0x3) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8, 0x80, 0xa3b9, 0x9, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x64, 0x0, 0x80, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x8, 0x7a, 0x0, 0x0, [0x80]}, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0x3, [{@multicast1, 0x6}, {@rand_addr=0x64010102, 0xbf38}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x400}, {@loopback, 0x4}, {@multicast1, 0x4}, {@multicast2}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x17c, 0x12, 0x20, 0x70bd27, 0x25dfdbff, {0x5, 0x7f, 0x7, 0x9, {0x4e21, 0x4e21, [0x3, 0x10, 0x7fffffff, 0x8], [0x4, 0x80000001, 0x4, 0x6], r6, [0x8, 0x2]}, 0xe0, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "d7bc2909c713b2bad5173270cda613fcae3ac85dbe7d21701dad6f5085a210beea44a527304c46a2d6bcd6175aa7228ebe1c17bde1f26e8857c6fccd134ddf7c"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "4282b4dbf0c8f42a6b0aff7257ddf10284f4966cebc112cedd397fbe7ef253d109878081b1b1b0f62dcde9cba53ec984aef1bf52ef27bac6528428e33228d93dbda6f11a3a13860683138a91a54979db50f56ca1c43361bfb7019966359af8a501109171cd84d5a0623a4bdf52b05d74b34fde894c9fb47417c508f06fd4d4da39f03dc27019080bb05277d82a92b1399d041a65ce29b6e08173c310bcf18be770275db52803e1aaca9a681423fc9bec4f02864d4bf5b8"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "8f02d1f52c705c452158404ce8fb7347fcbc8a3c78a2ac49baff004e3069754a8cb79bcf104ee80bf30e7ea7"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000017c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000000400)={0x1380, 0x14, 0x600, 0x70bd28, 0x25dfdbfe, {0x1e}, [@typed={0x8, 0x3d, 0x0, 0x0, @u32}, @nested={0x86, 0xc3, 0x0, 0x1, [@generic="5dd96e7b21ec3b3aeab20e45b40b4daca80baed4e8bd07d5c45840d7bc6931ea852f9a75f4f4b1f09b7e34ae8d55db748b899fb6b05e7c72a7856016b21b4a9d9fb0cda54550e079dc5fe9070e7d4304166dae9a48d8d62ed3ecc8ab1967ab5ec81d349a54512113d5cbcf7c0b5948723cfb46ae498efe28f8cb6d3058e8d443cbf3"]}, @generic="5067aa370432f52ab6fad3ce1e797eebe3f821a1f9c787e7478a5edc2c6f7b2a997d32d00df606f9037a68faa72206447a4f3a6e8498fbdb239b67797d336ffe9827d6c657b74b859d938deb64eef162c7c58be14695aad0c42538fbbcf05d3e3e9103cf4a786c33dc4893464c498da33bfe6aeba8c5b7d5d30b375b41c164306f965e6c52c92bd6604edcf270b75926fcfc81eb7e33c9cb9ffbddb75c683eb886754e6da5a635d7284fb34866b347a11755448632b6", @nested={0x1115, 0x98, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x20}, @generic="6446fd0f2692e7ea32db6eb28940e6411349b74611d5809f86516e4200d61d82cfc0fed57c2d0c5649654adf06482babc743b11b41e244f57c2fa6eec5a3ec3b62dbaae3e276aedeb2bdc61f5155e5f5a3c93288064b5e26187e4c66d2908657800c43d8e026a3f11fe0b8b9972724f6c12c9612552e5cfcb2d7fc56d64433deba5ca4d666d305c243f2c21893596dda7b7f812acc54fbceb2faa0c640432a2a5adf8b299bce95b30de9be6022f2677d100900e62a41ad36632e9810cc842b51a8d1beb85416f758c48f7514333108bdc1c69c780114a50f0d2132be2381fc620e099d8eb6", @nested={0x4, 0x116}, @nested={0x4, 0x9b}, @nested={0x4, 0xf1}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=0xee00}, @generic="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"]}, @typed={0x14, 0x83, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0xfc, 0x0, 0x0, @str='syztnl2\x00'}, @generic="3922a5b2b2ea7d08303dae212ad403066c5f6b019b22399fcf2a0601ef91aac459e1536659bffcfef8936c4ee7bad62e56393a1224fa5d913115d578194834671f20c8112b4ada6874d2b06c98977c3f61f36a257347d498efc3632cb3b2436a23732e923b9c0ec9ee2f328e227f0314b2e350f69e87b88fd8fe433395fde31a5b1566601f583c70a4425c2035139feb74637d408eb86804a2bb3dfc4e7465eae107c3396950717b9809cab8ffee2d4cef20e2cecc0d8176af0ac546ec148ff6e6a95b5e7c8af17291655ef9d39bf75c4ba0dcc3203a4f", @typed={0x8, 0xa5, 0x0, 0x0, @u32=0x101}, @typed={0x5, 0x131, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x10c}]}, 0x1380}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) 36.980097ms ago: executing program 4 (id=1631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000a000000060000000210466d38547aa140db9a2000000000238c7cb7a1c00040002004e244e240000fe80000000000000000000000000002e"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100000000000c0900000100000000000000"], 0x44}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="000000004020eec6d3c574ec5aa2780740dc414e053a1b973fb14a32910ca24c89bfa0b4942c50b2a2871836c0a37a9cd4fb94c2d0ee3d22f3d54cf1add51a075a169cde2da40f919923941301c292f73ba628393b", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x70, 0x2, {{0x1, [0x0, 0x10, 0xf, 0x10, 0x8, 0x1, 0x8, 0xe, 0xb, 0x0, 0x0, 0x2, 0x3, 0x6, 0xc, 0x4], 0x0, [0x9, 0x3, 0x8, 0x1, 0x0, 0x9, 0x2, 0x7ff, 0x76e7, 0xfffa, 0x7, 0x990b, 0x98, 0x3, 0x0, 0x9], [0x7, 0x9, 0xc, 0x9, 0xae, 0x1000, 0xef4, 0xee, 0x7, 0x4, 0x3, 0xff, 0x8, 0x5, 0x37, 0x3]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffff1}]}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe5, 0x5, 0x1, 0xfffffffe, 0x0, 0xffff7ff1, 0x4, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x100]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x48804) (async) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r15, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r16, @ANYBLOB="2b030000000000002400128009000600626f6e640000000014000280080009000200000008000a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000) 0s ago: executing program 1 (id=1632): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="dc324389edae305e0f50919a64ea3fafd1e212e2600668b83de1da0a6a3a7e5ac806d19020ef25b23d3ab9a552bcf1af770fc0340bb2b93e9c06b551e8fee84a167c3cd1e66de79b87de9107000ccdb88063331180626988b42b22b8e106079468a97f834d66954d6f855bc4bc153fcc63e4457eaf5e15ff684d7756", 0x7c}, {&(0x7f0000000100)="892438096c3676f66b58b4700f105eb25acc5e84d1e18611452811e0e6af1105cb519f0b70e68ab6915a00d8222dc02c3ae3b458d921a4072a206a5b06ad65d1b534bbb1f2381f51b17135340f4d1bc090128e4ab2d9e7ba1873def8ee7ce85ec0c8604c28c98062f527", 0x6a}], 0x2) (async) syz_emit_ethernet(0x89, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0x0, 0xaa, "af4e", "48da06", 0xf7, "856f9b0d438ae08a7e48490042d0b6b5655bb6d5f13724079996f3e866539ebe5695ddf9f003e60b8e70b1d990f38748dd60ace0bca52c6ba947034aa976e4a3bf446838263a1b57c2e6fe961d64ef6dd8c3e9f0d62897b4177d2199dc7c27b4db25aee62c90c7e1b6d5a7ef390c"}}}}}, &(0x7f0000000280)={0x0, 0x3, [0xef4, 0x299, 0xfe5, 0x6a4]}) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@loopback, 0x4e23, 0xfffa, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x16, 0x0, 0xee00}, {0x80, 0x7fffffff, 0x401, 0x81, 0xe4ec, 0x3, 0x58, 0x1}, {0x3, 0x3, 0x7fff, 0x6}, 0xf, 0x6e6bbe, 0x1, 0x1, 0x3}, {{@in6=@empty, 0x4d3, 0xff}, 0xa, @in6=@empty, 0x34ff, 0x3, 0x3, 0x0, 0x7, 0xc0, 0x800}}, 0xe8) r1 = socket$packet(0x11, 0x0, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r2, 0x1, 0x6, @multicast}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe0}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040055}, 0x40840) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x37b}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.time\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000780)="71196e71c2024495c475ef814549f1e395d1546ed766b8453a3d0dabd4baacb1f6f94630a030cc7f49b2b137bdd733b00828629f783729a445a67e577386a8f8bcf25c476ee318ff2f42c22c69fec9a5ad94ba22c61ec8c43cae18665ddaaa09653c2ac7ddb0a938f0b8dfdc2ee0728dfa0880604544ba2f7101b7", 0x7b) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000800)={0x2, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000940)={0x1, 0x7fff, 0xabd3323, 0x9e3, 0x0, 0x40, 0x5, 0xf}, &(0x7f0000000980)={0x3, 0xc000000000000, 0xfffffffffffffff6, 0x1ff, 0x4, 0x4, 0x401, 0x8}, &(0x7f00000009c0)={0x8, 0x0, 0x6a, 0x4, 0x7, 0xffffffff80000001, 0x3, 0x6}, &(0x7f0000000a40)={r8, r9+60000000}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x6]}, 0x8}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r7, &(0x7f0000000b00)={0x10000015}) (async) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) (async) recvfrom$inet(r7, &(0x7f0000000b80)=""/105, 0x69, 0x10160, &(0x7f0000000c00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x230, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendto$packet(r1, &(0x7f0000000f80), 0x0, 0x44, &(0x7f0000000fc0)={0x11, 0x9, r12, 0x1, 0x8c, 0x6, @link_local}, 0x14) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = socket$l2tp6(0xa, 0x2, 0x73) close(r13) syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), r5) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001380)={&(0x7f0000001300)=""/72, 0x48}) kernel console output (not intermixed with test programs): et_xmit 90 [ 96.945106][ T6084] tipc: Resetting bearer [ 96.972483][ T6084] syzkaller0: tun_net_xmit 90 [ 97.059338][ T6082] tipc: Resetting bearer [ 97.099811][ T6082] tipc: Disabling bearer [ 97.169841][ T6107] syz.4.45 (6107) used greatest stack depth: 17048 bytes left [ 97.423066][ T6120] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 97.456082][ T6123] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.757282][ T6131] ip6gre1: entered promiscuous mode [ 97.837140][ T6138] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 97.907517][ T6136] vlan2: entered allmulticast mode [ 97.941655][ T6136] veth0_to_bond: entered allmulticast mode [ 98.160384][ T6151] batadv_slave_0: entered promiscuous mode [ 98.263877][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.58'. [ 98.307822][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 98.430015][ T6146] batadv_slave_0: left promiscuous mode [ 98.760650][ T6185] pim6reg1: entered promiscuous mode [ 98.775600][ T6185] pim6reg1: entered allmulticast mode [ 98.797059][ T6184] sit0: entered promiscuous mode [ 98.810640][ T6184] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 98.841603][ T6184] netlink: 1 bytes leftover after parsing attributes in process `syz.3.65'. [ 98.960201][ T6191] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 99.060294][ T6198] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 99.108729][ T6191] : entered promiscuous mode [ 99.253609][ T6207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.408865][ T6191] sctp: [Deprecated]: syz.4.66 (pid 6191) Use of int in max_burst socket option deprecated. [ 99.408865][ T6191] Use struct sctp_assoc_value instead [ 99.507774][ T6217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.575346][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.621060][ T6225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.74'. [ 99.897041][ T5835] lec:lec_start_xmit: lec0:No lecd attached [ 100.278510][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.292477][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.346926][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.533169][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 100.549988][ T6273] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 100.565711][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.82'. [ 101.111097][ T6270] netlink: 288 bytes leftover after parsing attributes in process `syz.2.81'. [ 101.246105][ T6289] netlink: 'syz.1.87': attribute type 3 has an invalid length. [ 101.292690][ T6289] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 101.515903][ T6289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.843997][ T6317] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.905636][ T6306] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 102.336781][ T6335] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 102.441793][ T6341] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 102.844321][ T6350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.947904][ T6356] syzkaller0: entered promiscuous mode [ 102.989898][ T6356] syzkaller0: entered allmulticast mode [ 103.048902][ T6350] netlink: 'syz.2.101': attribute type 6 has an invalid length. [ 103.297508][ T6359] batadv0: entered promiscuous mode [ 105.111419][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5210 ms [ 105.120182][ C1] lec:lec_tx_timeout: lec0 [ 105.125923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 105.305447][ T6386] tipc: Enabling of bearer rejected, failed to enable media [ 105.542933][ T6410] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 105.603848][ T6416] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 105.669738][ T6410] team0: Device veth0_macvtap failed to register rx_handler [ 105.786842][ T6416] team0: Device veth0_macvtap failed to register rx_handler [ 106.072197][ T6429] syzkaller0: entered promiscuous mode [ 106.132828][ T6429] syzkaller0: entered allmulticast mode [ 106.282779][ T6438] __nla_validate_parse: 9 callbacks suppressed [ 106.282799][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 106.366768][ T6444] sctp: [Deprecated]: syz.3.117 (pid 6444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.366768][ T6444] Use struct sctp_sack_info instead [ 107.190982][ T6472] netlink: 'syz.3.125': attribute type 61 has an invalid length. [ 107.261700][ T6472] netlink: 'syz.3.125': attribute type 62 has an invalid length. [ 107.389585][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 107.675944][ T6479] tipc: Enabled bearer , priority 0 [ 107.693623][ T6479] syzkaller0: entered promiscuous mode [ 107.699340][ T6479] syzkaller0: entered allmulticast mode [ 107.729107][ T6479] tipc: Resetting bearer [ 107.756118][ T6477] tipc: Resetting bearer [ 107.809157][ T6477] tipc: Disabling bearer [ 107.841521][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.075410][ T6500] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 108.278418][ T30] audit: type=1804 audit(1769639740.427:2): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.137" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=129 res=1 errno=0 [ 108.377107][ T30] audit: type=1800 audit(1769639740.427:3): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.137" name="cgroup.controllers" dev="tmpfs" ino=129 res=0 errno=0 [ 108.414144][ T6511] netlink: 116 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.428330][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.647919][ T6514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.678020][ T6518] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 108.687324][ T6518] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.139'. [ 108.869712][ T6514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.955335][ T6528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.014084][ T6528] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.024335][ T6514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.136335][ T6514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.289428][ T79] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.327881][ T79] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.369037][ T79] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.394014][ T79] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.642606][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.671193][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 109.698119][ T5905] IPVS: starting estimator thread 0... [ 109.744568][ T6548] batadv0: entered promiscuous mode [ 109.761795][ T6548] vlan2: entered promiscuous mode [ 109.775090][ T6551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 109.821590][ T6553] IPVS: using max 31 ests per chain, 74400 per kthread [ 110.151583][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 110.159725][ C1] lec:lec_tx_timeout: lec0 [ 110.165635][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 110.215133][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 110.241934][ T6570] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 110.300966][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 110.335219][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 111.386950][ T6616] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 111.601815][ T6629] __nla_validate_parse: 5 callbacks suppressed [ 111.601837][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 111.747487][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 111.768301][ T6625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.794410][ T6625] bond1: (slave bond2): making interface the new active one [ 111.834892][ T6625] bond1: (slave bond2): Enslaving as an active interface with an up link [ 111.898631][ T6616] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 111.939009][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.964890][ T6631] 8021q: VLANs not supported on ip6tnl0 [ 112.015492][ T6638] vlan2: entered promiscuous mode [ 112.033880][ T6638] bond1: entered promiscuous mode [ 112.042074][ T6638] bond2: entered promiscuous mode [ 112.114682][ T6637] lo: entered allmulticast mode [ 112.120452][ T6639] lo: left allmulticast mode [ 112.206062][ T6642] tap0: tun_chr_ioctl cmd 1074812118 [ 112.235723][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 112.302778][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 112.336162][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'. [ 112.396390][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 112.683975][ T6662] : entered promiscuous mode [ 114.230748][ T6712] tipc: Started in network mode [ 114.236564][ T6712] tipc: Node identity f614537eb508, cluster identity 4711 [ 114.307894][ T6712] tipc: Enabled bearer , priority 0 [ 114.346828][ T6713] syzkaller0: entered promiscuous mode [ 114.381604][ T6713] syzkaller0: entered allmulticast mode [ 114.426826][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 114.459195][ T6712] tipc: Resetting bearer [ 114.494976][ T6711] tipc: Resetting bearer [ 114.569595][ T6711] tipc: Disabling bearer [ 114.924209][ T6738] xfrm0: entered promiscuous mode [ 114.944538][ T6738] xfrm0: entered allmulticast mode [ 114.972603][ T6738] netlink: 'syz.1.193': attribute type 4 has an invalid length. [ 114.998046][ T6742] netlink: 'syz.1.193': attribute type 4 has an invalid length. [ 115.183830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 115.192079][ C1] lec:lec_tx_timeout: lec0 [ 115.196856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 115.204838][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 115.565126][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 115.622491][ T6760] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 115.812534][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.203'. [ 116.546777][ T6785] syzkaller0: entered promiscuous mode [ 116.575453][ T6785] syzkaller0: entered allmulticast mode [ 119.330127][ T6806] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 119.336607][ T6806] syzkaller1: linktype set to 768 [ 119.343331][ T6812] __nla_validate_parse: 1 callbacks suppressed [ 119.343351][ T6812] netlink: 56 bytes leftover after parsing attributes in process `syz.1.217'. [ 119.613115][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 119.632770][ T44] IPVS: starting estimator thread 0... [ 119.644109][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 119.742541][ T6835] IPVS: using max 31 ests per chain, 74400 per kthread [ 120.143821][ T6860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.225'. [ 120.211388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 120.219611][ C1] lec:lec_tx_timeout: lec0 [ 120.224688][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 120.512626][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.228'. [ 121.188290][ T6897] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.194202][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 121.436627][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.238'. [ 121.484171][ T6914] netlink: 'syz.4.238': attribute type 33 has an invalid length. [ 121.492431][ T6914] netlink: 152 bytes leftover after parsing attributes in process `syz.4.238'. [ 121.502274][ T6914] `: renamed from team0 (while UP) [ 121.746050][ T6897] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.814745][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 121.874893][ T6897] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.061639][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 122.164229][ T6897] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.565941][ T6952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.588835][ T6952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.603362][ T6952] bond0 (unregistering): Released all slaves [ 122.620826][ T38] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.629653][ T38] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.694383][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.739165][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.967389][ T6975] sctp: [Deprecated]: syz.2.254 (pid 6975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.967389][ T6975] Use struct sctp_sack_info instead [ 123.451238][ T6991] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.507722][ T6997] 8021q: VLANs not supported on caif0 [ 123.740327][ T7007] vxcan2: entered allmulticast mode [ 124.040743][ T7017] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 124.380635][ T7030] __nla_validate_parse: 6 callbacks suppressed [ 124.380655][ T7030] netlink: 69 bytes leftover after parsing attributes in process `syz.4.268'. [ 124.884129][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 125.075769][ T7053] tipc: Enabled bearer , priority 0 [ 125.154757][ T7066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.231401][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 125.239843][ C1] lec:lec_tx_timeout: lec0 [ 125.244459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 125.314963][ T7053] syzkaller0: entered promiscuous mode [ 125.333568][ T7053] syzkaller0: entered allmulticast mode [ 125.351072][ T7059] tipc: Resetting bearer [ 125.401946][ T7052] tipc: Resetting bearer [ 125.610590][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.042880][ T7093] netlink: 'syz.3.282': attribute type 6 has an invalid length. [ 126.919567][ T7052] tipc: Disabling bearer [ 126.935798][ T7082] ip6gre0: entered allmulticast mode [ 126.957227][ T7086] veth1_to_hsr: entered promiscuous mode [ 126.965645][ T7086] macvtap1: entered promiscuous mode [ 126.972640][ T7086] macvtap1: entered allmulticast mode [ 126.984329][ T7086] veth1_to_hsr: entered allmulticast mode [ 127.416962][ T7115] netlink: 76 bytes leftover after parsing attributes in process `syz.4.286'. [ 127.433589][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 127.731740][ T7122] tipc: Enabled bearer , priority 24 [ 127.799840][ T7126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.289'. [ 128.187101][ T7142] tipc: Enabling of bearer rejected, failed to enable media [ 128.340771][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 128.362430][ T7154] netlink: 216 bytes leftover after parsing attributes in process `syz.0.296'. [ 128.449208][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.296'. [ 128.514801][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'. [ 129.086285][ T5905] tipc: Node number set to 4264857849 [ 129.805683][ T7209] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 129.894667][ T7220] syz_tun: entered allmulticast mode [ 129.940613][ T7220] __nla_validate_parse: 2 callbacks suppressed [ 129.940632][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 130.251421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 130.259591][ C1] lec:lec_tx_timeout: lec0 [ 130.264283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 130.338139][ T7245] delete_channel: no stack [ 130.343215][ T7245] delete_channel: no stack [ 130.422821][ T7234] syz_tun: left allmulticast mode [ 130.536218][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 130.701660][ T7253] netlink: 'syz.2.316': attribute type 10 has an invalid length. [ 130.728578][ T7253] team0: Port device dummy0 added [ 131.344369][ T7277] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 133.115249][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121809][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.271557][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 135.280474][ C1] lec:lec_tx_timeout: lec0 [ 135.285409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 140.301465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 140.309784][ C1] lec:lec_tx_timeout: lec0 [ 140.314592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 145.321507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 145.329659][ C1] lec:lec_tx_timeout: lec0 [ 145.334243][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 151.111417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 151.120270][ C1] lec:lec_tx_timeout: lec0 [ 151.125258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 156.153760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 156.162130][ C1] lec:lec_tx_timeout: lec0 [ 156.166729][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.549682][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 157.719243][ T7328] geneve1: entered promiscuous mode [ 157.813039][ T7328] netlink: 'syz.3.330': attribute type 41 has an invalid length. [ 158.015202][ T7339] team0: No ports can be present during mode change [ 158.047363][ T7340] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 158.089189][ T7340] netlink: 96 bytes leftover after parsing attributes in process `syz.3.334'. [ 158.101492][ T7340] netlink: 1 bytes leftover after parsing attributes in process `syz.3.334'. [ 158.133061][ T7340] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 158.180675][ T7340] netlink: 634 bytes leftover after parsing attributes in process `syz.3.334'. [ 159.246095][ T7381] IPVS: set_ctl: invalid protocol: 191 224.0.0.1:21 [ 159.824530][ T7396] syzkaller0: entered promiscuous mode [ 159.856727][ T7396] syzkaller0: entered allmulticast mode [ 159.957417][ T30] audit: type=1800 audit(1769639792.107:4): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.352" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=393 res=0 errno=0 [ 160.214025][ T7417] netlink: 'syz.4.355': attribute type 12 has an invalid length. [ 160.253067][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 160.307081][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 160.361455][ T7417] netlink: 'syz.4.355': attribute type 13 has an invalid length. [ 161.181420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 161.190084][ C1] lec:lec_tx_timeout: lec0 [ 161.195082][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.098811][ T7424] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 162.347476][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.380078][ T7436] netlink: 'syz.0.359': attribute type 8 has an invalid length. [ 162.417160][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.446408][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.471793][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.609886][ T7428] __nla_validate_parse: 11 callbacks suppressed [ 162.609909][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.633145][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.652342][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.662427][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.683032][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.701009][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.718291][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.736226][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.752659][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.762047][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 162.773036][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.781936][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.096244][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.114765][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.361574][ T7434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.494638][ T7434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.576436][ T7465] syzkaller0: entered promiscuous mode [ 163.583074][ T7465] syzkaller0: entered allmulticast mode [ 163.639818][ T7434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.669734][ T7465] geneve2: entered promiscuous mode [ 163.781887][ T7434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.056300][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.089005][ T7483] netlink: 'syz.3.370': attribute type 39 has an invalid length. [ 164.109689][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.225073][ T152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.295102][ T3484] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.436448][ T7498] netlink: 'syz.2.372': attribute type 2 has an invalid length. [ 164.447051][ T7500] netlink: 'syz.4.373': attribute type 21 has an invalid length. [ 164.893766][ T7512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.642721][ T7554] vxcan2: entered allmulticast mode [ 165.687240][ T7556] vxcan2: entered allmulticast mode [ 166.201391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 166.210063][ C1] lec:lec_tx_timeout: lec0 [ 166.216341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 166.343393][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.057006][ T7658] __nla_validate_parse: 80 callbacks suppressed [ 168.057028][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 168.176182][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 168.272718][ T7662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.416'. [ 168.677129][ T7697] syzkaller0: entered promiscuous mode [ 168.711727][ T7697] syzkaller0: entered allmulticast mode [ 168.976490][ T7708] vlan2: entered promiscuous mode [ 168.982058][ T7708] dummy0: entered promiscuous mode [ 169.066143][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 169.141636][ T7711] netlink: 348 bytes leftover after parsing attributes in process `syz.0.428'. [ 169.182777][ T7718] sit0: left promiscuous mode [ 169.189859][ T7716] tipc: Failed to remove unknown binding: 66,1,1/0:3426134190/3426134192 [ 169.209501][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 169.231612][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.231867][ T7711] netlink: 348 bytes leftover after parsing attributes in process `syz.0.428'. [ 169.256049][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.262496][ T7716] tipc: Failed to remove unknown binding: 66,1,1/0:3426134190/3426134192 [ 169.283781][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 169.316092][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.353671][ T7722] netlink: 'syz.1.429': attribute type 19 has an invalid length. [ 169.393015][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.458480][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.490550][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.515778][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.579187][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.662905][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.765747][ T7718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.860509][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 170.273700][ T7757] netlink: 228 bytes leftover after parsing attributes in process `syz.4.440'. [ 170.863616][ T7786] delete_channel: no stack [ 171.079425][ T7795] netlink: 'syz.4.455': attribute type 62 has an invalid length. [ 171.210211][ T7800] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 171.231385][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 171.240566][ C1] lec:lec_tx_timeout: lec0 [ 171.245600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.282241][ T7800] bridge0: port 3(macsec0) entered blocking state [ 171.293228][ T7800] bridge0: port 3(macsec0) entered disabled state [ 171.300360][ T7800] macsec0: entered allmulticast mode [ 171.306315][ T7800] veth1_macvtap: entered allmulticast mode [ 171.316952][ T7800] macsec0: entered promiscuous mode [ 171.342867][ T7800] bridge0: port 3(macsec0) entered blocking state [ 171.349941][ T7800] bridge0: port 3(macsec0) entered forwarding state [ 171.694448][ T7816] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 171.696427][ T7813] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 171.869612][ T7836] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002 [ 172.450234][ T7868] tipc: Started in network mode [ 172.485347][ T7868] tipc: Node identity 82b900e7984d, cluster identity 4711 [ 172.504801][ T7868] tipc: Enabled bearer , priority 0 [ 172.551159][ T7868] syzkaller0: entered promiscuous mode [ 172.588222][ T7868] syzkaller0: entered allmulticast mode [ 172.703935][ T7868] tipc: Resetting bearer [ 172.796777][ T52] block nbd0: Receive control failed (result -32) [ 172.811758][ T7867] tipc: Resetting bearer [ 172.907157][ T7867] tipc: Disabling bearer [ 172.961130][ T7898] syzkaller1: entered promiscuous mode [ 172.974001][ T7898] syzkaller1: entered allmulticast mode [ 173.157389][ T7907] __nla_validate_parse: 3 callbacks suppressed [ 173.157411][ T7907] netlink: 88 bytes leftover after parsing attributes in process `syz.0.478'. [ 173.228499][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 173.239250][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 173.311733][ T7907] macvlan0: entered allmulticast mode [ 173.317448][ T7907] veth1_vlan: entered allmulticast mode [ 173.463258][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 174.011256][ T7933] netlink: 'syz.3.487': attribute type 29 has an invalid length. [ 174.034048][ T7933] netlink: 'syz.3.487': attribute type 29 has an invalid length. [ 174.044477][ T7933] netlink: 44 bytes leftover after parsing attributes in process `syz.3.487'. [ 174.147376][ T7934] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 176.261389][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.270222][ C1] lec:lec_tx_timeout: lec0 [ 176.275193][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.291506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 181.299999][ C1] lec:lec_tx_timeout: lec0 [ 181.304773][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.311867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 186.320270][ C1] lec:lec_tx_timeout: lec0 [ 186.325203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 192.161414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 192.169528][ C1] lec:lec_tx_timeout: lec0 [ 192.174258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.554732][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561451][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.191453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 197.200626][ C1] lec:lec_tx_timeout: lec0 [ 197.205972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 202.221475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 202.230958][ C0] lec:lec_tx_timeout: lec0 [ 202.235646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.251397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 207.259864][ C1] lec:lec_tx_timeout: lec0 [ 207.265138][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.570247][ T7949] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.489'. [ 208.596095][ T7949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.489'. [ 208.601019][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 208.622986][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 208.711752][ T7955] gre0: entered promiscuous mode [ 208.751879][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'. [ 209.181441][ T7985] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 209.269824][ T7977] netlink: 348 bytes leftover after parsing attributes in process `syz.4.496'. [ 209.360442][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 209.443213][ T7985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.497'. [ 209.455198][ T7978] gtp0: entered promiscuous mode [ 209.473907][ T7978] gtp0: entered allmulticast mode [ 210.390439][ T8027] netlink: 'syz.1.509': attribute type 30 has an invalid length. [ 210.681799][ T8030] xt_hashlimit: max too large, truncated to 1048576 [ 211.763091][ T8021] netlink: 280 bytes leftover after parsing attributes in process `syz.2.507'. [ 211.996780][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.996806][ T5152] Bluetooth: hci4: command tx timeout [ 211.996830][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.003105][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 212.021736][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 212.281558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 212.289910][ C1] lec:lec_tx_timeout: lec0 [ 212.294883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 212.449166][ T8059] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 212.664344][ T8062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.062762][ T8062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.280184][ T8081] vlan2: entered promiscuous mode [ 213.287690][ T8081] bridge0: entered promiscuous mode [ 213.337355][ T3447] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 213.381758][ T8062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.415693][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.460934][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.473928][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.539626][ T8096] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 213.637293][ T8062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.668595][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.707870][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.735601][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.766379][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.867769][ T8096] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.867789][ T3447] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.954437][ T3447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.042790][ T79] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.077764][ T79] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.114682][ T8112] __nla_validate_parse: 5 callbacks suppressed [ 214.114703][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 214.203774][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 214.223913][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 214.363252][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.533'. [ 214.442957][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 214.538027][ T8108] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 214.644721][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.693857][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.115784][ T8146] virt_wifi0 speed is unknown, defaulting to 1000 [ 215.248965][ T8149] tipc: Enabled bearer , priority 0 [ 215.287089][ T8149] syzkaller0: entered promiscuous mode [ 215.308498][ T8149] syzkaller0: entered allmulticast mode [ 215.342560][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 215.436969][ T8148] tipc: Resetting bearer [ 215.457267][ T8148] tipc: Disabling bearer [ 215.484349][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 215.500220][ T8157] netlink: 388 bytes leftover after parsing attributes in process `syz.1.541'. [ 215.586836][ T8162] netlink: 'syz.0.542': attribute type 39 has an invalid length. [ 215.773750][ T8170] netlink: 'syz.4.543': attribute type 11 has an invalid length. [ 215.785162][ T8173] netlink: 'syz.2.546': attribute type 14 has an invalid length. [ 215.785666][ T8170] netlink: 'syz.4.543': attribute type 23 has an invalid length. [ 215.804520][ T8170] netlink: 224 bytes leftover after parsing attributes in process `syz.4.543'. [ 215.808142][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 215.859777][ T7855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.883624][ T8173] netlink: 'syz.2.546': attribute type 14 has an invalid length. [ 215.899888][ T7855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.960473][ T7855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.987766][ T7855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.395609][ T8196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.397475][ T8199] netlink: 'syz.4.551': attribute type 4 has an invalid length. [ 216.448463][ T8205] netlink: 'syz.4.551': attribute type 4 has an invalid length. [ 217.039717][ T8243] net_ratelimit: 12 callbacks suppressed [ 217.039738][ T8243] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 217.044586][ T8238] netlink: 'syz.0.558': attribute type 30 has an invalid length. [ 217.070120][ T8238] ip6gre0: left allmulticast mode [ 217.088533][ T8238] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 217.301355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 217.310482][ C1] lec:lec_tx_timeout: lec0 [ 217.315657][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 217.352985][ T8255] netlink: 'syz.4.564': attribute type 6 has an invalid length. [ 217.378172][ T8253] Bluetooth: MGMT ver 1.23 [ 217.757288][ T8268] : entered promiscuous mode [ 217.954796][ T8277] syzkaller0: entered promiscuous mode [ 218.005126][ T8277] syzkaller0: entered allmulticast mode [ 218.114011][ T8288] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 218.270188][ T8293] bond1: option mode: unable to set because the bond device is up [ 218.547177][ T8307] sctp: [Deprecated]: syz.3.580 (pid 8307) Use of int in max_burst socket option deprecated. [ 218.547177][ T8307] Use struct sctp_assoc_value instead [ 218.568391][ T8308] sctp: [Deprecated]: syz.3.580 (pid 8308) Use of int in max_burst socket option deprecated. [ 218.568391][ T8308] Use struct sctp_assoc_value instead [ 218.845110][ T8317] virt_wifi0 speed is unknown, defaulting to 1000 [ 218.889848][ T8326] gretap2: entered promiscuous mode [ 218.898679][ T8326] batman_adv: batadv0: Adding interface: gretap2 [ 218.906226][ T8326] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 218.928224][ T8326] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 218.942962][ T8329] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 218.987100][ T8329] bond3: entered promiscuous mode [ 218.995060][ T8329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.075752][ T8329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.083514][ T8329] IPv6: NLM_F_CREATE should be set when creating new route [ 219.091778][ T8329] IPv6: NLM_F_CREATE should be set when creating new route [ 219.101062][ T8329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.120026][ T8326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.130525][ T8326] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 219.151852][ T8326] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 219.190518][ T8326] bond3: (slave wireguard0): making interface the new active one [ 219.205377][ T8326] wireguard0: entered promiscuous mode [ 219.215135][ T8326] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 219.658254][ T8339] tipc: Enabling of bearer rejected, failed to enable media [ 219.940140][ T8367] __nla_validate_parse: 18 callbacks suppressed [ 219.940162][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 220.094179][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 220.197653][ T8378] Bluetooth: MGMT ver 1.23 [ 220.818772][ T8403] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.880315][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 221.102538][ T8417] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.604'. [ 221.155424][ T8420] netlink: 'syz.0.604': attribute type 8 has an invalid length. [ 221.512787][ T8439] tipc: Failed to remove unknown binding: 66,0,0/4264857849:771640535/771640536 [ 221.543653][ T8439] tipc: Failed to remove unknown binding: 66,0,0/4264857849:771640535/771640536 [ 222.331483][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.339943][ C1] lec:lec_tx_timeout: lec0 [ 222.344612][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.485933][ T8452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.502577][ T8452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.683488][ T8457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.756160][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.066360][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 223.404405][ T8469] netlink: 120 bytes leftover after parsing attributes in process `syz.0.615'. [ 223.687139][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 223.750876][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 223.761256][ T8468] virt_wifi0 speed is unknown, defaulting to 1000 [ 223.780472][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 223.882864][ T8471] virt_wifi0 speed is unknown, defaulting to 1000 [ 224.029621][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 224.168873][ T8497] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.593512][ T7665] IPVS: starting estimator thread 0... [ 224.601518][ T8527] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 224.609340][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 224.638566][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.656938][ T8528] bridge_slave_0: left allmulticast mode [ 224.688666][ T8528] bridge_slave_0: left promiscuous mode [ 224.701512][ T8529] IPVS: using max 30 ests per chain, 72000 per kthread [ 224.710479][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.735167][ T8528] bridge_slave_1: left allmulticast mode [ 224.742688][ T8528] bridge_slave_1: left promiscuous mode [ 224.748867][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.765582][ T8528] bond0: (slave bond_slave_0): Releasing backup interface [ 224.790762][ T8528] bond0: (slave bond_slave_1): Releasing backup interface [ 224.815003][ T8528] team0: Port device team_slave_0 removed [ 224.840686][ T8528] team0: Port device team_slave_1 removed [ 224.853341][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.861857][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.872500][ T7449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.882143][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.890343][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.900916][ T8528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.083411][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.632'. [ 225.457211][ T8556] bridge_slave_0: mtu less than device minimum [ 225.485753][ T8556] syzkaller1: entered promiscuous mode [ 225.512547][ T8556] syzkaller1: entered allmulticast mode [ 225.610096][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 225.665733][ T8569] netlink: 1 bytes leftover after parsing attributes in process `syz.0.639'. [ 225.671894][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 225.909952][ T8559] virt_wifi0 speed is unknown, defaulting to 1000 [ 225.917242][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.926186][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.944129][ T7450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.954002][ T7445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.987393][ T8583] netlink: 52 bytes leftover after parsing attributes in process `syz.2.642'. [ 226.638895][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 226.687634][ T8620] bridge1: entered promiscuous mode [ 226.732315][ T8620] bridge1: entered allmulticast mode [ 226.833608][ T8622] netlink: 'syz.0.649': attribute type 3 has an invalid length. [ 226.983421][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'. [ 227.096132][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 227.161014][ T8641] virt_wifi0 speed is unknown, defaulting to 1000 [ 227.379220][ T8626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.648'. [ 227.470644][ T8626] syzkaller1: entered promiscuous mode [ 227.490255][ T8626] syzkaller1: entered allmulticast mode [ 227.614771][ T8655] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 227.623924][ T8655] netlink: 224 bytes leftover after parsing attributes in process `syz.2.654'. [ 228.471405][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 228.479982][ C1] lec:lec_tx_timeout: lec0 [ 228.485759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.626546][ T8750] net_ratelimit: 13 callbacks suppressed [ 229.626568][ T8750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.701663][ T8750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.769704][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.856226][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.907445][ T8759] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.914588][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.931472][ T8759] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.941681][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.950426][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.998594][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.008580][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.042737][ T8744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.378944][ T8756] veth1_to_hsr: left allmulticast mode [ 231.551378][ T1967] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.560676][ T1967] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.676383][ T8395] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.698341][ T8778] __nla_validate_parse: 75 callbacks suppressed [ 231.698362][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.683'. [ 231.792417][ T8777] pimreg: entered allmulticast mode [ 231.827266][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 231.848800][ T8395] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.888806][ T8773] pimreg: left allmulticast mode [ 231.999853][ T8775] syzkaller0: entered allmulticast mode [ 232.140208][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 232.183914][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 232.326406][ T8811] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 232.337495][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.693'. [ 232.383628][ T8811] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.405705][ T8811] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 232.446528][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.692'. [ 232.532194][ T8816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.624927][ T8824] bond2: (slave bridge6): Enslaving as an active interface with a down link [ 232.681980][ T8811] macvlan2: entered promiscuous mode [ 232.687611][ T8811] macvlan2: entered allmulticast mode [ 232.695383][ T8811] bond2: entered promiscuous mode [ 232.708579][ T8827] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 232.714404][ T8811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.764918][ T8811] bond2: left promiscuous mode [ 232.770155][ T8830] netlink: 25 bytes leftover after parsing attributes in process `syz.3.695'. [ 233.123188][ T8847] netlink: 'syz.4.702': attribute type 30 has an invalid length. [ 233.241582][ T8852] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.252121][ T8852] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.268377][ T8860] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 233.356509][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 233.399734][ T8852] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.406137][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 233.432978][ T8871] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 233.440213][ T8852] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.603336][ T8878] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 233.628256][ T8852] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.658305][ T8852] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.693536][ T8888] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 233.731228][ T8878] team0: Port device dummy0 added [ 233.832855][ T8888] team0: Port device dummy0 removed [ 233.846509][ T8888] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.908360][ T8852] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.941920][ T8852] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.161674][ T8901] virt_wifi0 speed is unknown, defaulting to 1000 [ 234.231335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 234.239983][ C1] lec:lec_tx_timeout: lec0 [ 234.247376][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.272713][ T1967] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.281040][ T1967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.315260][ T8909] virt_wifi0 speed is unknown, defaulting to 1000 [ 234.326503][ T8914] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 234.342866][ T8914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.716'. [ 234.348208][ T8916] Cannot find add_set index 2 as target [ 234.389253][ T1967] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.405157][ T1967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.537333][ T1967] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.560472][ T1967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.696963][ T8932] netlink: 'syz.4.720': attribute type 8 has an invalid length. [ 234.711813][ T7444] net_ratelimit: 743 callbacks suppressed [ 234.711835][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.808282][ T1967] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.831918][ T1967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.059760][ T8939] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.118359][ T7670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.337481][ T1967] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.351757][ T7445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.369499][ T1967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.408217][ T8948] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.415984][ T1967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.494094][ T1967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.542820][ T8955] tipc: Enabled bearer , priority 0 [ 235.614089][ T8955] syzkaller0: entered promiscuous mode [ 235.620237][ T8955] syzkaller0: entered allmulticast mode [ 235.772376][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.908245][ T8957] tipc: Resetting bearer [ 236.003004][ T8982] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 236.064227][ T8954] tipc: Resetting bearer [ 236.071994][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.157446][ T8395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.167376][ T8954] tipc: Disabling bearer [ 236.182952][ T8988] netlink: 'syz.4.734': attribute type 6 has an invalid length. [ 236.391841][ T7445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.442015][ T9000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.506567][ T9000] netlink: 'syz.4.737': attribute type 10 has an invalid length. [ 236.606255][ T9000] `: Failed to send options change via netlink (err -105) [ 236.619311][ T9000] `: Port device geneve0 added [ 236.638078][ T9009] syzkaller0: entered promiscuous mode [ 236.644049][ T9009] syzkaller0: entered allmulticast mode [ 236.690290][ T9009] tap0: tun_chr_ioctl cmd 1074025680 [ 236.793947][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.889892][ T9013] __nla_validate_parse: 15 callbacks suppressed [ 236.889920][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 236.925341][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.099241][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.177516][ T9021] ip6gre2: entered promiscuous mode [ 237.185165][ T9021] ip6gre2: entered allmulticast mode [ 237.319971][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.354577][ T9035] bond0: (slave rose0): Enslaving as an active interface with an up link [ 237.446256][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.495618][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 237.591043][ T9048] geneve3: entered promiscuous mode [ 237.593743][ T9052] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 237.619975][ T9048] geneve3: entered allmulticast mode [ 238.001526][ T9066] tipc: Enabled bearer , priority 0 [ 238.062062][ T9066] syzkaller0: entered promiscuous mode [ 238.088519][ T9066] syzkaller0: entered allmulticast mode [ 238.111195][ T9071] tipc: Enabled bearer , priority 0 [ 238.128914][ T9071] syzkaller0: entered promiscuous mode [ 238.151965][ T9071] syzkaller0: entered allmulticast mode [ 238.168413][ T9066] tipc: Resetting bearer [ 238.259829][ T9084] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 238.308127][ T9067] tipc: Resetting bearer [ 238.453132][ T9067] tipc: Disabling bearer [ 238.473719][ T9095] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.651835][ T9060] tipc: Resetting bearer [ 238.742319][ T9060] tipc: Disabling bearer [ 238.833508][ T9105] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.852778][ T9105] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.261682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.269881][ C1] lec:lec_tx_timeout: lec0 [ 239.275019][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 239.299056][ T9105] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.314959][ T9105] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.492654][ T9105] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.520756][ T9105] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.676308][ T9105] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.702755][ T9105] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.840508][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 239.913908][ T7450] net_ratelimit: 11 callbacks suppressed [ 239.913930][ T7450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.150825][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.484187][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 240.555925][ T7445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.707737][ T9202] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 240.739172][ T1152] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.757899][ T1152] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.777802][ T9202] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 240.929810][ T1152] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.962536][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.991697][ T1152] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.124953][ T1967] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.145293][ T1967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.192126][ T7666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.253903][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.288351][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.504189][ T9233] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 241.531777][ T9233] netlink: 76 bytes leftover after parsing attributes in process `syz.0.785'. [ 241.546378][ T9236] openvswitch: netlink: IP tunnel dst address not specified [ 241.592263][ T7444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.657417][ T9233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.666555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.913713][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.211851][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 242.225604][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 242.468687][ T9284] x9: renamed from bridge_slave_0 [ 242.676070][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 242.937005][ T9307] wg1: entered promiscuous mode [ 242.955012][ T9307] wg1: entered allmulticast mode [ 243.823783][ T9345] netlink: 'syz.0.812': attribute type 33 has an invalid length. [ 243.837311][ T9345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.812'. [ 243.889508][ T9349] netlink: 14 bytes leftover after parsing attributes in process `syz.0.812'. [ 243.988673][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.001211][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.053479][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.129902][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 244.170869][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 244.196086][ T1967] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.215844][ T1967] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.243563][ T1967] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.276525][ T1967] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.285319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.285388][ C1] lec:lec_tx_timeout: lec0 [ 244.294850][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.461142][ T9369] syzkaller1: entered promiscuous mode [ 244.472579][ T9369] syzkaller1: entered allmulticast mode [ 245.183325][ T9419] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 245.259593][ T9419] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 246.042466][ T9469] trusted_key: syz.1.842 sent an empty control message without MSG_MORE. [ 247.012992][ T9517] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 247.083759][ T9516] xt_hashlimit: max too large, truncated to 1048576 [ 247.090705][ T9516] xt_hashlimit: overflow, try lower: 13/0 [ 247.236265][ T9523] bond2: option arp_validate: invalid value (18446744073491447809) [ 247.310744][ T9523] bond2 (unregistering): Released all slaves [ 247.492370][ T9533] __nla_validate_parse: 8 callbacks suppressed [ 247.492393][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 247.633494][ T9533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.739880][ T9543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.855'. [ 247.762708][ T9543] netlink: 'syz.3.855': attribute type 12 has an invalid length. [ 248.107848][ T9564] netlink: 148 bytes leftover after parsing attributes in process `syz.3.860'. [ 248.434924][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 248.456287][ T9575] netlink: 144 bytes leftover after parsing attributes in process `syz.4.864'. [ 248.567122][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 248.740256][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 248.753845][ T9583] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.301380][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.309778][ C1] lec:lec_tx_timeout: lec0 [ 249.315069][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.464020][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 249.477236][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 249.534844][ T9616] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.731852][ T9634] IPv6: Can't replace route, no match found [ 249.742603][ T9632] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.527616][ T9648] bond3: option fail_over_mac: invalid value (127) [ 250.556962][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.559311][ T9648] bond3 (unregistering): Released all slaves [ 250.738131][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 250.941869][ T9659] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.924254][ T9720] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 252.638093][ T9747] virt_wifi0 speed is unknown, defaulting to 1000 [ 252.746208][ T9759] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 252.843863][ T9750] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 252.966028][ T9765] __nla_validate_parse: 2 callbacks suppressed [ 252.966049][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 253.406965][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 254.172536][ T9793] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.321634][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.330742][ C1] lec:lec_tx_timeout: lec0 [ 254.337562][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.535565][ T9838] ipvlan0: entered promiscuous mode [ 254.701506][ T9850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.916'. [ 254.767781][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 254.865967][ T9847] netlink: 'syz.1.915': attribute type 14 has an invalid length. [ 254.933939][ T9834] ipvlan0: left promiscuous mode [ 255.393227][ T9871] xt_TCPMSS: Only works on TCP SYN packets [ 255.701167][ T9875] netlink: 192 bytes leftover after parsing attributes in process `syz.3.921'. [ 255.719229][ T9877] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.999219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008248][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.378498][ T9895] tipc: Enabled bearer , priority 0 [ 256.417762][ T9895] syzkaller0: entered promiscuous mode [ 256.450316][ T9895] syzkaller0: entered allmulticast mode [ 256.491489][ T9900] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.493627][ T9904] netlink: 'syz.0.925': attribute type 8 has an invalid length. [ 256.584803][ T9895] tipc: Resetting bearer [ 256.692882][ T9893] tipc: Resetting bearer [ 256.757783][ T9893] tipc: Disabling bearer [ 256.844818][ T9916] syzkaller0: entered promiscuous mode [ 256.850662][ T9916] syzkaller0: entered allmulticast mode [ 256.950158][ T9923] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 256.962807][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 257.007051][ T9926] netlink: 'syz.0.934': attribute type 29 has an invalid length. [ 257.045149][ T9926] netlink: 'syz.0.934': attribute type 29 has an invalid length. [ 257.064754][ T9926] netlink: 500 bytes leftover after parsing attributes in process `syz.0.934'. [ 257.227532][ T9932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.936'. [ 257.289157][ T9941] netlink: 'syz.2.939': attribute type 30 has an invalid length. [ 257.325711][ T9941] bond2: option arp_missed_max: invalid value (0) [ 257.332748][ T9941] bond2: option arp_missed_max: allowed values 1 - 255 [ 257.365852][ T9941] bond2 (unregistering): Released all slaves [ 257.658377][ T9960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.945'. [ 257.764215][ T9971] team0: Port device bridge4 added [ 257.833172][ T9978] vlan2: entered promiscuous mode [ 257.839049][ T9978] `: entered promiscuous mode [ 257.844695][ T9981] netlink: 'syz.4.947': attribute type 10 has an invalid length. [ 257.894973][ T9978] team_slave_0: entered promiscuous mode [ 257.916282][ T9978] team_slave_1: entered promiscuous mode [ 257.919062][ T9983] net_ratelimit: 1028 callbacks suppressed [ 257.919081][ T9983] openvswitch: netlink: IP tunnel dst address not specified [ 257.935873][ T9978] geneve0: entered promiscuous mode [ 257.959421][ T9986] openvswitch: netlink: IP tunnel dst address not specified [ 258.079072][ T9981] bridge0: entered promiscuous mode [ 258.102920][ T9981] `: Port device bridge0 added [ 258.298205][ T9980] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.970372][T10039] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 258.978811][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 258.998688][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 259.072891][T10035] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.438635][T10059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 259.844410][T10079] netlink: 208 bytes leftover after parsing attributes in process `syz.2.968'. [ 260.108244][T10088] netlink: 64 bytes leftover after parsing attributes in process `syz.0.971'. [ 260.151328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 260.159590][ C1] lec:lec_tx_timeout: lec0 [ 260.164843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 260.213029][T10094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'. [ 260.282750][T10097] netlink: 'syz.3.972': attribute type 13 has an invalid length. [ 260.385706][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 260.506404][T10117] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 260.562871][T10117] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 260.856086][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.864274][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.117360][T10097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.175694][T10097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.567675][ T3876] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.589437][ T3876] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.676438][ T3876] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.703192][ T3876] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.733554][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 261.779808][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 261.832598][T10156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 261.862826][ T3876] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.882389][ T3876] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.891035][ T3876] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.913681][ T3876] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.969617][T10174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'. [ 262.131759][T10181] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 262.653248][T10202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.726632][T10213] netlink: 'syz.4.998': attribute type 11 has an invalid length. [ 262.918047][T10219] netlink: 'syz.4.1001': attribute type 28 has an invalid length. [ 262.944476][T10219] netlink: 'syz.4.1001': attribute type 3 has an invalid length. [ 263.031858][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 263.176791][T10236] netlink: 'syz.2.1006': attribute type 16 has an invalid length. [ 263.204755][T10236] netlink: 'syz.2.1006': attribute type 3 has an invalid length. [ 263.342006][T10246] tipc: Failed to remove unknown binding: 66,0,0/0:4054147162/4054147163 [ 263.358275][T10246] tipc: Failed to remove unknown binding: 66,0,0/0:4054147162/4054147163 [ 263.640305][T10259] tipc: Enabled bearer , priority 0 [ 263.647737][T10257] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.651028][T10259] syzkaller0: entered promiscuous mode [ 263.664789][T10259] syzkaller0: entered allmulticast mode [ 263.703779][T10259] tipc: Resetting bearer [ 263.711166][T10258] tipc: Resetting bearer [ 263.762275][T10258] tipc: Disabling bearer [ 264.122404][T10274] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.882001][T10308] __nla_validate_parse: 8 callbacks suppressed [ 264.882023][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 264.968884][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1031'. [ 265.171344][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 265.179891][ C1] lec:lec_tx_timeout: lec0 [ 265.185083][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.275625][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 265.421131][T10341] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 265.459720][T10341] `: Cannot enslave team device to itself [ 265.501239][T10343] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 265.509284][T10343] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 265.541339][T10343] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.711886][T10349] virt_wifi0 speed is unknown, defaulting to 1000 [ 265.932086][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1042'. [ 266.148110][T10378] netlink: 'syz.0.1045': attribute type 1 has an invalid length. [ 266.271972][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1047'. [ 266.336794][T10378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 266.375576][T10390] x_tables: duplicate entry at hook 2 [ 266.383048][T10382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.415914][T10382] bond3: (slave bond4): making interface the new active one [ 266.477027][T10382] bond3: (slave bond4): Enslaving as an active interface with an up link [ 266.589616][T10384] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 266.635889][T10378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.777206][T10406] virt_wifi0 speed is unknown, defaulting to 1000 [ 266.895484][T10415] netlink: 'syz.0.1055': attribute type 39 has an invalid length. [ 266.909767][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 266.912071][T10414] netlink: 'syz.0.1055': attribute type 39 has an invalid length. [ 266.928106][T10409] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.143774][T10427] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 267.159924][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 267.196630][T10424] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1058'. [ 267.225283][T10429] 8021q: VLANs not supported on lo [ 267.481791][T10438] tipc: Started in network mode [ 267.513512][T10438] tipc: Node identity 32e71f82007c, cluster identity 4711 [ 267.521032][T10438] tipc: Enabled bearer , priority 0 [ 267.576896][T10440] syzkaller0: entered promiscuous mode [ 267.584535][T10440] syzkaller0: entered allmulticast mode [ 267.624396][T10438] tipc: Resetting bearer [ 267.676614][T10437] tipc: Resetting bearer [ 267.730840][T10437] tipc: Disabling bearer [ 267.869877][T10459] vlan3: entered allmulticast mode [ 267.890380][T10459] dummy0: entered allmulticast mode [ 269.171950][T10498] virt_wifi0 speed is unknown, defaulting to 1000 [ 269.611044][T10520] virt_wifi0 speed is unknown, defaulting to 1000 [ 270.201601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.209815][ C1] lec:lec_tx_timeout: lec0 [ 270.216332][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.229190][T10548] openvswitch: netlink: Duplicate or invalid key (type 0). [ 270.258239][T10548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.276159][T10498] netlink: 'syz.1.1077': attribute type 4 has an invalid length. [ 270.282862][T10551] sctp: [Deprecated]: syz.2.1088 (pid 10551) Use of int in max_burst socket option deprecated. [ 270.282862][T10551] Use struct sctp_assoc_value instead [ 270.906618][T10568] __nla_validate_parse: 13 callbacks suppressed [ 270.906650][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 270.950665][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 271.164142][T10574] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.1095'. [ 271.645942][T10590] netlink: 'syz.2.1099': attribute type 6 has an invalid length. [ 271.880182][T10594] netlink: 4876 bytes leftover after parsing attributes in process `syz.4.1101'. [ 271.925103][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 272.062410][T10558] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 272.093048][T10598] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 272.108359][T10583] netlink: 'syz.1.1098': attribute type 17 has an invalid length. [ 272.675699][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1105'. [ 272.758715][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.760344][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 272.932499][T10616] nbd1: detected capacity change from 0 to 127 [ 272.944860][ T5833] block nbd1: Receive control failed (result -32) [ 272.946712][ T7979] block nbd1: Send control failed (result -32) [ 272.968318][ T7979] block nbd1: Request send failed, requeueing [ 272.986184][ T25] block nbd1: Dead connection, failed to find a fallback [ 273.012398][ T25] block nbd1: shutting down sockets [ 273.014113][ T7979] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.018119][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.018351][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.065352][ T7979] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.073638][ T7979] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.083942][ T7979] Buffer I/O error on dev nbd1, logical block 2, async page read [ 273.092128][ T7979] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.105343][ T7979] Buffer I/O error on dev nbd1, logical block 3, async page read [ 273.115443][ T7979] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.127876][ T7979] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.136573][ T7979] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.148661][ T7979] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.157954][ T7979] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.175101][ T7979] Buffer I/O error on dev nbd1, logical block 2, async page read [ 273.183337][ T7979] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.193509][ T7979] Buffer I/O error on dev nbd1, logical block 3, async page read [ 273.202410][ T7979] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.212561][ T7979] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.220869][ T7979] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.247746][ T7979] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.263969][ T7979] ldm_validate_partition_table(): Disk read failed. [ 273.283164][ T7979] Dev nbd1: unable to read RDB block 0 [ 273.309127][ T7979] nbd1: unable to read partition table [ 273.327960][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 273.353603][ T7979] ldm_validate_partition_table(): Disk read failed. [ 273.375132][ T7979] Dev nbd1: unable to read RDB block 0 [ 273.392149][ T7979] nbd1: unable to read partition table [ 273.912953][T10661] netlink: 'syz.0.1119': attribute type 3 has an invalid length. [ 273.936421][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 274.040462][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'. [ 274.082275][T10677] tipc: Enabling of bearer rejected, failed to enable media [ 274.488898][T10690] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 274.515970][T10690] bond2 (unregistering): Released all slaves [ 274.761008][T10707] netlink: 'syz.4.1134': attribute type 11 has an invalid length. [ 275.057881][T10728] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.204705][T10728] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.231374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.240135][ C1] lec:lec_tx_timeout: lec0 [ 275.245371][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.315605][T10728] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.439712][T10728] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.795145][ T9799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.871568][ T9799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.880803][ T9799] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.913419][ T9799] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.080369][T10775] vlan3: entered allmulticast mode [ 276.085902][T10775] veth0_to_bond: entered allmulticast mode [ 276.133770][T10782] __nla_validate_parse: 6 callbacks suppressed [ 276.133792][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 276.149940][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 276.161094][T10782] netlink: 'syz.4.1157': attribute type 18 has an invalid length. [ 276.346277][T10791] syzkaller0: entered promiscuous mode [ 276.372012][T10791] syzkaller0: entered allmulticast mode [ 276.677759][T10814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.690065][T10804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.715851][T10800] geneve2: entered promiscuous mode [ 276.725186][T10803] netlink: 'syz.4.1163': attribute type 5 has an invalid length. [ 276.888142][T10786] tipc: Enabled bearer , priority 0 [ 276.903543][T10786] syzkaller0: entered promiscuous mode [ 276.918763][T10786] syzkaller0: entered allmulticast mode [ 276.926017][T10821] delete_channel: no stack [ 276.972865][T10785] tipc: Resetting bearer [ 277.024114][T10785] tipc: Disabling bearer [ 277.037058][T10826] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 277.073806][T10826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.157448][T10826] bond2: (slave veth7): Enslaving as an active interface with a down link [ 277.211022][T10832] bond2: (slave veth9): Enslaving as an active interface with a down link [ 277.380778][T10826] bond2: entered allmulticast mode [ 277.658252][T10850] sctp: [Deprecated]: syz.1.1172 (pid 10850) Use of int in maxseg socket option. [ 277.658252][T10850] Use struct sctp_assoc_value instead [ 277.804270][T10859] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1175'. [ 277.876921][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 278.009481][T10867] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.156612][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 278.249266][T10880] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1179'. [ 278.312493][T10881] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1179'. [ 278.451072][T10891] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 278.512182][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 278.542809][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 278.711699][T10893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.746546][T10898] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 279.026743][T10926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1191'. [ 279.905017][T10973] nbd: must specify at least one socket [ 280.063729][T10985] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 280.190676][T10991] tipc: Enabled bearer , priority 0 [ 280.200356][T10992] veth0_to_bond: entered promiscuous mode [ 280.240921][T10992] veth0_to_bond: entered allmulticast mode [ 280.261539][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.269983][ C1] lec:lec_tx_timeout: lec0 [ 280.275272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.284544][T10998] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 280.419951][T10989] tipc: Disabling bearer [ 280.948473][T11035] netlink: 'syz.4.1220': attribute type 21 has an invalid length. [ 280.981472][T11035] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.996557][T11035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.004349][T11035] IPv6: NLM_F_CREATE should be set when creating new route [ 281.012017][T11035] IPv6: NLM_F_CREATE should be set when creating new route [ 281.019271][T11035] IPv6: NLM_F_CREATE should be set when creating new route [ 281.205085][T11045] __nla_validate_parse: 7 callbacks suppressed [ 281.205105][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 281.253954][ T30] audit: type=1800 audit(1769639913.397:5): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1223" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1195 res=0 errno=0 [ 281.600156][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 281.639259][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 281.936894][T11077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.006789][T11117] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1238'. [ 283.312305][T11126] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 283.423223][T11141] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1245'. [ 283.444630][T11126] bond5: entered promiscuous mode [ 283.450638][T11126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.554477][T11134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.563705][T11134] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 283.574678][T11134] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 283.587906][T11134] bond5: (slave gre2): Opening slave failed [ 283.639625][T11137] bond4 (unregistering): Released all slaves [ 283.733120][T11148] tipc: Enabled bearer , priority 0 [ 283.788831][T11150] syzkaller0: entered promiscuous mode [ 283.821925][T11150] syzkaller0: entered allmulticast mode [ 283.860400][T11138] tipc: Resetting bearer [ 283.887521][T11160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1248'. [ 283.945375][T11133] tipc: Resetting bearer [ 283.965040][T11162] FAULT_INJECTION: forcing a failure. [ 283.965040][T11162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 284.003012][T11166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1251'. [ 284.011531][T11162] CPU: 1 UID: 0 PID: 11162 Comm: syz.4.1249 Not tainted syzkaller #0 PREEMPT(full) [ 284.011558][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.011568][T11162] Call Trace: [ 284.011575][T11162] [ 284.011583][T11162] dump_stack_lvl+0xe8/0x150 [ 284.011613][T11162] should_fail_ex+0x412/0x560 [ 284.011640][T11162] _copy_from_user+0x2d/0xb0 [ 284.011667][T11162] ___sys_sendmsg+0x1c6/0x360 [ 284.011691][T11162] ? __lock_acquire+0x6b5/0x2cf0 [ 284.011720][T11162] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.011777][T11162] ? __fget_files+0x2a/0x420 [ 284.011796][T11162] ? __fget_files+0x3a0/0x420 [ 284.011824][T11162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.011851][T11162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.011883][T11162] ? __pfx_ksys_write+0x10/0x10 [ 284.011918][T11162] do_syscall_64+0xe2/0xf80 [ 284.011938][T11162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.011955][T11162] ? trace_irq_disable+0x37/0x100 [ 284.011971][T11162] ? clear_bhb_loop+0x60/0xb0 [ 284.011992][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.012009][T11162] RIP: 0033:0x7f1db7d9aeb9 [ 284.012026][T11162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.012040][T11162] RSP: 002b:00007f1db8cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.012062][T11162] RAX: ffffffffffffffda RBX: 00007f1db8015fa0 RCX: 00007f1db7d9aeb9 [ 284.012074][T11162] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 284.012085][T11162] RBP: 00007f1db8cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 284.012095][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.012105][T11162] R13: 00007f1db8016038 R14: 00007f1db8015fa0 R15: 00007fff04ea08b8 [ 284.012143][T11162] [ 284.240856][T11133] tipc: Disabling bearer [ 284.254737][T11174] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 284.276641][T11166] unsupported nlmsg_type 40 [ 284.301534][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1254'. [ 285.291420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.299737][ C1] lec:lec_tx_timeout: lec0 [ 285.311449][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.494678][T11235] syzkaller0: entered promiscuous mode [ 285.515866][T11235] syzkaller0: entered allmulticast mode [ 285.637919][T11243] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 285.665103][T11243] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1264'. [ 285.796694][T11256] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1267'. [ 285.875496][T11239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.055432][T11264] SET target dimension over the limit! [ 286.101546][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.120744][T11269] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 286.128975][T11269] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 286.236770][T11271] sctp: [Deprecated]: syz.4.1269 (pid 11271) Use of int in max_burst socket option. [ 286.236770][T11271] Use struct sctp_assoc_value instead [ 286.263308][T11274] xt_recent: Unsupported userspace flags (000000b1) [ 286.271172][T11275] xt_recent: Unsupported userspace flags (000000b1) [ 286.328482][T11279] syzkaller0: entered promiscuous mode [ 286.368398][T11279] syzkaller0: entered allmulticast mode [ 286.386296][T11279] netlink: 'syz.1.1273': attribute type 10 has an invalid length. [ 286.392490][T11281] FAULT_INJECTION: forcing a failure. [ 286.392490][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.395046][T11279] __nla_validate_parse: 2 callbacks suppressed [ 286.395061][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1273'. [ 286.424567][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT(full) [ 286.424595][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.424607][T11281] Call Trace: [ 286.424615][T11281] [ 286.424623][T11281] dump_stack_lvl+0xe8/0x150 [ 286.424655][T11281] should_fail_ex+0x412/0x560 [ 286.424684][T11281] _copy_from_iter+0x1d3/0x1670 [ 286.424718][T11281] ? rcu_is_watching+0x15/0xb0 [ 286.424737][T11281] ? __pfx__copy_from_iter+0x10/0x10 [ 286.424757][T11281] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 286.424792][T11281] ? netlink_sendmsg+0x650/0xb40 [ 286.424810][T11281] ? skb_put+0x11b/0x210 [ 286.424835][T11281] netlink_sendmsg+0x6c0/0xb40 [ 286.424864][T11281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.424887][T11281] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.424910][T11281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.424931][T11281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.424949][T11281] ____sys_sendmsg+0xa68/0xad0 [ 286.424972][T11281] ? __might_fault+0xaf/0x130 [ 286.425003][T11281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.425034][T11281] ? import_iovec+0x73/0xa0 [ 286.425072][T11281] ___sys_sendmsg+0x2a5/0x360 [ 286.425094][T11281] ? __lock_acquire+0x6b5/0x2cf0 [ 286.425121][T11281] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.425178][T11281] ? __fget_files+0x2a/0x420 [ 286.425196][T11281] ? __fget_files+0x3a0/0x420 [ 286.425224][T11281] __x64_sys_sendmsg+0x1bd/0x2a0 [ 286.425250][T11281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.425283][T11281] ? __pfx_ksys_write+0x10/0x10 [ 286.425319][T11281] do_syscall_64+0xe2/0xf80 [ 286.425340][T11281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.425357][T11281] ? trace_irq_disable+0x37/0x100 [ 286.425374][T11281] ? clear_bhb_loop+0x60/0xb0 [ 286.425395][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.425412][T11281] RIP: 0033:0x7f1db7d9aeb9 [ 286.425429][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.425443][T11281] RSP: 002b:00007f1db8cb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.425463][T11281] RAX: ffffffffffffffda RBX: 00007f1db8015fa0 RCX: 00007f1db7d9aeb9 [ 286.425476][T11281] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 286.425487][T11281] RBP: 00007f1db8cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 286.425497][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.425507][T11281] R13: 00007f1db8016038 R14: 00007f1db8015fa0 R15: 00007fff04ea08b8 [ 286.425536][T11281] [ 286.879429][T11296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1280'. [ 287.026493][T11279] batadv0: entered allmulticast mode [ 287.033467][T11279] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 287.386397][T11317] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1282'. [ 287.395958][T11317] openvswitch: netlink: Missing key (keys=40, expected=80) [ 289.046936][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1285'. [ 289.065358][T11322] tc_dump_action: action bad kind [ 289.312745][T11332] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1287'. [ 289.337425][T11332] block nbd0: Unsupported socket: should be TCP or UNIX. [ 289.511629][T11339] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 289.578847][T11357] FAULT_INJECTION: forcing a failure. [ 289.578847][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 289.592645][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.2.1294 Not tainted syzkaller #0 PREEMPT(full) [ 289.592674][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.592685][T11357] Call Trace: [ 289.592693][T11357] [ 289.592701][T11357] dump_stack_lvl+0xe8/0x150 [ 289.592733][T11357] should_fail_ex+0x412/0x560 [ 289.592761][T11357] should_failslab+0xa8/0x100 [ 289.592786][T11357] kmem_cache_alloc_noprof+0x87/0x6e0 [ 289.592814][T11357] ? __netlink_lookup+0xc6/0x8b0 [ 289.592838][T11357] ? skb_clone+0x212/0x3a0 [ 289.592869][T11357] skb_clone+0x212/0x3a0 [ 289.592901][T11357] __netlink_deliver_tap+0x404/0x850 [ 289.592935][T11357] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.592958][T11357] netlink_deliver_tap+0x19c/0x1b0 [ 289.592980][T11357] netlink_unicast+0x7e3/0x9b0 [ 289.593007][T11357] ? __pfx_netlink_unicast+0x10/0x10 [ 289.593030][T11357] ? netlink_sendmsg+0x650/0xb40 [ 289.593049][T11357] ? skb_put+0x11b/0x210 [ 289.593077][T11357] netlink_sendmsg+0x813/0xb40 [ 289.593108][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.593132][T11357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.593156][T11357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.593179][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.593198][T11357] ____sys_sendmsg+0xa68/0xad0 [ 289.593223][T11357] ? __might_fault+0xaf/0x130 [ 289.593270][T11357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.593307][T11357] ? import_iovec+0x73/0xa0 [ 289.593340][T11357] ___sys_sendmsg+0x2a5/0x360 [ 289.593365][T11357] ? __lock_acquire+0x6b5/0x2cf0 [ 289.593398][T11357] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.593463][T11357] ? __fget_files+0x2a/0x420 [ 289.593485][T11357] ? __fget_files+0x3a0/0x420 [ 289.593517][T11357] __x64_sys_sendmsg+0x1bd/0x2a0 [ 289.593547][T11357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.593583][T11357] ? __pfx_ksys_write+0x10/0x10 [ 289.593624][T11357] do_syscall_64+0xe2/0xf80 [ 289.593646][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.593665][T11357] ? trace_irq_disable+0x37/0x100 [ 289.593683][T11357] ? clear_bhb_loop+0x60/0xb0 [ 289.593707][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.593726][T11357] RIP: 0033:0x7f3de379aeb9 [ 289.593745][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.593770][T11357] RSP: 002b:00007f3de46e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.593792][T11357] RAX: ffffffffffffffda RBX: 00007f3de3a15fa0 RCX: 00007f3de379aeb9 [ 289.593806][T11357] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 289.593819][T11357] RBP: 00007f3de46e4090 R08: 0000000000000000 R09: 0000000000000000 [ 289.593830][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.593840][T11357] R13: 00007f3de3a16038 R14: 00007f3de3a15fa0 R15: 00007fff3ca30708 [ 289.593874][T11357] [ 290.047761][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 290.321383][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 290.329930][ C1] lec:lec_tx_timeout: lec0 [ 290.336490][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.915626][T11401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1309'. [ 291.191644][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.228016][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1311'. [ 291.839689][T11437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1317'. [ 292.324669][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 292.497573][T11460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1327'. [ 292.880363][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 292.937187][T11477] netlink: 'syz.4.1332': attribute type 12 has an invalid length. [ 292.945854][T11477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1332'. [ 293.102392][T11485] x_tables: unsorted entry at hook 1 [ 293.159693][T11491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1335'. [ 293.180159][T11487] syzkaller1: entered promiscuous mode [ 293.240455][T11487] SET target dimension over the limit! [ 293.283409][T11494] bond0: (slave rose0): Releasing backup interface [ 293.362458][T11494] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 293.426353][T11494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.453428][T11494] team0: Device bond0 failed to register rx_handler [ 293.663497][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 293.774294][T11517] netlink: 'syz.1.1342': attribute type 9 has an invalid length. [ 293.918477][T11521] tipc: Enabled bearer , priority 10 [ 293.989168][T11531] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 294.032365][T11531] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.105763][T11531] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 294.264200][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 294.377533][T11552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1350'. [ 294.572529][T11555] netlink: 'syz.3.1351': attribute type 21 has an invalid length. [ 294.607136][T11557] netlink: 'syz.1.1352': attribute type 1 has an invalid length. [ 294.612161][T11555] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.648554][T11562] netlink: 'syz.1.1352': attribute type 9 has an invalid length. [ 294.689465][T11555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.697174][T11555] IPv6: NLM_F_CREATE should be set when creating new route [ 294.705270][T11555] IPv6: NLM_F_CREATE should be set when creating new route [ 294.713836][T11555] IPv6: NLM_F_CREATE should be set when creating new route [ 294.741803][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 295.055418][ T7450] tipc: Node number set to 849026946 [ 295.714819][T11599] netlink: 'syz.1.1360': attribute type 3 has an invalid length. [ 296.151354][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 296.159703][ C1] lec:lec_tx_timeout: lec0 [ 296.165206][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.379400][T11620] netlink: 'syz.4.1364': attribute type 13 has an invalid length. [ 296.408088][T11619] netlink: 'syz.4.1364': attribute type 13 has an invalid length. [ 296.463669][T11622] tipc: Failed to remove unknown binding: 66,1,1/849026946:4099994380/4099994382 [ 296.561142][T11622] tipc: Failed to remove unknown binding: 66,1,1/849026946:4099994380/4099994382 [ 296.600819][T11622] tipc: Failed to remove unknown binding: 66,1,1/849026946:4099994380/4099994382 [ 296.779781][T11632] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 296.823289][T11636] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 296.892735][T11640] __nla_validate_parse: 8 callbacks suppressed [ 296.892766][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 296.943836][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 297.192009][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 297.341568][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 297.379513][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 297.428738][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 298.196625][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 298.348481][T11710] bridge0: port 3(macsec0) entered disabled state [ 298.355691][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.363876][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.505422][T11710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.556435][T11710] veth1_vlan: left allmulticast mode [ 298.573417][T11710] tipc: Resetting bearer [ 298.583528][T11710] veth1_macvtap: left allmulticast mode [ 298.651878][ T9797] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.660519][ T9797] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.699991][ T9797] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.756592][ T9797] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.952973][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 298.958284][T11741] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 298.970522][T11741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1389'. [ 298.987394][T11741] team0: Port device geneve0 added [ 298.993942][ T9797] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.010552][ T9797] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.051091][ T9797] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.094240][ T9797] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.424776][T11767] 8021q: VLANs not supported on ip6_vti0 [ 299.750757][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'. [ 300.098506][T11796] netlink: 'syz.3.1403': attribute type 21 has an invalid length. [ 300.124786][T11796] netlink: 'syz.3.1403': attribute type 6 has an invalid length. [ 300.166005][T11799] sctp: [Deprecated]: syz.2.1402 (pid 11799) Use of int in max_burst socket option deprecated. [ 300.166005][T11799] Use struct sctp_assoc_value instead [ 300.529667][T11820] team0: entered promiscuous mode [ 300.725359][T11819] team0: left promiscuous mode [ 300.871247][T11826] syzkaller0: entered promiscuous mode [ 300.882582][T11826] syzkaller0: entered allmulticast mode [ 300.900921][T11826] tipc: Enabled bearer , priority 0 [ 300.935478][T11826] tipc: Resetting bearer [ 300.950413][T11825] tipc: Resetting bearer [ 300.986021][T11825] tipc: Disabling bearer [ 301.117332][T11833] netlink: 'syz.3.1411': attribute type 30 has an invalid length. [ 301.181339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.190147][ C1] lec:lec_tx_timeout: lec0 [ 301.195477][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.321112][T11844] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 301.367994][T11847] gre0: left promiscuous mode [ 301.397057][T11847] veth0_to_bond: left promiscuous mode [ 301.408924][T11847] veth0_to_bond: left allmulticast mode [ 301.728097][T11847] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 301.903763][T11859] hsr_slave_0: left promiscuous mode [ 301.921696][T11859] hsr_slave_1: left promiscuous mode [ 301.999620][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.010795][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.022270][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.038632][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.102959][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.137309][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.174551][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.221536][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.296336][T11880] __nla_validate_parse: 7 callbacks suppressed [ 302.296357][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 302.392225][T11872] syzkaller0: entered promiscuous mode [ 302.411799][T11872] syzkaller0: entered allmulticast mode [ 302.463311][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 302.521896][T11893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.165141][T11918] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1429'. [ 303.204918][T11917] openvswitch: netlink: Multiple metadata blocks provided [ 303.398693][T11926] netlink: 'syz.2.1430': attribute type 31 has an invalid length. [ 304.735700][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 304.788023][T11933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.958591][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 305.109532][T11954] netlink: 'syz.4.1439': attribute type 64 has an invalid length. [ 305.390802][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 305.423593][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 305.473047][T11971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.871537][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 306.211320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.220314][ C1] lec:lec_tx_timeout: lec0 [ 306.225862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 306.273281][T11999] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 306.329813][T11999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.345374][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 309.085272][T11999] veth11: entered promiscuous mode [ 309.098448][T11999] bond3: (slave veth11): Enslaving as an active interface with a down link [ 309.125330][T12015] erspan0: entered allmulticast mode [ 309.133594][T12015] bond3: (slave erspan0): making interface the new active one [ 309.142896][T12015] erspan0: entered promiscuous mode [ 309.148448][T12015] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 309.175005][T12017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.231014][T12018] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 309.239582][T12021] xt_l2tp: missing protocol rule (udp|l2tpip) [ 309.512402][T12024] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1460'. [ 309.849415][T12043] netlink: 'syz.0.1468': attribute type 21 has an invalid length. [ 309.871375][T12043] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1468'. [ 309.998351][T12047] syzkaller0: entered promiscuous mode [ 310.007267][T12047] syzkaller0: entered allmulticast mode [ 311.241412][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.250405][ C1] lec:lec_tx_timeout: lec0 [ 311.255475][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.206205][T12071] tipc: Enabling of bearer rejected, failed to enable media [ 312.344841][T12091] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 312.474158][T12096] can: request_module (can-proto-0) failed. [ 312.486872][T12099] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.499281][T12099] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 312.584732][T12102] geneve2: entered promiscuous mode [ 312.614416][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1481'. [ 312.644453][T12109] bond6: (slave bridge7): Enslaving as an active interface with a down link [ 312.666718][T12091] macvlan2: entered promiscuous mode [ 312.672688][T12091] macvlan2: entered allmulticast mode [ 312.678997][T12091] bond6: entered promiscuous mode [ 312.685141][T12091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.695112][T12091] bond6: left promiscuous mode [ 312.742742][T12102] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.783042][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 312.818672][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 312.965224][T12102] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.046495][T12102] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.060338][T12130] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1487'. [ 313.125314][T12102] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.231016][T12136] syzkaller1: entered promiscuous mode [ 313.257704][T12136] syzkaller1: entered allmulticast mode [ 313.484838][ T7855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.527630][ T9797] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.598077][ T9800] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.653740][ T9800] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.017520][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 314.036060][T12170] lo: entered allmulticast mode [ 314.050653][T12169] lo: left allmulticast mode [ 314.466850][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 314.478511][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1498'. [ 314.649761][T12211] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1499'. [ 315.006121][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 315.092695][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.099651][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.124388][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.165139][T12231] lo: Caught tx_queue_len zero misconfig [ 315.204343][T12228] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 315.270079][T12234] xt_TCPMSS: Only works on TCP SYN packets [ 315.289911][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.302758][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.311524][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.344917][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.362642][T12228] wg1 speed is unknown, defaulting to 1000 [ 315.557739][T12249] tunl0: Caught tx_queue_len zero misconfig [ 315.808603][T12268] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 315.830964][T12266] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 315.870556][T12268] lo: entered allmulticast mode [ 315.909820][T12268] tunl0: entered allmulticast mode [ 315.933354][T12268] gre0: entered allmulticast mode [ 315.965651][T12268] gretap0: entered allmulticast mode [ 316.009005][T12268] ip_vti0: entered allmulticast mode [ 316.027386][T12268] ip6_vti0: entered allmulticast mode [ 316.043372][T12268] sit0: entered allmulticast mode [ 316.066556][T12268] ip6tnl0: entered allmulticast mode [ 316.093360][T12268] ip6gre0: entered allmulticast mode [ 316.101206][T12268] ip6gretap0: entered allmulticast mode [ 316.111465][T12268] bridge0: entered allmulticast mode [ 316.118443][T12268] bond0: entered allmulticast mode [ 316.125374][T12268] bond_slave_0: entered allmulticast mode [ 316.131673][T12268] bond_slave_1: entered allmulticast mode [ 316.139458][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.148546][T12268] team0: entered allmulticast mode [ 316.154315][T12268] team_slave_0: entered allmulticast mode [ 316.160337][T12268] team_slave_1: entered allmulticast mode [ 316.166994][T12268] bridge4: entered allmulticast mode [ 316.172829][T12268] geneve0: entered allmulticast mode [ 316.180580][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.189256][T12268] nlmon0: entered allmulticast mode [ 316.196983][T12268] caif0: entered allmulticast mode [ 316.203771][T12268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.271346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.279554][ C1] lec:lec_tx_timeout: lec0 [ 316.284612][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.567891][T12294] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 316.607076][T12297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1522'. [ 316.646191][T12299] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1523'. [ 316.689572][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 316.767940][T12309] 8021q: VLANs not supported on vcan0 [ 317.198992][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 317.210014][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 317.244211][T12339] sctp: [Deprecated]: syz.4.1533 (pid 12339) Use of int in max_burst socket option. [ 317.244211][T12339] Use struct sctp_assoc_value instead [ 317.436535][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.448286][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.856598][T12359] wg1 speed is unknown, defaulting to 1000 [ 318.167238][T12389] bond0: Device is already in use. [ 318.230992][T12391] bond0: Device is already in use. [ 318.270606][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 318.331063][T12393] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1546'. [ 318.376412][T12398] dvmrp0: entered allmulticast mode [ 318.454681][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 318.667582][T12414] netlink: 'syz.4.1556': attribute type 30 has an invalid length. [ 318.806853][T12414] bond4: option arp_missed_max: invalid value (0) [ 318.825182][T12414] bond4: option arp_missed_max: allowed values 1 - 255 [ 318.839425][T12414] bond4 (unregistering): Released all slaves [ 318.875773][T12421] tap0: tun_chr_ioctl cmd 1074025673 [ 319.014908][T12429] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 319.437607][T12450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.445385][T12450] IPv6: NLM_F_CREATE should be set when creating new route [ 319.472205][T12452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.677202][T12465] FAULT_INJECTION: forcing a failure. [ 319.677202][T12465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.694622][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.0.1569 Not tainted syzkaller #0 PREEMPT(full) [ 319.694653][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.694664][T12465] Call Trace: [ 319.694672][T12465] [ 319.694680][T12465] dump_stack_lvl+0xe8/0x150 [ 319.694710][T12465] should_fail_ex+0x412/0x560 [ 319.694739][T12465] _copy_from_user+0x2d/0xb0 [ 319.694778][T12465] ___sys_sendmsg+0x1c6/0x360 [ 319.694803][T12465] ? __lock_acquire+0x6b5/0x2cf0 [ 319.694836][T12465] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.694899][T12465] ? __fget_files+0x2a/0x420 [ 319.694920][T12465] ? __fget_files+0x3a0/0x420 [ 319.694952][T12465] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.694982][T12465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.695017][T12465] ? __pfx_ksys_write+0x10/0x10 [ 319.695058][T12465] do_syscall_64+0xe2/0xf80 [ 319.695080][T12465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.695099][T12465] ? trace_irq_disable+0x37/0x100 [ 319.695118][T12465] ? clear_bhb_loop+0x60/0xb0 [ 319.695141][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.695160][T12465] RIP: 0033:0x7f9f7399aeb9 [ 319.695178][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.695195][T12465] RSP: 002b:00007f9f71bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.695217][T12465] RAX: ffffffffffffffda RBX: 00007f9f73c15fa0 RCX: 00007f9f7399aeb9 [ 319.695231][T12465] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000003 [ 319.695244][T12465] RBP: 00007f9f71bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.695256][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.695267][T12465] R13: 00007f9f73c16038 R14: 00007f9f73c15fa0 R15: 00007ffeb8a71548 [ 319.695300][T12465] [ 320.004490][T12471] netlink: 'syz.0.1570': attribute type 4 has an invalid length. [ 320.005227][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.013038][T12471] __nla_validate_parse: 3 callbacks suppressed [ 320.013055][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 320.494970][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.532796][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.927117][T12466] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 320.942019][T12466] pim6reg1: linktype set to 774 [ 320.984088][ T7855] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.006062][ T7855] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.026361][ T7855] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.060750][T12485] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1575'. [ 321.071430][ T7855] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.090589][ T7855] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.109521][ T7855] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.130220][ T7855] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.174340][ T7855] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.221770][ T7855] erspan0: left promiscuous mode [ 321.291339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 321.299614][ C1] lec:lec_tx_timeout: lec0 [ 321.311459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.350757][T12489] delete_channel: no stack [ 321.895276][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 321.965984][T12537] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 321.985280][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1591'. [ 322.036582][T12549] SET target dimension over the limit! [ 322.257103][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 322.287839][T12564] netlink: 'syz.3.1598': attribute type 83 has an invalid length. [ 322.572481][T12581] syzkaller0: entered allmulticast mode [ 322.649761][T12581] syzkaller0 (unregistering): left allmulticast mode [ 322.779039][T12595] dvmrp6: entered allmulticast mode [ 322.785898][T12596] tipc: Enabling of bearer rejected, failed to enable media [ 322.914524][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 322.955880][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 322.970842][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'. [ 322.999863][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 323.000663][T12613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.070682][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.118971][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.145157][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.181619][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.313248][T12629] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 323.347289][T12620] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 323.356810][T12620] syzkaller1: linktype set to 260 [ 323.378507][T12625] wg1 speed is unknown, defaulting to 1000 [ 323.392172][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 323.465256][T12632] bridge_slave_1: left allmulticast mode [ 323.493008][T12632] bridge_slave_1: left promiscuous mode [ 323.518705][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.554910][T12632] x9: left allmulticast mode [ 323.565086][T12632] x9: left promiscuous mode [ 323.578428][T12632] bridge0: port 1(1x9) entered disabled state [ 323.669627][T12632] bridge0 (unregistering): left promiscuous mode [ 323.679350][T12632] `: Port device bridge0 removed [ 324.040338][T12663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.086312][T12656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.111626][T12656] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 324.168554][T12660] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.178460][T12660] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 324.190354][T12660] bond5: (slave sit2): Error -95 calling set_mac_address [ 324.403032][T12671] [ 324.405598][T12671] ====================================================== [ 324.413079][T12671] WARNING: possible circular locking dependency detected [ 324.420800][T12671] syzkaller #0 Not tainted [ 324.425455][T12671] ------------------------------------------------------ [ 324.432843][T12671] syz.2.1629/12671 is trying to acquire lock: [ 324.439306][T12671] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 324.449430][T12671] [ 324.449430][T12671] but task is already holding lock: [ 324.457411][T12671] ffff888141f46938 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 324.468200][T12671] [ 324.468200][T12671] which lock already depends on the new lock. [ 324.468200][T12671] [ 324.479225][T12671] [ 324.479225][T12671] the existing dependency chain (in reverse order) is: [ 324.489394][T12671] [ 324.489394][T12671] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 324.498654][T12671] blk_alloc_queue+0x52f/0x610 [ 324.503969][T12671] __blk_mq_alloc_disk+0x197/0x390 [ 324.509616][T12671] nbd_dev_add+0x499/0xb50 [ 324.514817][T12671] nbd_init+0x168/0x1f0 [ 324.519855][T12671] do_one_initcall+0x250/0x840 [ 324.525353][T12671] do_initcall_level+0x104/0x190 [ 324.531013][T12671] do_initcalls+0x59/0xa0 [ 324.536214][T12671] kernel_init_freeable+0x2a6/0x3d0 [ 324.542132][T12671] kernel_init+0x1d/0x1d0 [ 324.546994][T12671] ret_from_fork+0x51b/0xa40 [ 324.552200][T12671] ret_from_fork_asm+0x1a/0x30 [ 324.557591][T12671] [ 324.557591][T12671] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 324.564989][T12671] fs_reclaim_acquire+0x71/0x100 [ 324.571069][T12671] prepare_alloc_pages+0x152/0x650 [ 324.576970][T12671] __alloc_frozen_pages_noprof+0x12f/0x380 [ 324.583768][T12671] __alloc_pages_noprof+0xa/0x30 [ 324.589921][T12671] pcpu_populate_chunk+0x182/0xb30 [ 324.595597][T12671] pcpu_alloc_noprof+0xc4a/0x18d0 [ 324.601466][T12671] bpf_map_alloc_percpu+0xbb/0x1b0 [ 324.607495][T12671] prealloc_init+0x217/0x640 [ 324.612898][T12671] htab_map_alloc+0x69e/0xc90 [ 324.618193][T12671] map_create+0xafd/0x16a0 [ 324.623666][T12671] __sys_bpf+0x65b/0x920 [ 324.628795][T12671] __x64_sys_bpf+0x7c/0x90 [ 324.633939][T12671] do_syscall_64+0xe2/0xf80 [ 324.639160][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.646136][T12671] [ 324.646136][T12671] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 324.655735][T12671] __lock_acquire+0x15a5/0x2cf0 [ 324.661315][T12671] lock_acquire+0x106/0x330 [ 324.666544][T12671] __mutex_lock+0x19f/0x1300 [ 324.672038][T12671] pcpu_alloc_noprof+0x272/0x18d0 [ 324.678931][T12671] sbitmap_init_node+0x1e1/0x640 [ 324.684635][T12671] sbitmap_queue_init_node+0x3e/0x4d0 [ 324.690809][T12671] blk_mq_init_tags+0x15c/0x2d0 [ 324.696367][T12671] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 324.702870][T12671] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 324.709286][T12671] nbd_start_device+0x17f/0xb10 [ 324.715200][T12671] nbd_genl_connect+0x165b/0x1cf0 [ 324.720976][T12671] genl_family_rcv_msg_doit+0x22a/0x330 [ 324.727334][T12671] genl_rcv_msg+0x61c/0x7a0 [ 324.732576][T12671] netlink_rcv_skb+0x232/0x4b0 [ 324.738406][T12671] genl_rcv+0x28/0x40 [ 324.743388][T12671] netlink_unicast+0x80f/0x9b0 [ 324.748785][T12671] netlink_sendmsg+0x813/0xb40 [ 324.754358][T12671] ____sys_sendmsg+0xa68/0xad0 [ 324.759935][T12671] ___sys_sendmsg+0x2a5/0x360 [ 324.765254][T12671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 324.770821][T12671] do_syscall_64+0xe2/0xf80 [ 324.776046][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.782674][T12671] [ 324.782674][T12671] other info that might help us debug this: [ 324.782674][T12671] [ 324.793513][T12671] Chain exists of: [ 324.793513][T12671] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 324.793513][T12671] [ 324.807964][T12671] Possible unsafe locking scenario: [ 324.807964][T12671] [ 324.815445][T12671] CPU0 CPU1 [ 324.821075][T12671] ---- ---- [ 324.826758][T12671] lock(&q->q_usage_counter(io)#51); [ 324.832474][T12671] lock(fs_reclaim); [ 324.838997][T12671] lock(&q->q_usage_counter(io)#51); [ 324.847254][T12671] lock(pcpu_alloc_mutex); [ 324.852119][T12671] [ 324.852119][T12671] *** DEADLOCK *** [ 324.852119][T12671] [ 324.860359][T12671] 6 locks held by syz.2.1629/12671: [ 324.865749][T12671] #0: ffffffff8fa19130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 324.874791][T12671] #1: ffffffff8fa18f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 324.884407][T12671] #2: ffff888141f609d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 324.896531][T12671] #3: ffff888141f608d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 324.908233][T12671] #4: ffff888141f46938 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 324.919626][T12671] #5: ffff888141f46970 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 324.931140][T12671] [ 324.931140][T12671] stack backtrace: [ 324.937168][T12671] CPU: 1 UID: 0 PID: 12671 Comm: syz.2.1629 Not tainted syzkaller #0 PREEMPT(full) [ 324.937189][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.937199][T12671] Call Trace: [ 324.937208][T12671] [ 324.937216][T12671] dump_stack_lvl+0xe8/0x150 [ 324.937241][T12671] print_circular_bug+0x2e1/0x300 [ 324.937260][T12671] check_noncircular+0x12e/0x150 [ 324.937277][T12671] __lock_acquire+0x15a5/0x2cf0 [ 324.937305][T12671] ? kernel_text_address+0xa5/0xe0 [ 324.937326][T12671] ? pcpu_alloc_noprof+0x272/0x18d0 [ 324.937341][T12671] lock_acquire+0x106/0x330 [ 324.937361][T12671] ? pcpu_alloc_noprof+0x272/0x18d0 [ 324.937380][T12671] __mutex_lock+0x19f/0x1300 [ 324.937398][T12671] ? pcpu_alloc_noprof+0x272/0x18d0 [ 324.937412][T12671] ? stack_depot_save_flags+0x3f3/0x810 [ 324.937434][T12671] ? kasan_save_track+0x4f/0x80 [ 324.937447][T12671] ? kasan_save_track+0x3e/0x80 [ 324.937460][T12671] ? pcpu_alloc_noprof+0x272/0x18d0 [ 324.937473][T12671] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 324.937488][T12671] ? blk_mq_init_tags+0x83/0x2d0 [ 324.937509][T12671] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 324.937526][T12671] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 324.937545][T12671] ? __pfx___mutex_lock+0x10/0x10 [ 324.937574][T12671] ? genl_rcv+0x28/0x40 [ 324.937595][T12671] ? ____sys_sendmsg+0xa68/0xad0 [ 324.937615][T12671] ? ___sys_sendmsg+0x2a5/0x360 [ 324.937647][T12671] pcpu_alloc_noprof+0x272/0x18d0 [ 324.937668][T12671] sbitmap_init_node+0x1e1/0x640 [ 324.937693][T12671] sbitmap_queue_init_node+0x3e/0x4d0 [ 324.937718][T12671] blk_mq_init_tags+0x15c/0x2d0 [ 324.937741][T12671] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 324.937758][T12671] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.937776][T12671] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 324.937794][T12671] ? kfree+0x1be/0x650 [ 324.937814][T12671] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 324.937834][T12671] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 324.937859][T12671] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 324.937880][T12671] ? sysfs_add_file_mode_ns+0x259/0x300 [ 324.937903][T12671] nbd_start_device+0x17f/0xb10 [ 324.937929][T12671] ? device_create_file+0xf4/0x1b0 [ 324.937952][T12671] nbd_genl_connect+0x165b/0x1cf0 [ 324.937984][T12671] ? __pfx_nbd_genl_connect+0x10/0x10 [ 324.938009][T12671] ? rcu_is_watching+0x15/0xb0 [ 324.938025][T12671] ? __nla_parse+0x40/0x60 [ 324.938046][T12671] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 324.938071][T12671] genl_family_rcv_msg_doit+0x22a/0x330 [ 324.938104][T12671] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 324.938129][T12671] ? __lock_acquire+0x6b5/0x2cf0 [ 324.938153][T12671] genl_rcv_msg+0x61c/0x7a0 [ 324.938176][T12671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.938196][T12671] ? __pfx_nbd_genl_connect+0x10/0x10 [ 324.938221][T12671] netlink_rcv_skb+0x232/0x4b0 [ 324.938238][T12671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.938259][T12671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.938274][T12671] ? genl_rcv+0x19/0x40 [ 324.938299][T12671] ? down_read+0x272/0x2e0 [ 324.938317][T12671] ? genl_rcv+0xd/0x40 [ 324.938337][T12671] genl_rcv+0x28/0x40 [ 324.938357][T12671] netlink_unicast+0x80f/0x9b0 [ 324.938373][T12671] ? __pfx_netlink_unicast+0x10/0x10 [ 324.938388][T12671] ? netlink_sendmsg+0x650/0xb40 [ 324.938404][T12671] ? skb_put+0x11b/0x210 [ 324.938424][T12671] netlink_sendmsg+0x813/0xb40 [ 324.938444][T12671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.938462][T12671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 324.938481][T12671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.938498][T12671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.938515][T12671] ____sys_sendmsg+0xa68/0xad0 [ 324.938535][T12671] ? __might_fault+0xaf/0x130 [ 324.938560][T12671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.938583][T12671] ? import_iovec+0x73/0xa0 [ 324.938606][T12671] ___sys_sendmsg+0x2a5/0x360 [ 324.938625][T12671] ? __lock_acquire+0x6b5/0x2cf0 [ 324.938647][T12671] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.938670][T12671] ? futex_wait+0x29a/0x380 [ 324.938693][T12671] ? __fget_files+0x2a/0x420 [ 324.938709][T12671] ? __fget_files+0x3a0/0x420 [ 324.938730][T12671] __x64_sys_sendmsg+0x1bd/0x2a0 [ 324.938751][T12671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.938775][T12671] ? rcu_is_watching+0x15/0xb0 [ 324.938793][T12671] do_syscall_64+0xe2/0xf80 [ 324.938811][T12671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.938826][T12671] ? trace_irq_disable+0x37/0x100 [ 324.938841][T12671] ? clear_bhb_loop+0x60/0xb0 [ 324.938858][T12671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.938873][T12671] RIP: 0033:0x7f3de379aeb9 [ 324.938889][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.938903][T12671] RSP: 002b:00007f3de46e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.938922][T12671] RAX: ffffffffffffffda RBX: 00007f3de3a15fa0 RCX: 00007f3de379aeb9 [ 324.938934][T12671] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 324.938945][T12671] RBP: 00007f3de3808c1f R08: 0000000000000000 R09: 0000000000000000 [ 324.938955][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.938964][T12671] R13: 00007f3de3a16038 R14: 00007f3de3a15fa0 R15: 00007fff3ca30708 [ 324.938988][T12671] [ 325.518216][ T5833] block nbd2: Receive control failed (result -32) [ 325.530057][ T5833] block nbd2: Receive control failed (result -32) [ 325.571501][T12671] nbd2: detected capacity change from 0 to 127 [ 325.579356][ T7979] block nbd2: Dead connection, failed to find a fallback [ 325.587396][ T7979] block nbd2: shutting down sockets [ 325.596049][ T7979] blk_print_req_error: 138 callbacks suppressed [ 325.596069][ T7979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.612609][ T7979] buffer_io_error: 138 callbacks suppressed [ 325.612630][ T7979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 325.626912][ T7979] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.636780][ T7979] Buffer I/O error on dev nbd2, logical block 1, async page read [ 325.644928][ T7979] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.655175][ T7979] Buffer I/O error on dev nbd2, logical block 2, async page read [ 325.663795][ T7979] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.673698][ T7979] Buffer I/O error on dev nbd2, logical block 3, async page read [ 325.682183][ T7979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.693235][ T7979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 325.701778][ T7979] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.711791][ T7979] Buffer I/O error on dev nbd2, logical block 1, async page read [ 325.720926][ T7979] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.735124][ T7979] Buffer I/O error on dev nbd2, logical block 2, async page read [ 325.744365][ T7979] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.754554][ T7979] Buffer I/O error on dev nbd2, logical block 3, async page read [ 325.762931][ T7979] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.773542][ T7979] Buffer I/O error on dev nbd2, logical block 0, async page read [ 325.782172][ T7979] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.792205][ T7979] Buffer I/O error on dev nbd2, logical block 1, async page read [ 325.800815][ T7979] ldm_validate_partition_table(): Disk read failed. [ 325.808199][ T7979] Dev nbd2: unable to read RDB block 0 [ 325.814195][ T7979] nbd2: unable to read partition table [ 325.822325][ T7979] ldm_validate_partition_table(): Disk read failed. [ 325.829369][ T7979] Dev nbd2: unable to read RDB block 0 [ 325.835984][ T7979] nbd2: unable to read partition table [ 326.331352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 326.339850][ C1] lec:lec_tx_timeout: lec0 [ 326.344736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.151320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 332.159452][ C1] lec:lec_tx_timeout: lec0 [ 332.164224][ C1] lec:lec_start_xmit: lec0:No lecd attached