last executing test programs: 6.566527671s ago: executing program 1 (id=8764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x6) recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.623097123s ago: executing program 1 (id=8773): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) poll(&(0x7f0000000000), 0x0, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c80)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0xe, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000000c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) 5.622542971s ago: executing program 0 (id=8774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.306899921s ago: executing program 0 (id=8778): r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x202, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x67f1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r7, 0x10e, 0xc, 0x0, &(0x7f0000000200)) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r8 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) r9 = socket(0x10, 0x803, 0xfffffffc) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x9, 0x1600}, [@RTA_PRIORITY={0x8, 0x1e, 0x6}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000170100000400000010000000000000001800000000000000170100000200000001000000cf000000af095eb1551ebbddd50db49db095ee469b8a5c0c4e044dc627f3f50cb780b3bb1349c7e2ba539179e948a2fcf99056465324800db90aca9d8145d900ca99c42e6e3c1702"], 0x30, 0x40800}], 0x1, 0x8041) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) 2.480165574s ago: executing program 1 (id=8780): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060300000000000000000000000000140007800800124000000000050015000200000005000100060000000500050002000000050004000000000009"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x84, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20000002}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x900000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000680)={{r1, 0xc8d, 0x6a54, 0x6, 0x2e7, 0x1, 0x33, 0x401, 0x40, 0x8, 0xffff, 0x14e, 0x9, 0xfff, 0x3}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a285abd040008000a400000000328000480080002400000001208000140000000001400045c76d83a60ce595b6511c72fbc80d1f6e5d05cebcfb4071c95d0bbbdf0e6b51cd151603ed7208b31dfece7a324c34ca98700fcfdbff73c09f3b37b1d1d67d5ee8c06aa91a8d7d68e633d769eaed4b042f99b4f1bb4a1eb2d260a407411ac98e1efdfc2b33e3fa51a10809b2e7f6928a1d9", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0xa4}}, 0x0) 2.436355505s ago: executing program 0 (id=8782): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 2.416527734s ago: executing program 3 (id=8783): r0 = socket$inet6(0xa, 0x2, 0x8000) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r1, 0x37, 0x3, 0x2, 0x8, 0x1}, &(0x7f0000000100)=0x14) sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x6e23, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000003}, 0x1c) 2.304671731s ago: executing program 3 (id=8785): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x4a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x36, 0x4, 0x0, @void, @value=r0}, 0x20) 2.274249247s ago: executing program 1 (id=8786): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 2.198937069s ago: executing program 3 (id=8787): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_devices(r6, &(0x7f0000000240)={'c', ' *:* ', 'r\x00'}, 0x8) write$cgroup_subtree(r6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="32a691a65a3d3a939a2fef53cc61c480560ac751fad568a3ea504316da59feaa6c6c1ac4a9058c671dd342af477a70132e500a48b17386ca10ebaf951f2e52b481"], 0x32600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a09040000000000000000020000000900010073797a30000000000900797a320000000038000480340001800c0001007061796c6f6164002400028008000340ffff0000080002400000000208000440000000000800054000000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f00000001c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0) (async) r8 = accept4$unix(r6, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) recvfrom$unix(r8, &(0x7f00000000c0)=""/92, 0x5c, 0x4000a001, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000002c0)={0x8, [0x9, 0x45, 0x7f, 0x9, 0x400, 0x5, 0x0, 0x1]}, &(0x7f0000000300)=0x14) 2.196696608s ago: executing program 4 (id=8788): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e001782fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffffff3885bce4a812109765ebcf54a44104", 0x17}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r7, r9, 0x37, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r13, r6, 0x24, 0x2000, r6, @value, @void, @void, @void, r11}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r14, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)={@fallback=r13, r9, 0x16, 0x0, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000840)={0xe4}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)={@map=r5, r0, 0x26, 0x0, 0x0, @void, @value, @void, @void, r11}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.053238469s ago: executing program 4 (id=8790): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.991136835s ago: executing program 3 (id=8791): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000000c0)={0x1b2aab3e97250df2, 0x12, '\x00', [@generic={0x4, 0x2a, "75b36f4cffc528bbd78e3ddb5832639e01e1981b3ae7cefaaf8ae7a65ee71e38915cd0aa82555813242f"}, @pad1, @pad1, @ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x40, "59c167934e203a9a54a1adab3f7df84387fda98094e22b6581c56ecacab55f89803ad73955df70762f4dde75e32a577ec1d8c42ad7717fe4d98d230a95de4581"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x98) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 1.944230403s ago: executing program 2 (id=8792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0xfdef) 1.91925402s ago: executing program 3 (id=8793): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000280)="9adfde7402abcab646e8d8e1280ea60565ca42bd") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="060000007000fcdbf1254005ed6bc82b0000000a0001007770616e300000000c000500000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4048000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="8708020700170000fc000000000000000300000000000001fc0200000007000000bd18c50000000120010000000000000000000000000000fc0200"/72], 0x48) r14 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r14, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 1.62260771s ago: executing program 4 (id=8794): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) pipe(&(0x7f0000000080)) close(0x3) close(0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r2, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x9c12}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x9}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x9c12}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x9}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}}, 0x0) 1.616094688s ago: executing program 0 (id=8795): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)='~n', 0x2}], 0x1}, 0x0) close(0x4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.383888026s ago: executing program 4 (id=8796): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x6, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x7, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000) 1.294387593s ago: executing program 2 (id=8797): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)=[{0x5, 0x5, 0x4, 0x9}], 0x10, 0x800}, 0x94) (async) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000001200000000000000000000002e"], 0x0, 0x51}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x1c8, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7667}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe0}, {0x6, 0x11, 0xcae3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0xfffa}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xc3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x6, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000030000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x6b2a, 0x1, 0x2, 0x0, 0xe66, 0xb, 0x1, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000380)={r9, @in={{0x2, 0x4e23, @loopback}}}, 0x84) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7, 0x1, 0x1, 0xa, {{0x1d, 0x4, 0x0, 0x18, 0x74, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0xe0, 0x1, 0x8, [{@rand_addr=0x64010102, 0xffff6fca}, {@private=0xa010101, 0x5}, {@multicast1, 0x7}, {@remote, 0x3}, {@local, 0x7ff}, {@multicast1, 0x5d2e}, {@broadcast, 0x4fd8}]}, @end, @lsrr={0x83, 0x17, 0x83, [@rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x6, [{@empty, 0x200}]}]}}}}}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0xa5, '\x00', r10}, 0x94) 1.22432429s ago: executing program 2 (id=8798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0) 1.181557428s ago: executing program 4 (id=8799): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/5, 0x5}], 0x1, &(0x7f0000000c00)=""/145, 0x91}, 0x7fff}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x4800) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000640)={0xff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x4, 0xffffffff, '\x00', {0x6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, [], [0xff, 0xff000000], 'wg1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x4000000, 0x5, 0x0, 0xfffffffe, 0x7, 0x3ff, 0x18, 0x88}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ifreq(r5, 0x8918, &(0x7f0000000600)={'veth1_to_bond\x00', @ifru_addrs=@sco}) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59cf000000000100000008000000140001800600010002160000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x48040) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x0, 0x54, 0x0, 0x0, 0xd9b}, 0x28) connect$inet(r8, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1.041096322s ago: executing program 2 (id=8800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc4, 0x3, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x449}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe5a}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x8ce0, 0x6]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 926.869277ms ago: executing program 2 (id=8801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, r1, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @broadcast}]}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 886.602061ms ago: executing program 4 (id=8802): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20", 0x7}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r4, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c50000008500000018010000202064059a000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008b4d500b70300000000000085000000c500000095"], &(0x7f00000005c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "986c6671f150f86fa2355537ffb31b5f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "9a2e4c0bc81d5e7044196c38eb3e6ac4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "78405f780e838e55c2c7c0ce23a6f1fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9027ae22aca2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 844.79673ms ago: executing program 1 (id=8803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03e8ffff10ffffffffbaeeaa", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) r3 = accept4$rose(r2, &(0x7f0000000100)=@full={0xb, @dev, @remote, 0x0, [@netrom, @remote, @null, @bcast, @null, @default]}, &(0x7f0000000000)=0x40, 0x81800) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @default}, 0x1c) 730.842725ms ago: executing program 1 (id=8804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000580)=0x80, 0x43) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes256, 0x0, @desc2}) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='rose0\x00'}) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000200)) 713.516313ms ago: executing program 3 (id=8805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r2, 0x1, 0xfffffffe, 0x3, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}}, 0x20000040) 679.130523ms ago: executing program 0 (id=8806): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/100, 0x64, 0x0, &(0x7f0000000140)=""/9, 0x9}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.897908ms ago: executing program 2 (id=8807): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) 0s ago: executing program 0 (id=8808): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$int_in(r0, 0xa86aed41728a4ad6, &(0x7f0000000040)=0x800000000000) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe75, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000040) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40041c0}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r3, 0x1, 0xfffffffd, 0x25dfdb7e, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000280)={0x5, 0x10001, 0x80000001}, 0xc) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000600)="82037611", 0x4}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x40000) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xf670e577c160f614}, 0x400c004) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) r13 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r13, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="288200006900000219846a39df578426a20000000000000008000100000000000800010000000007a0"], 0x28}, 0x1, 0x0, 0x0, 0x4044800}, 0x800) kernel console output (not intermixed with test programs): lave_1: entered allmulticast mode [ 888.273807][ T1311] netlink: 'syz.1.6935': attribute type 1 has an invalid length. [ 888.292147][ T1314] sctp: [Deprecated]: syz.2.6934 (pid 1314) Use of int in max_burst socket option. [ 888.292147][ T1314] Use struct sctp_assoc_value instead [ 888.328486][ T1311] __nla_validate_parse: 4 callbacks suppressed [ 888.328506][ T1311] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6935'. [ 888.426399][ T1311] NCSI netlink: No device for ifindex 0 [ 888.888280][ T1335] syzkaller0: entered promiscuous mode [ 888.898989][ T1335] syzkaller0: entered allmulticast mode [ 888.927995][ T1342] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 889.500245][ T1360] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6947'. [ 889.544835][ T1364] lo speed is unknown, defaulting to 1000 [ 889.557208][ T1370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6950'. [ 889.574309][ T1370] tipc: Enabled bearer , priority 0 [ 889.696550][ T1370] syzkaller0: entered promiscuous mode [ 889.723077][ T1370] syzkaller0: entered allmulticast mode [ 889.837633][ T1370] lo speed is unknown, defaulting to 1000 [ 889.848624][ T1375] tipc: Resetting bearer [ 889.923748][ T1375] tipc: Disabling bearer [ 890.026610][ T1387] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6954'. [ 890.066043][ T1387] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6954'. [ 890.133209][ T1391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6954'. [ 890.577519][ T1407] bond2: option all_slaves_active: invalid value (13) [ 890.592634][ T1407] bond2 (unregistering): Released all slaves [ 890.972844][ T1430] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 890.986346][ T1440] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6966'. [ 891.015333][ T1430] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 891.048090][ T1438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.054235][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6970'. [ 891.414158][ T1453] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 892.476911][ T1503] nbd: must specify a device to reconfigure [ 892.712724][ T1514] ip6_vti0: Caught tx_queue_len zero misconfig [ 892.881807][ T1518] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6989'. [ 892.949920][ T1522] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 893.429320][ T1534] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6994'. [ 893.443387][ T1534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6994'. [ 893.496522][ T1537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6995'. [ 893.518624][ T1537] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6995'. [ 893.553583][ T1537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6995'. [ 893.708465][ T1544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6997'. [ 894.024724][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'. [ 894.055099][ T1564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7005'. [ 894.056225][ T1560] gretap4: entered promiscuous mode [ 894.072652][ T1564] netlink: 'syz.1.7005': attribute type 2 has an invalid length. [ 894.095749][ T1564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7005'. [ 894.187153][ T1570] pim6reg: entered allmulticast mode [ 894.240660][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 894.437607][ T1591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7011'. [ 894.448963][ T1591] openvswitch: netlink: Flow actions attr not present in new flow. [ 894.564354][ T1598] netlink: 'syz.0.7013': attribute type 4 has an invalid length. [ 894.597580][ T1598] netlink: 'syz.0.7013': attribute type 4 has an invalid length. [ 894.601168][ T1600] netlink: 'syz.4.7012': attribute type 3 has an invalid length. [ 894.866555][ T1604] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 895.216856][ T1625] netlink: 'syz.1.7022': attribute type 2 has an invalid length. [ 895.271840][ T1625] : entered promiscuous mode [ 895.581266][ T1658] syzkaller0: entered promiscuous mode [ 895.597724][ T1658] syzkaller0: entered allmulticast mode [ 895.938896][ T1679] netlink: 'syz.1.7036': attribute type 21 has an invalid length. [ 896.127309][ T1693] netlink: 'syz.0.7038': attribute type 1 has an invalid length. [ 896.216439][ T1691] netlink: 'syz.2.7039': attribute type 1 has an invalid length. [ 896.249049][ T1693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.286774][ T1705] bond4: (slave ip6gretap1): making interface the new active one [ 896.296530][ T1705] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 896.365755][ T1693] veth3: entered promiscuous mode [ 896.387577][ T1693] bond4: (slave veth3): Enslaving as an active interface with a down link [ 896.466705][ T1714] pimreg: entered allmulticast mode [ 896.476925][ T1702] lo speed is unknown, defaulting to 1000 [ 896.500207][ T1714] pimreg: left allmulticast mode [ 896.903017][ T1744] netlink: 'syz.4.7051': attribute type 1 has an invalid length. [ 896.953825][ T1749] netlink: 'syz.3.7053': attribute type 1 has an invalid length. [ 896.975062][ T1744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 896.983475][ T1749] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 896.987653][ T1753] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 897.120521][ T1744] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 897.215684][ T1762] syzkaller0: entered promiscuous mode [ 897.221504][ T1762] syzkaller0: entered allmulticast mode [ 897.239122][ T7270] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 897.277346][ T1763] lo speed is unknown, defaulting to 1000 [ 897.357187][ T1762] lo speed is unknown, defaulting to 1000 [ 897.367336][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.407741][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.445956][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.475078][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.505926][ T7270] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.555989][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.636472][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.666019][ T7263] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.696300][T24120] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.892616][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 898.092641][ T1800] IPVS: set_ctl: invalid protocol: 98 172.30.1.3:20004 [ 899.247212][ T1815] netlink: 'syz.4.7066': attribute type 11 has an invalid length. [ 899.255345][ T1815] __nla_validate_parse: 25 callbacks suppressed [ 899.255367][ T1815] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7066'. [ 899.965972][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 899.974211][ C1] lec:lec_tx_timeout: lec0 [ 900.733815][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.773299][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.802619][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.852734][ T1819] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 900.941776][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 900.993305][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.003734][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.018183][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.033438][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.043717][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.053321][ T1819] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.141110][ T1837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7074'. [ 901.228629][ T1845] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 901.237221][ T1845] netlink: 12310 bytes leftover after parsing attributes in process `syz.3.7074'. [ 901.271491][ T1845] netlink: 25 bytes leftover after parsing attributes in process `syz.3.7074'. [ 901.445221][ T1844] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7075'. [ 901.568037][ T1865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7080'. [ 901.677463][ T1869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7081'. [ 901.696259][ T1870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7082'. [ 902.210833][ T1895] Bluetooth: MGMT ver 1.23 [ 902.306460][T24119] net_ratelimit: 180 callbacks suppressed [ 902.306483][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.345982][T24119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 902.452109][ T1904] Only authenc() type AEADs are supported by ESSIV [ 902.466176][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.526027][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.548122][ T7263] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.578905][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.626227][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.667470][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.722854][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.733677][ T1915] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.7094'. [ 902.766271][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 904.580525][ T1977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7106'. [ 905.079722][ T1979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7107'. [ 905.131291][ T1999] tipc: Enabling of bearer rejected, failed to enable media [ 905.284626][ T1999] syzkaller0: entered promiscuous mode [ 905.297088][ T1999] syzkaller0: entered allmulticast mode [ 905.442136][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7112'. [ 905.557662][ T2013] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7113'. [ 905.688118][ T2016] lo speed is unknown, defaulting to 1000 [ 905.705615][ T2018] delete_channel: no stack [ 905.721243][ T2016] virt_wifi0 speed is unknown, defaulting to 1000 [ 906.021857][ T2025] tipc: Enabled bearer , priority 0 [ 906.190235][ T2028] tipc: Resetting bearer [ 906.236127][ T2024] tipc: Resetting bearer [ 906.357908][ T2024] tipc: Disabling bearer [ 906.773164][ T2058] lo speed is unknown, defaulting to 1000 [ 906.780978][ T2058] virt_wifi0 speed is unknown, defaulting to 1000 [ 906.866863][ T2052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7121'. [ 906.891479][ T2052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7121'. [ 906.993213][ T2061] tipc: Enabled bearer , priority 0 [ 907.040794][ T2061] syzkaller0: entered promiscuous mode [ 907.056312][ T2061] syzkaller0: entered allmulticast mode [ 907.110034][ T2067] tipc: Enabled bearer , priority 0 [ 907.160410][ T2067] syzkaller0: entered promiscuous mode [ 907.169630][ T2067] syzkaller0: entered allmulticast mode [ 907.190471][ T2061] tipc: Resetting bearer [ 907.215711][ T2067] tipc: Resetting bearer [ 907.225571][ T2061] netlink: 'syz.2.7122': attribute type 8 has an invalid length. [ 907.248728][ T2066] tipc: Resetting bearer [ 907.270688][ T2066] tipc: Disabling bearer [ 907.319929][ T2060] tipc: Resetting bearer [ 907.361484][ T1112] net_ratelimit: 127 callbacks suppressed [ 907.361510][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.391137][ T2060] tipc: Disabling bearer [ 907.409211][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.435965][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.466422][ T1112] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.484580][ T1112] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 907.606205][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.646089][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.665961][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.688477][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.745966][ T7258] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.984640][ T2095] tipc: Enabled bearer , priority 0 [ 908.016207][ T2095] syzkaller0: entered promiscuous mode [ 908.022221][ T2095] syzkaller0: entered allmulticast mode [ 908.091947][ T2094] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 908.161150][ T2093] tipc: Resetting bearer [ 908.197589][ T2092] tipc: Resetting bearer [ 908.253774][ T2092] tipc: Disabling bearer [ 908.418304][ T2113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7132'. [ 908.642547][ T2123] netlink: 'syz.4.7134': attribute type 7 has an invalid length. [ 908.693517][ T2120] lo speed is unknown, defaulting to 1000 [ 908.701402][ T2120] virt_wifi0 speed is unknown, defaulting to 1000 [ 908.820728][ T2130] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7136'. [ 908.832835][ T2130] ip6t_srh: unknown srh match flags 4000 [ 909.089151][ T2144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7137'. [ 909.148190][ T2143] ip6gre2: entered promiscuous mode [ 909.168929][ T2143] ip6gre2: entered allmulticast mode [ 909.270609][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7140'. [ 909.670625][ T2160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 909.868400][ T2163] bond2: (slave ip6gretap1): making interface the new active one [ 909.890788][ T2163] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 910.190019][ T2183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'. [ 910.259412][ T2185] batadv_slave_0: entered promiscuous mode [ 910.349888][ T2192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7146'. [ 910.412531][ T2192] vlan2: entered promiscuous mode [ 910.449006][ T2192] bond0: entered promiscuous mode [ 910.465334][ T2192] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 910.684479][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 910.739040][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 910.767468][ T40] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 363 sec [ 911.222213][ T2217] bridge0: port 3(batadv0) entered disabled state [ 911.229305][ T2217] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.237372][ T2217] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.423368][ T2217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.443480][ T2217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.499327][ T2217] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 911.507744][ T2217] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 911.632042][ T2217] veth3: left promiscuous mode [ 911.660233][ T2217] vlan2: left allmulticast mode [ 911.665483][ T2217] team0: left allmulticast mode [ 911.671749][ T2217] team_slave_0: left allmulticast mode [ 911.678009][ T2217] team_slave_1: left allmulticast mode [ 911.689232][ T2184] batadv_slave_0: left promiscuous mode [ 911.769482][ T7258] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.795012][ T7258] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.818646][ T2248] netlink: 'syz.4.7155': attribute type 4 has an invalid length. [ 911.834285][ T2248] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7155'. [ 911.847739][ T7258] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.892744][ T7258] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.002554][ T2248] .`: renamed from bond0 (while UP) [ 912.046087][ T7258] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.055555][ T7258] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.056013][ T2262] netlink: 'syz.2.7158': attribute type 1 has an invalid length. [ 912.118510][ T7258] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.145154][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7158'. [ 912.148924][ T30] audit: type=1800 audit(1770007458.113:22): pid=2271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7158" name="memory.events" dev="tmpfs" ino=831 res=0 errno=0 [ 912.160920][ T2262] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7158'. [ 912.188142][ T7258] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.245853][ T2271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7158'. [ 912.366029][ T7270] net_ratelimit: 140 callbacks suppressed [ 912.366051][ T7270] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.444997][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.494181][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.536076][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.596041][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.642625][T24119] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.693224][ T2288] veth1_macvtap: left promiscuous mode [ 912.699231][ T2288] veth1_macvtap: entered allmulticast mode [ 912.725934][ T7263] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.734174][ T7263] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 912.885950][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.914468][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 913.224907][ T2313] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7165'. [ 913.245932][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 913.584570][ T2334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7170'. [ 915.145138][ T2405] vlan1: left allmulticast mode [ 915.150782][ T2405] veth0_vlan: left allmulticast mode [ 915.159519][ T2405] veth1_macvtap: left allmulticast mode [ 915.169183][ T2405] ip6gre1: left promiscuous mode [ 915.193913][ T2405] hsr1: left promiscuous mode [ 915.202472][ T2405] hsr1: left allmulticast mode [ 915.209360][ T2405] macvlan0: left allmulticast mode [ 915.214937][ T2405] dummy0: left allmulticast mode [ 915.222254][ T2405] veth3: left promiscuous mode [ 915.235093][ T2405] geneve3: left promiscuous mode [ 915.277893][ T2405] bond1: left promiscuous mode [ 915.288811][ T2405] wireguard0: left promiscuous mode [ 915.333734][ T2405] ip6gre2: left promiscuous mode [ 915.356223][ T2405] ip6gre2: left allmulticast mode [ 915.377234][ T2405] gretap1: left promiscuous mode [ 915.425481][ T2411] __nla_validate_parse: 5 callbacks suppressed [ 915.425502][ T2411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7185'. [ 915.441837][ T5835] Bluetooth: hci3: link tx timeout [ 915.451379][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 915.474610][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.493638][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.510726][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.532430][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.565180][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.584033][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.630536][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.662787][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.864507][ T2443] lo speed is unknown, defaulting to 1000 [ 915.902618][ T2443] virt_wifi0 speed is unknown, defaulting to 1000 [ 915.919700][ T2453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7190'. [ 915.957348][ T2457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7190'. [ 915.973135][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7192'. [ 916.082990][ T2464] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7193'. [ 916.177769][ T2465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 916.287593][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 916.375190][ T2486] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7201'. [ 916.447669][ T2491] netlink: 'syz.2.7202': attribute type 1 has an invalid length. [ 916.455645][ T2491] netlink: 'syz.2.7202': attribute type 2 has an invalid length. [ 916.734886][ T2507] lo speed is unknown, defaulting to 1000 [ 916.744342][ T2507] virt_wifi0 speed is unknown, defaulting to 1000 [ 917.399304][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7207'. [ 917.487834][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 917.556061][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7209'. [ 918.120362][ T2576] lo speed is unknown, defaulting to 1000 [ 918.127836][ T2578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7218'. [ 918.184162][ T2576] virt_wifi0 speed is unknown, defaulting to 1000 [ 918.347215][ T2582] netlink: 'syz.0.7218': attribute type 1 has an invalid length. [ 918.514626][ T2582] bond5: entered promiscuous mode [ 918.521369][ T2582] bond5: entered allmulticast mode [ 918.536814][ T2582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 919.221566][ T2618] tipc: Enabled bearer , priority 0 [ 919.222726][ T2581] netlink: 'syz.3.7219': attribute type 10 has an invalid length. [ 919.267149][ T2581] team0: Port device dummy0 added [ 919.282704][ T2581] netlink: 'syz.3.7219': attribute type 10 has an invalid length. [ 919.290495][ T2618] tipc: Resetting bearer [ 919.326131][ T2581] team0: Port device dummy0 removed [ 919.347585][ T2619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7219'. [ 919.371284][ T2581] dummy0: entered promiscuous mode [ 919.377828][ T2581] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 919.416697][ T2617] tipc: Disabling bearer [ 919.439231][ T2629] syzkaller0: entered promiscuous mode [ 919.445963][ T2629] syzkaller0: entered allmulticast mode [ 919.944391][ T2663] veth0: entered promiscuous mode [ 919.982340][ T2666] ..0{X: renamed from gretap0 [ 919.999882][ T2666] ..0{X: entered allmulticast mode [ 920.029421][ T2666] net_ratelimit: 65 callbacks suppressed [ 920.029441][ T2666] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 920.059479][ T2647] veth0: left promiscuous mode [ 920.167465][ T2677] netlink: 'syz.2.7238': attribute type 2 has an invalid length. [ 920.204368][ T2677] netlink: 'syz.2.7238': attribute type 2 has an invalid length. [ 920.505205][ T2705] netlink: 'syz.1.7242': attribute type 11 has an invalid length. [ 920.549367][ T2705] netlink: 'syz.1.7242': attribute type 11 has an invalid length. [ 920.639963][ T2715] __nla_validate_parse: 6 callbacks suppressed [ 920.639987][ T2715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7243'. [ 920.977703][ T2741] netlink: 'syz.1.7249': attribute type 1 has an invalid length. [ 923.495125][ T2760] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 923.650365][ T2728] lo speed is unknown, defaulting to 1000 [ 923.658048][ T2772] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 923.687620][ T2728] virt_wifi0 speed is unknown, defaulting to 1000 [ 923.704166][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7253'. [ 923.810620][ T2778] netlink: set zone limit has 4 unknown bytes [ 923.915033][ T2788] --map-set only usable from mangle table [ 923.975187][ T2795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7259'. [ 924.016283][ T2798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7260'. [ 924.184565][ T2814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7263'. [ 924.205133][ T2814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7263'. [ 924.242474][ T2819] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 924.451655][ T2831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7261'. [ 924.619037][ T2844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7266'. [ 924.748088][ T2844] macvlan0 (unregistering): left promiscuous mode [ 924.799146][ T2862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7266'. [ 924.809146][ T2862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7266'. [ 924.830390][ T2860] lo speed is unknown, defaulting to 1000 [ 924.847787][ T2860] virt_wifi0 speed is unknown, defaulting to 1000 [ 925.634540][ T2906] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 925.978814][ T2928] __nla_validate_parse: 1 callbacks suppressed [ 925.978835][ T2928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7287'. [ 926.036889][ T2895] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7279'. [ 926.307310][ T2944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7292'. [ 926.356111][ T2944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7292'. [ 926.390687][ T2948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7294'. [ 926.406188][ T2948] netem: unknown loss type 0 [ 926.411413][ T2948] netem: change failed [ 926.576481][ T2955] netlink: 'syz.3.7297': attribute type 11 has an invalid length. [ 926.635101][ T2953] validate_nla: 3 callbacks suppressed [ 926.635121][ T2953] netlink: 'syz.0.7295': attribute type 16 has an invalid length. [ 926.699539][ T2963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7299'. [ 926.788312][ T2960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7288'. [ 926.931620][ T2974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7302'. [ 927.021505][ T2980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7303'. [ 927.121509][ T2986] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7306'. [ 927.354311][ T3005] veth0: entered promiscuous mode [ 928.471543][ T3052] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 928.640030][ T3058] syzkaller0: entered promiscuous mode [ 928.647298][ T3058] syzkaller0: entered allmulticast mode [ 928.758067][ T3060] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 928.878851][ T3065] dvmrp1: entered allmulticast mode [ 928.937629][ T3065] dvmrp1: left allmulticast mode [ 930.662555][ T3017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 931.013810][ T3095] Cannot find map_set index 135 as target [ 931.116800][ T3093] __nla_validate_parse: 13 callbacks suppressed [ 931.116824][ T3093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7335'. [ 931.159575][ T3110] netlink: 'syz.4.7341': attribute type 1 has an invalid length. [ 931.292947][ T3122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7344'. [ 931.500238][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7345'. [ 931.651293][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 931.773987][ T3141] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7348'. [ 931.784288][ T3143] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7348'. [ 931.983392][ T3153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 932.297272][ T3165] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 932.354268][ T3169] : renamed from wg2 (while UP) [ 932.897042][ T3202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7362'. [ 932.917144][ T3197] xt_CT: No such helper "snmp_trap" [ 932.939042][ T3201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.971877][ T3201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.107472][ T3206] netlink: 'syz.3.7364': attribute type 1 has an invalid length. [ 933.143127][ T3206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 933.160134][ T3206] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 933.168976][ T3206] bond5: (slave wlan0): Opening slave failed [ 933.330400][ T3220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7368'. [ 933.388436][ T3225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7371'. [ 933.408150][ T3225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7371'. [ 933.964035][ T3252] lo speed is unknown, defaulting to 1000 [ 934.157248][ T3252] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.537718][ T3276] macsec0: entered promiscuous mode [ 934.544652][ T3283] tipc: Enabled bearer , priority 10 [ 934.563809][ T3281] macsec0: left promiscuous mode [ 934.787085][ T3299] sctp: [Deprecated]: syz.0.7388 (pid 3299) Use of int in maxseg socket option. [ 934.787085][ T3299] Use struct sctp_assoc_value instead [ 935.059611][ T3303] lo speed is unknown, defaulting to 1000 [ 935.095608][ T3303] virt_wifi0 speed is unknown, defaulting to 1000 [ 935.099278][ T3314] syzkaller0: entered promiscuous mode [ 935.111109][ T3313] netlink: 'syz.2.7389': attribute type 1 has an invalid length. [ 935.128810][ T3314] syzkaller0: entered allmulticast mode [ 935.276253][ T3318] syzkaller0: entered promiscuous mode [ 935.295960][ T3318] syzkaller0: entered allmulticast mode [ 935.329522][ T3322] syzkaller0: entered promiscuous mode [ 935.335198][ T3322] syzkaller0: entered allmulticast mode [ 935.417680][ T3328] netlink: 'syz.2.7394': attribute type 39 has an invalid length. [ 935.807367][ T3335] pimreg: tun_chr_ioctl cmd 2147767520 [ 935.874125][ T3337] lo speed is unknown, defaulting to 1000 [ 935.894605][ T3337] virt_wifi0 speed is unknown, defaulting to 1000 [ 936.082815][ T3353] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 936.106176][ T3353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.566472][ T3373] syzkaller1: entered promiscuous mode [ 936.572114][ T3373] syzkaller1: entered allmulticast mode [ 936.735069][ T3399] __nla_validate_parse: 5 callbacks suppressed [ 936.735091][ T3399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7411'. [ 936.841615][ T3400] lo speed is unknown, defaulting to 1000 [ 936.855351][ T3400] virt_wifi0 speed is unknown, defaulting to 1000 [ 936.916141][ T3410] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7415'. [ 936.935829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 936.943984][ C1] lec:lec_tx_timeout: lec0 [ 937.085480][ T3414] xt_l2tp: v2 doesn't support IP mode [ 937.091712][ T3413] xt_l2tp: v2 doesn't support IP mode [ 938.581221][ T3451] netlink: 'syz.1.7423': attribute type 2 has an invalid length. [ 938.605192][ T3445] syzkaller0: entered promiscuous mode [ 938.611122][ T3445] syzkaller0: entered allmulticast mode [ 938.620101][ T3445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7422'. [ 938.833841][ T3459] syzkaller0: entered promiscuous mode [ 938.847890][ T3459] syzkaller0: entered allmulticast mode [ 938.944112][ T3477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7432'. [ 938.956505][ T3476] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 939.285565][ T3494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7441'. [ 939.309450][ T3500] batman_adv: batadv0: Adding interface: macvtap1 [ 939.316230][ T3500] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.367862][ T3500] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 939.585639][ T3518] xt_recent: hitcount (65536) is larger than allowed maximum (65535) [ 939.618383][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7446'. [ 939.719536][ T3513] lo speed is unknown, defaulting to 1000 [ 939.749487][ T3513] virt_wifi0 speed is unknown, defaulting to 1000 [ 939.837927][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7449'. [ 940.244182][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.275351][ T3544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7456'. [ 940.311795][ T3535] ip6_vti0: entered promiscuous mode [ 940.317830][ T3535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7454'. [ 940.397092][ T3545] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 940.413511][ T3545] bond4: option tlb_dynamic_lb: invalid value (10) [ 940.426788][ T3545] bond4 (unregistering): Released all slaves [ 940.718148][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7461'. [ 940.963083][ T3579] bridge_slave_1: entered promiscuous mode [ 940.972808][ T3579] bridge_slave_1: entered allmulticast mode [ 941.087441][ T3589] netlink: 'syz.2.7468': attribute type 28 has an invalid length. [ 941.350719][ T3606] netlink: 'syz.0.7474': attribute type 1 has an invalid length. [ 941.531303][ T3623] ip6t_srh: unknown srh match flags 4000 [ 941.571329][ T3623] netlink: 'syz.3.7478': attribute type 1 has an invalid length. [ 941.888724][ T3641] x_tables: duplicate entry at hook 3 [ 941.893350][ T3638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 941.945504][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.009298][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.100042][ T3647] erspan0: entered promiscuous mode [ 942.110520][ T3647] __nla_validate_parse: 4 callbacks suppressed [ 942.110542][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7485'. [ 942.365578][ T3655] netlink: 'syz.4.7487': attribute type 1 has an invalid length. [ 942.443395][ T3655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.459752][ T3668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7492'. [ 942.515504][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7487'. [ 942.579737][ T3677] netlink: 'syz.2.7494': attribute type 6 has an invalid length. [ 942.598655][ T3655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7487'. [ 942.638487][ T3655] bond0: entered allmulticast mode [ 942.969403][ T3701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7501'. [ 943.019777][ T3701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7501'. [ 943.168434][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 943.940008][ T3758] netlink: 'syz.0.7514': attribute type 10 has an invalid length. [ 943.952470][ T3758] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7514'. [ 943.995589][ T66] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 944.014398][ T66] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 944.024130][ T6775] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 944.212526][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7516'. [ 944.266079][ T6775] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 944.286423][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7516'. [ 944.369561][ T3778] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7521'. [ 944.744535][ T3799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.938920][ T6775] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 945.111039][ T3816] pimreg3: entered allmulticast mode [ 945.463700][ T3828] lo speed is unknown, defaulting to 1000 [ 945.471792][ T3828] virt_wifi0 speed is unknown, defaulting to 1000 [ 945.640551][ T3836] netlink: 'syz.4.7534': attribute type 1 has an invalid length. [ 945.651887][ T3836] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 946.614862][ T3867] geneve2: entered promiscuous mode [ 946.669119][ T3874] netlink: 'syz.3.7544': attribute type 41 has an invalid length. [ 947.552356][ T3902] __nla_validate_parse: 15 callbacks suppressed [ 947.552380][ T3902] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7550'. [ 947.614878][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7554'. [ 947.653422][ T3924] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 947.950304][ T3937] 8021q: VLANs not supported on xfrm0 [ 948.046130][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 948.123145][ T3947] openvswitch: netlink: IP tunnel dst address not specified [ 948.193412][ T3951] netlink: 'syz.4.7561': attribute type 1 has an invalid length. [ 948.248040][ T3956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7562'. [ 948.257266][ T3956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7562'. [ 948.309397][ T3960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 948.335465][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7563'. [ 948.493094][ T3964] netlink: 'syz.3.7564': attribute type 4 has an invalid length. [ 948.549718][ T3969] netlink: 'syz.3.7564': attribute type 4 has an invalid length. [ 948.770468][ T3980] lo speed is unknown, defaulting to 1000 [ 948.802616][ T3980] virt_wifi0 speed is unknown, defaulting to 1000 [ 948.830946][ T3988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.068406][T21516] IPVS: starting estimator thread 0... [ 949.077799][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7575'. [ 949.077820][ T4007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7576'. [ 949.087077][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 949.108696][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7575'. [ 949.175987][ T4008] IPVS: using max 29 ests per chain, 69600 per kthread [ 949.197816][ T4010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7577'. [ 949.253291][ T4014] netlink: 'syz.0.7579': attribute type 1 has an invalid length. [ 949.283934][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 949.894853][ T4055] lo speed is unknown, defaulting to 1000 [ 949.905012][ T4055] virt_wifi0 speed is unknown, defaulting to 1000 [ 950.503757][ T4066] netlink: 'syz.0.7590': attribute type 12 has an invalid length. [ 951.385962][ T4102] netlink: 'syz.1.7596': attribute type 7 has an invalid length. [ 951.422787][ T4102] netlink: 'syz.1.7596': attribute type 7 has an invalid length. [ 951.469231][ T4107] netlink: 'syz.0.7601': attribute type 4 has an invalid length. [ 951.491754][ T4103] veth1_macvtap: left promiscuous mode [ 951.541528][ T4103] macsec0: entered allmulticast mode [ 951.630212][ T4103] veth1_macvtap: entered promiscuous mode [ 951.639598][ T4103] veth1_macvtap: entered allmulticast mode [ 951.646176][ T4103] macsec0: left allmulticast mode [ 951.651524][ T4103] veth1_macvtap: left allmulticast mode [ 952.237265][ T4126] bridge0: port 2(macvtap2) entered blocking state [ 952.275472][ T4126] bridge0: port 2(macvtap2) entered disabled state [ 952.285635][ T4126] macvtap2: entered allmulticast mode [ 952.310943][ T4126] bridge0: entered allmulticast mode [ 952.338098][ T4126] macvtap2: left allmulticast mode [ 952.343894][ T4126] bridge0: left allmulticast mode [ 952.584191][ T4137] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 952.701461][ T4155] netlink: 'syz.4.7611': attribute type 32 has an invalid length. [ 952.745903][ T4155] __nla_validate_parse: 8 callbacks suppressed [ 952.745926][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7611'. [ 952.926488][ T4155] bond4: Setting coupled_control to off (0) [ 953.287343][ T4187] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7615'. [ 953.553496][ T4193] bond4: option primary_reselect: invalid value (4) [ 953.581119][ T4193] bond4 (unregistering): Released all slaves [ 953.753578][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7622'. [ 953.933125][ T4177] RDS: rds_bind could not find a transport for fe80::1f, load rds_tcp or rds_rdma? [ 953.970718][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7624'. [ 953.982624][ T4217] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 954.153547][ T4222] lo speed is unknown, defaulting to 1000 [ 954.187438][ T4222] virt_wifi0 speed is unknown, defaulting to 1000 [ 954.196443][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7626'. [ 954.402060][ T4230] lo speed is unknown, defaulting to 1000 [ 954.424018][ T4230] virt_wifi0 speed is unknown, defaulting to 1000 [ 954.431422][ T4238] x_tables: duplicate underflow at hook 2 [ 954.805406][ T4263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7637'. [ 954.866404][ T4263] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.7637'. [ 954.866404][ T4264] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.7637'. [ 955.139412][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7641'. [ 955.155060][ T4278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7641'. [ 955.175573][ T4277] netlink: 'syz.0.7642': attribute type 1 has an invalid length. [ 955.188604][ T4260] netlink: 'syz.3.7635': attribute type 10 has an invalid length. [ 955.237947][ T4279] netlink: 'syz.3.7635': attribute type 10 has an invalid length. [ 955.318390][ T4286] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 955.392233][ T4260] bond0: (slave dummy0): Releasing backup interface [ 955.400228][ T4260] dummy0: left promiscuous mode [ 955.409841][ T4260] team0: Port device dummy0 added [ 955.479225][ T4279] team0: Port device dummy0 removed [ 955.508906][ T4279] dummy0: entered promiscuous mode [ 955.514937][ T4279] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 955.614930][ T4282] lo speed is unknown, defaulting to 1000 [ 955.657830][ T4282] virt_wifi0 speed is unknown, defaulting to 1000 [ 955.658497][ T4297] syzkaller0: entered promiscuous mode [ 955.670110][ T4297] syzkaller0: entered allmulticast mode [ 955.695731][ T4297] macsec1: entered promiscuous mode [ 955.716642][ T4297] macsec1: entered allmulticast mode [ 955.966041][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 958.576544][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 963.965866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 963.974033][ C1] lec:lec_tx_timeout: lec0 [ 971.086296][ T6775] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 423 sec [ 971.966042][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 993.091206][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 998.105904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.114129][ C1] lec:lec_tx_timeout: lec0 [ 1003.326023][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1022.887880][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 1027.966027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1027.974387][ C1] lec:lec_tx_timeout: lec0 [ 1031.406341][ T6775] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 483 sec [ 1041.246377][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 1054.531219][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1059.965831][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1059.974054][ C1] lec:lec_tx_timeout: lec0 [ 1069.886278][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1086.395066][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 1091.726011][ T40] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 544 sec [ 1091.965931][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 1091.974158][ C1] lec:lec_tx_timeout: lec0 [ 1096.807239][ T4352] __nla_validate_parse: 3 callbacks suppressed [ 1096.807263][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7656'. [ 1097.268200][T21516] IPVS: starting estimator thread 0... [ 1097.355805][ T4384] IPVS: using max 29 ests per chain, 69600 per kthread [ 1097.379465][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7663'. [ 1097.402347][ T4388] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1097.716476][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7668'. [ 1097.751512][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7668'. [ 1097.952209][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7671'. [ 1097.980561][ T4416] tipc: Enabled bearer , priority 0 [ 1098.029346][ T4416] batadv_slave_0: entered promiscuous mode [ 1098.060272][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7671'. [ 1098.194052][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7673'. [ 1098.243926][ T4413] batadv_slave_0: left promiscuous mode [ 1098.313651][ T4426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7674'. [ 1098.768093][ T4455] netlink: 'syz.2.7681': attribute type 10 has an invalid length. [ 1098.990151][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7684'. [ 1099.000994][ T4471] netlink: 'syz.3.7683': attribute type 4 has an invalid length. [ 1099.001884][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7684'. [ 1099.064650][ T4472] netlink: 'syz.3.7683': attribute type 4 has an invalid length. [ 1099.194574][ T4478] : renamed from bond_slave_0 [ 1099.203089][ T4474] lo speed is unknown, defaulting to 1000 [ 1099.252881][ T4474] virt_wifi0 speed is unknown, defaulting to 1000 [ 1099.519323][ T4481] lo speed is unknown, defaulting to 1000 [ 1099.770054][ T4481] virt_wifi0 speed is unknown, defaulting to 1000 [ 1100.529813][ T4517] geneve2: entered promiscuous mode [ 1100.802909][ T4523] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1100.821580][ T4523] syzkaller1: entered promiscuous mode [ 1100.834728][ T4523] syzkaller1: entered allmulticast mode [ 1101.190710][ T4558] tipc: Enabled bearer , priority 0 [ 1101.234855][ T4558] syzkaller0: entered promiscuous mode [ 1101.266269][ T4558] syzkaller0: entered allmulticast mode [ 1101.275044][ T4569] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1101.408808][ T4563] lo speed is unknown, defaulting to 1000 [ 1101.442540][ T4563] virt_wifi0 speed is unknown, defaulting to 1000 [ 1101.452148][ T4581] tipc: Resetting bearer [ 1101.479464][ T4580] netlink: 'syz.1.7713': attribute type 5 has an invalid length. [ 1102.108801][ T4556] tipc: Resetting bearer [ 1102.294856][ T4607] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1102.309348][ T4556] tipc: Disabling bearer [ 1102.411256][T29731] tipc: Node number set to 4293260154 [ 1102.531092][ T4623] __nla_validate_parse: 8 callbacks suppressed [ 1102.531113][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7725'. [ 1102.569147][ T4623] openvswitch: netlink: Key type 1040 is out of range max 32 [ 1102.610894][ T4616] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1102.922532][ T4645] netlink: 'syz.3.7730': attribute type 1 has an invalid length. [ 1102.943035][ T4646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7732'. [ 1102.981869][ T4645] bond6: entered promiscuous mode [ 1102.987740][ T4645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1102.996389][ T4649] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1103.080246][ T4645] bond6: (slave bridge5): making interface the new active one [ 1103.097946][ T4645] bridge5: entered promiscuous mode [ 1103.120950][ T4645] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1103.467483][ T4668] netlink: 'syz.1.7735': attribute type 1 has an invalid length. [ 1103.515665][ T4668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7735'. [ 1103.903966][ T4684] lo speed is unknown, defaulting to 1000 [ 1103.914421][ T4684] virt_wifi0 speed is unknown, defaulting to 1000 [ 1104.632282][ T4695] netlink: 'syz.0.7743': attribute type 21 has an invalid length. [ 1104.645447][ T4695] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1104.664929][ T4695] netlink: 'syz.0.7743': attribute type 5 has an invalid length. [ 1104.682327][ T4695] netlink: 'syz.0.7743': attribute type 6 has an invalid length. [ 1104.695170][ T4695] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1104.816208][ T4704] netlink: 'syz.4.7746': attribute type 11 has an invalid length. [ 1104.824366][ T4704] netlink: 'syz.4.7746': attribute type 11 has an invalid length. [ 1104.833289][ T4704] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7746'. [ 1104.865455][ T4704] netlink: 'syz.4.7746': attribute type 10 has an invalid length. [ 1104.953042][ T4707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7748'. [ 1104.979744][ T4710] netlink: 356 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1105.037917][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7747'. [ 1105.098925][ T4709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7747'. [ 1105.552682][ T4744] netlink: 'syz.4.7758': attribute type 1 has an invalid length. [ 1105.614943][ T4744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1105.683299][ T4755] bond5: (slave ip6gretap2): making interface the new active one [ 1105.698207][ T4755] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1105.813985][ T4758] veth13: entered promiscuous mode [ 1105.853208][ T4758] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1105.882764][ T4744] erspan0: entered allmulticast mode [ 1105.913361][ T4744] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 1105.997980][ T4768] syzkaller1: entered promiscuous mode [ 1106.031168][ T4768] syzkaller1: entered allmulticast mode [ 1106.286336][ T4776] lo speed is unknown, defaulting to 1000 [ 1106.303887][ T4776] virt_wifi0 speed is unknown, defaulting to 1000 [ 1106.937725][ T4793] syzkaller0: entered promiscuous mode [ 1106.945448][ T4793] syzkaller0: entered allmulticast mode [ 1107.043061][ T4801] netlink: 'syz.3.7772': attribute type 1 has an invalid length. [ 1107.058788][ T4801] netlink: 'syz.3.7772': attribute type 2 has an invalid length. [ 1107.138143][ T4802] bridge2: entered promiscuous mode [ 1107.256092][ T4802] bridge2: entered allmulticast mode [ 1107.502161][ T4816] lo speed is unknown, defaulting to 1000 [ 1107.528111][ T4816] virt_wifi0 speed is unknown, defaulting to 1000 [ 1107.582182][ T4825] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 1109.453190][ T4848] __nla_validate_parse: 5 callbacks suppressed [ 1109.453212][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1110.661507][ T4833] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1110.966930][ T4866] lo speed is unknown, defaulting to 1000 [ 1110.994268][ T4866] virt_wifi0 speed is unknown, defaulting to 1000 [ 1111.340809][ T4883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7787'. [ 1111.672673][ T4900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1111.685105][ T4898] syzkaller0: entered promiscuous mode [ 1111.691103][ T4898] syzkaller0: entered allmulticast mode [ 1111.730819][ T4899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1111.773981][ T4906] netlink: 'syz.4.7794': attribute type 1 has an invalid length. [ 1111.932648][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7794'. [ 1111.973575][ T4911] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7795'. [ 1111.993321][ T4914] netlink: 'syz.2.7796': attribute type 2 has an invalid length. [ 1112.009967][ T4914] hmac(sha224): entered promiscuous mode [ 1112.122207][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7798'. [ 1112.337496][ T4932] netlink: 'syz.0.7800': attribute type 4 has an invalid length. [ 1112.815384][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7805'. [ 1112.818313][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 1112.861985][ T4954] openvswitch: netlink: IP tunnel dst address not specified [ 1113.641766][ T4996] netem: incorrect gi model size [ 1113.658090][ T4996] netem: change failed [ 1114.420854][ T5030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7816'. [ 1115.746615][ T4954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.923916][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7824'. [ 1115.977425][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1116.179035][ T5071] syzkaller0: entered promiscuous mode [ 1116.195045][ T5071] syzkaller0: entered allmulticast mode [ 1116.345433][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7835'. [ 1116.366036][ T5095] netlink: 'syz.0.7835': attribute type 1 has an invalid length. [ 1119.106003][ T5151] tipc: Enabling of bearer rejected, already enabled [ 1119.251755][ T5158] lo speed is unknown, defaulting to 1000 [ 1119.297636][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1119.320462][ T5158] virt_wifi0 speed is unknown, defaulting to 1000 [ 1119.500189][ T5181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1119.529292][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7855'. [ 1119.683111][ T5189] lo speed is unknown, defaulting to 1000 [ 1119.741147][ T5189] virt_wifi0 speed is unknown, defaulting to 1000 [ 1119.877502][T29730] IPVS: starting estimator thread 0... [ 1119.910271][ T5158] nr4: entered promiscuous mode [ 1119.910643][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1119.915184][ T5158] nr4: entered allmulticast mode [ 1119.934953][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1119.975830][ T5205] IPVS: using max 28 ests per chain, 67200 per kthread [ 1120.486415][ T5229] dvmrp0: entered allmulticast mode [ 1120.500910][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7863'. [ 1120.553159][T24119] IPVS: stop unused estimator thread 0... [ 1120.985729][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.993878][ C1] lec:lec_tx_timeout: lec0 [ 1121.203765][ T5259] erspan0: left promiscuous mode [ 1121.929441][ T5306] rdma_rxe: rxe_newlink: failed to add gre0 [ 1122.093062][ T5312] lo speed is unknown, defaulting to 1000 [ 1122.131453][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1122.142727][ T5312] virt_wifi0 speed is unknown, defaulting to 1000 [ 1150.110150][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 1152.126120][T21516] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 604 sec [ 1155.126204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1155.134441][ C1] lec:lec_tx_timeout: lec0 [ 1174.372018][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1174.381507][ T5343] tipc: Cannot configure node identity twice [ 1174.388246][ T5336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1174.400983][ T5342] netlink: 'syz.4.7890': attribute type 1 has an invalid length. [ 1174.410655][ T5336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1174.456790][ T5349] tipc: Enabled bearer , priority 0 [ 1174.473772][ T5341] lo speed is unknown, defaulting to 1000 [ 1174.523687][ T30] audit: type=1800 audit(1770007720.493:23): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7889" name="memory.events" dev="tmpfs" ino=2096 res=0 errno=0 [ 1174.562023][ T5349] syzkaller0: entered promiscuous mode [ 1174.568081][ T5349] syzkaller0: entered allmulticast mode [ 1174.606287][ T5341] virt_wifi0 speed is unknown, defaulting to 1000 [ 1174.769109][ T5361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7892'. [ 1175.006507][ T5348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7888'. [ 1176.847487][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1176.864383][ T5364] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.234293][ T5355] tipc: Resetting bearer [ 1177.342933][ T6775] tipc: Node number set to 3058096822 [ 1177.400647][ T5337] tipc: Resetting bearer [ 1177.412921][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1177.414791][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1177.453202][ T5337] tipc: Disabling bearer [ 1177.586625][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7899'. [ 1177.625300][ T5387] tipc: Started in network mode [ 1177.637540][ T5387] tipc: Node identity f61fb05c956, cluster identity 4711 [ 1177.658656][ T5387] tipc: Enabled bearer , priority 0 [ 1177.770978][ T5391] syzkaller0: entered promiscuous mode [ 1177.781321][ T5396] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7901'. [ 1177.812972][ T5391] syzkaller0: entered allmulticast mode [ 1177.820440][ T5391] tipc: Resetting bearer [ 1177.905022][ T5386] tipc: Resetting bearer [ 1178.129675][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7905'. [ 1178.175307][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7905'. [ 1178.323290][ T5435] IPVS: set_ctl: invalid protocol: 25421 100.1.1.2:20000 [ 1180.721812][ T5386] tipc: Disabling bearer [ 1180.739497][ T5485] veth0_macvtap: entered promiscuous mode [ 1180.773363][T29730] tipc: Node number set to 1669312604 [ 1180.859326][ T5439] lo speed is unknown, defaulting to 1000 [ 1180.890848][ T5439] virt_wifi0 speed is unknown, defaulting to 1000 [ 1181.092909][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7915'. [ 1181.255188][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1181.276288][ T5478] netlink: 'syz.2.7916': attribute type 11 has an invalid length. [ 1181.404886][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7917'. [ 1181.551115][ T5494] pim6reg99999999: entered allmulticast mode [ 1181.587797][ T5494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7919'. [ 1181.736138][ T5505] netlink: 'syz.1.7921': attribute type 2 has an invalid length. [ 1181.743062][ T5506] syzkaller1: entered promiscuous mode [ 1181.758508][ T5506] syzkaller1: entered allmulticast mode [ 1181.766170][ T5504] lo speed is unknown, defaulting to 1000 [ 1181.768597][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7922'. [ 1181.782702][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7921'. [ 1181.854881][ T5504] virt_wifi0 speed is unknown, defaulting to 1000 [ 1181.954918][ T5514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1182.126383][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7926'. [ 1182.150697][ T5519] lo speed is unknown, defaulting to 1000 [ 1182.159446][ T5519] virt_wifi0 speed is unknown, defaulting to 1000 [ 1182.279041][ T5514] vlan3: entered allmulticast mode [ 1182.284365][ T5514] dummy0: entered allmulticast mode [ 1182.291415][ T5514] bridge0: port 4(vlan3) entered blocking state [ 1182.300088][ T5514] bridge0: port 4(vlan3) entered disabled state [ 1182.310029][ T5514] vlan3: entered promiscuous mode [ 1182.327077][ T5514] dummy0: entered promiscuous mode [ 1182.346122][ T5538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1182.783923][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1182.817228][ T5571] netlink: 'syz.0.7937': attribute type 2 has an invalid length. [ 1182.826195][ T5571] netlink: 'syz.0.7937': attribute type 9 has an invalid length. [ 1182.850976][ T5571] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7937'. [ 1182.881721][ T5570] tipc: Enabled bearer , priority 0 [ 1182.936072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1182.944131][ C1] lec:lec_tx_timeout: lec0 [ 1182.984709][ T5585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.043622][ T5566] syzkaller0: entered promiscuous mode [ 1183.062804][ T5566] syzkaller0: entered allmulticast mode [ 1183.189640][ T5566] tipc: Resetting bearer [ 1183.429742][ T5566] tipc: Disabling bearer [ 1183.496764][ T5588] ip6gre2: entered promiscuous mode [ 1183.502051][ T5588] ip6gre2: entered allmulticast mode [ 1183.999219][ T5643] geneve4: entered promiscuous mode [ 1184.036082][ T5643] geneve4: entered allmulticast mode [ 1184.058394][T16231] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.085764][T16231] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.138472][T16231] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.172171][T16231] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.232575][ T5646] lo speed is unknown, defaulting to 1000 [ 1184.249877][ T5646] virt_wifi0 speed is unknown, defaulting to 1000 [ 1184.456268][ T5669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1184.609156][T29731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1184.935296][T24121] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.966850][ T5689] bond5: (slave erspan0): Releasing active interface [ 1184.986949][ T5689] ip6gretap2: entered promiscuous mode [ 1184.998383][ T5689] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1185.063730][T24121] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.139163][T24121] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.160446][ T5694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.181055][T24121] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.275924][ T5685] dummy0: mtu less than device minimum [ 1185.957936][ T5731] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1186.120682][ T5731] ip6gretap2: entered promiscuous mode [ 1186.405320][ T5749] __nla_validate_parse: 10 callbacks suppressed [ 1186.405343][ T5749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7973'. [ 1186.429401][ T5746] syzkaller0: entered promiscuous mode [ 1186.435466][ T5746] syzkaller0: entered allmulticast mode [ 1186.857530][ T5767] netlink: 'syz.1.7976': attribute type 3 has an invalid length. [ 1186.990986][ T5771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7977'. [ 1187.248662][ T5766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.374102][ T5779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7979'. [ 1187.439963][ T5766] veth1_vlan: left allmulticast mode [ 1187.460556][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1187.816810][ T5767] ip6erspan1: entered allmulticast mode [ 1187.836797][ T4444] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.862034][ T4444] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.906542][ T4444] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.915624][ T4444] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.054830][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1188.081728][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1188.101722][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1188.150617][ T5799] pim6reg1: entered promiscuous mode [ 1188.160291][ T5799] pim6reg1: entered allmulticast mode [ 1188.340701][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1188.350010][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1188.384962][ T5812] netlink: 'syz.1.7989': attribute type 4 has an invalid length. [ 1188.543592][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7990'. [ 1188.553607][ T5816] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1188.615516][ T5815] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1188.896747][ T5831] batman_adv: batadv0: Removing interface: macvtap1 [ 1188.912068][ T5831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.004941][ T5833] ip6gretap0: entered promiscuous mode [ 1189.214779][ T5850] syzkaller0: entered promiscuous mode [ 1189.225886][ T5850] syzkaller0: entered allmulticast mode [ 1189.476537][ T5864] netlink: 'syz.1.8003': attribute type 1 has an invalid length. [ 1189.485210][ T5864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.500775][ T5864] netlink: 'syz.1.8003': attribute type 1 has an invalid length. [ 1189.533952][ T5859] netlink: 'syz.4.8002': attribute type 1 has an invalid length. [ 1189.617626][ T5859] bond6: entered promiscuous mode [ 1189.622827][ T5859] bond6: entered allmulticast mode [ 1189.629463][ T5859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1189.751455][ T5875] lo speed is unknown, defaulting to 1000 [ 1189.770394][ T5875] virt_wifi0 speed is unknown, defaulting to 1000 [ 1189.997747][ T5887] bridge0: entered allmulticast mode [ 1190.026882][ T5889] netlink: 'syz.4.8009': attribute type 1 has an invalid length. [ 1190.082809][ T5890] vlan3: left promiscuous mode [ 1190.088229][ T5890] dummy0: left promiscuous mode [ 1190.094158][ T5890] bridge0: port 4(vlan3) entered disabled state [ 1191.074627][ T5908] netlink: 'syz.4.8014': attribute type 1 has an invalid length. [ 1191.083033][ T5908] netlink: 'syz.4.8014': attribute type 2 has an invalid length. [ 1191.092055][ T5908] netlink: 'syz.4.8014': attribute type 1 has an invalid length. [ 1191.100345][ T5908] netlink: 'syz.4.8014': attribute type 3 has an invalid length. [ 1192.765955][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1192.877152][ T5890] batadv0: left allmulticast mode [ 1192.900864][ T5890] batadv0: left promiscuous mode [ 1192.942640][ T5890] bridge0: port 3(batadv0) entered disabled state [ 1192.971411][ T5890] bridge_slave_1: left allmulticast mode [ 1192.985841][ T5890] bridge_slave_1: left promiscuous mode [ 1192.996470][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.003990][ T5916] __nla_validate_parse: 13 callbacks suppressed [ 1193.004011][ T5916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.024782][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.035983][ T5890] bridge_slave_0: left allmulticast mode [ 1193.041773][ T5890] bridge_slave_0: left promiscuous mode [ 1193.056657][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.066089][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.078133][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.090987][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.112086][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.131644][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.141545][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.160570][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.171219][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1193.222666][ T5903] bridge3: entered promiscuous mode [ 1193.477049][ T5924] netlink: 'syz.2.8017': attribute type 1 has an invalid length. [ 1193.592336][ T5935] netlink: 'syz.4.8020': attribute type 13 has an invalid length. [ 1193.607070][ T5938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.688754][ T5935] tipc: Resetting bearer [ 1193.846770][ T5945] ip6gretap2: entered promiscuous mode [ 1193.866836][ T5945] ip6gretap2: entered allmulticast mode [ 1193.873592][ T4442] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.895998][ T4442] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.980492][ T4442] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.995768][ T4442] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.376296][ T5964] : renamed from bond_slave_0 [ 1194.405475][ T5967] netlink: 'syz.1.8028': attribute type 8 has an invalid length. [ 1194.716542][ T5982] netlink: 'syz.3.8029': attribute type 1 has an invalid length. [ 1194.730499][ T5978] netlink: 'syz.1.8031': attribute type 29 has an invalid length. [ 1194.753092][ T5982] netlink: 'syz.3.8029': attribute type 1 has an invalid length. [ 1194.761498][ T5981] netlink: 'syz.1.8031': attribute type 29 has an invalid length. [ 1194.817928][ T5982] netlink: 'syz.3.8029': attribute type 8 has an invalid length. [ 1194.889788][ T5995] syzkaller0: left promiscuous mode [ 1194.895361][ T5995] syzkaller0: left allmulticast mode [ 1195.478247][ T6027] bond0: entered promiscuous mode [ 1195.485015][ T6027] gretap0: entered promiscuous mode [ 1195.506675][ T6027] hsr2: entered promiscuous mode [ 1196.162574][ T6052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.186250][ T6052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.038927][ T6036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1197.060528][ T6075] netlink: 'syz.2.8044': attribute type 5 has an invalid length. [ 1197.184170][ T6052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.213660][ T6052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.391807][ T6052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.406150][ T6052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.504105][ T6092] lo speed is unknown, defaulting to 1000 [ 1197.674121][ T6052] bond0: (slave netdevsim0): Releasing backup interface [ 1197.694391][ T6052] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1197.710494][ T6052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.727202][ T6052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.746057][ T6092] virt_wifi0 speed is unknown, defaulting to 1000 [ 1197.983177][T16231] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1197.992667][T16231] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.117546][ T6129] __nla_validate_parse: 40 callbacks suppressed [ 1198.117567][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8069'. [ 1198.232311][T24121] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.243975][T24121] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.254088][T24121] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.263065][T24121] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.277342][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8068'. [ 1198.294182][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8069'. [ 1198.312752][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8069'. [ 1198.323850][ T6139] bridge6: entered promiscuous mode [ 1198.369629][T16231] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1198.388884][T16231] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.539809][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.556422][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.567634][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.611795][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.639648][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.669940][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8074'. [ 1198.770732][ T6162] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1198.788970][ T6162] bond6 (unregistering): Released all slaves [ 1198.878473][ T6163] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1198.908832][ T6163] bond6 (unregistering): Released all slaves [ 1199.044776][ T6179] syzkaller0: entered allmulticast mode [ 1199.154077][ T6179] syzkaller0 (unregistering): left allmulticast mode [ 1199.338275][ T6197] tunl0: Caught tx_queue_len zero misconfig [ 1199.498835][ T6206] netlink: 'syz.1.8086': attribute type 10 has an invalid length. [ 1199.569783][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.627588][ T6206] team0: Port device bond0 added [ 1199.907650][ T6223] netlink: 'syz.2.8092': attribute type 1 has an invalid length. [ 1200.308804][ T5364] block nbd2: Receive control failed (result -32) [ 1200.401857][ T6241] netlink: 'syz.2.8096': attribute type 4 has an invalid length. [ 1200.560527][ T6255] netlink: 'syz.1.8101': attribute type 16 has an invalid length. [ 1200.586897][ T6255] netlink: 'syz.1.8101': attribute type 3 has an invalid length. [ 1201.535291][ T6312] netlink: 'syz.3.8119': attribute type 15 has an invalid length. [ 1201.744920][ T6324] netlink: 'syz.2.8121': attribute type 1 has an invalid length. [ 1201.863529][ T6331] netlink: 'syz.1.8123': attribute type 1 has an invalid length. [ 1202.226898][ T6352] netlink: 'syz.4.8128': attribute type 1 has an invalid length. [ 1202.273179][ T6352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1202.313913][ T6349] vlan1: entered promiscuous mode [ 1202.322159][ T6349] bond7: entered promiscuous mode [ 1202.327639][ T6349] vlan1: entered allmulticast mode [ 1202.333144][ T6349] bond7: entered allmulticast mode [ 1202.401079][ T6356] tipc: Enabled bearer , priority 0 [ 1202.424083][ T6356] syzkaller0: entered promiscuous mode [ 1202.459067][ T6356] syzkaller0: entered allmulticast mode [ 1202.508250][ T6356] tipc: Resetting bearer [ 1202.520151][ T6355] tipc: Resetting bearer [ 1202.578963][ T6355] tipc: Disabling bearer [ 1202.923331][ T6392] netlink: 'syz.1.8139': attribute type 10 has an invalid length. [ 1203.178545][ T6404] __nla_validate_parse: 73 callbacks suppressed [ 1203.178567][ T6404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1203.246486][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'. [ 1203.514301][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8147'. [ 1203.579064][ T6421] x_tables: duplicate underflow at hook 1 [ 1203.596028][ T6430] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8152'. [ 1203.621994][ T6430] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1203.792152][ T6440] syzkaller1: entered promiscuous mode [ 1203.808240][ T6440] syzkaller1: entered allmulticast mode [ 1203.832277][ T6440] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1204.053217][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1204.163470][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1204.278198][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8158'. [ 1204.383756][ T6458] bond7: option lacp_rate: invalid value (192) [ 1204.398127][ T6458] bond7 (unregistering): Released all slaves [ 1204.636549][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1204.655322][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1205.053172][ T6482] validate_nla: 2 callbacks suppressed [ 1205.053195][ T6482] netlink: 'syz.0.8166': attribute type 1 has an invalid length. [ 1205.116996][ T6484] netlink: 'syz.0.8166': attribute type 2 has an invalid length. [ 1205.260959][ T6484] : entered promiscuous mode [ 1205.526907][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1205.900593][ T6519] syzkaller0: entered promiscuous mode [ 1205.924640][ T6519] syzkaller0: entered allmulticast mode [ 1205.947822][ T6519] netlink: 'syz.0.8176': attribute type 5 has an invalid length. [ 1205.978320][ T6522] syzkaller0: entered promiscuous mode [ 1206.035760][ T6522] syzkaller0: entered allmulticast mode [ 1206.485776][ T6545] netlink: 'syz.0.8182': attribute type 4 has an invalid length. [ 1206.495590][ T6545] netlink: 'syz.0.8182': attribute type 4 has an invalid length. [ 1207.227049][ T6577] netlink: 'syz.0.8191': attribute type 21 has an invalid length. [ 1207.255342][ T6577] netlink: 'syz.0.8191': attribute type 3 has an invalid length. [ 1207.457095][ T6588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1207.526228][ T6598] netlink: 'syz.3.8197': attribute type 1 has an invalid length. [ 1207.768209][ T6600] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1207.820422][ T6604] tipc: Enabled bearer , priority 0 [ 1207.858633][ T6604] tipc: Disabling bearer [ 1208.108737][ T6620] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1208.155607][ T6620] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1208.161943][ T6620] pim6reg1: linktype set to 805 [ 1208.189226][ T6620] __nla_validate_parse: 8 callbacks suppressed [ 1208.189247][ T6620] netlink: 280 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1208.261972][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8206'. [ 1208.323436][ T6630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1208.364573][ T6628] netlink: 'syz.4.8206': attribute type 12 has an invalid length. [ 1208.381394][ T6630] syzkaller0: entered promiscuous mode [ 1208.399500][ T6630] syzkaller0: entered allmulticast mode [ 1208.409231][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8208'. [ 1208.428957][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8209'. [ 1208.601935][ T6640] batman_adv: batadv0: Adding interface: macsec0 [ 1208.615520][ T6640] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.665816][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.683483][ T6645] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1208.695424][ T6645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1208.702992][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.703018][ T6640] batman_adv: batadv0: Interface activated: macsec0 [ 1208.982547][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1208.992369][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1209.114107][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1209.262817][ T6667] netlink: 'syz.0.8220': attribute type 2 has an invalid length. [ 1209.311327][ T6671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1209.338684][ T6671] gtp0: entered promiscuous mode [ 1209.344704][ T6671] gtp0: entered allmulticast mode [ 1210.078291][ T6691] validate_nla: 2 callbacks suppressed [ 1210.078313][ T6691] netlink: 'syz.1.8228': attribute type 30 has an invalid length. [ 1210.397460][ T6725] Cannot find set identified by id 65534 to match [ 1211.492540][ T6779] netlink: 'syz.2.8251': attribute type 2 has an invalid length. [ 1211.504157][ T6781] netlink: 'syz.2.8251': attribute type 2 has an invalid length. [ 1211.659604][ T6787] syzkaller0: entered allmulticast mode [ 1211.904994][ T6805] tipc: Enabled bearer , priority 0 [ 1211.923614][ T6805] syzkaller0: entered promiscuous mode [ 1211.935755][ T6805] syzkaller0: entered allmulticast mode [ 1212.033473][ T6805] tipc: Resetting bearer [ 1212.050083][ T6804] tipc: Resetting bearer [ 1212.111826][ T6804] tipc: Disabling bearer [ 1212.343824][ T6834] netlink: 'syz.4.8268': attribute type 5 has an invalid length. [ 1212.362494][ T6830] syzkaller0: entered promiscuous mode [ 1212.385813][ T6830] syzkaller0: entered allmulticast mode [ 1212.446510][ T6775] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 664 sec [ 1212.726481][ T6850] lo speed is unknown, defaulting to 1000 [ 1212.734388][ T6850] virt_wifi0 speed is unknown, defaulting to 1000 [ 1213.396453][ T6877] vlan5: entered promiscuous mode [ 1213.401659][ T6877] ip6gretap0: entered promiscuous mode [ 1213.445151][ T6884] __nla_validate_parse: 12 callbacks suppressed [ 1213.445166][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1213.553039][ T6889] syzkaller1: entered promiscuous mode [ 1213.559017][ T6889] syzkaller1: entered allmulticast mode [ 1213.838317][ T6915] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8288'. [ 1213.867090][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8288'. [ 1213.995915][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8290'. [ 1214.085061][ T6920] lo speed is unknown, defaulting to 1000 [ 1214.101659][ T6920] virt_wifi0 speed is unknown, defaulting to 1000 [ 1214.291836][ T6929] lo speed is unknown, defaulting to 1000 [ 1214.299458][ T6929] virt_wifi0 speed is unknown, defaulting to 1000 [ 1214.464554][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'. [ 1214.505415][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8296'. [ 1214.519023][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8295'. [ 1214.570911][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8295'. [ 1214.572234][ T6785] syzkaller0: left allmulticast mode [ 1214.682545][ T9717] lec:lec_start_xmit: lec0:No lecd attached [ 1214.827248][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8298'. [ 1214.852162][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8298'. [ 1214.890632][ T6954] erspan0: entered allmulticast mode [ 1215.483611][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.513864][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.697577][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.921357][ T6999] tipc: Enabled bearer , priority 0 [ 1215.948085][ T6999] syzkaller0: entered promiscuous mode [ 1215.954251][ T6999] syzkaller0: entered allmulticast mode [ 1216.031060][ T6999] tipc: Resetting bearer [ 1216.038629][ T6999] netlink: 'syz.0.8312': attribute type 62 has an invalid length. [ 1216.075525][ T6996] tipc: Resetting bearer [ 1216.150747][ T6996] tipc: Disabling bearer [ 1216.180101][ T7017] netlink: 'syz.4.8319': attribute type 1 has an invalid length. [ 1216.302992][ T7022] set match dimension is over the limit! [ 1216.322865][ T7023] tipc: Enabled bearer , priority 0 [ 1216.334467][ T7023] syzkaller0: entered promiscuous mode [ 1216.353588][ T7023] syzkaller0: entered allmulticast mode [ 1216.377837][ T7031] vlan2: entered allmulticast mode [ 1216.397522][ T7031] bridge0: port 2(vlan2) entered blocking state [ 1216.410960][ T7031] bridge0: port 2(vlan2) entered disabled state [ 1216.424102][ T7031] vlan2: entered promiscuous mode [ 1216.434649][ T7024] tipc: Resetting bearer [ 1216.516068][ T7021] tipc: Resetting bearer [ 1216.551496][ T7021] tipc: Disabling bearer [ 1216.571077][ T7030] lo speed is unknown, defaulting to 1000 [ 1216.578909][ T7030] virt_wifi0 speed is unknown, defaulting to 1000 [ 1216.997936][ T7069] netlink: 'syz.1.8332': attribute type 2 has an invalid length. [ 1217.014446][ T7069] 9: entered promiscuous mode [ 1217.041298][ T7069] netlink: 'syz.1.8332': attribute type 2 has an invalid length. [ 1217.324862][ T7088] netlink: 'syz.2.8337': attribute type 1 has an invalid length. [ 1217.437951][ T7088] bond5: entered promiscuous mode [ 1217.443641][ T7088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1217.696648][ T7121] siw: device registration error -23 [ 1217.921654][ T7136] lo speed is unknown, defaulting to 1000 [ 1217.953685][ T7136] virt_wifi0 speed is unknown, defaulting to 1000 [ 1218.652537][ T7181] bond4: option packets_per_slave: invalid value (1048582) [ 1218.660108][ T7181] bond4: option packets_per_slave: allowed values 0 - 65535 [ 1218.682259][ T7181] bond4 (unregistering): Released all slaves [ 1218.788242][ T7186] veth0_virt_wifi: entered promiscuous mode [ 1218.813870][ T7186] veth0_virt_wifi: left promiscuous mode [ 1219.129856][ T7210] __nla_validate_parse: 15 callbacks suppressed [ 1219.129886][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8364'. [ 1219.186264][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8364'. [ 1219.256157][ T7219] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1219.289335][ T7221] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1219.320166][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8367'. [ 1219.481372][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8370'. [ 1219.499410][ T7234] lo speed is unknown, defaulting to 1000 [ 1219.519434][ T7235] vlan5: entered allmulticast mode [ 1219.524627][ T7235] dummy0: entered allmulticast mode [ 1219.544578][ T7235] bridge0: port 1(vlan5) entered blocking state [ 1219.552004][ T7235] bridge0: port 1(vlan5) entered disabled state [ 1219.553551][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8371'. [ 1219.561517][ T7235] vlan5: entered promiscuous mode [ 1219.574794][ T7234] virt_wifi0 speed is unknown, defaulting to 1000 [ 1219.582501][ T7231] lo speed is unknown, defaulting to 1000 [ 1219.599710][ T7231] virt_wifi0 speed is unknown, defaulting to 1000 [ 1219.793139][ T7264] netlink: 'syz.0.8376': attribute type 1 has an invalid length. [ 1219.965698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 1219.973790][ C1] lec:lec_tx_timeout: lec0 [ 1220.124758][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8381'. [ 1220.149901][ T7280] bond0: entered promiscuous mode [ 1220.155257][ T7280] : entered promiscuous mode [ 1220.161053][ T7280] bond_slave_1: entered promiscuous mode [ 1220.170644][ T7280] bond0: left promiscuous mode [ 1220.175488][ T7280] : left promiscuous mode [ 1220.183707][ T7280] bond_slave_1: left promiscuous mode [ 1220.441771][ T7296] bond7: option tlb_dynamic_lb: invalid value (10) [ 1220.453404][ T7296] bond7 (unregistering): Released all slaves [ 1220.455324][ T7302] netlink: 'syz.4.8385': attribute type 21 has an invalid length. [ 1220.516136][ T7297] bond7: option tlb_dynamic_lb: invalid value (10) [ 1220.525187][ T7297] bond7 (unregistering): Released all slaves [ 1220.560587][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8385'. [ 1221.398536][ T7353] "syz.1.8395" (7353) uses obsolete ecb(arc4) skcipher [ 1221.456825][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1221.472958][ T7355] netlink: 'syz.3.8396': attribute type 12 has an invalid length. [ 1221.521498][ T7355] lo speed is unknown, defaulting to 1000 [ 1221.540455][ T7355] virt_wifi0 speed is unknown, defaulting to 1000 [ 1221.943949][ T7387] Bluetooth: MGMT ver 1.23 [ 1222.247028][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1222.469418][ T7407] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 1222.721365][ T7418] geneve2: left promiscuous mode [ 1222.771359][ T7418] vlan3: left allmulticast mode [ 1222.785084][ T7418] dummy0: left allmulticast mode [ 1222.792383][ T7418] batman_adv: batadv0: Interface deactivated: macsec0 [ 1222.896741][ T7418] bond5: left promiscuous mode [ 1223.414001][ T7438] lo speed is unknown, defaulting to 1000 [ 1223.422052][ T7438] virt_wifi0 speed is unknown, defaulting to 1000 [ 1223.677894][ T7449] syzkaller0: entered promiscuous mode [ 1223.693080][ T7449] syzkaller0: entered allmulticast mode [ 1223.711633][ T7453] netlink: 'syz.2.8425': attribute type 49 has an invalid length. [ 1223.762536][ T7449] tipc: Enabled bearer , priority 0 [ 1223.784158][ T7448] tipc: Resetting bearer [ 1223.856310][ T7448] tipc: Disabling bearer [ 1223.990515][ T7461] tipc: Enabled bearer , priority 10 [ 1223.998903][ T7461] syzkaller0: entered promiscuous mode [ 1224.004505][ T7461] syzkaller0: entered allmulticast mode [ 1224.070489][ T7466] batman_adv: batadv0: Adding interface: geneve0 [ 1224.078109][ T7466] batman_adv: batadv0: Interface activated: geneve0 [ 1224.101909][ T7267] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.111114][ T7267] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.145293][ T7466] vlan6: entered promiscuous mode [ 1224.150571][ T7466] geneve1: entered promiscuous mode [ 1224.159661][ T7466] vlan6: entered allmulticast mode [ 1224.165461][ T7466] geneve1: entered allmulticast mode [ 1224.173331][ T7267] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.192662][ T7267] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.379308][ T7485] __nla_validate_parse: 16 callbacks suppressed [ 1224.379331][ T7485] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8436'. [ 1224.395559][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8436'. [ 1224.402977][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1224.500041][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1224.718203][ T7502] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1224.738477][ T7502] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.776926][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1224.784748][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1224.803912][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1225.136534][ T7513] : renamed from veth0_to_bond (while UP) [ 1225.172408][ T7516] bond0: (slave dummy0): Releasing backup interface [ 1225.226457][ T7516] bond0: (slave 30): Releasing backup interface [ 1225.247845][ T7516] : left promiscuous mode [ 1225.256295][ T7516] bond0: (slave bond_slave_1): Releasing backup interface [ 1225.290312][ T7516] bond_slave_1: left promiscuous mode [ 1225.301677][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8446'. [ 1225.313472][ T7516] team0: Port device team_slave_0 removed [ 1225.333275][ T7503] infiniband syz1: set down [ 1225.341487][ T7503] infiniband syz1: added xfrm0 [ 1225.341542][ T7516] team0: Port device team_slave_1 removed [ 1225.360941][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.378267][ T7516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1225.404858][ T6775] xfrm0 speed is unknown, defaulting to 1000 [ 1225.433711][ T7503] RDS/IB: syz1: added [ 1225.440341][ T7503] smc: adding ib device syz1 with port count 1 [ 1225.447313][ T7503] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1225.455432][ T6775] xfrm0 speed is unknown, defaulting to 1000 [ 1225.463162][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1225.576577][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8447'. [ 1225.911119][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1225.936224][ T7539] syzkaller1: entered promiscuous mode [ 1225.951738][ T7539] syzkaller1: entered allmulticast mode [ 1226.416350][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1226.460341][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8454'. [ 1226.512825][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8454'. [ 1226.541754][ T7552] bond0: (slave ip6tnl3): refused to change device type [ 1226.552838][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8454'. [ 1226.761482][ T7556] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.847447][ T7556] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.894586][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8459'. [ 1226.930434][ T7556] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.002723][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1227.019616][ T7556] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.121253][ T7267] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.153224][ T7267] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.176999][ T7267] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.204268][ T3577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.425608][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.439649][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.471667][ T7568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1227.519444][ T7569] bond7: option tlb_dynamic_lb: invalid value (5) [ 1227.528672][ T7569] bond7 (unregistering): Released all slaves [ 1227.561209][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1227.740429][ T7574] netlink: 'syz.1.8463': attribute type 1 has an invalid length. [ 1227.918940][ T30] audit: type=1800 audit(1770007773.893:24): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8466" name=CB dev="tmpfs" ino=2085 res=0 errno=0 [ 1228.207258][ T7594] netlink: 'syz.3.8467': attribute type 19 has an invalid length. [ 1228.297748][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1228.385457][ T30] audit: type=1800 audit(1770007774.353:25): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8467" name="memory.events" dev="tmpfs" ino=2759 res=0 errno=0 [ 1228.906469][ T7615] sctp: [Deprecated]: syz.1.8477 (pid 7615) Use of int in maxseg socket option. [ 1228.906469][ T7615] Use struct sctp_assoc_value instead [ 1228.977573][ T7503] xfrm0 speed is unknown, defaulting to 1000 [ 1229.082385][ T7626] netlink: 'syz.3.8480': attribute type 1 has an invalid length. [ 1229.138037][ T7626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.243082][ T7626] bond7: (slave ip6gretap3): making interface the new active one [ 1229.297256][ T7626] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1229.437960][ T7629] veth7: entered promiscuous mode [ 1229.449522][ T7629] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1229.512106][ T7630] erspan0: entered allmulticast mode [ 1229.547949][ T7630] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 1229.642638][ T7626] bond7: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1229.901761][ T7650] __nla_validate_parse: 3 callbacks suppressed [ 1229.901782][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8486'. [ 1229.923536][ T7644] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.976109][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8486'. [ 1229.981694][ T7644] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.090980][ T7650] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1230.132354][ T7644] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.153322][ T7644] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.179831][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8487'. [ 1230.223483][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1230.253616][ T7652] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1230.342801][ T7644] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.355892][ T7644] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.617954][ T7644] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.637959][ T7644] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.802684][ T7680] lo speed is unknown, defaulting to 1000 [ 1230.831155][ T7680] virt_wifi0 speed is unknown, defaulting to 1000 [ 1230.848968][ T7683] netlink: 'syz.2.8493': attribute type 1 has an invalid length. [ 1230.916198][ T7683] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1230.948615][ T7680] xfrm0 speed is unknown, defaulting to 1000 [ 1231.008494][ T7683] veth11: entered promiscuous mode [ 1231.055827][ T7267] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.068574][ T7267] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.117846][ T7267] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.127522][ T7267] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.185182][ T7696] netlink: 584 bytes leftover after parsing attributes in process `syz.0.8496'. [ 1231.191762][T24119] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.204100][T24119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.282045][ T7267] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.287137][ T7700] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1231.302873][ T7267] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.318686][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8496'. [ 1231.328629][ T7696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1231.523292][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1231.931840][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1232.381443][ T7721] netlink: 'syz.1.8503': attribute type 4 has an invalid length. [ 1232.391495][ T7722] batman_adv: batadv0: Adding interface: wlan0 [ 1232.411940][ T7722] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.516447][ T7722] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1232.537328][ T7726] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1232.705521][ T7735] netlink: 'syz.0.8505': attribute type 1 has an invalid length. [ 1232.723514][ T7736] sctp: [Deprecated]: syz.1.8506 (pid 7736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1232.723514][ T7736] Use struct sctp_sack_info instead [ 1232.993122][ T7747] lo speed is unknown, defaulting to 1000 [ 1233.021884][ T7747] virt_wifi0 speed is unknown, defaulting to 1000 [ 1233.089082][ T7747] xfrm0 speed is unknown, defaulting to 1000 [ 1233.522779][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1233.740690][ T7755] lo speed is unknown, defaulting to 1000 [ 1233.798708][ T7755] virt_wifi0 speed is unknown, defaulting to 1000 [ 1233.879913][ T7755] xfrm0 speed is unknown, defaulting to 1000 [ 1235.180840][ T7801] lo speed is unknown, defaulting to 1000 [ 1235.205087][ T7801] virt_wifi0 speed is unknown, defaulting to 1000 [ 1235.238222][ T7801] xfrm0 speed is unknown, defaulting to 1000 [ 1235.552522][ T7816] netlink: 'syz.2.8528': attribute type 3 has an invalid length. [ 1235.562224][ T7816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1235.703681][ T7818] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8529'. [ 1236.101531][ T7825] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1236.173337][ T7825] netlink: 'syz.2.8530': attribute type 23 has an invalid length. [ 1236.265996][ T7800] SET target dimension over the limit! [ 1236.576794][ T7837] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8534'. [ 1236.589459][ T7837] netlink: 'syz.0.8534': attribute type 1 has an invalid length. [ 1236.597942][ T7837] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8534'. [ 1236.733711][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.850007][ T7846] Timeout policy `syz1' can only be used by L3 protocol number 24825 [ 1237.246168][ T7866] lo speed is unknown, defaulting to 1000 [ 1237.254229][ T7866] virt_wifi0 speed is unknown, defaulting to 1000 [ 1237.277885][ T7866] xfrm0 speed is unknown, defaulting to 1000 [ 1237.452317][ T7872] lo speed is unknown, defaulting to 1000 [ 1237.480379][ T7875] tipc: New replicast peer: 255.255.255.255 [ 1237.546590][ T7875] tipc: Enabled bearer , priority 10 [ 1237.614008][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8546'. [ 1237.625372][ T7872] virt_wifi0 speed is unknown, defaulting to 1000 [ 1237.638974][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8546'. [ 1237.705495][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8546'. [ 1237.745256][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8546'. [ 1238.207146][ T7872] xfrm0 speed is unknown, defaulting to 1000 [ 1238.710950][ T7876] Cannot find del_set index 1 as target [ 1238.853678][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1239.266873][ T7907] netlink: 'syz.3.8551': attribute type 1 has an invalid length. [ 1239.368266][ T7909] sctp: [Deprecated]: syz.4.8552 (pid 7909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.368266][ T7909] Use struct sctp_sack_info instead [ 1239.700321][ T7749] Set syz1 is full, maxelem 65536 reached [ 1239.799554][ T7924] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1240.022150][ T7945] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 1240.154641][ T7949] lo speed is unknown, defaulting to 1000 [ 1240.199267][ T7949] virt_wifi0 speed is unknown, defaulting to 1000 [ 1240.253766][ T7949] xfrm0 speed is unknown, defaulting to 1000 [ 1240.340587][ T7959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8564'. [ 1240.559295][ T7965] netlink: 'syz.4.8566': attribute type 11 has an invalid length. [ 1240.724193][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8569'. [ 1240.725113][ T7973] xt_ecn: cannot match TCP bits for non-tcp packets [ 1240.888815][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1241.085127][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8573'. [ 1241.625878][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1241.927816][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8584'. [ 1242.021985][ T8026] netlink: 'syz.0.8585': attribute type 13 has an invalid length. [ 1242.202492][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8585'. [ 1242.316792][ T8037] bridge0: entered allmulticast mode [ 1242.336153][ T8037] vlan2: left promiscuous mode [ 1242.341478][ T8037] bridge0: port 2(vlan2) entered disabled state [ 1242.387898][ T8037] bridge_slave_0: left promiscuous mode [ 1242.393759][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.490903][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8583'. [ 1243.285073][ T8088] netlink: 'syz.1.8596': attribute type 6 has an invalid length. [ 1243.340380][ T8088] lo speed is unknown, defaulting to 1000 [ 1243.364772][ T8088] virt_wifi0 speed is unknown, defaulting to 1000 [ 1243.447669][ T8088] xfrm0 speed is unknown, defaulting to 1000 [ 1243.965883][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.974055][ C1] lec:lec_tx_timeout: lec0 [ 1244.759735][ T8133] netlink: 'syz.1.8606': attribute type 3 has an invalid length. [ 1244.888196][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8607'. [ 1245.908276][ T8144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1246.584162][ T8109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1246.773797][ T8147] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1246.840739][ T8150] lo speed is unknown, defaulting to 1000 [ 1246.886900][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.896801][ T8150] virt_wifi0 speed is unknown, defaulting to 1000 [ 1246.898600][ T8150] xfrm0 speed is unknown, defaulting to 1000 [ 1247.080729][ T8165] vxcan4: entered promiscuous mode [ 1247.135297][ T8163] vxcan4: entered promiscuous mode [ 1247.449290][ T8182] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8623'. [ 1247.707693][ T8199] netlink: 'syz.1.8628': attribute type 1 has an invalid length. [ 1247.772406][ T8206] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.8631'. [ 1247.845555][ T8199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1247.854581][ T8201] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8630'. [ 1247.890899][ T8205] bond4: (slave ip6gretap2): making interface the new active one [ 1247.894426][ T8214] tipc: Failed to remove unknown binding: 66,0,0/843904656:4216420739/4216420740 [ 1247.903238][ T8205] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1247.911772][ T8214] tipc: Failed to remove unknown binding: 66,0,0/843904656:4216420739/4216420740 [ 1247.963188][ T8208] vlan5: entered promiscuous mode [ 1247.970879][ T8208] bridge0: entered promiscuous mode [ 1248.060799][ T8199] veth9: entered promiscuous mode [ 1248.115164][ T8199] bond4: (slave veth9): Enslaving as an active interface with a down link [ 1248.198433][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1248.253726][ T8210] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1248.491509][ T8220] syzkaller0: entered promiscuous mode [ 1248.500509][ T8220] syzkaller0: entered allmulticast mode [ 1248.509012][ T8228] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1251.388852][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1251.655118][ T8270] sctp: [Deprecated]: syz.0.8645 (pid 8270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1251.655118][ T8270] Use struct sctp_sack_info instead [ 1251.750523][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8646'. [ 1251.750523][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1251.750561][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1251.886552][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.954836][ T8283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.971475][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1252.099676][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.196148][ T8291] netlink: 'syz.4.8650': attribute type 4 has an invalid length. [ 1252.217920][ T8291] netlink: 'syz.4.8650': attribute type 4 has an invalid length. [ 1252.280042][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.319109][ T8291] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8650'. [ 1252.416221][ T7647] udevd[7647]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1252.614385][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1252.670955][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1252.758516][ T8318] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1252.870686][ T8321] lo speed is unknown, defaulting to 1000 [ 1252.878602][ T8321] xfrm0 speed is unknown, defaulting to 1000 [ 1253.070648][ T8326] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8659'. [ 1253.584374][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1253.865127][ T8362] lo speed is unknown, defaulting to 1000 [ 1253.910255][ T8362] xfrm0 speed is unknown, defaulting to 1000 [ 1254.244947][ T8384] syzkaller0: entered promiscuous mode [ 1254.271660][ T8384] syzkaller0: entered allmulticast mode [ 1254.999216][ T8394] bond8: option lacp_rate: invalid value (192) [ 1255.009969][ T8394] bond8 (unregistering): Released all slaves [ 1255.021844][ T8413] netlink: 'syz.2.8680': attribute type 1 has an invalid length. [ 1255.179440][ T8410] netlink: 'syz.0.8682': attribute type 6 has an invalid length. [ 1255.187877][ T8410] netlink: 'syz.0.8682': attribute type 7 has an invalid length. [ 1255.198220][ T8410] netlink: 'syz.0.8682': attribute type 8 has an invalid length. [ 1255.219215][ T8410] netlink: 'syz.0.8682': attribute type 13 has an invalid length. [ 1255.245715][ T8411] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1255.259913][ T8411] pim6reg1: linktype set to 776 [ 1255.547732][ T8427] ip_vti0: Master is either lo or non-ether device [ 1255.561587][ T8425] syzkaller1: entered promiscuous mode [ 1255.568248][ T8425] syzkaller1: entered allmulticast mode [ 1256.084144][ T8465] syzkaller0: left promiscuous mode [ 1256.090604][ T8465] syzkaller0: left allmulticast mode [ 1256.381196][ T8474] nbd: must specify at least one socket [ 1256.438922][ T8475] vlan5: entered allmulticast mode [ 1256.444285][ T8475] bridge_slave_0: entered allmulticast mode [ 1256.461998][ T8475] bridge0: port 1(vlan5) entered blocking state [ 1256.486618][ T8475] bridge0: port 1(vlan5) entered disabled state [ 1256.510905][ T30] audit: type=1800 audit(1770007802.363:26): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8699" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=2643 res=0 errno=0 [ 1256.522200][ T8475] vlan5: entered promiscuous mode [ 1256.560170][ T30] audit: type=1804 audit(1770007802.363:27): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8699" name="/newroot/512/x000000000000000b00000000000000000000013" dev="tmpfs" ino=2643 res=1 errno=0 [ 1256.565589][ T8475] bridge_slave_0: entered promiscuous mode [ 1256.676633][ T8489] __nla_validate_parse: 6 callbacks suppressed [ 1256.676653][ T8489] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8703'. [ 1256.693434][ T8491] SET target dimension over the limit! [ 1256.774953][ T8494] netlink: 'syz.2.8705': attribute type 1 has an invalid length. [ 1256.836856][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1256.892120][ T8494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1257.000406][ T8499] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1257.304392][ T8509] tipc: Enabling of bearer rejected, already enabled [ 1257.347341][ T8509] syzkaller0: entered promiscuous mode [ 1257.369894][ T8509] syzkaller0: entered allmulticast mode [ 1257.416320][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8708'. [ 1257.462666][ T8509] tipc: Resetting bearer [ 1257.466206][ T8489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1257.654590][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1257.666500][ T8519] lo speed is unknown, defaulting to 1000 [ 1257.678341][ T8519] xfrm0 speed is unknown, defaulting to 1000 [ 1258.032957][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8713'. [ 1258.052382][ T8531] netlink: 'syz.4.8715': attribute type 10 has an invalid length. [ 1258.621509][ T8550] siw: device registration error -23 [ 1258.645508][ T8554] ip6tnl0: Caught tx_queue_len zero misconfig [ 1258.803206][ T8560] sctp: [Deprecated]: syz.4.8723 (pid 8560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1258.803206][ T8560] Use struct sctp_sack_info instead [ 1258.930346][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1259.036932][ T8565] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8724'. [ 1259.238073][ T8582] netlink: 'syz.0.8729': attribute type 2 has an invalid length. [ 1259.323662][ T8587] netlink: 'syz.1.8728': attribute type 5 has an invalid length. [ 1259.544319][ T8595] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1259.779574][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8735'. [ 1259.988402][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 1259.998794][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 1260.484962][ T8623] veth1_to_hsr: entered promiscuous mode [ 1260.492002][ T8623] macvtap1: entered promiscuous mode [ 1260.497802][ T8623] macvtap1: entered allmulticast mode [ 1260.503512][ T8623] veth1_to_hsr: entered allmulticast mode [ 1260.698966][ T8631] netlink: 'syz.1.8744': attribute type 39 has an invalid length. [ 1260.715524][ T8632] netlink: 'syz.3.8743': attribute type 1 has an invalid length. [ 1260.810624][ T8639] netlink: 'syz.1.8744': attribute type 2 has an invalid length. [ 1261.021415][ T8629] lo speed is unknown, defaulting to 1000 [ 1261.039177][ T8635] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.051501][ T8635] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.079525][ T8638] netlink: 'syz.4.8745': attribute type 6 has an invalid length. [ 1261.095252][ T8638] netlink: 'syz.4.8745': attribute type 7 has an invalid length. [ 1261.106300][ T8638] netlink: 'syz.4.8745': attribute type 8 has an invalid length. [ 1261.140523][ T8638] netlink: 'syz.4.8745': attribute type 13 has an invalid length. [ 1261.227259][ T8629] xfrm0 speed is unknown, defaulting to 1000 [ 1261.240760][ T8635] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.278179][ T8635] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.505449][T24121] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.604776][ T8635] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.640556][ T8671] atomic_op ffff888081aee998 conn xmit_atomic 0000000000000000 [ 1261.651550][ T8635] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.697142][T24121] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.715028][T24121] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.733549][T24121] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1261.781637][ T8635] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1261.798405][ T8635] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.020912][T24121] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.029967][T24121] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.068336][ T4443] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.078775][ T4443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.176873][ T4443] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.193804][ T4443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.349789][ T8700] siw: device registration error -23 [ 1262.368188][ T4443] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.379603][ T4443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.526456][ T8710] __nla_validate_parse: 2 callbacks suppressed [ 1262.526478][ T8710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1262.712552][ T8716] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8765'. [ 1262.749585][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8766'. [ 1262.800168][ T8723] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1262.807910][ T8723] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1262.923375][ T8728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1262.978176][ T8728] netlink: 'syz.0.8767': attribute type 29 has an invalid length. [ 1263.002551][ T8728] netlink: 'syz.0.8767': attribute type 29 has an invalid length. [ 1263.031939][ T8728] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1263.070679][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1263.085971][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1263.095111][ T8728] netlink: 'syz.0.8767': attribute type 14 has an invalid length. [ 1263.129263][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1263.257168][ T8740] IPv6: NLM_F_CREATE should be specified when creating new route [ 1263.265482][ T8740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1263.272884][ T8740] IPv6: NLM_F_CREATE should be set when creating new route [ 1263.481687][ T8741] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8770'. [ 1263.674325][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1263.801004][ T8761] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.8777'. [ 1263.808213][ T8762] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1263.878658][ T8756] lo speed is unknown, defaulting to 1000 [ 1263.900194][ T8756] xfrm0 speed is unknown, defaulting to 1000 [ 1266.585084][ T8750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1267.045967][ T8814] tipc: Enabling of bearer rejected, already enabled [ 1267.075109][ T8814] siw: device registration error -23 [ 1267.312797][ T8815] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.323371][ T8815] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.471095][ T8840] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.612797][ T8815] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.633922][ T8815] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.664148][ T8833] syzkaller1: entered promiscuous mode [ 1267.670187][ T8833] syzkaller1: entered allmulticast mode [ 1267.681894][ T8840] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.777562][ T8815] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.792262][ T8815] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.826746][ T8840] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.874403][ T8815] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.887957][ T8815] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.905143][ T8856] validate_nla: 1 callbacks suppressed [ 1267.905162][ T8856] netlink: 'syz.2.8797': attribute type 83 has an invalid length. [ 1267.956386][ T8840] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.032323][ T8863] __nla_validate_parse: 5 callbacks suppressed [ 1268.032357][ T8863] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8798'. [ 1268.089104][T16231] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.097534][T16231] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.144974][T16231] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.154838][T16231] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.174761][ T8865] xt_hashlimit: max too large, truncated to 1048576 [ 1268.217617][ T4443] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.230411][ T4443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.264608][ T4443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.275826][ T4443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.296083][T16231] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1268.319223][T16231] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.363484][T16231] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.394985][T16231] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.521628][ T8880] tipc: Enabling of bearer rejected, failed to enable media [ 1268.535451][ T8880] tipc: Enabling of bearer rejected, failed to enable media [ 1268.562015][ T8880] tipc: Enabling of bearer rejected, failed to enable media [ 1268.678814][ T8889] lo speed is unknown, defaulting to 1000 [ 1268.689219][ T8889] xfrm0 speed is unknown, defaulting to 1000 [ 1268.760367][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.767863][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.775160][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.782777][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.790253][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.797544][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.804907][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.812299][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.819664][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1268.826951][ T8883] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 1269.198339][ T8886] [ 1269.200727][ T8886] ====================================================== [ 1269.207845][ T8886] WARNING: possible circular locking dependency detected [ 1269.214944][ T8886] syzkaller #0 Not tainted [ 1269.219488][ T8886] ------------------------------------------------------ [ 1269.226801][ T8886] syz.3.8805/8886 is trying to acquire lock: [ 1269.232860][ T8886] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 1269.242434][ T8886] [ 1269.242434][ T8886] but task is already holding lock: [ 1269.249900][ T8886] ffff888025929370 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1269.260297][ T8886] [ 1269.260297][ T8886] which lock already depends on the new lock. [ 1269.260297][ T8886] [ 1269.270810][ T8886] [ 1269.270810][ T8886] the existing dependency chain (in reverse order) is: [ 1269.280096][ T8886] [ 1269.280096][ T8886] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1269.288714][ T8886] blk_alloc_queue+0x52f/0x610 [ 1269.294006][ T8886] __blk_mq_alloc_disk+0x197/0x390 [ 1269.299644][ T8886] nbd_dev_add+0x499/0xb50 [ 1269.305028][ T8886] nbd_init+0x168/0x1f0 [ 1269.309809][ T8886] do_one_initcall+0x250/0x840 [ 1269.315189][ T8886] do_initcall_level+0x104/0x190 [ 1269.320827][ T8886] do_initcalls+0x59/0xa0 [ 1269.325683][ T8886] kernel_init_freeable+0x2a6/0x3d0 [ 1269.331406][ T8886] kernel_init+0x1d/0x1d0 [ 1269.336256][ T8886] ret_from_fork+0x51b/0xa40 [ 1269.341378][ T8886] ret_from_fork_asm+0x1a/0x30 [ 1269.346667][ T8886] [ 1269.346667][ T8886] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1269.353884][ T8886] fs_reclaim_acquire+0x71/0x100 [ 1269.359518][ T8886] prepare_alloc_pages+0x152/0x650 [ 1269.365248][ T8886] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1269.371599][ T8886] __alloc_pages_noprof+0xa/0x30 [ 1269.377320][ T8886] pcpu_populate_chunk+0x182/0xb30 [ 1269.383155][ T8886] pcpu_alloc_noprof+0xc4a/0x18d0 [ 1269.388713][ T8886] xt_percpu_counter_alloc+0x161/0x220 [ 1269.394875][ T8886] translate_table+0x134a/0x2110 [ 1269.400336][ T8886] ipt_register_table+0x11b/0x7f0 [ 1269.405887][ T8886] iptable_raw_table_init+0x54/0x80 [ 1269.411784][ T8886] xt_find_table_lock+0x30c/0x3e0 [ 1269.417340][ T8886] xt_request_find_table_lock+0x26/0x100 [ 1269.423505][ T8886] do_ipt_get_ctl+0x716/0x1240 [ 1269.428876][ T8886] nf_getsockopt+0x26e/0x290 [ 1269.433994][ T8886] ip_getsockopt+0x19e/0x230 [ 1269.439363][ T8886] do_sock_getsockopt+0x2d3/0x3f0 [ 1269.444911][ T8886] __x64_sys_getsockopt+0x1a4/0x240 [ 1269.450645][ T8886] do_syscall_64+0xe2/0xf80 [ 1269.455851][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.462617][ T8886] [ 1269.462617][ T8886] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1269.470438][ T8886] __lock_acquire+0x15a5/0x2cf0 [ 1269.475842][ T8886] lock_acquire+0x106/0x330 [ 1269.480986][ T8886] __mutex_lock+0x19f/0x1300 [ 1269.486195][ T8886] pcpu_alloc_noprof+0x272/0x18d0 [ 1269.491829][ T8886] sbitmap_init_node+0x1e1/0x640 [ 1269.497294][ T8886] sbitmap_queue_init_node+0x3e/0x4d0 [ 1269.503191][ T8886] blk_mq_init_tags+0x15c/0x2d0 [ 1269.508655][ T8886] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1269.514644][ T8886] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1269.521066][ T8886] nbd_start_device+0x17f/0xb10 [ 1269.526461][ T8886] nbd_genl_connect+0x165b/0x1cf0 [ 1269.532023][ T8886] genl_family_rcv_msg_doit+0x22a/0x330 [ 1269.538121][ T8886] genl_rcv_msg+0x61c/0x7a0 [ 1269.543263][ T8886] netlink_rcv_skb+0x232/0x4b0 [ 1269.548553][ T8886] genl_rcv+0x28/0x40 [ 1269.553153][ T8886] netlink_unicast+0x80f/0x9b0 [ 1269.558546][ T8886] netlink_sendmsg+0x813/0xb40 [ 1269.563848][ T8886] ____sys_sendmsg+0xa68/0xad0 [ 1269.569309][ T8886] ___sys_sendmsg+0x2a5/0x360 [ 1269.575035][ T8886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1269.581015][ T8886] do_syscall_64+0xe2/0xf80 [ 1269.586131][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.592558][ T8886] [ 1269.592558][ T8886] other info that might help us debug this: [ 1269.592558][ T8886] [ 1269.602963][ T8886] Chain exists of: [ 1269.602963][ T8886] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 1269.602963][ T8886] [ 1269.616620][ T8886] Possible unsafe locking scenario: [ 1269.616620][ T8886] [ 1269.624069][ T8886] CPU0 CPU1 [ 1269.629441][ T8886] ---- ---- [ 1269.634802][ T8886] lock(&q->q_usage_counter(io)#53); [ 1269.640368][ T8886] lock(fs_reclaim); [ 1269.647058][ T8886] lock(&q->q_usage_counter(io)#53); [ 1269.655214][ T8886] lock(pcpu_alloc_mutex); [ 1269.659721][ T8886] [ 1269.659721][ T8886] *** DEADLOCK *** [ 1269.659721][ T8886] [ 1269.668224][ T8886] 6 locks held by syz.3.8805/8886: [ 1269.673348][ T8886] #0: ffffffff8fa1a470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1269.681987][ T8886] #1: ffffffff8fa1a288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1269.691142][ T8886] #2: ffff88802594c1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1269.702549][ T8886] #3: ffff88802594c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1269.713516][ T8886] #4: ffff888025929370 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1269.724251][ T8886] #5: ffff8880259293a8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 1269.735270][ T8886] [ 1269.735270][ T8886] stack backtrace: [ 1269.741174][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.3.8805 Not tainted syzkaller #0 PREEMPT(full) [ 1269.741196][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.741206][ T8886] Call Trace: [ 1269.741214][ T8886] [ 1269.741221][ T8886] dump_stack_lvl+0xe8/0x150 [ 1269.741245][ T8886] print_circular_bug+0x2e1/0x300 [ 1269.741264][ T8886] check_noncircular+0x12e/0x150 [ 1269.741281][ T8886] __lock_acquire+0x15a5/0x2cf0 [ 1269.741307][ T8886] ? kernel_text_address+0xa5/0xe0 [ 1269.741326][ T8886] ? pcpu_alloc_noprof+0x272/0x18d0 [ 1269.741340][ T8886] lock_acquire+0x106/0x330 [ 1269.741359][ T8886] ? pcpu_alloc_noprof+0x272/0x18d0 [ 1269.741377][ T8886] __mutex_lock+0x19f/0x1300 [ 1269.741396][ T8886] ? pcpu_alloc_noprof+0x272/0x18d0 [ 1269.741410][ T8886] ? stack_depot_save_flags+0x3f3/0x810 [ 1269.741430][ T8886] ? kasan_save_track+0x4f/0x80 [ 1269.741443][ T8886] ? kasan_save_track+0x3e/0x80 [ 1269.741456][ T8886] ? pcpu_alloc_noprof+0x272/0x18d0 [ 1269.741469][ T8886] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 1269.741484][ T8886] ? blk_mq_init_tags+0x83/0x2d0 [ 1269.741510][ T8886] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1269.741524][ T8886] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1269.741542][ T8886] ? __pfx___mutex_lock+0x10/0x10 [ 1269.741559][ T8886] ? genl_rcv+0x28/0x40 [ 1269.741579][ T8886] ? ____sys_sendmsg+0xa68/0xad0 [ 1269.741598][ T8886] ? ___sys_sendmsg+0x2a5/0x360 [ 1269.741621][ T8886] pcpu_alloc_noprof+0x272/0x18d0 [ 1269.741641][ T8886] sbitmap_init_node+0x1e1/0x640 [ 1269.741664][ T8886] sbitmap_queue_init_node+0x3e/0x4d0 [ 1269.741687][ T8886] blk_mq_init_tags+0x15c/0x2d0 [ 1269.741707][ T8886] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1269.741723][ T8886] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.741741][ T8886] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 1269.741758][ T8886] ? kfree+0x1be/0x650 [ 1269.741776][ T8886] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 1269.741794][ T8886] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 1269.741817][ T8886] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1269.741837][ T8886] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1269.741858][ T8886] nbd_start_device+0x17f/0xb10 [ 1269.741882][ T8886] ? device_create_file+0xf4/0x1b0 [ 1269.741903][ T8886] nbd_genl_connect+0x165b/0x1cf0 [ 1269.741926][ T8886] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1269.741949][ T8886] ? rcu_is_watching+0x15/0xb0 [ 1269.741965][ T8886] ? __nla_parse+0x40/0x60 [ 1269.741985][ T8886] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1269.742008][ T8886] genl_family_rcv_msg_doit+0x22a/0x330 [ 1269.742031][ T8886] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1269.742055][ T8886] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.742077][ T8886] genl_rcv_msg+0x61c/0x7a0 [ 1269.742099][ T8886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.742118][ T8886] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1269.742141][ T8886] netlink_rcv_skb+0x232/0x4b0 [ 1269.742158][ T8886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1269.742178][ T8886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.742192][ T8886] ? genl_rcv+0x19/0x40 [ 1269.742216][ T8886] ? down_read+0x272/0x2e0 [ 1269.742234][ T8886] ? genl_rcv+0xd/0x40 [ 1269.742254][ T8886] genl_rcv+0x28/0x40 [ 1269.742272][ T8886] netlink_unicast+0x80f/0x9b0 [ 1269.742289][ T8886] ? __pfx_netlink_unicast+0x10/0x10 [ 1269.742304][ T8886] ? netlink_sendmsg+0x650/0xb40 [ 1269.742319][ T8886] ? skb_put+0x11b/0x210 [ 1269.742338][ T8886] netlink_sendmsg+0x813/0xb40 [ 1269.742358][ T8886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.742375][ T8886] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.742393][ T8886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.742409][ T8886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.742425][ T8886] ____sys_sendmsg+0xa68/0xad0 [ 1269.742445][ T8886] ? __might_fault+0xaf/0x130 [ 1269.742467][ T8886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.742489][ T8886] ? import_iovec+0x73/0xa0 [ 1269.742517][ T8886] ___sys_sendmsg+0x2a5/0x360 [ 1269.742535][ T8886] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.742555][ T8886] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.742576][ T8886] ? futex_wait+0x29a/0x380 [ 1269.742599][ T8886] ? __fget_files+0x2a/0x420 [ 1269.742615][ T8886] ? __fget_files+0x3a0/0x420 [ 1269.742633][ T8886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1269.742654][ T8886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.742676][ T8886] ? rcu_is_watching+0x15/0xb0 [ 1269.742694][ T8886] do_syscall_64+0xe2/0xf80 [ 1269.742712][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.742726][ T8886] ? trace_irq_disable+0x37/0x100 [ 1269.742741][ T8886] ? clear_bhb_loop+0x60/0xb0 [ 1269.742757][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.742772][ T8886] RIP: 0033:0x7fe75139aeb9 [ 1269.742786][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.742799][ T8886] RSP: 002b:00007fe7522b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.742817][ T8886] RAX: ffffffffffffffda RBX: 00007fe751615fa0 RCX: 00007fe75139aeb9 [ 1269.742829][ T8886] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 1269.742839][ T8886] RBP: 00007fe751408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1269.742848][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.742858][ T8886] R13: 00007fe751616038 R14: 00007fe751615fa0 R15: 00007fff0c45b1b8 [ 1269.742874][ T8886] [ 1270.298196][ T5364] block nbd4: Receive control failed (result -32) [ 1270.298196][ T5835] block nbd4: Receive control failed (result -32) [ 1270.337066][ T8880] tipc: Enabling of bearer rejected, failed to enable media [ 1273.416315][ T6775] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 725 sec [ 1277.812648][ T9717] lec:lec_start_xmit: lec0:No lecd attached