last executing test programs: 4.678387282s ago: executing program 0 (id=5373): socket$inet6(0xa, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002280)=ANY=[], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001fc0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}}, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x80000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x31}}}}}) 4.088909831s ago: executing program 2 (id=5379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="ba37e0f247729982e9489b1b23282ce7584612ad929793fe2f0c8c3932d1e15c2a34bcdb8f60710b2db23cdccd1fbe6e4841c82c20b35a46e02b524168f704b52f57e74f396b79126532a2901c79fcafbf7abe1ef70cca7b157df5019a27e8f0aa98715b70f2b521b2a42a3279db2a399fe1a26c661a96c6ed36c122140fff28747e22a2316a9c816c449d00e4dd0ffdf3fed7959108d3d2cbae00fe4a4173ae56b0a4ec2455deecac9af3b2a81225"], 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 3.99133258s ago: executing program 4 (id=5381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x78, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xea00, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x16000000, 0xf}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000881}, 0x0) 3.857717618s ago: executing program 2 (id=5383): socket(0x27, 0x1, 0xffff8001) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r0, &(0x7f0000000080)=""/38, 0x26) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'wlan1\x00', 0x2000}) 3.727512893s ago: executing program 3 (id=5384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xab, 0xb3, &(0x7f0000000040)="43c5c0c66d57e9a5c41a5c38f2855523b7220376d7f4b2a83d980e6367b221ec7f3f004d362031416494b135811390a2f2c8bdc717d520602e0bbf952b32c025a9ef092a1a35ccd56ac5006f1fe53db4690acbf9a73c74da348b53fd152d0e3cc51ccaadd075ab1c45b93400ce6505acea0febcc26331ef62580de94c84477010fe28f00865240eee80125088e8b6e952f656e3ad013e6b9a0de98fe46a9140f938512c953e2e6b62949d8", &(0x7f0000000100)=""/179, 0xd, 0x0, 0xb8, 0xb0, &(0x7f0000000380)="3b19f7b8a5da60ca76f45a171e436cb1eea859c0553d7a31083e4b5f0c89ec9d20835b6c9f4597b24bfda2398e170636e6fbe775f08c14344bd549c7c17db55076d32dececbe92244fdc34e745242107529357cdb61d0f4c3397b5783d8ed99f8610e08d07d48a35abba39bbf27c04c70f0cf85784f9b9da9005f8c2a3a68ed6932fc92bb9a1cfd810d669b89c6be52591451d7317512d0c64977f2f5ff6f16303938d1206bfd098d30362122346d85fc8fbd2dbc7ab75e0", &(0x7f0000000440)="122851fc96c1527f00567802b61cfcfb30803fa71e35e086176425ff799922ed2844d36b1d877e08eeb01a1cc7bbd09585461bba149de2d061ff554933d039940b3fa1675de47df788f1fdc38b296bc2327b9229720abe2189fb63d9c9ef7b4536ad1f60405301e3b2d904b138871fb611ea45024aea727544d7589f074f84c557332ceccffb683eb1e1c8773e9e3282b94acea9f9355cde52cfcce87932c70656b9387780d03e911e931d5f54426651", 0x4, 0x0, 0x46a}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) 3.710371024s ago: executing program 4 (id=5385): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket(0x33, 0x80000, 0x4b) sendmmsg$inet(r2, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000640)=@assoc_value={0x0, 0x1000}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e2b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e2b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000780)=""/15, 0xf}, {&(0x7f0000000700)=""/83, 0x53}], 0x2}, 0x20) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r10, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) (async) ioctl$PPPIOCSACTIVE(r10, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000903000000000000000000000902"], 0x0, 0x3e}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000903000000000000000000000902"], 0x0, 0x3e}, 0x28) socket$netlink(0x10, 0x3, 0xe) 3.638432071s ago: executing program 2 (id=5386): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xb, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x3, 0x4}, {0xe, 0x2}, {0x10, 0x5}, {0xa, 0x5}]}]}}, &(0x7f0000000f80)=""/4096, 0x66, 0x1000, 0x1, 0x80}, 0x28) 3.575001439s ago: executing program 0 (id=5387): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x48) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="260000000080000019000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r3}, 0xc) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="89ddee0c7cdab9b4b07380c988cafbe863cac505237fde57ed2720ed630e42937d31247dff82f1efe6c6a605bbc326bd66e2095a978733e27d418b", 0x3b}], 0x1) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) writev(r7, &(0x7f0000000000), 0x74) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) r9 = socket$inet6(0xa, 0x2, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003704010010000000000000000000", @ANYRES32=r11, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @local}}}], 0x20}}], 0x2, 0x4880) 3.474900451s ago: executing program 2 (id=5388): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0, 0x27}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000400)) 3.414282559s ago: executing program 4 (id=5389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="190000001900010028bd7000030000000a"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000", @ANYRES16=r5, @ANYBLOB="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"/406], 0x194}, 0x1, 0x0, 0x0, 0x20004810}, 0x44020) 3.347716238s ago: executing program 2 (id=5390): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x2bc, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x298, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x1ab, 0x1, {{}, [@loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2, @remote, @loopback, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @remote, @empty, @loopback, @loopback, @loopback, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}]}, 0x2bc}}, 0x0) 3.158813771s ago: executing program 2 (id=5391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f00000001c0)=0x10) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x300000000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) socket$kcm(0x29, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x8}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x11, 0x3, 0x21, 0x0, @broadcast, @broadcast}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0x4}}}}}, 0x6a) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000280)=0x2c) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 3.141897592s ago: executing program 4 (id=5392): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.706214553s ago: executing program 3 (id=5393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) shutdown(r0, 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7b}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000540)=r2, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r0, &(0x7f0000005340)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x1, 0x4044881) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x6, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff7, 0xd}}]}}]}, 0x38}}, 0x20004801) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@private1, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, 0x1, 0x6d, 0x81, 0x500, 0x9, 0x200, r6}) 2.689491708s ago: executing program 3 (id=5394): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x24008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.6175427s ago: executing program 3 (id=5395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c000180140003"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01000c0007f06f7825087d0d921c0000040000000300"/40], 0x0, 0x28, 0x0, 0x1, 0xffffffff}, 0x28) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) ioctl$FITHAW(r1, 0xc0045878) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000203010a0000000000000000020000002a1d7395e91166417541fb2557bb527448bdbd3728248bed19d51f6eb9a755cceb86ccf561b1b504349b6473bfe18cdbbb0e1e91560c36d0d743e1a75be60f9bd366941e8bd3e436f14b249b5cd7ec1647683279ddd6a50a9c51048b23e858d5a281545d87511c5fd1828cb2b3adfd5d4cc5d5a4b21b26f68267dc99a80c9343037cc3bf024d2401cd0830a64f18"], 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40000c0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f00000002c0)={0x0, 0x2, 0xefff, 0xfa64}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xa0a, 0x458}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtclass={0x40, 0x28, 0x10, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x7, 0xe}, {0xfff1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x40}}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r11, @ANYBLOB="011802000311000028001280090001007665746800000000180002801400010000000000", @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) sendto$inet6(r3, &(0x7f0000000640)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 1.297792689s ago: executing program 1 (id=5396): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) unshare(0x8040480) (async, rerun: 64) unshare(0xe040400) (rerun: 64) 1.291332794s ago: executing program 1 (id=5397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000f80000000000000000ffffac1414bb14000700ffd535"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.017314422s ago: executing program 0 (id=5398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000003292302a1ae167765a4d82e2798c5f045ee7db33aef44f23b9008320cb145a7201e0b1b623cd03c7114b338818d03a9f0dfa2d0ca0c28d56fd628979a7a57174315412c0448fc2d7344b1a171e71cc", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00', @ANYRES32], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x500) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000000000000000000000000000000000000000059d8acff05720c97e79dd8aa823ec783a994090b3c59251fb7838590baf2f248cf33c7fe246e716555cce70e072f250e08a20176730a05ebd864a2e06e76396e540bb7493b8a7dd307d4bd4108f2182c3c161df79f8cf698f1dfd3abc7a13211b08279"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000000000000000000000000000000000000000059d8acff05720c97e79dd8aa823ec783a994090b3c59251fb7838590baf2f248cf33c7fe246e716555cce70e072f250e08a20176730a05ebd864a2e06e76396e540bb7493b8a7dd307d4bd4108f2182c3c161df79f8cf698f1dfd3abc7a13211b08279"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x12}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x10) epoll_create1(0x0) (async) epoll_create1(0x0) r11 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0x400}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'bridge0\x00', 0x400}) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000140)=0x90) (async) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r12, &(0x7f0000000380)=ANY=[@ANYRES16=r12, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c47315734d"], 0xfdef) (async) write$tun(r12, &(0x7f0000000380)=ANY=[@ANYRES16=r12, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c47315734d"], 0xfdef) close(r11) socket$nl_generic(0x10, 0x3, 0x10) 893.430942ms ago: executing program 4 (id=5399): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000017000000060000000300000000010000", @ANYRES32, @ANYBLOB="0000000000cf2939a3000000351a9ae05ab794cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000600", @ANYRES32=r1, @ANYBLOB="0001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000dc53213bde1e49973f235c546185b5e046618c1d571f8fb93d6a4593cc22fc662fa3aa73a612b11a3baa7445fa99a02ccc40e0a5cf9c57be223b6"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400d4bdaeabf4f9c41e0000", @ANYRES32=r2, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, r4}, 0x38) (async) sendmsg$nl_generic(r0, 0x0, 0xc000) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100104}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x9, {{0x19, 0x4, 0x2, 0x2, 0x64, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@generic={0x94, 0x12, "f64711795df66266bdc7bf7b264bba9f"}, @lsrr={0x83, 0xf, 0x75, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x3, [0xfffffff7]}, @end, @generic={0x8, 0xf, "b2a5a006598ad0de10c2c27890"}, @timestamp={0x44, 0x14, 0x9f, 0x0, 0x0, [0x90, 0x1ff, 0x4, 0x0]}, @noop]}}}}}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000740)=0x17f, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r8 = socket$inet6(0xa, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@c\x00'/17, @ANYRES32=0x0, @ANYBLOB="0012000000000000140012800b0001006272696467650000040002800a000100ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0xfffffffffffffffd, 0x4}, 0x6, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (async) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x83, 0x20000a32, 0x401000, 0x5c, 0x1, 0x4, 0x0, 0xb000000}}) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="0003000000e6ba000000000000005cad03af38791bd3d218ce70fea7b0e1ffb3414b62ba99d7ea6fa27df6d1283aa364c3826841ccd5baa2ddfbdbd7fd73b42f625e63d7ce13e9458b719919246342ad833d890b0e4d6acb1c8872ae9dd14d7ffad525bc02f36c7d13fffa8a6a32fda4090c2761ca7ecd5308db83e007654cea522016782b8491788fd40671becda067dee25a010fae44dbd8c2daf5a5df7e6f481a1623406ded255285a0256950ca6e37bc4cfd032b41165029b8099c1073dec5c09eae6d7bfa02838d7b4004a3839b565978ac876bd86fcbe3ce6a9b60a5b691fc56c8f4e62563923d5e8603abda29f6ad8f3b11ced61633", @ANYRES16=r10, @ANYBLOB="00032dbd7000fddbdf25010000002400038008000500ac141439060007004e230000050008006d000000060007004e2000000800040003000000280002800800040004000000140001000a010101000000000000000000000000080007001c0000005c0002800800030004000000080009000300000014000100ff02000000000000000000000000000114000100ffffffff00000000000000000000000008000600090000000800090007000000080006000100008008000900ff0f00000800060002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r5], &(0x7f0000000380)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r12, r7, 0x25, 0x0, @void}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) 892.255199ms ago: executing program 3 (id=5400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x2000408d}, 0x404c014) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1, 0x8}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0xfd, 0x81, 0xfffff031}]}, 0x10) close(0x3) 890.263802ms ago: executing program 1 (id=5401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r0) 806.077973ms ago: executing program 1 (id=5402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd30, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4800) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 563.107936ms ago: executing program 4 (id=5403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40040) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRESHEX=r3, @ANYBLOB="4b0c6ebd38a219ff671182f9"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2517000000440006803c00040067636d28616573290000000000000000000000000000000000000000000000001400000096557917d5d82cebae9347436de1ace2fe62c07904000300"], 0x58}}, 0x4004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, 0x0, 0x0) 359.219792ms ago: executing program 0 (id=5404): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={&(0x7f00000003c0)='./file0\x00', 0x1}, 0x18) (async, rerun: 64) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000400)) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async, rerun: 32) close(0x3) (async, rerun: 32) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000200)={0xf, {{0x2, 0x4e21, @multicast2}}}, 0x88) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x0, 0x32, 0x800, 0x70bd25, 0x25dfdbff}, 0x8f}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x10, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x0, 0xb, 0x0, {0x9, 0x0, 0x7f, 0x3, 0x7}, {0x1, 0x2, 0x5, 0x8, 0x26, 0x5}, 0x1, 0x5, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x25, 0x5, @val=@perf_event={0xffffffffffffffff}}, 0x18) 264.47698ms ago: executing program 1 (id=5405): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001b1401"], 0x18}, 0x1, 0x0, 0x0, 0x8850}, 0x400c800) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x128, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800) 263.355378ms ago: executing program 0 (id=5406): listen(0xffffffffffffffff, 0x400004) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000200)=0x40000002, 0x4) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 262.653617ms ago: executing program 3 (id=5407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x4183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES64=r2, @ANYRES64=r1], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) 162.926432ms ago: executing program 1 (id=5408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2a0400, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000ffffffff7000eab5e3812b0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac14140006000e0040000000"], 0x40}}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0xffffffffffffffff, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) (async, rerun: 64) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x2, 0x0, {0xa, 0x4e23, 0x1ff, @mcast2, 0x2}}}, 0x32) (rerun: 64) 0s ago: executing program 0 (id=5409): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0041001ba0c65c46d573696d0000000f00a84c00657464000073696d3000b5"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0041001ba0c65c46d573696d0000000f00a84c00657464000073696d3000b5"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r7, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{r7, 0x404}, {r0, 0x48}, {r6, 0x808}, {r1, 0x10}, {0xffffffffffffffff, 0x20}, {r1, 0x224}], 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): o 1000 [ 500.610981][T21563] lo speed is unknown, defaulting to 1000 [ 500.639514][T21563] lo speed is unknown, defaulting to 1000 [ 500.866404][T21597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3883'. [ 500.985527][T21461] lo speed is unknown, defaulting to 1000 [ 501.072631][T21578] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.090005][T21578] lo speed is unknown, defaulting to 1000 [ 501.181551][ T8291] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.197977][ T8291] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.199094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 501.214942][ C0] lec:lec_tx_timeout: lec0 [ 501.220757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.231490][ T8291] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.266514][T21578] lo speed is unknown, defaulting to 1000 [ 501.272747][ T8291] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.379078][ T5141] Bluetooth: hci1: command 0x0405 tx timeout [ 501.475418][T21461] lo speed is unknown, defaulting to 1000 [ 501.554076][T21606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3887'. [ 501.584849][T21606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3887'. [ 501.715025][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 501.715514][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.732126][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 501.762954][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 501.816781][T21563] lo speed is unknown, defaulting to 1000 [ 502.059558][T21578] lo speed is unknown, defaulting to 1000 [ 502.296926][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 502.315295][T21629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3894'. [ 502.529006][T21637] netlink: 'syz.2.3897': attribute type 1 has an invalid length. [ 502.563298][T21461] lo speed is unknown, defaulting to 1000 [ 502.644370][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3898'. [ 502.658469][T21639] syzkaller0: entered promiscuous mode [ 502.663991][T21639] syzkaller0: entered allmulticast mode [ 502.684150][T21644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3899'. [ 502.753681][T21644] syzkaller1: entered promiscuous mode [ 502.763891][T21644] syzkaller1: entered allmulticast mode [ 503.779651][T18008] Bluetooth: hci4: command 0x0406 tx timeout [ 504.764897][T21697] __nla_validate_parse: 2 callbacks suppressed [ 504.764920][T21697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3914'. [ 504.799112][T21697] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 504.834469][T21697] : renamed from bond_slave_0 [ 504.889553][T21670] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.914821][T21670] lo speed is unknown, defaulting to 1000 [ 504.939910][T21670] lo speed is unknown, defaulting to 1000 [ 504.978006][T21700] macvtap1: entered promiscuous mode [ 504.989246][T21700] macvtap1: entered allmulticast mode [ 505.004289][T21700] veth1_vlan: entered allmulticast mode [ 505.034977][T21702] macvtap2: entered promiscuous mode [ 505.046210][T21702] macvtap2: entered allmulticast mode [ 505.198383][T21706] tipc: Failed to remove unknown binding: 66,0,0/0:3414755897/3414755899 [ 505.219697][T21706] tipc: Failed to remove unknown binding: 66,0,0/0:3414755897/3414755898 [ 505.262112][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3916'. [ 505.410715][T21706] nbd: socks must be embedded in a SOCK_ITEM attr [ 505.535226][T21680] virt_wifi0 speed is unknown, defaulting to 1000 [ 505.550945][ T30] audit: type=1800 audit(1771805612.813:14): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3920" name="memory.events" dev="tmpfs" ino=621 res=0 errno=0 [ 505.590327][T21680] lo speed is unknown, defaulting to 1000 [ 505.607665][ T30] audit: type=1804 audit(1771805612.813:15): pid=21720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3920" name="memory.events" dev="tmpfs" ino=621 res=1 errno=0 [ 505.784952][T21718] udevd[21718]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 505.900631][T21680] lo speed is unknown, defaulting to 1000 [ 505.906827][T21670] lo speed is unknown, defaulting to 1000 [ 505.913419][T21716] virt_wifi0 speed is unknown, defaulting to 1000 [ 506.040703][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3923'. [ 506.059511][T21716] lo speed is unknown, defaulting to 1000 [ 506.062162][T21736] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 506.065915][T21733] netem: unknown loss type 0 [ 506.112248][T21733] netem: change failed [ 506.134105][T21732] netem: unknown loss type 0 [ 506.159689][T21732] netem: change failed [ 506.228523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 506.236736][ C0] lec:lec_tx_timeout: lec0 [ 506.242539][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.401525][T21743] ip6t_srh: unknown srh match flags 4000 [ 506.464081][T21716] lo speed is unknown, defaulting to 1000 [ 506.470716][T21680] lo speed is unknown, defaulting to 1000 [ 506.543671][T21747] netlink: 'syz.0.3926': attribute type 4 has an invalid length. [ 506.711058][T21751] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3927'. [ 506.798683][T21753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3927'. [ 507.085797][T21716] lo speed is unknown, defaulting to 1000 [ 508.685361][T21793] syzkaller0: entered promiscuous mode [ 508.702691][T21793] syzkaller0: entered allmulticast mode [ 509.091705][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 509.121934][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3940'. [ 509.141516][T21821] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 509.161093][ T5954] lo speed is unknown, defaulting to 1000 [ 509.401450][T21833] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 509.419135][T21833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.039907][T21856] netlink: 'syz.3.3952': attribute type 61 has an invalid length. [ 510.053116][T21856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3952'. [ 510.401429][T21851] virt_wifi0 speed is unknown, defaulting to 1000 [ 510.409984][T21851] lo speed is unknown, defaulting to 1000 [ 510.417918][T21851] lo speed is unknown, defaulting to 1000 [ 510.722409][T21873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3956'. [ 510.757466][T21873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 510.821975][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 510.862894][T21851] lo speed is unknown, defaulting to 1000 [ 510.969251][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.081734][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.189193][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.268464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 511.276670][ C0] lec:lec_tx_timeout: lec0 [ 511.282159][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.347054][T21872] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.347717][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.361238][T21872] lo speed is unknown, defaulting to 1000 [ 511.387712][T21872] lo speed is unknown, defaulting to 1000 [ 511.399011][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.488350][T21891] gtp1: entered promiscuous mode [ 511.534290][T21891] IPVS: Unknown mcast interface: vcan0 [ 511.568691][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 511.849492][T21872] lo speed is unknown, defaulting to 1000 [ 511.849522][T21885] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.898459][T21885] lo speed is unknown, defaulting to 1000 [ 511.925372][T21885] lo speed is unknown, defaulting to 1000 [ 511.982979][T21899] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 512.189986][T21904] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 512.554076][T21903] virt_wifi0 speed is unknown, defaulting to 1000 [ 512.565348][T21903] lo speed is unknown, defaulting to 1000 [ 512.566056][T21885] lo speed is unknown, defaulting to 1000 [ 512.618213][T21903] lo speed is unknown, defaulting to 1000 [ 513.245701][T21903] lo speed is unknown, defaulting to 1000 [ 513.361397][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.370789][ T37] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.418869][ T37] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.427154][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.657544][T21922] openvswitch: netlink: Missing key (keys=40, expected=80) [ 515.221479][T21952] __nla_validate_parse: 3 callbacks suppressed [ 515.221496][T21952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3977'. [ 515.320619][T21952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.341446][T21955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'. [ 515.554795][T21959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3980'. [ 515.579859][T21959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3980'. [ 515.817511][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 515.837267][T21975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3984'. [ 515.963834][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 515.970248][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3987'. [ 515.999999][T21986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3987'. [ 516.015751][T21986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3987'. [ 516.185452][T21981] syzkaller1: entered promiscuous mode [ 516.195204][T21981] syzkaller1: entered allmulticast mode [ 516.242797][T21993] netlink: 'syz.1.3989': attribute type 5 has an invalid length. [ 516.298446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 516.306599][ C0] lec:lec_tx_timeout: lec0 [ 516.311842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.325797][T21993] ip6erspan1: entered promiscuous mode [ 516.659304][T22021] can: request_module (can-proto-0) failed. [ 516.802589][T22035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.828699][T14055] lo speed is unknown, defaulting to 1000 [ 516.836491][T14055] sqz0: Port: 1 Link DOWN [ 516.845117][T22035] batadv_slave_0: Caught tx_queue_len zero misconfig [ 516.855762][T14911] lo speed is unknown, defaulting to 1000 [ 517.058133][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 517.062185][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 517.522832][T22068] bridge_slave_1: default FDB implementation only supports local addresses [ 517.713602][T22074] xt_bpf: check failed: parse error [ 517.957126][T22083] netlink: 'syz.4.4013': attribute type 11 has an invalid length. [ 518.156812][T22099] netlink: 'syz.0.4018': attribute type 29 has an invalid length. [ 518.159191][T22098] xt_addrtype: ipv6 does not support BROADCAST matching [ 518.176147][T22099] netlink: 'syz.0.4018': attribute type 29 has an invalid length. [ 518.383206][T22111] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 518.415161][T22111] netlink: 'syz.3.4021': attribute type 2 has an invalid length. [ 518.811099][T22130] netlink: 'syz.0.4029': attribute type 21 has an invalid length. [ 518.825556][T22130] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 518.905819][T22139] macvtap0: entered promiscuous mode [ 519.383697][T22165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.664649][T22174] gre1: entered allmulticast mode [ 519.704889][T22176] pim6reg: entered allmulticast mode [ 520.194103][T22183] virt_wifi0 speed is unknown, defaulting to 1000 [ 520.202093][T22201] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 520.215571][T22183] lo speed is unknown, defaulting to 1000 [ 520.228413][T22201] __nla_validate_parse: 14 callbacks suppressed [ 520.228433][T22201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4044'. [ 520.261908][T22183] lo speed is unknown, defaulting to 1000 [ 520.399510][T22212] xt_TCPMSS: Only works on TCP SYN packets [ 520.676017][T22227] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 520.934739][T22183] lo speed is unknown, defaulting to 1000 [ 521.261165][T22251] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4051'. [ 521.270887][T22251] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4051'. [ 521.320045][T22251] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 521.559911][T22271] netlink: 'syz.0.4054': attribute type 1 has an invalid length. [ 521.575360][T22271] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4054'. [ 521.591668][T22237] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.640620][T22237] lo speed is unknown, defaulting to 1000 [ 521.659260][T22237] lo speed is unknown, defaulting to 1000 [ 521.871814][T22283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 522.102893][T22286] gretap2: entered promiscuous mode [ 522.178138][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.237196][T22237] lo speed is unknown, defaulting to 1000 [ 522.429717][T22305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4064'. [ 522.811752][T22318] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4068'. [ 522.949106][T22333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4073'. [ 523.877487][T22368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4081'. [ 523.898177][T22368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4081'. [ 524.235410][T22327] virt_wifi0 speed is unknown, defaulting to 1000 [ 524.283766][T22327] lo speed is unknown, defaulting to 1000 [ 524.352053][T22327] lo speed is unknown, defaulting to 1000 [ 524.983046][T22327] lo speed is unknown, defaulting to 1000 [ 525.538704][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 525.860589][T22416] virt_wifi0 speed is unknown, defaulting to 1000 [ 525.912299][T22416] lo speed is unknown, defaulting to 1000 [ 525.975208][T22416] lo speed is unknown, defaulting to 1000 [ 526.283241][T22416] lo speed is unknown, defaulting to 1000 [ 526.349476][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4103'. [ 526.657923][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 526.666025][ C1] lec:lec_tx_timeout: lec0 [ 526.672520][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.023567][T22494] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 527.135298][T22501] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4114'. [ 527.166270][T22501] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4114'. [ 527.239064][T22494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.237384][T22502] bond5: (slave gretap2): making interface the new active one [ 529.246937][T22502] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 529.260412][T22504] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4115'. [ 529.382757][ T5141] Bluetooth: hci1: command 0x0405 tx timeout [ 529.416433][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 529.618332][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4118'. [ 529.810221][T22532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 529.995966][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4124'. [ 530.018927][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 530.036602][T22538] netlink: 'syz.1.4124': attribute type 11 has an invalid length. [ 530.036873][T22536] netlink: 'syz.2.4123': attribute type 1 has an invalid length. [ 530.081368][ T7317] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.095611][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4124'. [ 530.105280][ T7317] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.115531][ T7317] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.140303][ T7317] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.157033][T22538] netlink: 'syz.1.4124': attribute type 11 has an invalid length. [ 530.202171][T22536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.262646][T22543] tipc: Started in network mode [ 530.273540][T22543] tipc: Node identity b21a97c0aa51, cluster identity 4711 [ 530.281510][T22543] tipc: Enabled bearer , priority 0 [ 530.289067][T22511] virt_wifi0 speed is unknown, defaulting to 1000 [ 530.320185][T22543] syzkaller0: entered promiscuous mode [ 530.325740][T22543] syzkaller0: entered allmulticast mode [ 530.389186][T22507] virt_wifi0 speed is unknown, defaulting to 1000 [ 530.399980][T22231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.406318][T22511] lo speed is unknown, defaulting to 1000 [ 530.412145][T22231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.432261][T22511] lo speed is unknown, defaulting to 1000 [ 530.452326][T22507] lo speed is unknown, defaulting to 1000 [ 530.465516][T22543] tipc: Resetting bearer [ 530.498018][T22542] tipc: Resetting bearer [ 530.544091][T22542] tipc: Disabling bearer [ 530.772577][T22550] syzkaller0: entered promiscuous mode [ 530.778754][T22550] syzkaller0: entered allmulticast mode [ 532.429024][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 532.437250][ C1] lec:lec_tx_timeout: lec0 [ 532.606073][T22511] lo speed is unknown, defaulting to 1000 [ 532.615927][T22507] lo speed is unknown, defaulting to 1000 [ 533.030519][T22574] syzkaller0: entered promiscuous mode [ 533.036143][T22574] syzkaller0: entered allmulticast mode [ 533.128340][T22557] virt_wifi0 speed is unknown, defaulting to 1000 [ 533.141091][T22557] lo speed is unknown, defaulting to 1000 [ 533.416753][T22507] lo speed is unknown, defaulting to 1000 [ 533.428673][T22557] lo speed is unknown, defaulting to 1000 [ 533.623975][T22586] sctp: [Deprecated]: syz.2.4138 (pid 22586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.623975][T22586] Use struct sctp_sack_info instead [ 533.794787][T22591] __nla_validate_parse: 1 callbacks suppressed [ 533.794807][T22591] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4139'. [ 534.069885][T22557] lo speed is unknown, defaulting to 1000 [ 534.102994][T22596] netlink: 'syz.2.4141': attribute type 10 has an invalid length. [ 534.201659][T22596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 534.429205][T22602] veth0: entered promiscuous mode [ 534.470195][T22601] bond0: entered promiscuous mode [ 534.475289][T22601] bond_slave_0: entered promiscuous mode [ 534.481833][T22601] bond_slave_1: entered promiscuous mode [ 534.487686][T22601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 534.779596][T22600] bond0: left promiscuous mode [ 534.786343][T22600] bond_slave_0: left promiscuous mode [ 534.812829][T22600] bond_slave_1: left promiscuous mode [ 534.820570][T22600] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 534.831482][T22600] veth0: left promiscuous mode [ 535.026532][T22610] team1: left promiscuous mode [ 535.037587][T22610] team1: left allmulticast mode [ 535.048343][T22610] team2: left promiscuous mode [ 535.058964][T22610] team2: left allmulticast mode [ 535.064488][T22610] gretap1: left promiscuous mode [ 535.071963][T22610] bridge2: left promiscuous mode [ 535.113474][T22610] bridge3: left promiscuous mode [ 535.156043][T22610] geneve2: left allmulticast mode [ 535.626450][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4149'. [ 535.863796][T22632] bridge_slave_1 (unregistering): left allmulticast mode [ 535.876511][T22632] bridge_slave_1 (unregistering): left promiscuous mode [ 535.889256][T22632] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.018157][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 536.165452][T22641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4152'. [ 536.505161][T22659] netlink: 'syz.1.4157': attribute type 28 has an invalid length. [ 536.523573][T22659] netlink: 'syz.1.4157': attribute type 3 has an invalid length. [ 536.533262][T22659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4157'. [ 536.974544][T22677] RDS: rds_bind could not find a transport for ::ffff:100.1.0.1, load rds_tcp or rds_rdma? [ 537.000757][T22677] netlink: 'syz.1.4162': attribute type 5 has an invalid length. [ 537.136750][T22691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4164'. [ 537.296281][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 537.314264][T22704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4167'. [ 537.325404][T22681] geneve3: entered promiscuous mode [ 537.341587][T22681] geneve3: entered allmulticast mode [ 537.867125][T22725] geneve2: entered promiscuous mode [ 537.874268][T22725] geneve2: entered allmulticast mode [ 537.915480][T22726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.926396][T22726] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4171'. [ 538.006334][T22729] xt_l2tp: invalid flags combination: 8 [ 538.271111][T22755] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 538.285395][T22757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4181'. [ 538.296851][T22757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4181'. [ 538.665194][T18008] Bluetooth: hci3: command 0x0405 tx timeout [ 538.855946][T22751] virt_wifi0 speed is unknown, defaulting to 1000 [ 538.866132][T22788] tipc: Enabling of bearer rejected, failed to enable media [ 538.879150][T22751] lo speed is unknown, defaulting to 1000 [ 538.886867][T22751] lo speed is unknown, defaulting to 1000 [ 538.897597][T22788] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 539.132224][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'. [ 539.271179][T22811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4197'. [ 539.469519][T22751] lo speed is unknown, defaulting to 1000 [ 539.486716][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'. [ 539.589530][T22818] No such timeout policy "syz1" [ 540.335195][T22855] syzkaller0: entered promiscuous mode [ 540.351994][T22855] syzkaller0: entered allmulticast mode [ 540.360868][T22834] virt_wifi0 speed is unknown, defaulting to 1000 [ 540.371992][T22834] lo speed is unknown, defaulting to 1000 [ 540.391071][T22834] lo speed is unknown, defaulting to 1000 [ 540.731795][T22823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.866694][T22834] lo speed is unknown, defaulting to 1000 [ 541.041577][T22845] siw: device registration error -23 [ 541.057879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 541.066125][ C1] lec:lec_tx_timeout: lec0 [ 541.071449][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.500213][T22901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4216'. [ 541.510262][T22901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4216'. [ 541.667108][T22901] can: request_module (can-proto-0) failed. [ 541.779424][T22844] virt_wifi0 speed is unknown, defaulting to 1000 [ 541.804455][T22844] lo speed is unknown, defaulting to 1000 [ 541.842451][T22844] lo speed is unknown, defaulting to 1000 [ 542.190170][T22929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4220'. [ 542.208479][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 542.236245][T22929] batadv1: entered promiscuous mode [ 542.288465][T22929] batadv1: entered allmulticast mode [ 542.294900][T22929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.533361][T22933] syzkaller0: entered promiscuous mode [ 542.539984][T22933] syzkaller0: entered allmulticast mode [ 542.547331][T22844] lo speed is unknown, defaulting to 1000 [ 544.747996][T18008] Bluetooth: hci3: command 0x0405 tx timeout [ 545.181259][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4226'. [ 545.244118][T22973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.499857][T22988] ip6gre0: left promiscuous mode [ 545.563175][T22988] macvtap0: left promiscuous mode [ 545.580084][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'. [ 545.623471][T22988] batman_adv: batadv0: Interface deactivated: gretap1 [ 545.702460][T22988] bond2: left promiscuous mode [ 545.708420][T22988] bond2: left allmulticast mode [ 545.746058][T22988] veth1_vlan: left allmulticast mode [ 545.756680][T22988] macvtap1: left promiscuous mode [ 545.762594][T22988] macvtap1: left allmulticast mode [ 545.776875][T22988] gretap2: left promiscuous mode [ 545.790191][T23009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4235'. [ 545.800520][T22988] geneve2: left promiscuous mode [ 545.810999][T22988] geneve2: left allmulticast mode [ 545.826810][T22988] batadv1: left promiscuous mode [ 545.845988][T22988] batadv1: left allmulticast mode [ 545.862392][T23014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4236'. [ 545.880250][T22236] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.893210][T22236] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.905188][T22236] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.978015][T22236] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.098435][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 546.106731][ C1] lec:lec_tx_timeout: lec0 [ 546.218208][T23018] batadv0: left promiscuous mode [ 546.231926][T23032] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 546.267593][T23032] openvswitch: netlink: Message has 16 unknown bytes. [ 546.409160][T23038] bond0: (slave bond_slave_1): Releasing backup interface [ 546.881924][T23059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4248'. [ 546.980942][T23059] nbd0: detected capacity change from 0 to 6781890799337535 [ 547.047915][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 547.068728][T22970] block nbd0: Dead connection, failed to find a fallback [ 547.080299][T23072] IPVS: dh: FWM 3 0x00000003 - no destination available [ 547.200769][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4251'. [ 547.328433][T23080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4252'. [ 547.363074][T23085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4254'. [ 547.489008][T23080] vlan4: entered allmulticast mode [ 547.494225][T23080] team0: entered allmulticast mode [ 547.544929][T23080] team_slave_0: entered allmulticast mode [ 547.578909][T23080] team_slave_1: entered allmulticast mode [ 547.805057][T23102] syzkaller1: entered promiscuous mode [ 547.837515][T23102] syzkaller1: entered allmulticast mode [ 548.073404][T23107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4257'. [ 548.454943][T23087] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.486972][T23087] lo speed is unknown, defaulting to 1000 [ 548.536727][T23087] lo speed is unknown, defaulting to 1000 [ 548.955733][T23131] syzkaller0: entered promiscuous mode [ 549.002903][T23131] syzkaller0: entered allmulticast mode [ 549.154124][T23144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.877220][T23147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.138594][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 551.347549][T23087] lo speed is unknown, defaulting to 1000 [ 551.487086][T23169] __nla_validate_parse: 2 callbacks suppressed [ 551.487108][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 551.666984][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4269'. [ 553.395209][T23147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.436646][T23174] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4267'. [ 553.610867][T23147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.822780][T23147] bond0: (slave netdevsim0): Releasing backup interface [ 553.836240][T23147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.864299][T23193] syzkaller1: entered promiscuous mode [ 553.874744][T23203] netlink: 'syz.4.4274': attribute type 10 has an invalid length. [ 553.883233][T23193] syzkaller1: entered allmulticast mode [ 554.163820][T22234] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.285506][T22234] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.318097][T22234] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.422771][ T7317] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.442058][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4278'. [ 554.479564][T23219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4278'. [ 554.705076][T23227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4280'. [ 555.289490][T23209] virt_wifi0 speed is unknown, defaulting to 1000 [ 555.356306][T23209] lo speed is unknown, defaulting to 1000 [ 555.364538][T23209] lo speed is unknown, defaulting to 1000 [ 555.583751][T23254] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 555.954612][T23263] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 556.011485][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4285'. [ 556.107307][T23209] lo speed is unknown, defaulting to 1000 [ 556.147945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 556.156092][ C1] lec:lec_tx_timeout: lec0 [ 556.178060][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.250687][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4287'. [ 556.469605][T23279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.486645][T14911] lo speed is unknown, defaulting to 1000 [ 556.493040][T14911] sqz0: Port: 1 Link ACTIVE [ 556.521197][T14911] lo speed is unknown, defaulting to 1000 [ 556.840422][T23295] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4297'. [ 556.861536][T23295] syzkaller0: entered promiscuous mode [ 556.867244][T23295] syzkaller0: entered allmulticast mode [ 556.914893][T23297] pimreg: entered allmulticast mode [ 557.877473][T23326] bond0: option ad_user_port_key: invalid value (65535) [ 557.885660][T23326] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 557.896915][T23326] bond0 (unregistering): Released all slaves [ 558.075180][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4308'. [ 558.110583][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4309'. [ 558.383936][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 558.450648][T23362] macsec1: entered promiscuous mode [ 558.456247][T23362] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 558.475488][T23360] bridge6: entered promiscuous mode [ 558.481532][T23360] bridge6: entered allmulticast mode [ 558.540801][T23367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.716406][T23374] netlink: 'syz.4.4320': attribute type 4 has an invalid length. [ 558.738237][T23374] netlink: 'syz.4.4320': attribute type 1 has an invalid length. [ 558.746268][T23374] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4320'. [ 559.003578][T23379] tipc: Enabling of bearer rejected, failed to enable media [ 559.023734][T23383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4323'. [ 559.104879][T23388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4325'. [ 559.118995][T23371] virt_wifi0 speed is unknown, defaulting to 1000 [ 559.127377][T23371] lo speed is unknown, defaulting to 1000 [ 559.136614][T23371] lo speed is unknown, defaulting to 1000 [ 559.256286][T23393] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4327'. [ 559.392258][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4330'. [ 559.495790][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 559.505407][T23404] netlink: 'syz.0.4331': attribute type 18 has an invalid length. [ 559.557153][T23406] netlink: 'syz.4.4332': attribute type 2 has an invalid length. [ 559.576251][T23406] netlink: 'syz.4.4332': attribute type 1 has an invalid length. [ 559.616312][T23371] lo speed is unknown, defaulting to 1000 [ 559.811341][T23414] netlink: 'syz.4.4336': attribute type 1 has an invalid length. [ 560.279118][T23431] openvswitch: netlink: Missing key (keys=40, expected=100) [ 560.407150][T23433] netlink: 'syz.0.4341': attribute type 39 has an invalid length. [ 560.863829][T23453] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 561.137302][T23467] tipc: Invalid UDP bearer configuration [ 561.137357][T23467] tipc: Enabling of bearer rejected, failed to enable media [ 561.188199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.196300][ C1] lec:lec_tx_timeout: lec0 [ 561.218962][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.535580][T23475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.561327][T23479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.569703][T23475] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 561.605196][T23481] netlink: 'syz.4.4356': attribute type 32 has an invalid length. [ 561.615060][T23475] bond0: (slave gre0): Error -95 calling set_mac_address [ 561.682059][T23478] tipc: Enabled bearer , priority 0 [ 561.739045][T23482] syzkaller0: entered promiscuous mode [ 561.744586][T23482] syzkaller0: entered allmulticast mode [ 561.812358][T23482] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 562.002457][T23498] tipc: Resetting bearer [ 562.407113][T23476] tipc: Resetting bearer [ 562.521792][T23476] tipc: Disabling bearer [ 562.542319][T23524] __nla_validate_parse: 7 callbacks suppressed [ 562.542341][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4363'. [ 562.561768][T23515] netlink: 'syz.1.4362': attribute type 12 has an invalid length. [ 562.608095][T23515] netlink: 'syz.1.4362': attribute type 29 has an invalid length. [ 562.626650][T23515] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4362'. [ 562.875059][T23533] vlan3: entered promiscuous mode [ 562.929757][T23533] bridge0: entered promiscuous mode [ 563.143063][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.431333][T23562] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 563.716240][T23580] gretap0: left promiscuous mode [ 563.843008][T23580] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.915082][T23580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.978925][T14922] lo speed is unknown, defaulting to 1000 [ 563.989451][T14922] syz0: Port: 1 Link ACTIVE [ 564.003223][T14922] lo speed is unknown, defaulting to 1000 [ 564.246880][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4385'. [ 564.257420][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4386'. [ 564.302349][T23609] bond6: entered promiscuous mode [ 564.307750][T23609] bond6: entered allmulticast mode [ 564.314212][T23609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.465736][T23616] bond10 (unregistering): Released all slaves [ 564.511156][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4391'. [ 564.522101][T23626] validate_nla: 4 callbacks suppressed [ 564.522121][T23626] netlink: 'syz.3.4388': attribute type 29 has an invalid length. [ 564.582879][T23630] netlink: 'syz.3.4388': attribute type 29 has an invalid length. [ 564.640136][T23618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4388'. [ 564.650284][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4388'. [ 564.683335][T23618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4388'. [ 564.712557][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4388'. [ 564.732574][T23618] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4388'. [ 564.755516][T23631] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 565.723307][T23685] netlink: 'syz.4.4404': attribute type 1 has an invalid length. [ 565.750137][T23673] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.772068][T23673] lo speed is unknown, defaulting to 1000 [ 565.789911][T23673] lo speed is unknown, defaulting to 1000 [ 566.186752][T23673] lo speed is unknown, defaulting to 1000 [ 566.227866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 566.235964][ C1] lec:lec_tx_timeout: lec0 [ 566.242054][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.636143][T23727] netlink: 'syz.4.4416': attribute type 7 has an invalid length. [ 566.850149][T23732] netlink: 'syz.4.4417': attribute type 7 has an invalid length. [ 566.877524][T23732] netlink: 'syz.4.4417': attribute type 7 has an invalid length. [ 566.992581][T23735] @0: renamed from dummy0 [ 567.286095][ T7317] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.305692][ T7317] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.335372][ T7317] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.345151][T23757] netlink: 'syz.1.4422': attribute type 10 has an invalid length. [ 567.378078][ T7317] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.547307][T23757] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 568.064023][T23791] __nla_validate_parse: 16 callbacks suppressed [ 568.064043][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4430'. [ 568.190824][T23786] syzkaller0: entered promiscuous mode [ 568.248028][T23786] syzkaller0: entered allmulticast mode [ 569.322868][T23852] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4440'. [ 570.083690][T22236] nci: nci_rx_work: unknown MT 0x1 [ 570.297294][T23904] bond5: option mode: invalid value (254) [ 570.323074][T23904] bond5 (unregistering): Released all slaves [ 570.372471][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 570.494166][T23909] bond5: option broadcast_neighbor: invalid value (30) [ 570.516073][T23909] bond5 (unregistering): Released all slaves [ 570.571371][T23920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4455'. [ 570.703053][T23927] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 570.718950][T23927] netlink: 'syz.0.4458': attribute type 2 has an invalid length. [ 570.728902][T23927] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 570.923973][T23934] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.051210][T23945] netlink: 'syz.1.4463': attribute type 9 has an invalid length. [ 571.072442][T23944] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4461'. [ 571.082717][T23945] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4463'. [ 571.103336][T23938] "syz.2.4461" (23938) uses obsolete ecb(arc4) skcipher [ 571.203197][T23952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 571.253679][T23952] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4465'. [ 571.262874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 571.262909][ C1] lec:lec_tx_timeout: lec0 [ 571.277641][T23952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 571.298417][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.439561][T23963] netlink: 'syz.2.4467': attribute type 1 has an invalid length. [ 571.484237][T23963] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 571.495845][T23963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4467'. [ 571.507193][T23963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.512317][T22236] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 571.638298][T22236] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 572.876082][T23881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.887028][T23899] netlink: 'syz.3.4448': attribute type 1 has an invalid length. [ 573.136841][T23987] SET target dimension over the limit! [ 573.205990][T23999] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 573.235924][T23999] __nla_validate_parse: 1 callbacks suppressed [ 573.235946][T23999] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4478'. [ 573.288945][T23999] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4478'. [ 573.317994][T23999] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 573.335452][T23999] netlink: 634 bytes leftover after parsing attributes in process `syz.2.4478'. [ 573.395827][T24007] macsec2: entered promiscuous mode [ 573.606024][T14053] lo speed is unknown, defaulting to 1000 [ 573.612412][T14911] lo speed is unknown, defaulting to 1000 [ 573.846015][T24039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 573.880111][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 573.891632][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 573.912126][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 573.923231][T24044] netlink: 'syz.0.4490': attribute type 13 has an invalid length. [ 573.958629][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 574.332628][T24058] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 574.334861][ T30] audit: type=1107 audit(1771805681.593:16): pid=24056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 574.353731][T24058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4494'. [ 574.376288][T24058] NCSI netlink: No device for ifindex 0 [ 574.549135][T24068] "syz.1.4495" (24068) uses obsolete ecb(arc4) skcipher [ 574.817300][T24078] bond4: entered promiscuous mode [ 574.868820][T24078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.907699][T14053] IPVS: starting estimator thread 0... [ 575.005937][T24091] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 575.018158][T24089] IPVS: using max 31 ests per chain, 74400 per kthread [ 575.104235][T24091] bond5 (unregistering): Released all slaves [ 575.262434][T24106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4508'. [ 575.421978][T24104] syzkaller0: entered promiscuous mode [ 575.428414][T24104] syzkaller0: entered allmulticast mode [ 577.067900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 577.076112][ C1] lec:lec_tx_timeout: lec0 [ 577.081682][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.183318][T24113] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 577.285951][T24088] virt_wifi0 speed is unknown, defaulting to 1000 [ 577.316492][T24088] lo speed is unknown, defaulting to 1000 [ 577.340431][T24088] lo speed is unknown, defaulting to 1000 [ 577.732430][T24138] bond7: (slave bond_slave_1): Device is not bonding slave [ 577.756036][T24138] bond7: option active_slave: invalid value (bond_slave_1) [ 577.777426][T24138] bond7 (unregistering): Released all slaves [ 577.822458][T24088] lo speed is unknown, defaulting to 1000 [ 578.015204][T24150] syzkaller0: entered promiscuous mode [ 578.022608][T24150] syzkaller0: entered allmulticast mode [ 578.589168][T24176] IPVS: set_ctl: invalid protocol: 54127 172.20.20.187:20000 [ 578.612556][T24176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.748374][T24182] __nla_validate_parse: 5 callbacks suppressed [ 578.748394][T24182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4527'. [ 579.055659][T24190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 579.175317][T24159] virt_wifi0 speed is unknown, defaulting to 1000 [ 579.190387][T24159] lo speed is unknown, defaulting to 1000 [ 579.233583][T24159] lo speed is unknown, defaulting to 1000 [ 579.243662][T24194] : renamed from veth1_to_batadv [ 579.452479][T24199] syzkaller0: entered promiscuous mode [ 579.471113][T24199] syzkaller0: entered allmulticast mode [ 579.735512][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4535'. [ 579.785663][T24204] syzkaller1: entered promiscuous mode [ 579.798694][T24204] syzkaller1: entered allmulticast mode [ 579.821666][T24209] netlink: zone id is out of range [ 579.824376][T24159] lo speed is unknown, defaulting to 1000 [ 579.827337][T24209] netlink: zone id is out of range [ 579.840495][T24209] netlink: zone id is out of range [ 579.851082][T24209] netlink: zone id is out of range [ 579.862980][T24209] netlink: zone id is out of range [ 579.873806][T24209] netlink: zone id is out of range [ 579.882386][T24209] netlink: zone id is out of range [ 579.887707][T24209] netlink: zone id is out of range [ 579.894858][T24209] netlink: zone id is out of range [ 580.153347][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 580.382457][T24221] syzkaller0: entered promiscuous mode [ 580.389998][T24221] syzkaller0: entered allmulticast mode [ 582.107857][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 582.115980][ C1] lec:lec_tx_timeout: lec0 [ 582.802254][T24267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4547'. [ 583.041264][T24280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4551'. [ 583.323654][T24289] : entered promiscuous mode [ 583.332179][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 583.356119][T24287] IPVS: Unknown mcast interface: vcan0 [ 583.383495][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'. [ 583.707655][T24307] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4556'. [ 583.832383][T24313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4557'. [ 584.596344][T24332] sctp: [Deprecated]: syz.1.4564 (pid 24332) Use of int in maxseg socket option. [ 584.596344][T24332] Use struct sctp_assoc_value instead [ 585.003922][T24339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4567'. [ 585.439902][T24353] validate_nla: 1 callbacks suppressed [ 585.439923][T24353] netlink: 'syz.4.4572': attribute type 1 has an invalid length. [ 585.552066][T24353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.596488][T24344] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.609838][T24353] bond5: entered allmulticast mode [ 585.648307][T24361] netlink: 'syz.2.4573': attribute type 1 has an invalid length. [ 585.661414][T24358] bond5: (slave veth3): Enslaving as an active interface with a down link [ 585.671928][T24361] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4573'. [ 585.680131][T24344] lo speed is unknown, defaulting to 1000 [ 585.690022][T24344] lo speed is unknown, defaulting to 1000 [ 585.725502][T24361] bridge0: port 3(batadv1) entered blocking state [ 585.742494][T24361] bridge0: port 3(batadv1) entered disabled state [ 585.758978][T24361] batadv1: entered allmulticast mode [ 585.775971][T24361] batadv1: entered promiscuous mode [ 585.991761][T24376] tipc: Enabled bearer , priority 0 [ 586.008997][T24376] syzkaller0: entered promiscuous mode [ 586.014919][T24376] syzkaller0: entered allmulticast mode [ 586.063946][T24376] tipc: Resetting bearer [ 586.082448][T24376] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4578'. [ 586.084562][T24344] lo speed is unknown, defaulting to 1000 [ 586.109186][T24375] tipc: Resetting bearer [ 586.140356][T24375] tipc: Disabling bearer [ 586.198323][T22234] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 586.208361][T22234] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 586.383419][T24381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4579'. [ 586.418154][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.515942][T24397] netlink: 'syz.3.4584': attribute type 8 has an invalid length. [ 586.525288][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 586.571958][T24397] bond0: entered promiscuous mode [ 586.587318][T24397] bond_slave_0: entered promiscuous mode [ 586.597651][T24397] bond_slave_1: entered promiscuous mode [ 586.620035][T24397] gretap0: entered promiscuous mode [ 586.626679][T24397] hsr1: entered promiscuous mode [ 587.207689][T24412] netlink: 'syz.3.4589': attribute type 2 has an invalid length. [ 587.389203][T24421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4590'. [ 587.730448][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 587.743781][T24433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 587.768981][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 587.873099][T24439] net_ratelimit: 134 callbacks suppressed [ 587.873120][T24439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.981616][T24448] netlink: 'syz.3.4597': attribute type 61 has an invalid length. [ 588.094334][T24453] ..0{X: renamed from gretap0 (while UP) [ 588.121589][T24453] ..0{X: entered allmulticast mode [ 588.144574][T24453] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 588.272367][T24462] netlink: 'syz.3.4600': attribute type 21 has an invalid length. [ 588.863333][T24489] batadv_slave_1: entered promiscuous mode [ 588.882375][T24492] syzkaller0: entered promiscuous mode [ 588.900502][T24492] syzkaller0: entered allmulticast mode [ 588.922095][T24489] batadv_slave_1: left promiscuous mode [ 588.957316][T24492] macsec2: entered promiscuous mode [ 589.021868][T24505] __nla_validate_parse: 7 callbacks suppressed [ 589.021889][T24505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4613'. [ 589.062251][T24505] netlink: 'syz.2.4613': attribute type 1 has an invalid length. [ 589.749471][T24545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4626'. [ 589.845458][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4627'. [ 589.927691][T24551] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4628'. [ 589.955306][T24548] : entered promiscuous mode [ 589.963262][T24519] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.010868][T24519] lo speed is unknown, defaulting to 1000 [ 590.023435][T24519] lo speed is unknown, defaulting to 1000 [ 590.449300][T24583] IPVS: stopping backup sync thread 18651 ... [ 590.544815][T24583] netlink: 'syz.1.4635': attribute type 23 has an invalid length. [ 590.628928][T24519] lo speed is unknown, defaulting to 1000 [ 590.671702][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4638'. [ 590.682900][T24593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4639'. [ 590.702400][T24591] 8021q: VLANs not supported on vxcan0 [ 590.844730][T24599] netlink: 'syz.2.4640': attribute type 39 has an invalid length. [ 590.975205][T24575] rdma_rxe: rxe_newlink: failed to add lo [ 591.001329][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 591.073273][T24607] xt_HMARK: spi-set and port-set can't be combined [ 591.150500][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 591.189680][T24612] netlink: 'syz.4.4645': attribute type 2 has an invalid length. [ 591.227307][T24613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.267766][T24610] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.280959][T24610] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.305855][T24618] netlink: 'syz.2.4644': attribute type 16 has an invalid length. [ 591.320035][T24618] netlink: 'syz.2.4644': attribute type 17 has an invalid length. [ 591.446160][T24618] ..0{X: left allmulticast mode [ 591.459777][T22234] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.480273][T24618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.506501][T22236] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.528989][T22234] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.607982][T22234] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.648407][T22231] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.668444][T22236] bond10: (slave ip6gretap2): link status up again after 0 ms [ 591.710657][T22234] bond10: (slave ip6gretap2): link status up again after 0 ms [ 592.097900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 592.105961][ C1] lec:lec_tx_timeout: lec0 [ 592.111140][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.340344][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 592.364419][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 592.458239][T14053] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 592.588883][T24640] virt_wifi0 speed is unknown, defaulting to 1000 [ 592.673246][T24640] lo speed is unknown, defaulting to 1000 [ 592.693245][T24640] lo speed is unknown, defaulting to 1000 [ 592.899583][T22233] net_ratelimit: 13 callbacks suppressed [ 592.899603][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 592.983507][T22233] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 593.038846][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.148138][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.195407][T24640] lo speed is unknown, defaulting to 1000 [ 593.258199][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.298650][T14053] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 593.378805][T22231] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.474571][T24676] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.483526][T24676] lo speed is unknown, defaulting to 1000 [ 593.491605][T24676] lo speed is unknown, defaulting to 1000 [ 593.498155][T22231] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.650484][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.682433][T24705] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 593.788064][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.835343][T24676] lo speed is unknown, defaulting to 1000 [ 593.928183][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 593.958772][T24714] tc_dump_action: action bad kind [ 594.060707][T22234] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 594.088946][T22234] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 594.118349][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 594.141527][T24718] x_tables: ip_tables: ah match: only valid for protocol 51 [ 594.160702][T24719] x_tables: ip_tables: ah match: only valid for protocol 51 [ 594.318644][ T5954] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 594.565912][T24732] vlan3: entered promiscuous mode [ 594.588161][T24732] bridge0: entered promiscuous mode [ 596.285193][T24765] __nla_validate_parse: 10 callbacks suppressed [ 596.285209][T24765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4682'. [ 596.302522][T24693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.529079][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4683'. [ 596.569906][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'. [ 596.570422][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4683'. [ 596.650451][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'. [ 596.679308][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'. [ 596.709377][T24783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4687'. [ 596.785936][T24783] 8021q: VLANs not supported on nlmon0 [ 597.117866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 597.125980][ C1] lec:lec_tx_timeout: lec0 [ 597.134030][T24809] SET target dimension over the limit! [ 597.520358][T24833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4698'. [ 597.543211][T24835] netlink: 'syz.3.4699': attribute type 1 has an invalid length. [ 597.552150][T24835] netlink: 'syz.3.4699': attribute type 2 has an invalid length. [ 597.578384][T24835] netlink: 'syz.3.4699': attribute type 1 has an invalid length. [ 597.598457][T24835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4699'. [ 597.628927][T24841] tipc: Enabled bearer , priority 10 [ 597.727523][T24846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4702'. [ 597.744654][T24846] veth0: entered promiscuous mode [ 597.756179][T24846] debugfs: 'hsr1' already exists in 'hsr' [ 597.762488][T24846] Cannot create hsr debugfs directory [ 597.773456][T24846] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 597.799267][T24846] hsr1: Slave B (veth0) is not up; please bring it up to get a fully working HSR network [ 597.907001][T24849] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.938858][T22223] net_ratelimit: 32 callbacks suppressed [ 597.938879][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 598.078441][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 598.117704][T24833] virt_wifi0 speed is unknown, defaulting to 1000 [ 598.126480][T24833] lo speed is unknown, defaulting to 1000 [ 598.135200][T24833] lo speed is unknown, defaulting to 1000 [ 598.142281][T24862] sit0: entered promiscuous mode [ 598.152310][T24862] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 598.418065][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 598.468686][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 598.578677][T22231] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 598.827217][ T9] tipc: Node number set to 1016935680 [ 598.835207][T24833] lo speed is unknown, defaulting to 1000 [ 598.848694][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 598.988646][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 599.109653][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 599.164723][T24911] netlink: 'syz.1.4718': attribute type 6 has an invalid length. [ 599.178235][T24911] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.260666][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 599.394614][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 599.852476][T24935] syzkaller0: entered promiscuous mode [ 599.871350][T24935] syzkaller0: entered allmulticast mode [ 599.879026][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 599.942197][T24942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.953911][T24938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.370635][T24967] sctp: [Deprecated]: syz.2.4728 (pid 24967) Use of int in max_burst socket option. [ 600.370635][T24967] Use struct sctp_assoc_value instead [ 600.744565][T24979] netlink: 'syz.4.4733': attribute type 1 has an invalid length. [ 601.503745][ T8276] bond0 (unregistering): Released all slaves [ 601.514672][ T8276] bond1 (unregistering): Released all slaves [ 601.532088][ T8276] bond2 (unregistering): Released all slaves [ 601.548442][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 601.558645][ T8276] bond3 (unregistering): Released all slaves [ 601.574054][ T8276] bond4 (unregistering): Released all slaves [ 601.594895][ T8276] bond5 (unregistering): Released all slaves [ 601.610489][ T8276] bond6 (unregistering): Released all slaves [ 601.629734][ T8276] bond7 (unregistering): Released all slaves [ 601.648950][ T8276] bond8 (unregistering): (slave veth9): Releasing active interface [ 601.657016][ T8276] dummy0: entered promiscuous mode [ 601.666999][ T8276] bond8 (unregistering): (slave dummy0): Releasing active interface [ 601.681660][ T8276] bond8 (unregistering): Released all slaves [ 601.709804][T24979] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 601.894179][ T8276] : left promiscuous mode [ 602.052004][T24994] __nla_validate_parse: 9 callbacks suppressed [ 602.052024][T24994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4737'. [ 602.082408][ T8276] tipc: Left network mode [ 602.247437][T24994] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 602.294314][T24994] bond11 (unregistering): Released all slaves [ 602.448574][T14053] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 602.842919][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 602.938173][T14911] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 604.049764][T25041] netlink: 'syz.1.4748': attribute type 3 has an invalid length. [ 604.907547][T22231] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 605.045072][T25040] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 605.077254][T22228] net_ratelimit: 6 callbacks suppressed [ 605.077276][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.143000][T25060] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.208298][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.506084][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 605.668438][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.733044][T25082] netlink: 'syz.0.4756': attribute type 13 has an invalid length. [ 605.898501][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 605.926520][T25079] tipc: Enabling of bearer rejected, failed to enable media [ 606.136247][T25098] syzkaller0: entered promiscuous mode [ 606.142082][T25098] syzkaller0: entered allmulticast mode [ 606.228964][T22231] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 606.237072][T22231] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 606.251153][T25110] pimreg: tun_chr_ioctl cmd 1074025677 [ 606.257736][T25110] pimreg: linktype set to 0 [ 606.638214][T14911] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 607.062624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 607.070721][ C1] lec:lec_tx_timeout: lec0 [ 607.075638][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.938107][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 608.106890][T25120] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 608.117117][T25120] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 608.158239][T25120] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 608.167149][T25125] tipc: Enabled bearer , priority 0 [ 608.188637][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 608.207202][T25126] syzkaller0: entered promiscuous mode [ 608.213243][T25126] syzkaller0: entered allmulticast mode [ 608.351377][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 608.405245][T25126] delete_channel: no stack [ 608.671147][T25164] Bluetooth: MGMT ver 1.23 [ 608.866890][T25174] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4776'. [ 608.924443][T25126] tipc: Resetting bearer [ 609.049316][T25126] tipc: Disabling bearer [ 609.112045][T25177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 609.120155][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 609.259539][T25189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4781'. [ 609.400904][T25203] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4783'. [ 609.521920][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 609.760583][T25201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4783'. [ 609.769788][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4783'. [ 609.848480][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 609.998053][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.317957][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.333497][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 610.447984][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.578009][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 610.588383][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.697920][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.794808][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 610.806133][T25252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4794'. [ 610.885672][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4795'. [ 610.939694][T22233] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.943740][T25257] block nbd0: Unsupported socket: should be TCP or UNIX. [ 610.956196][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 610.964479][T22233] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.017707][T22233] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.048440][T22233] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.088501][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 611.209341][T25270] xt_bpf: check failed: parse error [ 611.227952][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 611.363090][T25277] xt_l2tp: missing protocol rule (udp|l2tpip) [ 611.370164][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 611.925858][ T8276] team0 (unregistering): Port device vxcan1 removed [ 612.041871][T25284] tipc: Enabled bearer , priority 0 [ 612.098000][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 612.106203][ C1] lec:lec_tx_timeout: lec0 [ 612.160521][T25287] syzkaller0: entered promiscuous mode [ 612.166945][T25287] syzkaller0: entered allmulticast mode [ 612.176506][T25287] tipc: Resetting bearer [ 612.188465][T25219] virt_wifi0 speed is unknown, defaulting to 1000 [ 612.199881][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 612.214539][T25219] lo speed is unknown, defaulting to 1000 [ 612.275109][T25279] tipc: Resetting bearer [ 612.373369][T25309] netlink: 'syz.0.4810': attribute type 1 has an invalid length. [ 614.130052][T25279] tipc: Disabling bearer [ 614.139751][T25219] lo speed is unknown, defaulting to 1000 [ 614.209490][T25314] bridge7: entered promiscuous mode [ 614.272961][T25313] bridge8: entered promiscuous mode [ 614.298421][T25317] tipc: Enabled bearer , priority 0 [ 614.305800][T25318] syzkaller0: entered promiscuous mode [ 614.322522][T25318] syzkaller0: entered allmulticast mode [ 614.350567][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 614.427098][T25327] netlink: 'syz.1.4812': attribute type 1 has an invalid length. [ 614.465748][T25327] netlink: 'syz.1.4812': attribute type 2 has an invalid length. [ 614.495288][T25333] __nla_validate_parse: 3 callbacks suppressed [ 614.495307][T25333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4813'. [ 614.501922][ T8276] IPVS: stop unused estimator thread 0... [ 614.519934][T25333] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4813'. [ 614.519993][T25322] tipc: Resetting bearer [ 614.530063][T25335] netlink: 'syz.0.4814': attribute type 1 has an invalid length. [ 614.596498][T25336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4812'. [ 614.602822][T25322] tipc: Disabling bearer [ 614.681974][T25335] bond5: entered promiscuous mode [ 614.687725][T25335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.718918][T25219] lo speed is unknown, defaulting to 1000 [ 615.187531][T25330] virt_wifi0 speed is unknown, defaulting to 1000 [ 615.196130][T25330] lo speed is unknown, defaulting to 1000 [ 615.217236][T25330] lo speed is unknown, defaulting to 1000 [ 615.221313][T25352] netlink: 'syz.4.4818': attribute type 10 has an invalid length. [ 615.241378][T25352] team0: Failed to send options change via netlink (err -105) [ 615.268091][T25352] team0: Port device dummy0 added [ 615.276374][T25352] netlink: 'syz.4.4818': attribute type 10 has an invalid length. [ 615.426296][T25352] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 615.454227][T25352] team0: Failed to send options change via netlink (err -105) [ 615.486074][T25352] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 615.496516][T25352] team0: Port device dummy0 removed [ 615.519565][ T8279] net_ratelimit: 5 callbacks suppressed [ 615.519588][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 615.549922][T25361] ip6tnl0: Caught tx_queue_len zero misconfig [ 615.578448][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 615.587390][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4820'. [ 615.638202][T25360] netlink: 'syz.0.4820': attribute type 14 has an invalid length. [ 615.656604][T25360] netlink: 'syz.0.4820': attribute type 13 has an invalid length. [ 615.664745][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 615.778514][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 615.815622][T25373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4823'. [ 615.835332][T25330] lo speed is unknown, defaulting to 1000 [ 615.889284][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 615.946051][T25379] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4824'. [ 615.964101][T25380] xt_CONNSECMARK: invalid mode: 0 [ 616.038013][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 616.150690][T25343] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.158371][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 616.174279][T25343] lo speed is unknown, defaulting to 1000 [ 616.270720][T25343] lo speed is unknown, defaulting to 1000 [ 616.505643][T25401] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4830'. [ 616.515799][T25402] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4830'. [ 616.543375][T25396] bridge7: left promiscuous mode [ 616.548812][T25396] bridge8: left promiscuous mode [ 616.554607][T25396] bond5: left promiscuous mode [ 616.590874][ T8276] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.600587][ T8276] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.658398][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.685605][ T8276] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.705870][ T8276] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.762551][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 616.827484][T25343] lo speed is unknown, defaulting to 1000 [ 616.888462][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.008010][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.128255][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 617.869236][T25410] virt_wifi0 speed is unknown, defaulting to 1000 [ 617.998076][T25410] lo speed is unknown, defaulting to 1000 [ 618.125653][T25410] lo speed is unknown, defaulting to 1000 [ 618.317401][T25417] nbd: must specify at least one socket [ 618.680752][T25429] bond6: entered allmulticast mode [ 618.687555][T25413] virt_wifi0 speed is unknown, defaulting to 1000 [ 618.694286][T25410] lo speed is unknown, defaulting to 1000 [ 618.710286][T25413] lo speed is unknown, defaulting to 1000 [ 618.727346][T25413] lo speed is unknown, defaulting to 1000 [ 619.458368][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 619.522557][T25413] lo speed is unknown, defaulting to 1000 [ 620.303828][T25478] netlink: 'syz.3.4846': attribute type 8 has an invalid length. [ 620.674016][ T8276] net_ratelimit: 22 callbacks suppressed [ 620.674039][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 620.808013][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 620.858601][T25490] tap0: tun_chr_ioctl cmd 1074025681 [ 620.939916][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 621.069297][ T8276] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 621.188511][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 621.598096][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 621.659435][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.713981][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.733433][T25519] netlink: 336 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.744366][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.757200][T25519] netlink: 336 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.767453][T25518] bridge_slave_0: left allmulticast mode [ 621.774746][T25518] bridge_slave_0: left promiscuous mode [ 621.783934][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.808702][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 621.829025][T25518] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.849578][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4858'. [ 621.866660][T25522] netlink: 'syz.2.4858': attribute type 5 has an invalid length. [ 621.895418][T25522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4858'. [ 622.097895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 622.101080][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 622.106124][ C1] lec:lec_tx_timeout: lec0 [ 622.118363][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 622.131093][T25522] geneve2: entered promiscuous mode [ 622.156173][T25522] geneve2: entered allmulticast mode [ 622.192758][T22233] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 33989 - 0 [ 622.212311][T22233] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 33989 - 0 [ 622.245189][T25503] virt_wifi0 speed is unknown, defaulting to 1000 [ 622.245217][T22233] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 33989 - 0 [ 622.286064][T22233] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 33989 - 0 [ 622.296874][T25503] lo speed is unknown, defaulting to 1000 [ 622.303215][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 622.322899][T25503] lo speed is unknown, defaulting to 1000 [ 622.418925][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 622.437536][T25536] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4861'. [ 622.608083][ T8279] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 622.912233][T25552] 8021q: adding VLAN 0 to HW filter on device bond6 [ 622.923210][T25559] x_tables: unsorted entry at hook 2 [ 622.957543][T25546] bond6: (slave ip6gretap3): making interface the new active one [ 622.977676][T25546] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 623.041811][T25503] lo speed is unknown, defaulting to 1000 [ 623.077446][T25533] virt_wifi0 speed is unknown, defaulting to 1000 [ 623.105434][T25533] lo speed is unknown, defaulting to 1000 [ 623.120256][T25533] lo speed is unknown, defaulting to 1000 [ 623.442828][T25581] syzkaller1: entered promiscuous mode [ 623.461352][T25581] syzkaller1: entered allmulticast mode [ 623.617278][T25546] virt_wifi0 speed is unknown, defaulting to 1000 [ 623.639592][T25546] lo speed is unknown, defaulting to 1000 [ 623.771142][T25546] lo speed is unknown, defaulting to 1000 [ 623.780244][T25595] netlink: 'syz.4.4873': attribute type 32 has an invalid length. [ 623.876857][T25533] lo speed is unknown, defaulting to 1000 [ 623.920472][T25597] netlink: 'syz.2.4875': attribute type 3 has an invalid length. [ 624.346530][T25546] lo speed is unknown, defaulting to 1000 [ 625.468924][T25627] netlink: 'syz.4.4883': attribute type 1 has an invalid length. [ 625.858044][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 625.874764][T25627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.888601][T22233] net_ratelimit: 15 callbacks suppressed [ 625.888621][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.025551][T25639] netlink: 'syz.4.4885': attribute type 3 has an invalid length. [ 626.035507][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.161943][T22233] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.288784][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.535107][T25652] tipc: Enabled bearer , priority 0 [ 626.560198][T25648] syzkaller0: entered promiscuous mode [ 626.568473][T25648] syzkaller0: entered allmulticast mode [ 626.577490][T25648] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 626.614116][T25653] x_tables: duplicate underflow at hook 1 [ 626.626165][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.683595][T25648] tipc: Resetting bearer [ 626.704275][T25646] tipc: Resetting bearer [ 626.745029][T25646] tipc: Disabling bearer [ 626.768799][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 626.881834][ T8281] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 627.028349][T22228] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 627.044073][T25633] virt_wifi0 speed is unknown, defaulting to 1000 [ 627.070398][T25633] lo speed is unknown, defaulting to 1000 [ 627.088976][T25633] lo speed is unknown, defaulting to 1000 [ 627.127856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 627.135964][ C1] lec:lec_tx_timeout: lec0 [ 627.148606][T22234] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 627.203916][T25669] __nla_validate_parse: 1 callbacks suppressed [ 627.203938][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4892'. [ 627.292066][T22223] bond10: (slave ip6gretap2): failed to get link speed/duplex [ 627.333466][T25669] netlink: 'syz.3.4892': attribute type 5 has an invalid length. [ 627.388490][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 627.761178][T25633] lo speed is unknown, defaulting to 1000 [ 627.792442][T25698] netlink: 'syz.1.4899': attribute type 25 has an invalid length. [ 627.800477][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4899'. [ 628.112925][T25710] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4902'. [ 628.232509][T25684] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.272534][T25684] lo speed is unknown, defaulting to 1000 [ 628.286425][T25684] lo speed is unknown, defaulting to 1000 [ 628.587091][T25717] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 628.708484][T25717] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 628.719013][T25699] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.880094][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 629.009833][T25704] virt_wifi0 speed is unknown, defaulting to 1000 [ 629.019990][T25684] lo speed is unknown, defaulting to 1000 [ 629.022768][T25699] lo speed is unknown, defaulting to 1000 [ 629.065560][T25704] lo speed is unknown, defaulting to 1000 [ 629.065568][T25699] lo speed is unknown, defaulting to 1000 [ 629.109282][T25733] vlan4: entered promiscuous mode [ 629.114423][T25733] bridge0: entered promiscuous mode [ 629.474181][T25743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4910'. [ 629.555128][T25745] sctp: [Deprecated]: syz.1.4911 (pid 25745) Use of int in max_burst socket option. [ 629.555128][T25745] Use struct sctp_assoc_value instead [ 629.660550][T25704] lo speed is unknown, defaulting to 1000 [ 629.679045][T25699] lo speed is unknown, defaulting to 1000 [ 630.147541][T17351] lec:lec_start_xmit: lec0:No lecd attached [ 630.202260][T25704] lo speed is unknown, defaulting to 1000 [ 630.924880][T25770] sit0: left promiscuous mode [ 630.968131][ T5190] udevd[5190]: worker [22970] /devices/virtual/block/nbd0 is taking a long time [ 631.046472][T25770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.085448][T25770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.386191][T25770] gretap1: left promiscuous mode [ 631.409180][T25770] ip6gretap1: left promiscuous mode [ 631.438424][T25770] ip6gretap1: left allmulticast mode [ 631.624268][T25770] vlan3: left promiscuous mode [ 631.630406][T25770] bridge0: left promiscuous mode [ 631.743213][T25770] geneve2: left promiscuous mode [ 631.748945][T25770] geneve2: left allmulticast mode [ 631.881257][T25775] syzkaller0: entered promiscuous mode [ 631.886797][T25775] syzkaller0: entered allmulticast mode [ 631.908380][T22234] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.916975][T22234] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 33989 - 0 [ 631.926844][T22234] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.935697][T22234] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 33989 - 0 [ 632.074880][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4920'. [ 632.085327][T25786] net_ratelimit: 21 callbacks suppressed [ 632.085345][T25786] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 632.116211][T22234] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.138082][T22234] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 33989 - 0 [ 632.291160][T22234] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.318882][T22234] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 33989 - 0 [ 632.392091][T25799] openvswitch: netlink: IPv4 tun info is not correct [ 632.845251][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 632.905220][T25823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4928'. [ 632.921544][T25814] bridge6: entered promiscuous mode [ 632.929395][T25814] bridge6: entered allmulticast mode [ 632.965544][T25814] team0: Port device bridge6 added [ 633.205519][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4930'. [ 634.330180][T25808] virt_wifi0 speed is unknown, defaulting to 1000 [ 634.361751][T25808] lo speed is unknown, defaulting to 1000 [ 634.381254][T25808] lo speed is unknown, defaulting to 1000 [ 634.563185][T25882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4939'. [ 634.619296][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 634.841257][T25899] netlink: 'syz.2.4944': attribute type 4 has an invalid length. [ 634.870980][T25904] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4945'. [ 634.887405][T25899] netlink: 'syz.2.4944': attribute type 4 has an invalid length. [ 635.157868][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 635.166027][ C1] lec:lec_tx_timeout: lec0 [ 635.177285][T25808] lo speed is unknown, defaulting to 1000 [ 635.426497][T25938] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4954'. [ 635.701792][T25905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.918996][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4959'. [ 635.943084][T25954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4959'. [ 635.978030][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4959'. [ 637.150434][T26025] netlink: 'syz.2.4974': attribute type 1 has an invalid length. [ 637.346355][T26037] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 637.378228][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 637.475384][T26035] netlink: 'syz.3.4979': attribute type 1 has an invalid length. [ 637.528654][T26030] syzkaller0: entered promiscuous mode [ 637.534403][T26030] syzkaller0: entered allmulticast mode [ 639.503373][T26053] tipc: Enabled bearer , priority 10 [ 639.680388][T26072] __nla_validate_parse: 9 callbacks suppressed [ 639.680409][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4990'. [ 639.777357][T26072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.108133][T26092] can: request_module (can-proto-5) failed. [ 640.269380][T26107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4997'. [ 640.370756][T26068] virt_wifi0 speed is unknown, defaulting to 1000 [ 640.388372][T26068] lo speed is unknown, defaulting to 1000 [ 640.420699][T26068] lo speed is unknown, defaulting to 1000 [ 640.618044][T14922] tipc: Node number set to 2203030243 [ 640.761588][T26124] batadv_slave_1: entered promiscuous mode [ 640.813776][T26124] ipvlan2: entered promiscuous mode [ 640.934748][T26128] hsr1: left promiscuous mode [ 641.039867][T26128] bond6: left allmulticast mode [ 641.066017][T14911] lo speed is unknown, defaulting to 1000 [ 641.066059][ T8279] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.077542][T14911] sqz0: Port: 1 Link DOWN [ 641.091375][ T8279] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.118507][T26068] lo speed is unknown, defaulting to 1000 [ 641.124363][ T8279] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.134786][T14911] lo speed is unknown, defaulting to 1000 [ 641.143848][ T8279] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.368812][T26123] batadv_slave_1: left promiscuous mode [ 641.705925][T26149] netlink: 548 bytes leftover after parsing attributes in process `syz.3.5007'. [ 641.720955][T26113] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.731685][T26113] lo speed is unknown, defaulting to 1000 [ 641.747215][T26113] lo speed is unknown, defaulting to 1000 [ 642.127725][T26166] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5012'. [ 642.252080][T26170] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.321645][T26174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5015'. [ 642.332713][T26170] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.493350][T26113] lo speed is unknown, defaulting to 1000 [ 642.503057][T26170] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.626787][T26179] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 642.641972][T26170] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.799608][ T8279] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.837977][ T8279] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.877734][ T8279] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.962971][ T8281] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.451446][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5025'. [ 643.871700][T26221] bond7: entered promiscuous mode [ 643.876918][T26221] bond7: entered allmulticast mode [ 643.883103][T26221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.129454][T26235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5033'. [ 644.376049][T26241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5034'. [ 644.401668][T26241] vlan2: entered promiscuous mode [ 644.406963][T26241] team0: entered promiscuous mode [ 644.412985][T26241] team_slave_0: entered promiscuous mode [ 644.421480][T26241] team_slave_1: entered promiscuous mode [ 644.427540][T26241] geneve0: entered promiscuous mode [ 644.675056][T26251] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5037'. [ 644.693770][T26251] openvswitch: netlink: Flow actions attr not present in new flow. [ 644.943551][T26265] bridge0: entered allmulticast mode [ 644.964465][T26265] pim6reg: left allmulticast mode [ 644.979883][T26265] bridge0: left allmulticast mode [ 645.191466][T26278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5044'. [ 645.250237][T26278] vlan3: entered promiscuous mode [ 645.255454][T26278] team0: entered promiscuous mode [ 645.261337][T26278] team_slave_0: entered promiscuous mode [ 645.267702][T26278] team_slave_1: entered promiscuous mode [ 645.380475][T26290] netlink: 'syz.2.5046': attribute type 1 has an invalid length. [ 645.419535][T26290] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5046'. [ 645.553382][T26298] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5051'. [ 645.622573][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 645.631687][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'. [ 645.641163][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 645.691380][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'. [ 645.872313][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'. [ 645.888399][T26316] bond0: entered promiscuous mode [ 645.905135][T26316] bond_slave_0: entered promiscuous mode [ 645.924834][T26316] bond_slave_1: entered promiscuous mode [ 645.951817][T26316] gretap0: entered promiscuous mode [ 645.980172][T26316] debugfs: 'hsr1' already exists in 'hsr' [ 645.989667][T26316] Cannot create hsr debugfs directory [ 646.025814][T26316] hsr1: entered promiscuous mode [ 646.135275][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5061'. [ 646.294741][T26348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5063'. [ 646.979664][T26391] pimreg: tun_chr_ioctl cmd 1074812117 [ 647.000134][T26390] syzkaller0: entered promiscuous mode [ 647.005789][T26390] syzkaller0: entered allmulticast mode [ 647.202091][T26407] netlink: 'syz.3.5078': attribute type 1 has an invalid length. [ 647.384229][T26418] netlink: 'syz.4.5083': attribute type 12 has an invalid length. [ 647.393039][T26418] netlink: 'syz.4.5083': attribute type 29 has an invalid length. [ 647.401781][T26418] netlink: 'syz.4.5083': attribute type 2 has an invalid length. [ 647.537369][T26428] bond0: Error: Cannot enslave bond to itself. [ 647.674712][T26434] macsec2: entered promiscuous mode [ 647.698587][T26434] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 647.706144][T26434] macsec2: entered allmulticast mode [ 647.741853][T26434] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 650.253054][T26427] virt_wifi0 speed is unknown, defaulting to 1000 [ 650.263451][T26427] lo speed is unknown, defaulting to 1000 [ 650.274616][T26427] lo speed is unknown, defaulting to 1000 [ 650.629111][T26484] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 650.653532][T26485] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 650.797300][T26427] lo speed is unknown, defaulting to 1000 [ 650.947728][T26457] virt_wifi0 speed is unknown, defaulting to 1000 [ 650.981962][T26457] lo speed is unknown, defaulting to 1000 [ 651.020300][T26457] lo speed is unknown, defaulting to 1000 [ 651.189568][T26497] __nla_validate_parse: 13 callbacks suppressed [ 651.189592][T26497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5103'. [ 651.378985][T26497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5103'. [ 651.515103][T26457] lo speed is unknown, defaulting to 1000 [ 651.611023][T26479] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5099'. [ 651.621540][T26501] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5099'. [ 651.868612][T26507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5104'. [ 652.246147][T26509] tipc: Enabled bearer , priority 0 [ 652.254385][T26510] syzkaller0: entered promiscuous mode [ 652.261104][T26510] syzkaller0: entered allmulticast mode [ 652.275283][T26509] tipc: Resetting bearer [ 652.294403][T26508] tipc: Resetting bearer [ 652.335715][T26508] tipc: Disabling bearer [ 652.490718][T26514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5107'. [ 652.549297][T26515] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 652.568054][T26515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 652.580032][T26515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 652.762812][T26521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5109'. [ 652.842039][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 652.889980][T26524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5111'. [ 652.901256][T26524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5111'. [ 652.946554][T26524] vlan2: entered allmulticast mode [ 652.960637][T26524] dummy0: entered allmulticast mode [ 653.034242][T26531] sctp: [Deprecated]: syz.4.5112 (pid 26531) Use of int in max_burst socket option. [ 653.034242][T26531] Use struct sctp_assoc_value instead [ 653.125306][T26533] netlink: 'syz.0.5113': attribute type 1 has an invalid length. [ 654.003278][T26530] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.081703][T26530] lo speed is unknown, defaulting to 1000 [ 654.150124][T26530] lo speed is unknown, defaulting to 1000 [ 654.458896][T26551] netlink: 'syz.2.5118': attribute type 11 has an invalid length. [ 654.482089][T26555] syzkaller0: entered promiscuous mode [ 654.500745][T26555] syzkaller0: entered allmulticast mode [ 654.628731][T26560] netlink: 'syz.1.5121': attribute type 2 has an invalid length. [ 654.665155][T26560] dvmrp0: entered allmulticast mode [ 654.699573][T26530] lo speed is unknown, defaulting to 1000 [ 655.824798][T26571] virt_wifi0 speed is unknown, defaulting to 1000 [ 655.848291][T26571] lo speed is unknown, defaulting to 1000 [ 655.893310][T26571] lo speed is unknown, defaulting to 1000 [ 656.397512][T26571] lo speed is unknown, defaulting to 1000 [ 656.985531][T26616] netlink: 'syz.0.5136': attribute type 21 has an invalid length. [ 656.996130][T26618] netlink: 'syz.1.5137': attribute type 15 has an invalid length. [ 657.170147][T26616] netlink: 'syz.0.5136': attribute type 3 has an invalid length. [ 657.196352][T26616] __nla_validate_parse: 3 callbacks suppressed [ 657.196373][T26616] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5136'. [ 657.280932][T26627] syzkaller0: entered promiscuous mode [ 657.286809][T26627] syzkaller0: entered allmulticast mode [ 657.353136][T26631] tipc: Enabled bearer , priority 0 [ 657.386219][T26630] syzkaller0: entered promiscuous mode [ 657.394719][T26630] syzkaller0: entered allmulticast mode [ 657.416751][T26634] tipc: Enabling of bearer rejected, already enabled [ 657.432833][T26637] netlink: 'syz.0.5142': attribute type 1 has an invalid length. [ 657.441211][T26638] netlink: 'syz.0.5142': attribute type 1 has an invalid length. [ 657.462960][T26627] tipc: Enabled bearer , priority 0 [ 657.532035][T26637] bond9: entered promiscuous mode [ 657.537134][T26637] bond9: entered allmulticast mode [ 657.542991][T26637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 657.567022][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 657.587170][T26630] tipc: Resetting bearer [ 657.624600][T26629] tipc: Resetting bearer [ 657.727610][T26629] tipc: Disabling bearer [ 657.782538][T26626] tipc: Resetting bearer [ 657.834915][T26626] tipc: Disabling bearer [ 658.055520][T26658] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5147'. [ 658.096945][T26658] syzkaller1: entered promiscuous mode [ 658.105370][T26658] syzkaller1: entered allmulticast mode [ 658.118839][T26658] netlink: 'syz.1.5147': attribute type 1 has an invalid length. [ 658.134541][T26658] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5147'. [ 658.150058][T26658] netlink: 'syz.1.5147': attribute type 1 has an invalid length. [ 658.168454][T26658] netlink: 'syz.1.5147': attribute type 8 has an invalid length. [ 658.177255][T26658] netlink: 606 bytes leftover after parsing attributes in process `syz.1.5147'. [ 658.192649][T26658] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5147'. [ 658.213143][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 658.225018][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 658.515194][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.560861][T26671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5149'. [ 658.591303][T26672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5151'. [ 658.604359][T26671] bond8: entered promiscuous mode [ 658.610492][T26671] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.622445][T26671] bond8 (unregistering): Released all slaves [ 658.646804][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.666016][T26649] virt_wifi0 speed is unknown, defaulting to 1000 [ 658.668651][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.682339][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.721563][T26672] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 658.741170][T26672] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 658.759133][T26672] macsec2: left promiscuous mode [ 658.764401][T26672] macsec2: left allmulticast mode [ 658.780428][T26649] lo speed is unknown, defaulting to 1000 [ 658.780678][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.798021][T26649] lo speed is unknown, defaulting to 1000 [ 658.825636][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.848695][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 658.856855][T26666] netlink: 'syz.1.5149': attribute type 21 has an invalid length. [ 659.052914][T26684] bridge9: entered promiscuous mode [ 659.060372][T26684] bridge9: entered allmulticast mode [ 659.120578][T26695] tipc: Enabling of bearer rejected, failed to enable media [ 659.359827][T26649] lo speed is unknown, defaulting to 1000 [ 659.497352][T22234] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.522475][T22234] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.552063][T22234] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.587700][T26707] veth1: entered promiscuous mode [ 659.610111][T26707] veth0: entered promiscuous mode [ 659.620868][T26707] hsr2: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 659.635597][T26707] hsr2: Slave B (veth0) is not up; please bring it up to get a fully working HSR network [ 659.648649][T22234] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.938044][T18008] Bluetooth: hci3: command 0x0405 tx timeout [ 660.501146][T26743] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 660.507072][T26743] pim6reg1: linktype set to 823 [ 661.150606][T26777] block nbd2: NBD_DISCONNECT [ 661.155298][T26777] block nbd2: Send disconnect failed -32 [ 661.188298][T26777] block nbd2: shutting down sockets [ 662.550783][T22234] bond1 (unregistering): Released all slaves [ 662.569277][T22234] bond2 (unregistering): Released all slaves [ 662.595789][T22234] bond3 (unregistering): (slave veth5): Releasing active interface [ 662.605683][T22234] bond3 (unregistering): Released all slaves [ 662.623166][T22234] bond4 (unregistering): Released all slaves [ 662.645574][T22234] bond5 (unregistering): Released all slaves [ 662.667661][T22234] bond6 (unregistering): Released all slaves [ 662.686608][T22234] bond7 (unregistering): Released all slaves [ 662.711133][T22234] bond8 (unregistering): Released all slaves [ 662.735762][T22234] bond9 (unregistering): Released all slaves [ 662.755943][T22234] bond0 (unregistering): Released all slaves [ 662.796561][T26779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.805825][T26779] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.823604][T26779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.968051][T22234] hmac(sha224: left promiscuous mode [ 663.050151][T26826] __nla_validate_parse: 12 callbacks suppressed [ 663.050174][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5185'. [ 663.080055][T22234] l24): left promiscuous mode [ 663.210095][T22234] : left promiscuous mode [ 663.431189][T22234] tipc: Disabling bearer [ 663.436722][T22234] tipc: Disabling bearer [ 663.444721][T22234] tipc: Left network mode [ 663.495786][T26853] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5195'. [ 664.104969][T26885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.123430][T26885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.209502][T26895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5206'. [ 664.243774][T26898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5206'. [ 664.269642][T26893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5206'. [ 664.455967][T26885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.468154][T26885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.515439][T26899] bond10: option tlb_dynamic_lb: invalid value (5) [ 664.526156][T26899] bond10 (unregistering): Released all slaves [ 664.654021][T26885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.674303][T26885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.730800][T26910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5212'. [ 664.758072][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5211'. [ 664.787442][T26885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.800414][T26919] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5214'. [ 664.815371][T26885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 664.815588][T26920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 665.005377][T26931] IPVS: stopping backup sync thread 20102 ... [ 665.221690][T26946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5222'. [ 665.311984][T22223] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.325957][T22223] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 665.354501][T26945] syzkaller0: entered promiscuous mode [ 665.374454][T26945] syzkaller0: entered allmulticast mode [ 665.388304][T26952] validate_nla: 61 callbacks suppressed [ 665.388326][T26952] netlink: 'syz.2.5223': attribute type 6 has an invalid length. [ 665.444194][T26954] netlink: 'syz.2.5223': attribute type 6 has an invalid length. [ 665.452875][T22223] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.472429][T22223] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 665.592767][ T8279] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.615709][ T8279] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 665.691449][T26963] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 665.863440][T22223] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.892568][T22223] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 666.411996][T27001] netlink: 'syz.2.5236': attribute type 89 has an invalid length. [ 666.439327][T22234] veth0_macvtap: left promiscuous mode [ 666.458394][T22234] veth0_vlan: left promiscuous mode [ 666.502608][T27012] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 666.909915][T22228] smc: removing ib device !yz! [ 667.032878][T27003] netlink: 'syz.3.5234': attribute type 12 has an invalid length. [ 667.056784][T27004] tipc: Resetting bearer [ 667.065122][T27004] tipc: Resetting bearer [ 667.131584][T27011] syzkaller1: entered promiscuous mode [ 667.137120][T27011] syzkaller1: entered allmulticast mode [ 667.170103][ T9] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.431868][T27033] ipvlan1: entered promiscuous mode [ 667.475756][T27033] ipvlan1: left promiscuous mode [ 667.729684][T27039] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.768175][T27039] lo speed is unknown, defaulting to 1000 [ 667.798271][T27039] lo speed is unknown, defaulting to 1000 [ 667.943234][T27061] netlink: 'syz.3.5250': attribute type 23 has an invalid length. [ 668.286131][T27075] netlink: 'syz.0.5255': attribute type 21 has an invalid length. [ 668.321867][T27075] __nla_validate_parse: 6 callbacks suppressed [ 668.321889][T27075] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5255'. [ 668.357576][T27075] netlink: 'syz.0.5255': attribute type 4 has an invalid length. [ 668.366546][T27075] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5255'. [ 668.390604][T27075] netlink: 'syz.0.5255': attribute type 1 has an invalid length. [ 668.418553][T27075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5255'. [ 669.114381][T27102] bond8 (unregistering): Released all slaves [ 669.178215][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5262'. [ 669.234276][T27039] lo speed is unknown, defaulting to 1000 [ 669.275410][T27106] bond10: option broadcast_neighbor: invalid value (30) [ 669.338975][T27106] bond10 (unregistering): Released all slaves [ 669.517377][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'. [ 669.537167][T27112] netlink: 'syz.1.5263': attribute type 3 has an invalid length. [ 669.577391][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5263'. [ 669.659546][T27095] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5258'. [ 669.826726][T27120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 669.958042][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5268'. [ 670.000387][T27127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5269'. [ 670.088727][T27127] vlan3: entered promiscuous mode [ 670.247083][T27141] tipc: Enabled bearer , priority 0 [ 670.269719][T27141] syzkaller0: entered promiscuous mode [ 670.282653][T27141] syzkaller0: entered allmulticast mode [ 670.329195][T22234] IPVS: stop unused estimator thread 0... [ 670.355619][T27141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 670.414954][T27141] tipc: Resetting bearer [ 670.459762][T27144] tipc: Enabling of bearer rejected, already enabled [ 670.501496][T27143] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.593750][T27144] tipc: Resetting bearer [ 670.642059][T27144] tipc: Disabling bearer [ 670.671607][T27143] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.775190][T27143] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.963562][T27143] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.052079][T27157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 671.115091][T22234] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.175068][ T8276] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.279810][ T8276] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.366741][T22234] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.386355][T27163] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.405177][T27163] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 671.497407][T27163] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.511256][T27163] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 671.644027][T27163] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.668061][T27163] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 671.745908][T27163] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.758002][T27163] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 671.901801][T22234] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.931371][T22234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 672.003949][T22234] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.021359][T22234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 672.050745][T27197] validate_nla: 3 callbacks suppressed [ 672.050764][T27197] netlink: 'syz.0.5287': attribute type 30 has an invalid length. [ 672.112295][T22234] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.132902][T22234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 672.187663][ T8276] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.201066][ T8276] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 672.222069][T27197] netlink: 'syz.0.5287': attribute type 30 has an invalid length. [ 672.456976][T27215] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 672.763303][T27243] netlink: 'syz.2.5299': attribute type 7 has an invalid length. [ 672.782137][T27243] netlink: 'syz.2.5299': attribute type 8 has an invalid length. [ 672.863711][T27247] tipc: Enabling of bearer rejected, failed to enable media [ 673.005798][T27258] lo: Caught tx_queue_len zero misconfig [ 673.218403][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 673.421448][T27274] syzkaller0: entered promiscuous mode [ 673.427079][T27274] syzkaller0: entered allmulticast mode [ 674.330835][T27279] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 676.472265][T27309] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.490084][T27295] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.499380][T27295] lo speed is unknown, defaulting to 1000 [ 676.506960][T27309] lo speed is unknown, defaulting to 1000 [ 676.526089][T27309] lo speed is unknown, defaulting to 1000 [ 676.564841][T27322] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.595514][T27322] lo speed is unknown, defaulting to 1000 [ 676.623439][T27317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.632676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.824369][T27336] netlink: 'syz.1.5323': attribute type 10 has an invalid length. [ 676.863019][T27336] __nla_validate_parse: 16 callbacks suppressed [ 676.863039][T27336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5323'. [ 676.965270][T27295] lo speed is unknown, defaulting to 1000 [ 676.976599][T27309] lo speed is unknown, defaulting to 1000 [ 677.084775][T27343] netlink: 'syz.1.5325': attribute type 33 has an invalid length. [ 677.092894][T27343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5325'. [ 677.103055][T27343] `: renamed from team0 (while UP) [ 677.198116][T27345] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5326'. [ 677.207301][T27345] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 677.488437][T27322] lo speed is unknown, defaulting to 1000 [ 677.507965][T27295] lo speed is unknown, defaulting to 1000 [ 677.717234][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5329'. [ 677.882119][T27365] syzkaller0: entered promiscuous mode [ 677.887674][T27365] syzkaller0: entered allmulticast mode [ 677.914483][T27365] tipc: Enabled bearer , priority 0 [ 677.925627][T27365] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 677.974440][T27361] tipc: Resetting bearer [ 678.005695][T27361] tipc: Disabling bearer [ 678.022112][T27322] lo speed is unknown, defaulting to 1000 [ 678.281816][T27373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.290813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.365797][T27375] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.374783][T27375] lo speed is unknown, defaulting to 1000 [ 678.400005][T27375] lo speed is unknown, defaulting to 1000 [ 678.419293][T27377] Bluetooth: MGMT ver 1.23 [ 678.625886][T27380] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5332'. [ 678.688571][T27380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5332'. [ 678.767269][T27384] netlink: 'syz.3.5333': attribute type 14 has an invalid length. [ 678.775330][T27384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5333'. [ 678.800334][T27384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5333'. [ 678.967122][T27375] lo speed is unknown, defaulting to 1000 [ 678.974286][T27384] pimreg: entered promiscuous mode [ 679.317697][T27394] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.437715][T27394] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.563745][T27394] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.844713][T27394] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.293397][T22234] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.387923][T22234] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.440843][T22234] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.469560][T22234] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.819068][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5347'. [ 680.831251][T27428] netlink: 'syz.0.5344': attribute type 58 has an invalid length. [ 680.851322][T27431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5346'. [ 680.935985][T27437] netlink: 'syz.1.5349': attribute type 13 has an invalid length. [ 681.063539][T27445] team0: Device gtp0 is of different type [ 681.422227][T27465] x_tables: duplicate underflow at hook 2 [ 681.657230][T27476] : renamed from bond_slave_0 [ 681.960617][T27494] __nla_validate_parse: 3 callbacks suppressed [ 681.960644][T27494] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5365'. [ 682.050843][T27494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5365'. [ 682.064817][T27501] syz.3.5364 uses old SIOCAX25GETINFO [ 682.210967][T27513] vxcan1: Master is either lo or non-ether device [ 682.488496][T27532] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 682.600401][T27539] netlink: 'syz.2.5375': attribute type 33 has an invalid length. [ 682.608752][T27539] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5375'. [ 682.618368][T27539] `: renamed from team0 [ 683.221943][T27565] bond8: option tlb_dynamic_lb: invalid value (5) [ 683.239644][T27565] bond8 (unregistering): Released all slaves [ 683.296533][T27567] vlan5: entered promiscuous mode [ 683.306782][T27567] geneve1: entered promiscuous mode [ 683.318437][T27567] vlan5: entered allmulticast mode [ 683.324084][T27567] geneve1: entered allmulticast mode [ 683.455754][T27574] netlink: 'syz.4.5385': attribute type 1 has an invalid length. [ 683.464610][T27574] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5385'. [ 683.650483][T27582] tipc: Enabled bearer , priority 0 [ 683.709502][T27584] syzkaller0: entered promiscuous mode [ 683.715040][T27584] syzkaller0: entered allmulticast mode [ 683.725545][T27589] netlink: 'syz.4.5389': attribute type 1 has an invalid length. [ 683.738567][T27584] tipc: Resetting bearer [ 683.808798][T27589] bond8: entered promiscuous mode [ 683.814072][T27589] bond8: entered allmulticast mode [ 683.820760][T27589] 8021q: adding VLAN 0 to HW filter on device bond8 [ 683.836423][T27592] erspan1: entered allmulticast mode [ 683.852029][T27592] bond8: (slave erspan1): making interface the new active one [ 683.861504][T27592] erspan1: entered promiscuous mode [ 683.869433][T27592] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 683.878470][T27593] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5390'. [ 683.919076][T27581] tipc: Resetting bearer [ 684.287233][T27608] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 684.497230][T27614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5395'. [ 684.519279][T27614] ipt_ECN: cannot use operation on non-tcp rule [ 685.837681][T27622] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5397'. [ 685.998840][T27581] tipc: Disabling bearer [ 686.022363][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.036514][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.042967][T27603] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5392'. [ 686.089747][T14911] tipc: Node number set to 407607232 [ 686.139054][ T5889] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 686.315891][ T5889] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 686.648622][T27646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5403'. [ 686.750900][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5403'. [ 686.807131][T27646] bridge_slave_1 (unregistering): left allmulticast mode [ 686.837155][T27646] bridge_slave_1 (unregistering): left promiscuous mode [ 686.849940][T27646] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.939672][T27658] hsr1: left promiscuous mode [ 686.944803][T27658] vlan2: left allmulticast mode [ 686.953471][T27658] dummy0: left allmulticast mode [ 686.987482][T27658] bond9: left promiscuous mode [ 686.998086][T27658] bond9: left allmulticast mode [ 687.035738][T14053] lo speed is unknown, defaulting to 1000 [ 687.035757][ T5889] lo speed is unknown, defaulting to 1000 [ 687.045529][T14053] syz2: Port: 1 Link DOWN [ 687.073244][ T8276] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 687.092970][T27663] bridge11: entered promiscuous mode [ 687.100391][T27663] macsec2: entered promiscuous mode [ 687.107493][T27663] bridge11: port 1(macsec2) entered blocking state [ 687.114855][T27663] bridge11: port 1(macsec2) entered disabled state [ 687.122665][T27663] macsec2: entered allmulticast mode [ 687.128353][T27663] bridge11: entered allmulticast mode [ 687.137433][T27663] macsec2: left allmulticast mode [ 687.146098][T27663] bridge11: left allmulticast mode [ 687.152897][T27663] bridge11: left promiscuous mode [ 687.212396][T22234] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.239476][T22234] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.259017][T22234] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.267494][T22234] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.407436][T27689] __nla_validate_parse: 2 callbacks suppressed [ 687.407456][T27689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5412'. [ 687.516572][T27694] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5414'. [ 687.543177][T27697] siw: device registration error -23 [ 687.549226][T27697] siw: device registration error -23 [ 687.554892][T27697] siw: device registration error -23 [ 687.582899][T27696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 687.593511][T27696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5415'. [ 687.618548][T27697] siw: device registration error -23 [ 687.624315][T27697] siw: device registration error -23 [ 687.648485][T27697] siw: device registration error -23 [ 687.654394][T27697] siw: device registration error -23 [ 687.661035][T27697] siw: device registration error -23 [ 687.689682][T27697] siw: device registration error -23 [ 687.709826][T27697] siw: device registration error -23 [ 687.717596][T27697] siw: device registration error -23 [ 687.740197][T27697] siw: device registration error -23 [ 687.750532][T27697] siw: device registration error -23 [ 687.756304][T27697] siw: device registration error -23 [ 687.762663][T27697] siw: device registration error -23 [ 687.806093][T27703] virt_wifi0 speed is unknown, defaulting to 1000 [ 687.827010][T27703] lo speed is unknown, defaulting to 1000 [ 687.851498][T27703] lo speed is unknown, defaulting to 1000 [ 688.098662][T22223] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 688.106726][T22223] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 688.349689][T27703] lo speed is unknown, defaulting to 1000 [ 688.518017][ T5888] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 691.057999][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 691.066057][ C1] lec:lec_tx_timeout: lec0 [ 692.428269][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 694.747614][T17351] lec:lec_start_xmit: lec0:No lecd attached [ 694.978849][ T31] INFO: task udevd:22970 blocked for more than 143 seconds. [ 694.986215][ T31] Not tainted syzkaller #0 [ 694.991339][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.000110][ T31] task:udevd state:D stack:23464 pid:22970 tgid:22970 ppid:5190 task_flags:0x400140 flags:0x00080000 [ 695.012279][ T31] Call Trace: [ 695.015681][ T31] [ 695.018714][ T31] __schedule+0x1585/0x5340 [ 695.023262][ T31] ? blk_mq_flush_plug_list+0x443/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 695.028953][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 695.035206][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 695.040425][ T31] ? __pfx___schedule+0x10/0x10 [ 695.045432][ T31] ? schedule+0x90/0x360 [ 695.049885][ T31] schedule+0x164/0x360 [ 695.054091][ T31] schedule_timeout+0x158/0x2c0 [ 695.059304][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 695.064739][ T31] ? __pfx_process_timeout+0x10/0x10 [ 695.070154][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.076101][ T31] ? prepare_to_wait_event+0x436/0x480 [ 695.081679][ T31] nbd_queue_rq+0x857/0x1100 [ 695.086329][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 695.092038][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 695.098590][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 695.104215][ T31] ? sbitmap_get+0x229/0x390 [ 695.108923][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 695.115040][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 695.121126][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 695.127541][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 695.134472][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 695.144343][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 695.149769][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 695.154935][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 695.160365][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 695.165742][ T31] ? blk_mq_dispatch_list+0x1a0/0xe10 [ 695.171355][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 695.177138][ T31] ? rcu_is_watching+0x15/0xb0 [ 695.182114][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 695.187717][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 695.193058][ T31] ? blk_mq_submit_bio+0xef8/0x2810 [ 695.198710][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 695.204667][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 695.210185][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 695.215633][ T31] __submit_bio+0x28d/0x580 [ 695.223153][ T31] ? __pfx___submit_bio+0x10/0x10 [ 695.228364][ T31] ? bio_associate_blkg+0x6d/0x230 [ 695.233528][ T31] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 695.239748][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 695.245954][ T31] ? bio_alloc_bioset+0xbe2/0x11b0 [ 695.251330][ T31] block_read_full_folio+0x599/0x830 [ 695.256691][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 695.262248][ T31] filemap_read_folio+0x137/0x3b0 [ 695.267325][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 695.274243][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 695.287825][ T31] ? filemap_add_folio+0x356/0x530 [ 695.293019][ T31] do_read_cache_folio+0x358/0x590 [ 695.318324][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 695.323875][ T31] read_part_sector+0xb6/0x2b0 [ 695.346297][ T31] adfspart_check_ICS+0xa5/0xa40 [ 695.351412][ T31] ? snprintf+0xe8/0x140 [ 695.356050][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 695.362466][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 695.417813][ T31] bdev_disk_changed+0x7ba/0x1550 [ 695.422945][ T31] ? bdev_open+0xe0/0xd30 [ 695.427344][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 695.445975][ T31] blkdev_get_whole+0x380/0x510 [ 695.452038][ T31] bdev_open+0x31e/0xd30 [ 695.456385][ T31] blkdev_open+0x470/0x610 [ 695.466907][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 695.472197][ T31] do_dentry_open+0x785/0x14e0 [ 695.477036][ T31] vfs_open+0x3b/0x340 [ 695.481557][ T31] ? path_openat+0x2df0/0x3860 [ 695.486369][ T31] path_openat+0x2e08/0x3860 [ 695.491497][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 695.496917][ T31] ? stack_depot_save_flags+0x33/0x810 [ 695.502845][ T31] ? __pfx_path_openat+0x10/0x10 [ 695.508183][ T31] ? __x64_sys_openat+0x138/0x170 [ 695.513261][ T31] ? do_syscall_64+0x14d/0xf80 [ 695.528144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.534298][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 695.558141][ T31] do_file_open+0x23e/0x4a0 [ 695.562732][ T31] ? __pfx_do_file_open+0x10/0x10 [ 695.577899][ T31] ? _raw_spin_unlock+0x28/0x50 [ 695.582851][ T31] ? alloc_fd+0x64b/0x6c0 [ 695.587236][ T31] do_sys_openat2+0x113/0x200 [ 695.597839][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.603123][ T31] ? exc_page_fault+0x6a/0xc0 [ 695.627850][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 695.633307][ T31] __x64_sys_openat+0x138/0x170 [ 695.647962][ T31] do_syscall_64+0x14d/0xf80 [ 695.652643][ T31] ? trace_irq_disable+0x3b/0x150 [ 695.657715][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.673934][ T31] ? clear_bhb_loop+0x40/0x90 [ 695.688146][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.694108][ T31] RIP: 0033:0x7fde5b8a7407 [ 695.707951][ T31] RSP: 002b:00007fff7741c680 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 695.716441][ T31] RAX: ffffffffffffffda RBX: 00007fde5bfb8880 RCX: 00007fde5b8a7407 [ 695.768221][ T31] RDX: 00000000000a0800 RSI: 000055f4653fb850 RDI: ffffffffffffff9c [ 695.776273][ T31] RBP: 000055f4653dc910 R08: 0000000000000000 R09: 0000000000000000 [ 695.827806][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f4653f0ba0 [ 695.835856][ T31] R13: 000055f4653ea190 R14: 0000000000000000 R15: 000055f4653f0ba0 [ 695.878074][ T31] [ 695.888434][ T31] [ 695.888434][ T31] Showing all locks held in the system: [ 695.918098][ T31] 1 lock held by khungtaskd/31: [ 695.923006][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 695.968049][ T31] 2 locks held by getty/5577: [ 695.972784][ T31] #0: ffff8880362120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 696.024980][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 696.068003][ T31] 1 lock held by kworker/u8:49/8281: [ 696.073352][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 696.107946][ T31] 3 locks held by kworker/1:20/14922: [ 696.113384][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 696.157828][ T31] #1: ffffc9001aeb7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 696.187943][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 696.227896][ T31] 3 locks held by syz-executor/17073: [ 696.233330][ T31] #0: ffff8880921d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 696.258452][ T31] #1: ffff8880921d00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 696.278348][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 696.296884][ T31] 3 locks held by syz-executor/17500: [ 696.302541][ T31] #0: ffff888077500ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 696.312760][ T31] #1: ffff8880775000c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 696.322658][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 696.333029][ T31] 5 locks held by syz-executor/18906: [ 696.338856][ T31] #0: ffff8880471e0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 696.352149][ T31] #1: ffff8880471e00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 696.362335][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 696.372932][ T31] #3: ffff888085705af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 696.382631][ T31] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 696.394014][ T31] 3 locks held by udevd/22970: [ 696.408715][ T31] #0: ffff888025daf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 696.427987][ T31] #1: ffff8880253ae418 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 696.437575][ T31] #2: ffff888025e48180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 696.456106][ T31] [ 696.458623][ T31] ============================================= [ 696.458623][ T31] [ 696.467092][ T31] NMI backtrace for cpu 0 [ 696.467112][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 696.467133][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.467144][ T31] Call Trace: [ 696.467154][ T31] [ 696.467163][ T31] dump_stack_lvl+0xe8/0x150 [ 696.467195][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 696.467217][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 696.467243][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 696.467268][ T31] sys_info+0x135/0x170 [ 696.467286][ T31] watchdog+0xfd9/0x1030 [ 696.467319][ T31] ? watchdog+0x21a/0x1030 [ 696.467354][ T31] kthread+0x388/0x470 [ 696.467372][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.467396][ T31] ? __pfx_kthread+0x10/0x10 [ 696.467414][ T31] ret_from_fork+0x51e/0xb90 [ 696.467443][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 696.467465][ T31] ? __switch_to+0xc7d/0x1450 [ 696.467490][ T31] ? __pfx_kthread+0x10/0x10 [ 696.467510][ T31] ret_from_fork_asm+0x1a/0x30 [ 696.467553][ T31] [ 696.467561][ T31] Sending NMI from CPU 0 to CPUs 1: [ 696.579201][ C1] NMI backtrace for cpu 1 [ 696.579219][ C1] CPU: 1 UID: 0 PID: 22231 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 696.579240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.579252][ C1] Workqueue: bat_events batadv_tt_purge [ 696.579280][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 696.579302][ C1] Code: a5 27 8c e8 52 8c 7a f5 e8 bd d3 85 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 80 a4 27 8c e9 fd fe ff ff cc cc cc [ 696.579317][ C1] RSP: 0018:ffffc900100f7950 EFLAGS: 00000082 [ 696.579332][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: d26f32e78b80decf [ 696.579345][ C1] RDX: 00000000dc5e7c00 RSI: 00000000b0cfd34d RDI: ffffffff8e161e0a [ 696.579357][ C1] RBP: 0000000000000000 R08: ffffffff8b7ba03a R09: ffff8880548e0498 [ 696.579370][ C1] R10: dffffc0000000000 R11: fffffbfff2022e57 R12: 0000000000000000 [ 696.579382][ C1] R13: ffff8880548e0498 R14: 0000000000000000 R15: 0000000000000001 [ 696.579394][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 696.579415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.579427][ C1] CR2: 0000562efc1edee8 CR3: 000000003637e000 CR4: 00000000003526f0 [ 696.579444][ C1] Call Trace: [ 696.579451][ C1] [ 696.579458][ C1] lock_acquire+0x100/0x2e0 [ 696.579481][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 696.579505][ C1] ? batadv_tt_local_purge+0x10a/0x340 [ 696.579525][ C1] _raw_spin_lock_bh+0x36/0x50 [ 696.579547][ C1] ? batadv_tt_local_purge+0x10a/0x340 [ 696.579568][ C1] batadv_tt_local_purge+0x10a/0x340 [ 696.579594][ C1] batadv_tt_purge+0x35/0x9e0 [ 696.579617][ C1] ? process_scheduled_works+0xa25/0x1830 [ 696.579639][ C1] ? process_scheduled_works+0xa25/0x1830 [ 696.579663][ C1] process_scheduled_works+0xb02/0x1830 [ 696.579699][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.579724][ C1] ? assign_work+0x3d5/0x5e0 [ 696.579748][ C1] worker_thread+0xa50/0xfc0 [ 696.579785][ C1] kthread+0x388/0x470 [ 696.579801][ C1] ? __pfx_worker_thread+0x10/0x10 [ 696.579823][ C1] ? __pfx_kthread+0x10/0x10 [ 696.579840][ C1] ret_from_fork+0x51e/0xb90 [ 696.579864][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 696.579886][ C1] ? __switch_to+0xc7d/0x1450 [ 696.579907][ C1] ? __pfx_kthread+0x10/0x10 [ 696.579923][ C1] ret_from_fork_asm+0x1a/0x30 [ 696.579957][ C1] [ 696.822045][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 696.829047][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 696.838196][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.848388][ T31] Call Trace: [ 696.851704][ T31] [ 696.854680][ T31] vpanic+0x56c/0xa60 [ 696.858761][ T31] ? __pfx___schedule+0x10/0x10 [ 696.863642][ T31] ? __pfx_vpanic+0x10/0x10 [ 696.868763][ T31] ? __pfx_console_unlock+0x10/0x10 [ 696.873976][ T31] panic+0xc5/0xd0 [ 696.877717][ T31] ? __pfx_panic+0x10/0x10 [ 696.882337][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 696.887802][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 696.894004][ T31] watchdog+0x1023/0x1030 [ 696.898360][ T31] ? watchdog+0x21a/0x1030 [ 696.902802][ T31] kthread+0x388/0x470 [ 696.907052][ T31] ? __pfx_watchdog+0x10/0x10 [ 696.911755][ T31] ? __pfx_kthread+0x10/0x10 [ 696.916440][ T31] ret_from_fork+0x51e/0xb90 [ 696.921058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 696.926278][ T31] ? __switch_to+0xc7d/0x1450 [ 696.930989][ T31] ? __pfx_kthread+0x10/0x10 [ 696.935623][ T31] ret_from_fork_asm+0x1a/0x30 [ 696.940521][ T31] [ 696.943725][ T31] Kernel Offset: disabled [ 696.948057][ T31] Rebooting in 86400 seconds..