last executing test programs: 3.638688569s ago: executing program 1 (id=2410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet(0xa, 0x801, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffffc3bd7000fbdbdf250000e255", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r5, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.446541582s ago: executing program 1 (id=2414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x3a, "d2f1620200000058f3f99acdcb1e9b12112b2adaeab244fa0ec2525cf690944e879f34e0b6772808bb6f90"}}) close(r2) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b", 0x6e}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendfile(r4, r5, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r7, 0x8, 0x70bd30, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x40040) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.791772978s ago: executing program 0 (id=2425): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbca1d9f68846960e56de42944af030006000000000002004e2200000000000000000000000002000100000000000002004e22ac144ccfa04c2238d6f700000100140006000000"], 0x70}, 0x1, 0x7}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0x12, 0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000000)=0x5) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 2.669252291s ago: executing program 0 (id=2427): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b1b, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'netpci0\x00', {}, 0xffff}) socketpair(0x8, 0x6, 0x10000, &(0x7f0000000080)) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x40, 0xff, 0x2, 0xff, 0x8, 0x600}}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d002000ad3bd1af8324b095bead1e8c0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWRULE={0xd9, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1df9bd2b8b9d7877}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x0) 2.470694708s ago: executing program 1 (id=2430): r0 = socket$tipc(0x1e, 0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x38}}, 0x800) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000340)=0x20, 0x4) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001500)) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0xff, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000000040)) openat$cgroup_ro(r10, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) 2.128730875s ago: executing program 3 (id=2434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a0d83883fab9234f92ff5f9977"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "ef627af2b9495be1a98a5e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0736a7f008"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b5a851e261fcf48158e8b2f050"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "53f4ce037099"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "60a738b8f7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x2, 0x4}, 0x6) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x298, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "b45d5a00006d90ad5f49dfd60c4d32cdc7cee3799a0f1e2326a0de3009baf62563e538d7e9831b68919b7293f2a071d51b3add8a80402cde9a7187d019a0256a004194824bdb49ba574dd8f9dd3821e5d307d2838f2ada410835260a3c30653e4e4c9158d8ba4edfd5812771e236d0b7a91fe8233b5ce0d8368898d27d2f2efe9989b7b62e6c1e17bd6cdd0baaf1f379039466c9337296a8bffaa8a63083230494317afcdc6629fb069928b9f81280db2b74277d6c8e1637558ff002179acac859658e869f9adfd1c4fb38290d851e0057ce2c3a3e1b878db410246b6bd49aefe8463fae7b09468bbf2b63bc6d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ceeead8dd836332d305dfce4f6ff01c249a6de57d6b813566b09153bd3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x95}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff13e}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc11}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40814}, 0x4000080) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value, &(0x7f0000000800)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x844}, 0x24004080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a00), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x5bd7, 0x1, {{0x6, 0x4, 0x1, 0x10, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @broadcast, {[@end]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x98, r10, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x44084) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000c00)={0x0, 0x10001, 0x1, [0x6, 0x1, 0x4, 0x5, 0x9], [0x87, 0xa0, 0x8000000000000000, 0xb, 0x6, 0x0, 0xffffffff7fffffff, 0x9, 0xfffffffffffffff8, 0x8363, 0x4, 0x5, 0x7, 0x4, 0x80, 0x80000000, 0x7, 0x3, 0x7fffffffffffffff, 0x9, 0x9, 0x4, 0x7, 0x6, 0x7f, 0xfffffffffffff322, 0x6, 0x8, 0x80, 0x93, 0x5, 0x58d592d2, 0x838, 0x400, 0x1, 0x9a38, 0x7, 0x6, 0x3, 0x1, 0x80000000, 0x7fff, 0x401, 0x9, 0x8, 0x7, 0x3, 0x8, 0x7, 0x3, 0x0, 0x42d2f8b2, 0x9, 0x4, 0xfffffffffffffff8, 0x4, 0x5, 0x4, 0x4, 0x80, 0xfffffffffffffffe, 0x7, 0x3ff, 0x8, 0x10000, 0x8, 0xfffffffffffffff7, 0x2, 0x850, 0x5, 0x8, 0x59057da, 0xe4, 0x0, 0x101, 0xd4, 0x9, 0x9, 0x3, 0x7, 0xb, 0x0, 0x9, 0x6, 0x8000000000000000, 0xff, 0xffffffff854489fe, 0x8fb, 0x7, 0x8, 0x4, 0xf, 0x10001, 0x4, 0x79, 0x3, 0x2, 0x4c4, 0x2, 0x9, 0x8, 0x40, 0x3, 0x5, 0x2, 0x400, 0x8, 0x1317, 0x6, 0x3, 0x4, 0xb25, 0x0, 0x10, 0x0, 0x100, 0x6, 0x5, 0x7, 0x4, 0x100000001]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001040)={{r3}, {@val={r12}, @max}}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x120, r13, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8001}, 0x4040010) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x40, 0x0) ioctl$TUNSETVNETBE(r14, 0x400454de, &(0x7f0000001300)=0x1) socket$kcm(0x29, 0x2, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000054) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r13, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xa985}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1ff}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f0000001540)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x3, 0x0, 0xc, 0x1, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0x1, 0xa, 0x3, 0x18, 0xfffffffffffffff0}], &(0x7f0000001580)='syzkaller\x00', 0x3, 0x79, &(0x7f00000015c0)=""/121, 0x41000, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0xe, 0x2, 0xffffffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001880)=[{0x2, 0x1, 0x10, 0x8}, {0x3, 0x3, 0x7, 0x3}, {0x5, 0x4, 0x10, 0x6}, {0x1, 0x4, 0x9, 0x1}, {0x2, 0x5, 0x1, 0x7}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x4, 0xa, 0xc}, {0x5, 0x2, 0x4}], 0x10, 0x9}, 0x94) 2.037121245s ago: executing program 3 (id=2435): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000300), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002b0020", 0x2b}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x19c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x174, 0x8, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x81}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd0cbaa91c2228ef3a1f5608d551e5cb145c4cc5020eadb5670b8914490500e0"}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) splice(r0, &(0x7f0000000300)=0x5, r9, &(0x7f0000000340), 0x25f3, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc8, &(0x7f0000000040)=""/200, 0x0, 0x1d}, 0x94) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r11, 0x10f, 0x83, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 2.035585482s ago: executing program 2 (id=2436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) 1.926025625s ago: executing program 3 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a00010000000000000000008180800000001c000000000014000200fc000000000000000200000000000000140001"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.915372321s ago: executing program 2 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000280)) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) 1.843868114s ago: executing program 3 (id=2441): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c, 0x80800) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0x0, 0x800, 0x1, 0x7, '\x00', r2, r3, 0x0, 0x3, 0x5, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.806792654s ago: executing program 4 (id=2442): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x20000000) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @empty, 0x10000}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8980ca8395ccfda2e499b3f58100", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000300)={0x0, 0x0, 0x101, 0x14}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x1a, 0xf8, 0xd3, 0x30, 0x10, 0x0, 0x6, 0xfd, 0x5, 0x2, 0x3d, 0x0, 0x7b}, 0xe) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="9eb34a6e2afaa667845fb87cfac2ffb4331f2533b6fa6b0616c7a6f8a592dd1a295b39bd05038951bd80c88e39a90b2aaec416599cf3c79db4491d169815ffc48d9ff0ac5d03eacf82363f59e53c4bd29f78dbb5314060c19284eaa623a4d4"], 0x1ec}}, 0x80) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000b40)={0x0, 0x1}, &(0x7f0000000b80)=0xfffffffffffffe77) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="f78d9ca38fff4876340f773448412ba8683af33d0af415613d6a5f5d15a0f7dde57b083821ad288a77fc1b089861f452d122a55440363c3ab52525d6c6658607fafcbec3c4a0f1539be1f25fad310bc7d3f42799ec65e50b7978e2471393b46e87edc4c2d4d8843a21b22292f80d7627153a2f0bcabd20459d037afd7af1a96fe49027f9c99d4820397f72a1ea84977c56085c1a5caebe9dff0f00007afbc9e2a070455beba8529c8c56d815bd83ad8fcfd381ecc8f92b3f109d56c600"/206, 0xce}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000980)="e87022444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d7a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a210dff045b568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d3efb674c45e2a085060f1147440000000000000000", 0xd0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000014}, {0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000cc0)="d653028dac496e0fc9cf5b759aa6a114047640567f77b489c0fc9469aaf5deda7099adeca92a14d164570a61a471f3d222dd4285367b4b39aa902bb75e4d3361ba359ee1c77b80c61a17a371b2021444e907ac9b47aa1551e99908c32a73969f98571184be8e628ecd64497ac1cc5ce32c4e60b4a370dc6b3c83f70fe72f018d2aab4501903e331d3f5eb153836e325dac8605b4a2a31e9dd9f469a646363a8373d3bd36917c202fe249b74910b97a88a924d454e9d57c45dfdc8160a329dcf46ea4ecad6d776806f7075088f9", 0xcd}, {&(0x7f0000000dc0)="fa528f840aa1712c61c95f8307fcad1164c3c02119c279a31598d732f65c82757a055ad1f57bf3a16ae146355eb54e2495afb700178d1c6a01aeeed46c240c16c58852f509352ac3bbc72c57aa9c6e37e13bf811a5453ca7205cd18d88a2c391c657d2b61a4d083ebd5ee97c2d2354f1996bc953bbaecf18a9700192a6a62a89a510847ceaf1bf8e869dddc446a41d4bfe646619fd29d91768c093395ee25679661982d2ab4a3423b16e5eeb3300917c4c37c2", 0xb3}], 0x2, &(0x7f0000001140)=[@op={0x18}], 0x18, 0x880}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001180)="83e16dd1591cb88119893390d04ecf94c49258022e62df5217f247b659ebd01a4241a71aa9e1d07b5870bd01803f28b637e99aee5f1eb8b47bd68727e19043152da2b99eb1401036f7228779642bee4428510f723a3e382c461372ee79a959dd710fcb9c8fcea9e84ca2f1a6a67a6d5f684dfbf3b754d0696c65263f6fe9bf75abdb0c1dfd09d53a9104f94d0cb9c1ea295401ad3c0557522bd2c08cd91806e6cd3fe3e1ef38d2c375befcb6a6c557aa0192649a6baf42dce9e73611", 0xbc}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="64e3863c7950acd8da5659fe1e91a3988a390d48ef8b6a6f4938892a26fde89e76fb04560b5e19fb55493e47f9fa05a43436387c1de0fdbc96447ac655bc33fbfc079cc82d5acb70e3b56964739cdbe492f0731fb04193c0a0141a2ac342b20d937492ad7a79e4bd7344eed2b3bdea88a2fbf9727d8a05bc0b9b7173b6ec99b2010bfc2d94e8ee3f2307910be046033fe43788d4aa9415773d0c90041d1958e89f5deeb772e879f0", 0xa8}, {&(0x7f0000002980)="99b02fb2182a3df16a23332715bdd683540307d51256d1bb6fb58703bb87683dbd863bd5b4a6b355a88b42d19d46043b79069cd788ee8c9c42471104679ff9177cdfa6c419cd068f54e112a66399c5153b0d48b4c13feb32e11de34e030a0661852e1a621b827fa36cf2e94d7ddcc04f5538c8bb14d78d86802cc53f8fd2fb", 0x7f}, {&(0x7f0000002a00)="fd3b3ca7bb256e6a44b02347a9ad4ba9a1b00e33f89580bef10030cef3f32256da31205e544ce3b51eeb4e456aa2d69ec5c518fa6b23c1f63fd18e61a893b0e0a05d114f61571d4fde40586f90e771aa7d871468bf27cee119fc", 0x5a}, {&(0x7f0000002a80)="3e600d1696262b9ce723058d8899974d235f8f2aecbbee2fd2a8f6799e99dcea227333f26e67f2cf1062d45de213be8bc2570451f66699c0cdee1f1ec11a606a70347b051f55cd03a106cd15c809a29ee843598dc178002c2017b2d3869008b98e2891724ed98054dcd1f07858b07dda18de4a59620df621f39615437ae05197c90f5aa5c8efe527da3ce4a6eca215aae110f9369085c43469d70e6c330558dd01", 0xa1}], 0x6, 0x0, 0x0, 0x2008000}], 0x3, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c40)=""/96, 0x54}, {&(0x7f0000000200)=""/83, 0x53}], 0x2a6}, 0x2100) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) 1.75951785s ago: executing program 3 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20", @ANYRESHEX=r0], 0x110}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) syz_emit_ethernet(0x1f, &(0x7f0000000880)=ANY=[@ANYRES32=r0], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x8092}, 0x20000815) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) unshare(0x6a040000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/52, 0x34}, {&(0x7f0000000680)=""/82, 0x52}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/21, 0x15}], 0x7}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$caif_stream(0x25, 0x1, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESDEC=r0, @ANYRESDEC=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0xfffffffffffffffd, 0xba41, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x8001, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x7fffffff, 0x5}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) 1.700755667s ago: executing program 2 (id=2444): r0 = socket(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {0x0, 0x9}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000005000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.677079394s ago: executing program 0 (id=2445): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x0, 0x1}) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f62, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004070}, 0x810) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0xffffff3e) 1.595544208s ago: executing program 4 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c000480050003000500000008000200010000000400088008000100ffffffff24000c8004000b801c000b80080009004caadf0908000a00ee65000008000a0060640000a8000c801c000b"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x240480c0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008000300000000001400020076657468305f746f5f626f6e64000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 1.363995995s ago: executing program 1 (id=2447): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x85}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) shutdown(r0, 0x1) 1.285027641s ago: executing program 4 (id=2448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}]}]}, 0x30}}, 0x4000050) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 1.215850029s ago: executing program 0 (id=2449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x1, 0x0, 0x8, r0, 0x9, '\x00', 0x0, r0, 0x4, 0x1, 0x3, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0x5, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x4}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f0", 0x5}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000000c0), &(0x7f0000000080)=@udp, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091118c000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 64) r9 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast2, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x2, 0x1, 0x1}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) (async) accept(r5, &(0x7f0000000340)=@qipcrtr, &(0x7f00000003c0)=0x80) 1.068178712s ago: executing program 4 (id=2450): r0 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX=r0], 0x3238) (async) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX=r0], 0x3238) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, 0x0, &(0x7f0000000040)) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000080)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x28, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}}, 0x100) 1.066280293s ago: executing program 0 (id=2451): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf251000000005001100f100000008000300", @ANYRES32=r1, @ANYBLOB="0c00060001000000010000000500110009000000050011008100000008000300", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0500110004000000"], 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f00000000c0)="4b0003000000", 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum}) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000000706010100000000000000000300000805000100070000000900020073797a310000000055f6725d6961606e75647ae6285b920d9824faf2909bb75046fbe529bcc4690cfe6afcfcf424f685098b66628412c4d0cda7086411b02d2eb10994e371fab3c3aa532a2d80d56445b27c5a94f35205bbcf8f6fb61bd826a3fcecac40c2e91e59dd39593b06e03f09262365739fa30fab2fd7741af627373c0c491ed777c92b5a21271a6d677df6b5448f0303603efa3332ff62d62cdfe1475cb43ba86a129aaf5037d679c373f5d6da12378aad329bd4a079fd2ad5d997bb0d51baca8d7ddf3e8073c645101e387dac5b87179eaeaab4bf4514ed9358b040bfd2c1ea0b4ba48cd141c4cc32f3e255a3ccaac72d3753d7017eadea416a50b2b6cc877b0170d26e9aaf715d013f494b22732938cfeeccd778eb698f445ace9b0d6d4132cd189967f0bc702d198a4b72ebe4b42a15ec94bb3cfa590ea53215205903e407c2633f61344e25b203850b07bee69867ca8b8a42934b7a47ea7b2c3ec23034ed430cbd0d3c9606f49dac3dc2"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c080) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1.009777532s ago: executing program 4 (id=2452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0xfffffffffffffdd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0), 0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) sendmsg$tipc(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004050}, 0x60040804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$bt_hci(r8, &(0x7f0000000040), 0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r14, 0xffff}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)={r7, 0x1, 0xa3, "3dc75e72126bcbcf6553de64b09ec6bdb34e421bb16649b8fc51d0afe0b068972d36077b3c54c8b8acb1bf1216bd2711cf6a27ac25a700a95072e7201c02ff53dba8c506e8f146571852e62a6d138d4418242b823bdaff64c02222d7567f788c414037c632991af86a85d5c41f6ba624a30d3d50455fba9d3f35ec2bbd6a5b07cbbdbe456674192cab5a575db250f1efe9ace87467ea85fd1800d9449ecdfb4f1c8818"}, 0xab) 753.264441ms ago: executing program 0 (id=2453): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) r2 = socket$inet(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r2, &(0x7f0000000180)='GPL\x00', 0x90000, &(0x7f00000001c0)={@align=0x9, {0x1, 0x5cbb, 0x6, 0xd6}}, 0x9b, &(0x7f0000000280), &(0x7f00000002c0)=0x1}) ioctl$int_out(r3, 0x5460, &(0x7f00000003c0)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) bind$ax25(r4, &(0x7f0000000340)={{0x3, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x13, 0x4) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000040)=0x8000, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0x5da0adabf10b8a87, 0x4) 439.744613ms ago: executing program 2 (id=2454): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000340)={0x7, 'veth1_to_bond\x00', {0x5}, 0x3a}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000340)={0x7, 'veth1_to_bond\x00', {0x5}, 0x3a}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d8bc2", 0x3}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xd}, 0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xd}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @private2, 0x5}}, [0x5c, 0x2, 0x3, 0x1, 0xffffffffffff0000, 0xfffffffffffffffe, 0xab, 0x8, 0x1, 0xfff, 0xd, 0x3e938, 0x5, 0x6, 0xb4]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0xffffff7f, 0x8, 0x62, 0x37a, 0x8, 0x1ff, 0x7fffffff, {r3, @in6={{0xa, 0x4e22, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x237}}, 0x1, 0x6, 0x9, 0x200, 0x3}}, &(0x7f00000002c0)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0xffffff7f, 0x8, 0x62, 0x37a, 0x8, 0x1ff, 0x7fffffff, {r3, @in6={{0xa, 0x4e22, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x237}}, 0x1, 0x6, 0x9, 0x200, 0x3}}, &(0x7f00000002c0)=0xb0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40080) 397.004196ms ago: executing program 3 (id=2455): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000013c0)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000200a}, 0xc0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x20000000) 253.017899ms ago: executing program 1 (id=2456): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 112.799874ms ago: executing program 2 (id=2457): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaaaaaa86dd606410a600080000fe80000000000000000000000000001efe8000000000000000000df9851e084800f461"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) mmap(&(0x7f000043c000/0x4000)=nil, 0x4000, 0xa, 0x2010, 0xffffffffffffffff, 0x2d76000) 112.390903ms ago: executing program 1 (id=2458): pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="00000a00bbbbbbbbbbbb000000000000810001000800454100210067005a705d487643624f0d10ee665000"/55], 0x37) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec0fec0000000000000000000000010ff020000000000000000000000000001"], 0x340a) 61.988081ms ago: executing program 4 (id=2459): syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500002400000000002f90780a010101000000013f0088be00109078944523b357010700"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, [@NL80211_ATTR_KEYS={0x84, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fffd0fa6b0"}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "af495fdb8e89e5f6c565dcfae5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3033a1b917f0e889fd99723653"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "904cae54"}, @NL80211_KEY_SEQ={0x10, 0x4, "9f405ee2720102fd72243e0e"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, 'h'}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x5, 0x0, {0x4, 0xf45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x8}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x0, 0x5, 0x0, {0x6, 0xb, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x6, 0x1, 0xc}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x88, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x814}, 0x4000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) close(0x3) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.705'. [ 155.890384][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 155.898533][ C1] lec:lec_tx_timeout: lec0 [ 155.898556][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.904862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 155.914505][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.931803][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.073358][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 156.191773][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 156.374188][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.411994][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.484726][ T8807] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 157.553465][ T8807] team0: Port device veth1 added [ 157.694068][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.722'. [ 157.720131][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.722'. [ 157.780668][ T8819] veth0_to_bridge: entered promiscuous mode [ 157.838708][ T8816] veth0_to_bridge: left promiscuous mode [ 158.369856][ T29] audit: type=1800 audit(1775793756.150:7): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.729" name="memory.events" dev="tmpfs" ino=773 res=0 errno=0 [ 158.451415][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.618755][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 158.883027][ T8864] block nbd2: not configured, cannot reconfigure [ 158.950653][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.061604][ T8875] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 159.170046][ T8875] veth3: entered allmulticast mode [ 159.215437][ T8875] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 159.412345][ T8890] syzkaller1: entered promiscuous mode [ 159.432785][ T8890] syzkaller1: entered allmulticast mode [ 159.478190][ T8890] IPVS: length: 21 != 8 [ 159.538307][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.073601][ T8918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.620710][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.920320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 160.928467][ C1] lec:lec_tx_timeout: lec0 [ 160.933114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 161.016701][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.363172][ T8971] __nla_validate_parse: 58 callbacks suppressed [ 161.363194][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.761'. [ 161.463258][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.761'. [ 161.504515][ T8978] vlan2: entered promiscuous mode [ 161.509605][ T8978] team0: entered promiscuous mode [ 161.562794][ T8978] team_slave_0: entered promiscuous mode [ 161.568975][ T8978] team_slave_1: entered promiscuous mode [ 161.651329][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.659505][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.779279][ T8983] netlink: 'syz.2.764': attribute type 8 has an invalid length. [ 161.790103][ T8985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.763'. [ 161.808048][ T8983] netlink: 'syz.2.764': attribute type 4 has an invalid length. [ 161.923477][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 162.107377][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.769'. [ 162.124003][ T9002] xt_hashlimit: size too large, truncated to 1048576 [ 162.633972][ T9033] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 162.696419][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.755193][ T9033] bond3: entered promiscuous mode [ 162.771509][ T9033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.867256][ T9011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 162.877387][ T9011] netlink: 43 bytes leftover after parsing attributes in process `syz.1.770'. [ 162.888260][ T9011] netlink: 'syz.1.770': attribute type 6 has an invalid length. [ 162.896782][ T9011] netlink: 'syz.1.770': attribute type 5 has an invalid length. [ 162.905063][ T9011] netlink: 43 bytes leftover after parsing attributes in process `syz.1.770'. [ 162.923458][ T9011] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 162.992977][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.214829][ T9041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.395253][ T9011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 163.454065][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.480632][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.530554][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.539533][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.580964][ T9054] bond5: option mode: unable to set because the bond device is up [ 163.597825][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.726004][ T29] audit: type=1804 audit(1775793761.510:8): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.781" name="/newroot/177/memory.events" dev="tmpfs" ino=924 res=1 errno=0 [ 163.751062][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 163.763118][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.810649][ T29] audit: type=1800 audit(1775793761.570:9): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.781" name="memory.events" dev="tmpfs" ino=924 res=0 errno=0 [ 163.867508][ T29] audit: type=1804 audit(1775793761.570:10): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.781" name="/newroot/177/memory.events" dev="tmpfs" ino=924 res=1 errno=0 [ 164.005404][ T9074] raw_sendmsg: syz.4.786 forgot to set AF_INET. Fix it! [ 164.199933][ T9084] : renamed from veth0_to_bond (while UP) [ 164.264831][ T9089] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.307014][ T9091] openvswitch: netlink: Flow key attr not present in new flow. [ 164.540511][ T9105] netlink: 'syz.3.796': attribute type 32 has an invalid length. [ 164.690859][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.327235][ T9146] netlink: 'syz.3.804': attribute type 21 has an invalid length. [ 165.810612][ T796] net_ratelimit: 3 callbacks suppressed [ 165.810631][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.940300][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 165.948504][ C1] lec:lec_tx_timeout: lec0 [ 165.953313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 166.162181][ T9168] : entered promiscuous mode [ 166.567799][ T9181] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 166.591350][ T9181] tipc: Resetting bearer [ 166.790995][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.799618][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.850736][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.912148][ T9196] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 166.995851][ T9196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.097365][ T9199] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 167.336053][ T9214] netlink: 'syz.4.824': attribute type 89 has an invalid length. [ 167.895972][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.935673][ T9249] netlink: 'syz.4.835': attribute type 11 has an invalid length. [ 167.964928][ T9249] __nla_validate_parse: 38 callbacks suppressed [ 167.964947][ T9249] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.835'. [ 167.992219][ T9247] netlink: 'syz.3.834': attribute type 9 has an invalid length. [ 168.930530][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.337586][ T9276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.372433][ T9276] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 169.380218][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.465121][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.565189][ T9277] netlink: 168 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.627917][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.655240][ T9283] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 169.668680][ T9283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.843'. [ 169.690917][ T9283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 169.828170][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.957828][ T9290] netlink: 'syz.2.845': attribute type 13 has an invalid length. [ 169.965892][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 169.980913][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.018293][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.026949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.219790][ T9299] ªªªªª: renamed from virt_wifi0 [ 170.398400][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.844'. [ 170.658638][ T9310] netlink: 'syz.0.852': attribute type 4 has an invalid length. [ 170.903433][ T9308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.960292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 170.968363][ T9308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.978813][ C1] lec:lec_tx_timeout: lec0 [ 170.990366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.031183][ T6767] net_ratelimit: 1 callbacks suppressed [ 171.031202][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.222737][ T9308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.233967][ T9308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.253872][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.290030][ T9330] tipc: Started in network mode [ 171.295173][ T9330] tipc: Node identity 7e196a7ed2d2, cluster identity 4711 [ 171.302796][ T9330] tipc: Enabled bearer , priority 0 [ 171.310781][ T9330] syzkaller0: entered promiscuous mode [ 171.316548][ T9330] syzkaller0: entered allmulticast mode [ 171.449664][ T9308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.480398][ T9308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.590732][ T9308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.601406][ T9308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.641585][ T9315] tipc: Resetting bearer [ 171.647637][ T9315] tipc: Resetting bearer [ 171.674233][ T9331] tipc: Resetting bearer [ 171.692099][ T9331] tipc: Disabling bearer [ 171.900811][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.921904][ T9326] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 171.937343][ T8218] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.945909][ T8218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.018741][ T8218] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.059449][ T8218] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.083235][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.109421][ T175] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.119765][ T175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.177804][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.186628][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.531308][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.775943][ T9367] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.090601][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.255363][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 173.854268][ T9388] __nla_validate_parse: 7 callbacks suppressed [ 173.854289][ T9388] netlink: 220 bytes leftover after parsing attributes in process `syz.0.870'. [ 174.133171][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.452434][ T9391] xt_hashlimit: size too large, truncated to 1048576 [ 175.105161][ T9403] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 175.185488][ T9404] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 175.231486][ T9411] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.876'. [ 175.310678][ T9410] netlink: 'syz.4.875': attribute type 10 has an invalid length. [ 175.320079][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 175.335162][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 175.396564][ T9414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'. [ 175.450087][ T9416] netlink: 260 bytes leftover after parsing attributes in process `syz.1.878'. [ 175.523472][ T9417] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 175.531849][ T9416] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 175.597659][ T6759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.879315][ T9425] syzkaller1: entered promiscuous mode [ 175.900345][ T9425] syzkaller1: entered allmulticast mode [ 176.000343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.008469][ C1] lec:lec_tx_timeout: lec0 [ 176.013626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.234683][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.405427][ T9292] Set syz1 is full, maxelem 65536 reached [ 176.507041][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 176.612954][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 176.893538][ T9460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.014603][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.032989][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.153727][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 177.162876][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 177.250992][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.339286][ T9468] bond2: entered allmulticast mode [ 177.361678][ T9468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.379378][ T9465] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 177.651087][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.662251][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.712481][ T9477] netlink: 'syz.3.893': attribute type 21 has an invalid length. [ 177.943264][ T9499] Bluetooth: MGMT ver 1.23 [ 178.229049][ T9509] : renamed from bond_slave_0 (while UP) [ 178.292698][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.300930][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.591808][ T9534] x_tables: duplicate underflow at hook 1 [ 178.609430][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.717425][ T9528] bridge_slave_0 (unregistering): left allmulticast mode [ 178.725369][ T9528] bridge_slave_0 (unregistering): left promiscuous mode [ 178.733865][ T9528] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.764091][ T9535] dvmrp0: entered allmulticast mode [ 178.810520][ T9539] syzkaller0: entered promiscuous mode [ 178.816054][ T9539] syzkaller0: entered allmulticast mode [ 178.837801][ T9523] delete_channel: no stack [ 178.920609][ T9547] __nla_validate_parse: 2 callbacks suppressed [ 178.920628][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 178.952348][ T9544] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 179.007336][ T9545] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 179.363648][ T9562] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.915'. [ 179.470598][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 180.338614][ T9544] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 180.340190][ T9551] syzkaller0: entered promiscuous mode [ 180.354941][ T9551] syzkaller0: entered allmulticast mode [ 180.364127][ T9554] tipc: Enabled bearer , priority 0 [ 180.408757][ T9564] tipc: Resetting bearer [ 180.514292][ T9547] tipc: Resetting bearer [ 180.583033][ T9547] tipc: Disabling bearer [ 180.802871][ T9604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.923'. [ 180.842817][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 181.020379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 181.028525][ C1] lec:lec_tx_timeout: lec0 [ 181.033368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.054036][ T9616] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.331698][ T982] net_ratelimit: 4 callbacks suppressed [ 181.331724][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.422993][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.494962][ T9631] delete_channel: no stack [ 181.531246][ T9631] delete_channel: no stack [ 181.630780][ T9646] netlink: 72 bytes leftover after parsing attributes in process `syz.0.935'. [ 181.660600][ T9646] netlink: 72 bytes leftover after parsing attributes in process `syz.0.935'. [ 181.693129][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 182.296184][ T9682] caif0: entered promiscuous mode [ 182.301756][ T9682] caif0: entered allmulticast mode [ 182.450739][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.476354][ T9693] netlink: 'syz.2.947': attribute type 75 has an invalid length. [ 182.601229][ T9697] netlink: 'syz.2.951': attribute type 30 has an invalid length. [ 182.663392][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 182.772116][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.781085][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.824484][ T9704] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 182.952125][ T9712] delete_channel: no stack [ 182.974392][ T9706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.985460][ T9706] bond5: (slave bond6): making interface the new active one [ 182.993755][ T9706] bond5: (slave bond6): Enslaving as an active interface with an up link [ 183.012533][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.953'. [ 183.033716][ T9704] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 183.065197][ T9719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.234293][ T9732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.259858][ T9732] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 183.323782][ T9732] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 183.373359][ T9732] bond3 (unregistering): Released all slaves [ 183.411044][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.439867][ T9750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.472655][ T9743] syzkaller1: entered promiscuous mode [ 183.478208][ T9743] syzkaller1: entered allmulticast mode [ 183.516912][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.719967][ T9764] erspan0: entered promiscuous mode [ 183.732295][ T9764] gretap0: entered promiscuous mode [ 183.746718][ T9764] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 183.771559][ T9764] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 183.997883][ T9780] __nla_validate_parse: 4 callbacks suppressed [ 183.997909][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 184.286150][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 184.530640][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.692090][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.896722][ T9820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'. [ 185.163951][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 185.184150][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 185.931641][ T9885] ªªªªª: renamed from virt_wifi0 [ 186.040304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 186.048408][ C1] lec:lec_tx_timeout: lec0 [ 186.053342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.137371][ T9893] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 186.194094][ T9893] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.997'. [ 186.230678][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 186.280488][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 186.286924][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.998'. [ 186.419683][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 186.453054][ T982] net_ratelimit: 1 callbacks suppressed [ 186.453070][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.616181][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.773926][ T9919] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 186.877264][ T9926] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 186.929294][ T9919] bond8: entered promiscuous mode [ 186.937603][ T9919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.599384][ T9957] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 187.652091][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.890874][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.070804][ T9978] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 188.275323][ T9979] syzkaller0: entered promiscuous mode [ 188.281959][ T9979] syzkaller0: entered allmulticast mode [ 188.370978][ T9984] syzkaller0: entered promiscuous mode [ 188.386875][ T9984] syzkaller0: entered allmulticast mode [ 188.452953][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.532144][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.633092][ T9988] syzkaller1: entered promiscuous mode [ 188.638806][ T9988] syzkaller1: entered allmulticast mode [ 188.677463][ T9998] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.689212][ T9998] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 188.696916][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.800997][T10011] macvlan2: entered promiscuous mode [ 188.806876][T10011] macvlan2: entered allmulticast mode [ 188.813835][T10011] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 188.981282][T10019] netlink: 'syz.3.1030': attribute type 33 has an invalid length. [ 189.003584][T10019] __nla_validate_parse: 10 callbacks suppressed [ 189.003603][T10019] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1030'. [ 189.095852][T10019] `: renamed from team0 (while UP) [ 189.205962][T10028] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1032'. [ 189.621336][T10049] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 189.731678][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.815354][T10051] syzkaller0: entered promiscuous mode [ 189.856043][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.106217][T10077] netlink: 'syz.4.1046': attribute type 9 has an invalid length. [ 190.781816][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.070312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 191.078462][ C1] lec:lec_tx_timeout: lec0 [ 191.083110][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 191.322197][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'. [ 191.340814][T10082] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 191.372468][T10093] macsec1: entered promiscuous mode [ 191.496056][T10100] syzkaller0: entered promiscuous mode [ 191.521127][ T982] net_ratelimit: 1 callbacks suppressed [ 191.521143][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.534905][T10100] 0: reclassify loop, rule prio 0, protocol 800 [ 191.537462][T10100] netlink: 'syz.3.1052': attribute type 8 has an invalid length. [ 191.547103][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 191.560056][T10099] veth0_to_bond: left allmulticast mode [ 191.578628][T10099] veth0_to_bond: left promiscuous mode [ 191.584482][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 191.598229][T10099] bridge3: port 1(veth0_to_bond) entered disabled state [ 191.645070][T10099] bond0: (slave bond_slave_0): Releasing backup interface [ 191.677143][T10099] bond0: (slave bond_slave_1): Releasing backup interface [ 191.722406][T10099] `: Port device team_slave_0 removed [ 191.732640][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.744771][T10099] `: Port device team_slave_1 removed [ 191.754257][T10099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.772262][T10099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.810813][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.831875][T10099] tipc: Resetting bearer [ 191.840408][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.857437][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 191.900376][T10109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.051116][T10117] syzkaller0: entered promiscuous mode [ 192.087298][T10117] syzkaller0: entered allmulticast mode [ 192.315926][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 192.373588][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 192.403715][T10140] `: Device macsec1 is already an upper device of the team interface [ 192.626653][T10152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.635053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.713956][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.739832][T10158] bond0: (slave rose0): Enslaving as an active interface with an up link [ 192.833059][T10163] syzkaller0: entered promiscuous mode [ 192.860579][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.900338][T10163] syzkaller0: entered allmulticast mode [ 192.947776][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 193.002325][T10163] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 193.380864][ T5839] block nbd0: Receive control failed (result -32) [ 193.489444][T10211] syzkaller0: entered promiscuous mode [ 193.495374][T10211] syzkaller0: entered allmulticast mode [ 193.660805][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.856320][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.891228][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.013314][T10237] netlink: 'syz.1.1084': attribute type 11 has an invalid length. [ 194.048533][T10237] netlink: 'syz.1.1084': attribute type 23 has an invalid length. [ 194.071018][T10237] __nla_validate_parse: 3 callbacks suppressed [ 194.071035][T10237] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1084'. [ 194.087441][T10240] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 194.136998][T10240] bond8: entered promiscuous mode [ 194.142337][T10240] bond8: entered allmulticast mode [ 194.149054][T10240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 194.260767][T10240] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 194.280491][T10240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1085'. [ 194.297048][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.309478][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316977][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.358682][T10255] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1088'. [ 194.442030][T10255] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 194.454374][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 194.461897][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 194.479749][T10259] vlan2: entered promiscuous mode [ 194.489738][T10259] gretap0: entered promiscuous mode [ 194.641338][T10260] vlan2: entered promiscuous mode [ 194.840495][T10281] netlink: 'syz.1.1093': attribute type 2 has an invalid length. [ 194.867826][T10281] netlink: 'syz.1.1093': attribute type 2 has an invalid length. [ 194.890529][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 194.908441][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 195.360982][T10313] netlink: 'syz.2.1102': attribute type 13 has an invalid length. [ 195.360982][T10312] netlink: 'syz.2.1102': attribute type 13 has an invalid length. [ 195.580028][T10325] IPVS: Error connecting to the multicast addr [ 195.937566][T10352] tun0: tun_chr_ioctl cmd 35111 [ 195.961923][T10352] tun0: tun_chr_ioctl cmd 1074812117 [ 196.441150][T10376] syzkaller0: entered promiscuous mode [ 196.446881][T10376] syzkaller0: entered allmulticast mode [ 196.514574][T10380] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.1118'. [ 196.586350][T10380] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.1118'. [ 196.640828][T10380] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.1118'. [ 196.850279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 196.858456][ C1] lec:lec_tx_timeout: lec0 [ 196.863505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.997510][T10409] vlan2: entered promiscuous mode [ 197.011471][T10411] net_ratelimit: 4 callbacks suppressed [ 197.011506][T10411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.013315][T10409] virt_wifi0: entered promiscuous mode [ 197.017666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.043304][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.070734][T10398] netlink: 'syz.0.1114': attribute type 14 has an invalid length. [ 197.220362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.229012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.334066][ T6759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.630345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.638721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.060628][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.279870][T10474] openvswitch: netlink: IP tunnel dst address not specified [ 199.000709][T10506] nbd3: detected capacity change from 0 to 63 [ 199.011285][ T5933] IPVS: starting estimator thread 0... [ 199.034664][ T51] block nbd3: Receive control failed (result -32) [ 199.054671][ T5825] block nbd3: Dead connection, failed to find a fallback [ 199.063209][ T5825] block nbd3: shutting down sockets [ 199.069994][ T5825] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.081292][ T5825] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.089839][ T5825] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.101066][ T5825] Buffer I/O error on dev nbd3, logical block 1, async page read [ 199.109036][ T5825] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.119503][ T5825] Buffer I/O error on dev nbd3, logical block 2, async page read [ 199.124719][T10511] IPVS: using max 31 ests per chain, 74400 per kthread [ 199.130862][ T5825] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.144294][ T5825] Buffer I/O error on dev nbd3, logical block 3, async page read [ 199.185958][ T5825] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.205531][ T5825] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.246339][ T5825] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.295972][T10525] __nla_validate_parse: 36 callbacks suppressed [ 199.295991][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 199.306419][ T5825] Buffer I/O error on dev nbd3, logical block 1, async page read [ 199.323599][ T5825] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.334998][ T5825] Buffer I/O error on dev nbd3, logical block 2, async page read [ 199.344587][ T5825] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.355807][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 199.367981][ T5825] Buffer I/O error on dev nbd3, logical block 3, async page read [ 199.375972][ T5825] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.386029][ T5825] Buffer I/O error on dev nbd3, logical block 0, async page read [ 199.390978][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 199.397861][ T5825] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.414208][ T5825] Buffer I/O error on dev nbd3, logical block 1, async page read [ 199.428891][ T5825] ldm_validate_partition_table(): Disk read failed. [ 199.436265][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 199.446066][ T5825] Dev nbd3: unable to read RDB block 0 [ 199.456197][ T5825] nbd3: unable to read partition table [ 199.508272][ T5825] ldm_validate_partition_table(): Disk read failed. [ 199.521805][ T5825] Dev nbd3: unable to read RDB block 0 [ 199.565500][ T5825] nbd3: unable to read partition table [ 199.664317][T10525] team0: Port device team_slave_0 removed [ 199.694520][T10538] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 199.727350][T10538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.810545][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 199.897870][T10548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1153'. [ 199.983570][T10550] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 200.007855][T10553] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 200.025973][T10553] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1154'. [ 200.056266][T10550] hmac(sha224): entered promiscuous mode [ 200.071501][T10553] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 200.089679][T10553] netlink: 'syz.2.1154': attribute type 8 has an invalid length. [ 200.094233][T10557] netlink: 'syz.2.1154': attribute type 16 has an invalid length. [ 200.114918][T10553] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1154'. [ 200.124496][T10557] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1154'. [ 200.401436][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 200.457525][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 200.568747][T10588] vxcan2: entered allmulticast mode [ 201.094616][T10589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.471305][T10606] bond9: Unable to set up delay as MII monitoring is disabled [ 201.529444][T10606] bond9 (unregistering): Released all slaves [ 201.890396][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 201.898609][ C1] lec:lec_tx_timeout: lec0 [ 201.903489][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 202.017158][T10641] x_tables: duplicate underflow at hook 2 [ 202.212949][ T42] net_ratelimit: 17 callbacks suppressed [ 202.212966][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.455608][ T6772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.769174][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.777578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.197517][T10674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.255550][T10694] syzkaller0: entered promiscuous mode [ 203.264101][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.273684][T10694] syzkaller0: entered allmulticast mode [ 203.286642][T10694] 0: reclassify loop, rule prio 0, protocol 700 [ 203.410617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.419075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.271142][T10747] can: request_module (can-proto-5) failed. [ 204.290968][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.947425][T10770] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 205.017327][T10773] __nla_validate_parse: 10 callbacks suppressed [ 205.017346][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 205.035878][T10770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.054935][T10774] bond5: (slave dummy0): making interface the new active one [ 205.079142][T10774] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 205.320128][T10770] bond5 (unregistering): (slave dummy0): Releasing active interface [ 205.372467][T10789] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1214'. [ 205.379508][T10770] bond5 (unregistering): Released all slaves [ 205.495514][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 205.531030][T10794] sctp: [Deprecated]: syz.1.1217 (pid 10794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.531030][T10794] Use struct sctp_sack_info instead [ 205.693194][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 206.031473][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 206.033750][T10823] sctp: [Deprecated]: syz.4.1224 (pid 10823) Use of int in max_burst socket option. [ 206.033750][T10823] Use struct sctp_assoc_value instead [ 206.041786][T10827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1225'. [ 206.112319][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1224'. [ 206.267753][T10840] syzkaller0: entered promiscuous mode [ 206.273710][T10840] syzkaller0: entered allmulticast mode [ 206.349425][T10842] sctp: [Deprecated]: syz.4.1229 (pid 10842) Use of int in max_burst socket option. [ 206.349425][T10842] Use struct sctp_assoc_value instead [ 206.394689][T10842] sctp: [Deprecated]: syz.4.1229 (pid 10842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.394689][T10842] Use struct sctp_sack_info instead [ 206.610433][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 206.616544][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 206.624554][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 206.624641][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 206.755229][T10851] bond0: (slave sit0): Error: Device type is different from other slaves [ 206.910346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 206.918428][ C1] lec:lec_tx_timeout: lec0 [ 206.923447][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.031592][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 207.112844][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1237'. [ 207.170615][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'. [ 207.239298][T10867] ip6gre1: entered promiscuous mode [ 207.280442][T10867] ip6gre1: entered allmulticast mode [ 207.333995][T10880] netlink: 'syz.4.1240': attribute type 10 has an invalid length. [ 207.381504][T10880] 8021q: adding VLAN 0 to HW filter on device ` [ 207.410541][ T6767] net_ratelimit: 10 callbacks suppressed [ 207.410561][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.438035][T10880] bond0: (slave `): Enslaving as an active interface with an up link [ 207.482278][T10883] x_tables: duplicate underflow at hook 2 [ 207.633546][T10888] tipc: Failed to remove unknown binding: 66,0,0/0:384432544/384432545 [ 207.704004][T10888] tipc: Failed to remove unknown binding: 66,0,0/0:384432544/384432545 [ 207.961982][T10895] ieee802154 phy0 wpan0: encryption failed: -90 [ 208.212807][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.392806][T10910] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 208.455702][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.563195][T10920] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 208.847653][T10930] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 208.953982][T10934] openvswitch: netlink: IP tunnel dst address not specified [ 209.043375][T10932] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 209.070762][T10932] tipc: Resetting bearer [ 209.242840][T10950] batman_adv: batadv0: Adding interface: gretap2 [ 209.250856][T10950] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.287191][T10950] batman_adv: batadv0: Interface activated: gretap2 [ 209.487565][T10958] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 209.500608][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.663392][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.210772][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.290481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.075753][T11018] __nla_validate_parse: 4 callbacks suppressed [ 211.075771][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 211.153713][T11018] ipvlan1: entered allmulticast mode [ 211.159085][T11018] bond0: entered allmulticast mode [ 211.198295][T11018] `: entered allmulticast mode [ 211.209280][T11030] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1282'. [ 211.210868][T11029] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1282'. [ 211.228152][T11018] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 211.236001][T11018] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.308182][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 211.317467][T11037] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1280'. [ 211.619843][T11047] SET target dimension over the limit! [ 211.764680][T11057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.940317][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 211.948454][ C1] lec:lec_tx_timeout: lec0 [ 211.953284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 212.820875][T11066] netlink: 'syz.4.1292': attribute type 12 has an invalid length. [ 212.850834][ T6767] net_ratelimit: 3 callbacks suppressed [ 212.850852][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.929656][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.988200][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 213.024309][T11074] netlink: 'syz.0.1295': attribute type 8 has an invalid length. [ 213.224115][T11080] tipc: Resetting bearer [ 213.240062][T11080] tipc: Resetting bearer [ 213.301153][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.309682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.328682][T11081] dvmrp1: entered allmulticast mode [ 213.358440][T11097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.367008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.531619][T11074] tipc: Resetting bearer [ 213.792562][T11110] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1302'. [ 213.894489][T11117] xt_hashlimit: size too large, truncated to 1048576 [ 214.771505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.779688][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.203330][T11152] syz_tun: entered allmulticast mode [ 215.420748][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.591161][T11166] x_tables: duplicate underflow at hook 3 [ 215.637054][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 215.767636][T11166] veth0_to_hsr: entered promiscuous mode [ 215.970119][T11182] netlink: 'syz.0.1319': attribute type 6 has an invalid length. [ 216.002328][T11182] netlink: 'syz.0.1319': attribute type 7 has an invalid length. [ 216.022600][T11182] netlink: 'syz.0.1319': attribute type 8 has an invalid length. [ 216.691107][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.842004][T11209] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 216.932783][T11209] bond0: (slave dummy0): Releasing backup interface [ 216.970336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 216.978387][ C1] lec:lec_tx_timeout: lec0 [ 216.984370][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 217.017381][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'. [ 217.033765][T11209] dummy0: entered promiscuous mode [ 217.066265][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'. [ 217.086311][T11209] `: Port device dummy0 added [ 217.970992][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.490744][T11277] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1335'. [ 218.505899][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 218.711342][T11289] macsec1: entered allmulticast mode [ 218.716704][T11289] erspan0: entered allmulticast mode [ 218.790068][T11289] erspan0: left allmulticast mode [ 218.834414][T11292] vlan2: entered allmulticast mode [ 218.840183][T11292] bridge0: port 3(vlan2) entered blocking state [ 218.857195][T11292] bridge0: port 3(vlan2) entered disabled state [ 218.870583][T11292] vlan2: entered promiscuous mode [ 219.152154][T11310] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 219.173544][T11310] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1342'. [ 219.192729][T11310] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1342'. [ 219.261606][ T6767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.271618][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.282498][T11310] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1342'. [ 220.127218][T11352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.356114][T11352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.619199][T11352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.758884][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 220.794284][T11352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.805672][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 220.842989][T11393] IPv6: NLM_F_REPLACE set, but no existing node found! [ 221.015149][ T127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.098999][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.135722][T11396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.180879][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.235315][ T8220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.309663][ T1090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.364855][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 221.385529][ T1090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.646475][T11434] syzkaller0: entered promiscuous mode [ 221.661221][T11434] syzkaller0: entered allmulticast mode [ 222.000287][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.008395][ C1] lec:lec_tx_timeout: lec0 [ 222.013355][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.072849][T11461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.153864][T11461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.244894][T11461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.267518][T11471] netlink: 'syz.0.1374': attribute type 8 has an invalid length. [ 222.346200][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.454224][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.519392][T11483] netlink: 'syz.2.1376': attribute type 2 has an invalid length. [ 222.592329][T11490] __nla_validate_parse: 1 callbacks suppressed [ 222.592347][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 222.609085][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'. [ 222.676013][T11483] !: entered promiscuous mode [ 223.414847][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 223.490450][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.495794][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 223.581525][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.589492][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.693018][T11544] netlink: 'syz.2.1384': attribute type 4 has an invalid length. [ 223.764170][T11530] netlink: 'syz.2.1384': attribute type 4 has an invalid length. [ 224.141651][T11489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.165285][T11489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.681037][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.710336][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.719120][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.809815][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.846816][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.884736][T11557] pimreg: entered allmulticast mode [ 224.918802][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.936738][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.950791][T11565] Unsupported ieee802154 address type: 0 [ 224.959664][T11559] netlink: 'syz.3.1387': attribute type 4 has an invalid length. [ 224.979009][T11559] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 224.989138][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.020504][T11559] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1387'. [ 225.065722][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 225.168083][T11576] netlink: 'syz.4.1391': attribute type 4 has an invalid length. [ 225.182623][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 225.231276][T11571] syzkaller0: entered promiscuous mode [ 225.250751][T11571] syzkaller0: entered allmulticast mode [ 225.335237][T11571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 225.462624][T11586] bond5: option mode: unable to set because the bond device is up [ 227.030318][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 227.038561][ C1] lec:lec_tx_timeout: lec0 [ 227.043368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.540595][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'. [ 227.681388][T11627] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 227.719662][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 227.766753][T11630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 227.794121][T11627] bond9 (unregistering): Released all slaves [ 227.874907][T11639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.904214][T11638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1405'. [ 227.922280][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 227.979140][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 228.010103][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 228.030370][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 228.039380][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 228.076509][T11641] netlink: 'syz.1.1406': attribute type 12 has an invalid length. [ 228.086841][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 228.106832][T11641] netlink: 'syz.1.1406': attribute type 11 has an invalid length. [ 228.295126][T11656] sctp: [Deprecated]: syz.4.1410 (pid 11656) Use of int in max_burst socket option deprecated. [ 228.295126][T11656] Use struct sctp_assoc_value instead [ 230.859837][T11701] bond5: option xmit_hash_policy: invalid value (10) [ 230.871702][T11701] bond5 (unregistering): Released all slaves [ 230.919193][T11728] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 231.085465][T11734] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1426'. [ 231.205980][T11738] netlink: 'syz.4.1427': attribute type 33 has an invalid length. [ 231.237241][T11750] netlink: 'syz.4.1427': attribute type 33 has an invalid length. [ 231.281422][T11746] netlink: 'syz.3.1425': attribute type 9 has an invalid length. [ 231.381292][T11755] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 231.466829][T11760] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20016 [ 231.582370][T11765] netlink: 'syz.1.1435': attribute type 32 has an invalid length. [ 232.037184][T11789] sctp: [Deprecated]: syz.2.1442 (pid 11789) Use of int in max_burst socket option. [ 232.037184][T11789] Use struct sctp_assoc_value instead [ 232.060741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 232.066764][T11789] netlink: 'syz.2.1442': attribute type 2 has an invalid length. [ 232.068989][ C1] lec:lec_tx_timeout: lec0 [ 232.081234][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.429920][T11812] bridge0: port 1(vlan3) entered blocking state [ 232.440917][T11812] bridge0: port 1(vlan3) entered disabled state [ 232.447506][T11812] vlan3: entered allmulticast mode [ 232.460725][T11812] geneve0: entered allmulticast mode [ 232.483168][T11812] vlan3: entered promiscuous mode [ 232.500141][T11812] geneve0: entered promiscuous mode [ 232.667848][T11823] netlink: 'syz.4.1455': attribute type 14 has an invalid length. [ 232.738707][ T65] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.738932][T11823] netlink: 'syz.4.1455': attribute type 14 has an invalid length. [ 232.758004][T11823] __nla_validate_parse: 12 callbacks suppressed [ 232.758022][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 232.761775][ T65] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.818469][ T65] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.848903][ T65] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.925362][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 232.941697][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 233.270834][T11864] netlink: 550 bytes leftover after parsing attributes in process `syz.1.1464'. [ 233.437960][T11881] netlink: 'syz.3.1467': attribute type 8 has an invalid length. [ 233.557647][T11886] veth1_to_bridge: entered allmulticast mode [ 233.828720][T11901] geneve2: entered promiscuous mode [ 233.947503][T11903] syzkaller0: entered promiscuous mode [ 233.963687][T11903] syzkaller0: entered allmulticast mode [ 234.000315][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1473'. [ 234.308487][T11930] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 234.486624][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1479'. [ 234.559496][ T1090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.579025][ T1090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.604211][ T1090] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.654416][T11956] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 234.663729][ T1090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.710446][T11943] lo: Caught tx_queue_len zero misconfig [ 235.141151][T11982] syzkaller1: entered promiscuous mode [ 235.146993][T11982] syzkaller1: entered allmulticast mode [ 236.745144][T12065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1511'. [ 236.756821][T12065] tipc: Invalid UDP bearer configuration [ 236.756875][T12065] tipc: Enabling of bearer rejected, failed to enable media [ 237.177938][T12083] netlink: 'syz.0.1518': attribute type 32 has an invalid length. [ 237.186177][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 237.196063][T12084] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1519'. [ 237.275782][T12083] bond5: Setting coupled_control to off (0) [ 237.332941][T12083] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1518'. [ 237.688232][T12120] sctp: [Deprecated]: syz.4.1529 (pid 12120) Use of int in max_burst socket option. [ 237.688232][T12120] Use struct sctp_assoc_value instead [ 237.716132][T12120] netlink: 'syz.4.1529': attribute type 2 has an invalid length. [ 237.782081][T12118] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 237.803736][T12118] bond6 (unregistering): Released all slaves [ 237.836933][T12131] __nla_validate_parse: 4 callbacks suppressed [ 237.836951][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1530'. [ 237.890336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 237.898463][ C1] lec:lec_tx_timeout: lec0 [ 237.906096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.278141][T12154] pim6reg: entered allmulticast mode [ 238.301987][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.317090][T12154] pim6reg: left allmulticast mode [ 238.395265][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 238.427131][T12154] gre0: entered promiscuous mode [ 238.445007][T12154] gre0: entered allmulticast mode [ 238.602952][T12170] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 239.653151][T12217] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 239.670466][T12217] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 239.715848][T12221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.750133][T12220] syzkaller1: entered promiscuous mode [ 239.761930][T12220] syzkaller1: entered allmulticast mode [ 239.778406][T12221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.832506][T12230] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1563'. [ 239.930588][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 240.003004][T12233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.274961][T12247] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 240.293478][T12247] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 240.310968][T12252] IPVS: sh: FWM 3 0x00000003 - no destination available [ 240.519413][T12265] lo speed is unknown, defaulting to 1000 [ 240.528753][T12265] lo speed is unknown, defaulting to 1000 [ 240.539351][T12265] lo speed is unknown, defaulting to 1000 [ 240.616427][T12265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.692656][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 240.710770][T12265] lo speed is unknown, defaulting to 1000 [ 240.753171][T12265] lo speed is unknown, defaulting to 1000 [ 240.762009][T12274] dummy0: entered promiscuous mode [ 240.770133][T12265] lo speed is unknown, defaulting to 1000 [ 240.791196][T12265] lo speed is unknown, defaulting to 1000 [ 240.802444][T12265] lo speed is unknown, defaulting to 1000 [ 240.888524][T12272] dummy0: left promiscuous mode [ 241.100133][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 241.154061][T12305] tipc: Enabling of bearer rejected, media not registered [ 241.291642][T12316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1586'. [ 241.347795][T12321] netlink: 'syz.4.1587': attribute type 2 has an invalid length. [ 241.363332][T12321] !©9: entered promiscuous mode [ 241.374708][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 241.384331][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1587'. [ 241.399001][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1587'. [ 241.534573][T12329] netlink: 'syz.4.1589': attribute type 46 has an invalid length. [ 241.726963][T12336] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 241.753451][T12340] syzkaller0: entered promiscuous mode [ 241.766142][T12340] syzkaller0: entered allmulticast mode [ 242.100339][T12344] lo speed is unknown, defaulting to 1000 [ 242.115811][T12363] 8021q: VLANs not supported on wg2 [ 242.122758][ T127] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 242.149119][T12354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.783793][T12396] lo speed is unknown, defaulting to 1000 [ 242.915640][T12404] syz.1.1607 uses old SIOCAX25GETINFO [ 242.930341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 242.938418][ C1] lec:lec_tx_timeout: lec0 [ 242.943290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.961072][T12408] __nla_validate_parse: 4 callbacks suppressed [ 242.961085][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1610'. [ 243.052401][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1610'. [ 243.333262][T12432] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1614'. [ 243.500537][T12439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.526884][T12439] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 243.631312][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1615'. [ 243.701452][T12449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 243.820762][T12467] netlink: 'syz.0.1624': attribute type 4 has an invalid length. [ 243.837644][T12467] netlink: 'syz.0.1624': attribute type 4 has an invalid length. [ 243.870493][T12464] bridge_slave_1: entered promiscuous mode [ 243.893606][T12464] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.981633][T12470] lo speed is unknown, defaulting to 1000 [ 244.093644][T12478] ip6tnl4: entered allmulticast mode [ 244.246533][T12495] netlink: 'syz.4.1629': attribute type 9 has an invalid length. [ 244.263462][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 244.381239][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1633'. [ 244.710867][T12521] IPVS: set_ctl: invalid protocol: 103 172.30.1.5:20000 [ 244.910656][T12524] tipc: Enabled bearer , priority 0 [ 244.919397][T12523] syzkaller0: entered promiscuous mode [ 244.939856][T12523] syzkaller0: entered allmulticast mode [ 244.994120][T12531] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 245.006644][T12533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1637'. [ 245.033060][T12523] tipc: Resetting bearer [ 245.089927][T12522] tipc: Resetting bearer [ 245.099560][T12531] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.132753][T12522] tipc: Disabling bearer [ 245.227834][T12547] syzkaller1: entered promiscuous mode [ 245.243186][T12547] syzkaller1: entered allmulticast mode [ 245.374413][T12551] lo speed is unknown, defaulting to 1000 [ 245.398068][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1647'. [ 245.566616][T12567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.968362][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 246.001917][T12583] dummy0: entered promiscuous mode [ 246.047893][T12583] dummy0: left promiscuous mode [ 246.478005][T12613] netlink: 'syz.1.1663': attribute type 4 has an invalid length. [ 246.493536][T12613] netlink: 'syz.1.1663': attribute type 8 has an invalid length. [ 246.495173][T12607] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 246.514413][T12613] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 246.523753][T12613] NCSI netlink: No device for ifindex 0 [ 246.536313][T12607] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 246.728041][T12628] Bluetooth: MGMT ver 1.23 [ 246.865061][T12635] netlink: 'syz.3.1666': attribute type 10 has an invalid length. [ 246.939929][T12628] netlink: 'syz.3.1666': attribute type 10 has an invalid length. [ 246.989969][T12628] dummy0: left promiscuous mode [ 247.022368][T12628] `: Port device dummy0 removed [ 247.035429][T12628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.073709][T12635] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 247.151490][T12647] bond4: option coupled_control: invalid value (128) [ 247.173981][T12647] bond4 (unregistering): Released all slaves [ 247.629202][T12681] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 247.638754][T12681] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.689210][T12680] tipc: MTU too low for tipc bearer [ 247.950333][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.958533][ C1] lec:lec_tx_timeout: lec0 [ 247.963356][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 248.663867][T12739] lo speed is unknown, defaulting to 1000 [ 248.709863][T12741] validate_nla: 4 callbacks suppressed [ 248.709882][T12741] netlink: 'syz.0.1697': attribute type 39 has an invalid length. [ 248.728824][T12731] __nla_validate_parse: 13 callbacks suppressed [ 248.728845][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1695'. [ 249.188599][T12768] syzkaller0: entered promiscuous mode [ 249.222693][T12768] syzkaller0: entered allmulticast mode [ 249.322164][T12768] tipc: Enabled bearer , priority 0 [ 249.357901][T12767] tipc: Resetting bearer [ 249.398780][T12767] tipc: Disabling bearer [ 249.511493][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 249.550353][T12786] nbd: must specify a size in bytes for the device [ 249.594964][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 249.747709][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'. [ 249.789788][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 249.801915][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 249.836545][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 249.850068][T12811] netlink: 'syz.3.1718': attribute type 3 has an invalid length. [ 249.866643][T12811] nbd: nbd3 already in use [ 249.896873][T12815] vxcan1: entered promiscuous mode [ 249.902957][T12811] block nbd0: NBD_DISCONNECT [ 249.910686][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1716'. [ 249.919948][T12811] block nbd0: Send disconnect failed -32 [ 249.930075][T12811] block nbd0: shutting down sockets [ 250.036077][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 250.063637][T12811] syz_tun: left allmulticast mode [ 250.083598][T12811] siw: device registration error -23 [ 250.124734][T12823] bond6: option fail_over_mac: invalid value (127) [ 250.136496][T12823] bond6 (unregistering): Released all slaves [ 250.190486][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1722'. [ 250.285842][T12838] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 250.328827][T12842] netlink: 'syz.2.1725': attribute type 20 has an invalid length. [ 250.416133][T12850] tc_dump_action: action bad kind [ 250.424937][T12847] xt_bpf: check failed: parse error [ 250.444700][T12852] x_tables: duplicate underflow at hook 3 [ 250.716647][T12879] netlink: 'syz.4.1734': attribute type 5 has an invalid length. [ 250.934930][T12879] netlink: 'syz.4.1734': attribute type 14 has an invalid length. [ 250.957430][T12879] netlink: 'syz.4.1734': attribute type 11 has an invalid length. [ 251.175852][T12907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.230097][T12910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.278050][T12912] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 251.364611][T12912] veth5: entered allmulticast mode [ 251.376070][T12912] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 251.398411][T12918] netlink: 'syz.4.1746': attribute type 13 has an invalid length. [ 251.419461][T12920] netlink: 'syz.4.1746': attribute type 13 has an invalid length. [ 251.516918][T12923] syzkaller1: entered promiscuous mode [ 251.522825][T12923] syzkaller1: entered allmulticast mode [ 252.980391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 252.988408][ C1] lec:lec_tx_timeout: lec0 [ 252.993192][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.735710][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.000516][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 258.008665][ C1] lec:lec_tx_timeout: lec0 [ 258.013478][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.020508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 263.028552][ C1] lec:lec_tx_timeout: lec0 [ 263.033292][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 268.040342][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.048658][ C1] lec:lec_tx_timeout: lec0 [ 268.055305][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.070369][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 273.078427][ C1] lec:lec_tx_timeout: lec0 [ 273.083229][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.992124][T12961] __nla_validate_parse: 8 callbacks suppressed [ 274.992144][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 275.039199][T12962] sctp: [Deprecated]: syz.1.1757 (pid 12962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.039199][T12962] Use struct sctp_sack_info instead [ 275.120671][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 275.347051][T12970] syzkaller0: entered promiscuous mode [ 275.362222][T12970] syzkaller0: entered allmulticast mode [ 275.405102][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 275.440704][T12970] tipc: Enabled bearer , priority 0 [ 275.491138][T12980] tipc: Resetting bearer [ 275.518429][T12969] tipc: Resetting bearer [ 275.585953][T12969] tipc: Disabling bearer [ 275.749866][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 275.939910][T13000] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 276.102403][T13005] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1767'. [ 276.322135][T13013] sctp: [Deprecated]: syz.1.1770 (pid 13013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.322135][T13013] Use struct sctp_sack_info instead [ 276.625049][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 276.716169][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 276.725385][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 276.735024][T13039] validate_nla: 1 callbacks suppressed [ 276.735040][T13039] netlink: 'syz.0.1776': attribute type 7 has an invalid length. [ 276.750469][T13039] netlink: 'syz.0.1776': attribute type 8 has an invalid length. [ 276.758235][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 276.774711][T13040] netlink: 'syz.0.1776': attribute type 7 has an invalid length. [ 276.793518][T13040] netlink: 'syz.0.1776': attribute type 8 has an invalid length. [ 276.801885][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 276.841020][T13049] netlink: 'syz.4.1781': attribute type 8 has an invalid length. [ 276.848824][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 277.024062][T13058] netlink: 'syz.1.1785': attribute type 6 has an invalid length. [ 277.033262][T13058] netlink: 'syz.1.1785': attribute type 7 has an invalid length. [ 277.044083][T13058] netlink: 'syz.1.1785': attribute type 8 has an invalid length. [ 277.100774][T13056] syzkaller1: entered promiscuous mode [ 277.146306][T13056] syzkaller1: entered allmulticast mode [ 277.154989][T13061] netlink: 'syz.2.1786': attribute type 19 has an invalid length. [ 277.163014][T13061] netlink: 'syz.2.1786': attribute type 20 has an invalid length. [ 277.328512][T13072] IPVS: Error connecting to the multicast addr [ 277.884682][T13094] pim6reg: entered allmulticast mode [ 277.968493][T13104] openvswitch: netlink: Flow actions attr not present in new flow. [ 278.535591][T13137] No such timeout policy "syz0" [ 278.755728][T13148] xt_hashlimit: size too large, truncated to 1048576 [ 279.351867][T13166] lo speed is unknown, defaulting to 1000 [ 279.410243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 279.418424][ C1] lec:lec_tx_timeout: lec0 [ 279.423526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.943043][T13221] syzkaller1: entered promiscuous mode [ 279.948876][T13221] syzkaller1: entered allmulticast mode [ 280.043774][T13230] openvswitch: netlink: IP tunnel dst address not specified [ 280.068437][T13221] lo speed is unknown, defaulting to 1000 [ 280.115652][T13232] __nla_validate_parse: 12 callbacks suppressed [ 280.115674][T13232] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1832'. [ 280.186103][T13235] xt_recent: Unsupported userspace flags (000000b1) [ 280.211479][T13235] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.222739][T13237] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1832'. [ 280.256232][T13237] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1832'. [ 280.334341][T13166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1819'. [ 280.344158][T13243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1834'. [ 280.394669][T13244] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1835'. [ 280.421074][T13246] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1835'. [ 280.766546][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 280.868647][T13265] syzkaller1: entered promiscuous mode [ 280.883576][T13265] syzkaller1: entered allmulticast mode [ 280.895377][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 281.170154][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 281.415204][T13307] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 281.423280][T13307] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 281.830459][T13333] sctp: [Deprecated]: syz.2.1857 (pid 13333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.830459][T13333] Use struct sctp_sack_info instead [ 281.865680][T13335] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 281.970538][T13337] validate_nla: 4 callbacks suppressed [ 281.970559][T13337] netlink: 'syz.1.1859': attribute type 8 has an invalid length. [ 282.216623][T13345] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 282.354757][T13354] netlink: 'syz.3.1866': attribute type 11 has an invalid length. [ 283.595624][T13407] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 283.678333][T13413] netlink: 'syz.2.1880': attribute type 29 has an invalid length. [ 283.699626][T13414] openvswitch: netlink: Actions may not be safe on all matching packets [ 283.717112][T13413] netlink: 'syz.2.1880': attribute type 29 has an invalid length. [ 283.917834][T13434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.953932][T13432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.966859][T13432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.531427][T13485] syzkaller1: entered promiscuous mode [ 284.537058][T13485] syzkaller1: entered allmulticast mode [ 284.557200][T13484] lo speed is unknown, defaulting to 1000 [ 284.695506][T13500] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 285.170276][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 285.178384][ C1] lec:lec_tx_timeout: lec0 [ 285.183852][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.317275][T13460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.524437][T13517] __nla_validate_parse: 11 callbacks suppressed [ 287.524457][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 287.550015][T13524] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1908'. [ 287.565566][T13526] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1909'. [ 287.681845][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1906'. [ 287.749565][T13537] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1912'. [ 287.823967][T13532] netlink: 'syz.2.1911': attribute type 5 has an invalid length. [ 287.841374][T13540] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1911'. [ 287.899059][T13542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1912'. [ 288.246829][T13554] netlink: 'syz.1.1915': attribute type 29 has an invalid length. [ 288.281964][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 288.413955][T13566] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 288.430514][T13566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1919'. [ 288.483756][T13574] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 288.511588][T13571] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 288.735297][T13571] bond4: entered promiscuous mode [ 288.760865][T13571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.783197][T13597] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 288.791199][T13597] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1923'. [ 288.873778][T13592] syzkaller1: entered promiscuous mode [ 288.879409][T13592] syzkaller1: entered allmulticast mode [ 289.009131][T13605] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 289.202555][T13612] netlink: 'syz.2.1927': attribute type 11 has an invalid length. [ 289.225286][T13606] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 289.252291][T13606] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 289.360169][T13629] lo speed is unknown, defaulting to 1000 [ 289.409431][ T5835] Bluetooth: hci2: link tx timeout [ 289.415934][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.588254][ T5835] Bluetooth: hci2: link tx timeout [ 289.593594][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.614594][ T5835] Bluetooth: hci2: link tx timeout [ 289.619839][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.672562][T13634] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.800534][T13634] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.827784][T13657] veth0_virt_wifi: entered allmulticast mode [ 289.863861][T13634] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.904343][ T5835] Bluetooth: hci2: link tx timeout [ 289.909598][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 289.965092][T13634] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.247275][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.276094][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.305570][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.365556][ T127] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.531337][ T51] Bluetooth: hci2: link tx timeout [ 290.536618][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.560604][T13684] nbd0: detected capacity change from 0 to 63 [ 290.571976][ T5835] block nbd0: Receive control failed (result -32) [ 290.578556][ T5839] block nbd0: Receive control failed (result -32) [ 290.601505][T13632] block nbd0: Dead connection, failed to find a fallback [ 290.664318][T13632] block nbd0: shutting down sockets [ 290.669617][T13632] blk_print_req_error: 138 callbacks suppressed [ 290.669634][T13632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.687014][T13632] buffer_io_error: 138 callbacks suppressed [ 290.687034][T13632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 290.701947][T13632] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.711584][T13632] Buffer I/O error on dev nbd0, logical block 1, async page read [ 290.719588][T13632] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.729349][T13632] Buffer I/O error on dev nbd0, logical block 2, async page read [ 290.737506][T13632] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.747592][T13632] Buffer I/O error on dev nbd0, logical block 3, async page read [ 290.756120][T13705] netlink: 'syz.4.1946': attribute type 11 has an invalid length. [ 290.801078][T13632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.833329][T13632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 290.843491][T13696] syzkaller1: entered promiscuous mode [ 290.849017][T13696] syzkaller1: entered allmulticast mode [ 290.870665][T13632] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.927516][T13632] Buffer I/O error on dev nbd0, logical block 1, async page read [ 290.935413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 290.935445][ C1] lec:lec_tx_timeout: lec0 [ 290.946505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.964850][ T5839] Bluetooth: hci2: link tx timeout [ 290.970172][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 290.978411][T13632] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.991159][T13632] Buffer I/O error on dev nbd0, logical block 2, async page read [ 290.999013][T13632] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.008687][T13632] Buffer I/O error on dev nbd0, logical block 3, async page read [ 291.017132][T13632] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.026770][T13632] Buffer I/O error on dev nbd0, logical block 0, async page read [ 291.034982][T13632] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.044573][T13632] Buffer I/O error on dev nbd0, logical block 1, async page read [ 291.053567][T13632] ldm_validate_partition_table(): Disk read failed. [ 291.104955][T13632] Dev nbd0: unable to read RDB block 0 [ 291.115571][T13632] nbd0: unable to read partition table [ 291.151590][T13632] ldm_validate_partition_table(): Disk read failed. [ 291.158761][T13632] Dev nbd0: unable to read RDB block 0 [ 291.191048][T13632] nbd0: unable to read partition table [ 291.333134][T13734] netlink: 'syz.1.1951': attribute type 4 has an invalid length. [ 291.490606][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 291.500623][ T5839] Bluetooth: hci2: link tx timeout [ 291.524419][T13749] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 292.111470][T13791] syzkaller0: entered promiscuous mode [ 292.117267][T13791] syzkaller0: entered allmulticast mode [ 292.660405][T13826] __nla_validate_parse: 5 callbacks suppressed [ 292.660424][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'. [ 292.697759][T13821] bond6: Unable to set up delay as MII monitoring is disabled [ 292.704897][T13829] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.747551][T13821] bond6 (unregistering): Released all slaves [ 292.821327][T13824] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 292.842955][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 292.954823][T13834] netlink: 'syz.2.1975': attribute type 30 has an invalid length. [ 292.990412][T13819] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1971'. [ 293.353929][T13850] ip6tnl0: Caught tx_queue_len zero misconfig [ 293.398703][T13860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1979'. [ 293.584785][T13865] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1983'. [ 293.663594][T13867] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.692168][T13868] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 293.700438][T13868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 293.722815][T13867] netlink: 'syz.4.1984': attribute type 2 has an invalid length. [ 293.987129][ T29] audit: type=1107 audit(1775793891.760:11): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 294.005656][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 294.035694][T13884] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 294.098786][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 294.673124][T13909] vti1: entered promiscuous mode [ 294.678396][T13909] vti1: entered allmulticast mode [ 294.792776][T13913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1999'. [ 294.928071][T13918] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 295.066060][T13922] syzkaller1: entered promiscuous mode [ 295.120371][T13922] syzkaller1: entered allmulticast mode [ 295.820765][T13933] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2004'. [ 295.950301][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.958362][ C1] lec:lec_tx_timeout: lec0 [ 295.963045][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.290470][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 296.290624][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 296.671274][T13975] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 296.696341][T13975] netlink: 'syz.0.2013': attribute type 5 has an invalid length. [ 296.730977][T13978] pim6reg1: entered promiscuous mode [ 296.736350][T13978] pim6reg1: entered allmulticast mode [ 296.877573][T13978] netlink: 'syz.3.2015': attribute type 9 has an invalid length. [ 296.906639][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 297.098300][T13985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.195049][T13996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.204457][T13996] bond6: (slave bond7): Enslaving as an active interface with an up link [ 297.219192][T14009] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.256692][T13998] bond6 (unregistering): (slave bond7): Releasing backup interface [ 297.285259][T13998] bond6 (unregistering): Released all slaves [ 297.491130][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 297.497273][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.545162][T14030] netlink: 'syz.1.2027': attribute type 8 has an invalid length. [ 297.836215][T14050] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 297.845856][T14050] __nla_validate_parse: 7 callbacks suppressed [ 297.845875][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 297.869928][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 297.879207][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 297.894837][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 297.904694][T14050] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2034'. [ 298.011158][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 298.133034][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'. [ 298.153697][T14069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2039'. [ 298.447111][T14088] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 299.047582][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 299.058356][T14133] netlink: 'syz.3.2057': attribute type 11 has an invalid length. [ 299.167094][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 299.191911][T14140] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.240840][T14149] netlink: 'syz.4.2061': attribute type 11 has an invalid length. [ 299.253555][T14149] netlink: 'syz.4.2061': attribute type 23 has an invalid length. [ 299.295267][T14140] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.390420][T14140] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.447107][T14140] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.541941][ T127] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.595803][ T127] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.612286][ T127] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.641723][ T127] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.761060][T14169] xt_TCPMSS: Only works on TCP SYN packets [ 299.796894][T14172] lo speed is unknown, defaulting to 1000 [ 300.017401][T14180] lo speed is unknown, defaulting to 1000 [ 300.132817][T14184] bond10: entered promiscuous mode [ 300.151121][T14184] 8021q: adding VLAN 0 to HW filter on device bond10 [ 300.372440][T14188] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 300.424769][T14188] bond6 (unregistering): Released all slaves [ 300.824934][T14224] batadv_slave_1: entered promiscuous mode [ 300.970277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 300.978370][ C1] lec:lec_tx_timeout: lec0 [ 300.983093][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.290756][T14256] tipc: Enabled bearer , priority 0 [ 301.319798][T14261] sctp: [Deprecated]: syz.0.2090 (pid 14261) Use of int in maxseg socket option. [ 301.319798][T14261] Use struct sctp_assoc_value instead [ 301.368523][T14256] syzkaller0: entered promiscuous mode [ 301.376029][T14256] syzkaller0: entered allmulticast mode [ 301.382737][T14256] tipc: Resetting bearer [ 301.411490][T14258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.432398][T14249] tipc: Resetting bearer [ 302.666885][T14249] tipc: Disabling bearer [ 302.702878][T14258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.767365][T14223] batadv_slave_1: left promiscuous mode [ 302.781765][ T5903] tipc: Node number set to 2899012222 [ 302.882502][T14258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.919523][T14279] __nla_validate_parse: 7 callbacks suppressed [ 302.919541][T14279] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2096'. [ 302.959682][T14282] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2096'. [ 303.042318][T14258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.236559][ T65] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.340699][ T175] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.381784][ T175] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.437033][ T175] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.569810][T14310] xt_CT: No such helper "snmp_trap" [ 303.712349][T14319] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 303.723050][T14319] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 303.778409][T14319] geneve3: entered promiscuous mode [ 303.787448][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 33175 - 0 [ 303.796430][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 33175 - 0 [ 303.828008][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 33175 - 0 [ 303.838058][T14319] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 303.861318][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 303.871293][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 33175 - 0 [ 303.879747][T14319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.049717][T14342] hsr0: entered promiscuous mode [ 304.083847][T14342] netlink: 'syz.3.2109': attribute type 3 has an invalid length. [ 304.130580][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 304.169135][T14342] hsr_slave_0: left promiscuous mode [ 304.188365][T14342] hsr_slave_1: left promiscuous mode [ 304.244191][T14342] hsr0 (unregistering): left promiscuous mode [ 304.279791][T14349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.323423][T14349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2112'. [ 304.403873][T14356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2114'. [ 304.416172][T14358] netlink: 'syz.4.2116': attribute type 5 has an invalid length. [ 304.518447][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 304.608234][T14373] netlink: 'syz.4.2121': attribute type 33 has an invalid length. [ 304.621684][T14373] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2121'. [ 304.710474][T14376] sock: sock_timestamping_bind_phc: sock not bind to device [ 304.837534][T14393] lo speed is unknown, defaulting to 1000 [ 305.364687][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2134'. [ 305.462311][T14433] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 305.482855][T14433] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 305.495201][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 305.631172][T14441] netlink: 'syz.3.2138': attribute type 6 has an invalid length. [ 305.654012][T14441] syzkaller1: entered promiscuous mode [ 305.659628][T14441] syzkaller1: entered allmulticast mode [ 305.868188][T14439] vlan1: entered allmulticast mode [ 305.876880][T14439] bridge_slave_0: entered allmulticast mode [ 305.885177][T14439] bridge0: port 1(vlan1) entered blocking state [ 305.892430][T14439] bridge0: port 1(vlan1) entered disabled state [ 305.901985][T14439] vlan1: entered promiscuous mode [ 305.907243][T14439] bridge_slave_0: entered promiscuous mode [ 305.934391][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.943764][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.990739][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 305.998853][ C1] lec:lec_tx_timeout: lec0 [ 306.004135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 306.039871][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.067680][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.198575][T14452] pimreg9: entered allmulticast mode [ 306.462574][T14476] syzkaller1: entered promiscuous mode [ 306.475904][T14476] syzkaller1: entered allmulticast mode [ 306.728514][T14493] netlink: 'syz.1.2149': attribute type 3 has an invalid length. [ 307.431740][T14517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.611530][T14530] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 307.666618][T14530] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.726930][T14539] openvswitch: netlink: Message has 8 unknown bytes. [ 307.952144][T14552] __nla_validate_parse: 9 callbacks suppressed [ 307.952162][T14552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2164'. [ 308.137373][T14555] lo speed is unknown, defaulting to 1000 [ 308.143337][T14571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2167'. [ 308.372247][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 308.382138][T14578] macsec0: entered promiscuous mode [ 308.550657][T14578] macsec0: left promiscuous mode [ 308.916155][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 309.434120][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 309.445804][T14623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.528888][T14631] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 309.674259][T14643] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2188'. [ 309.873664][T14657] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 309.889965][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 310.535473][T14680] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 310.545527][T14680] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2200'. [ 310.627577][T14680] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2200'. [ 310.638878][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 310.659039][T14682] netlink: 'syz.3.2201': attribute type 1 has an invalid length. [ 310.667252][T14680] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 310.769600][T14680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.781337][T14680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.801972][T14680] hsr0: entered promiscuous mode [ 310.808519][T14680] hsr0: entered allmulticast mode [ 310.815890][T14690] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 310.824868][T14687] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 310.851022][T14680] hsr_slave_0: entered allmulticast mode [ 310.856836][T14680] hsr_slave_1: entered allmulticast mode [ 310.877603][T14686] bond10: (slave geneve4): making interface the new active one [ 310.887074][T14686] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 310.946276][ T65] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 310.956431][ T65] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 311.000769][ T65] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 311.010857][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.018903][ C1] lec:lec_tx_timeout: lec0 [ 311.024721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.032703][ T65] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 311.119911][T14689] bond0: entered promiscuous mode [ 311.139910][T14689] bond_slave_0: entered promiscuous mode [ 311.159849][T14689] bond_slave_1: entered promiscuous mode [ 311.207429][T14689] bond0: left promiscuous mode [ 311.220759][T14689] bond_slave_0: left promiscuous mode [ 311.226421][T14689] bond_slave_1: left promiscuous mode [ 311.304767][T14702] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.339348][T14702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.362469][T14702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 311.374099][T14702] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 311.488296][T14708] bond6: option xmit_hash_policy: invalid value (10) [ 311.498242][T14708] bond6 (unregistering): Released all slaves [ 311.529228][T14702] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.546153][T14702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.561079][T14702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 311.611210][T14702] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 311.621984][T14716] xt_hashlimit: size too large, truncated to 1048576 [ 311.650606][T14717] ipt_REJECT: TCP_RESET invalid for non-tcp [ 311.709188][T14702] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.723929][T14725] netlink: 'syz.1.2215': attribute type 3 has an invalid length. [ 311.732451][T14702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.746377][T14702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 311.758942][T14702] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 311.824086][T14702] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.834202][T14702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.844196][T14702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 311.856304][T14702] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 311.962725][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.977497][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.996672][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 33175 - 0 [ 312.005203][ T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 312.027055][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.047751][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.066481][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 33175 - 0 [ 312.075983][ T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 312.114316][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.140997][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.151930][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 33175 - 0 [ 312.174292][ T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 312.196303][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.205474][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.215047][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 33175 - 0 [ 312.224501][ T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 312.269347][T14743] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 312.364046][T14743] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.428443][T14753] veth9: entered promiscuous mode [ 312.439962][T14753] bond9: (slave veth9): Enslaving as an active interface with an up link [ 312.479202][T14746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.495638][T14746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.505990][T14746] bond0 (unregistering): Released all slaves [ 312.551926][T14749] lo speed is unknown, defaulting to 1000 [ 312.957741][T14781] nbd: must specify an index to disconnect [ 313.068786][T14786] __nla_validate_parse: 15 callbacks suppressed [ 313.068809][T14786] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2234'. [ 313.545284][T14781] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.557153][T14781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.611435][T14781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 313.644828][T14781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 313.865539][T14808] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 313.922913][T14781] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.936961][T14781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.979143][T14781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 314.009806][T14781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 314.078550][T14781] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.100387][T14781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.120093][T14781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 314.149800][T14781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 314.168789][T14824] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2241'. [ 314.264507][T14781] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.276551][T14781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.287500][T14781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33175 - 0 [ 314.302645][T14781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 314.317714][T14825] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 314.326405][T14825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2242'. [ 314.486692][T14837] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 314.521190][T14837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2246'. [ 314.579393][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 314.588615][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 314.597650][T14843] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.625528][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 314.626912][T14844] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.636079][T14845] erspan0: entered promiscuous mode [ 314.757717][T14847] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 314.772046][T14849] siw: device registration error -23 [ 314.802900][T14847] netlink: 'syz.0.2249': attribute type 5 has an invalid length. [ 314.864159][T14855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.913051][T14858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.143490][T14865] tap0: tun_chr_ioctl cmd 1074812118 [ 315.159735][T14865] bridge_slave_0 (unregistering): left allmulticast mode [ 315.189585][T14865] bridge_slave_0 (unregistering): left promiscuous mode [ 315.211617][T14865] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.234845][T14869] tap0: tun_chr_ioctl cmd 2148553947 [ 315.241058][T14869] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2256'. [ 315.250168][T14871] tap0: tun_chr_ioctl cmd 3224933435 [ 315.723875][T14892] sctp: [Deprecated]: syz.1.2263 (pid 14892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.723875][T14892] Use struct sctp_sack_info instead [ 315.818141][T14898] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 315.972676][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 315.982191][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 316.040814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.049036][ C1] lec:lec_tx_timeout: lec0 [ 316.054472][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.096153][T14910] lo speed is unknown, defaulting to 1000 [ 316.316620][T14925] lo speed is unknown, defaulting to 1000 [ 316.545725][ T127] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.582686][ T127] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.623228][ T127] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 33175 - 0 [ 316.641533][ T127] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 316.750919][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.759184][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 316.784694][ T65] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 33175 - 0 [ 316.806714][ T65] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 316.821945][T14954] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 316.858530][T14956] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 317.137273][T14957] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 317.149098][T14957] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 317.177344][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265501][T14958] bond0: (slave bridge9): Enslaving as an active interface with a down link [ 317.290116][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.300079][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 317.309665][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 33175 - 0 [ 317.325632][ T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 317.348768][T14962] macvlan2: entered promiscuous mode [ 317.354872][T14962] macvlan2: entered allmulticast mode [ 317.361797][T14962] bond0: entered promiscuous mode [ 317.368060][T14962] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.378922][T14962] bond0: left promiscuous mode [ 317.433494][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.443079][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 317.455033][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 33175 - 0 [ 317.469160][ T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 317.840963][ T175] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.855508][ T175] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.881173][ T175] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.905480][ T175] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.996545][T14985] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 318.014478][T14985] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 318.819077][T15030] __nla_validate_parse: 18 callbacks suppressed [ 318.819099][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 319.050146][T15035] netlink: 'syz.4.2297': attribute type 1 has an invalid length. [ 319.058586][T15035] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2297'. [ 319.079368][T15035] pim6reg: entered allmulticast mode [ 319.087042][T15035] pim6reg: left allmulticast mode [ 319.282910][T15040] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 319.290863][T15040] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 319.425645][T15046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 319.621501][T15053] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 319.681767][T15053] 8021q: adding VLAN 0 to HW filter on device ` [ 319.719803][T15053] bond0: (slave `): Enslaving as an active interface with an up link [ 319.892503][T15071] netlink: 'syz.3.2308': attribute type 83 has an invalid length. [ 319.991586][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 320.002532][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 320.028834][T15081] netlink: 'syz.2.2310': attribute type 12 has an invalid length. [ 320.052799][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 320.069789][T15081] netlink: 'syz.2.2310': attribute type 13 has an invalid length. [ 320.137658][T15089] netlink: 'syz.1.2312': attribute type 9 has an invalid length. [ 320.189261][T15094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2312'. [ 320.215274][T15094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2312'. [ 320.226638][T15097] netlink: 'syz.3.2313': attribute type 32 has an invalid length. [ 320.236299][T15096] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2314'. [ 320.277457][T15094] netlink: 'syz.1.2312': attribute type 5 has an invalid length. [ 320.327398][T15094] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2312'. [ 320.433215][T15107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2312'. [ 320.524782][T15104] tipc: New replicast peer: 255.255.255.255 [ 320.533629][T15104] tipc: Enabled bearer , priority 10 [ 320.765235][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'. [ 320.824913][T15126] tap0: tun_chr_ioctl cmd 1074812118 [ 320.881178][T15129] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 320.942090][T15131] syzkaller1: entered promiscuous mode [ 320.947632][T15131] syzkaller1: entered allmulticast mode [ 321.070832][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 321.078915][ C1] lec:lec_tx_timeout: lec0 [ 321.084163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.236199][T15150] tipc: MTU too low for tipc bearer [ 321.282801][T15156] netlink: 'syz.4.2329': attribute type 11 has an invalid length. [ 321.341722][T15157] syzkaller0: entered promiscuous mode [ 321.347343][T15157] syzkaller0: entered allmulticast mode [ 321.477600][T15170] netpci0: tun_chr_ioctl cmd 1074025678 [ 321.489163][T15170] netpci0: group set to 0 [ 321.782737][T15189] ip6erspan0: entered allmulticast mode [ 322.187838][T15220] lo speed is unknown, defaulting to 1000 [ 322.441723][T15238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.449063][T15238] IPv6: NLM_F_CREATE should be set when creating new route [ 322.564016][T15241] validate_nla: 2 callbacks suppressed [ 322.564035][T15241] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 322.579952][T15241] netlink: 'syz.0.2355': attribute type 2 has an invalid length. [ 322.591787][T15241] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 322.599957][T15241] dummy0: entered promiscuous mode [ 322.608198][T15241] bridge0: port 4(dummy0) entered blocking state [ 322.615885][T15241] bridge0: port 4(dummy0) entered disabled state [ 322.623530][T15241] dummy0: entered allmulticast mode [ 322.632828][T15241] bridge0: port 4(dummy0) entered blocking state [ 322.639389][T15241] bridge0: port 4(dummy0) entered forwarding state [ 322.936830][T15259] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 322.947983][T15252] macvlan2: entered allmulticast mode [ 322.954531][T15252] hsr0: entered allmulticast mode [ 322.960973][T15252] hsr_slave_0: entered allmulticast mode [ 322.981225][T15252] hsr_slave_1: entered allmulticast mode [ 322.991467][T15259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.083286][T15267] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 323.094020][T15265] x_tables: ip_tables: osf match: only valid for protocol 6 [ 323.161244][T15267] block nbd1: server does not support multiple connections per device. [ 323.174716][T15267] block nbd1: shutting down sockets [ 323.194571][T15274] netlink: 'syz.1.2365': attribute type 39 has an invalid length. [ 323.383950][T15281] xt_TCPMSS: Only works on TCP SYN packets [ 323.401523][T15281] netlink: 'syz.4.2368': attribute type 5 has an invalid length. [ 323.685409][T15292] syzkaller0: entered promiscuous mode [ 323.695310][T15292] syzkaller0: entered allmulticast mode [ 323.861470][T15304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 323.881877][T15301] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 323.889464][T15301] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 324.082648][T15314] __nla_validate_parse: 20 callbacks suppressed [ 324.082669][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 324.149269][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 324.186851][T15318] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.191777][T15322] netlink: 'syz.1.2383': attribute type 3 has an invalid length. [ 324.201850][T15322] netlink: 'syz.1.2383': attribute type 3 has an invalid length. [ 324.211904][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 324.473313][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 324.607348][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 324.697317][T15357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.932378][T15363] tipc: Enabled bearer , priority 0 [ 324.948915][T15363] tipc: Enabling of bearer rejected, already enabled [ 324.996965][T15370] Cannot find del_set index 4 as target [ 325.028097][T15372] Cannot find del_set index 4 as target [ 325.221773][T15334] delete_channel: no stack [ 325.403442][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2401'. [ 325.453912][T15396] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 325.457488][T15395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2401'. [ 325.496352][T15396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2400'. [ 325.513940][T15400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2400'. [ 325.815975][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 325.833013][T15414] macsec0: entered promiscuous mode [ 325.849858][T15414] macsec0: left promiscuous mode [ 326.050882][ T24] tipc: Node number set to 3724157559 [ 326.605461][T15451] lo speed is unknown, defaulting to 1000 [ 326.645687][ T29] audit: type=1107 audit(1775793924.430:12): pid=15458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 326.799695][T15467] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 326.812253][T15467] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 326.914350][T15472] openvswitch: netlink: ufid size 28 bytes exceeds the range (1, 16) [ 326.923307][T15472] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.316859][T15496] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 327.412388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 327.420559][ C1] lec:lec_tx_timeout: lec0 [ 327.425379][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.874371][T15527] lo speed is unknown, defaulting to 1000 [ 327.961830][T15529] xt_CT: No such helper "pptp" [ 328.035500][T15539] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 328.071133][T15539] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.493344][T15558] syzkaller1: entered promiscuous mode [ 328.512342][T15558] syzkaller1: entered allmulticast mode [ 328.849374][T15572] lo speed is unknown, defaulting to 1000 [ 328.880700][T15572] lo speed is unknown, defaulting to 1000 [ 328.887387][T15572] lo speed is unknown, defaulting to 1000 [ 329.164696][T15580] __nla_validate_parse: 15 callbacks suppressed [ 329.164718][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 329.283892][T15580] bond10: entered promiscuous mode [ 329.299790][T15580] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.330383][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 329.459925][T15589] syzkaller1: entered promiscuous mode [ 329.466198][T15589] syzkaller1: entered allmulticast mode [ 329.488581][T15572] infiniband sqz0: set down [ 329.494666][ T9] lo speed is unknown, defaulting to 1000 [ 329.537002][T15572] infiniband sqz0: added lo [ 329.557467][T15572] [ 329.559841][T15572] ====================================================== [ 329.566881][T15572] WARNING: possible circular locking dependency detected [ 329.573975][T15572] syzkaller #0 Not tainted [ 329.578413][T15572] ------------------------------------------------------ [ 329.585458][T15572] syz.0.2453/15572 is trying to acquire lock: [ 329.591632][T15572] ffffffff8e85db68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 329.601253][T15572] [ 329.601253][T15572] but task is already holding lock: [ 329.608638][T15572] ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 329.617990][T15572] [ 329.617990][T15572] which lock already depends on the new lock. [ 329.617990][T15572] [ 329.628407][T15572] [ 329.628407][T15572] the existing dependency chain (in reverse order) is: [ 329.637438][T15572] [ 329.637438][T15572] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 329.644933][T15572] __mutex_lock+0x19f/0x1300 [ 329.650069][T15572] __alloc_workqueue+0x9ef/0x1e90 [ 329.655625][T15572] alloc_workqueue_noprof+0xe3/0x210 [ 329.661445][T15572] padata_alloc+0xc1/0x370 [ 329.666409][T15572] pcrypt_init_padata+0x27/0x100 [ 329.671893][T15572] pcrypt_init+0x60/0xc0 [ 329.676673][T15572] do_one_initcall+0x250/0x8d0 [ 329.681977][T15572] do_initcall_level+0x104/0x190 [ 329.687461][T15572] do_initcalls+0x59/0xa0 [ 329.692347][T15572] kernel_init_freeable+0x2a6/0x3e0 [ 329.698100][T15572] kernel_init+0x1d/0x1d0 [ 329.702976][T15572] ret_from_fork+0x51e/0xb90 [ 329.708119][T15572] ret_from_fork_asm+0x1a/0x30 [ 329.713452][T15572] [ 329.713452][T15572] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 329.721216][T15572] cpus_read_lock+0x42/0x160 [ 329.726365][T15572] static_key_slow_inc+0x12/0x30 [ 329.731856][T15572] setup_udp_tunnel_sock+0x2fd/0x510 [ 329.737691][T15572] l2tp_tunnel_register+0xda0/0x1460 [ 329.743520][T15572] pppol2tp_connect+0x8b7/0x17c0 [ 329.749002][T15572] __sys_connect+0x312/0x450 [ 329.754138][T15572] __x64_sys_connect+0x7a/0x90 [ 329.759442][T15572] do_syscall_64+0x14d/0xf80 [ 329.764578][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.771015][T15572] [ 329.771015][T15572] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 329.778783][T15572] lock_sock_nested+0x41/0x100 [ 329.784088][T15572] inet_shutdown+0x6a/0x390 [ 329.789137][T15572] nbd_mark_nsock_dead+0x2e9/0x560 [ 329.794794][T15572] sock_shutdown+0x15e/0x260 [ 329.799921][T15572] nbd_clear_sock+0x24/0x170 [ 329.805059][T15572] nbd_config_put+0x2dd/0x580 [ 329.810280][T15572] nbd_genl_connect+0x19d5/0x1cf0 [ 329.815855][T15572] genl_family_rcv_msg_doit+0x22a/0x330 [ 329.821954][T15572] genl_rcv_msg+0x61c/0x7a0 [ 329.827009][T15572] netlink_rcv_skb+0x232/0x4b0 [ 329.832311][T15572] genl_rcv+0x28/0x40 [ 329.836837][T15572] netlink_unicast+0x80f/0x9b0 [ 329.842139][T15572] netlink_sendmsg+0x813/0xb40 [ 329.847475][T15572] ____sys_sendmsg+0x972/0x9f0 [ 329.852787][T15572] ___sys_sendmsg+0x2a5/0x360 [ 329.858010][T15572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.863495][T15572] do_syscall_64+0x14d/0xf80 [ 329.868633][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.875067][T15572] [ 329.875067][T15572] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 329.882733][T15572] __mutex_lock+0x19f/0x1300 [ 329.887964][T15572] nbd_queue_rq+0x37b/0x1100 [ 329.893106][T15572] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 329.899219][T15572] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 329.906088][T15572] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 329.912632][T15572] blk_mq_run_hw_queue+0x348/0x4f0 [ 329.918301][T15572] blk_mq_dispatch_list+0xd16/0xe10 [ 329.924048][T15572] blk_mq_flush_plug_list+0x48d/0x570 [ 329.929977][T15572] __blk_flush_plug+0x3ed/0x4d0 [ 329.935390][T15572] __submit_bio+0x28d/0x580 [ 329.940446][T15572] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 329.946627][T15572] block_read_full_folio+0x599/0x830 [ 329.952456][T15572] filemap_read_folio+0x137/0x3b0 [ 329.958018][T15572] do_read_cache_folio+0x358/0x590 [ 329.963672][T15572] read_part_sector+0xb6/0x2b0 [ 329.968973][T15572] adfspart_check_ICS+0xa5/0xa40 [ 329.974451][T15572] bdev_disk_changed+0x7ba/0x1550 [ 329.980014][T15572] blkdev_get_whole+0x380/0x510 [ 329.985407][T15572] bdev_open+0x31e/0xd30 [ 329.990195][T15572] blkdev_open+0x470/0x610 [ 329.995168][T15572] do_dentry_open+0x785/0x14e0 [ 330.000480][T15572] vfs_open+0x3b/0x340 [ 330.005112][T15572] path_openat+0x2e08/0x3860 [ 330.010248][T15572] do_file_open+0x23e/0x4a0 [ 330.015324][T15572] do_sys_openat2+0x113/0x200 [ 330.020556][T15572] __x64_sys_openat+0x138/0x170 [ 330.025969][T15572] do_syscall_64+0x14d/0xf80 [ 330.031115][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.037557][T15572] [ 330.037557][T15572] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 330.044880][T15572] __mutex_lock+0x19f/0x1300 [ 330.050021][T15572] nbd_queue_rq+0xc6/0x1100 [ 330.055062][T15572] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 330.061152][T15572] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 330.068034][T15572] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 330.074553][T15572] blk_mq_run_hw_queue+0x348/0x4f0 [ 330.080211][T15572] blk_mq_dispatch_list+0xd16/0xe10 [ 330.085959][T15572] blk_mq_flush_plug_list+0x48d/0x570 [ 330.091876][T15572] __blk_flush_plug+0x3ed/0x4d0 [ 330.097274][T15572] __submit_bio+0x28d/0x580 [ 330.102328][T15572] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 330.108537][T15572] block_read_full_folio+0x599/0x830 [ 330.114371][T15572] filemap_read_folio+0x137/0x3b0 [ 330.119950][T15572] do_read_cache_folio+0x358/0x590 [ 330.125694][T15572] read_part_sector+0xb6/0x2b0 [ 330.131018][T15572] adfspart_check_ICS+0xa5/0xa40 [ 330.136514][T15572] bdev_disk_changed+0x7ba/0x1550 [ 330.142087][T15572] blkdev_get_whole+0x380/0x510 [ 330.147481][T15572] bdev_open+0x31e/0xd30 [ 330.152262][T15572] blkdev_open+0x470/0x610 [ 330.157222][T15572] do_dentry_open+0x785/0x14e0 [ 330.162530][T15572] vfs_open+0x3b/0x340 [ 330.167146][T15572] path_openat+0x2e08/0x3860 [ 330.172278][T15572] do_file_open+0x23e/0x4a0 [ 330.177362][T15572] do_sys_openat2+0x113/0x200 [ 330.182582][T15572] __x64_sys_openat+0x138/0x170 [ 330.187980][T15572] do_syscall_64+0x14d/0xf80 [ 330.193204][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.199640][T15572] [ 330.199640][T15572] -> #4 (set->srcu){.+.+}-{0:0}: [ 330.206790][T15572] __synchronize_srcu+0xca/0x300 [ 330.212266][T15572] elevator_switch+0x1e8/0x7a0 [ 330.217566][T15572] elevator_change+0x2cc/0x450 [ 330.222858][T15572] elevator_set_default+0x36c/0x430 [ 330.228601][T15572] blk_register_queue+0x366/0x430 [ 330.234186][T15572] __add_disk+0x677/0xd50 [ 330.239061][T15572] add_disk_fwnode+0xfb/0x480 [ 330.244290][T15572] nbd_dev_add+0x72c/0xb50 [ 330.249423][T15572] nbd_init+0x168/0x1f0 [ 330.254120][T15572] do_one_initcall+0x250/0x8d0 [ 330.259427][T15572] do_initcall_level+0x104/0x190 [ 330.264899][T15572] do_initcalls+0x59/0xa0 [ 330.269766][T15572] kernel_init_freeable+0x2a6/0x3e0 [ 330.275514][T15572] kernel_init+0x1d/0x1d0 [ 330.280378][T15572] ret_from_fork+0x51e/0xb90 [ 330.285515][T15572] ret_from_fork_asm+0x1a/0x30 [ 330.290829][T15572] [ 330.290829][T15572] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 330.298690][T15572] __mutex_lock+0x19f/0x1300 [ 330.303824][T15572] elevator_change+0x1b3/0x450 [ 330.309127][T15572] elevator_set_none+0xb5/0x140 [ 330.314541][T15572] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 330.320891][T15572] nbd_start_device+0x17f/0xb10 [ 330.326291][T15572] nbd_genl_connect+0x165b/0x1cf0 [ 330.331867][T15572] genl_family_rcv_msg_doit+0x22a/0x330 [ 330.337961][T15572] genl_rcv_msg+0x61c/0x7a0 [ 330.343007][T15572] netlink_rcv_skb+0x232/0x4b0 [ 330.348344][T15572] genl_rcv+0x28/0x40 [ 330.352874][T15572] netlink_unicast+0x80f/0x9b0 [ 330.358175][T15572] netlink_sendmsg+0x813/0xb40 [ 330.363479][T15572] ____sys_sendmsg+0x972/0x9f0 [ 330.368789][T15572] ___sys_sendmsg+0x2a5/0x360 [ 330.374004][T15572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.379573][T15572] do_syscall_64+0x14d/0xf80 [ 330.384719][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.391151][T15572] [ 330.391151][T15572] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 330.399883][T15572] blk_alloc_queue+0x546/0x680 [ 330.405210][T15572] __blk_mq_alloc_disk+0x197/0x390 [ 330.410881][T15572] nbd_dev_add+0x499/0xb50 [ 330.415841][T15572] nbd_init+0x168/0x1f0 [ 330.420533][T15572] do_one_initcall+0x250/0x8d0 [ 330.425845][T15572] do_initcall_level+0x104/0x190 [ 330.431326][T15572] do_initcalls+0x59/0xa0 [ 330.436198][T15572] kernel_init_freeable+0x2a6/0x3e0 [ 330.441933][T15572] kernel_init+0x1d/0x1d0 [ 330.446801][T15572] ret_from_fork+0x51e/0xb90 [ 330.451931][T15572] ret_from_fork_asm+0x1a/0x30 [ 330.457244][T15572] [ 330.457244][T15572] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 330.464501][T15572] fs_reclaim_acquire+0x71/0x100 [ 330.469983][T15572] prepare_alloc_pages+0x152/0x650 [ 330.475632][T15572] __alloc_frozen_pages_noprof+0x12f/0x380 [ 330.481978][T15572] __alloc_pages_noprof+0xa/0x30 [ 330.487453][T15572] pcpu_populate_chunk+0x182/0xb30 [ 330.493097][T15572] pcpu_alloc_noprof+0xc6c/0x19c0 [ 330.498657][T15572] psi_cgroup_alloc+0x9e/0x200 [ 330.503959][T15572] cgroup_mkdir+0x49f/0xf50 [ 330.509012][T15572] kernfs_iop_mkdir+0x211/0x350 [ 330.514436][T15572] vfs_mkdir+0x413/0x630 [ 330.519231][T15572] filename_mkdirat+0x285/0x510 [ 330.524627][T15572] __se_sys_mkdirat+0x35/0x150 [ 330.529949][T15572] do_syscall_64+0x14d/0xf80 [ 330.535157][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.541601][T15572] [ 330.541601][T15572] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 330.549356][T15572] __lock_acquire+0x15a5/0x2cf0 [ 330.554752][T15572] lock_acquire+0xf0/0x2e0 [ 330.559718][T15572] __mutex_lock+0x19f/0x1300 [ 330.564863][T15572] pcpu_alloc_noprof+0x218/0x19c0 [ 330.570437][T15572] __alloc_workqueue+0xa81/0x1e90 [ 330.576092][T15572] alloc_workqueue_noprof+0xe3/0x210 [ 330.581910][T15572] ib_mad_init_device+0x944/0x20a0 [ 330.587565][T15572] add_client_context+0x37c/0x7a0 [ 330.593130][T15572] enable_device_and_get+0x19c/0x3e0 [ 330.598949][T15572] ib_register_device+0x110f/0x13e0 [ 330.604679][T15572] rxe_register_device+0x1e3/0x350 [ 330.610343][T15572] rxe_net_add+0x81/0x110 [ 330.615219][T15572] rxe_newlink+0xdd/0x190 [ 330.620091][T15572] nldev_newlink+0x5bd/0x650 [ 330.625222][T15572] rdma_nl_rcv+0x6d7/0xa10 [ 330.630178][T15572] netlink_unicast+0x80f/0x9b0 [ 330.635482][T15572] netlink_sendmsg+0x813/0xb40 [ 330.640792][T15572] ____sys_sendmsg+0x972/0x9f0 [ 330.646107][T15572] ___sys_sendmsg+0x2a5/0x360 [ 330.651322][T15572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.656809][T15572] do_syscall_64+0x14d/0xf80 [ 330.661959][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.668390][T15572] [ 330.668390][T15572] other info that might help us debug this: [ 330.668390][T15572] [ 330.678626][T15572] Chain exists of: [ 330.678626][T15572] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 330.678626][T15572] [ 330.691686][T15572] Possible unsafe locking scenario: [ 330.691686][T15572] [ 330.699160][T15572] CPU0 CPU1 [ 330.704535][T15572] ---- ---- [ 330.709919][T15572] lock(wq_pool_mutex); [ 330.714183][T15572] lock(cpu_hotplug_lock); [ 330.721229][T15572] lock(wq_pool_mutex); [ 330.728041][T15572] lock(pcpu_alloc_mutex); [ 330.732654][T15572] [ 330.732654][T15572] *** DEADLOCK *** [ 330.732654][T15572] [ 330.740832][T15572] 6 locks held by syz.0.2453/15572: [ 330.746134][T15572] #0: ffffffff9a654898 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32b/0xa10 [ 330.756170][T15572] #1: ffffffff8f930c90 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x650 [ 330.765600][T15572] #2: ffffffff8f922510 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 330.775642][T15572] #3: ffffffff8f922810 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 330.785762][T15572] #4: ffff88801f364638 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33c/0x7a0 [ 330.796707][T15572] #5: ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 330.806483][T15572] [ 330.806483][T15572] stack backtrace: [ 330.812413][T15572] CPU: 0 UID: 0 PID: 15572 Comm: syz.0.2453 Not tainted syzkaller #0 PREEMPT(full) [ 330.812435][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 330.812459][T15572] Call Trace: [ 330.812469][T15572] [ 330.812477][T15572] dump_stack_lvl+0xe8/0x150 [ 330.812505][T15572] print_circular_bug+0x2e1/0x300 [ 330.812533][T15572] check_noncircular+0x12e/0x150 [ 330.812561][T15572] __lock_acquire+0x15a5/0x2cf0 [ 330.812585][T15572] ? check_path+0x21/0x40 [ 330.812608][T15572] ? check_noncircular+0xda/0x150 [ 330.812632][T15572] ? add_lock_to_list+0xc7/0x100 [ 330.812656][T15572] ? lockdep_unlock+0x5d/0xd0 [ 330.812674][T15572] ? __lock_acquire+0x146e/0x2cf0 [ 330.812696][T15572] lock_acquire+0xf0/0x2e0 [ 330.812716][T15572] ? pcpu_alloc_noprof+0x218/0x19c0 [ 330.812739][T15572] __mutex_lock+0x19f/0x1300 [ 330.812763][T15572] ? pcpu_alloc_noprof+0x218/0x19c0 [ 330.812781][T15572] ? __mutex_trylock_common+0x158/0x260 [ 330.812808][T15572] ? __pfx___mutex_trylock_common+0x10/0x10 [ 330.812834][T15572] ? pcpu_alloc_noprof+0x218/0x19c0 [ 330.812852][T15572] ? trace_contention_end+0x3d/0x150 [ 330.812867][T15572] ? __pfx___mutex_lock+0x10/0x10 [ 330.812889][T15572] ? __mutex_lock+0x319/0x1300 [ 330.812917][T15572] ? __alloc_workqueue+0x9ef/0x1e90 [ 330.812935][T15572] pcpu_alloc_noprof+0x218/0x19c0 [ 330.812993][T15572] ? rcu_is_watching+0x15/0xb0 [ 330.813018][T15572] ? __kasan_kmalloc+0x93/0xb0 [ 330.813037][T15572] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 330.813060][T15572] __alloc_workqueue+0xa81/0x1e90 [ 330.813082][T15572] alloc_workqueue_noprof+0xe3/0x210 [ 330.813101][T15572] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 330.813123][T15572] ib_mad_init_device+0x944/0x20a0 [ 330.813161][T15572] ? __pfx_ib_mad_init_device+0x10/0x10 [ 330.813182][T15572] ? do_raw_spin_unlock+0xf5/0x210 [ 330.813200][T15572] ? _raw_spin_unlock+0x28/0x50 [ 330.813222][T15572] add_client_context+0x37c/0x7a0 [ 330.813244][T15572] ? __pfx_add_client_context+0x10/0x10 [ 330.813262][T15572] ? xa_find+0x25b/0x2b0 [ 330.813281][T15572] enable_device_and_get+0x19c/0x3e0 [ 330.813299][T15572] ? __pfx_enable_device_and_get+0x10/0x10 [ 330.813320][T15572] ? device_add+0x70b/0xb70 [ 330.813343][T15572] ib_register_device+0x110f/0x13e0 [ 330.813365][T15572] ? __pfx_ib_register_device+0x10/0x10 [ 330.813389][T15572] ? xa_load+0x60/0x210 [ 330.813411][T15572] ? xa_load+0x60/0x210 [ 330.813432][T15572] ? xa_load+0x60/0x210 [ 330.813455][T15572] ? xa_load+0x1db/0x210 [ 330.813481][T15572] ? ib_device_set_netdev+0x5c9/0x6d0 [ 330.813503][T15572] rxe_register_device+0x1e3/0x350 [ 330.813520][T15572] rxe_net_add+0x81/0x110 [ 330.813536][T15572] rxe_newlink+0xdd/0x190 [ 330.813558][T15572] nldev_newlink+0x5bd/0x650 [ 330.813575][T15572] ? __pfx_nldev_newlink+0x10/0x10 [ 330.813624][T15572] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.813642][T15572] ? arch_stack_walk+0xfb/0x150 [ 330.813676][T15572] ? bpf_lsm_capable+0x9/0x20 [ 330.813700][T15572] ? security_capable+0x7e/0x2c0 [ 330.813726][T15572] ? __pfx_nldev_newlink+0x10/0x10 [ 330.813742][T15572] rdma_nl_rcv+0x6d7/0xa10 [ 330.813763][T15572] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 330.813779][T15572] ? __netlink_lookup+0x7e4/0x8b0 [ 330.813814][T15572] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.813836][T15572] netlink_unicast+0x80f/0x9b0 [ 330.813855][T15572] ? __pfx_netlink_unicast+0x10/0x10 [ 330.813872][T15572] ? netlink_sendmsg+0x650/0xb40 [ 330.813890][T15572] ? skb_put+0x11b/0x210 [ 330.813912][T15572] netlink_sendmsg+0x813/0xb40 [ 330.813935][T15572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.813996][T15572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.814022][T15572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.814042][T15572] ____sys_sendmsg+0x972/0x9f0 [ 330.814066][T15572] ? futex_unqueue+0x211/0x240 [ 330.814089][T15572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.814116][T15572] ? import_iovec+0x73/0xa0 [ 330.814136][T15572] ___sys_sendmsg+0x2a5/0x360 [ 330.814162][T15572] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.814187][T15572] ? futex_wait+0x29a/0x380 [ 330.814279][T15572] ? __fget_files+0x2a/0x420 [ 330.814302][T15572] ? __fget_files+0x3a0/0x420 [ 330.814321][T15572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.814349][T15572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.814376][T15572] ? rcu_is_watching+0x15/0xb0 [ 330.814404][T15572] do_syscall_64+0x14d/0xf80 [ 330.814427][T15572] ? trace_irq_disable+0x3b/0x150 [ 330.814441][T15572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.814457][T15572] ? clear_bhb_loop+0x40/0x90 [ 330.814476][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.814493][T15572] RIP: 0033:0x7f6c0259c819 [ 330.814509][T15572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.814524][T15572] RSP: 002b:00007f6c007f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.814542][T15572] RAX: ffffffffffffffda RBX: 00007f6c02815fa0 RCX: 00007f6c0259c819 [ 330.814555][T15572] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000004 [ 330.814566][T15572] RBP: 00007f6c02632c91 R08: 0000000000000000 R09: 0000000000000000 [ 330.814576][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.814586][T15572] R13: 00007f6c02816038 R14: 00007f6c02815fa0 R15: 00007ffea22d2a98 [ 330.814605][T15572] [ 331.417597][T15572] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 331.418884][T15572] infiniband sqz0: Couldn't open port 1 [ 331.468203][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2460'. [ 331.472737][T15608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2460'. [ 331.573518][T15572] RDS/IB: sqz0: added [ 331.577596][T15572] smc: adding ib device sqz0 with port count 1 [ 331.583860][T15572] smc: ib device sqz0 port 1 has no pnetid [ 331.590651][T15572] lo speed is unknown, defaulting to 1000 [ 331.651344][ T9] lo speed is unknown, defaulting to 1000 [ 331.706661][T15572] lo speed is unknown, defaulting to 1000 [ 331.812804][T15572] lo speed is unknown, defaulting to 1000 [ 331.913121][T15572] lo speed is unknown, defaulting to 1000 [ 332.024451][T15572] lo speed is unknown, defaulting to 1000 [ 333.170251][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 333.178310][ C1] lec:lec_tx_timeout: lec0 [ 333.183458][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.930379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 338.938462][ C1] lec:lec_tx_timeout: lec0 [ 338.943453][ C1] lec:lec_start_xmit: lec0:No lecd attached