last executing test programs: 5.701740468s ago: executing program 3 (id=17556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.403837566s ago: executing program 3 (id=17559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70200000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r3, &(0x7f00000000c0)=""/20, 0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) write(r4, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 5.19736528s ago: executing program 3 (id=17561): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x0, 0x321, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 5.015918115s ago: executing program 3 (id=17565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.987153914s ago: executing program 0 (id=17566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4.733058664s ago: executing program 3 (id=17569): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c001}, 0x4020018) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00e1ffffff0070b2e5e976000000850000009a00000095000000000000005482bd16219cb81dfce494e3767c2a8e31126fa2e9ce15294b1957b766fb"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r1, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='caif0\x00', 0x10) sendmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004041) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r4, &(0x7f0000000200)='\x00', 0x480, &(0x7f0000000240)={@align=0x2, {0xf, 0x8, 0xb1b0, 0x400}}, 0xe3, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000000c0)=""/116, &(0x7f00000001c0)=0x74) 4.581938717s ago: executing program 3 (id=17570): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r2, &(0x7f0000000080)=""/47, 0x2f) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 4.415321606s ago: executing program 0 (id=17571): getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x6, 0x3, 0x2) getsockname$packet(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'lblcr\x00', 0x0, 0x5, 0x70}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB]) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.32324235s ago: executing program 2 (id=17576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 3.13622535s ago: executing program 4 (id=17578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x89, 0x2d, &(0x7f0000000340)="ab2145226d04298068a9dce79508c2b4f735722cb29ece098ea1783236de82b19f4fe36849008a1366df5257c8158bae07e69a3f6db7363fecb569e0b1f12ecb9ba1165ab9db59dbdd867a3718da6c4f1c79960049a38ffbfc5194808f9d06520b599e6f05d35a176206f0e44f46522c681ee29179fe5bdb6a00b7648400bc9e7f67da588081688049", &(0x7f0000000100)=""/45, 0x7, 0x0, 0x1000, 0x9e, &(0x7f0000000e00)="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", &(0x7f0000000400)="91807be1567853089e746d32c939042c67134f0945ba8b58caf58d1cd7bebd19ebf865056064c7f5bce0df99dab01d26556f7ce427893dca04f227e217ffe48ba22267a1a58d2430f92d2aec5114e30178f5dae617db3159b67a574a7d0375d1f2d70048fcf862f48e6fc4b3ed51b67e1d6ad9ba1920c7fbfa7aefea1f3f8411cd3331d180df511e811a04a0d74b97ee5ba62128be10ccbaadcabd8f8eb9", 0x3, 0x0, 0x1c}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) close(0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r6, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)=""/1, 0x1}, {&(0x7f0000000b80)=""/147, 0x93}], 0x2}, 0xfffff800}], 0x1, 0x42, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 2.671069603s ago: executing program 4 (id=17580): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x2c, 0x0, 0x24eea0e64cdea956, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6d, 0x65}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004060}, 0x4000000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000009c0)) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010122, 0x0) write(r0, 0x0, 0x0) 2.650595265s ago: executing program 1 (id=17581): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x1a, 0x1, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.459523665s ago: executing program 2 (id=17582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0xffff}, {}, {0x8, 0x11}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x2, 0x7f, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff3cd4b8bf", 0xfff2}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.458125648s ago: executing program 1 (id=17583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xc}, {0x8}, {0x8, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x4, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x7, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.169454222s ago: executing program 1 (id=17584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x80) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 1.698374661s ago: executing program 2 (id=17585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x1, 0x5) listen(r0, 0x3) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xfff) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.526537012s ago: executing program 2 (id=17586): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r1}, 0x20) close(r2) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 1.399711315s ago: executing program 0 (id=17587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x2, @mcast2, 0xc0000000}}, 0x0, 0x0, 0x1d, 0x0, "96f545de642d5626f0ab65d100e9ebabc53fc208cf62bb49106f5cccc56c95be5ffca3693df6b6b775439f92a55942e8245aeab82b30c8513f04526794f5171a448ab4c234b48912d2998c9dc0a773c8"}, 0xd8) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.358168282s ago: executing program 0 (id=17588): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) read$nci(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) unshare(0x22020600) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8030002d80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 1.241509976s ago: executing program 4 (id=17589): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.115679279s ago: executing program 0 (id=17590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x800, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) unshare(0x26020480) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 980.189303ms ago: executing program 1 (id=17591): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 942.725995ms ago: executing program 4 (id=17592): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 908.234938ms ago: executing program 1 (id=17593): socket$inet(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x8916, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) 743.498057ms ago: executing program 4 (id=17594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x3, 0x7, 0x7, 0xa, 0x92, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35d7, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x32}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 687.898233ms ago: executing program 0 (id=17595): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffffff000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 662.944964ms ago: executing program 4 (id=17596): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x0, 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010101}]}, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0xfff7}}}}}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r5, 0x1, 0x0, 0x0, 0x7c, 0x4, 0x5, 0xd508, 0x6, 0x0, 0x1ff, 'syz1\x00'}) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) 575.770309ms ago: executing program 2 (id=17597): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 70.745769ms ago: executing program 2 (id=17598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xfffffffffffffe73, 0x12, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40068c1}, 0xc08d0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=17599): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "8fb3b5cbd53218b9", "a3376431f154184c22ae4fde8562a3ee", "d9b2e399"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): T5334] netlink: 'syz.3.14670': attribute type 3 has an invalid length. [ 702.854722][ T49] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 703.040862][ T5354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14677'. [ 703.323600][ T5365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14682'. [ 703.543889][ T5340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.448847][ T5408] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14701'. [ 705.443108][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14713'. [ 705.462329][ T5439] netlink: 'syz.3.14715': attribute type 1 has an invalid length. [ 705.558854][ T5440] bond7: (slave bridge9): making interface the new active one [ 705.569102][ T5440] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 706.019148][ T5464] netlink: 'syz.1.14724': attribute type 21 has an invalid length. [ 706.032872][ T5464] netlink: 'syz.1.14724': attribute type 22 has an invalid length. [ 706.041021][ T5464] netlink: 'syz.1.14724': attribute type 23 has an invalid length. [ 706.050128][ T5464] netlink: 136 bytes leftover after parsing attributes in process `syz.1.14724'. [ 706.232819][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14730'. [ 706.499968][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14734'. [ 706.872978][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14741'. [ 707.147192][ T5524] netlink: 'syz.1.14748': attribute type 83 has an invalid length. [ 707.254032][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14751'. [ 707.291496][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14751'. [ 707.345340][ T5533] netlink: 'syz.1.14752': attribute type 4 has an invalid length. [ 708.779224][ T5572] netlink: 'syz.0.14766': attribute type 1 has an invalid length. [ 708.888911][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.975328][ T5576] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 710.440933][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14790'. [ 710.598860][ T5646] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 711.066293][ T5657] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14798'. [ 711.220478][ T5661] netlink: 'syz.4.14800': attribute type 1 has an invalid length. [ 711.570335][ T5661] bond8: entered promiscuous mode [ 711.576209][ T5661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 711.702628][ T5663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 711.718725][ T5663] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 711.773070][ T5663] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 711.828911][ T5663] bond8: (slave wireguard0): making interface the new active one [ 711.842079][ T5663] wireguard0: entered promiscuous mode [ 711.860081][ T5663] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 712.647622][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14816'. [ 712.672703][ T5706] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 712.989784][ T5722] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.14823'. [ 714.052027][ C1] bridge0: port 3(bond0) entered forwarding state [ 714.058593][ C1] bridge0: topology change detected, propagating [ 714.101246][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14840'. [ 714.845304][ T5804] netlink: 'syz.2.14859': attribute type 3 has an invalid length. [ 714.872506][ T5808] sock: sock_set_timeout: `syz.4.14860' (pid 5808) tries to set negative timeout [ 715.174389][ T5818] netlink: 'syz.2.14863': attribute type 4 has an invalid length. [ 715.241235][ T5830] lo speed is unknown, defaulting to 1000 [ 715.332242][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 715.657368][ T5853] netlink: 204 bytes leftover after parsing attributes in process `syz.0.14870'. [ 715.674018][ T5853] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14870'. [ 716.579437][ T5924] netlink: 'syz.2.14879': attribute type 4 has an invalid length. [ 716.620517][ T5924] netlink: 'syz.2.14879': attribute type 1 has an invalid length. [ 716.657224][ T5924] netlink: 15506 bytes leftover after parsing attributes in process `syz.2.14879'. [ 716.890715][ T5937] netlink: 'syz.2.14886': attribute type 1 has an invalid length. [ 716.909604][ T5937] netlink: 352 bytes leftover after parsing attributes in process `syz.2.14886'. [ 716.920372][ T5937] netlink: 'syz.2.14886': attribute type 1 has an invalid length. [ 716.930210][ T5937] netlink: 352 bytes leftover after parsing attributes in process `syz.2.14886'. [ 717.084637][ T5949] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.14891'. [ 717.224035][ T5953] pim6reg1: entered promiscuous mode [ 717.235901][ T5953] pim6reg1: entered allmulticast mode [ 717.252618][ T5959] netlink: 'syz.2.14896': attribute type 1 has an invalid length. [ 717.338486][ T5959] 8021q: adding VLAN 0 to HW filter on device bond12 [ 717.455773][ T5966] bond12: (slave gretap5): making interface the new active one [ 717.466633][ T5966] bond12: (slave gretap5): Enslaving as an active interface with an up link [ 718.085698][ T6000] syzkaller1: entered promiscuous mode [ 718.093616][ T6000] syzkaller1: entered allmulticast mode [ 718.344992][ T6007] netlink: 'syz.1.14913': attribute type 12 has an invalid length. [ 718.616106][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14914'. [ 720.022537][ T6072] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14934'. [ 720.199805][ T6079] netlink: 'syz.3.14938': attribute type 29 has an invalid length. [ 720.212430][ T6079] netlink: 'syz.3.14938': attribute type 30 has an invalid length. [ 720.231003][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14938'. [ 720.800132][ T6067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.213208][ T6105] netlink: 'syz.0.14949': attribute type 1 has an invalid length. [ 721.324324][ T6105] bond5: entered promiscuous mode [ 721.372901][ T6105] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.415560][ T6112] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.482512][ T6112] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 721.519377][ T6112] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 721.565865][ T6112] bond5: (slave ip6gre3): making interface the new active one [ 721.624353][ T6112] ip6gre3: entered promiscuous mode [ 721.682869][ T6112] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 722.233475][ T6147] IPv6: sit5: Disabled Multicast RS [ 723.485322][ T6181] netlink: 'syz.1.14972': attribute type 21 has an invalid length. [ 723.523499][ T6181] netlink: 'syz.1.14972': attribute type 21 has an invalid length. [ 723.523631][ T79] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.540163][ T79] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.550589][ T79] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.560054][ T79] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.605010][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077aef000: rx timeout, send abort [ 723.682013][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14974'. [ 723.881254][ T6165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.114827][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077aef000: abort rx timeout. Force session deactivation [ 724.341048][ T6215] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3528704607/3528704609 [ 724.351670][ T6215] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3528704607/3528704609 [ 724.878607][ T6200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.113053][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14989'. [ 725.185065][ T6230] bond13: entered promiscuous mode [ 725.191636][ T6230] 8021q: adding VLAN 0 to HW filter on device bond13 [ 725.283343][ T6230] 8021q: adding VLAN 0 to HW filter on device bond13 [ 725.290661][ T6230] bond13: (slave vcan1): The slave device specified does not support setting the MAC address [ 725.304247][ T6230] bond13: (slave vcan1): Error -95 calling set_mac_address [ 725.572551][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 725.687487][ T6259] netlink: 'syz.0.14997': attribute type 1 has an invalid length. [ 725.731664][ T6259] netlink: 'syz.0.14997': attribute type 4 has an invalid length. [ 725.767029][ T6259] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14997'. [ 725.783165][ T6262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 726.103301][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15008'. [ 726.810404][ T6299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15013'. [ 726.819551][ T6301] netlink: 'syz.3.15014': attribute type 1 has an invalid length. [ 726.859555][ T6301] bond8: entered promiscuous mode [ 726.866665][ T6301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.970304][ T6301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.979397][ T6301] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 726.990585][ T6301] bond8: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 727.015989][ T6301] bond8: (slave gre3): making interface the new active one [ 727.027918][ T6301] gre3: entered promiscuous mode [ 727.037147][ T6301] bond8: (slave gre3): Enslaving as an active interface with an up link [ 727.132520][ T6318] bond5: entered allmulticast mode [ 727.150707][ T6318] ip6gre3: entered allmulticast mode [ 727.210238][ T6317] bond5: left allmulticast mode [ 727.216036][ T6317] ip6gre3: left allmulticast mode [ 728.057065][ T6356] lo speed is unknown, defaulting to 1000 [ 728.465405][ T6372] netlink: 240 bytes leftover after parsing attributes in process `syz.1.15037'. [ 728.478037][ T6364] lo speed is unknown, defaulting to 1000 [ 729.773014][ T6406] lo speed is unknown, defaulting to 1000 [ 730.012641][ T6417] sctp: [Deprecated]: syz.1.15055 (pid 6417) Use of int in maxseg socket option. [ 730.012641][ T6417] Use struct sctp_assoc_value instead [ 730.309097][ T6323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.261423][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15069'. [ 731.418612][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15074'. [ 731.681459][ T6476] syzkaller1: entered promiscuous mode [ 731.692891][ T6476] syzkaller1: entered allmulticast mode [ 732.082325][ T6496] syzkaller0: entered promiscuous mode [ 732.089318][ T6496] syzkaller0: entered allmulticast mode [ 732.161368][ T6503] netlink: 'syz.2.15088': attribute type 1 has an invalid length. [ 732.993988][ T6515] block nbd3: server does not support multiple connections per device. [ 733.014264][ T6515] block nbd3: shutting down sockets [ 733.763580][ T6503] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 734.649556][ T6577] netlink: 'syz.0.15113': attribute type 1 has an invalid length. [ 734.721214][ T6577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.751423][ T6581] bond6: (slave gretap4): making interface the new active one [ 734.774155][ T6581] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 734.793533][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15113'. [ 734.824792][ T6577] bond6 (unregistering): (slave gretap4): Releasing active interface [ 734.876043][ T6577] bond6 (unregistering): Released all slaves [ 735.175411][ T6595] lo speed is unknown, defaulting to 1000 [ 735.199384][ T6596] pim6reg1: entered promiscuous mode [ 735.212820][ T6596] pim6reg1: entered allmulticast mode [ 735.527602][ T6610] hsr0: entered promiscuous mode [ 735.543338][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15127'. [ 735.557947][ T6610] hsr_slave_0: left promiscuous mode [ 735.566782][ T6610] hsr_slave_1: left promiscuous mode [ 735.584921][ T6610] hsr0 (unregistering): left promiscuous mode [ 735.599652][ T6610] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 735.926642][ T6624] netlink: 'syz.4.15133': attribute type 1 has an invalid length. [ 736.041588][ T6624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 736.124081][ T6627] bond9: (slave geneve5): making interface the new active one [ 736.133719][ T6627] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 736.144791][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15134'. [ 736.161975][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15134'. [ 736.176296][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15134'. [ 736.195750][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15134'. [ 736.218433][ T1149] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 736.254095][ T1149] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 736.288330][ T1149] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 736.336776][ T1149] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 736.356718][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.403211][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.443069][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.494470][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.520082][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.545236][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.566435][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.582312][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.595479][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 736.605964][ T6637] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 737.864330][ T6684] netlink: 'syz.1.15156': attribute type 1 has an invalid length. [ 737.945207][ T6689] netlink: 'syz.4.15157': attribute type 1 has an invalid length. [ 738.014712][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.109314][ T6691] gretap2: entered allmulticast mode [ 738.124201][ T6691] bond10: (slave gretap2): making interface the new active one [ 738.183202][ T6691] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 738.222564][ T6694] bridge3: entered promiscuous mode [ 738.250338][ T6694] bridge3: entered allmulticast mode [ 738.286451][ T6694] team0: Failed to send port change of device bridge3 via netlink (err -105) [ 738.296455][ T6694] team0: Failed to send options change via netlink (err -105) [ 738.304775][ T6694] team0: Port device bridge3 added [ 739.678640][ T6732] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15174'. [ 739.987821][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15182'. [ 741.240572][ T6781] gretap3: entered promiscuous mode [ 741.367648][ T6790] syzkaller1: entered promiscuous mode [ 741.393085][ T6790] syzkaller1: entered allmulticast mode [ 742.944121][ T6842] netlink: 'syz.1.15218': attribute type 3 has an invalid length. [ 743.446845][ T6862] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 743.682419][ T6866] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.15227'. [ 744.091058][ T6878] lo speed is unknown, defaulting to 1000 [ 745.219778][ T6887] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15234'. [ 745.718795][ T6897] netlink: 7 bytes leftover after parsing attributes in process `syz.0.15238'. [ 746.052138][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 746.542624][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15247'. [ 746.572097][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15247'. [ 746.591397][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15247'. [ 746.726978][ T6924] netlink: 'syz.2.15248': attribute type 5 has an invalid length. [ 746.764964][ T6868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.295547][ T7007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.306830][ T7050] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 3952. macoff=96 [ 750.609549][ T7065] syzkaller1: entered promiscuous mode [ 750.621956][ T7065] syzkaller1: entered allmulticast mode [ 751.063909][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15306'. [ 751.249526][ T7093] netlink: 'syz.4.15310': attribute type 10 has an invalid length. [ 751.276876][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15310'. [ 751.304205][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15310'. [ 751.323254][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15310'. [ 751.682726][ T7107] netlink: 'syz.0.15317': attribute type 2 has an invalid length. [ 751.976415][ T7123] lo speed is unknown, defaulting to 1000 [ 751.996001][ T7124] lo speed is unknown, defaulting to 1000 [ 752.126113][ T7128] lo speed is unknown, defaulting to 1000 [ 752.879938][ T7147] lo speed is unknown, defaulting to 1000 [ 756.048319][ T7201] veth0: entered promiscuous mode [ 756.063752][ T7199] veth0: left promiscuous mode [ 756.247062][ T7206] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15346'. [ 756.293993][ T7208] netlink: 88 bytes leftover after parsing attributes in process `syz.1.15347'. [ 758.108953][ T7169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.210772][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15374'. [ 759.241787][ T7274] erspan0: entered promiscuous mode [ 759.257333][ T7274] macvtap0: entered promiscuous mode [ 759.269941][ T7274] macvtap0: entered allmulticast mode [ 759.281500][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15374'. [ 759.290963][ T7274] erspan0: entered allmulticast mode [ 759.662337][ T7278] erspan0: left allmulticast mode [ 759.712496][ T7278] erspan0: left promiscuous mode [ 760.089575][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15385'. [ 760.099448][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15385'. [ 760.234168][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15387'. [ 762.088600][ T7337] lo: Caught tx_queue_len zero misconfig [ 762.220239][ T7355] lo speed is unknown, defaulting to 1000 [ 762.653118][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15412'. [ 762.722663][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15412'. [ 762.876411][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15414'. [ 763.080780][ T7398] only policy match revision 0 supported [ 763.080802][ T7398] unable to load match [ 763.575529][ T7425] netlink: 'syz.0.15424': attribute type 4 has an invalid length. [ 763.626859][ T7428] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.15425'. [ 763.638191][ T7422] netlink: 'syz.0.15424': attribute type 4 has an invalid length. [ 763.708541][T29607] lo speed is unknown, defaulting to 1000 [ 763.724106][ T795] lo speed is unknown, defaulting to 1000 [ 763.788797][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15428'. [ 763.901652][ T7435] bond6: entered promiscuous mode [ 763.907469][ T7435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 764.018960][ T7444] delete_channel: no stack [ 765.571398][ T7492] syzkaller1: entered promiscuous mode [ 765.577244][ T7492] syzkaller1: entered allmulticast mode [ 765.595275][ T7495] bridge0: port 1(erspan0) entered blocking state [ 765.602662][ T7495] bridge0: port 1(erspan0) entered disabled state [ 765.611280][ T7495] erspan0: entered allmulticast mode [ 765.634512][ T7497] netlink: 'syz.0.15452': attribute type 1 has an invalid length. [ 765.652217][ T7495] erspan0: left allmulticast mode [ 765.717934][ T7501] gretap5: entered allmulticast mode [ 765.854840][ T7511] netlink: 'syz.1.15457': attribute type 39 has an invalid length. [ 767.256530][ T7565] syzkaller1: entered promiscuous mode [ 767.273488][ T7565] syzkaller1: entered allmulticast mode [ 767.868713][ T7588] bridge0: port 1(vlan3) entered blocking state [ 767.887278][ T7588] bridge0: port 1(vlan3) entered disabled state [ 767.897602][ T7588] vlan3: entered allmulticast mode [ 767.910890][ T7588] geneve0: entered allmulticast mode [ 768.061631][ T79] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 770.913165][ T7591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.616659][ T7677] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15518'. [ 771.819744][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15525'. [ 771.878537][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15527'. [ 771.895196][ T7696] netlink: 'syz.0.15527': attribute type 2 has an invalid length. [ 771.903437][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15527'. [ 771.915258][ T7696] netlink: 'syz.0.15527': attribute type 2 has an invalid length. [ 771.923487][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15527'. [ 772.589744][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15532'. [ 773.083980][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15538'. [ 773.464388][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15542'. [ 773.524364][ T7739] lo speed is unknown, defaulting to 1000 [ 773.543033][ T7746] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 773.595524][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15543'. [ 773.612389][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15543'. [ 776.712540][ T7853] __nla_validate_parse: 4 callbacks suppressed [ 776.712562][ T7853] netlink: 19 bytes leftover after parsing attributes in process `syz.2.15585'. [ 777.039794][ T7866] lo speed is unknown, defaulting to 1000 [ 778.949353][ T7929] netlink: 'syz.4.15610': attribute type 1 has an invalid length. [ 778.957873][ T7929] netlink: 'syz.4.15610': attribute type 4 has an invalid length. [ 778.966939][ T7929] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15610'. [ 778.979382][ T7929] netlink: 'syz.4.15610': attribute type 1 has an invalid length. [ 778.989144][ T7929] netlink: 'syz.4.15610': attribute type 4 has an invalid length. [ 778.998235][ T7929] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15610'. [ 779.429172][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15611'. [ 780.048265][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15615'. [ 780.180916][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15616'. [ 781.321259][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.861057][ T7984] netlink: 'syz.2.15627': attribute type 4 has an invalid length. [ 781.912281][ T7979] netlink: 'syz.2.15627': attribute type 4 has an invalid length. [ 782.046562][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15630'. [ 782.403404][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15636'. [ 782.434081][ T7979] tipc: Resetting bearer [ 782.949026][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15641'. [ 783.172147][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 783.246910][ T8038] lo speed is unknown, defaulting to 1000 [ 783.500789][ T8046] lo speed is unknown, defaulting to 1000 [ 783.506276][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15650'. [ 783.661612][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15652'. [ 783.736886][ T8054] bond6: entered promiscuous mode [ 783.742200][ T8054] bond6: entered allmulticast mode [ 783.748094][ T8054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.103653][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15656'. [ 784.275430][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15659'. [ 784.371141][ T8067] syzkaller1: entered promiscuous mode [ 784.396702][ T8067] syzkaller1: entered allmulticast mode [ 784.432065][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15660'. [ 784.665924][ T8088] netlink: 'syz.3.15662': attribute type 4 has an invalid length. [ 784.720136][ T8090] netlink: 'syz.3.15662': attribute type 4 has an invalid length. [ 784.828702][ T8086] lo speed is unknown, defaulting to 1000 [ 785.081011][ T8099] lo speed is unknown, defaulting to 1000 [ 785.152148][ T8101] net_ratelimit: 1014 callbacks suppressed [ 785.152173][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.193427][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.217667][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.247429][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.268357][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.282849][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.290347][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.328527][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.349145][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.382934][ T8101] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.857257][ T8111] syz_tun: entered allmulticast mode [ 785.871224][ T8110] syz_tun: left allmulticast mode [ 786.369048][ T8123] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15673'. [ 786.460829][ T8124] xt_cgroup: invalid path, errno=-2 [ 787.419713][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15686'. [ 787.460198][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15685'. [ 787.493298][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15685'. [ 787.685266][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15689'. [ 787.807792][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15693'. [ 788.006031][ T8178] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15695'. [ 788.027684][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15695'. [ 788.438370][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15706'. [ 788.455813][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15705'. [ 788.605558][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15708'. [ 790.413916][ T8260] netlink: 'syz.2.15722': attribute type 10 has an invalid length. [ 790.597047][ T8267] ip6gre3: entered promiscuous mode [ 790.618129][ T8267] ip6gre3: entered allmulticast mode [ 790.643580][ T8271] netlink: 'syz.0.15728': attribute type 4 has an invalid length. [ 790.698222][ T5909] lo speed is unknown, defaulting to 1000 [ 790.704378][ T5909] syz1: Port: 1 Link DOWN [ 790.836100][ T8283] sctp: [Deprecated]: syz.4.15733 (pid 8283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.836100][ T8283] Use struct sctp_sack_info instead [ 790.865936][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.874160][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.908479][ T8285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.987447][ T8286] lo speed is unknown, defaulting to 1000 [ 791.227633][ T8293] net_ratelimit: 794 callbacks suppressed [ 791.227654][ T8293] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.15737:8293 [ 791.247583][ T8297] lo speed is unknown, defaulting to 1000 [ 792.569549][ T8348] __nla_validate_parse: 9 callbacks suppressed [ 792.569574][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15752'. [ 792.672930][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15754'. [ 792.889764][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15755'. [ 793.036573][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15758'. [ 793.423020][ T8381] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15763'. [ 793.441581][ T8386] lo speed is unknown, defaulting to 1000 [ 793.451185][ T8392] netlink: 'syz.1.15766': attribute type 1 has an invalid length. [ 793.471490][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15763'. [ 793.614115][ T8392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 793.906969][ T8394] bond7: (slave veth11): Enslaving as an active interface with a down link [ 793.974136][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 793.990611][ T8395] bond7: (slave batadv1): making interface the new active one [ 794.016041][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15769'. [ 794.046086][ T8395] batadv1: entered promiscuous mode [ 794.225778][ T8395] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 794.804152][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15773'. [ 794.907664][ T8428] netlink: 'syz.3.15776': attribute type 2 has an invalid length. [ 794.998615][ T8429] lo speed is unknown, defaulting to 1000 [ 795.286357][ T8439] netlink: 160 bytes leftover after parsing attributes in process `syz.3.15778'. [ 795.540210][ T8446] netlink: 'syz.0.15780': attribute type 1 has an invalid length. [ 795.653489][ T8446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 795.730089][ T8452] bond8: (slave dummy0): making interface the new active one [ 795.789231][ T8452] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 795.858082][ T8455] bond8 (unregistering): (slave dummy0): Releasing active interface [ 795.904893][ T8455] bond8 (unregistering): Released all slaves [ 796.700165][ T8492] netlink: 'syz.2.15789': attribute type 2 has an invalid length. [ 796.717521][ T8492] : entered promiscuous mode [ 796.959089][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15793'. [ 797.596388][ T8524] syzkaller0: entered promiscuous mode [ 797.602340][ T8524] syzkaller0: entered allmulticast mode [ 798.072880][ T8432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.306548][ T8532] __nla_validate_parse: 1 callbacks suppressed [ 798.306569][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15805'. [ 798.588782][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x703 [ 799.331329][ T8545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 799.459505][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15814'. [ 799.919375][ T8557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 799.935476][ T8538] netlink: 'syz.0.15810': attribute type 1 has an invalid length. [ 799.945128][ T8538] netlink: 264 bytes leftover after parsing attributes in process `syz.0.15810'. [ 799.955531][ T8538] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15810'. [ 799.989189][ T8538] netlink: 'syz.0.15810': attribute type 1 has an invalid length. [ 800.013395][ T8538] netlink: 264 bytes leftover after parsing attributes in process `syz.0.15810'. [ 800.025700][ T8538] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15810'. [ 800.172310][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15820'. [ 800.395248][ T8573] lo speed is unknown, defaulting to 1000 [ 800.762839][ T8587] syzkaller0: entered allmulticast mode [ 800.774431][ T8587] syzkaller0: entered promiscuous mode [ 800.792583][ T8587] syzkaller0 (unregistering): left promiscuous mode [ 800.799561][ T8587] syzkaller0 (unregistering): left allmulticast mode [ 801.035312][ T8567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.072872][ T8599] netlink: 192 bytes leftover after parsing attributes in process `syz.0.15829'. [ 801.150358][ T8596] lo speed is unknown, defaulting to 1000 [ 801.194344][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15832'. [ 801.914965][ T8627] lo speed is unknown, defaulting to 1000 [ 802.088509][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15847'. [ 802.899316][ T8650] lo speed is unknown, defaulting to 1000 [ 803.337401][ T8662] netlink: 'syz.0.15853': attribute type 1 has an invalid length. [ 803.345910][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15853'. [ 803.356533][ T8662] netlink: 'syz.0.15853': attribute type 1 has an invalid length. [ 803.933948][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15860'. [ 804.349937][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15867'. [ 804.549618][ T8710] netlink: 'syz.3.15872': attribute type 1 has an invalid length. [ 804.601581][ T8710] 8021q: adding VLAN 0 to HW filter on device bond9 [ 804.659375][ T8710] 8021q: adding VLAN 0 to HW filter on device bond9 [ 804.682556][ T8710] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 804.745614][ T8710] bond9: (slave vcan1): Error -95 calling set_mac_address [ 805.044981][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15880'. [ 805.070869][ T8733] netlink: 'syz.3.15880': attribute type 7 has an invalid length. [ 805.093838][ T8733] netlink: 'syz.3.15880': attribute type 8 has an invalid length. [ 805.121729][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15880'. [ 805.238803][ T8739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15882'. [ 805.308730][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15884'. [ 805.452570][ T1005] batadv1: left promiscuous mode [ 805.835209][ T8757] lo speed is unknown, defaulting to 1000 [ 806.644398][ C1] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 806.692913][ C1] ip_tunnel_core: Dead loop on virtual device gre3 (net 39), fix it urgently! [ 806.708335][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15902'. [ 807.419756][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15906'. [ 807.446508][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15906'. [ 808.218004][ T8820] syzkaller0: entered promiscuous mode [ 808.226825][ T8820] syzkaller0: entered allmulticast mode [ 808.235160][ T8820] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 808.569389][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15920'. [ 808.772243][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.850574][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15929'. [ 808.885485][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15929'. [ 808.968581][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15932'. [ 808.991305][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15932'. [ 809.045181][ T8824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.112074][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15934'. [ 809.223079][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15937'. [ 809.375750][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15940'. [ 809.631379][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15944'. [ 809.645221][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15946'. [ 810.345330][ T8939] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 810.587966][ T8906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.961809][ T8967] lo speed is unknown, defaulting to 1000 [ 811.750643][ T9003] syzkaller1: entered promiscuous mode [ 811.774788][ T9003] syzkaller1: entered allmulticast mode [ 812.225302][ T9017] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 812.278329][ T9023] lo speed is unknown, defaulting to 1000 [ 812.608207][ T9035] netlink: 'syz.3.15998': attribute type 1 has an invalid length. [ 812.727481][ T9039] netlink: 'syz.1.15999': attribute type 1 has an invalid length. [ 812.727527][ T9035] bond10: entered promiscuous mode [ 812.757242][ T9035] 8021q: adding VLAN 0 to HW filter on device bond10 [ 812.855399][ T9039] bond8: entered promiscuous mode [ 812.861139][ T9039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 812.888272][ T9040] bond10: (slave bridge13): making interface the new active one [ 812.896362][ T9040] bridge13: entered promiscuous mode [ 812.924362][ T9040] bridge13: left promiscuous mode [ 813.031388][ T9030] lo speed is unknown, defaulting to 1000 [ 813.098531][ T9045] bond8: (slave bridge13): making interface the new active one [ 813.107341][ T9045] bridge13: entered promiscuous mode [ 813.115918][ T9045] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 813.417259][ T9053] netlink: 'syz.3.16003': attribute type 7 has an invalid length. [ 813.432389][ T9053] netlink: 'syz.3.16003': attribute type 8 has an invalid length. [ 813.615599][ T9053] __nla_validate_parse: 10 callbacks suppressed [ 813.615633][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16003'. [ 813.917549][ T9059] netlink: 'syz.4.16004': attribute type 1 has an invalid length. [ 814.159934][ T9059] bond11: entered promiscuous mode [ 814.251773][ T9059] 8021q: adding VLAN 0 to HW filter on device bond11 [ 814.337511][ T9060] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 814.360420][ T9060] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 814.381623][ T9060] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 814.872259][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16009'. [ 815.540678][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16015'. [ 815.589087][ T3635] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.598198][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16015'. [ 815.602463][ T3635] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.642486][ T1149] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.663369][ T1149] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.253493][ T9111] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.16025'. [ 816.350210][ T9113] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16026'. [ 816.420406][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16028'. [ 818.770753][ T9196] lo speed is unknown, defaulting to 1000 [ 818.894136][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16063'. [ 818.947990][ T9207] syzkaller1: entered promiscuous mode [ 818.953793][ T9207] syzkaller1: entered allmulticast mode [ 819.023682][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16064'. [ 819.702572][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16075'. [ 819.716153][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16075'. [ 819.930627][ T9240] netlink: 'syz.4.16077': attribute type 3 has an invalid length. [ 819.960394][ T9240] netlink: 'syz.4.16077': attribute type 3 has an invalid length. [ 820.326327][ T9252] syzkaller1: entered promiscuous mode [ 820.338961][ T9252] syzkaller1: entered allmulticast mode [ 820.706979][ T9272] sctp: [Deprecated]: syz.3.16091 (pid 9272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.706979][ T9272] Use struct sctp_sack_info instead [ 820.868349][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.896004][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.019410][ T9288] syzkaller1: entered promiscuous mode [ 821.025407][ T9288] syzkaller1: entered allmulticast mode [ 821.400949][ T9299] lo speed is unknown, defaulting to 1000 [ 821.941685][ T9316] netlink: 'syz.4.16109': attribute type 1 has an invalid length. [ 821.953444][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16108'. [ 823.170284][ T9327] vti0: left promiscuous mode [ 823.182344][ T9327] vti0: left allmulticast mode [ 823.191030][ T9327] ipip1: left promiscuous mode [ 823.466449][ T9327] bond5: left promiscuous mode [ 823.471274][ T9327] ip6gre3: left promiscuous mode [ 823.533937][ T9327] bond6: left promiscuous mode [ 823.636294][ T3635] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.645041][ T3635] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.677225][ T3635] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.686616][ T3635] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.977457][ T9371] syzkaller1: entered promiscuous mode [ 823.983757][ T9371] syzkaller1: entered allmulticast mode [ 825.249236][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16138'. [ 825.561739][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16140'. [ 825.810110][ T9434] lo speed is unknown, defaulting to 1000 [ 825.989792][ T9438] bridge0: port 3(bond0) entered disabled state [ 826.016805][ T9438] bridge2: left promiscuous mode [ 826.022912][ T9438] bridge2: left allmulticast mode [ 826.028192][ T9438] geneve2: left promiscuous mode [ 826.035422][ T9438] geneve2: left allmulticast mode [ 826.040733][ T9438] bond1: left promiscuous mode [ 826.046216][ T9438] bond1: left allmulticast mode [ 826.055556][ T9438] vti1: left promiscuous mode [ 826.060813][ T9438] geneve3: left promiscuous mode [ 826.068221][ T9438] ip6gretap2: left promiscuous mode [ 826.074100][ T9438] ip6gretap2: left allmulticast mode [ 826.081174][ T9438] ip6tnl4: left allmulticast mode [ 826.088852][ T9438] bond5: left promiscuous mode [ 826.094242][ T9438] bond6: left promiscuous mode [ 826.115812][ T9438] bond8: left promiscuous mode [ 826.120933][ T9438] gre3: left promiscuous mode [ 826.160858][ T9438] bond10: left promiscuous mode [ 826.185961][ T1149] netdevsim netdevsim3 ªªªªª»: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.195052][ T1149] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.206549][ T1149] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.224995][ T1149] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.495209][ T9453] tipc: Failed to remove unknown binding: 66,1,1/2886997017:3897031947/3897031949 [ 826.512712][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16147'. [ 826.530575][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16147'. [ 826.545648][ T9453] tipc: Failed to remove unknown binding: 66,1,1/2886997017:3897031947/3897031949 [ 826.582835][ T9453] tipc: Failed to remove unknown binding: 66,1,1/2886997017:3897031947/3897031949 [ 826.794807][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16158'. [ 826.822311][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16158'. [ 826.856443][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16155'. [ 826.865903][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16158'. [ 826.884362][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16158'. [ 827.010211][ T9475] tipc: Enabled bearer , priority 0 [ 827.146237][ T9475] syzkaller0: entered promiscuous mode [ 827.162634][ T9475] syzkaller0: entered allmulticast mode [ 827.176017][ T9475] tipc: Resetting bearer [ 827.186602][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16155'. [ 827.232563][ T9474] tipc: Resetting bearer [ 829.283597][ T9474] tipc: Disabling bearer [ 829.328936][ T3650] tipc: Node number set to 4278321153 [ 829.368272][ T9502] lo speed is unknown, defaulting to 1000 [ 829.546229][ T9520] syzkaller1: entered promiscuous mode [ 829.562691][ T9520] syzkaller1: entered allmulticast mode [ 829.781187][ T9533] 8021q: adding VLAN 0 to HW filter on device bond8 [ 829.903282][ T9533] macsec3: entered promiscuous mode [ 829.908602][ T9533] bond8: entered promiscuous mode [ 829.908865][ T9539] openvswitch: netlink: Flow key attr not present in new flow. [ 829.938994][ T9533] bond8: left promiscuous mode [ 831.755945][ T9577] lo speed is unknown, defaulting to 1000 [ 832.124379][ T9589] __nla_validate_parse: 3 callbacks suppressed [ 832.124401][ T9589] netlink: 480 bytes leftover after parsing attributes in process `syz.0.16195'. [ 832.190981][ T9594] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16198'. [ 832.255144][ T9596] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16198'. [ 832.390542][ T9596] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16198'. [ 833.074939][ T9631] bond9: entered allmulticast mode [ 833.095832][ T9631] macvlan2: entered promiscuous mode [ 833.101266][ T9631] macvlan2: entered allmulticast mode [ 833.108247][ T9631] bond9: (slave macvlan2): Opening slave failed [ 833.349166][ T9646] gretap0: entered promiscuous mode [ 833.372266][ T9646] macsec1: entered allmulticast mode [ 833.377634][ T9646] gretap0: entered allmulticast mode [ 833.682710][ T9646] gretap0: left allmulticast mode [ 833.687901][ T9646] gretap0: left promiscuous mode [ 836.068590][ T9654] syzkaller0: entered promiscuous mode [ 836.087044][ T9654] syzkaller0: entered allmulticast mode [ 836.097111][ T9658] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16220'. [ 836.112724][ T9658] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16220'. [ 836.122506][ T9658] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 836.813237][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16230'. [ 837.894367][ T9660] lo speed is unknown, defaulting to 1000 [ 838.280764][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16236'. [ 838.686004][ T9718] syzkaller1: entered promiscuous mode [ 838.692200][ T9718] syzkaller1: entered allmulticast mode [ 838.772739][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16247'. [ 838.949489][ T9732] syzkaller1: entered promiscuous mode [ 838.967985][ T9732] syzkaller1: entered allmulticast mode [ 839.555215][ T9754] syzkaller1: entered promiscuous mode [ 839.568274][ T9754] syzkaller1: entered allmulticast mode [ 840.089728][ T9790] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16269'. [ 840.623737][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16282'. [ 840.812670][ T9824] tipc: Enabled bearer , priority 0 [ 840.929941][ T9827] syzkaller0: entered promiscuous mode [ 840.936165][ T9827] syzkaller0: entered allmulticast mode [ 840.942520][ T9827] tipc: Resetting bearer [ 841.100560][ T3635] tipc: Resetting bearer [ 841.186649][ T9823] tipc: Resetting bearer [ 841.270000][ T9849] netlink: 'syz.3.16291': attribute type 2 has an invalid length. [ 841.350472][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16291'. [ 842.588568][ T9823] tipc: Disabling bearer [ 842.597580][ T9833] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16287'. [ 842.705637][ T9846] lo speed is unknown, defaulting to 1000 [ 842.834474][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16294'. [ 842.887158][ T9859] netlink: 'syz.3.16296': attribute type 16 has an invalid length. [ 842.918396][ T9859] netlink: 'syz.3.16296': attribute type 17 has an invalid length. [ 843.008221][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.018216][ T9859] bridge0: port 3(bond0) entered blocking state [ 843.024676][ T9859] bridge0: port 3(bond0) entered listening state [ 843.035657][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.046900][ T9859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.058389][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16298'. [ 843.246202][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16299'. [ 843.392311][ T9878] tipc: Enabled bearer , priority 0 [ 843.530399][ T9878] syzkaller0: entered promiscuous mode [ 843.546581][ T9878] syzkaller0: entered allmulticast mode [ 843.562393][ T9878] tipc: Resetting bearer [ 843.623998][ T9877] tipc: Resetting bearer [ 844.046647][ T9890] netlink: 'syz.0.16307': attribute type 11 has an invalid length. [ 845.025075][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16313'. [ 845.034697][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16313'. [ 845.776116][ T9877] tipc: Disabling bearer [ 845.800996][ T9897] : entered promiscuous mode [ 845.863128][ T9906] 8021q: adding VLAN 0 to HW filter on device bond14 [ 845.923815][ T9907] bond14: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 845.931196][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16317'. [ 845.973746][ T3635] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 846.102525][ T3635] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 846.121130][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16318'. [ 847.903133][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.148428][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16327'. [ 848.165702][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16327'. [ 848.190199][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16327'. [ 848.209715][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16327'. [ 849.044998][ T9983] netlink: 'syz.4.16336': attribute type 16 has an invalid length. [ 849.091544][ T9983] netlink: 'syz.4.16336': attribute type 17 has an invalid length. [ 849.208205][ T9983] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 850.977095][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16349'. [ 851.174854][T10031] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 851.356459][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16355'. [ 851.786216][T10059] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 851.979878][T10071] bond9: entered allmulticast mode [ 852.006812][T10071] vxcan3: entered promiscuous mode [ 852.012581][T10071] vxcan3: entered allmulticast mode [ 852.018438][T10071] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 852.035575][T10071] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 852.257516][T10087] atomic_op ffff88807984b198 conn xmit_atomic 0000000000000000 [ 852.385647][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16380'. [ 852.412836][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16380'. [ 852.445850][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16380'. [ 852.466912][T10101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 852.483441][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16380'. [ 852.494795][T10099] lo speed is unknown, defaulting to 1000 [ 852.820893][T10112] bond0: (slave syz_tun): Removing an active aggregator [ 852.831347][T10112] bond0: (slave syz_tun): Releasing backup interface [ 852.844212][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.856561][T10112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 853.126252][T10123] lo speed is unknown, defaulting to 1000 [ 853.218877][T10119] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 853.288897][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16390'. [ 853.992758][T10157] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16400'. [ 854.074042][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16401'. [ 854.083924][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16401'. [ 854.781114][T10183] lo speed is unknown, defaulting to 1000 [ 855.959230][T10214] netlink: 'syz.2.16423': attribute type 10 has an invalid length. [ 856.023215][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.032756][T10214] bond0: (slave team0): Enslaving as an active interface with an up link [ 856.369826][T10233] __nla_validate_parse: 4 callbacks suppressed [ 856.369849][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16429'. [ 856.387562][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16429'. [ 856.553350][T10238] bond6: entered allmulticast mode [ 856.845997][T10245] syzkaller0: entered promiscuous mode [ 856.855772][T10245] syzkaller0: entered allmulticast mode [ 856.959385][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16435'. [ 857.102264][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16435'. [ 857.301009][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16437'. [ 857.370558][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16437'. [ 857.411515][T10262] ip6gre4: entered promiscuous mode [ 857.417747][T10262] ip6gre4: entered allmulticast mode [ 857.441446][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16437'. [ 859.109184][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16445'. [ 859.123178][T10224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.237247][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16445'. [ 859.450393][T10290] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16448'. [ 859.887658][T10302] tipc: Resetting bearer [ 859.908265][T10302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.920847][T10302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 860.220107][T10323] ip6gre4: entered promiscuous mode [ 860.226053][T10323] ip6gre4: entered allmulticast mode [ 860.573037][T10348] syzkaller1: entered promiscuous mode [ 860.582229][T10348] syzkaller1: entered allmulticast mode [ 862.065369][T10399] lo speed is unknown, defaulting to 1000 [ 862.398712][T10408] __nla_validate_parse: 8 callbacks suppressed [ 862.398736][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16491'. [ 862.454171][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16491'. [ 862.779540][T10419] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16495'. [ 862.876651][T10420] lo speed is unknown, defaulting to 1000 [ 863.669943][T10437] lo speed is unknown, defaulting to 1000 [ 864.073962][T10364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.330049][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16503'. [ 864.885730][T10466] syzkaller0: entered promiscuous mode [ 864.898180][T10466] syzkaller0: entered allmulticast mode [ 865.298389][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16509'. [ 865.995065][T10488] lo speed is unknown, defaulting to 1000 [ 866.568869][T10503] lo speed is unknown, defaulting to 1000 [ 866.785292][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16521'. [ 866.794660][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16521'. [ 867.244886][T10527] syzkaller0: entered promiscuous mode [ 867.295521][T10527] syzkaller0: entered allmulticast mode [ 869.115402][T10595] lo speed is unknown, defaulting to 1000 [ 869.136557][T10597] IPVS: stopping backup sync thread 17528 ... [ 869.901379][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16551'. [ 870.030850][T10635] netlink: 'syz.3.16553': attribute type 4 has an invalid length. [ 870.080546][T10635] netlink: 'syz.3.16553': attribute type 4 has an invalid length. [ 870.538458][T10649] tun0: tun_chr_ioctl cmd 1074812118 [ 870.550388][T10649] tun0: tun_chr_ioctl cmd 1074033169 [ 870.928774][T10659] lo speed is unknown, defaulting to 1000 [ 871.863909][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16569'. [ 871.998849][T10675] 8021q: adding VLAN 0 to HW filter on device bond15 [ 873.244574][T10690] geneve4: entered promiscuous mode [ 873.261683][ T1083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 54953 - 0 [ 873.281011][ T1083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 54953 - 0 [ 873.310617][ T1083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 54953 - 0 [ 873.340104][ T1083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 54953 - 0 [ 873.413591][ C1] bridge0: port 3(bond0) entered learning state [ 874.274497][T10710] lo speed is unknown, defaulting to 1000 [ 875.302715][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16579'. [ 876.027781][T10721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 876.049362][T10722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 876.195088][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16584'. [ 876.283159][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16585'. [ 878.350146][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16596'. [ 878.679772][T10762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16593'. [ 878.771293][T10760] lo speed is unknown, defaulting to 1000 [ 878.914283][T10782] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.16600'. [ 879.060238][T10788] xt_policy: output policy not valid in PREROUTING and INPUT [ 880.195646][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16612'. [ 880.675211][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16621'. [ 880.828904][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16624'. [ 881.047652][T10865] syzkaller1: entered promiscuous mode [ 881.061932][T10865] syzkaller1: entered allmulticast mode [ 881.673086][T10851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.790829][T10880] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 881.798605][T10880] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 882.277498][T10904] bond16: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 882.384520][T10904] bond16 (unregistering): Released all slaves [ 883.207408][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16647'. [ 883.550445][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16651'. [ 883.596938][T10931] vlan4: entered promiscuous mode [ 883.610151][T10931] syz_tun: entered promiscuous mode [ 883.704062][T10941] syzkaller1: entered promiscuous mode [ 883.731994][T10941] syzkaller1: entered allmulticast mode [ 883.770745][T10936] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16654'. [ 883.804196][T10942] lo speed is unknown, defaulting to 1000 [ 883.820996][T10936] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16654'. [ 883.839724][T10936] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 884.353469][T10965] netlink: 'syz.2.16660': attribute type 1 has an invalid length. [ 884.471170][T10965] bond16: entered promiscuous mode [ 884.518653][T10965] 8021q: adding VLAN 0 to HW filter on device bond16 [ 884.566794][T10967] 8021q: adding VLAN 0 to HW filter on device bond16 [ 884.578579][T10967] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address [ 884.590092][T10967] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 884.644359][T10967] bond16: (slave wireguard0): making interface the new active one [ 884.653763][T10967] wireguard0: entered promiscuous mode [ 884.707116][T10967] bond16: (slave wireguard0): Enslaving as an active interface with an up link [ 884.726997][T10969] bond16: (slave wireguard1): The slave device specified does not support setting the MAC address [ 884.967150][T10969] bond16: (slave wireguard1): Enslaving as a backup interface with an up link [ 885.450292][T10994] netlink: 200 bytes leftover after parsing attributes in process `syz.1.16666'. [ 885.591384][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16668'. [ 885.920720][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16669'. [ 886.185479][T11007] netlink: 272 bytes leftover after parsing attributes in process `syz.4.16672'. [ 886.883671][T11039] batadv_slave_0: entered promiscuous mode [ 886.900081][T11038] batadv_slave_0: left promiscuous mode [ 887.319261][T11048] syzkaller0: entered promiscuous mode [ 887.335604][T11048] syzkaller0: entered allmulticast mode [ 887.962809][T11078] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 887.980417][T11078] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 888.153738][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16691'. [ 889.216895][T11011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 889.414212][T11110] delete_channel: no stack [ 889.465929][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16697'. [ 889.542158][T11111] team1: entered promiscuous mode [ 889.547419][T11111] team1: entered allmulticast mode [ 889.554186][T11111] 8021q: adding VLAN 0 to HW filter on device team1 [ 889.657721][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16703'. [ 889.796038][T11128] netlink: 'syz.3.16704': attribute type 6 has an invalid length. [ 889.819860][T11128] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.16704'. [ 889.850130][T11128] netlink: 'syz.3.16704': attribute type 1 has an invalid length. [ 889.873610][T11128] block nbd3: Unsupported socket: should be TCP or UNIX. [ 890.940911][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16727'. [ 891.114808][T11189] netlink: 'syz.3.16731': attribute type 1 has an invalid length. [ 891.155204][T11181] syzkaller0: entered promiscuous mode [ 891.160834][T11181] syzkaller0: entered allmulticast mode [ 891.224122][T11189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.315713][T11195] bond11: (slave ip6gretap4): making interface the new active one [ 891.408968][T11195] bond11: (slave ip6gretap4): Enslaving as an active interface with an up link [ 891.544844][T11193] bond11: entered allmulticast mode [ 891.550128][T11193] ip6gretap4: entered allmulticast mode [ 892.215899][T11219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16737'. [ 892.404500][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16738'. [ 893.561250][T11225] bond0: ARP target 170.170.170.170 is already present [ 893.568740][T11225] bond0: option arp_ip_target: invalid value (2863311530) [ 894.148270][T11250] lo speed is unknown, defaulting to 1000 [ 894.678490][T11258] lo speed is unknown, defaulting to 1000 [ 894.720261][T11271] syzkaller0: entered promiscuous mode [ 894.734175][T11271] syzkaller0: entered allmulticast mode [ 895.200276][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16758'. [ 895.563886][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16762'. [ 895.640643][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16762'. [ 895.718615][T11297] team1: entered promiscuous mode [ 895.723980][T11297] team1: entered allmulticast mode [ 895.729621][T11297] 8021q: adding VLAN 0 to HW filter on device team1 [ 895.743028][T11299] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 895.779209][T11299] team2: entered promiscuous mode [ 895.784537][T11299] team2: entered allmulticast mode [ 895.790263][T11299] 8021q: adding VLAN 0 to HW filter on device team2 [ 895.816180][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16764'. [ 895.964852][T11307] netlink: 'syz.0.16766': attribute type 1 has an invalid length. [ 896.086516][T11307] 8021q: adding VLAN 0 to HW filter on device bond10 [ 896.132882][T11313] bond10: up delay (7047) is not a multiple of miimon (100), value rounded to 7000 ms [ 896.219438][T11313] bond10: entered allmulticast mode [ 896.359646][T11316] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 896.672454][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16776'. [ 896.730295][T11338] syzkaller0: entered promiscuous mode [ 896.736319][T11338] syzkaller0: entered allmulticast mode [ 896.977037][T11353] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 896.992864][T11353] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 897.033382][T11359] netlink: 'syz.0.16783': attribute type 1 has an invalid length. [ 897.142032][T11359] 8021q: adding VLAN 0 to HW filter on device bond11 [ 897.199071][T11360] bond11: (slave veth17): Enslaving as an active interface with a down link [ 897.208556][T11363] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 897.229639][T11370] netlink: 'syz.1.16789': attribute type 1 has an invalid length. [ 897.296502][T11359] ip6gre4: left promiscuous mode [ 897.301519][T11359] ip6gre4: left allmulticast mode [ 897.323130][T11359] bond10: left allmulticast mode [ 897.365988][T11370] 8021q: adding VLAN 0 to HW filter on device bond10 [ 897.382745][T11360] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 897.393348][T11360] bond11: (slave batadv2): making interface the new active one [ 897.403625][T11360] batadv2: entered promiscuous mode [ 897.409334][T11360] bond11: (slave batadv2): Enslaving as an active interface with an up link [ 897.446258][T11374] vlan2: entered allmulticast mode [ 897.451557][T11374] bond10: entered allmulticast mode [ 897.457592][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16790'. [ 897.656731][T11382] syzkaller0: entered promiscuous mode [ 897.663789][T11382] syzkaller0: entered allmulticast mode [ 897.673730][T11388] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 897.684078][T11388] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 897.826674][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16799'. [ 897.949576][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16799'. [ 898.011673][T11401] bond17: entered promiscuous mode [ 898.017794][T11401] 8021q: adding VLAN 0 to HW filter on device bond17 [ 898.079181][T11404] bridge9: entered promiscuous mode [ 898.088451][T11404] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 898.163528][T11407] bond17 (unregistering): (slave bridge9): Releasing backup interface [ 898.174620][T11407] bridge9: left promiscuous mode [ 898.184088][T11407] bond17 (unregistering): Released all slaves [ 898.298887][T11411] lo speed is unknown, defaulting to 1000 [ 898.790894][T11429] netlink: 'syz.1.16807': attribute type 8 has an invalid length. [ 898.822022][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16807'. [ 898.881459][T11432] bond0: entered promiscuous mode [ 898.891467][T11432] batadv0: entered promiscuous mode [ 898.898555][T11432] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 898.908966][T11432] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 898.920299][T11432] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 898.947954][T11432] bond0: left promiscuous mode [ 898.978998][T11432] batadv0: left promiscuous mode [ 899.010606][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16811'. [ 899.229453][T11438] tipc: Enabled bearer , priority 0 [ 899.263223][T11438] syzkaller0: entered promiscuous mode [ 899.270992][T11438] syzkaller0: entered allmulticast mode [ 899.295090][T11438] tipc: Resetting bearer [ 899.403436][T11437] tipc: Resetting bearer [ 899.510863][T11437] tipc: Disabling bearer [ 899.779101][T11451] syzkaller0: entered promiscuous mode [ 899.793267][T11451] syzkaller0: entered allmulticast mode [ 901.849618][T11488] lo speed is unknown, defaulting to 1000 [ 901.913877][T11504] syzkaller1: entered promiscuous mode [ 901.919566][T11504] syzkaller1: entered allmulticast mode [ 901.982996][T11507] tipc: Enabled bearer , priority 0 [ 902.134558][T11516] tipc: Enabling of bearer rejected, already enabled [ 902.583550][T11538] lo speed is unknown, defaulting to 1000 [ 903.002738][T11554] syzkaller1: entered promiscuous mode [ 903.008386][T11554] syzkaller1: entered allmulticast mode [ 903.492508][ C1] bridge0: port 3(bond0) entered forwarding state [ 903.499046][ C1] bridge0: topology change detected, propagating [ 903.709362][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16851'. [ 903.743754][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16850'. [ 903.915789][T11586] bond13: entered promiscuous mode [ 903.943304][T11586] 8021q: adding VLAN 0 to HW filter on device bond13 [ 903.979366][T11597] netlink: 'syz.1.16853': attribute type 11 has an invalid length. [ 904.153081][T11602] netlink: 'syz.2.16854': attribute type 4 has an invalid length. [ 904.169602][T11604] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 904.210651][T11608] netlink: 'syz.2.16854': attribute type 4 has an invalid length. [ 904.335506][T11612] lo speed is unknown, defaulting to 1000 [ 904.479767][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16860'. [ 904.650707][T11628] lo speed is unknown, defaulting to 1000 [ 906.109240][T11653] syzkaller0: entered promiscuous mode [ 906.115416][T11653] syzkaller0: entered allmulticast mode [ 906.384535][T11660] syzkaller1: entered promiscuous mode [ 906.391956][T11660] syzkaller1: entered allmulticast mode [ 906.945644][T11683] rdma_rxe: rxe_newlink: failed to add gre0 [ 906.977217][T11683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 907.002388][ T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 907.059063][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16882'. [ 907.086892][T11687] 8021q: adding VLAN 0 to HW filter on device bond11 [ 907.123451][T11687] macsec1: entered allmulticast mode [ 907.129015][T11687] bond11: entered allmulticast mode [ 907.137077][T11687] bond11: left allmulticast mode [ 907.366418][T11694] netlink: 'syz.1.16885': attribute type 1 has an invalid length. [ 907.565485][T11700] bond12: (slave bridge16): Enslaving as a backup interface with an up link [ 907.841176][T11715] syzkaller0: entered promiscuous mode [ 907.871957][T11715] syzkaller0: entered allmulticast mode [ 907.892438][ T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 908.245178][T11734] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 908.342233][T11736] lo speed is unknown, defaulting to 1000 [ 908.600129][T11748] tap0: tun_chr_ioctl cmd 2148553947 [ 908.812992][T11751] sit2: entered promiscuous mode [ 908.828741][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16902'. [ 909.529615][T11766] syzkaller0: entered promiscuous mode [ 909.535902][T11766] syzkaller0: entered allmulticast mode [ 909.547528][T11769] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16907'. [ 909.577693][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16907'. [ 909.758702][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16912'. [ 909.899813][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16913'. [ 909.921331][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16913'. [ 911.430135][T11790] lo speed is unknown, defaulting to 1000 [ 911.442904][T11789] lo speed is unknown, defaulting to 1000 [ 911.661218][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16917'. [ 911.757022][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16920'. [ 911.766780][T11822] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 911.862869][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16922'. [ 911.893460][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16922'. [ 911.986746][T11828] lo speed is unknown, defaulting to 1000 [ 912.895463][T11844] syzkaller0: entered promiscuous mode [ 912.901165][T11844] syzkaller0: entered allmulticast mode [ 913.836008][T11884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 913.878213][T11884] bond2: (slave ip6gretap2): making interface the new active one [ 913.887579][T11884] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 913.949156][T11886] vlan1: entered promiscuous mode [ 914.100830][T11893] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 914.108574][T11893] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 914.115195][T11896] __nla_validate_parse: 2 callbacks suppressed [ 914.115252][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16946'. [ 914.139471][T11893] tipc: Resetting bearer [ 914.180237][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16946'. [ 914.423118][T11909] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 914.438877][T11905] syzkaller0: entered promiscuous mode [ 914.447934][T11905] syzkaller0: entered allmulticast mode [ 914.533658][T11911] netlink: 'syz.3.16953': attribute type 1 has an invalid length. [ 914.716642][T11920] tipc: Enabling of bearer rejected, already enabled [ 914.793839][T11927] netlink: 'syz.2.16959': attribute type 1 has an invalid length. [ 914.814250][T11927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16959'. [ 915.112894][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16965'. [ 915.123651][T11940] syzkaller0: entered promiscuous mode [ 915.129180][T11940] syzkaller0: entered allmulticast mode [ 915.146765][T11943] SET target dimension over the limit! [ 915.275345][T11947] netlink: 'syz.4.16966': attribute type 3 has an invalid length. [ 915.287080][T11947] netlink: 'syz.4.16966': attribute type 3 has an invalid length. [ 915.420138][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16969'. [ 916.144790][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16977'. [ 916.201539][T11976] bond17: entered promiscuous mode [ 916.207284][T11976] bond17: entered allmulticast mode [ 916.290074][T11979] syzkaller0: entered promiscuous mode [ 916.296646][T11979] syzkaller0: entered allmulticast mode [ 916.360874][T11983] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 916.369512][T11983] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 916.983992][T12007] syzkaller0: entered promiscuous mode [ 916.989653][T12007] syzkaller0: entered allmulticast mode [ 917.190495][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16990'. [ 917.369240][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16993'. [ 917.455329][T12020] syzkaller0: entered promiscuous mode [ 917.461074][T12020] syzkaller0: entered allmulticast mode [ 917.613947][T12022] lo speed is unknown, defaulting to 1000 [ 918.555206][T11956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.796250][T12028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.843559][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16999'. [ 918.853758][T12033] ip6_vti0: entered promiscuous mode [ 918.867698][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16997'. [ 918.890519][T12032] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 918.986573][T12047] netlink: 'syz.2.16999': attribute type 5 has an invalid length. [ 919.419621][T12074] ip6gretap0: entered promiscuous mode [ 919.589658][T12078] __nla_validate_parse: 2 callbacks suppressed [ 919.589679][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17015'. [ 919.653326][T12078] 8021q: adding VLAN 0 to HW filter on device bond19 [ 919.663704][T12078] bond18: (slave bond19): Enslaving as an active interface with an up link [ 919.744160][T12087] netlink: 'syz.2.17018': attribute type 1 has an invalid length. [ 919.773354][T12087] bond20: entered promiscuous mode [ 919.778895][T12087] 8021q: adding VLAN 0 to HW filter on device bond20 [ 919.813263][T12087] 8021q: adding VLAN 0 to HW filter on device bond20 [ 919.820484][T12087] bond20: (slave vti1): The slave device specified does not support setting the MAC address [ 919.834790][T12087] bond20: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 919.853298][T12087] bond20: (slave vti1): making interface the new active one [ 919.860665][T12087] vti1: entered promiscuous mode [ 919.868709][T12087] bond20: (slave vti1): Enslaving as an active interface with an up link [ 920.067675][T12097] syzkaller0: entered promiscuous mode [ 920.073646][T12097] syzkaller0: entered allmulticast mode [ 920.330533][T12107] syzkaller0: entered promiscuous mode [ 920.336353][T12107] syzkaller0: entered allmulticast mode [ 920.507229][T12116] netlink: 'syz.2.17027': attribute type 1 has an invalid length. [ 920.643838][T12116] bond21: entered promiscuous mode [ 920.659876][T12116] 8021q: adding VLAN 0 to HW filter on device bond21 [ 920.687957][T12118] vlan2: entered allmulticast mode [ 920.715949][T12118] bond21: entered allmulticast mode [ 920.764834][T12121] bond21: (slave bridge11): making interface the new active one [ 920.781933][T12121] bridge11: entered promiscuous mode [ 920.808068][T12121] bridge11: entered allmulticast mode [ 920.820253][T12121] bond21: (slave bridge11): Enslaving as an active interface with an up link [ 921.135843][T12138] lo speed is unknown, defaulting to 1000 [ 921.153867][T12146] syzkaller0: entered promiscuous mode [ 921.175602][T12146] syzkaller0: entered allmulticast mode [ 921.225061][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17038'. [ 921.324819][T12150] 8021q: adding VLAN 0 to HW filter on device bond12 [ 921.369595][T12152] bond12: entered promiscuous mode [ 921.381375][T12152] bond12: entered allmulticast mode [ 921.461548][T12152] 8021q: adding VLAN 0 to HW filter on device bond12 [ 921.471582][T12152] team0: Port device bond12 added [ 921.496474][T12147] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 921.534256][T12153] vxcan5: entered promiscuous mode [ 921.539692][T12153] bond12: (slave vxcan5): refused to change device type [ 921.856497][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17043'. [ 921.871881][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17043'. [ 922.125085][T12174] syzkaller0: entered promiscuous mode [ 922.130834][T12174] syzkaller0: entered allmulticast mode [ 922.140097][T12174] tipc: Enabled bearer , priority 0 [ 922.150927][T12173] tipc: Resetting bearer [ 922.282290][T12173] tipc: Disabling bearer [ 922.525538][T12195] syzkaller0: entered promiscuous mode [ 922.531426][T12195] syzkaller0: entered allmulticast mode [ 922.699721][T12202] netlink: 'syz.0.17056': attribute type 1 has an invalid length. [ 922.732078][T12202] 8021q: adding VLAN 0 to HW filter on device bond12 [ 922.748902][T12202] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 922.785929][T12202] bond12: entered promiscuous mode [ 922.792913][T12202] bond12: entered allmulticast mode [ 922.805937][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17056'. [ 922.823179][T12202] bond12: left promiscuous mode [ 922.831189][T12202] bond12: left allmulticast mode [ 922.840867][T12202] 8021q: adding VLAN 0 to HW filter on device bond12 [ 922.970833][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17059'. [ 923.062804][T12220] macsec3: entered allmulticast mode [ 923.068280][T12220] bridge17: entered allmulticast mode [ 923.077068][T12220] bridge17: left allmulticast mode [ 923.450201][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17067'. [ 923.494258][T12244] bond13: entered promiscuous mode [ 923.512835][T12244] bond13: entered allmulticast mode [ 923.577530][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17068'. [ 923.597975][T12247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17068'. [ 923.956362][T12260] syzkaller0: entered promiscuous mode [ 923.972808][T12260] syzkaller0: entered allmulticast mode [ 924.333892][T12252] lec:lec_atm_close: lec0: Shut down! [ 924.385402][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17073'. [ 924.511036][T12277] team0: Port device team_slave_1 removed [ 924.611622][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17075'. [ 924.893081][T12289] lo speed is unknown, defaulting to 1000 [ 925.018543][T12300] 8021q: adding VLAN 0 to HW filter on device bond14 [ 925.078708][T12303] bond14: (slave ip6gretap5): making interface the new active one [ 925.088344][T12303] bond14: (slave ip6gretap5): Enslaving as an active interface with an up link [ 925.372313][T12313] siw: device registration error -23 [ 925.522476][ T5929] lec:lec_start_xmit: lec0:No lecd attached [ 925.546557][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17084'. [ 925.768423][T12317] lo speed is unknown, defaulting to 1000 [ 926.532634][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 926.719630][T12348] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17090'. [ 926.831752][T12346] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17087'. [ 927.088043][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17094'. [ 927.286906][T12367] lo speed is unknown, defaulting to 1000 [ 927.589820][T12387] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 927.623277][T12387] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 927.780785][T12392] netlink: 'syz.4.17101': attribute type 2 has an invalid length. [ 927.798627][T12392] netlink: 'syz.4.17101': attribute type 8 has an invalid length. [ 927.817576][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17101'. [ 927.904003][T12392] netlink: 'syz.4.17101': attribute type 2 has an invalid length. [ 927.931278][T12392] netlink: 'syz.4.17101': attribute type 8 has an invalid length. [ 927.945126][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17101'. [ 928.852104][T12420] netlink: 'syz.0.17107': attribute type 1 has an invalid length. [ 928.879671][T12420] 8021q: adding VLAN 0 to HW filter on device bond13 [ 928.903197][T12420] vlan3: entered allmulticast mode [ 928.908372][T12420] bond13: entered allmulticast mode [ 929.045669][T12420] bond13: (slave geneve4): making interface the new active one [ 929.061995][T12420] geneve4: entered allmulticast mode [ 929.074902][T12420] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 929.094767][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.106336][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.132638][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.140986][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.364506][T12435] netlink: 'syz.4.17110': attribute type 10 has an invalid length. [ 929.373517][T12435] wlan1: mtu less than device minimum [ 929.387158][T12435] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 929.492451][T12437] syzkaller0: entered promiscuous mode [ 929.498167][T12437] syzkaller0: entered allmulticast mode [ 930.163478][T12372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 930.311942][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17117'. [ 930.389301][T12451] bond13: entered promiscuous mode [ 930.395049][T12451] bond13: entered allmulticast mode [ 931.011885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 931.020850][ C1] lec:lec_tx_timeout: lec0 [ 931.025914][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 931.375128][T12481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.692094][T12484] syzkaller0: entered promiscuous mode [ 931.697731][T12484] syzkaller0: entered allmulticast mode [ 932.706322][T12499] syzkaller1: entered promiscuous mode [ 932.712505][T12499] syzkaller1: entered allmulticast mode [ 933.230238][T12446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 933.425045][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17137'. [ 933.529076][T12521] syzkaller0: entered promiscuous mode [ 933.535121][T12521] syzkaller0: entered allmulticast mode [ 935.066655][ T876] IPVS: starting estimator thread 0... [ 935.172481][T12574] IPVS: using max 26 ests per chain, 62400 per kthread [ 935.458886][T12585] syzkaller1: entered promiscuous mode [ 935.488571][T12585] syzkaller1: entered allmulticast mode [ 935.939161][T12606] lo speed is unknown, defaulting to 1000 [ 936.041842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 936.049956][ C1] lec:lec_tx_timeout: lec0 [ 936.055372][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 936.434282][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17179'. [ 936.677689][T12630] syzkaller0: entered promiscuous mode [ 936.687911][T12630] syzkaller0: entered allmulticast mode [ 936.981710][T12642] syzkaller0: entered promiscuous mode [ 937.001884][T12642] syzkaller0: entered allmulticast mode [ 937.043994][T12644] netlink: 'syz.2.17186': attribute type 83 has an invalid length. [ 937.230135][T12652] ip6gre1: entered promiscuous mode [ 937.235697][T12652] ip6gre1: entered allmulticast mode [ 937.263432][T12652] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.370958][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17191'. [ 937.466537][T12657] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 937.485056][T12657] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 937.544296][T12661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17194'. [ 937.603122][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.652074][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.659905][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.752374][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 937.771241][T12676] syzkaller0: entered promiscuous mode [ 937.787613][T12676] syzkaller0: entered allmulticast mode [ 937.803787][T12673] lo speed is unknown, defaulting to 1000 [ 937.982892][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17201'. [ 938.249976][T12670] lec:lec_atm_close: lec0: Shut down! [ 938.695688][ T795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 938.746728][T12706] syzkaller0: entered promiscuous mode [ 938.756354][T12706] syzkaller0: entered allmulticast mode [ 938.782822][T12710] syzkaller0: entered promiscuous mode [ 938.809302][T12710] syzkaller0: entered allmulticast mode [ 939.173282][T12727] netlink: 'syz.3.17208': attribute type 2 has an invalid length. [ 939.194393][ T29] audit: type=1800 audit(1776168648.537:21): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17210" name="memory.events" dev="tmpfs" ino=17565 res=0 errno=0 [ 939.221705][T12727] netlink: 'syz.3.17208': attribute type 2 has an invalid length. [ 939.396459][T12727] macsec3: entered promiscuous mode [ 940.491447][T12792] netlink: 'syz.0.17225': attribute type 1 has an invalid length. [ 940.547525][T12792] bond14: entered promiscuous mode [ 940.553215][T12792] 8021q: adding VLAN 0 to HW filter on device bond14 [ 940.632397][T12792] ipvlan4: entered allmulticast mode [ 940.637775][T12792] bond14: entered allmulticast mode [ 940.724046][T12792] bond14: (slave bridge18): making interface the new active one [ 940.734885][T12792] bridge18: entered promiscuous mode [ 940.754057][T12792] bridge18: entered allmulticast mode [ 940.771326][T12792] bond14: (slave bridge18): Enslaving as an active interface with an up link [ 940.793776][T12801] lo speed is unknown, defaulting to 1000 [ 940.842945][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17228'. [ 941.424157][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17238'. [ 941.718465][T12840] lo speed is unknown, defaulting to 1000 [ 941.904039][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.390799][T12738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.656978][T12856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17247'. [ 942.666296][T12856] netlink: 'syz.3.17247': attribute type 1 has an invalid length. [ 942.784491][T12852] lo speed is unknown, defaulting to 1000 [ 942.976275][T12869] lo speed is unknown, defaulting to 1000 [ 943.154151][T12881] netlink: 'syz.2.17252': attribute type 1 has an invalid length. [ 943.248315][T12881] 8021q: adding VLAN 0 to HW filter on device bond22 [ 943.314463][T12888] vlan3: entered promiscuous mode [ 943.325536][T12888] bond22: entered promiscuous mode [ 943.337088][T12888] vlan3: entered allmulticast mode [ 943.352282][T12888] bond22: entered allmulticast mode [ 943.410072][T12881] bond22: (slave bridge12): making interface the new active one [ 943.420294][T12881] bridge12: entered promiscuous mode [ 943.431941][T12881] bridge12: entered allmulticast mode [ 943.442988][T12881] bond22: (slave bridge12): Enslaving as an active interface with an up link [ 943.471141][T12883] lo speed is unknown, defaulting to 1000 [ 944.202204][T12890] lec:lec_atm_close: lec0: Shut down! [ 944.540434][T12917] syzkaller0: entered promiscuous mode [ 944.549289][T12917] syzkaller0: entered allmulticast mode [ 944.594406][T12917] tipc: Enabled bearer , priority 0 [ 944.603183][T12915] tipc: Resetting bearer [ 944.625838][T12920] netlink: 'syz.2.17258': attribute type 10 has an invalid length. [ 944.635944][T12915] tipc: Disabling bearer [ 944.652513][T12920] wlan1: mtu greater than device maximum [ 944.668584][T12920] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 945.495012][T12926] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.561986][T12926] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.685048][T12926] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.825641][T12926] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.932830][T12939] tipc: Enabling of bearer rejected, already enabled [ 945.965692][T12939] tipc: Resetting bearer [ 946.135103][ T1149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.150734][ T1149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.224924][ T1005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.293239][ T1005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.478680][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17267'. [ 946.493550][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17267'. [ 946.667115][T12969] netlink: 'syz.2.17269': attribute type 4 has an invalid length. [ 946.755054][T12973] netlink: 'syz.2.17269': attribute type 4 has an invalid length. [ 946.867819][T12970] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 946.876827][T12970] syzkaller0: entered promiscuous mode [ 946.882512][T12970] syzkaller0: entered allmulticast mode [ 946.893602][T12969] netlink: 'syz.2.17269': attribute type 4 has an invalid length. [ 947.810152][T13002] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 947.864003][T13002] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 947.900721][T13002] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 947.954137][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.033142][T13008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.407547][T13016] tipc: Enabled bearer , priority 0 [ 948.711503][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17285'. [ 949.578643][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17287'. [ 949.618370][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17287'. [ 949.668781][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17289'. [ 949.756586][T13047] hsr_slave_0: left promiscuous mode [ 949.852849][T13047] hsr_slave_1: left promiscuous mode [ 949.952251][T13048] netlink: 'syz.2.17288': attribute type 10 has an invalid length. [ 949.971821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 949.979943][ C1] lec:lec_tx_timeout: lec0 [ 949.985273][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 950.053091][T13059] veth17: entered allmulticast mode [ 950.071452][T13059] bond14: (slave veth17): Enslaving as an active interface with an up link [ 950.237925][T13060] bond14 (unregistering): (slave veth17): Releasing backup interface [ 950.267149][T13060] bond14 (unregistering): Released all slaves [ 950.319630][T13069] netlink: 'syz.0.17293': attribute type 1 has an invalid length. [ 950.386756][T13069] 8021q: adding VLAN 0 to HW filter on device bond15 [ 950.489623][T13069] vlan0: entered promiscuous mode [ 950.523821][T13069] bond15: entered promiscuous mode [ 950.545639][T13074] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17293'. [ 950.560248][T13069] vlan0: entered allmulticast mode [ 950.581088][T13069] bond15: entered allmulticast mode [ 950.658130][T13074] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 950.691393][T13074] bond15: (slave batadv3): making interface the new active one [ 950.710105][T13074] batadv3: entered promiscuous mode [ 950.724796][T13074] batadv3: entered allmulticast mode [ 950.739846][T13074] bond15: (slave batadv3): Enslaving as an active interface with an up link [ 950.852198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 950.925819][T13096] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.17300'. [ 950.956781][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 951.182751][T13109] syzkaller0: entered promiscuous mode [ 951.188304][T13109] syzkaller0: entered allmulticast mode [ 951.513530][T13112] syzkaller0: entered promiscuous mode [ 951.521570][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17302'. [ 951.531566][T13112] syzkaller0: entered allmulticast mode [ 951.579854][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17302'. [ 951.615687][T13102] macvtap1: entered promiscuous mode [ 951.627926][T13102] virtio_net virtio1 eth0: entered promiscuous mode [ 951.639337][T13090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.661420][T13102] macvtap1: entered allmulticast mode [ 951.678937][T13102] virtio_net virtio1 eth0: entered allmulticast mode [ 951.895960][T13105] virtio_net virtio1 eth0: left allmulticast mode [ 951.911727][T13105] virtio_net virtio1 eth0: left promiscuous mode [ 951.990361][T13116] lo speed is unknown, defaulting to 1000 [ 952.068471][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17308'. [ 952.121217][T13123] netlink: 'syz.2.17308': attribute type 1 has an invalid length. [ 952.201348][T13123] bond7: left promiscuous mode [ 952.216947][T13123] bond8: left promiscuous mode [ 952.248033][T13123] bond10: left promiscuous mode [ 952.266184][T13123] veth7: left promiscuous mode [ 952.290915][T13123] bridge3: left promiscuous mode [ 952.312149][T13123] ip6gre3: left promiscuous mode [ 952.333033][T13123] geneve4: left promiscuous mode [ 952.353144][T13123] bond16: left promiscuous mode [ 952.364825][T13123] wireguard0: left promiscuous mode [ 952.387219][T13123] team1: left promiscuous mode [ 952.393089][ T1166] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.414505][T13123] bond17: left promiscuous mode [ 952.423366][T13123] bond20: left promiscuous mode [ 952.432421][ T1166] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.442636][T13123] vti1: left promiscuous mode [ 952.452554][ T1005] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.462212][T13123] bond21: left promiscuous mode [ 952.492231][ T1005] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.512301][T13123] bridge11: left promiscuous mode [ 952.518630][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17311'. [ 952.522873][T13123] vlan3: left promiscuous mode [ 952.528554][ T12] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.571979][ T12] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.572021][T13123] bond22: left promiscuous mode [ 952.612400][ T12] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.616309][T13123] bridge12: left promiscuous mode [ 952.633238][ T12] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.671720][T13132] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 952.682167][T13132] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 952.689926][ T79] bond14: (slave ip6gretap2): link status up again after 0 ms [ 952.732446][ T1005] bond14: (slave ip6gretap2): link status up again after 0 ms [ 953.031466][T13145] lo speed is unknown, defaulting to 1000 [ 953.720898][T13164] lo speed is unknown, defaulting to 1000 [ 954.017379][T13178] syzkaller0: entered promiscuous mode [ 954.023042][T13178] syzkaller0: entered allmulticast mode [ 954.901453][T13217] __nla_validate_parse: 1 callbacks suppressed [ 954.901473][T13217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17324'. [ 954.941251][T13214] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.992158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 955.000303][ C1] lec:lec_tx_timeout: lec0 [ 955.005543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 955.090320][T13207] syzkaller0: entered promiscuous mode [ 955.113787][T13207] syzkaller0: entered allmulticast mode [ 955.177401][T13214] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.844590][T13214] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.938649][T13214] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.048625][T13246] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 957.121220][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17329'. [ 957.147780][T13251] netlink: 'syz.4.17328': attribute type 1 has an invalid length. [ 957.296860][T13256] bond14: (slave veth17): Enslaving as an active interface with a down link [ 957.306226][ T1005] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.374144][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17328'. [ 957.420802][T13263] bond14: (slave veth19): Enslaving as an active interface with a down link [ 957.512827][ T12] net_ratelimit: 25 callbacks suppressed [ 957.512850][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 957.624068][T13251] 8021q: adding VLAN 0 to HW filter on device bond14 [ 957.662529][ T1005] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.699320][ T1083] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.754521][ T1083] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.796030][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 957.974576][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.031739][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17336'. [ 958.053662][T13288] netlink: 'syz.1.17337': attribute type 10 has an invalid length. [ 958.064742][T13288] netlink: 'syz.1.17337': attribute type 10 has an invalid length. [ 958.102165][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.136017][T13284] vlan1: entered allmulticast mode [ 958.151602][T13284] bridge15: entered allmulticast mode [ 958.238576][T13284] bridge15: port 1(bond15) entered blocking state [ 958.248012][T13284] bridge15: port 1(bond15) entered disabled state [ 958.255336][T13284] bond15: entered allmulticast mode [ 958.263148][T13284] bond15: entered promiscuous mode [ 958.281935][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.307151][T13292] tipc: Enabling of bearer rejected, already enabled [ 958.392365][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.466332][T13307] netlink: 220 bytes leftover after parsing attributes in process `syz.4.17343'. [ 958.478000][T13307] netlink: 'syz.4.17343': attribute type 2 has an invalid length. [ 958.511979][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.613915][T13309] IPVS: ip_vs_add_dest(): server weight less than zero [ 958.622293][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.734444][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 958.772897][T13323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17348'. [ 958.852553][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 960.012554][T13344] lec:lec_atm_close: lec0: Shut down! [ 960.020281][T13363] syzkaller0: entered promiscuous mode [ 960.057808][T13363] syzkaller0: entered allmulticast mode [ 960.330637][T13367] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17361'. [ 960.432386][T13371] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 960.782817][ T4183] Bluetooth: hci4: command 0x0406 tx timeout [ 961.150725][T13401] dvmrp6: entered allmulticast mode [ 961.279218][T13405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 54953 - 0 [ 961.362929][T13408] syzkaller0: entered promiscuous mode [ 961.370905][T13408] syzkaller0: entered allmulticast mode [ 961.428301][T13372] lec:lec_atm_close: lec0: Shut down! [ 961.469905][T13405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 54953 - 0 [ 961.581871][T13405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 54953 - 0 [ 961.628311][T13417] tipc: Enabled bearer , priority 0 [ 961.697928][T13405] team0: Failed to send options change via netlink (err -105) [ 961.711193][T13405] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 961.725179][T13405] team0: Port device netdevsim0 removed [ 961.737090][T13405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 54953 - 0 [ 961.926533][ T1083] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 54953 - 0 [ 962.017606][ T1149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 54953 - 0 [ 962.133213][ T1083] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 54953 - 0 [ 962.187678][ T1083] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 54953 - 0 [ 962.379419][T13446] syzkaller0: entered promiscuous mode [ 962.396052][T13446] syzkaller0: entered allmulticast mode [ 962.510057][T13448] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 962.555388][ T1083] net_ratelimit: 28 callbacks suppressed [ 962.555408][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 962.604696][T13428] lec:lec_atm_close: lec0: Shut down! [ 962.682000][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 962.760777][T13460] syzkaller0: entered promiscuous mode [ 962.792236][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 962.903609][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 962.972605][T13467] syzkaller0: entered promiscuous mode [ 962.978301][T13467] syzkaller0: entered allmulticast mode [ 963.109688][T13455] lec:lec_atm_close: lec0: Shut down! [ 963.294970][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 963.395573][T13474] lo speed is unknown, defaulting to 1000 [ 963.465382][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 963.608877][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 963.842155][ T1083] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 963.962172][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 964.229394][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17393'. [ 964.292727][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 964.323048][T13505] lo speed is unknown, defaulting to 1000 [ 964.632405][T13514] syzkaller0: entered promiscuous mode [ 964.637949][T13514] syzkaller0: entered allmulticast mode [ 964.847248][T13521] tipc: Enabling of bearer rejected, already enabled [ 965.206989][T13528] team0: No ports can be present during mode change [ 965.514287][T13537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17401'. [ 965.685433][ T5490] veth1_macvtap: left promiscuous mode [ 965.873024][T13554] netlink: 'syz.2.17404': attribute type 39 has an invalid length. [ 967.152074][T13599] syzkaller0: entered promiscuous mode [ 967.167898][T13599] syzkaller0: entered allmulticast mode [ 967.430409][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17412'. [ 967.543859][T13601] lo speed is unknown, defaulting to 1000 [ 967.564462][ T79] net_ratelimit: 15 callbacks suppressed [ 967.564482][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 967.753839][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.829274][T13615] bridge_slave_1: Caught tx_queue_len zero misconfig [ 967.938500][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 968.111925][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 968.120049][ C1] lec:lec_tx_timeout: lec0 [ 968.125771][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 968.160919][T13606] lec:lec_atm_close: lec0: Shut down! [ 968.191985][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 968.315071][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 968.419948][T13633] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 968.422474][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17422'. [ 968.448969][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 968.603726][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 968.672776][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17424'. [ 968.756716][T13651] netlink: 'syz.2.17426': attribute type 1 has an invalid length. [ 968.782020][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 968.870915][T13651] 8021q: adding VLAN 0 to HW filter on device bond23 [ 968.935757][T13654] bond23: (slave veth25): Enslaving as an active interface with a down link [ 968.936035][T13651] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17426'. [ 968.954907][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 969.114081][T13655] team0: Port device dummy0 removed [ 969.159276][T13655] bond23: (slave dummy0): making interface the new active one [ 969.168652][T13655] dummy0: entered promiscuous mode [ 969.174725][T13655] bond23: (slave dummy0): Enslaving as an active interface with an up link [ 969.189100][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17431'. [ 969.213885][T13662] delete_channel: no stack [ 969.225150][T13651] bond23: (slave dummy0): Releasing active interface [ 969.233367][T13651] dummy0 (unregistering): left promiscuous mode [ 969.269131][T13663] ip6_vti0: left promiscuous mode [ 969.315899][T13663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 969.342747][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 969.351510][ T876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 969.392211][ T1210] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 969.432820][T13672] netlink: 'syz.2.17432': attribute type 10 has an invalid length. [ 969.472660][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 969.800983][T13679] siw: device registration error -23 [ 970.187119][T13704] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 970.218108][T13704] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17441'. [ 970.248024][T13704] 0ªX¹¦À: renamed from caif0 [ 970.312608][T13704] 0ªX¹¦À: entered allmulticast mode [ 970.370935][T13711] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17442'. [ 970.403167][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17442'. [ 970.461877][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17442'. [ 970.976643][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17451'. [ 971.015925][T13742] syzkaller1: entered promiscuous mode [ 971.021488][T13742] syzkaller1: entered allmulticast mode [ 971.263046][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.299684][T13764] netlink: 'syz.1.17455': attribute type 1 has an invalid length. [ 971.349098][T13768] netlink: 'syz.2.17456': attribute type 1 has an invalid length. [ 971.375115][T13770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17455'. [ 971.458490][T13764] bond14: entered promiscuous mode [ 971.464788][T13764] 8021q: adding VLAN 0 to HW filter on device bond14 [ 971.477254][T13776] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17456'. [ 971.519464][T13768] 8021q: adding VLAN 0 to HW filter on device bond24 [ 971.579440][T13770] bond14: entered allmulticast mode [ 971.618337][T13781] netlink: 'syz.4.17457': attribute type 1 has an invalid length. [ 971.628942][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.651429][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.679509][T13774] bond24: (slave veth27): Enslaving as an active interface with a down link [ 971.821328][T13770] bond14: (slave bridge17): making interface the new active one [ 971.829550][T13770] bridge17: entered promiscuous mode [ 971.836210][T13770] bridge17: entered allmulticast mode [ 971.849861][T13770] bond14: (slave bridge17): Enslaving as an active interface with an up link [ 972.025849][T13787] bond15: (slave gretap4): making interface the new active one [ 972.058266][T13787] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 972.227432][T13791] macvlan5: entered promiscuous mode [ 972.232953][T13791] macvlan5: entered allmulticast mode [ 972.239235][T13791] bond15: entered promiscuous mode [ 972.245168][T13791] gretap4: entered promiscuous mode [ 972.253244][T13791] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 972.290297][T13791] bond15: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 972.308453][T13791] bond15: left promiscuous mode [ 972.313549][T13791] gretap4: left promiscuous mode [ 972.342959][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.356211][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17458'. [ 972.369025][T13808] netlink: 'syz.1.17461': attribute type 10 has an invalid length. [ 972.389905][T13809] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 972.397775][T13809] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 972.565229][T13811] netlink: 'syz.4.17464': attribute type 1 has an invalid length. [ 972.642562][ T12] net_ratelimit: 18 callbacks suppressed [ 972.642586][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 972.724046][T13811] veth21: entered allmulticast mode [ 972.756105][T13811] bond16: (slave veth21): Enslaving as a backup interface with a down link [ 972.832831][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 972.846690][T13825] syzkaller0: entered promiscuous mode [ 972.852480][T13825] syzkaller0: entered allmulticast mode [ 973.062619][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.100987][T13834] xt_cgroup: invalid path, errno=-2 [ 973.193381][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.304080][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.432408][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.513906][T13847] lo speed is unknown, defaulting to 1000 [ 973.553122][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.662801][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.772331][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.881955][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 973.971824][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 973.979986][ C1] lec:lec_tx_timeout: lec0 [ 973.985373][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 974.165562][T13875] netlink: 'syz.1.17476': attribute type 1 has an invalid length. [ 974.215916][T13875] 8021q: adding VLAN 0 to HW filter on device bond15 [ 974.377850][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17476'. [ 974.452659][T13882] bond15: (slave veth19): Enslaving as an active interface with a down link [ 974.558776][T13875] bond15: (slave veth21): Enslaving as an active interface with a down link [ 974.674269][T13887] bond15: (slave bridge18): Enslaving as an active interface with a down link [ 974.985366][T13902] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 975.008102][T13902] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 975.072106][T13910] syzkaller0: entered promiscuous mode [ 975.087891][T13910] syzkaller0: entered allmulticast mode [ 975.133109][T13912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17488'. [ 975.164483][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17489'. [ 975.215851][T13916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17489'. [ 975.262120][T13916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17489'. [ 975.372514][T13921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17492'. [ 975.436007][T13919] bridge19: port 1(erspan0) entered blocking state [ 975.454391][T13919] bridge19: port 1(erspan0) entered disabled state [ 975.471390][T13919] erspan0: entered allmulticast mode [ 975.486260][T13919] erspan0: left allmulticast mode [ 975.543759][T13929] bridge19: port 1(bond16) entered blocking state [ 975.551161][T13929] bridge19: port 1(bond16) entered disabled state [ 975.562989][T13929] bond16: entered allmulticast mode [ 975.571566][T13929] bond16: entered promiscuous mode [ 976.433783][T13971] __nla_validate_parse: 3 callbacks suppressed [ 976.433805][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17509'. [ 976.858948][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17515'. [ 977.122913][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17517'. [ 977.212090][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17517'. [ 977.356653][T14003] tipc: Enabled bearer , priority 0 [ 977.364177][T14003] syzkaller0: entered promiscuous mode [ 977.369692][T14003] syzkaller0: entered allmulticast mode [ 977.410516][T14003] tipc: Resetting bearer [ 977.422522][T14000] tipc: Resetting bearer [ 977.452998][T14000] tipc: Disabling bearer [ 977.468771][T14007] tipc: Enabling of bearer rejected, already enabled [ 977.483843][T14007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17522'. [ 977.527151][T14005] tipc: Enabling of bearer rejected, already enabled [ 977.552703][T14007] tipc: Resetting bearer [ 977.637271][T14009] syzkaller0: entered promiscuous mode [ 977.663093][T14009] syzkaller0: entered allmulticast mode [ 977.682306][ T1005] net_ratelimit: 41 callbacks suppressed [ 977.682329][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 977.781982][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17526'. [ 977.832231][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 977.961934][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.048625][T14027] syzkaller0: entered promiscuous mode [ 978.080634][T14027] syzkaller0: entered allmulticast mode [ 978.112039][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.393040][T14040] tipc: Started in network mode [ 978.398143][T14040] tipc: Node identity bbbbbb01, cluster identity 4711 [ 978.413598][T14040] tipc: Enabled bearer , priority 10 [ 978.423178][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.438483][T14043] syz_tun: entered allmulticast mode [ 978.467738][T14041] lo speed is unknown, defaulting to 1000 [ 978.552245][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.677696][T14059] tipc: Enabling of bearer rejected, already enabled [ 978.702378][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.812357][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.829736][T14063] syzkaller0: entered promiscuous mode [ 978.851322][T14063] syzkaller0: entered allmulticast mode [ 978.903194][T14063] tipc: Enabled bearer , priority 0 [ 978.919366][T14061] tipc: Resetting bearer [ 978.953029][T14061] tipc: Disabling bearer [ 978.982934][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 978.991827][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 978.999861][ C1] lec:lec_tx_timeout: lec0 [ 979.004962][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 979.036925][T14070] syzkaller0: entered promiscuous mode [ 979.062275][T14070] syzkaller0: entered allmulticast mode [ 979.093236][T14070] 0: reclassify loop, rule prio 0, protocol 700 [ 979.128228][T14073] 8021q: VLANs not supported on gre0 [ 979.440084][T14077] lo speed is unknown, defaulting to 1000 [ 979.525943][ T5909] tipc: Node number set to 3149642497 [ 979.784251][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17547'. [ 979.868968][T14084] bond1: entered promiscuous mode [ 979.914432][T14084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.936498][T14091] bond1: (slave vti0): refused to change device type [ 980.029229][T14088] lo speed is unknown, defaulting to 1000 [ 980.556798][T14106] syzkaller0: entered promiscuous mode [ 980.563158][T14106] syzkaller0: entered allmulticast mode [ 982.683862][T14145] tipc: Enabling of bearer rejected, already enabled [ 982.784780][ T1005] net_ratelimit: 10 callbacks suppressed [ 982.784805][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 982.915137][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 982.924954][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17558'. [ 982.941648][T14158] ipvlan2: entered allmulticast mode [ 982.974817][T14158] syz_tun: entered allmulticast mode [ 983.033221][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.143332][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17561'. [ 983.152919][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.166221][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17561'. [ 983.263971][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.372589][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.386671][T14174] tipc: Enabling of bearer rejected, already enabled [ 983.437170][T14177] syzkaller0: entered promiscuous mode [ 983.444183][T14177] syzkaller0: entered allmulticast mode [ 983.482240][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.758828][T14189] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 983.766360][T14189] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 983.782212][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.901900][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 983.922092][T14202] netlink: 'syz.3.17570': attribute type 1 has an invalid length. [ 983.990796][T14202] bond16: entered promiscuous mode [ 984.012214][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 984.014608][T14202] bond16: entered allmulticast mode [ 984.020509][ C1] lec:lec_tx_timeout: lec0 [ 984.030289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 984.049500][T14202] 8021q: adding VLAN 0 to HW filter on device bond16 [ 984.090424][T14206] macvlan2: entered promiscuous mode [ 984.113530][T14206] macvlan2: entered allmulticast mode [ 984.136646][T14206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 985.022086][T14231] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 985.053986][T14220] lo speed is unknown, defaulting to 1000 [ 985.062374][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 985.086631][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17576'. [ 985.165773][ T4184] block nbd3: Receive control failed (result -1) [ 985.324013][T14243] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 985.337241][T14243] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 985.421078][T14241] ip6t_rpfilter: unknown options [ 986.027617][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17583'. [ 986.197916][T14258] syzkaller0: entered promiscuous mode [ 986.207606][T14258] syzkaller0: entered allmulticast mode [ 987.335052][T14289] syzkaller0: entered promiscuous mode [ 987.373632][T14289] syzkaller0: entered allmulticast mode [ 987.900418][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17597'. [ 988.009889][T14305] batman_adv: batadv0: Interface deactivated: vlan2 [ 988.353410][T14321] [ 988.355815][T14321] ====================================================== [ 988.362864][T14321] WARNING: possible circular locking dependency detected [ 988.369930][T14321] syzkaller #0 Not tainted [ 988.374380][T14321] ------------------------------------------------------ [ 988.381434][T14321] syz.1.17599/14321 is trying to acquire lock: [ 988.387623][T14321] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 988.396929][T14321] [ 988.396929][T14321] but task is already holding lock: [ 988.404332][T14321] ffff8880404e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 988.413900][T14321] [ 988.413900][T14321] which lock already depends on the new lock. [ 988.413900][T14321] [ 988.424441][T14321] [ 988.424441][T14321] the existing dependency chain (in reverse order) is: [ 988.433478][T14321] [ 988.433478][T14321] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 988.441074][T14321] __might_fault+0xcb/0x130 [ 988.446136][T14321] _copy_from_user+0x28/0xb0 [ 988.451370][T14321] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 988.457914][T14321] ip_generic_getfrag+0x149/0x2d0 [ 988.463502][T14321] __ip6_append_data+0x39e4/0x3f70 [ 988.469190][T14321] ip6_append_data+0x10f/0x280 [ 988.474518][T14321] rawv6_sendmsg+0x12d3/0x18e0 [ 988.479841][T14321] ____sys_sendmsg+0x80a/0x9f0 [ 988.485153][T14321] ___sys_sendmsg+0x2a5/0x360 [ 988.490415][T14321] __x64_sys_sendmsg+0x1bd/0x2a0 [ 988.495914][T14321] do_syscall_64+0x14d/0xf80 [ 988.501048][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.507496][T14321] [ 988.507496][T14321] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 988.515267][T14321] lock_sock_nested+0x41/0x100 [ 988.520584][T14321] inet_shutdown+0x6a/0x390 [ 988.525635][T14321] nbd_mark_nsock_dead+0x2e9/0x560 [ 988.531297][T14321] recv_work+0x1c7f/0x1d90 [ 988.536355][T14321] process_scheduled_works+0xb6e/0x18c0 [ 988.542482][T14321] worker_thread+0xa53/0xfc0 [ 988.547648][T14321] kthread+0x388/0x470 [ 988.552265][T14321] ret_from_fork+0x51e/0xb90 [ 988.557409][T14321] ret_from_fork_asm+0x1a/0x30 [ 988.562732][T14321] [ 988.562732][T14321] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 988.570423][T14321] __mutex_lock+0x19f/0x1300 [ 988.575561][T14321] nbd_queue_rq+0x37b/0x1100 [ 988.580739][T14321] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 988.586943][T14321] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 988.593817][T14321] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 988.600338][T14321] blk_mq_run_hw_queue+0x348/0x4f0 [ 988.605991][T14321] blk_mq_dispatch_list+0xd16/0xe10 [ 988.611733][T14321] blk_mq_flush_plug_list+0x48d/0x570 [ 988.617654][T14321] __blk_flush_plug+0x3ed/0x4d0 [ 988.623046][T14321] __submit_bio+0x28d/0x580 [ 988.628097][T14321] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 988.634280][T14321] block_read_full_folio+0x599/0x830 [ 988.640129][T14321] filemap_read_folio+0x137/0x3b0 [ 988.645706][T14321] do_read_cache_folio+0x358/0x590 [ 988.651368][T14321] read_part_sector+0xb6/0x2b0 [ 988.656691][T14321] adfspart_check_ICS+0xa5/0xa40 [ 988.662175][T14321] bdev_disk_changed+0x7ba/0x1550 [ 988.667771][T14321] blkdev_get_whole+0x380/0x510 [ 988.673191][T14321] bdev_open+0x31e/0xd30 [ 988.677994][T14321] blkdev_open+0x470/0x610 [ 988.682961][T14321] do_dentry_open+0x785/0x14e0 [ 988.688273][T14321] vfs_open+0x3b/0x340 [ 988.692887][T14321] path_openat+0x2e08/0x3860 [ 988.698019][T14321] do_file_open+0x23e/0x4a0 [ 988.703067][T14321] do_sys_openat2+0x113/0x200 [ 988.708294][T14321] __x64_sys_openat+0x138/0x170 [ 988.713692][T14321] do_syscall_64+0x14d/0xf80 [ 988.718915][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.725350][T14321] [ 988.725350][T14321] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 988.732602][T14321] __mutex_lock+0x19f/0x1300 [ 988.737750][T14321] nbd_queue_rq+0xc6/0x1100 [ 988.742795][T14321] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 988.748924][T14321] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 988.755826][T14321] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 988.762387][T14321] blk_mq_run_hw_queue+0x348/0x4f0 [ 988.768063][T14321] blk_mq_dispatch_list+0xd16/0xe10 [ 988.773812][T14321] blk_mq_flush_plug_list+0x48d/0x570 [ 988.779733][T14321] __blk_flush_plug+0x3ed/0x4d0 [ 988.785136][T14321] __submit_bio+0x28d/0x580 [ 988.790234][T14321] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 988.796426][T14321] block_read_full_folio+0x599/0x830 [ 988.802271][T14321] filemap_read_folio+0x137/0x3b0 [ 988.807840][T14321] do_read_cache_folio+0x358/0x590 [ 988.813525][T14321] read_part_sector+0xb6/0x2b0 [ 988.818837][T14321] adfspart_check_ICS+0xa5/0xa40 [ 988.824337][T14321] bdev_disk_changed+0x7ba/0x1550 [ 988.829917][T14321] blkdev_get_whole+0x380/0x510 [ 988.835309][T14321] bdev_open+0x31e/0xd30 [ 988.840084][T14321] blkdev_open+0x470/0x610 [ 988.845069][T14321] do_dentry_open+0x785/0x14e0 [ 988.850377][T14321] vfs_open+0x3b/0x340 [ 988.854993][T14321] path_openat+0x2e08/0x3860 [ 988.860116][T14321] do_file_open+0x23e/0x4a0 [ 988.865155][T14321] do_sys_openat2+0x113/0x200 [ 988.870403][T14321] __x64_sys_openat+0x138/0x170 [ 988.875824][T14321] do_syscall_64+0x14d/0xf80 [ 988.880954][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.887395][T14321] [ 988.887395][T14321] -> #3 (set->srcu){.+.+}-{0:0}: [ 988.894539][T14321] __synchronize_srcu+0xca/0x300 [ 988.900012][T14321] elevator_switch+0x1e8/0x7a0 [ 988.905320][T14321] elevator_change+0x2cc/0x450 [ 988.910620][T14321] elevator_set_default+0x36c/0x430 [ 988.916356][T14321] blk_register_queue+0x366/0x430 [ 988.921929][T14321] __add_disk+0x677/0xd50 [ 988.926829][T14321] add_disk_fwnode+0xfb/0x480 [ 988.932047][T14321] nbd_dev_add+0x72c/0xb50 [ 988.937191][T14321] nbd_init+0x168/0x1f0 [ 988.941943][T14321] do_one_initcall+0x250/0x8d0 [ 988.947259][T14321] do_initcall_level+0x104/0x190 [ 988.952743][T14321] do_initcalls+0x59/0xa0 [ 988.957616][T14321] kernel_init_freeable+0x2a6/0x3e0 [ 988.963361][T14321] kernel_init+0x1d/0x1d0 [ 988.968264][T14321] ret_from_fork+0x51e/0xb90 [ 988.973416][T14321] ret_from_fork_asm+0x1a/0x30 [ 988.978731][T14321] [ 988.978731][T14321] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 988.986579][T14321] __mutex_lock+0x19f/0x1300 [ 988.991727][T14321] elevator_change+0x1b3/0x450 [ 988.997132][T14321] elevator_set_none+0xb5/0x140 [ 989.002525][T14321] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 989.008883][T14321] nbd_start_device+0x17f/0xb10 [ 989.014295][T14321] nbd_genl_connect+0x165b/0x1cf0 [ 989.019865][T14321] genl_family_rcv_msg_doit+0x22a/0x330 [ 989.025947][T14321] genl_rcv_msg+0x61c/0x7a0 [ 989.030988][T14321] netlink_rcv_skb+0x232/0x4b0 [ 989.036295][T14321] genl_rcv+0x28/0x40 [ 989.040813][T14321] netlink_unicast+0x75c/0x8e0 [ 989.046119][T14321] netlink_sendmsg+0x813/0xb40 [ 989.051430][T14321] ____sys_sendmsg+0x972/0x9f0 [ 989.056744][T14321] ___sys_sendmsg+0x2a5/0x360 [ 989.061988][T14321] __x64_sys_sendmsg+0x1bd/0x2a0 [ 989.067491][T14321] do_syscall_64+0x14d/0xf80 [ 989.072624][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.079053][T14321] [ 989.079053][T14321] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 989.087709][T14321] blk_alloc_queue+0x546/0x680 [ 989.093024][T14321] __blk_mq_alloc_disk+0x197/0x390 [ 989.098680][T14321] nbd_dev_add+0x499/0xb50 [ 989.103638][T14321] nbd_init+0x168/0x1f0 [ 989.108339][T14321] do_one_initcall+0x250/0x8d0 [ 989.113649][T14321] do_initcall_level+0x104/0x190 [ 989.119137][T14321] do_initcalls+0x59/0xa0 [ 989.124010][T14321] kernel_init_freeable+0x2a6/0x3e0 [ 989.129747][T14321] kernel_init+0x1d/0x1d0 [ 989.134625][T14321] ret_from_fork+0x51e/0xb90 [ 989.139760][T14321] ret_from_fork_asm+0x1a/0x30 [ 989.145067][T14321] [ 989.145067][T14321] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 989.152305][T14321] __lock_acquire+0x15a5/0x2cf0 [ 989.157703][T14321] lock_acquire+0xf0/0x2e0 [ 989.162673][T14321] fs_reclaim_acquire+0x71/0x100 [ 989.168194][T14321] prepare_alloc_pages+0x152/0x650 [ 989.173852][T14321] __alloc_frozen_pages_noprof+0x12f/0x380 [ 989.180202][T14321] alloc_pages_mpol+0x232/0x4a0 [ 989.185600][T14321] folio_alloc_mpol_noprof+0x39/0x70 [ 989.191425][T14321] shmem_alloc_and_add_folio+0x445/0xf80 [ 989.197597][T14321] shmem_get_folio_gfp+0x5a9/0x1670 [ 989.203347][T14321] shmem_fault+0x179/0x390 [ 989.208299][T14321] __do_fault+0x138/0x390 [ 989.213169][T14321] do_pte_missing+0x228f/0x3490 [ 989.218562][T14321] handle_mm_fault+0x1bec/0x3310 [ 989.224062][T14321] do_user_addr_fault+0x75b/0x1340 [ 989.229744][T14321] exc_page_fault+0x6a/0xc0 [ 989.234779][T14321] asm_exc_page_fault+0x26/0x30 [ 989.240161][T14321] rep_movs_alternative+0x4a/0x90 [ 989.245748][T14321] _copy_from_iter+0x21b/0x1670 [ 989.251138][T14321] sk_msg_memcopy_from_iter+0x360/0x700 [ 989.257236][T14321] tls_sw_sendmsg+0x13a0/0x2360 [ 989.262655][T14321] sock_write_iter+0x333/0x4f0 [ 989.267967][T14321] do_iter_readv_writev+0x619/0x8c0 [ 989.273718][T14321] vfs_writev+0x33c/0x990 [ 989.278608][T14321] do_writev+0x154/0x2e0 [ 989.283403][T14321] do_syscall_64+0x14d/0xf80 [ 989.288572][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.295037][T14321] [ 989.295037][T14321] other info that might help us debug this: [ 989.295037][T14321] [ 989.305274][T14321] Chain exists of: [ 989.305274][T14321] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 989.305274][T14321] [ 989.317932][T14321] Possible unsafe locking scenario: [ 989.317932][T14321] [ 989.325408][T14321] CPU0 CPU1 [ 989.330800][T14321] ---- ---- [ 989.336195][T14321] rlock(&mm->mmap_lock); [ 989.340662][T14321] lock(sk_lock-AF_INET6); [ 989.347713][T14321] lock(&mm->mmap_lock); [ 989.354583][T14321] lock(fs_reclaim); [ 989.358602][T14321] [ 989.358602][T14321] *** DEADLOCK *** [ 989.358602][T14321] [ 989.366806][T14321] 3 locks held by syz.1.17599/14321: [ 989.372111][T14321] #0: ffff88803da0c0f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12f/0x2360 [ 989.381640][T14321] #1: ffff88803d8d9d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 989.391427][T14321] #2: ffff8880404e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 989.401385][T14321] [ 989.401385][T14321] stack backtrace: [ 989.407303][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.1.17599 Not tainted syzkaller #0 PREEMPT(full) [ 989.407324][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 989.407342][T14321] Call Trace: [ 989.407352][T14321] [ 989.407362][T14321] dump_stack_lvl+0xe8/0x150 [ 989.407390][T14321] print_circular_bug+0x2e1/0x300 [ 989.407422][T14321] check_noncircular+0x12e/0x150 [ 989.407460][T14321] __lock_acquire+0x15a5/0x2cf0 [ 989.407489][T14321] ? is_bpf_text_address+0x292/0x2b0 [ 989.407510][T14321] ? is_bpf_text_address+0x26/0x2b0 [ 989.407530][T14321] ? kernel_text_address+0xa5/0xe0 [ 989.407552][T14321] lock_acquire+0xf0/0x2e0 [ 989.407575][T14321] ? prepare_alloc_pages+0x152/0x650 [ 989.407603][T14321] fs_reclaim_acquire+0x71/0x100 [ 989.407624][T14321] ? prepare_alloc_pages+0x152/0x650 [ 989.407647][T14321] prepare_alloc_pages+0x152/0x650 [ 989.407672][T14321] __alloc_frozen_pages_noprof+0x12f/0x380 [ 989.407699][T14321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 989.407726][T14321] ? __pfx_policy_nodemask+0x10/0x10 [ 989.407754][T14321] alloc_pages_mpol+0x232/0x4a0 [ 989.407780][T14321] folio_alloc_mpol_noprof+0x39/0x70 [ 989.407809][T14321] shmem_alloc_and_add_folio+0x445/0xf80 [ 989.407832][T14321] ? filemap_get_entry+0xca/0x320 [ 989.407852][T14321] ? filemap_get_entry+0xca/0x320 [ 989.407872][T14321] ? filemap_get_entry+0x2ac/0x320 [ 989.407910][T14321] ? __pfx_filemap_get_entry+0x10/0x10 [ 989.407930][T14321] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 989.407952][T14321] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 989.407986][T14321] shmem_get_folio_gfp+0x5a9/0x1670 [ 989.408024][T14321] shmem_fault+0x179/0x390 [ 989.408048][T14321] __do_fault+0x138/0x390 [ 989.408072][T14321] do_pte_missing+0x228f/0x3490 [ 989.408093][T14321] ? do_pte_missing+0x130a/0x3490 [ 989.408119][T14321] ? handle_mm_fault+0xee/0x3310 [ 989.408138][T14321] handle_mm_fault+0x1bec/0x3310 [ 989.408162][T14321] ? handle_mm_fault+0xee/0x3310 [ 989.408182][T14321] ? __pfx_handle_mm_fault+0x10/0x10 [ 989.408209][T14321] ? lock_mm_and_find_vma+0xa7/0x340 [ 989.408232][T14321] do_user_addr_fault+0x75b/0x1340 [ 989.408265][T14321] exc_page_fault+0x6a/0xc0 [ 989.408287][T14321] asm_exc_page_fault+0x26/0x30 [ 989.408310][T14321] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 989.408339][T14321] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 989.408356][T14321] RSP: 0018:ffffc90006047518 EFLAGS: 00050206 [ 989.408373][T14321] RAX: 00007ffffffff001 RBX: ffff88804f9e0005 RCX: 00000000000032c0 [ 989.408387][T14321] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffff88804f9e0d45 [ 989.408400][T14321] RBP: ffffc90006047678 R08: ffff88804f9e4004 R09: 1ffff11009f3c800 [ 989.408415][T14321] R10: dffffc0000000000 R11: ffffed1009f3c801 R12: ffffc90006047a38 [ 989.408429][T14321] R13: 00002000000002c0 R14: 0000000000004000 R15: 1ffff92000c08f47 [ 989.408457][T14321] _copy_from_iter+0x21b/0x1670 [ 989.408484][T14321] ? __pfx__copy_from_iter+0x10/0x10 [ 989.408508][T14321] ? sk_msg_clone+0xbb5/0xc40 [ 989.408534][T14321] sk_msg_memcopy_from_iter+0x360/0x700 [ 989.408567][T14321] tls_sw_sendmsg+0x13a0/0x2360 [ 989.408612][T14321] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 989.408639][T14321] ? __pfx_aa_sk_perm+0x10/0x10 [ 989.408666][T14321] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 989.408687][T14321] ? sock_rps_record_flow+0x19/0x350 [ 989.408720][T14321] ? inet_send_prepare+0x37/0x270 [ 989.408749][T14321] ? inet6_sendmsg+0x101/0x120 [ 989.408769][T14321] ? __pfx_inet6_sendmsg+0x10/0x10 [ 989.408787][T14321] sock_write_iter+0x333/0x4f0 [ 989.408809][T14321] ? __pfx_sock_write_iter+0x10/0x10 [ 989.408828][T14321] ? __futex_wait+0x371/0x420 [ 989.408860][T14321] ? __pfx___futex_wait+0x10/0x10 [ 989.408894][T14321] do_iter_readv_writev+0x619/0x8c0 [ 989.408919][T14321] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 989.408944][T14321] ? bpf_lsm_file_permission+0x9/0x20 [ 989.408970][T14321] ? security_file_permission+0x75/0x260 [ 989.408996][T14321] ? rw_verify_area+0x255/0x4d0 [ 989.409018][T14321] vfs_writev+0x33c/0x990 [ 989.409049][T14321] ? __pfx_vfs_writev+0x10/0x10 [ 989.409074][T14321] ? tcp_setsockopt+0x3d/0xe0 [ 989.409105][T14321] ? __fget_files+0x2a/0x420 [ 989.409123][T14321] ? __fget_files+0x3a0/0x420 [ 989.409139][T14321] ? __fget_files+0x2a/0x420 [ 989.409159][T14321] do_writev+0x154/0x2e0 [ 989.409187][T14321] ? __pfx_do_writev+0x10/0x10 [ 989.409219][T14321] do_syscall_64+0x14d/0xf80 [ 989.409240][T14321] ? trace_irq_disable+0x3b/0x150 [ 989.409256][T14321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.409275][T14321] ? clear_bhb_loop+0x40/0x90 [ 989.409296][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.409315][T14321] RIP: 0033:0x7f8a0a99c819 [ 989.409334][T14321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.409350][T14321] RSP: 002b:00007f8a0b898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 989.409368][T14321] RAX: ffffffffffffffda RBX: 00007f8a0ac15fa0 RCX: 00007f8a0a99c819 [ 989.409383][T14321] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 989.409402][T14321] RBP: 00007f8a0aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 989.409414][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.409426][T14321] R13: 00007f8a0ac16038 R14: 00007f8a0ac15fa0 R15: 00007ffcf3c49a38 [ 989.409453][T14321] [ 989.945284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5910 ms [ 989.953383][ C1] lec:lec_tx_timeout: lec0 [ 989.959592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 990.005989][ T4183] Bluetooth: hci4: command 0x0406 tx timeout [ 990.707232][ T1005] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.715946][ T1005] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 990.725682][ T1005] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.734448][ T1005] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 990.743364][ T1005] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.752384][ T1005] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 990.760931][ T1005] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.769772][ T1005] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 990.782321][ T1005] net_ratelimit: 22 callbacks suppressed [ 990.782339][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 990.911919][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.022142][ T1005] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.132314][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.252265][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.362338][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.482200][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.592092][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.701984][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 991.821981][ T79] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 995.011966][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 995.020101][ C1] lec:lec_tx_timeout: lec0 [ 995.025230][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 995.801912][ T1149] net_ratelimit: 35 callbacks suppressed [ 995.801957][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 995.922141][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.032169][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.142170][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.251993][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.362195][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.472368][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.581984][ T1149] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.692383][ T1166] bond14: (slave ip6gretap2): failed to get link speed/duplex [ 996.802226][ T12] bond14: (slave ip6gretap2): failed to get link speed/duplex