last executing test programs: 8.96069629s ago: executing program 1 (id=16246): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.563328124s ago: executing program 1 (id=16272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5b9ee126, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 4.087772296s ago: executing program 1 (id=16277): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) unshare(0x6a040000) 3.962703535s ago: executing program 4 (id=16279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x0, 0xad63, 0x9, 0x1, 0x4}, {0x0, 0x2, 0x8002, 0x5, 0xe}, 0x1, 0x7fffffff, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) 3.443871471s ago: executing program 4 (id=16281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'ip6erspan0\x00', 0x8}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x8, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4) 3.324811578s ago: executing program 0 (id=16282): socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 2.791390146s ago: executing program 0 (id=16283): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7e8345b59393f61e, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000)) 2.332647615s ago: executing program 4 (id=16285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c8d0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.165117513s ago: executing program 3 (id=16287): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x147}], 0x1}}], 0x2, 0x2090) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000280, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) shutdown(0xffffffffffffffff, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.125844416s ago: executing program 0 (id=16288): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) readv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/184, 0xb8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.988135835s ago: executing program 4 (id=16289): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a80000000000002ebffffff08001e0001000000080004"], 0x2c}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd00011100"], 0xfdef) 1.783761781s ago: executing program 2 (id=16290): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000340)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @rand_addr=0x64010101, 0x0, 0x1, [@broadcast]}, 0x14) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.655853675s ago: executing program 4 (id=16291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x5dc}], 0x1}, 0x4) 1.467948722s ago: executing program 4 (id=16292): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000}, 0x20) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000400), &(0x7f0000000c40), 0x1}, 0x20) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) 1.424408504s ago: executing program 3 (id=16293): socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e"], 0x0, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r1, 0x7}, 0x10) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 1.378829001s ago: executing program 2 (id=16294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xc, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x26c}, @TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004061}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.324695322s ago: executing program 3 (id=16295): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000140)) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x0) recvmsg$unix(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.115105474s ago: executing program 0 (id=16296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x92, 0xff, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x10, 0x8000, 0x4, 0x4}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a0000040c0019800800020011000000300002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 936.260045ms ago: executing program 0 (id=16297): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) socket(0x18, 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pselect6(0x40, &(0x7f0000000000)={0x4, 0x400000000000000, 0xffffffffffffffff, 0xfffffefffffffffd, 0x1, 0x0, 0x5, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x100000019, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 892.191796ms ago: executing program 2 (id=16298): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 566.54198ms ago: executing program 2 (id=16299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x44080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd6, 0x4, 0x9, 0x3, 0xc1, 0x81}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 408.201794ms ago: executing program 2 (id=16300): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}], 0x1, &(0x7f0000000380)}], 0x1, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 365.945905ms ago: executing program 1 (id=16301): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 225.326591ms ago: executing program 3 (id=16302): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x800) getpeername$packet(r0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x24040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x1402, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r3, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000d40)={0xffffffffffffffff}) connect$l2tp6(r4, &(0x7f0000000d80)={0xa, 0x0, 0x0, @mcast2, 0x3, 0x1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x432c868}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x14004805) 224.193332ms ago: executing program 1 (id=16303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000091100800000000c39500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x0, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2000c810) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x2c, 0x0, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) 191.571636ms ago: executing program 3 (id=16304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x320) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 119.067974ms ago: executing program 2 (id=16305): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x700) unshare(0x2000400) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r2, 0x0, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) connect(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x8000) 60.300036ms ago: executing program 3 (id=16306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @from_mac=@broadcast, @device_b, {0x7, 0x6}, "", @value={0x7, 0x0, 0x1, 0x0, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}}, 0x1e) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x6, 0x1, 0x5cd}, &(0x7f0000000140)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={r2, &(0x7f0000000200)='mptcp_pm\x00', 0x48000, &(0x7f0000000280)={@align=0x6, {0xfff9, 0xc7, 0x1, 0x8}}, 0x9, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x10000}) write$cgroup_pressure(r5, &(0x7f0000000440)={'full', 0x20, 0x81, 0x20, 0x9}, 0x2f) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x80000001}, 0x8) 30.302214ms ago: executing program 0 (id=16307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11b43, 0x2001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000c6000100080000009500"/32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 0s ago: executing program 1 (id=16308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): 6584][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14002'. [ 598.307855][ T3911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14004'. [ 598.413545][ T3897] lo speed is unknown, defaulting to 1000 [ 598.697496][ T3897] virt_wifi0 speed is unknown, defaulting to 1000 [ 598.936909][ T3895] wlan1 speed is unknown, defaulting to 1000 [ 598.947367][ T3895] wg1 speed is unknown, defaulting to 1000 [ 598.967901][ T3937] gretap3: entered promiscuous mode [ 599.190002][ T3946] pim6reg1: entered promiscuous mode [ 599.195517][ T3946] pim6reg1: entered allmulticast mode [ 599.264846][ T3895] lo speed is unknown, defaulting to 1000 [ 599.888160][ T3968] ip6tnl8: entered allmulticast mode [ 599.932041][ T3895] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.062381][ T4014] IPVS: Scheduler module ip_vs_ not found [ 601.632432][ T4039] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14059'. [ 601.671964][ T4039] netlink: Unknown conntrack attr (0) [ 601.948747][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.420766][ T4099] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 602.448360][ T4099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 602.485280][ T4104] netlink: 'syz.4.14088': attribute type 8 has an invalid length. [ 602.521211][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14088'. [ 602.585465][ T4104] bond0: entered promiscuous mode [ 602.603076][ T4104] bond_slave_0: entered promiscuous mode [ 602.619978][ T4104] dummy0: entered promiscuous mode [ 602.657491][ T4104] bond0: left promiscuous mode [ 602.666595][ T4104] bond_slave_0: left promiscuous mode [ 602.675031][ T4104] dummy0: left promiscuous mode [ 602.757433][ T4118] netlink: 392 bytes leftover after parsing attributes in process `syz.3.14094'. [ 602.886067][ T4125] netlink: 'syz.4.14098': attribute type 1 has an invalid length. [ 602.982185][ T4125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.034875][ T4131] bond7: (slave geneve0): making interface the new active one [ 603.074270][ T4131] bond7: (slave geneve0): Enslaving as an active interface with an up link [ 603.105287][ T2576] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 20004 - 0 [ 603.137797][ T2576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 603.166202][ T2576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 603.190085][ T2576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 603.596094][ T4166] netlink: 'syz.4.14115': attribute type 1 has an invalid length. [ 603.729967][ T4166] 8021q: adding VLAN 0 to HW filter on device bond8 [ 603.801379][ T4172] bond8: (slave geneve3): making interface the new active one [ 603.843018][ T4172] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 603.868783][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 603.905290][ T36] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.929193][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.958292][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.988919][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 604.221912][ T4196] "syz.2.14127" (4196) uses obsolete ecb(arc4) skcipher [ 605.161088][ T4241] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14142'. [ 605.634862][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14153'. [ 605.875636][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14160'. [ 605.930582][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14160'. [ 606.146014][ T4298] netlink: 'syz.3.14169': attribute type 1 has an invalid length. [ 606.158754][ T4298] netlink: 'syz.3.14169': attribute type 22 has an invalid length. [ 606.875753][ T4329] netlink: 'syz.2.14181': attribute type 1 has an invalid length. [ 606.904504][ T4329] netlink: 'syz.2.14181': attribute type 6 has an invalid length. [ 606.925449][ T4329] netlink: 'syz.2.14181': attribute type 3 has an invalid length. [ 606.995468][ T4334] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14183'. [ 607.587290][ T4341] wlan1 speed is unknown, defaulting to 1000 [ 607.595354][ T4341] wg1 speed is unknown, defaulting to 1000 [ 607.659726][ T4368] netlink: 240 bytes leftover after parsing attributes in process `syz.4.14191'. [ 607.825102][ T4376] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14201'. [ 608.010911][ T4341] lo speed is unknown, defaulting to 1000 [ 608.239880][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14211'. [ 608.508872][ T4341] virt_wifi0 speed is unknown, defaulting to 1000 [ 608.570406][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14214'. [ 608.608441][ T4409] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14215'. [ 608.699053][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14217'. [ 609.166415][ T4441] netlink: 'syz.2.14228': attribute type 1 has an invalid length. [ 609.398815][ T4441] bond0: entered promiscuous mode [ 609.425870][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.621831][ T4468] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.14237'. [ 609.639086][ T4446] bond0: (slave veth7): making interface the new active one [ 609.646706][ T4446] veth7: entered promiscuous mode [ 609.660461][ T4446] bond0: (slave veth7): Enslaving as an active interface with an up link [ 609.852176][ T4477] netlink: 'syz.1.14243': attribute type 1 has an invalid length. [ 610.050593][ T4477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.140831][ T4487] bond5: (slave geneve2): making interface the new active one [ 610.159812][ T4487] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 610.187917][ T2569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.207258][ T2569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.318285][ T2569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.327687][ T2569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.584524][ T4520] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14261'. [ 610.824519][ T4534] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14267'. [ 611.052838][ T4546] netlink: 'syz.2.14273': attribute type 19 has an invalid length. [ 611.062246][ T4546] netlink: 'syz.2.14273': attribute type 19 has an invalid length. [ 611.191689][ T4554] netlink: 'syz.4.14276': attribute type 6 has an invalid length. [ 611.202281][ T4554] netlink: 'syz.4.14276': attribute type 6 has an invalid length. [ 611.901063][ T4577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.720596][ T4635] netlink: 'syz.3.14307': attribute type 1 has an invalid length. [ 613.832480][ T4635] 8021q: adding VLAN 0 to HW filter on device bond10 [ 613.877363][ T4639] netlink: 'syz.1.14310': attribute type 1 has an invalid length. [ 613.885657][ T4639] __nla_validate_parse: 7 callbacks suppressed [ 613.885676][ T4639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14310'. [ 615.366952][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14337'. [ 615.731538][ T4731] syzkaller1: entered promiscuous mode [ 615.737187][ T4731] syzkaller1: entered allmulticast mode [ 616.421424][ T4762] netlink: 'syz.1.14360': attribute type 1 has an invalid length. [ 616.540620][ T4762] gretap3: entered allmulticast mode [ 616.557144][ T4762] bond6: (slave gretap3): making interface the new active one [ 616.580481][ T4762] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 616.882692][ T4795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 616.890010][ T4795] IPv6: NLM_F_CREATE should be set when creating new route [ 616.897245][ T4795] IPv6: NLM_F_CREATE should be set when creating new route [ 616.904500][ T4795] IPv6: NLM_F_CREATE should be set when creating new route [ 617.239131][ T4812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14379'. [ 617.296176][ T4816] netlink: 'syz.2.14381': attribute type 1 has an invalid length. [ 617.305601][ T4816] netlink: 'syz.2.14381': attribute type 1 has an invalid length. [ 617.771042][ T4846] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14391'. [ 618.006695][ T4863] veth0: entered promiscuous mode [ 618.018344][ T4863] bond0: entered promiscuous mode [ 618.038666][ T4862] bond0: left promiscuous mode [ 618.043827][ T4862] veth0: left promiscuous mode [ 618.093025][ T4867] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.14400'. [ 618.333474][ T4892] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14402'. [ 618.888180][ T4903] syzkaller1: entered promiscuous mode [ 618.903823][ T4903] syzkaller1: entered allmulticast mode [ 618.914878][ T2569] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.924392][ T2569] netdevsim netdevsim4 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 6081 - 0 [ 618.965111][ T2569] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.974497][ T2569] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 619.010159][ T2569] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 619.042968][ T2569] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 619.113622][ T4919] vlan0: entered allmulticast mode [ 619.133566][ T4919] bridge_slave_0: entered allmulticast mode [ 619.158250][ T2569] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 619.180982][ T2569] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 619.696461][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14429'. [ 619.943054][ T4968] only policy match revision 0 supported [ 619.943076][ T4968] unable to load match [ 619.955292][ T4967] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.14436'. [ 620.477635][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14453'. [ 620.492455][ T5008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14453'. [ 620.928278][ T5029] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14463'. [ 620.939301][ T5029] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 621.785893][ T5066] netlink: 'syz.4.14472': attribute type 3 has an invalid length. [ 621.913548][ T5058] wlan1 speed is unknown, defaulting to 1000 [ 621.980534][ T5058] wg1 speed is unknown, defaulting to 1000 [ 622.131573][ T5089] veth1_to_bond: entered allmulticast mode [ 622.157965][ T5089] veth1_to_bond: left allmulticast mode [ 622.166272][ T5092] netlink: 240 bytes leftover after parsing attributes in process `syz.4.14476'. [ 622.267560][ T5094] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14479'. [ 622.293770][ T5094] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14479'. [ 622.507408][ T5058] lo speed is unknown, defaulting to 1000 [ 622.940010][ T5119] syzkaller0: entered promiscuous mode [ 622.945668][ T5119] syzkaller0: entered allmulticast mode [ 622.993933][ T5058] virt_wifi0 speed is unknown, defaulting to 1000 [ 623.136193][ T5135] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14492'. [ 624.743409][ T5156] pim6reg1: entered promiscuous mode [ 624.758519][ T5156] pim6reg1: entered allmulticast mode [ 625.370081][ T5196] netlink: 'syz.4.14511': attribute type 1 has an invalid length. [ 625.382147][ T5194] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 625.539707][ T5198] gretap2: entered allmulticast mode [ 625.548332][ T5198] bond9: (slave gretap2): making interface the new active one [ 625.559400][ T5198] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 625.846229][ T5220] bond7: (slave 26±ÿ): Releasing backup interface [ 625.857148][ T5220] bond7: (slave 26±ÿ): last VLAN challenged slave left bond - VLAN blocking is removed [ 625.896156][ T5220] bridge_slave_0: left allmulticast mode [ 625.903100][ T5220] bridge_slave_0: left promiscuous mode [ 625.909211][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.919027][ T5220] bridge_slave_1: left allmulticast mode [ 625.924727][ T5220] bridge_slave_1: left promiscuous mode [ 625.931313][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.942214][ T5220] .`: (slave bond_slave_0): Releasing backup interface [ 625.953948][ T5220] .`: (slave bond_slave_1): Releasing backup interface [ 625.967163][ T5220] team0: Port device C removed [ 625.975916][ T5220] team0: Port device team_slave_1 removed [ 625.983751][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.993295][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.003188][ T5220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.217955][ T5236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 626.282810][ T5239] netlink: 27 bytes leftover after parsing attributes in process `syz.3.14526'. [ 626.323803][ T5242] netlink: 'syz.1.14527': attribute type 1 has an invalid length. [ 626.434283][ T5248] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 626.463146][ T5248] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 626.481037][ T5248] bond7: (slave ip6gre2): making interface the new active one [ 626.500010][ T5248] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 626.961801][ T5278] netlink: 1311 bytes leftover after parsing attributes in process `syz.2.14542'. [ 627.052363][ T5286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14544'. [ 627.127714][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14546'. [ 627.148356][ T5291] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14546'. [ 627.189049][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14546'. [ 627.198181][ T5291] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14546'. [ 627.253052][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14547'. [ 627.330537][ T5294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.374565][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 627.413848][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14547'. [ 627.439252][ T5298] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 627.464013][ T5294] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 627.481295][ T5294] bond4 (unregistering): Released all slaves [ 627.550539][ T5304] netlink: 'syz.1.14550': attribute type 4 has an invalid length. [ 627.942926][ T5324] netlink: 'syz.3.14559': attribute type 29 has an invalid length. [ 627.964808][ T5324] netlink: 'syz.3.14559': attribute type 29 has an invalid length. [ 627.981724][ T5324] netlink: 596 bytes leftover after parsing attributes in process `syz.3.14559'. [ 627.988388][ T5302] wlan1 speed is unknown, defaulting to 1000 [ 628.029607][ T5302] wg1 speed is unknown, defaulting to 1000 [ 628.249853][ T5332] gtp1: entered promiscuous mode [ 628.261561][ T5332] gtp1: entered allmulticast mode [ 628.437892][ T5302] lo speed is unknown, defaulting to 1000 [ 628.619702][ T5350] netlink: 'syz.0.14567': attribute type 83 has an invalid length. [ 628.628750][ T5345] syzkaller1: entered promiscuous mode [ 628.634254][ T5345] syzkaller1: entered allmulticast mode [ 628.799332][ T5302] virt_wifi0 speed is unknown, defaulting to 1000 [ 629.379874][ T5348] wlan1 speed is unknown, defaulting to 1000 [ 629.388401][ T5348] wg1 speed is unknown, defaulting to 1000 [ 629.849695][ T5367] lo: Caught tx_queue_len zero misconfig [ 630.036465][ T5348] lo speed is unknown, defaulting to 1000 [ 630.255964][ T5379] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 630.540757][ T5348] virt_wifi0 speed is unknown, defaulting to 1000 [ 632.393018][ T5438] netlink: 'syz.0.14603': attribute type 13 has an invalid length. [ 632.402888][ T5438] netlink: 'syz.0.14603': attribute type 17 has an invalid length. [ 632.611996][ T5438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.245986][ T5453] wlan1 speed is unknown, defaulting to 1000 [ 633.273049][ T5453] wg1 speed is unknown, defaulting to 1000 [ 633.598390][ T5453] lo speed is unknown, defaulting to 1000 [ 633.737661][ T5466] wlan1 speed is unknown, defaulting to 1000 [ 633.745711][ T5466] wg1 speed is unknown, defaulting to 1000 [ 634.035864][ T5453] virt_wifi0 speed is unknown, defaulting to 1000 [ 634.093827][ T5466] lo speed is unknown, defaulting to 1000 [ 634.648660][ T5497] syzkaller1: entered promiscuous mode [ 634.654183][ T5497] syzkaller1: entered allmulticast mode [ 634.728141][ T5466] virt_wifi0 speed is unknown, defaulting to 1000 [ 635.098851][ T5504] veth1_macvtap: left allmulticast mode [ 635.142860][ T5504] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 635.245770][ T5506] __nla_validate_parse: 4 callbacks suppressed [ 635.245791][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14629'. [ 635.274813][ T5509] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.14630'. [ 635.369009][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14629'. [ 635.378386][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.394262][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.417560][ T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 635.437193][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.454022][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.473298][ T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 635.604259][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14629'. [ 635.624294][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.660021][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.699410][ T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 635.699641][ T5519] netlink: 548 bytes leftover after parsing attributes in process `syz.4.14633'. [ 635.710770][ T5517] netlink: 'syz.4.14633': attribute type 29 has an invalid length. [ 635.785015][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.794080][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.803284][ T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 635.840352][ T5518] netlink: 'syz.4.14633': attribute type 29 has an invalid length. [ 636.410120][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14646'. [ 636.730309][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14654'. [ 636.809203][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14654'. [ 638.733277][ T5604] batman_adv: batadv0: Removing interface: dummy0 [ 638.753161][ T5604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.755948][ T5598] scsi_nl_rcv_msg: discarding partial skb [ 639.192545][ T5626] netlink: 192 bytes leftover after parsing attributes in process `syz.4.14671'. [ 639.208442][ T5630] netlink: 'syz.0.14673': attribute type 6 has an invalid length. [ 639.223027][ T5603] wlan1 speed is unknown, defaulting to 1000 [ 639.279205][ T5603] wg1 speed is unknown, defaulting to 1000 [ 639.328127][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14676'. [ 639.361452][ T5637] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 639.740169][ T5628] wlan1 speed is unknown, defaulting to 1000 [ 639.781283][ T5628] wg1 speed is unknown, defaulting to 1000 [ 639.781311][ T5603] lo speed is unknown, defaulting to 1000 [ 640.368260][ T5628] lo speed is unknown, defaulting to 1000 [ 640.392492][ T5603] virt_wifi0 speed is unknown, defaulting to 1000 [ 640.510623][ T5675] netlink: 'syz.1.14688': attribute type 12 has an invalid length. [ 640.521074][ T5671] wlan1 speed is unknown, defaulting to 1000 [ 640.598241][ T5671] wg1 speed is unknown, defaulting to 1000 [ 640.905184][ T5671] lo speed is unknown, defaulting to 1000 [ 641.106462][ T5686] netlink: 'syz.1.14693': attribute type 13 has an invalid length. [ 641.232904][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.269865][ T5686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.296022][ T5628] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.338286][ T5671] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.625064][ T5723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14706'. [ 642.687328][ T5725] sock: sock_set_timeout: `syz.1.14707' (pid 5725) tries to set negative timeout [ 642.871690][ T5727] syzkaller0: entered promiscuous mode [ 642.877424][ T5727] syzkaller0: entered allmulticast mode [ 644.622370][ T5742] syzkaller1: entered promiscuous mode [ 644.627901][ T5742] syzkaller1: entered allmulticast mode [ 644.740341][ T5749] lo: Caught tx_queue_len zero misconfig [ 644.948137][ T5763] bridge9: entered allmulticast mode [ 644.960336][ T5763] bridge9: entered promiscuous mode [ 644.969006][ T5763] team0: Failed to send port change of device bridge9 via netlink (err -105) [ 644.979653][ T5763] team0: Failed to send options change via netlink (err -105) [ 644.987160][ T5763] team0: Port device bridge9 added [ 645.024813][ T5771] netlink: 'syz.4.14727': attribute type 1 has an invalid length. [ 645.076111][ T5771] bond10: entered promiscuous mode [ 645.083237][ T5771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 645.166151][ T5771] 8021q: adding VLAN 0 to HW filter on device bond10 [ 645.188498][ T5771] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 645.199661][ T5771] bond10: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 645.216673][ T5771] bond10: (slave vcan1): making interface the new active one [ 645.224898][ T5771] vcan1: entered promiscuous mode [ 645.235591][ T5771] bond10: (slave vcan1): Enslaving as an active interface with an up link [ 645.291209][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.303985][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.325829][ T5780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.375075][ T5768] syzkaller1: entered promiscuous mode [ 645.381060][ T5768] syzkaller1: entered allmulticast mode [ 645.433648][ T5792] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.14733'. [ 647.995631][ T5929] wlan1 speed is unknown, defaulting to 1000 [ 648.010637][ T5929] wg1 speed is unknown, defaulting to 1000 [ 648.074436][ T5937] netlink: 'syz.3.14760': attribute type 4 has an invalid length. [ 648.088767][ T5937] netlink: 'syz.3.14760': attribute type 1 has an invalid length. [ 648.098882][ T5937] netlink: 15506 bytes leftover after parsing attributes in process `syz.3.14760'. [ 648.242401][ T5929] lo speed is unknown, defaulting to 1000 [ 648.663440][ T5929] virt_wifi0 speed is unknown, defaulting to 1000 [ 648.955540][ T5971] netlink: 'syz.1.14774': attribute type 2 has an invalid length. [ 651.554016][ T6029] "syz.0.14784" (6029) uses obsolete ecb(arc4) skcipher [ 651.777300][ T5994] wlan1 speed is unknown, defaulting to 1000 [ 651.786076][ T5994] wg1 speed is unknown, defaulting to 1000 [ 652.274257][ T5994] lo speed is unknown, defaulting to 1000 [ 652.712482][ T5994] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.082720][ T6114] bond4: (slave lo): Releasing backup interface [ 654.110853][ T6114] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 654.144040][ T6114] bond0: left allmulticast mode [ 654.156620][ T6114] bond_slave_0: left allmulticast mode [ 654.168822][ T6114] bond_slave_1: left allmulticast mode [ 654.190684][ T6114] team0: Port device bond0 removed [ 654.196569][ T6114] team0: left allmulticast mode [ 654.207068][ T6114] team_slave_0: left allmulticast mode [ 654.220822][ T6114] team_slave_1: left allmulticast mode [ 654.233574][ T6114] team0: left promiscuous mode [ 654.244396][ T6114] team_slave_0: left promiscuous mode [ 654.257044][ T6114] team_slave_1: left promiscuous mode [ 654.263558][ T6114] bridge0: port 3(team0) entered disabled state [ 654.276239][ T6114] ¾x9ÿ: left allmulticast mode [ 654.284795][ T6114] ¾x9ÿ: left promiscuous mode [ 654.292965][ T6114] bridge0: port 1(1¾x9ÿ) entered disabled state [ 654.328495][ T6114] bridge_slave_1: left allmulticast mode [ 654.335237][ T6114] bridge_slave_1: left promiscuous mode [ 654.359027][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.419228][ T6114] bond0: (slave bond_slave_0): Releasing backup interface [ 654.463038][ T6114] bond_slave_0: left promiscuous mode [ 654.473419][ T6114] bond0: (slave bond_slave_1): Releasing backup interface [ 654.493639][ T6114] bond_slave_1: left promiscuous mode [ 654.509468][ T6114] team0: Port device team_slave_0 removed [ 654.522506][ T6114] team0: Port device team_slave_1 removed [ 654.538937][ T6114] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 654.569344][ T6135] x_tables: duplicate underflow at hook 1 [ 656.069559][ T6176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14843'. [ 656.096863][ T6178] netlink: 'syz.2.14844': attribute type 1 has an invalid length. [ 656.369413][ T6188] netlink: 'syz.0.14848': attribute type 1 has an invalid length. [ 656.388782][ T6188] netlink: 264 bytes leftover after parsing attributes in process `syz.0.14848'. [ 656.400231][ T6188] netlink: 'syz.0.14848': attribute type 1 has an invalid length. [ 656.437304][ T6188] netlink: 264 bytes leftover after parsing attributes in process `syz.0.14848'. [ 656.561594][ T6198] syzkaller1: entered promiscuous mode [ 656.575605][ T6198] syzkaller1: entered allmulticast mode [ 656.747594][ T6207] vlan1: entered promiscuous mode [ 656.762116][ T6207] gretap0: entered promiscuous mode [ 656.770896][ T6206] vlan1: left promiscuous mode [ 656.775852][ T6206] gretap0: left promiscuous mode [ 657.148333][ T6230] netlink: 'syz.3.14864': attribute type 11 has an invalid length. [ 657.157236][ T6230] netlink: 'syz.3.14864': attribute type 4 has an invalid length. [ 657.165644][ T6230] netlink: 'syz.3.14864': attribute type 5 has an invalid length. [ 657.174644][ T6230] netlink: 'syz.3.14864': attribute type 6 has an invalid length. [ 657.183564][ T6230] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.14864'. [ 657.250825][ T6224] syzkaller0: entered promiscuous mode [ 657.264777][ T6224] syzkaller0: entered allmulticast mode [ 658.860156][ T6243] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.14866'. [ 659.384478][ T6253] wlan1 speed is unknown, defaulting to 1000 [ 659.395850][ T6253] wg1 speed is unknown, defaulting to 1000 [ 659.632884][ T6253] lo speed is unknown, defaulting to 1000 [ 659.976329][ T6253] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.232459][ T6232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.400837][ T6317] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.14892'. [ 660.439658][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14891'. [ 660.903812][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14897'. [ 660.951744][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14898'. [ 661.071704][ T6311] wlan1 speed is unknown, defaulting to 1000 [ 661.094304][ T6334] syzkaller0: entered promiscuous mode [ 661.109013][ T6334] syzkaller0: entered allmulticast mode [ 661.119876][ T6311] wg1 speed is unknown, defaulting to 1000 [ 661.496108][ T6353] netlink: 'syz.2.14905': attribute type 1 has an invalid length. [ 661.620609][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14905'. [ 661.770250][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14906'. [ 661.805295][ T6353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.825002][ T6368] netlink: 'syz.3.14907': attribute type 1 has an invalid length. [ 661.833083][ T6368] netlink: 'syz.3.14907': attribute type 4 has an invalid length. [ 661.849176][ T6368] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.14907'. [ 661.871975][ T6358] bond4 (unregistering): Released all slaves [ 661.881959][ T6368] netlink: 'syz.3.14907': attribute type 1 has an invalid length. [ 661.890060][ T6368] netlink: 'syz.3.14907': attribute type 4 has an invalid length. [ 661.898039][ T6368] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.14907'. [ 661.960533][ T6311] lo speed is unknown, defaulting to 1000 [ 662.542397][ T6311] virt_wifi0 speed is unknown, defaulting to 1000 [ 662.661021][ T6387] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14914'. [ 663.137230][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14927'. [ 663.322026][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14928'. [ 663.820660][ T6416] wlan1 speed is unknown, defaulting to 1000 [ 663.831076][ T6416] wg1 speed is unknown, defaulting to 1000 [ 663.986047][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14934'. [ 664.329564][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14940'. [ 664.358145][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14941'. [ 664.668419][ T6468] xt_hashlimit: size too large, truncated to 1048576 [ 664.729947][ T6416] lo speed is unknown, defaulting to 1000 [ 664.980473][ T6475] syzkaller1: entered promiscuous mode [ 664.996435][ T6475] syzkaller1: entered allmulticast mode [ 665.374268][ T6416] virt_wifi0 speed is unknown, defaulting to 1000 [ 666.391812][ T6511] bond10: entered allmulticast mode [ 666.397080][ T6511] vcan1: entered allmulticast mode [ 666.430666][ T6510] bond10: left allmulticast mode [ 666.467160][ T6510] vcan1: left allmulticast mode [ 666.871684][ T6521] __nla_validate_parse: 4 callbacks suppressed [ 666.871706][ T6521] netlink: 136 bytes leftover after parsing attributes in process `syz.4.14965'. [ 666.920039][ T6521] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 667.181468][ T6525] netlink: 'syz.0.14968': attribute type 1 has an invalid length. [ 667.217010][ T6525] netlink: 'syz.0.14968': attribute type 4 has an invalid length. [ 667.250540][ T6530] netlink: 'syz.0.14968': attribute type 1 has an invalid length. [ 667.251964][ T6525] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14968'. [ 667.298662][ T6530] netlink: 'syz.0.14968': attribute type 4 has an invalid length. [ 667.332762][ T6530] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14968'. [ 668.345303][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14979'. [ 668.552814][ T6566] netlink: 656 bytes leftover after parsing attributes in process `syz.0.14982'. [ 668.573946][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14984'. [ 668.874150][ T6586] netlink: 'syz.2.14992': attribute type 1 has an invalid length. [ 668.921259][ T6586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 669.072076][ T6589] bond4: (slave veth15): Enslaving as an active interface with a down link [ 669.109443][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 669.116553][ T6586] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 670.080750][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15001'. [ 670.092309][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15001'. [ 670.296039][ T6605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.498957][ T6635] netlink: 'syz.3.15004': attribute type 4 has an invalid length. [ 670.560063][ T6631] netlink: 'syz.3.15004': attribute type 4 has an invalid length. [ 670.662025][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15008'. [ 671.949725][ T6643] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 671.951766][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15006'. [ 672.091121][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15010'. [ 672.330924][ T6662] netlink: 'syz.2.15015': attribute type 13 has an invalid length. [ 672.367659][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15018'. [ 672.404810][ T6627] wlan1 speed is unknown, defaulting to 1000 [ 672.459027][ T6627] wg1 speed is unknown, defaulting to 1000 [ 672.598878][ T6674] lo: Caught tx_queue_len zero misconfig [ 672.734326][ T6627] lo speed is unknown, defaulting to 1000 [ 673.228328][ T6627] virt_wifi0 speed is unknown, defaulting to 1000 [ 673.821245][ T6719] syzkaller1: entered promiscuous mode [ 673.846414][ T6719] syzkaller1: entered allmulticast mode [ 674.779286][ T6755] wlan1 speed is unknown, defaulting to 1000 [ 674.788355][ T6755] wg1 speed is unknown, defaulting to 1000 [ 675.199854][ T6755] lo speed is unknown, defaulting to 1000 [ 675.670192][ T6787] syzkaller1: entered promiscuous mode [ 675.675851][ T6787] syzkaller1: entered allmulticast mode [ 675.717353][ T6755] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.028794][ T6799] block nbd5: server does not support multiple connections per device. [ 676.063124][ T6799] block nbd5: shutting down sockets [ 677.149422][ T6833] syzkaller1: entered promiscuous mode [ 677.155010][ T6833] syzkaller1: entered allmulticast mode [ 677.283842][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15078'. [ 677.441065][ T6847] syzkaller0: entered promiscuous mode [ 677.446879][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15081'. [ 677.540724][ T6849] syzkaller1: entered promiscuous mode [ 677.563256][ T6849] syzkaller1: entered allmulticast mode [ 677.739828][ T6859] sctp: [Deprecated]: syz.4.15085 (pid 6859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.739828][ T6859] Use struct sctp_sack_info instead [ 678.001601][ T6869] netlink: 'syz.0.15090': attribute type 1 has an invalid length. [ 678.014746][ T6869] netlink: 'syz.0.15090': attribute type 4 has an invalid length. [ 678.048391][ T6869] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15090'. [ 678.089363][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15092'. [ 679.151006][ T6915] lec:lec_atm_send: lec0: Unknown message type 983980808 [ 679.371508][ T6892] lec:lec_atm_close: lec0: Shut down! [ 679.631632][ T6907] wlan1 speed is unknown, defaulting to 1000 [ 679.661409][ T6907] wg1 speed is unknown, defaulting to 1000 [ 680.418824][T10372] lec:lec_start_xmit: lec0:No lecd attached [ 680.581475][ T6907] lo speed is unknown, defaulting to 1000 [ 680.842155][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15115'. [ 681.101432][ T6907] virt_wifi0 speed is unknown, defaulting to 1000 [ 681.537817][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bcafc00: rx timeout, send abort [ 681.955290][ T6924] mpoa:mpoad_close: () going down [ 682.042932][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15121'. [ 682.052286][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bcafc00: abort rx timeout. Force session deactivation [ 682.126079][ T6981] netlink: 'syz.0.15121': attribute type 1 has an invalid length. [ 682.138996][ T6981] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15121'. [ 682.251798][ T6988] vlan2: entered allmulticast mode [ 682.256966][ T6988] bond0: entered allmulticast mode [ 682.276536][ T6995] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15124'. [ 682.294208][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15126'. [ 682.396651][ T6995] bond0 (unregistering): Released all slaves [ 682.446267][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15130'. [ 682.546005][ T7006] netlink: 'syz.3.15131': attribute type 4 has an invalid length. [ 682.602688][ T7012] netlink: 'syz.3.15131': attribute type 4 has an invalid length. [ 683.268236][ T7006] bridge9: left promiscuous mode [ 683.669732][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15140'. [ 683.810887][ T7058] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 683.918315][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15142'. [ 684.144744][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15149'. [ 684.249587][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15151'. [ 684.335146][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15154'. [ 684.365691][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15154'. [ 684.713516][ T7100] wlan1 speed is unknown, defaulting to 1000 [ 684.721572][ T7100] wg1 speed is unknown, defaulting to 1000 [ 684.819911][ T7117] syzkaller1: entered promiscuous mode [ 684.829628][ T7117] syzkaller1: entered allmulticast mode [ 684.836895][ T7118] syzkaller1: entered promiscuous mode [ 684.845493][ T7118] syzkaller1: entered allmulticast mode [ 685.123674][ T7100] lo speed is unknown, defaulting to 1000 [ 685.160399][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15166'. [ 685.190010][ T7127] netlink: 'syz.3.15166': attribute type 7 has an invalid length. [ 685.211686][ T7127] netlink: 'syz.3.15166': attribute type 8 has an invalid length. [ 685.244186][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15166'. [ 685.324801][ T7106] wlan1 speed is unknown, defaulting to 1000 [ 685.376148][ T7106] wg1 speed is unknown, defaulting to 1000 [ 685.912106][ T7106] lo speed is unknown, defaulting to 1000 [ 685.912778][ T7100] virt_wifi0 speed is unknown, defaulting to 1000 [ 686.093939][ T7148] syzkaller1: entered promiscuous mode [ 686.113301][ T7148] syzkaller1: entered allmulticast mode [ 686.428689][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 686.437189][ C1] lec:lec_tx_timeout: lec0 [ 686.442071][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 686.559643][ T7106] virt_wifi0 speed is unknown, defaulting to 1000 [ 687.002095][ T7175] macsec2: entered promiscuous mode [ 687.402300][ T7194] sch_fq: defrate 53322 ignored. [ 688.151466][ T7211] geneve4: entered promiscuous mode [ 688.329124][ T36] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.348093][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.379038][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.387796][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.640116][ T7228] __nla_validate_parse: 1 callbacks suppressed [ 688.640137][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15199'. [ 689.191041][ T7231] wlan1 speed is unknown, defaulting to 1000 [ 689.199009][ T7231] wg1 speed is unknown, defaulting to 1000 [ 689.392130][ T7231] lo speed is unknown, defaulting to 1000 [ 689.721921][ T7231] virt_wifi0 speed is unknown, defaulting to 1000 [ 690.147419][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15213'. [ 690.207869][ T7264] wlan1 speed is unknown, defaulting to 1000 [ 690.227868][ T7264] wg1 speed is unknown, defaulting to 1000 [ 690.492956][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15215'. [ 690.565802][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.581973][ T5580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 690.606278][ T7280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.652133][ T676] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 690.670746][ T676] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 690.858786][T10391] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 691.009507][ T7291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.131512][ T7284] wlan1 speed is unknown, defaulting to 1000 [ 691.131532][ T7264] lo speed is unknown, defaulting to 1000 [ 691.160578][ T7284] wg1 speed is unknown, defaulting to 1000 [ 691.195532][ T7291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.217313][T10372] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 691.357261][ T7291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.451939][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15224'. [ 691.584052][ T7291] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.871733][ T1153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.935499][ T676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.953352][ T7323] syz_tun: entered allmulticast mode [ 691.963090][ T7284] lo speed is unknown, defaulting to 1000 [ 691.969105][ T7264] virt_wifi0 speed is unknown, defaulting to 1000 [ 692.050277][ T63] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.126951][ T63] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.188562][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 692.193695][ T7333] netlink: 'syz.0.15229': attribute type 4 has an invalid length. [ 692.196618][ C1] lec:lec_tx_timeout: lec0 [ 692.209238][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 694.549448][ T7344] wlan1 speed is unknown, defaulting to 1000 [ 694.558355][ T7344] wg1 speed is unknown, defaulting to 1000 [ 694.565468][ T7284] virt_wifi0 speed is unknown, defaulting to 1000 [ 694.645628][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15238'. [ 694.990708][ T7344] lo speed is unknown, defaulting to 1000 [ 695.068818][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 695.330784][ T7344] virt_wifi0 speed is unknown, defaulting to 1000 [ 695.442992][ T7395] netlink: 'syz.2.15246': attribute type 1 has an invalid length. [ 695.584489][ T7395] bond5: entered promiscuous mode [ 695.599451][ T7395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.754105][ T7398] bond5: (slave bridge4): making interface the new active one [ 695.767875][ T7398] bridge4: entered promiscuous mode [ 695.781076][ T7398] bridge4: left promiscuous mode [ 696.204256][ T7391] wlan1 speed is unknown, defaulting to 1000 [ 696.243967][ T7391] wg1 speed is unknown, defaulting to 1000 [ 696.718962][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15253'. [ 696.797680][ T7415] `: Port device team_slave_0 removed [ 696.865603][ T7391] lo speed is unknown, defaulting to 1000 [ 697.470591][ T7391] virt_wifi0 speed is unknown, defaulting to 1000 [ 697.492317][ T7424] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15256'. [ 697.948556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 697.956621][ C1] lec:lec_tx_timeout: lec0 [ 697.961901][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 698.016129][ T7428] wlan1 speed is unknown, defaulting to 1000 [ 698.025414][ T7428] wg1 speed is unknown, defaulting to 1000 [ 698.322982][ T7441] netlink: 'syz.2.15262': attribute type 4 has an invalid length. [ 698.348170][T10391] lo speed is unknown, defaulting to 1000 [ 698.354598][T10391] sqz0: Port: 1 Link DOWN [ 698.366090][T10390] lo speed is unknown, defaulting to 1000 [ 698.374886][ T7441] netlink: 'syz.2.15262': attribute type 4 has an invalid length. [ 698.405447][T10372] lo speed is unknown, defaulting to 1000 [ 698.411644][T10372] sqz0: Port: 1 Link ACTIVE [ 698.418893][T18911] lo speed is unknown, defaulting to 1000 [ 698.680285][T18911] lo speed is unknown, defaulting to 1000 [ 698.694221][T18911] sqz0: Port: 1 Link DOWN [ 698.694267][ T7428] lo speed is unknown, defaulting to 1000 [ 699.017638][ T7428] virt_wifi0 speed is unknown, defaulting to 1000 [ 699.333759][ T7451] wlan1 speed is unknown, defaulting to 1000 [ 699.374504][ T7451] wg1 speed is unknown, defaulting to 1000 [ 699.536624][ T7451] lo speed is unknown, defaulting to 1000 [ 699.754641][ T7467] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.851025][ T7467] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.925109][ T7467] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.005809][ T7467] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.019210][ T7478] netlink: 'syz.1.15276': attribute type 1 has an invalid length. [ 700.081898][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15276'. [ 700.154256][ T7451] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.268110][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15276'. [ 700.290728][ T7478] bond0: entered promiscuous mode [ 700.298330][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.369451][ T7480] bond0: (slave bridge7): making interface the new active one [ 700.376989][ T7480] bridge7: entered promiscuous mode [ 700.420030][ T7480] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 700.717910][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.733704][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.767438][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.821957][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.889979][ T7492] tipc: Enabled bearer , priority 0 [ 700.906708][ T7492] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 700.945988][ T7492] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 700.999822][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15281'. [ 701.025075][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15281'. [ 701.617600][ T7513] netlink: 80 bytes leftover after parsing attributes in process `syz.4.15287'. [ 702.143980][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15287'. [ 702.542606][ T7531] 8021q: adding VLAN 0 to HW filter on device ` [ 702.584465][ T7531] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 702.638823][ T5580] lo speed is unknown, defaulting to 1000 [ 702.647060][ T7524] wlan1 speed is unknown, defaulting to 1000 [ 702.650899][ T5580] sqz0: Port: 1 Link ACTIVE [ 702.660810][ T7524] wg1 speed is unknown, defaulting to 1000 [ 702.661686][ T5580] lo speed is unknown, defaulting to 1000 [ 702.868050][ T7524] lo speed is unknown, defaulting to 1000 [ 702.968719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 702.976864][ C1] lec:lec_tx_timeout: lec0 [ 702.982097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 703.123399][ T7524] virt_wifi0 speed is unknown, defaulting to 1000 [ 703.545044][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15301'. [ 703.554668][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15301'. [ 704.348728][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 704.582549][ T7572] wlan1 speed is unknown, defaulting to 1000 [ 704.612293][ T7572] wg1 speed is unknown, defaulting to 1000 [ 704.632339][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15317'. [ 704.715873][ T7588] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15316'. [ 704.728802][ T7584] 8021q: adding VLAN 0 to HW filter on device bond11 [ 704.774361][ T7584] macsec2: entered promiscuous mode [ 704.807818][ T7584] bond11: entered promiscuous mode [ 704.870072][ T7584] bond11: left promiscuous mode [ 704.900650][ T7598] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 704.918720][ T7598] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 704.948827][ T7598] macsec2: entered promiscuous mode [ 705.058978][ T7572] lo speed is unknown, defaulting to 1000 [ 705.520940][ T7572] virt_wifi0 speed is unknown, defaulting to 1000 [ 706.216600][ T7619] lec:lec_atm_close: lec0: Shut down! [ 707.442638][ T7663] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 707.454112][ T7663] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 707.552985][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15339'. [ 707.640227][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15339'. [ 707.661979][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15342'. [ 707.679575][ T7667] 8021q: adding VLAN 0 to HW filter on device bond11 [ 707.701140][ T7671] macsec2: entered promiscuous mode [ 707.706595][ T7671] bond11: entered promiscuous mode [ 707.715680][ T7671] macsec2: entered allmulticast mode [ 707.722385][ T7671] bond11: entered allmulticast mode [ 707.729256][ T7671] bond11: left allmulticast mode [ 707.734346][ T7671] bond11: left promiscuous mode [ 707.756190][ T7655] wlan1 speed is unknown, defaulting to 1000 [ 707.765017][ T7655] wg1 speed is unknown, defaulting to 1000 [ 707.783714][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15343'. [ 708.132958][ T7687] syzkaller1: entered promiscuous mode [ 708.138483][ T7687] syzkaller1: entered allmulticast mode [ 708.226655][ T7658] wlan1 speed is unknown, defaulting to 1000 [ 708.242841][ T7655] lo speed is unknown, defaulting to 1000 [ 708.249942][ T7658] wg1 speed is unknown, defaulting to 1000 [ 708.502438][ T7682] wlan1 speed is unknown, defaulting to 1000 [ 708.693330][ T7655] virt_wifi0 speed is unknown, defaulting to 1000 [ 708.729983][ T7682] wg1 speed is unknown, defaulting to 1000 [ 708.739490][ T7658] lo speed is unknown, defaulting to 1000 [ 709.617023][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15356'. [ 709.698147][ T7682] lo speed is unknown, defaulting to 1000 [ 709.758601][ T7658] virt_wifi0 speed is unknown, defaulting to 1000 [ 710.049182][ T7721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15360'. [ 710.259913][ T7722] syzkaller1: entered promiscuous mode [ 710.265626][ T7722] syzkaller1: entered allmulticast mode [ 710.409650][ T7682] virt_wifi0 speed is unknown, defaulting to 1000 [ 710.413181][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15362'. [ 710.438719][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15362'. [ 711.868636][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 711.876702][ C1] lec:lec_tx_timeout: lec0 [ 711.883641][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 712.062766][ T7754] wlan1 speed is unknown, defaulting to 1000 [ 712.071373][ T7754] wg1 speed is unknown, defaulting to 1000 [ 712.297489][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15376'. [ 712.307774][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15376'. [ 712.530739][ T7754] lo speed is unknown, defaulting to 1000 [ 712.680921][ T7764] wlan1 speed is unknown, defaulting to 1000 [ 712.710292][ T7764] wg1 speed is unknown, defaulting to 1000 [ 713.095133][ T7754] virt_wifi0 speed is unknown, defaulting to 1000 [ 713.233316][ T7790] atomic_op ffff88805b5e9198 conn xmit_atomic 0000000000000000 [ 713.410056][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15384'. [ 713.440814][ T7769] wlan1 speed is unknown, defaulting to 1000 [ 713.440874][ T7764] lo speed is unknown, defaulting to 1000 [ 713.484712][ T7769] wg1 speed is unknown, defaulting to 1000 [ 713.486180][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15384'. [ 713.881139][ T7764] virt_wifi0 speed is unknown, defaulting to 1000 [ 713.947242][ T7769] lo speed is unknown, defaulting to 1000 [ 714.312639][ T7818] bond12: entered promiscuous mode [ 714.456812][ T7820] vcan1: entered promiscuous mode [ 714.471286][ T7820] vcan1: entered allmulticast mode [ 714.481644][ T7820] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 714.493255][ T7820] bond12: (slave vcan1): Error -95 calling set_mac_address [ 714.519231][ T7769] virt_wifi0 speed is unknown, defaulting to 1000 [ 714.727685][ T7822] tipc: Enabled bearer , priority 0 [ 715.477675][ T7845] tipc: Enabling of bearer rejected, already enabled [ 715.978876][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15405'. [ 716.713905][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.725314][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.898561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 716.906666][ C1] lec:lec_tx_timeout: lec0 [ 716.911326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 717.092204][ T7871] dvmrp0: entered allmulticast mode [ 717.210156][ T7869] wlan1 speed is unknown, defaulting to 1000 [ 717.232988][ T7869] wg1 speed is unknown, defaulting to 1000 [ 717.503593][ T7885] wlan1 speed is unknown, defaulting to 1000 [ 717.722196][ T7909] tipc: Enabled bearer , priority 0 [ 717.896004][ T7909] syzkaller0: entered promiscuous mode [ 717.905884][ T7909] syzkaller0: entered allmulticast mode [ 717.929264][ T7909] tipc: Resetting bearer [ 718.052174][ T2569] tipc: Resetting bearer [ 718.091429][ T7885] wg1 speed is unknown, defaulting to 1000 [ 718.110570][ T7869] lo speed is unknown, defaulting to 1000 [ 718.141888][ T7907] tipc: Resetting bearer [ 718.420622][ T7908] lec:lec_atm_close: lec0: Shut down! [ 719.975157][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15414'. [ 720.963943][ T7907] tipc: Disabling bearer [ 720.972832][ T7869] virt_wifi0 speed is unknown, defaulting to 1000 [ 720.972878][ T7885] lo speed is unknown, defaulting to 1000 [ 720.993675][T10390] tipc: Node number set to 3758096386 [ 721.102559][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15415'. [ 721.120128][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15415'. [ 721.524250][ T7885] virt_wifi0 speed is unknown, defaulting to 1000 [ 721.629850][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 722.546925][ T7982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15423'. [ 723.869954][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 723.878035][ C1] lec:lec_tx_timeout: lec0 [ 723.882850][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 724.027962][ T7994] wlan1 speed is unknown, defaulting to 1000 [ 724.042587][ T7994] wg1 speed is unknown, defaulting to 1000 [ 724.204208][ T8023] vlan2: entered promiscuous mode [ 724.233724][ T8023] vlan2: entered allmulticast mode [ 724.250465][ T8023] hsr_slave_1: entered allmulticast mode [ 724.451583][ T7994] lo speed is unknown, defaulting to 1000 [ 724.804114][ T7994] virt_wifi0 speed is unknown, defaulting to 1000 [ 725.802665][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15454'. [ 725.857302][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15454'. [ 725.889328][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15454'. [ 725.919329][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15454'. [ 725.955873][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15454'. [ 726.205954][ T8091] netlink: 'syz.0.15459': attribute type 10 has an invalid length. [ 726.964447][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15466'. [ 727.211523][ T8121] tipc: Resetting bearer [ 727.237987][ T8121] tipc: Resetting bearer [ 727.261978][ T8030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.271423][ T8044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 727.397528][ T8123] netlink: 'syz.2.15470': attribute type 39 has an invalid length. [ 727.439857][ T8129] netlink: 'syz.4.15472': attribute type 4 has an invalid length. [ 727.453739][ T8129] netlink: 'syz.4.15472': attribute type 4 has an invalid length. [ 728.222844][ T8137] wlan1 speed is unknown, defaulting to 1000 [ 728.236414][ T8137] wg1 speed is unknown, defaulting to 1000 [ 728.452164][ T8150] wlan1 speed is unknown, defaulting to 1000 [ 728.467212][ T8157] tipc: Enabled bearer , priority 0 [ 728.598772][ T8157] syzkaller0: entered promiscuous mode [ 728.604354][ T8157] syzkaller0: entered allmulticast mode [ 728.610860][ T8157] tipc: Resetting bearer [ 728.641519][ T8156] tipc: Resetting bearer [ 728.908566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 728.916650][ C1] lec:lec_tx_timeout: lec0 [ 728.921516][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 730.194325][ T8156] tipc: Disabling bearer [ 730.203095][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15484'. [ 730.203566][ T8150] wg1 speed is unknown, defaulting to 1000 [ 730.212336][ T8137] lo speed is unknown, defaulting to 1000 [ 730.224227][ T8161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15484'. [ 730.243945][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15484'. [ 730.258888][ T8161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15484'. [ 730.585995][ T8175] 8021q: adding VLAN 0 to HW filter on device bond13 [ 730.619053][ T8178] bond13: (slave macvlan4): Enslaving as an active interface with an up link [ 730.880909][ T8137] virt_wifi0 speed is unknown, defaulting to 1000 [ 730.908000][ T8191] __nla_validate_parse: 1 callbacks suppressed [ 730.908020][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15493'. [ 730.921005][ T8150] lo speed is unknown, defaulting to 1000 [ 731.227176][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15500'. [ 731.520871][ T8150] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.696722][ T8226] netlink: 192 bytes leftover after parsing attributes in process `syz.3.15507'. [ 731.722810][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15507'. [ 731.981552][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15511'. [ 732.188880][ T8245] macvtap0: entered promiscuous mode [ 732.200177][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15513'. [ 732.508366][ T8254] tipc: Enabled bearer , priority 0 [ 732.520652][ T8229] wlan1 speed is unknown, defaulting to 1000 [ 732.581228][ T8254] syzkaller0: entered promiscuous mode [ 732.587703][ T8254] syzkaller0: entered allmulticast mode [ 732.594411][ T8254] tipc: Resetting bearer [ 732.618927][ T8229] wg1 speed is unknown, defaulting to 1000 [ 732.657281][ T8253] tipc: Resetting bearer [ 733.932302][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 733.940346][ C1] lec:lec_tx_timeout: lec0 [ 733.944888][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 734.443003][ T8253] tipc: Disabling bearer [ 734.452107][ T8229] lo speed is unknown, defaulting to 1000 [ 734.561758][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15521'. [ 734.621505][ T8268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.710294][ T8273] macvlan0: entered allmulticast mode [ 734.731201][ T8273] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 734.949852][ T8229] virt_wifi0 speed is unknown, defaulting to 1000 [ 735.153792][ T8287] tipc: Resetting bearer [ 735.577569][ T8304] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 736.334667][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15538'. [ 736.388215][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15538'. [ 737.140567][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15546'. [ 737.336500][ T8331] wlan1 speed is unknown, defaulting to 1000 [ 737.374535][ T8331] wg1 speed is unknown, defaulting to 1000 [ 737.921698][ T8331] lo speed is unknown, defaulting to 1000 [ 738.199489][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15558'. [ 738.382707][ T8331] virt_wifi0 speed is unknown, defaulting to 1000 [ 738.444934][ T8385] netlink: 'syz.3.15560': attribute type 1 has an invalid length. [ 738.651356][ T8387] bond14: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 738.672109][ T8387] bond14: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 738.744945][ T8387] bond14: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 738.936275][ T8396] gtp2: entered allmulticast mode [ 738.941850][ T8396] team0: Device gtp2 is of different type [ 738.968909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 738.977035][ C1] lec:lec_tx_timeout: lec0 [ 738.981982][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 739.283547][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15568'. [ 739.920699][ T8421] netlink: 'syz.4.15574': attribute type 1 has an invalid length. [ 740.097656][ T8421] bond12: (slave veth19): Enslaving as an active interface with a down link [ 740.155915][ T8427] bond0: (slave dummy0): Releasing backup interface [ 740.199568][ T8421] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15574'. [ 740.229390][ T8427] bond12: (slave dummy0): making interface the new active one [ 740.238053][ T8427] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 740.294653][ T8421] bond12: (slave dummy0): Releasing active interface [ 740.542662][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15581'. [ 741.013709][ T8458] syzkaller0: entered promiscuous mode [ 741.038681][ T8458] syzkaller0: entered allmulticast mode [ 741.160246][ T8472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15593'. [ 741.310420][ T8472] netlink: 35 bytes leftover after parsing attributes in process `syz.0.15593'. [ 741.319816][ T8472] netlink: 'syz.0.15593': attribute type 5 has an invalid length. [ 741.327744][ T8472] netlink: 'syz.0.15593': attribute type 6 has an invalid length. [ 741.335861][ T8472] netlink: 35 bytes leftover after parsing attributes in process `syz.0.15593'. [ 742.998085][ T8486] ip6tnl8: left allmulticast mode [ 743.015914][ T8486] bridge9: left allmulticast mode [ 743.026071][ T8486] tipc: Resetting bearer [ 743.054755][ T8486] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 743.076856][ T8486] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 743.215171][ T8486] vlan2: left promiscuous mode [ 743.221567][ T8486] vlan2: left allmulticast mode [ 743.226594][ T8486] hsr_slave_1: left allmulticast mode [ 743.646635][ T8521] netlink: 776 bytes leftover after parsing attributes in process `syz.3.15608'. [ 743.792605][ T8527] netlink: 'syz.3.15610': attribute type 1 has an invalid length. [ 743.800980][ T8526] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15611'. [ 743.808892][ T8527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15610'. [ 743.817970][ T8526] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15611'. [ 743.988658][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 743.996743][ C1] lec:lec_tx_timeout: lec0 [ 744.001562][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 744.157091][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15616'. [ 744.170582][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15616'. [ 744.271261][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15617'. [ 744.290264][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15618'. [ 745.002923][ T8565] wlan1 speed is unknown, defaulting to 1000 [ 745.024316][ T8565] wg1 speed is unknown, defaulting to 1000 [ 745.080588][ T8584] netlink: 'syz.0.15630': attribute type 13 has an invalid length. [ 745.100471][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15631'. [ 745.175129][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15631'. [ 745.222268][ T8584] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 745.243104][ T8584] pim6reg1: entered promiscuous mode [ 745.259501][ T8584] pim6reg1: entered allmulticast mode [ 745.651517][ T8565] lo speed is unknown, defaulting to 1000 [ 746.046397][ T8609] syzkaller0: entered promiscuous mode [ 746.059958][ T8609] syzkaller0: entered allmulticast mode [ 746.074815][ T8598] wlan1 speed is unknown, defaulting to 1000 [ 746.090372][ T8598] wg1 speed is unknown, defaulting to 1000 [ 748.165497][ T8565] virt_wifi0 speed is unknown, defaulting to 1000 [ 748.165559][ T8598] lo speed is unknown, defaulting to 1000 [ 748.552477][ T8598] virt_wifi0 speed is unknown, defaulting to 1000 [ 748.570381][ T8649] netlink: 'syz.1.15654': attribute type 13 has an invalid length. [ 748.691789][ T8660] netlink: 'syz.2.15656': attribute type 11 has an invalid length. [ 749.008726][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 749.016846][ C1] lec:lec_tx_timeout: lec0 [ 749.021827][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 749.071491][ T8670] syzkaller0: entered allmulticast mode [ 749.311830][ T8686] netlink: 'syz.2.15666': attribute type 1 has an invalid length. [ 749.334366][ T8686] __nla_validate_parse: 5 callbacks suppressed [ 749.334385][ T8686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15666'. [ 749.448085][ T8690] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 749.740572][ T8701] sctp: [Deprecated]: syz.1.15670 (pid 8701) Use of int in max_burst socket option. [ 749.740572][ T8701] Use struct sctp_assoc_value instead [ 749.777012][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15673'. [ 749.938941][ T8711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15672'. [ 749.976382][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15673'. [ 750.502587][ T8732] syzkaller0: entered promiscuous mode [ 750.508101][ T8732] syzkaller0: entered allmulticast mode [ 750.528117][ T8732] tipc: Enabled bearer , priority 0 [ 750.560439][ T8731] tipc: Resetting bearer [ 750.651095][ T8731] tipc: Disabling bearer [ 750.701297][ T8737] tipc: Enabling of bearer rejected, already enabled [ 751.284534][ T8761] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 751.321528][ T8761] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 751.650188][ T8785] netlink: 'syz.0.15696': attribute type 1 has an invalid length. [ 751.683591][ T8785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 751.723787][ T8785] bond7: (slave ip6gretap1): making interface the new active one [ 751.733449][ T8785] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 751.957402][ T8799] syzkaller1: entered promiscuous mode [ 751.972548][ T8799] syzkaller1: entered allmulticast mode [ 752.249217][ T8812] netlink: 'syz.3.15707': attribute type 1 has an invalid length. [ 753.560758][ T8832] wlan1 speed is unknown, defaulting to 1000 [ 753.570643][ T8853] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 753.585367][ T8832] wg1 speed is unknown, defaulting to 1000 [ 753.594692][ T8853] syzkaller0: entered promiscuous mode [ 753.621158][ T8853] syzkaller0: entered allmulticast mode [ 753.781927][ T8857] netlink: 'syz.0.15724': attribute type 1 has an invalid length. [ 753.839765][ T8860] netlink: 200 bytes leftover after parsing attributes in process `syz.1.15725'. [ 753.853529][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15725'. [ 753.869244][ T8857] bond8: (slave geneve6): making interface the new active one [ 753.884682][ T8857] bond8: (slave geneve6): Enslaving as an active interface with an up link [ 753.904218][ T63] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.923543][ T63] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.937795][ T63] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.946812][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15724'. [ 753.966806][ T8832] lo speed is unknown, defaulting to 1000 [ 753.966812][ T63] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 753.990683][ T8857] bond8 (unregistering): (slave geneve6): Releasing active interface [ 754.028569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 754.036710][ C1] lec:lec_tx_timeout: lec0 [ 754.041572][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 754.063953][ T8857] bond8 (unregistering): Released all slaves [ 754.156401][ T676] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 754.196105][ T676] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 754.237338][ T676] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 754.259061][ T676] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 754.369811][ T8865] nbd0: detected capacity change from 0 to 63 [ 754.379789][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15731'. [ 754.403370][ T8869] block nbd2: NBD_DISCONNECT [ 754.418708][ T8869] block nbd2: Send disconnect failed -32 [ 754.437787][ T8869] block nbd2: shutting down sockets [ 754.458243][ T8832] virt_wifi0 speed is unknown, defaulting to 1000 [ 754.507970][ T5825] block nbd0: Receive control failed (result -104) [ 754.789744][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15739'. [ 754.804799][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15738'. [ 755.078113][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15742'. [ 755.290666][ T8908] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1108013824/1108013826 [ 755.303806][ T8908] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1108013824/1108013825 [ 755.375508][ T8908] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1108013824/1108013826 [ 755.412707][ T8908] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1108013824/1108013825 [ 756.188701][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 756.271720][ T8924] syzkaller0: entered promiscuous mode [ 756.289145][ T8924] syzkaller0: entered allmulticast mode [ 756.896665][ T8940] syzkaller0: entered promiscuous mode [ 756.919066][ T8940] syzkaller0: entered allmulticast mode [ 757.815241][ T8959] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 758.366766][ T8970] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.15766'. [ 759.058602][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 759.066746][ C1] lec:lec_tx_timeout: lec0 [ 759.071511][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 759.632202][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15774'. [ 759.673934][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15771'. [ 759.709067][ T8994] tipc: Enabled bearer , priority 0 [ 759.825204][ T9006] syzkaller0: entered promiscuous mode [ 759.842070][ T9006] syzkaller0: entered allmulticast mode [ 759.861256][ T9006] tipc: Resetting bearer [ 759.948303][ T8993] tipc: Resetting bearer [ 760.442978][ T5825] block nbd2: Receive control failed (result -32) [ 760.542025][ T30] audit: type=1800 audit(1772851541.542:9): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15779" name="memory.events" dev="tmpfs" ino=15547 res=0 errno=0 [ 762.820090][ T8993] tipc: Disabling bearer [ 763.129977][ T9058] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 763.138712][ T9058] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 763.292627][ T9068] netlink: 'syz.0.15791': attribute type 1 has an invalid length. [ 763.354405][ T9068] 8021q: adding VLAN 0 to HW filter on device bond8 [ 763.412341][ T9045] wlan1 speed is unknown, defaulting to 1000 [ 763.420350][ T9045] wg1 speed is unknown, defaulting to 1000 [ 763.429535][ T9068] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 763.788152][ T9083] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 763.807016][ T9083] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 763.842641][ T9045] lo speed is unknown, defaulting to 1000 [ 764.065485][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15801'. [ 764.121085][ T9098] 8021q: adding VLAN 0 to HW filter on device bond13 [ 764.609923][ T9106] ipvlan0: entered promiscuous mode [ 764.615381][ T9106] ipvlan0: entered allmulticast mode [ 764.638666][ T9106] bond13: entered allmulticast mode [ 764.659192][ T9045] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.755662][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15803'. [ 765.054469][ T9124] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 765.154055][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6080 ms [ 765.162141][ C1] lec:lec_tx_timeout: lec0 [ 765.167655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 765.203753][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15810'. [ 765.369515][ T9154] tipc: Enabled bearer , priority 0 [ 765.491498][ T9157] pim6reg1: entered promiscuous mode [ 765.507087][ T9157] pim6reg1: entered allmulticast mode [ 765.761748][ T9162] vlan7: entered promiscuous mode [ 765.779380][ T9162] bridge0: entered promiscuous mode [ 766.508958][ T5580] tipc: Node number set to 2 [ 766.694040][ T9190] syzkaller0: entered promiscuous mode [ 766.699879][ T9190] syzkaller0: entered allmulticast mode [ 769.505180][ T9212] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15832'. [ 769.514797][ T9212] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15832'. [ 769.725890][ T9220] syzkaller0: entered promiscuous mode [ 769.731910][ T9220] syzkaller0: entered allmulticast mode [ 769.823179][ T9228] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 770.014282][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15841'. [ 770.279798][ T9246] syzkaller0: entered promiscuous mode [ 770.299067][ T9246] syzkaller0: entered allmulticast mode [ 770.349826][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15846'. [ 770.867252][ T9253] wg1 speed is unknown, defaulting to 1000 [ 770.908517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 770.916553][ C1] lec:lec_tx_timeout: lec0 [ 770.921517][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 770.976356][ T9283] netlink: 'syz.4.15858': attribute type 83 has an invalid length. [ 771.318750][ T9288] netlink: 'syz.0.15860': attribute type 1 has an invalid length. [ 771.453985][ T9288] 8021q: adding VLAN 0 to HW filter on device bond9 [ 771.524263][ T9296] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15860'. [ 771.773873][ T9292] bond9: (slave veth13): Enslaving as an active interface with a down link [ 771.793239][ T9253] lo speed is unknown, defaulting to 1000 [ 771.808728][ T9279] wg1 speed is unknown, defaulting to 1000 [ 772.276641][ T9290] wg1 speed is unknown, defaulting to 1000 [ 772.278324][ T9279] lo speed is unknown, defaulting to 1000 [ 772.289305][ T9253] virt_wifi0 speed is unknown, defaulting to 1000 [ 772.997349][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15863'. [ 773.019441][ T9279] virt_wifi0 speed is unknown, defaulting to 1000 [ 773.089025][ T9290] lo speed is unknown, defaulting to 1000 [ 773.806559][ T9320] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 774.074394][ T9290] virt_wifi0 speed is unknown, defaulting to 1000 [ 774.093545][ T9314] wg1 speed is unknown, defaulting to 1000 [ 774.456062][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15871'. [ 774.680817][ T9314] lo speed is unknown, defaulting to 1000 [ 775.472746][ T9314] virt_wifi0 speed is unknown, defaulting to 1000 [ 775.922323][ T9345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.938588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 775.946695][ C1] lec:lec_tx_timeout: lec0 [ 775.952045][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 776.051500][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15879'. [ 776.076786][ T9342] wg1 speed is unknown, defaulting to 1000 [ 776.269956][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15882'. [ 776.279911][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15882'. [ 776.382051][ T9359] tipc: Enabled bearer , priority 0 [ 776.820993][ T9359] tipc: Resetting bearer [ 776.911032][ T2569] tipc: Resetting bearer [ 777.020057][ T9365] pim6reg: entered allmulticast mode [ 777.041152][ T9366] syzkaller0: entered promiscuous mode [ 777.046793][ T9366] syzkaller0: entered allmulticast mode [ 777.217151][ T9342] lo speed is unknown, defaulting to 1000 [ 777.217168][ T9368] pim6reg: left allmulticast mode [ 777.253637][ T9358] tipc: Resetting bearer [ 779.171136][ T9358] tipc: Disabling bearer [ 779.199866][ T9375] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 779.217671][ T9342] virt_wifi0 speed is unknown, defaulting to 1000 [ 779.736022][ T9391] wg1 speed is unknown, defaulting to 1000 [ 779.969355][ T9391] lo speed is unknown, defaulting to 1000 [ 780.242061][ T9391] virt_wifi0 speed is unknown, defaulting to 1000 [ 780.727536][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15899'. [ 780.791407][ T9425] xfrm1: entered allmulticast mode [ 780.798940][ T9426] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 780.958532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 780.966661][ C1] lec:lec_tx_timeout: lec0 [ 780.971434][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 780.987741][ T9429] netlink: 'syz.4.15901': attribute type 1 has an invalid length. [ 781.047992][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15901'. [ 781.268468][ T9434] 8021q: adding VLAN 0 to HW filter on device bond14 [ 781.504346][ T9446] syzkaller0: entered promiscuous mode [ 781.511525][ T9446] syzkaller0: entered allmulticast mode [ 782.051752][ T9455] wg1 speed is unknown, defaulting to 1000 [ 782.077309][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15913'. [ 782.120935][ T9471] netlink: 'syz.1.15913': attribute type 5 has an invalid length. [ 782.129485][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15913'. [ 782.491292][ T9455] lo speed is unknown, defaulting to 1000 [ 784.150062][ T9455] virt_wifi0 speed is unknown, defaulting to 1000 [ 784.352039][ T9481] syzkaller1: entered promiscuous mode [ 784.357559][ T9481] syzkaller1: entered allmulticast mode [ 784.393804][ T9442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.436270][ T9485] lo: Caught tx_queue_len zero misconfig [ 784.710013][ T9499] netlink: 272 bytes leftover after parsing attributes in process `syz.0.15922'. [ 784.839332][ T9482] wg1 speed is unknown, defaulting to 1000 [ 784.906507][ T9504] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15924'. [ 784.997420][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 30 seconds [ 785.010608][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 30 seconds [ 785.022766][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 30 seconds [ 785.034029][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 30 seconds [ 785.563714][ T9482] lo speed is unknown, defaulting to 1000 [ 785.709779][ T9527] syzkaller0: entered promiscuous mode [ 785.716687][ T9527] syzkaller0: entered allmulticast mode [ 785.914153][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15933'. [ 785.978747][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 785.986860][ C1] lec:lec_tx_timeout: lec0 [ 785.991899][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 786.010035][ T9538] bridge9: entered promiscuous mode [ 786.016479][ T9538] macsec2: entered promiscuous mode [ 786.042904][ T9538] bridge9: port 1(macsec2) entered blocking state [ 786.062693][ T9538] bridge9: port 1(macsec2) entered disabled state [ 786.071674][ T9543] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15937'. [ 786.082286][ T9538] macsec2: entered allmulticast mode [ 786.089083][ T9538] bridge9: entered allmulticast mode [ 786.098874][ T9538] macsec2: left allmulticast mode [ 786.104482][ T9538] bridge9: left allmulticast mode [ 786.120960][ T9538] bridge9: left promiscuous mode [ 786.187883][ T9482] virt_wifi0 speed is unknown, defaulting to 1000 [ 786.191171][ T9547] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 786.205621][ T9547] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 786.264143][ T9547] tipc: Resetting bearer [ 786.502043][ T9558] netlink: 'syz.3.15942': attribute type 2 has an invalid length. [ 786.870256][ T9554] wg1 speed is unknown, defaulting to 1000 [ 786.973515][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15948'. [ 787.067212][ T9580] IPv4: Oversized IP packet from 127.202.26.0 [ 787.109760][ T9554] lo speed is unknown, defaulting to 1000 [ 787.763682][ T9554] virt_wifi0 speed is unknown, defaulting to 1000 [ 787.793689][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15954'. [ 788.011105][ T9594] vlan3: entered allmulticast mode [ 788.021907][ T9594] bridge0: entered allmulticast mode [ 788.469734][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15960'. [ 788.527845][ T9608] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15959'. [ 788.580262][ T9607] tipc: Disabling bearer [ 788.740373][ T9620] sctp: [Deprecated]: syz.0.15962 (pid 9620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.740373][ T9620] Use struct sctp_sack_info instead [ 788.995764][ T9627] siw: device registration error -23 [ 789.015613][ T9627] smc: removing ib device syz1 [ 790.290323][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15973'. [ 790.307511][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15973'. [ 790.444148][ T9666] syzkaller0: entered promiscuous mode [ 790.454341][ T9666] syzkaller0: entered allmulticast mode [ 790.589521][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15978'. [ 790.606186][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15977'. [ 790.618780][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15977'. [ 790.832593][ T9679] netlink: 'syz.1.15979': attribute type 16 has an invalid length. [ 790.876175][ T9679] netlink: 'syz.1.15979': attribute type 17 has an invalid length. [ 790.960370][ T9679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.998520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.006589][ C1] lec:lec_tx_timeout: lec0 [ 791.011411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 791.253357][ T9682] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 791.320687][ T9682] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 791.340686][ T9682] tipc: Resetting bearer [ 791.354800][ T9687] netlink: 'syz.1.15983': attribute type 3 has an invalid length. [ 791.368199][ T9685] tipc: Enabling of bearer rejected, already enabled [ 791.949779][ T9721] netlink: 'syz.2.15995': attribute type 1 has an invalid length. [ 791.983975][ T9721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.004013][ T9721] vlan0: entered promiscuous mode [ 792.009511][ T9721] bond6: entered promiscuous mode [ 792.014945][ T9721] vlan0: entered allmulticast mode [ 792.020353][ T9721] bond6: entered allmulticast mode [ 792.030346][ T9721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15995'. [ 792.048896][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 792.058422][ T9721] bond6: (slave batadv2): making interface the new active one [ 792.066414][ T9721] batadv2: entered promiscuous mode [ 792.072071][ T9721] batadv2: entered allmulticast mode [ 792.079064][ T9721] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 792.175493][ T9729] netlink: 'syz.2.15998': attribute type 3 has an invalid length. [ 792.184614][ T9729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15998'. [ 792.623824][ T9751] netlink: 'syz.2.16002': attribute type 1 has an invalid length. [ 792.707037][ T9751] bond7: (slave geneve4): making interface the new active one [ 792.715483][ T9751] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 792.725060][ T63] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 792.735217][ T63] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 792.746361][ T9751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 792.766763][ T63] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 792.783529][ T63] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 793.402954][ T9786] __nla_validate_parse: 2 callbacks suppressed [ 793.402970][ T9786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16013'. [ 793.420027][ T9786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16013'. [ 794.123327][ T9799] wg1 speed is unknown, defaulting to 1000 [ 794.240371][ T9799] lo speed is unknown, defaulting to 1000 [ 794.351566][ T9799] virt_wifi0 speed is unknown, defaulting to 1000 [ 795.685738][ T9759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.896587][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16020'. [ 796.018586][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 796.026644][ C1] lec:lec_tx_timeout: lec0 [ 796.031386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 796.048825][ T9819] syzkaller0: entered promiscuous mode [ 796.055286][ T9819] syzkaller0: entered allmulticast mode [ 796.222606][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16027'. [ 796.362396][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16031'. [ 796.542125][ T9844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16033'. [ 796.727080][ T9853] wg1 speed is unknown, defaulting to 1000 [ 796.735372][ T9850] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 796.931676][ T9858] tipc: Resetting bearer [ 796.998236][ T5580] lo speed is unknown, defaulting to 1000 [ 797.018768][ T5580] sqz0: Port: 1 Link DOWN [ 797.024429][ T5580] lo speed is unknown, defaulting to 1000 [ 797.041629][ T9864] tipc: Enabled bearer , priority 0 [ 797.056306][ T2571] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 797.065478][ T2571] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 797.089049][ T9862] syzkaller0: entered promiscuous mode [ 797.108703][ T9862] syzkaller0: entered allmulticast mode [ 797.130716][ T2571] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 797.158681][ T2571] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 797.191138][ T9862] tipc: Resetting bearer [ 797.197324][ T9853] lo speed is unknown, defaulting to 1000 [ 797.259234][ T9861] tipc: Resetting bearer [ 797.393196][ T9861] tipc: Disabling bearer [ 797.457779][ T9853] virt_wifi0 speed is unknown, defaulting to 1000 [ 797.643349][ T9875] tipc: Enabling of bearer rejected, already enabled [ 797.653771][ T9875] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 797.661569][ T9875] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 797.671300][ T9875] tipc: Resetting bearer [ 797.685906][ T9875] tipc: Resetting bearer [ 798.323968][ T9894] x_tables: duplicate underflow at hook 2 [ 799.245552][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16054'. [ 799.494384][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16058'. [ 799.526563][ T9929] vlan7: entered promiscuous mode [ 799.737880][ T30] audit: type=1800 audit(1772851580.842:10): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16059" name="memory.events" dev="tmpfs" ino=15754 res=0 errno=0 [ 799.939970][ T9953] tipc: Resetting bearer [ 799.945948][ T9952] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 799.956682][ T9952] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 799.982590][ T9952] tipc: Resetting bearer [ 800.018008][ T9945] wg1 speed is unknown, defaulting to 1000 [ 800.121674][ T9962] netlink: 'syz.2.16069': attribute type 13 has an invalid length. [ 800.158625][ T9962] netlink: 'syz.2.16069': attribute type 17 has an invalid length. [ 800.292985][ T9962] 8021q: adding VLAN 0 to HW filter on device ` [ 800.319182][ T9962] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 800.336176][T10391] lo speed is unknown, defaulting to 1000 [ 800.355864][T10391] sqz0: Port: 1 Link ACTIVE [ 800.371454][ T9966] lo speed is unknown, defaulting to 1000 [ 800.383194][ T9974] syzkaller0: entered promiscuous mode [ 800.398595][ T9974] syzkaller0: entered allmulticast mode [ 800.607879][ T9945] lo speed is unknown, defaulting to 1000 [ 800.638818][ T9982] syzkaller0: entered promiscuous mode [ 800.645536][ T9982] syzkaller0: entered allmulticast mode [ 801.048519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 801.056564][ C1] lec:lec_tx_timeout: lec0 [ 801.061212][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 802.394443][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16082'. [ 802.979285][ T9945] virt_wifi0 speed is unknown, defaulting to 1000 [ 803.145144][T10015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16086'. [ 803.196688][T10017] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16086'. [ 803.238115][T10017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16086'. [ 803.287903][T10012] tipc: Enabling of bearer rejected, already enabled [ 803.432149][T10021] geneve0: left allmulticast mode [ 803.448339][T10021] team0 (unregistering): Port device geneve0 removed [ 803.459379][T10027] netlink: 'syz.2.16090': attribute type 1 has an invalid length. [ 803.467380][T10021] veth7: left allmulticast mode [ 803.474850][T10021] team0 (unregistering): Port device veth7 removed [ 803.481764][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16092'. [ 803.633632][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16090'. [ 803.771613][T10034] bond8: (slave veth23): Enslaving as an active interface with a down link [ 803.916357][T10036] bond8: (slave veth25): Enslaving as an active interface with a down link [ 803.925299][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16095'. [ 803.941814][T10027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 803.950026][T10044] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 803.957543][T10044] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 803.981433][T10044] tipc: Resetting bearer [ 804.022117][T10046] syzkaller0: entered promiscuous mode [ 804.040823][T10046] syzkaller0: entered allmulticast mode [ 804.054451][T10046] tipc: Enabled bearer , priority 0 [ 804.064031][T10045] tipc: Resetting bearer [ 804.205196][T10045] tipc: Disabling bearer [ 804.370216][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16101'. [ 804.418330][T10062] macvtap0: entered promiscuous mode [ 804.443904][T10062] virtio_net virtio1 eth0: entered promiscuous mode [ 804.461799][T10062] macvtap0: entered allmulticast mode [ 804.473896][T10062] virtio_net virtio1 eth0: entered allmulticast mode [ 804.624613][T10080] syzkaller0: entered promiscuous mode [ 804.640508][T10080] syzkaller0: entered allmulticast mode [ 804.713110][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16101'. [ 804.900402][T10087] wg1 speed is unknown, defaulting to 1000 [ 805.315129][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16109'. [ 805.384416][T10087] lo speed is unknown, defaulting to 1000 [ 805.399537][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16109'. [ 805.411901][T10095] 8021q: adding VLAN 0 to HW filter on device bond16 [ 805.442966][T10095] vlan3: entered promiscuous mode [ 805.448197][T10095] bond16: entered promiscuous mode [ 805.558320][T10100] wg1 speed is unknown, defaulting to 1000 [ 805.567092][T10103] netlink: 'syz.0.16111': attribute type 4 has an invalid length. [ 805.758062][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16113'. [ 805.818156][ T5825] block nbd5: Receive control failed (result -1) [ 805.843205][T10113] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.16114'. [ 805.853018][T10113] netlink: Unknown conntrack attr (type=47, max=9) [ 805.878381][T10087] virt_wifi0 speed is unknown, defaulting to 1000 [ 806.042321][T10100] lo speed is unknown, defaulting to 1000 [ 806.825547][T10100] virt_wifi0 speed is unknown, defaulting to 1000 [ 807.115476][T10155] netlink: 'syz.3.16127': attribute type 4 has an invalid length. [ 807.165667][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16128'. [ 807.178959][T10135] lec:lec_atm_close: lec0: Shut down! [ 807.315922][T10159] syzkaller0: entered promiscuous mode [ 807.322386][T10159] syzkaller0: entered allmulticast mode [ 807.494602][T10164] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16129'. [ 808.285378][T10184] syzkaller0: entered promiscuous mode [ 808.296872][T10184] syzkaller0: entered allmulticast mode [ 808.595491][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16139'. [ 808.612473][T10195] syzkaller0: entered promiscuous mode [ 808.618306][T10195] syzkaller0: entered allmulticast mode [ 808.649208][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16139'. [ 808.848834][ T1153] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.869567][ T1153] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.897663][ T1153] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.916442][ T1153] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.219147][T10210] syzkaller0: entered promiscuous mode [ 809.257568][T10210] syzkaller0: entered allmulticast mode [ 809.310597][T10217] tipc: Enabled bearer , priority 0 [ 809.375772][T10209] tipc: Resetting bearer [ 809.454380][T10209] tipc: Disabling bearer [ 809.499158][T10220] __nla_validate_parse: 3 callbacks suppressed [ 809.499179][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16148'. [ 809.528968][T10220] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16148'. [ 809.558644][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16148'. [ 809.604542][T10220] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16148'. [ 809.647091][T10203] lec:lec_atm_close: lec0: Shut down! [ 809.683843][T10223] netlink: 'syz.4.16149': attribute type 1 has an invalid length. [ 809.761051][T10223] 8021q: adding VLAN 0 to HW filter on device bond15 [ 809.779711][T10226] syzkaller0: entered promiscuous mode [ 809.785235][T10226] syzkaller0: entered allmulticast mode [ 809.935558][T10229] bond15: (slave veth23): Enslaving as an active interface with a down link [ 810.013902][T10223] bond15: (slave veth25): Enslaving as an active interface with a down link [ 810.096022][T10236] bond15: entered allmulticast mode [ 810.290618][T10248] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 810.298058][T10248] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 810.332727][T10248] tipc: Resetting bearer [ 810.484115][T10252] syzkaller0: entered promiscuous mode [ 810.490351][T10252] syzkaller0: entered allmulticast mode [ 810.717827][T10269] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 810.912824][T10276] IPVS: sh: FWM 3 0x00000003 - no destination available [ 812.864708][T10268] wg1 speed is unknown, defaulting to 1000 [ 813.048858][T10298] syzkaller0: entered promiscuous mode [ 813.067395][T10298] syzkaller0: entered allmulticast mode [ 813.099716][T10298] 0: reclassify loop, rule prio 0, protocol 800 [ 813.132785][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.216862][ T13] bond0: (slave veth7): link status definitely down, disabling slave [ 813.240174][ T13] veth7: left promiscuous mode [ 813.258715][ T13] bond0: now running without any active interface! [ 813.405231][T10268] lo speed is unknown, defaulting to 1000 [ 813.663659][T10268] virt_wifi0 speed is unknown, defaulting to 1000 [ 814.828581][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 814.836641][ C1] lec:lec_tx_timeout: lec0 [ 814.841629][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 815.068882][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 60 seconds [ 815.079972][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 60 seconds [ 815.091140][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 60 seconds [ 815.102429][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 60 seconds [ 817.058176][ T5191] udevd[5191]: worker [8533] /devices/virtual/block/nbd0 is taking a long time [ 819.868574][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 819.876633][ C1] lec:lec_tx_timeout: lec0 [ 819.881189][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 824.693194][T10378] tipc: Resetting bearer [ 824.752595][T10384] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.774088][T10384] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.806207][T10378] tipc: Resetting bearer [ 824.847489][T10384] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.860931][T10384] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.888504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 824.896589][ C1] lec:lec_tx_timeout: lec0 [ 824.901572][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 824.954532][T10384] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.965436][T10384] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.002100][T10395] syzkaller0: entered allmulticast mode [ 825.024752][T10384] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.035073][T10384] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.129669][ T1153] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.142537][ T1153] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.176696][ T1153] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.191288][ T1153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.212357][ T1153] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.222902][ T1153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.273548][ T2571] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.282270][ T2571] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.459095][T10409] netlink: 'syz.4.16186': attribute type 3 has an invalid length. [ 825.550277][T10413] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 825.585566][T10409] bond16 (unregistering): Released all slaves [ 825.627173][T10419] netlink: 'syz.1.16188': attribute type 13 has an invalid length. [ 825.810519][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16191'. [ 825.892657][T10422] ip6gre3: left promiscuous mode [ 825.904704][T10422] ip6gre3: left allmulticast mode [ 825.922656][T10422] bond0: left promiscuous mode [ 825.937156][T10422] bond5: left promiscuous mode [ 825.949624][T10422] vlan0: left promiscuous mode [ 825.954587][T10422] bond6: left promiscuous mode [ 825.960099][T10422] batadv2: left promiscuous mode [ 825.965550][T10422] vlan0: left allmulticast mode [ 825.971064][T10422] bond6: left allmulticast mode [ 825.976439][T10422] batadv2: left allmulticast mode [ 826.022505][ T9966] lo speed is unknown, defaulting to 1000 [ 826.032527][ T9966] sqz0: Port: 1 Link DOWN [ 826.047757][T10435] bridge17: entered promiscuous mode [ 826.068663][T10435] macsec2: entered promiscuous mode [ 826.081416][T10437] tipc: Enabled bearer , priority 0 [ 826.099382][T10441] syzkaller0: entered promiscuous mode [ 826.110338][T10441] syzkaller0: entered allmulticast mode [ 826.140019][T10429] lo speed is unknown, defaulting to 1000 [ 826.173491][T10425] tipc: Resetting bearer [ 826.204971][T10424] tipc: Resetting bearer [ 826.223765][T10424] tipc: Disabling bearer [ 826.347749][T10446] syzkaller0: entered promiscuous mode [ 826.353597][T10446] syzkaller0: entered allmulticast mode [ 828.195479][T10463] syzkaller0: entered promiscuous mode [ 828.201063][T10463] syzkaller0: entered allmulticast mode [ 828.533330][T10486] netlink: 'syz.4.16204': attribute type 2 has an invalid length. [ 828.550802][T10487] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 828.558240][T10487] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 828.655148][T10484] wg1 speed is unknown, defaulting to 1000 [ 828.751196][T10497] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.16208'. [ 828.775034][T10497] netlink: ct family unspecified [ 828.784648][T10497] netlink: 'syz.4.16208': attribute type 1 has an invalid length. [ 828.793123][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16208'. [ 828.804838][T10501] : renamed from veth0_to_bond [ 828.819545][T10497] nbd: must specify a size in bytes for the device [ 828.890679][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16207'. [ 828.925574][T10507] Cannot find del_set index 4 as target [ 829.016217][T10511] netlink: 'syz.2.16212': attribute type 4 has an invalid length. [ 829.148670][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.192715][T10484] lo speed is unknown, defaulting to 1000 [ 829.226343][T10521] macvlan1: entered allmulticast mode [ 829.239006][T10521] `: entered allmulticast mode [ 829.249809][T10521] team_slave_1: entered allmulticast mode [ 829.266533][T10521] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 829.293162][T10521] `: left allmulticast mode [ 829.298055][T10521] team_slave_1: left allmulticast mode [ 829.358212][T10515] veth1: entered promiscuous mode [ 829.365027][T10515] veth1: entered allmulticast mode [ 829.654013][T10484] virt_wifi0 speed is unknown, defaulting to 1000 [ 829.908543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 829.916619][ C1] lec:lec_tx_timeout: lec0 [ 829.921740][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 834.928587][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 834.936724][ C1] lec:lec_tx_timeout: lec0 [ 834.941641][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 835.810297][T10550] netlink: 'syz.0.16217': attribute type 13 has an invalid length. [ 835.819490][T10552] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16220'. [ 835.824149][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16221'. [ 835.890531][T10557] bond0: (slave bond_slave_0): Releasing backup interface [ 835.901245][T10557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 835.923511][T10391] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.933565][T10550] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 836.088397][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16224'. [ 836.218976][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16228'. [ 836.457327][T10587] : entered promiscuous mode [ 836.488884][T10592] netlink: 'syz.0.16236': attribute type 1 has an invalid length. [ 836.544469][T10592] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 836.548896][ T1209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 836.562601][T10592] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 836.585557][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16236'. [ 836.613849][T10596] bond10: (slave bridge11): Enslaving as an active interface with a down link [ 836.648206][T10596] bond10: (slave bridge12): Enslaving as an active interface with a down link [ 836.685897][T10592] macvlan2: entered promiscuous mode [ 836.693282][T10592] macvlan2: entered allmulticast mode [ 836.701689][T10592] bond10: entered promiscuous mode [ 836.708349][T10592] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 836.726438][T10592] bond10: left promiscuous mode [ 836.749110][T10603] tipc: Enabled bearer , priority 0 [ 836.756786][T10603] syzkaller0: entered promiscuous mode [ 836.762589][T10603] syzkaller0: entered allmulticast mode [ 836.800249][T10603] tipc: Resetting bearer [ 836.808344][T10602] tipc: Resetting bearer [ 836.835112][T10602] tipc: Disabling bearer [ 836.893282][T10608] wg1 speed is unknown, defaulting to 1000 [ 836.982922][T10613] syzkaller0: entered promiscuous mode [ 836.991868][T10613] syzkaller0: entered allmulticast mode [ 837.009146][T10613] simple: basic_1 [ 837.013323][T10613] simple: basic_2 [ 837.017162][T10613] simple: basic_3 [ 837.020870][T10613] simple: basic_4 [ 837.024533][T10613] simple: basic_5 [ 837.028294][T10613] simple: basic_6 [ 837.032001][T10613] simple: basic_7 [ 837.035662][T10613] simple: basic_8 [ 837.039358][T10613] simple: basic_9 [ 837.043004][T10613] simple: basic_10 [ 837.046757][T10613] simple: basic_11 [ 837.050540][T10613] simple: basic_12 [ 837.054274][T10613] simple: basic_13 [ 837.058010][T10613] simple: basic_14 [ 837.061792][T10613] simple: basic_15 [ 837.065575][T10613] simple: basic_16 [ 837.069356][T10613] simple: basic_17 [ 837.073089][T10613] 0: reclassify loop, rule prio 0, protocol 800 [ 837.370708][T10608] lo speed is unknown, defaulting to 1000 [ 837.544506][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16244'. [ 837.673137][T10608] virt_wifi0 speed is unknown, defaulting to 1000 [ 837.813147][T10631] wg1 speed is unknown, defaulting to 1000 [ 837.878658][T10636] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 837.975348][T10639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16248'. [ 837.999006][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16248'. [ 838.067571][T10642] tipc: Enabled bearer , priority 0 [ 838.075876][T10642] syzkaller0: entered promiscuous mode [ 838.081478][T10642] syzkaller0: entered allmulticast mode [ 838.109900][T10642] tipc: Resetting bearer [ 838.119832][T10641] tipc: Resetting bearer [ 838.145131][T10641] tipc: Disabling bearer [ 838.395543][T10649] syzkaller0: entered promiscuous mode [ 838.407092][T10649] syzkaller0: entered allmulticast mode [ 838.701438][T10631] lo speed is unknown, defaulting to 1000 [ 838.891714][T10660] tipc: Enabling of bearer rejected, already enabled [ 839.086317][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16259'. [ 839.198228][T10652] lec:lec_atm_close: lec0: Shut down! [ 839.234872][T10669] IPVS: sh: FWM 3 0x00000003 - no destination available [ 839.365032][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16261'. [ 839.389597][T10675] netlink: 'syz.3.16262': attribute type 1 has an invalid length. [ 839.586442][T10631] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.586461][T10677] bond17: entered allmulticast mode [ 839.661533][T10679] bond17: (slave geneve3): making interface the new active one [ 839.669869][T10679] geneve3: entered allmulticast mode [ 839.676059][T10679] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 839.761401][ T1153] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 839.773506][ T1153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 839.858897][ T1153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 839.867230][ T1153] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 841.126313][T10707] __nla_validate_parse: 4 callbacks suppressed [ 841.126332][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16271'. [ 841.225932][T10711] wg1 speed is unknown, defaulting to 1000 [ 841.489269][T10707] bond1: entered promiscuous mode [ 841.513330][T10707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.621557][ T30] audit: type=1800 audit(1772851622.732:11): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16272" name="memory.events" dev="tmpfs" ino=15931 res=0 errno=0 [ 841.740423][T10728] veth1: left promiscuous mode [ 841.745368][T10728] veth1: left allmulticast mode [ 841.754949][T10728] hsr0: left promiscuous mode [ 841.764716][T10728] bridge2: left allmulticast mode [ 841.771388][T10728] ip6erspan0: left allmulticast mode [ 841.785900][T10728] veth7: left promiscuous mode [ 841.813690][T10728] macvtap1: left promiscuous mode [ 841.821852][T10728] macvtap1: left allmulticast mode [ 841.827450][T10728] vlan0: left promiscuous mode [ 841.832903][T10728] veth0_to_team: left promiscuous mode [ 841.839175][T10728] vlan0: left allmulticast mode [ 841.844284][T10728] veth0_to_team: left allmulticast mode [ 841.851280][T10728] bond4: left promiscuous mode [ 841.856611][T10728] bond5: left promiscuous mode [ 841.886383][T10728] vlan2: left allmulticast mode [ 841.898622][T10728] gretap0: left allmulticast mode [ 841.908166][T10728] gretap2: left allmulticast mode [ 841.922224][T10728] bond10: left promiscuous mode [ 841.927248][T10728] vcan1: left promiscuous mode [ 841.948207][T10728] geneve4: left promiscuous mode [ 841.965825][T10728] ipvlan0: left promiscuous mode [ 841.971179][T10728] ipvlan0: left allmulticast mode [ 841.976328][T10728] bond13: left allmulticast mode [ 841.982252][T10728] xfrm1: left allmulticast mode [ 841.997960][T10728] vlan3: left allmulticast mode [ 842.003036][T10728] bridge0: left allmulticast mode [ 842.012839][T10728] bond15: left allmulticast mode [ 842.028422][T10716] wg1 speed is unknown, defaulting to 1000 [ 842.040279][ T63] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.045159][T10711] lo speed is unknown, defaulting to 1000 [ 842.054646][ T63] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.068880][ T63] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.077324][ T63] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.456204][T10711] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.480602][T10716] lo speed is unknown, defaulting to 1000 [ 842.811581][T10769] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 842.830382][T10764] syzkaller0: entered promiscuous mode [ 842.834319][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16276'. [ 842.835890][T10764] syzkaller0: entered allmulticast mode [ 842.958756][T10753] bond0: (slave batadv_slave_0): Error: Device is in use and cannot be enslaved [ 842.988822][T10716] virt_wifi0 speed is unknown, defaulting to 1000 [ 843.404779][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16282'. [ 843.485955][T10786] vlan7: entered allmulticast mode [ 843.508959][T10786] bridge13: entered allmulticast mode [ 843.657653][T10786] bridge13: port 1(erspan0) entered blocking state [ 843.678887][T10786] bridge13: port 1(erspan0) entered disabled state [ 843.685880][T10786] erspan0: entered allmulticast mode [ 843.718405][T10786] erspan0: entered promiscuous mode [ 843.727124][T10756] wg1 speed is unknown, defaulting to 1000 [ 844.478123][T10802] netlink: 'syz.2.16286': attribute type 1 has an invalid length. [ 844.486201][T10756] lo speed is unknown, defaulting to 1000 [ 844.538789][T10802] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 844.609456][T10802] veth27: entered promiscuous mode [ 844.622422][T10802] bond9: (slave veth27): Enslaving as a backup interface with a down link [ 844.625501][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16286'. [ 844.711020][ T1153] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 844.725573][T10809] 8021q: adding VLAN 0 to HW filter on device bond9 [ 844.838674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 844.847347][ C1] lec:lec_tx_timeout: lec0 [ 844.853254][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 844.859498][ T13] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 844.977788][T10817] syzkaller0: entered promiscuous mode [ 844.987238][T10817] syzkaller0: entered allmulticast mode [ 844.995605][T10756] virt_wifi0 speed is unknown, defaulting to 1000 [ 845.017771][T10815] netlink: 'syz.2.16290': attribute type 10 has an invalid length. [ 845.188846][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 90 seconds [ 845.200288][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 90 seconds [ 845.216186][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 90 seconds [ 845.227782][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 90 seconds [ 845.326451][T10829] tipc: Enabling of bearer rejected, already enabled [ 845.410528][T10822] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 845.413505][T10436] IPVS: starting estimator thread 0... [ 845.534940][T10838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16296'. [ 845.550616][T10833] IPVS: using max 54 ests per chain, 129600 per kthread [ 845.592493][T10836] tipc: Resetting bearer [ 845.620093][T10824] wg1 speed is unknown, defaulting to 1000 [ 845.771001][T10843] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16298'. [ 845.825745][T10843] bpq0: entered promiscuous mode [ 845.887460][T10843] netlink: 'syz.2.16298': attribute type 11 has an invalid length. [ 845.905189][T10843] netlink: 'syz.2.16298': attribute type 23 has an invalid length. [ 845.913394][T10843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16298'. [ 846.073966][T10848] tipc: Enabling of bearer rejected, already enabled [ 846.117864][T10848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16299'. [ 846.301926][T10824] lo speed is unknown, defaulting to 1000 [ 846.608903][T10867] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16307'. [ 846.636872][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16307'. [ 846.911266][T10883] syzkaller0: entered promiscuous mode [ 846.917571][T10883] syzkaller0: entered allmulticast mode [ 846.940487][T10824] virt_wifi0 speed is unknown, defaulting to 1000 [ 846.940506][ T1153] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 846.965754][ T1153] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 847.034906][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16310'. [ 847.118693][ T1153] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 847.171326][ T1153] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 847.182138][T10893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.231734][T10896] tipc: Enabling of bearer rejected, already enabled [ 849.869146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 849.877331][ C1] lec:lec_tx_timeout: lec0 [ 849.882023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 854.888562][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 854.896682][ C1] lec:lec_tx_timeout: lec0 [ 854.901390][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 859.908734][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 859.916772][ C1] lec:lec_tx_timeout: lec0 [ 859.921438][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 864.938577][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 864.946604][ C1] lec:lec_tx_timeout: lec0 [ 864.951272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 869.958549][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 869.966617][ C1] lec:lec_tx_timeout: lec0 [ 869.971250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 874.978583][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 874.986641][ C1] lec:lec_tx_timeout: lec0 [ 874.991567][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 875.228982][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 120 seconds [ 875.239946][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 120 seconds [ 875.251054][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 120 seconds [ 875.278693][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 120 seconds [ 879.998523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 880.006786][ C1] lec:lec_tx_timeout: lec0 [ 880.011578][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 885.018576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 885.026608][ C1] lec:lec_tx_timeout: lec0 [ 885.031211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 890.038609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 890.046637][ C1] lec:lec_tx_timeout: lec0 [ 890.051265][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 895.868566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 895.876828][ C1] lec:lec_tx_timeout: lec0 [ 895.881667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 900.888605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 900.896742][ C1] lec:lec_tx_timeout: lec0 [ 900.901411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 905.311534][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 150 seconds [ 905.322443][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 150 seconds [ 905.333534][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 150 seconds [ 905.344703][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 150 seconds [ 905.908649][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 905.916687][ C1] lec:lec_tx_timeout: lec0 [ 905.921273][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 910.928577][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 910.936611][ C1] lec:lec_tx_timeout: lec0 [ 910.941402][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 915.948566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 915.958348][ C1] lec:lec_tx_timeout: lec0 [ 915.963260][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 920.978600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 920.986635][ C1] lec:lec_tx_timeout: lec0 [ 920.991622][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 925.998514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 926.006588][ C1] lec:lec_tx_timeout: lec0 [ 926.011195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 931.018545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 931.026862][ C1] lec:lec_tx_timeout: lec0 [ 931.552474][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 934.886081][ T5191] udevd[5191]: worker [8533] /devices/virtual/block/nbd0 timeout; kill it [ 934.897015][ T5191] udevd[5191]: seq 37027 '/devices/virtual/block/nbd0' killed [ 935.390091][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 180 seconds [ 935.400905][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 180 seconds [ 935.412139][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 180 seconds [ 935.423479][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 180 seconds [ 936.828498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 936.836555][ C1] lec:lec_tx_timeout: lec0 [ 965.469417][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 210 seconds [ 965.480565][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 210 seconds [ 965.492738][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 210 seconds [ 965.504758][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 210 seconds [ 992.992822][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 995.548866][ T2103] block nbd0: Possible stuck request ffff88804c498000: control (read@0,1024B). Runtime 240 seconds [ 995.559700][ T2103] block nbd0: Possible stuck request ffff88804c498200: control (read@1024,1024B). Runtime 240 seconds [ 995.570859][ T2103] block nbd0: Possible stuck request ffff88804c498400: control (read@2048,1024B). Runtime 240 seconds [ 995.582071][ T2103] block nbd0: Possible stuck request ffff88804c498600: control (read@3072,1024B). Runtime 240 seconds [ 998.008543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.016580][ C1] lec:lec_tx_timeout: lec0 [ 1007.708774][ T31] INFO: task dhcpcd:5485 blocked for more than 143 seconds. [ 1007.716097][ T31] Not tainted syzkaller #0 [ 1007.721558][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1007.730970][ T31] task:dhcpcd state:D stack:25224 pid:5485 tgid:5485 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1007.743454][ T31] Call Trace: [ 1007.746748][ T31] [ 1007.749770][ T31] __schedule+0x15dd/0x52d0 [ 1007.754550][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1007.759675][ T31] ? __pfx___schedule+0x10/0x10 [ 1007.764549][ T31] ? schedule+0x90/0x360 [ 1007.769103][ T31] schedule+0x164/0x360 [ 1007.773310][ T31] schedule_preempt_disabled+0x13/0x30 [ 1007.779245][ T31] __mutex_lock+0x7fe/0x1300 [ 1007.783891][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1007.789362][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1007.794155][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1007.799315][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1007.804371][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1007.809460][ T31] ? radix_tree_lookup+0x240/0x290 [ 1007.814703][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1007.819402][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.824447][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1007.829557][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1007.834342][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.839557][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1007.844891][ T31] ? down_read+0x62/0x2e0 [ 1007.849326][ T31] ? down_read+0x272/0x2e0 [ 1007.853908][ T31] ? genl_rcv+0xd/0x40 [ 1007.857986][ T31] genl_rcv+0x28/0x40 [ 1007.862169][ T31] netlink_unicast+0x80f/0x9b0 [ 1007.866973][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1007.872665][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1007.877641][ T31] ? skb_put+0x11b/0x210 [ 1007.882299][ T31] netlink_sendmsg+0x813/0xb40 [ 1007.887213][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.892874][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1007.897919][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1007.903391][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1007.908283][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.913843][ T31] ? import_iovec+0x73/0xa0 [ 1007.922035][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1007.926740][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.932136][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1007.937532][ T31] ? __seccomp_filter+0x3e9/0x1ef0 [ 1007.942771][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 1007.948183][ T31] ? ktime_get+0x45/0x200 [ 1007.953212][ T31] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1007.959514][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1007.964498][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.970045][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 1007.975264][ T31] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1007.980783][ T31] ? __secure_computing+0xe1/0x2a0 [ 1007.985926][ T31] do_syscall_64+0x14d/0xf80 [ 1007.990568][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.996656][ T31] ? clear_bhb_loop+0x40/0x90 [ 1008.001520][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.007437][ T31] RIP: 0033:0x7f8bf8cf5407 [ 1008.012010][ T31] RSP: 002b:00007ffcf8fea3a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1008.020602][ T31] RAX: ffffffffffffffda RBX: 00007f8bf8c6b780 RCX: 00007f8bf8cf5407 [ 1008.028695][ T31] RDX: 0000000000000000 RSI: 00007ffcf8fea420 RDI: 000000000000000e [ 1008.036736][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1008.044835][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056428e5e1e10 [ 1008.052967][ T31] R13: 000000000000000e R14: 00007ffcf8ffe8e0 R15: 00005642a44b22e0 [ 1008.061130][ T31] [ 1008.064290][ T31] INFO: task syz.0.16311:10893 blocked for more than 143 seconds. [ 1008.072280][ T31] Not tainted syzkaller #0 [ 1008.077218][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1008.085946][ T31] task:syz.0.16311 state:D stack:25976 pid:10893 tgid:10892 ppid:5816 task_flags:0x480140 flags:0x00080002 [ 1008.097933][ T31] Call Trace: [ 1008.101394][ T31] [ 1008.104340][ T31] __schedule+0x15dd/0x52d0 [ 1008.109085][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.114066][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1008.119159][ T31] ? __pfx___schedule+0x10/0x10 [ 1008.124050][ T31] ? schedule+0x90/0x360 [ 1008.128303][ T31] schedule+0x164/0x360 [ 1008.132544][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1008.138230][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1008.144508][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1008.150646][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1008.157150][ T31] nbd_set_size+0x454/0x680 [ 1008.161791][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1008.166870][ T31] ? nla_memcpy+0x5b/0xc0 [ 1008.171355][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 1008.176736][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1008.182749][ T31] ? rcu_is_watching+0x15/0xb0 [ 1008.187661][ T31] ? trace_kmalloc+0x2a/0x110 [ 1008.192500][ T31] ? __nla_parse+0x40/0x60 [ 1008.196943][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1008.203360][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1008.208954][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1008.215027][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.220336][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1008.224900][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.230091][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1008.235851][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.240853][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1008.245646][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.250776][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1008.256182][ T31] ? down_read+0x272/0x2e0 [ 1008.260709][ T31] ? genl_rcv+0xd/0x40 [ 1008.264790][ T31] genl_rcv+0x28/0x40 [ 1008.269195][ T31] netlink_unicast+0x80f/0x9b0 [ 1008.273981][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.279349][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1008.284300][ T31] ? skb_put+0x11b/0x210 [ 1008.288608][ T31] netlink_sendmsg+0x813/0xb40 [ 1008.293394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.298811][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1008.303795][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.309231][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1008.314015][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1008.319455][ T31] ? import_iovec+0x73/0xa0 [ 1008.324008][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1008.328746][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1008.333985][ T31] ? futex_wake+0x4ac/0x580 [ 1008.338635][ T31] ? __fget_files+0x2a/0x420 [ 1008.343290][ T31] ? __fget_files+0x3a0/0x420 [ 1008.348058][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1008.353133][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1008.358667][ T31] ? rcu_is_watching+0x15/0xb0 [ 1008.363651][ T31] do_syscall_64+0x14d/0xf80 [ 1008.368270][ T31] ? trace_irq_disable+0x3b/0x150 [ 1008.373655][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.379822][ T31] ? clear_bhb_loop+0x40/0x90 [ 1008.384539][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.390511][ T31] RIP: 0033:0x7f281a99c799 [ 1008.394942][ T31] RSP: 002b:00007f281b7ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1008.403423][ T31] RAX: ffffffffffffffda RBX: 00007f281ac15fa0 RCX: 00007f281a99c799 [ 1008.411453][ T31] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 0000000000000007 [ 1008.419692][ T31] RBP: 00007f281aa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1008.427760][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.436145][ T31] R13: 00007f281ac16038 R14: 00007f281ac15fa0 R15: 00007ffcd449f688 [ 1008.444187][ T31] [ 1008.447214][ T31] INFO: task syz.1.16314:10904 blocked for more than 144 seconds. [ 1008.455301][ T31] Not tainted syzkaller #0 [ 1008.460289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1008.469026][ T31] task:syz.1.16314 state:D stack:23944 pid:10904 tgid:10903 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 1008.481427][ T31] Call Trace: [ 1008.484722][ T31] [ 1008.487662][ T31] __schedule+0x15dd/0x52d0 [ 1008.492398][ T31] ? __pfx___schedule+0x10/0x10 [ 1008.497276][ T31] ? schedule+0x90/0x360 [ 1008.501720][ T31] schedule+0x164/0x360 [ 1008.505957][ T31] schedule_preempt_disabled+0x13/0x30 [ 1008.511579][ T31] __mutex_lock+0x7fe/0x1300 [ 1008.516191][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1008.521016][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1008.525709][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1008.530829][ T31] ? radix_tree_lookup+0x240/0x290 [ 1008.535960][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1008.540524][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.545586][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.551265][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1008.556068][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.561268][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1008.566607][ T31] ? down_read+0x272/0x2e0 [ 1008.571092][ T31] ? genl_rcv+0xd/0x40 [ 1008.575170][ T31] genl_rcv+0x28/0x40 [ 1008.579195][ T31] netlink_unicast+0x80f/0x9b0 [ 1008.584069][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.589458][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1008.594461][ T31] ? skb_put+0x11b/0x210 [ 1008.598959][ T31] netlink_sendmsg+0x813/0xb40 [ 1008.603754][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.609115][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1008.614073][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.619415][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.624802][ T31] __sys_sendto+0x672/0x710 [ 1008.629455][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1008.634506][ T31] ? exc_page_fault+0x6a/0xc0 [ 1008.639240][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1008.644547][ T31] __x64_sys_sendto+0xde/0x100 [ 1008.649382][ T31] do_syscall_64+0x14d/0xf80 [ 1008.653978][ T31] ? trace_irq_disable+0x3b/0x150 [ 1008.659032][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.665379][ T31] ? clear_bhb_loop+0x40/0x90 [ 1008.670258][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.676185][ T31] RIP: 0033:0x7f8e0e95cfce [ 1008.680662][ T31] RSP: 002b:00007f8e0f7f9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1008.689145][ T31] RAX: ffffffffffffffda RBX: 00007f8e0f7fb6c0 RCX: 00007f8e0e95cfce [ 1008.697215][ T31] RDX: 0000000000000020 RSI: 00007f8e0f7fa000 RDI: 0000000000000006 [ 1008.705259][ T31] RBP: 0000000000000000 R08: 00007f8e0f7f9f04 R09: 000000000000000c [ 1008.713539][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1008.721589][ T31] R13: 00007f8e0f7f9f58 R14: 00007f8e0f7fa000 R15: 0000000000000000 [ 1008.729658][ T31] [ 1008.732713][ T31] INFO: task syz.3.16318:10919 blocked for more than 144 seconds. [ 1008.740584][ T31] Not tainted syzkaller #0 [ 1008.745525][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1008.754258][ T31] task:syz.3.16318 state:D stack:27272 pid:10919 tgid:10917 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 1008.766226][ T31] Call Trace: [ 1008.769564][ T31] [ 1008.772505][ T31] __schedule+0x15dd/0x52d0 [ 1008.777024][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.782108][ T31] ? __pfx___schedule+0x10/0x10 [ 1008.786985][ T31] ? schedule+0x90/0x360 [ 1008.791300][ T31] schedule+0x164/0x360 [ 1008.795470][ T31] schedule_preempt_disabled+0x13/0x30 [ 1008.800979][ T31] __mutex_lock+0x7fe/0x1300 [ 1008.805582][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1008.810842][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1008.815637][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1008.820498][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1008.825553][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.831025][ T31] ? radix_tree_lookup+0x240/0x290 [ 1008.836148][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1008.841325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.846369][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.851404][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1008.856467][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1008.861580][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1008.866955][ T31] ? down_read+0x272/0x2e0 [ 1008.871489][ T31] ? genl_rcv+0xd/0x40 [ 1008.875594][ T31] genl_rcv+0x28/0x40 [ 1008.879663][ T31] netlink_unicast+0x80f/0x9b0 [ 1008.884477][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1008.889846][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1008.894799][ T31] ? skb_put+0x11b/0x210 [ 1008.899085][ T31] netlink_sendmsg+0x813/0xb40 [ 1008.903869][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.909342][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1008.914330][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1008.919678][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1008.924996][ T31] __sys_sendto+0x672/0x710 [ 1008.929578][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1008.934719][ T31] ? exc_page_fault+0x6a/0xc0 [ 1008.939634][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1008.945026][ T31] __x64_sys_sendto+0xde/0x100 [ 1008.949861][ T31] do_syscall_64+0x14d/0xf80 [ 1008.954545][ T31] ? trace_irq_disable+0x3b/0x150 [ 1008.959619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.965699][ T31] ? clear_bhb_loop+0x40/0x90 [ 1008.970502][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.976413][ T31] RIP: 0033:0x7f8823f5cfce [ 1008.980913][ T31] RSP: 002b:00007f8824f33e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1008.990045][ T31] RAX: ffffffffffffffda RBX: 00007f8824f356c0 RCX: 00007f8823f5cfce [ 1008.998292][ T31] RDX: 0000000000000028 RSI: 00007f8824f34000 RDI: 0000000000000004 [ 1009.006683][ T31] RBP: 0000000000000000 R08: 00007f8824f33f04 R09: 000000000000000c [ 1009.015016][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1009.023068][ T31] R13: 00007f8824f33f58 R14: 00007f8824f34000 R15: 0000000000000000 [ 1009.031110][ T31] [ 1009.034141][ T31] INFO: task syz.3.16318:10920 blocked for more than 144 seconds. [ 1009.042098][ T31] Not tainted syzkaller #0 [ 1009.047040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.055775][ T31] task:syz.3.16318 state:D stack:28160 pid:10920 tgid:10917 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 1009.067778][ T31] Call Trace: [ 1009.071260][ T31] [ 1009.074198][ T31] __schedule+0x15dd/0x52d0 [ 1009.079319][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.084290][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.089204][ T31] ? schedule+0x90/0x360 [ 1009.093473][ T31] schedule+0x164/0x360 [ 1009.097630][ T31] schedule_preempt_disabled+0x13/0x30 [ 1009.103183][ T31] __mutex_lock+0x7fe/0x1300 [ 1009.107805][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1009.113084][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1009.117872][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1009.122610][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1009.127659][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.132676][ T31] ? radix_tree_lookup+0x240/0x290 [ 1009.137890][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1009.142545][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.147624][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.153033][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1009.158037][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.163147][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1009.168534][ T31] ? down_read+0x272/0x2e0 [ 1009.172962][ T31] ? genl_rcv+0xd/0x40 [ 1009.177022][ T31] genl_rcv+0x28/0x40 [ 1009.181079][ T31] netlink_unicast+0x80f/0x9b0 [ 1009.186117][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1009.191462][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1009.196418][ T31] ? skb_put+0x11b/0x210 [ 1009.200712][ T31] netlink_sendmsg+0x813/0xb40 [ 1009.205556][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.210914][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.215865][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.221216][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.226533][ T31] __sys_sendto+0x672/0x710 [ 1009.231229][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1009.236315][ T31] ? exc_page_fault+0x6a/0xc0 [ 1009.241081][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1009.246408][ T31] __x64_sys_sendto+0xde/0x100 [ 1009.251258][ T31] do_syscall_64+0x14d/0xf80 [ 1009.255862][ T31] ? trace_irq_disable+0x3b/0x150 [ 1009.260925][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.267011][ T31] ? clear_bhb_loop+0x40/0x90 [ 1009.271749][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.277650][ T31] RIP: 0033:0x7f8823f5cfce [ 1009.282166][ T31] RSP: 002b:00007f8824f12e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1009.290796][ T31] RAX: ffffffffffffffda RBX: 00007f8824f146c0 RCX: 00007f8823f5cfce [ 1009.298815][ T31] RDX: 0000000000000024 RSI: 00007f8824f13000 RDI: 0000000000000005 [ 1009.306797][ T31] RBP: 0000000000000000 R08: 00007f8824f12f04 R09: 000000000000000c [ 1009.315130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1009.323151][ T31] R13: 00007f8824f12f58 R14: 00007f8824f13000 R15: 0000000000000000 [ 1009.331193][ T31] [ 1009.334247][ T31] [ 1009.334247][ T31] Showing all locks held in the system: [ 1009.342392][ T31] 1 lock held by khungtaskd/31: [ 1009.347267][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1009.357225][ T31] 7 locks held by kworker/u8:4/63: [ 1009.362424][ T31] 2 locks held by dhcpcd/5485: [ 1009.367187][ T31] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1009.375443][ T31] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1009.384516][ T31] 2 locks held by getty/5573: [ 1009.389238][ T31] #0: ffff888035e230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1009.399234][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1009.409414][ T31] 1 lock held by udevd/8533: [ 1009.414017][ T31] #0: ffff888048047358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1009.423472][ T31] 6 locks held by syz.0.16311/10893: [ 1009.428808][ T31] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1009.436987][ T31] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1009.446017][ T31] #2: ffff8880310bba78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 1009.456601][ T31] #3: ffff88802a27b668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1009.466119][ T31] #4: ffff88802a27b008 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1009.478491][ T31] #5: ffff88802a27b040 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1009.490898][ T31] 2 locks held by syz.1.16314/10904: [ 1009.496189][ T31] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1009.504470][ T31] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1009.513498][ T31] 2 locks held by syz.3.16318/10919: [ 1009.518988][ T31] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1009.527203][ T31] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1009.536274][ T31] 2 locks held by syz.3.16318/10920: [ 1009.541616][ T31] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1009.550028][ T31] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1009.559064][ T31] [ 1009.561392][ T31] ============================================= [ 1009.561392][ T31] [ 1009.569888][ T31] NMI backtrace for cpu 1 [ 1009.569905][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1009.569923][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.569932][ T31] Call Trace: [ 1009.569938][ T31] [ 1009.569945][ T31] dump_stack_lvl+0xe8/0x150 [ 1009.569971][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1009.569993][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1009.570013][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1009.570036][ T31] sys_info+0x135/0x170 [ 1009.570133][ T31] watchdog+0xfd9/0x1030 [ 1009.570163][ T31] ? watchdog+0x21a/0x1030 [ 1009.570193][ T31] kthread+0x388/0x470 [ 1009.570211][ T31] ? __pfx_watchdog+0x10/0x10 [ 1009.570232][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.570250][ T31] ret_from_fork+0x51e/0xb90 [ 1009.570276][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.570297][ T31] ? __switch_to+0xc7d/0x1450 [ 1009.570321][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.570340][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.570381][ T31] [ 1009.570388][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1009.681320][ C0] NMI backtrace for cpu 0 [ 1009.681338][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1009.681355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.681364][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1009.681392][ C0] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b0 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1009.681406][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1009.681419][ C0] RAX: 000000000027aaef RBX: ffffffff819a88ed RCX: 0000000080000001 [ 1009.681430][ C0] RDX: 0000000000000001 RSI: ffffffff8def7efe RDI: ffffffff8c27b200 [ 1009.681441][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1009.681452][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901141b0 [ 1009.681463][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1009.681473][ C0] FS: 0000000000000000(0000) GS:ffff888125465000(0000) knlGS:0000000000000000 [ 1009.681486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.681496][ C0] CR2: 00007f4f94212060 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1009.681510][ C0] Call Trace: [ 1009.681516][ C0] [ 1009.681522][ C0] default_idle+0x9/0x20 [ 1009.681538][ C0] default_idle_call+0x72/0xb0 [ 1009.681554][ C0] do_idle+0x1bd/0x500 [ 1009.681573][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1009.681597][ C0] ? __pfx_do_idle+0x10/0x10 [ 1009.681621][ C0] cpu_startup_entry+0x43/0x60 [ 1009.681640][ C0] rest_init+0x2de/0x300 [ 1009.681658][ C0] start_kernel+0x385/0x3d0 [ 1009.681680][ C0] x86_64_start_reservations+0x24/0x30 [ 1009.681706][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1009.681723][ C0] common_startup_64+0x13e/0x147 [ 1009.681747][ C0] [ 1009.862595][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1009.869439][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1009.878540][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.888596][ T31] Call Trace: [ 1009.891874][ T31] [ 1009.894799][ T31] vpanic+0x56c/0xa60 [ 1009.898965][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.903862][ T31] ? __pfx_vpanic+0x10/0x10 [ 1009.908378][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1009.913591][ T31] panic+0xc5/0xd0 [ 1009.917360][ T31] ? __pfx_panic+0x10/0x10 [ 1009.921784][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1009.927165][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1009.933327][ T31] watchdog+0x1023/0x1030 [ 1009.937661][ T31] ? watchdog+0x21a/0x1030 [ 1009.942086][ T31] kthread+0x388/0x470 [ 1009.946157][ T31] ? __pfx_watchdog+0x10/0x10 [ 1009.950850][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.955434][ T31] ret_from_fork+0x51e/0xb90 [ 1009.960150][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.965269][ T31] ? __switch_to+0xc7d/0x1450 [ 1009.969948][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.974554][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.979554][ T31] [ 1009.982921][ T31] Kernel Offset: disabled [ 1009.987360][ T31] Rebooting in 86400 seconds..