last executing test programs: 12.028361269s ago: executing program 0 (id=19041): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.637820241s ago: executing program 1 (id=19061): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000140), &(0x7f0000000000)=@tcp6=r3}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r4, 0x1}, 0x20) 6.485289181s ago: executing program 0 (id=19062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8010200}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) unshare(0x22020600) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r9, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001840)={r4, &(0x7f0000000740)="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", &(0x7f0000001740)=""/200, 0x4}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.275354918s ago: executing program 1 (id=19063): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 6.07198545s ago: executing program 0 (id=19066): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 5.90229867s ago: executing program 1 (id=19068): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) socket(0xf, 0x5, 0x2000000) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x24008800) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.049176679s ago: executing program 3 (id=19075): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 4.606962556s ago: executing program 3 (id=19078): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r4, 0x1) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x4000084) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r5, 0x0, 0x10000) 4.473357365s ago: executing program 2 (id=19079): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071194700000000008510000002000000850000005b00000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x84000000) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001ac0)={r1, &(0x7f0000000980)='){:\x00', 0x450600, 0x0, 0x5, 0x0, &(0x7f0000001a80)=0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000001b00)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf70}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) 4.447910363s ago: executing program 0 (id=19080): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000c0400"/59], 0x68) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) close(r4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1, 0x9, 0x5, 0x9, 0x6158, 0x7, 0x5}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.446576063s ago: executing program 1 (id=19081): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x2010, r2, 0xaa0f4000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8000000180081064e81f782db44b904021d080006007c09e8f655810a001500090014260b3cfc1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ed7a7cef4090000001fb791643a45e4ce1b14d6d909e42df3fa30dfe1d9d322fe7c9f8775730d16a4683f00000040fad95667e006dcdf63951f215ce3bb9a1009d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97019338705e8a1e2532bcfd436fa036d1a66665", 0xdf}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000300)={@remote, @rand_addr, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffa}], &(0x7f0000000140)='GPL\x00', 0x81, 0x1c, &(0x7f00000002c0)=""/28, 0x40f00, 0x10, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r2, r4, r0, r1, r4, r2, r1, r1], &(0x7f00000006c0)=[{0x0, 0x2, 0x5, 0x6}, {0x1, 0x3, 0xb, 0x7}], 0x10, 0x8}, 0x94) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="b800000042000100fffffffffddbdf2502000000100038800c001aea2de9661db580038008001100", @ANYRES32=r1, @ANYBLOB="100001800c00c800020000000000000024776b3991b138c94782f34fcb804c82599708862f3a2dea0b68d3812a905abf4df31cbd6763f65ce6ad1d1fb0a2077afd44d799c15069b1d715636b3228e2026357e67fcbc5dc6c0771a445b4d6d7d33fc8fb6cc5c7e9ddaebd3a48b5d85315f74c1cc184515a20ee3c164d97844d6b3378ec8c17c61316e88900ebf68e49c2219861b8"], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 4.396165327s ago: executing program 4 (id=19082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x6, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 4.080725853s ago: executing program 2 (id=19083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000e00)={{r3}, r6, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000006c0)={{r1}, r6, 0x8, @unused=[0x0, 0x8, 0x0, 0x49c], @name="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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x50}}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x14, 0x19, 0x0, 0x1, [@nested={0x10, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x140}]}]}]}]}, 0x28}}, 0x0) 3.832511771s ago: executing program 1 (id=19084): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) listen(r1, 0xfff) accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0xab, '\x00', '\x00', 0xf9}}}}}, 0x0) 3.831209589s ago: executing program 4 (id=19085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305839, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmsg$unix(r5, &(0x7f00000013c0)={&(0x7f0000000600), 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000c40)=""/205, 0xcd}, {&(0x7f0000000d40)=""/196, 0xc4}, {&(0x7f0000000e40)=""/247, 0xf7}, {&(0x7f0000000f40)}, {&(0x7f0000000f80)=""/203, 0xcb}, {&(0x7f0000001080)=""/208, 0xd0}, {&(0x7f00000011c0)=""/199, 0xc7}], 0x7, &(0x7f0000001340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x40000060) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000050a01030000000000000000020000030c00024000000000000000010900010073797affffff7f00140000001100010000000000000000000000000a61a5a536bbb5309c52e7f1f18899d41199bf5510a769cc4a1582bace73abe4ade14c608f318553301171be16f4998ec1a5122b367920890b2925b3c6ceb5bc65f034b42ee9ee91d431c291e69eabd138cabd789b"], 0x54}}, 0x20000084) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000980)={{r7, &(0x7f0000000380)='\xff\xff', 0x208201, &(0x7f0000000440)={@align=0x9, {0x2, 0xfff, 0x101, 0x1}}, 0x3, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x1}, 0x1, &(0x7f0000000900)=[{0x3, 0x8, &(0x7f0000000580)='&\x00', &(0x7f0000000800)="d5df784c4db98afab0ce3a38d91ae78402226bbe2b133ce34aa14f5b44a322eca5febdf61493f866a39d8f873feb4878d504310c7acb623618608bdd6369fe311fdb5777ddafb42ee1715c82e14bcdbb3fdde42059df3f82988eff7d2880c2fc25dd7f1bc3138289b219e749f3fea13e1332733cad868886fc30ab376b5e288a10dd380aa043292119baca3cad9c539b685a0e252c1f4fc49341f26b5da5e948be9563f23104f9b2f1794a333827fbb61ac7b7809c4fd3f4a1f4d9dec5dcae76466a60561e36", 0xc6, 0x30}]}) openat$cgroup_procs(r9, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) close(r0) 3.572739782s ago: executing program 3 (id=19086): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) socket(0x10, 0x803, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.565412356s ago: executing program 4 (id=19087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0xfffffbff) poll(&(0x7f0000000040)=[{r5, 0x1146}, {r5, 0x8014}], 0x2, 0x400) shutdown(r5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sm3-generic\x00'}, 0x0, 0x100}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r10], 0x5c}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.357497209s ago: executing program 2 (id=19088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8907, 0x0) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000140), &(0x7f0000000000)=@tcp6=r6}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r7, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048080}}], 0x1, 0x20000000) socket(0x5, 0x8a27716dfcbe8dd0, 0xffffff64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2.955230946s ago: executing program 0 (id=19089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0x6, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x4011) 2.765748179s ago: executing program 1 (id=19090): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.685406896s ago: executing program 2 (id=19091): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71e"], 0x0}, 0x94) clock_gettime(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000a804ebff21001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.614144785s ago: executing program 4 (id=19092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r1, 0x1}, 0x20) 2.521460612s ago: executing program 2 (id=19093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r1, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900), 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r2, 0xfff) r3 = accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x800) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r5, 0x1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 2.456600373s ago: executing program 3 (id=19094): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r4, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a6c2df36202e14997e2262c8ca3ff57548ddca451669b4ea105861c9", 0x20}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) r5 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10, 0x80000) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x2e2, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000300)='bridge_slave_1\x00', 0x8, 0x3, 0x6}) recvmmsg$unix(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x26, 0x200000b, r8}}], 0x20, 0x2400e044}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x70bd2b, 0x25dfdc01, {{0x8}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 2.439777277s ago: executing program 4 (id=19095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x6, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 2.261548166s ago: executing program 3 (id=19096): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x1, 0x5, 0x40, 0x401}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0xba01}, 0x0) 126.298902ms ago: executing program 0 (id=19097): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20004090) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x40010, 0x0, 0x0) read$alg(r3, &(0x7f0000000700)=""/244, 0xf4) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x48, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xf, 0x2}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28) 14.97644ms ago: executing program 4 (id=19098): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4601000000c35b09f2c5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r3, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, 0xf, 0x6, 0xb81, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x3f, 0x2, 0x0, 0x0, "e543c064a9c2e134c87737179c3f3b506af8a3eff69f95b903fd3256eb7ab9415da023b615fcd93168b1a961f755810516c4907f950522da4e3718013d9d8bf2"}}}}, 0x0) 8.924104ms ago: executing program 3 (id=19099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) socket$inet6(0xa, 0x80000, 0x2) 0s ago: executing program 2 (id=19100): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x20}}, 0x4000054) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r6, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) kernel console output (not intermixed with test programs): 1 speed is unknown, defaulting to 1000 [ 908.155172][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17612'. [ 908.435709][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17614'. [ 908.471749][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17614'. [ 909.063044][T13096] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 909.180421][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17626'. [ 909.497452][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17630'. [ 909.655714][ T8631] wg1 speed is unknown, defaulting to 1000 [ 910.231036][T13113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.240934][T13130] netlink: 'syz.2.17634': attribute type 1 has an invalid length. [ 910.250621][T13130] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17634'. [ 910.289202][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.380074][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.383948][T13143] syzkaller0: entered promiscuous mode [ 910.399986][T13143] syzkaller0: entered allmulticast mode [ 910.484875][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.118678][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 911.126746][ C1] lec:lec_tx_timeout: lec0 [ 911.131406][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 911.660931][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17656'. [ 911.670519][T13186] bond0: ARP target 170.170.170.170 is already present [ 911.678326][T13186] bond0: option arp_ip_target: invalid value (2863311530) [ 911.861317][T13190] netlink: 'syz.2.17658': attribute type 1 has an invalid length. [ 911.870556][T13190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17658'. [ 912.043093][T13196] netlink: 'syz.2.17661': attribute type 1 has an invalid length. [ 912.143193][T13202] bond13: (slave bridge13): making interface the new active one [ 912.152040][T13202] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 912.203036][T13196] bond13: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 912.892216][T13235] syz_tun: entered promiscuous mode [ 912.909986][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17675'. [ 912.923251][T13235] syz_tun: left promiscuous mode [ 913.628899][T13250] syzkaller0: entered promiscuous mode [ 913.634581][T13250] syzkaller0: entered allmulticast mode [ 915.784292][T13269] wg1 speed is unknown, defaulting to 1000 [ 915.908168][T13305] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 915.915648][T13305] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 915.963601][T13310] tunl0: Caught tx_queue_len zero misconfig [ 916.015275][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17695'. [ 916.081165][T13312] syzkaller0: entered promiscuous mode [ 916.086737][T13312] syzkaller0: entered allmulticast mode [ 916.114461][T13316] netlink: 'syz.4.17700': attribute type 1 has an invalid length. [ 916.149152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 916.157204][ C1] lec:lec_tx_timeout: lec0 [ 916.161958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 916.254760][T13316] 8021q: adding VLAN 0 to HW filter on device bond9 [ 916.286809][T13322] bond9: entered allmulticast mode [ 916.313968][T13327] bond9: (slave ip6gretap3): making interface the new active one [ 916.325164][T13327] ip6gretap3: entered allmulticast mode [ 916.340483][T13327] bond9: (slave ip6gretap3): Enslaving as an active interface with an up link [ 916.376273][T13328] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 916.396676][T13328] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 916.435713][T13321] tipc: Enabled bearer , priority 0 [ 916.697115][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17705'. [ 916.730254][T13344] netlink: 'syz.1.17705': attribute type 30 has an invalid length. [ 916.739286][T13343] syzkaller0: entered promiscuous mode [ 916.750745][T13343] syzkaller0: entered allmulticast mode [ 916.830633][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17705'. [ 916.849972][T13344] netlink: 'syz.1.17705': attribute type 30 has an invalid length. [ 917.957103][T13391] wg1 speed is unknown, defaulting to 1000 [ 919.269833][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17732'. [ 919.451811][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17733'. [ 919.685764][T13434] netlink: 'syz.3.17737': attribute type 10 has an invalid length. [ 919.741135][T13434] netlink: 'syz.3.17737': attribute type 10 has an invalid length. [ 919.862669][T13444] netlink: 'syz.3.17741': attribute type 4 has an invalid length. [ 919.913419][T13444] netlink: 'syz.3.17741': attribute type 4 has an invalid length. [ 920.049969][T13453] lo: Caught tx_queue_len zero misconfig [ 920.168057][T13460] netlink: 'syz.0.17747': attribute type 3 has an invalid length. [ 920.178340][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17747'. [ 920.190136][T13460] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17747'. [ 920.343730][T13473] netlink: 'syz.3.17750': attribute type 11 has an invalid length. [ 920.444232][T13478] netlink: 'syz.4.17752': attribute type 1 has an invalid length. [ 920.484382][T13478] bond10: entered promiscuous mode [ 920.490281][T13478] 8021q: adding VLAN 0 to HW filter on device bond10 [ 920.531778][T13483] 8021q: adding VLAN 0 to HW filter on device bond10 [ 920.549685][T13483] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 920.570044][T13483] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 920.646055][T13483] bond10: (slave wireguard1): making interface the new active one [ 920.654248][T13483] wireguard1: entered promiscuous mode [ 920.662173][T13483] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 920.722559][T13478] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 920.751734][T13478] bond10: (slave wireguard2): Enslaving as a backup interface with an up link [ 921.065904][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17757'. [ 921.076630][T13499] wg1 speed is unknown, defaulting to 1000 [ 921.178658][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 921.186759][ C1] lec:lec_tx_timeout: lec0 [ 921.191813][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 921.669379][T13519] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 922.135223][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17771'. [ 922.140252][T13535] syzkaller0: entered promiscuous mode [ 922.150423][T13535] syzkaller0: entered allmulticast mode [ 922.378983][T13542] bridge18: entered promiscuous mode [ 922.384473][T13542] bridge18: entered allmulticast mode [ 922.397650][T13542] team0: Port device bridge18 added [ 922.403962][T13543] bridge0: port 3(team0) entered blocking state [ 922.410900][T13543] bridge0: port 3(team0) entered disabled state [ 922.417439][T13543] team0: entered allmulticast mode [ 922.423127][T13543] team_slave_0: entered allmulticast mode [ 922.430587][T13543] : entered allmulticast mode [ 922.437433][T13543] team0: entered promiscuous mode [ 922.442811][T13543] team_slave_0: entered promiscuous mode [ 922.448827][T13543] : entered promiscuous mode [ 922.650355][T13555] syzkaller0: entered promiscuous mode [ 922.669357][T13555] syzkaller0: entered allmulticast mode [ 922.696368][T13561] Cannot find del_set index 1536 as target [ 922.737947][T13561] netlink: 'syz.4.17780': attribute type 39 has an invalid length. [ 922.930654][T13574] netlink: 'syz.2.17785': attribute type 1 has an invalid length. [ 923.066633][T13574] 8021q: adding VLAN 0 to HW filter on device bond14 [ 923.149819][T13577] bond14: (slave veth23): Enslaving as an active interface with a down link [ 923.265492][T13582] bond14: (slave gretap5): making interface the new active one [ 923.310570][T13582] gretap5: entered promiscuous mode [ 923.320886][T13582] bond14: (slave gretap5): Enslaving as an active interface with an up link [ 924.210487][T13630] wg1 speed is unknown, defaulting to 1000 [ 924.223365][T13628] netlink: 'syz.3.17801': attribute type 2 has an invalid length. [ 924.924339][T13657] syzkaller0: entered promiscuous mode [ 924.931798][T13657] syzkaller0: entered allmulticast mode [ 924.989092][T13659] netlink: 156 bytes leftover after parsing attributes in process `syz.1.17813'. [ 925.149293][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17816'. [ 925.219698][T13665] bond10: entered promiscuous mode [ 925.229225][T13665] 8021q: adding VLAN 0 to HW filter on device bond10 [ 925.370640][T13669] 8021q: adding VLAN 0 to HW filter on device bond10 [ 925.378167][T13669] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 925.390902][T13669] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 925.437014][T13665] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 925.449012][T13665] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 925.674216][T13682] syzkaller0: entered promiscuous mode [ 925.699912][T13682] syzkaller0: entered allmulticast mode [ 926.203033][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 926.211172][ C1] lec:lec_tx_timeout: lec0 [ 926.215877][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 928.197467][T13675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.515766][T13701] syzkaller1: entered promiscuous mode [ 928.521770][T13701] syzkaller1: entered allmulticast mode [ 928.648225][T13688] wg1 speed is unknown, defaulting to 1000 [ 929.040812][T13724] wg1 speed is unknown, defaulting to 1000 [ 929.683253][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.693246][T13751] netlink: 'syz.3.17840': attribute type 1 has an invalid length. [ 929.699879][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.712360][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.722046][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.731346][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.740864][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.750391][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.759905][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.769572][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.779281][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17839'. [ 929.830057][T13755] bond11: (slave gretap3): making interface the new active one [ 929.839187][T13755] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 931.248296][T13830] tipc: Enabled bearer , priority 26 [ 931.262996][T13829] syzkaller0: entered promiscuous mode [ 931.268569][T13829] syzkaller0: entered allmulticast mode [ 931.723171][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.857087][T13853] dvmrp8: entered allmulticast mode [ 932.038672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 932.046793][ C1] lec:lec_tx_timeout: lec0 [ 932.051721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 932.129393][T13870] xt_hashlimit: size too large, truncated to 1048576 [ 932.136172][T13870] xt_hashlimit: max too large, truncated to 1048576 [ 932.402142][T13880] 8021q: adding VLAN 0 to HW filter on device bond11 [ 932.431175][T13880] macsec1: entered allmulticast mode [ 932.436641][T13880] bond11: entered allmulticast mode [ 932.450374][T13880] bond11: left allmulticast mode [ 933.197341][T13902] ipvlan2: entered allmulticast mode [ 933.203520][T13902] syz_tun: entered allmulticast mode [ 933.539863][T13909] syzkaller1: entered promiscuous mode [ 933.545532][T13909] syzkaller1: entered allmulticast mode [ 933.995825][T13933] syzkaller0: entered promiscuous mode [ 934.002076][T13933] syzkaller0: entered allmulticast mode [ 934.106535][T13937] netlink: 'syz.4.17899': attribute type 1 has an invalid length. [ 934.140517][T13937] 8021q: adding VLAN 0 to HW filter on device bond12 [ 934.164238][T13937] bond12: (slave geneve5): making interface the new active one [ 934.173657][T13937] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 934.380906][T13942] bond13: (slave vcan0): refused to change device type [ 934.486881][T13953] tipc: Resetting bearer [ 934.509821][ T2047] gretap5: left promiscuous mode [ 934.564398][T13957] netlink: 'syz.3.17908': attribute type 83 has an invalid length. [ 934.673693][T13964] wg1 speed is unknown, defaulting to 1000 [ 934.875025][T13976] tipc: Resetting bearer [ 935.745786][T13991] wg1 speed is unknown, defaulting to 1000 [ 936.012849][T13995] wg1 speed is unknown, defaulting to 1000 [ 936.106189][T14005] __nla_validate_parse: 164 callbacks suppressed [ 936.106209][T14005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17922'. [ 936.472476][T14017] syzkaller0: entered promiscuous mode [ 936.488928][T14017] syzkaller0: entered allmulticast mode [ 936.713931][T14030] syzkaller0: entered promiscuous mode [ 936.719854][T14030] syzkaller0: entered allmulticast mode [ 936.876588][T14034] netlink: 'syz.3.17933': attribute type 2 has an invalid length. [ 937.019021][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17936'. [ 937.058663][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 937.066760][ C1] lec:lec_tx_timeout: lec0 [ 937.071675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 937.194434][T14055] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 937.399894][T14064] netlink: 'syz.3.17944': attribute type 13 has an invalid length. [ 937.431117][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17945'. [ 937.490790][T14067] bond0: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 937.648888][T14074] syzkaller0: entered promiscuous mode [ 937.654475][T14074] syzkaller0: entered allmulticast mode [ 937.756764][T14079] syzkaller0: entered promiscuous mode [ 937.768800][T14079] syzkaller0: entered allmulticast mode [ 937.926779][T14089] syzkaller0: entered promiscuous mode [ 937.943258][T14089] syzkaller0: entered allmulticast mode [ 938.006213][T14093] tap0: tun_chr_ioctl cmd 2148553947 [ 938.309700][T14106] wg1 speed is unknown, defaulting to 1000 [ 938.424067][T14107] wg1 speed is unknown, defaulting to 1000 [ 938.676420][T14125] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 938.972959][T14135] syzkaller0: entered promiscuous mode [ 938.978512][T14135] syzkaller0: entered allmulticast mode [ 939.268195][T14150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17972'. [ 941.524337][T14175] wg1 speed is unknown, defaulting to 1000 [ 941.908347][T14199] syzkaller0: entered promiscuous mode [ 941.918871][T14199] syzkaller0: entered allmulticast mode [ 942.074396][T14208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.088667][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 942.096829][ C1] lec:lec_tx_timeout: lec0 [ 942.102241][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 942.211807][T14208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.336841][T14208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.348216][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17992'. [ 942.357588][T14217] netlink: 'syz.0.17992': attribute type 7 has an invalid length. [ 942.375834][T14217] netlink: 'syz.0.17992': attribute type 8 has an invalid length. [ 942.384629][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17992'. [ 942.414473][T14217] ip6gretap0: entered promiscuous mode [ 942.434568][T14217] syz_tun: entered promiscuous mode [ 942.441521][T14217] erspan0: entered promiscuous mode [ 942.459855][T14217] erspan0: left promiscuous mode [ 942.469070][T14217] ip6gretap0: left promiscuous mode [ 942.478795][T14217] syz_tun: left promiscuous mode [ 942.503684][T14208] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.541670][T14225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17993'. [ 942.725362][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.771172][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.813578][ T2044] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.848134][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.887474][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17999'. [ 943.100609][T14236] veth25: entered allmulticast mode [ 943.122384][T14236] bond15: (slave veth25): Enslaving as an active interface with an up link [ 943.302011][T14251] syzkaller0: entered promiscuous mode [ 943.307690][T14251] syzkaller0: entered allmulticast mode [ 943.377106][T14255] bond15: entered promiscuous mode [ 943.394484][T14235] lec:lec_atm_close: lec0: Shut down! [ 943.395968][T14255] 8021q: adding VLAN 0 to HW filter on device bond15 [ 945.385382][T14264] 8021q: adding VLAN 0 to HW filter on device bond15 [ 945.401899][T14264] bond15: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 945.453879][T14264] bond15: (slave ip6gre5): Error -95 calling set_mac_address [ 945.591318][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18012'. [ 945.639181][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18012'. [ 945.744454][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18014'. [ 945.777040][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18014'. [ 945.820857][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18013'. [ 945.979207][T14304] netlink: 'syz.0.18013': attribute type 5 has an invalid length. [ 945.987588][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18013'. [ 946.199649][T14320] syzkaller0: entered promiscuous mode [ 946.205290][T14320] syzkaller0: entered allmulticast mode [ 946.879055][T14358] syzkaller0: entered promiscuous mode [ 946.884824][T14358] syzkaller0: entered allmulticast mode [ 947.102511][T14370] netlink: 'syz.4.18033': attribute type 4 has an invalid length. [ 947.181352][T14372] netlink: 'syz.4.18033': attribute type 4 has an invalid length. [ 947.315432][T14370] netlink: 'syz.4.18033': attribute type 4 has an invalid length. [ 947.516650][T14377] netlink: 'syz.4.18034': attribute type 12 has an invalid length. [ 948.238281][T14392] wg1 speed is unknown, defaulting to 1000 [ 948.495809][T14401] __nla_validate_parse: 2 callbacks suppressed [ 948.495830][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18041'. [ 948.542503][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18041'. [ 948.998734][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 949.006946][ C1] lec:lec_tx_timeout: lec0 [ 949.011575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 949.759535][T14347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.782550][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18048'. [ 950.039134][T14442] syzkaller0: entered promiscuous mode [ 950.072402][T14442] syzkaller0: entered allmulticast mode [ 950.174345][T14447] syzkaller0: entered promiscuous mode [ 950.185209][T14447] syzkaller0: entered allmulticast mode [ 950.477740][T14459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.539853][T14459] bond0: (slave ip6gretap2): making interface the new active one [ 950.560307][T14459] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 950.655507][T14464] syzkaller0: entered promiscuous mode [ 950.668795][T14464] syzkaller0: entered allmulticast mode [ 951.062173][T14486] netlink: 'syz.1.18065': attribute type 1 has an invalid length. [ 951.145590][T14486] 8021q: adding VLAN 0 to HW filter on device bond10 [ 951.195644][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18066'. [ 951.245266][T14486] bond10: (slave dummy0): making interface the new active one [ 951.280497][T14486] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 951.573174][T14502] syzkaller0: entered promiscuous mode [ 951.592017][T14502] syzkaller0: entered allmulticast mode [ 951.697049][T14482] lec:lec_atm_close: lec0: Shut down! [ 952.182481][T14528] syzkaller0: entered promiscuous mode [ 952.194133][T14528] syzkaller0: entered allmulticast mode [ 952.217591][T14526] syzkaller0: entered promiscuous mode [ 952.231721][T14526] syzkaller0: entered allmulticast mode [ 952.382267][T14537] netlink: 'syz.0.18082': attribute type 1 has an invalid length. [ 952.445703][T14537] bond16: entered promiscuous mode [ 952.452882][T14537] 8021q: adding VLAN 0 to HW filter on device bond16 [ 952.519911][T14532] syzkaller0: entered promiscuous mode [ 952.525500][T14532] syzkaller0: entered allmulticast mode [ 952.571614][T14537] 8021q: adding VLAN 0 to HW filter on device bond16 [ 952.593501][T14537] bond16: (slave vti1): The slave device specified does not support setting the MAC address [ 952.614958][T14537] bond16: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 952.643489][T14537] bond16: (slave vti1): making interface the new active one [ 952.656867][T14537] vti1: entered promiscuous mode [ 952.665792][T14537] bond16: (slave vti1): Enslaving as an active interface with an up link [ 952.773188][T14547] dvmrp1: entered allmulticast mode [ 952.796072][T14551] dvmrp1: left allmulticast mode [ 952.866773][T14547] x_tables: duplicate underflow at hook 2 [ 952.911197][T14556] netlink: 'syz.4.18086': attribute type 3 has an invalid length. [ 952.922848][T14556] netlink: 'syz.4.18086': attribute type 3 has an invalid length. [ 953.127825][T14569] tipc: Enabled bearer , priority 0 [ 953.153712][T14564] clip:clip_setentry: non-CLIP VCC [ 953.157623][T14569] syzkaller0: entered promiscuous mode [ 953.166915][T14569] syzkaller0: entered allmulticast mode [ 953.175149][T14568] wg1 speed is unknown, defaulting to 1000 [ 953.229252][T14569] tipc: Resetting bearer [ 953.250527][T14567] tipc: Resetting bearer [ 953.289314][T14567] tipc: Disabling bearer [ 954.255872][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18097'. [ 954.502207][ T30] audit: type=1800 audit(1775308602.697:19): pid=14602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18098" name="memory.events" dev="tmpfs" ino=17835 res=0 errno=0 [ 954.862472][T14617] wg1 speed is unknown, defaulting to 1000 [ 954.891683][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18102'. [ 954.978036][T14624] syzkaller0: entered promiscuous mode [ 954.985056][T14624] syzkaller0: entered allmulticast mode [ 955.060095][T14628] xt_hashlimit: size too large, truncated to 1048576 [ 955.122182][T14632] x9: renamed from bridge_slave_0 [ 955.500064][T14643] syzkaller0: entered promiscuous mode [ 955.505696][T14643] syzkaller0: entered allmulticast mode [ 955.565924][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18109'. [ 955.576183][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18109'. [ 955.766591][T14653] syzkaller0: entered promiscuous mode [ 955.778834][T14653] syzkaller0: entered allmulticast mode [ 955.851495][T14655] bond10: (slave dummy0): Releasing active interface [ 955.895774][T14655] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 956.241056][T14673] syzkaller0: entered promiscuous mode [ 956.246595][T14673] syzkaller0: entered allmulticast mode [ 956.998702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 957.006833][ C1] lec:lec_tx_timeout: lec0 [ 957.011672][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 957.466855][T14605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.340668][T14729] syzkaller0: entered promiscuous mode [ 958.351056][T14729] syzkaller0: entered allmulticast mode [ 958.579016][T14736] netlink: 'syz.1.18144': attribute type 2 has an invalid length. [ 958.586985][T14736] netlink: 'syz.1.18144': attribute type 2 has an invalid length. [ 958.605249][T14736] macsec2: entered promiscuous mode [ 958.613959][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18145'. [ 958.624317][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18145'. [ 958.863837][T14748] wg1 speed is unknown, defaulting to 1000 [ 959.025422][T14752] syzkaller0: entered promiscuous mode [ 959.048749][T14752] syzkaller0: entered allmulticast mode [ 959.408060][T14755] syzkaller0: entered promiscuous mode [ 959.426543][T14755] syzkaller0: entered allmulticast mode [ 959.484562][T14770] netlink: 'syz.4.18153': attribute type 3 has an invalid length. [ 959.492746][T14770] netlink: 'syz.4.18153': attribute type 3 has an invalid length. [ 959.597008][T14772] syzkaller0: entered promiscuous mode [ 959.621009][T14772] syzkaller0: entered allmulticast mode [ 959.783650][T14786] netlink: 'syz.3.18159': attribute type 27 has an invalid length. [ 960.069918][T14786] geneve4: left promiscuous mode [ 960.093849][T14786] bond9: left promiscuous mode [ 960.211434][T14791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.231759][ T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.244050][ T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.259770][T14799] lo speed is unknown, defaulting to 1000 [ 960.270947][ T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.298515][ T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.320465][T14799] lo speed is unknown, defaulting to 1000 [ 960.339541][T14799] lo speed is unknown, defaulting to 1000 [ 960.409840][T14799] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 960.521014][T14799] lo speed is unknown, defaulting to 1000 [ 960.543216][T14818] netlink: 'syz.3.18166': attribute type 3 has an invalid length. [ 960.561246][T14818] netlink: 'syz.3.18166': attribute type 3 has an invalid length. [ 960.575628][T14799] lo speed is unknown, defaulting to 1000 [ 960.594815][T14799] lo speed is unknown, defaulting to 1000 [ 960.618974][T14799] lo speed is unknown, defaulting to 1000 [ 960.644029][T14799] lo speed is unknown, defaulting to 1000 [ 961.004831][T14830] syzkaller0: entered promiscuous mode [ 961.014959][T14830] syzkaller0: entered allmulticast mode [ 961.323692][T14849] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18174'. [ 961.354252][T14846] wg1 speed is unknown, defaulting to 1000 [ 961.364734][T14846] lo speed is unknown, defaulting to 1000 [ 961.692220][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18178'. [ 961.813046][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18180'. [ 961.864580][T14869] ip6gretap0: entered promiscuous mode [ 961.891624][T14872] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18180'. [ 961.899108][T14869] ip6gretap0: left promiscuous mode [ 961.927218][T14871] syzkaller0: entered promiscuous mode [ 961.934883][T14871] syzkaller0: entered allmulticast mode [ 962.039167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 962.047294][ C1] lec:lec_tx_timeout: lec0 [ 962.052580][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 962.164648][T14885] netlink: 'syz.1.18185': attribute type 4 has an invalid length. [ 962.216091][T14883] wg1 speed is unknown, defaulting to 1000 [ 962.226997][T14883] lo speed is unknown, defaulting to 1000 [ 962.682845][T14895] wg1 speed is unknown, defaulting to 1000 [ 962.700707][T14895] lo speed is unknown, defaulting to 1000 [ 963.150070][T14908] netlink: 'syz.0.18192': attribute type 1 has an invalid length. [ 963.259363][T14908] 8021q: adding VLAN 0 to HW filter on device bond17 [ 963.345370][T14908] bond17: (slave geneve4): making interface the new active one [ 963.358325][T14908] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 963.405885][T14914] vlan2: entered allmulticast mode [ 963.421707][T14914] bond17: entered allmulticast mode [ 963.429350][T14914] geneve4: entered allmulticast mode [ 963.515844][T14910] wg1 speed is unknown, defaulting to 1000 [ 963.631830][T14910] lo speed is unknown, defaulting to 1000 [ 963.732358][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18197'. [ 963.751776][ T2049] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.760295][ T2049] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.768535][ T2049] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.799396][ T2049] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.864183][T14926] wg1 speed is unknown, defaulting to 1000 [ 963.926085][T14926] lo speed is unknown, defaulting to 1000 [ 964.250204][T14942] syzkaller0: entered promiscuous mode [ 964.255753][T14942] syzkaller0: entered allmulticast mode [ 964.336733][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18203'. [ 964.502742][T14956] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.18206'. [ 964.564393][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18205'. [ 964.589260][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18205'. [ 964.713526][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18208'. [ 964.765674][T14966] syzkaller0: entered promiscuous mode [ 964.774516][T14966] syzkaller0: entered allmulticast mode [ 964.856310][T14971] netlink: 'syz.0.18210': attribute type 1 has an invalid length. [ 964.908665][T14971] 8021q: adding VLAN 0 to HW filter on device bond18 [ 964.947435][T14971] bond18: entered promiscuous mode [ 965.071193][T14986] wg1 speed is unknown, defaulting to 1000 [ 965.095573][T14986] lo speed is unknown, defaulting to 1000 [ 965.155665][T14988] netlink: 'syz.0.18213': attribute type 1 has an invalid length. [ 965.238544][T14988] bond19: entered promiscuous mode [ 965.244427][T14988] 8021q: adding VLAN 0 to HW filter on device bond19 [ 965.305880][T14994] ipvlan2: entered allmulticast mode [ 965.311547][T14994] bond19: entered allmulticast mode [ 965.336478][T14988] bond19: (slave bridge21): making interface the new active one [ 965.346673][T14988] bridge21: entered promiscuous mode [ 965.352731][T14988] bridge21: entered allmulticast mode [ 965.361109][T14988] bond19: (slave bridge21): Enslaving as an active interface with an up link [ 965.566887][T15001] syzkaller0: entered promiscuous mode [ 965.583908][T15001] syzkaller0: entered allmulticast mode [ 965.781716][T15008] wg1 speed is unknown, defaulting to 1000 [ 965.810210][T15008] lo speed is unknown, defaulting to 1000 [ 965.918149][T15017] syzkaller0: entered promiscuous mode [ 965.924709][T15017] syzkaller0: entered allmulticast mode [ 966.200133][T15023] syzkaller0: entered promiscuous mode [ 966.205778][T15023] syzkaller0: entered allmulticast mode [ 966.356839][T15032] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 966.384607][T15032] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 966.433147][T15026] syzkaller0: entered promiscuous mode [ 966.439651][T15026] syzkaller0: entered allmulticast mode [ 966.535911][T15038] syzkaller0: entered promiscuous mode [ 966.541761][T15038] syzkaller0: entered allmulticast mode [ 966.794284][T15049] syzkaller0: entered promiscuous mode [ 966.800938][T15049] syzkaller0: entered allmulticast mode [ 966.810568][T15046] tipc: Enabled bearer , priority 0 [ 966.857275][T15046] syzkaller0: entered promiscuous mode [ 966.864901][T15046] syzkaller0: entered allmulticast mode [ 966.886333][T15046] tipc: Resetting bearer [ 966.894042][T15045] tipc: Resetting bearer [ 966.915865][T15045] tipc: Disabling bearer [ 966.940950][T15052] syzkaller0: entered promiscuous mode [ 966.946487][T15052] syzkaller0: entered allmulticast mode [ 967.058655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 967.066800][ C1] lec:lec_tx_timeout: lec0 [ 967.071879][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 967.148565][T15061] __nla_validate_parse: 2 callbacks suppressed [ 967.158884][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18238'. [ 967.557423][T15075] tipc: Enabling of bearer rejected, already enabled [ 967.567290][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 967.600471][T15075] tipc: Resetting bearer [ 967.801627][ T5126] page_pool_release_retry() stalled pool shutdown: id 176, 1 inflight 60 sec [ 967.878013][T15083] netlink: 'syz.2.18246': attribute type 4 has an invalid length. [ 968.730824][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18255'. [ 968.892876][T15110] veth13: entered allmulticast mode [ 968.940303][T15110] bond11: (slave veth13): Enslaving as an active interface with an up link [ 969.040193][T15105] bond11 (unregistering): (slave veth13): Releasing backup interface [ 969.052260][T15105] bond11 (unregistering): Released all slaves [ 969.219166][T15113] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18256'. [ 969.343760][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18257'. [ 969.363128][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18257'. [ 969.374004][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18258'. [ 969.421475][T15120] syzkaller0: entered promiscuous mode [ 969.503868][T15119] netlink: 'syz.2.18258': attribute type 1 has an invalid length. [ 969.770871][T15130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18262'. [ 969.861796][T15138] syzkaller0: entered promiscuous mode [ 969.867570][T15138] syzkaller0: entered allmulticast mode [ 970.000860][T15141] syzkaller0: entered promiscuous mode [ 970.006418][T15141] syzkaller0: entered allmulticast mode [ 970.171436][T15145] syzkaller0: entered promiscuous mode [ 970.177282][T15145] syzkaller0: entered allmulticast mode [ 970.216384][T15145] tipc: Enabled bearer , priority 0 [ 970.225486][T15144] tipc: Resetting bearer [ 970.263669][T15144] tipc: Disabling bearer [ 970.494874][T15151] wg1 speed is unknown, defaulting to 1000 [ 970.502956][T15151] lo speed is unknown, defaulting to 1000 [ 970.782819][T15161] lo: Caught tx_queue_len zero misconfig [ 970.793300][T15161] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 970.802823][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18275'. [ 970.943646][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18277'. [ 971.044559][T15170] bond20: (slave ip6gretap1): Enslaving as an active interface with an up link [ 971.060811][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18277'. [ 971.125600][T15170] bond20 (unregistering): (slave ip6gretap1): Releasing backup interface [ 971.152467][T15170] bond20 (unregistering): Released all slaves [ 971.380655][T15185] syzkaller0: entered promiscuous mode [ 971.386412][T15185] syzkaller0: entered allmulticast mode [ 971.520531][T15189] syzkaller0: entered promiscuous mode [ 971.526079][T15189] syzkaller0: entered allmulticast mode [ 971.684332][T15199] syzkaller0: entered promiscuous mode [ 971.690062][T15199] syzkaller0: entered allmulticast mode [ 972.078675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 972.086788][ C1] lec:lec_tx_timeout: lec0 [ 972.091761][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 972.250612][T15237] syzkaller0: entered promiscuous mode [ 972.256353][T15237] syzkaller0: entered allmulticast mode [ 972.359954][T15241] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 972.410926][T15237] tipc: Enabled bearer , priority 0 [ 972.432751][T15236] tipc: Resetting bearer [ 972.509922][T15236] tipc: Disabling bearer [ 972.591438][T15246] netlink: 'syz.3.18297': attribute type 1 has an invalid length. [ 972.653285][T15246] bond12: entered promiscuous mode [ 972.663125][T15246] 8021q: adding VLAN 0 to HW filter on device bond12 [ 972.781628][T15251] netlink: 'syz.4.18299': attribute type 1 has an invalid length. [ 972.791488][T15246] macvtap1: entered allmulticast mode [ 972.801144][T15252] netlink: 'syz.2.18298': attribute type 1 has an invalid length. [ 972.819627][T15254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18300'. [ 972.835416][T15248] bond12: (slave bridge8): making interface the new active one [ 972.968863][T15248] bridge8: entered promiscuous mode [ 972.980938][T15248] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 973.141889][T15252] bond16: entered promiscuous mode [ 973.147534][T15252] 8021q: adding VLAN 0 to HW filter on device bond16 [ 973.167886][T15256] bond14: entered promiscuous mode [ 973.173408][T15256] bond14: entered allmulticast mode [ 973.179255][T15256] 8021q: adding VLAN 0 to HW filter on device bond14 [ 973.222146][T15257] bridge17: entered promiscuous mode [ 973.227736][T15257] bridge17: entered allmulticast mode [ 973.235140][T15257] bond14: (slave bridge17): Enslaving as a backup interface with an up link [ 973.261142][T15261] bond16: (slave bridge15): making interface the new active one [ 973.269581][T15261] bridge15: entered promiscuous mode [ 973.276248][T15261] bond16: (slave bridge15): Enslaving as an active interface with an up link [ 973.290443][ T991] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 973.323586][T15262] bridge18: entered promiscuous mode [ 973.329712][T15262] bridge18: entered allmulticast mode [ 973.335937][T15262] bond14: (slave bridge18): Enslaving as a backup interface with a down link [ 973.353615][T15266] syzkaller0: entered promiscuous mode [ 973.369128][T15266] syzkaller0: entered allmulticast mode [ 973.413619][ T991] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 973.862174][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18308'. [ 973.915049][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18308'. [ 974.644323][T15295] syzkaller0: entered promiscuous mode [ 974.650036][T15295] syzkaller0: entered allmulticast mode [ 974.775917][T15297] netlink: 284 bytes leftover after parsing attributes in process `syz.0.18311'. [ 974.873380][T15299] syzkaller0: entered promiscuous mode [ 974.879319][T15299] syzkaller0: entered allmulticast mode [ 975.012664][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18314'. [ 975.110806][T15307] netlink: 'syz.3.18315': attribute type 1 has an invalid length. [ 975.208193][T15307] 8021q: adding VLAN 0 to HW filter on device bond13 [ 975.233612][T15310] ip6gre1: entered promiscuous mode [ 975.241128][T15310] ip6gre1: entered allmulticast mode [ 975.271287][T15311] vlan7: entered promiscuous mode [ 975.276393][T15311] bond13: entered promiscuous mode [ 975.283409][T15307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18315'. [ 975.302793][T15310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.314419][T15311] vlan7: entered allmulticast mode [ 975.322536][T15311] bond13: entered allmulticast mode [ 975.404769][T15307] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 975.446913][T15307] bond13: (slave batadv3): making interface the new active one [ 975.479298][T15307] batadv3: entered promiscuous mode [ 975.493820][T15307] batadv3: entered allmulticast mode [ 975.515738][T15307] bond13: (slave batadv3): Enslaving as an active interface with an up link [ 975.648382][T15335] syzkaller0: entered promiscuous mode [ 975.654082][T15335] syzkaller0: entered allmulticast mode [ 977.099846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 977.108032][ C1] lec:lec_tx_timeout: lec0 [ 977.112768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 977.471893][T15341] : entered allmulticast mode [ 977.477046][T15341] tunl0: entered allmulticast mode [ 977.483255][T15341] gre0: entered allmulticast mode [ 977.488411][T15341] gretap0: entered allmulticast mode [ 977.494239][T15341] erspan0: entered allmulticast mode [ 977.499861][T15341] ip_vti0: entered allmulticast mode [ 977.505388][T15341] ip6_vti0: entered allmulticast mode [ 977.511092][T15341] sit0: entered allmulticast mode [ 977.516352][T15341] ip6tnl0: entered allmulticast mode [ 977.522044][T15341] ip6gre0: entered allmulticast mode [ 977.527574][T15341] syz_tun: entered allmulticast mode [ 977.533434][T15341] ip6gretap0: entered allmulticast mode [ 977.539326][T15341] bridge0: entered allmulticast mode [ 977.544810][T15341] dummy0: entered allmulticast mode [ 977.550686][T15341] nlmon0: entered allmulticast mode [ 977.556086][T15341] caif0: entered allmulticast mode [ 977.562510][T15341] batadv0: entered allmulticast mode [ 977.568012][T15341] veth0: entered allmulticast mode [ 977.573700][T15341] veth1: entered allmulticast mode [ 977.579147][T15341] wg0: entered allmulticast mode [ 977.584350][T15341] wg1: entered allmulticast mode [ 977.589879][T15341] wg2: entered allmulticast mode [ 977.595075][T15341] veth0_to_bridge: entered allmulticast mode [ 977.601604][T15341] veth1_to_bridge: entered allmulticast mode [ 977.607973][T15341] veth0_to_bond: entered allmulticast mode [ 977.614183][T15341] bond_slave_0: entered allmulticast mode [ 977.627871][T15341] veth1_to_bond: entered allmulticast mode [ 977.636336][T15341] bond_slave_1: entered allmulticast mode [ 977.642918][T15341] veth1_to_team: entered allmulticast mode [ 977.650397][T15341] team_slave_1: entered allmulticast mode [ 977.656437][T15341] veth1_to_batadv: entered allmulticast mode [ 977.663219][T15341] batadv_slave_1: entered allmulticast mode [ 977.670329][T15341] xfrm0: entered allmulticast mode [ 977.675753][T15341] veth0_to_hsr: entered allmulticast mode [ 977.682172][T15341] hsr_slave_0: entered allmulticast mode [ 977.688019][T15341] veth1_to_hsr: entered allmulticast mode [ 977.694183][T15341] hsr_slave_1: entered allmulticast mode [ 977.700409][T15341] veth1_virt_wifi: entered allmulticast mode [ 977.706879][T15341] veth0_virt_wifi: entered allmulticast mode [ 977.713269][T15341] virt_wifi0: entered allmulticast mode [ 977.719242][T15341] veth1_vlan: entered allmulticast mode [ 977.725131][T15341] veth0_vlan: entered allmulticast mode [ 977.731076][T15341] vlan0: entered allmulticast mode [ 977.736481][T15341] vlan1: entered allmulticast mode [ 977.742037][T15341] macvlan0: entered allmulticast mode [ 977.747723][T15341] macvlan1: entered allmulticast mode [ 977.753502][T15341] ipvlan0: entered allmulticast mode [ 977.759111][T15341] ipvlan1: entered allmulticast mode [ 977.764656][T15341] veth1_macvtap: entered allmulticast mode [ 977.770809][T15341] veth0_macvtap: entered allmulticast mode [ 977.776881][T15341] macvtap0: entered allmulticast mode [ 977.782633][T15341] macsec0: entered allmulticast mode [ 977.788095][T15341] geneve0: entered allmulticast mode [ 977.794084][T15341] geneve1: entered allmulticast mode [ 977.801018][T15341] ip6tnl1: entered allmulticast mode [ 977.806621][T15341] bond1: entered allmulticast mode [ 977.812746][T15341] syztnl0: entered allmulticast mode [ 977.818395][T15341] erspan1: entered allmulticast mode [ 977.824632][T15341] ip6tnl2: entered allmulticast mode [ 977.830740][T15341] gre1: entered allmulticast mode [ 977.836061][T15341] bond0: entered allmulticast mode [ 977.842132][T15341] gre2: entered allmulticast mode [ 977.847565][T15341] ipip0: entered allmulticast mode [ 977.853744][T15341] vti0: entered allmulticast mode [ 977.859401][T15341] mac80211_hwsim hwsim28 wlan2: entered allmulticast mode [ 977.866893][T15341] bridge1: entered allmulticast mode [ 977.875513][T15341] bond2: entered allmulticast mode [ 977.882058][T15341] geneve2: entered allmulticast mode [ 977.887684][T15341] mac80211_hwsim hwsim31 wlan3: entered allmulticast mode [ 977.897313][T15341] mac80211_hwsim hwsim32 wlan4: entered allmulticast mode [ 977.905359][T15341] ip6gre1: entered allmulticast mode [ 977.911362][T15341] geneve3: entered allmulticast mode [ 977.916986][T15341] bond3: entered allmulticast mode [ 977.923125][T15341] batadv1: entered allmulticast mode [ 977.929198][T15341] gretap1: entered allmulticast mode [ 977.934809][T15341] batadv2: entered allmulticast mode [ 977.945254][T15341] bridge2: entered allmulticast mode [ 977.951292][T15341] gtp0: entered allmulticast mode [ 977.956619][T15341] mac80211_hwsim hwsim37 wlan5: entered allmulticast mode [ 977.964921][T15341] ipip1: entered allmulticast mode [ 977.970759][T15341] bond4: entered allmulticast mode [ 977.976202][T15341] mac80211_hwsim hwsim38 wlan6: entered allmulticast mode [ 977.984106][T15341] sit1: entered allmulticast mode [ 977.989849][T15341] vlan2: entered allmulticast mode [ 977.995226][T15341] vti1: entered allmulticast mode [ 978.001641][T15341] veth2: entered allmulticast mode [ 978.007034][T15341] veth3: entered allmulticast mode [ 978.013162][T15341] vxlan0: entered allmulticast mode [ 978.018893][T15341] ip6_vti1: entered allmulticast mode [ 978.024626][T15341] macsec1: entered allmulticast mode [ 978.030632][T15341] vlan3: entered allmulticast mode [ 978.036123][T15341] ip6tnl3: entered allmulticast mode [ 978.042342][T15341] vxlan1: entered allmulticast mode [ 978.047849][T15341] vlan4: entered allmulticast mode [ 978.053757][T15341] macsec2: entered allmulticast mode [ 978.059669][T15341] vxlan2: entered allmulticast mode [ 978.065116][T15341] gretap2: entered allmulticast mode [ 978.071065][T15341] macvlan2: entered allmulticast mode [ 978.077022][T15341] bond5: entered allmulticast mode [ 978.083881][T15341] hsr1: entered allmulticast mode [ 978.089659][T15341] mac80211_hwsim hwsim4 veth1_to_bod: entered allmulticast mode [ 978.097759][T15341] bond6: entered allmulticast mode [ 978.103555][T15341] vlan5: entered allmulticast mode [ 978.109371][T15341] sit2: entered allmulticast mode [ 978.114622][T15341] ipip2: entered allmulticast mode [ 978.121346][T15341] @: entered allmulticast mode [ 978.126360][T15341] sit3: entered allmulticast mode [ 978.132304][T15341] bond7: entered allmulticast mode [ 978.137721][T15341] gre3: entered allmulticast mode [ 978.143717][T15341] gtp1: entered allmulticast mode [ 978.149374][T15341] gre4: entered allmulticast mode [ 978.154733][T15341] veth4: entered allmulticast mode [ 978.160745][T15341] veth5: entered allmulticast mode [ 978.166218][T15341] vlan6: entered allmulticast mode [ 978.172112][T15341] gtp2: entered allmulticast mode [ 978.177484][T15341] veth6: entered allmulticast mode [ 978.183326][T15341] veth7: entered allmulticast mode [ 978.189139][T15341] veth8: entered allmulticast mode [ 978.194506][T15341] veth9: entered allmulticast mode [ 978.200617][T15341] bond8: entered allmulticast mode [ 978.205975][T15341] veth10: entered allmulticast mode [ 978.212039][T15341] veth11: entered allmulticast mode [ 978.217480][T15341] veth12: entered allmulticast mode [ 978.224285][T15341] veth13: entered allmulticast mode [ 978.229818][T15341] geneve4: entered allmulticast mode [ 978.235300][T15341] bridge3: entered allmulticast mode [ 978.240931][T15341] bond9: entered allmulticast mode [ 978.246556][T15341] bridge4: entered allmulticast mode [ 978.252340][T15341] bridge5: entered allmulticast mode [ 978.258073][T15341] bridge6: entered allmulticast mode [ 978.263860][T15341] bond10: entered allmulticast mode [ 978.269286][T15341] bond11: entered allmulticast mode [ 978.274569][T15341] gretap3: entered allmulticast mode [ 978.280455][T15341] veth14: entered allmulticast mode [ 978.285927][T15341] veth15: entered allmulticast mode [ 978.291409][T15341] bridge7: entered allmulticast mode [ 978.296968][T15341] netdevsim netdevsim3 eth0: entered allmulticast mode [ 978.304195][T15341] netdevsim netdevsim3 eth1: entered allmulticast mode [ 978.311366][T15341] netdevsim netdevsim3 eth2: entered allmulticast mode [ 978.318410][T15341] netdevsim netdevsim3 eth3: entered allmulticast mode [ 978.327976][T15341] bond12: left promiscuous mode [ 978.333674][T15341] bridge8: left promiscuous mode [ 978.338980][T15341] bond12: entered allmulticast mode [ 978.344217][T15341] bridge8: entered allmulticast mode [ 978.358387][T15341] vlan7: left promiscuous mode [ 978.363536][T15341] bond13: left promiscuous mode [ 978.368461][T15341] batadv3: left promiscuous mode [ 978.447283][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18325'. [ 978.459280][T15356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18325'. [ 978.470832][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18325'. [ 978.483466][T15356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18325'. [ 978.504109][T15348] wg1 speed is unknown, defaulting to 1000 [ 978.520432][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18329'. [ 978.569024][T15348] lo speed is unknown, defaulting to 1000 [ 979.150858][T15385] syzkaller0: entered promiscuous mode [ 979.157344][T15385] syzkaller0: entered allmulticast mode [ 979.168950][T15392] syzkaller0: entered promiscuous mode [ 979.174512][T15392] syzkaller0: entered allmulticast mode [ 980.875733][T15395] syzkaller0: entered promiscuous mode [ 980.888868][T15395] syzkaller0: entered allmulticast mode [ 980.903435][T15409] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 981.038479][ T8631] lo speed is unknown, defaulting to 1000 [ 981.048844][ T2044] bond14: (slave bridge17): link status up again after 0 ms [ 981.057231][ T2044] bond14: (slave bridge17): failed to get link speed/duplex [ 981.200958][ T2044] bond14: (slave bridge17): failed to get link speed/duplex [ 981.230142][T15425] netlink: 'syz.1.18347': attribute type 27 has an invalid length. [ 981.247314][T15425] .70: left allmulticast mode [ 981.252937][T15425] hsr_slave_0: left allmulticast mode [ 981.260207][T15425] ip6erspan0: left promiscuous mode [ 981.266711][T15425] ipvlan2: left promiscuous mode [ 981.283560][T15425] tipc: Resetting bearer [ 981.296529][T15429] netlink: 'syz.4.18348': attribute type 1 has an invalid length. [ 981.317625][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18346'. [ 981.321030][T15425] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 981.334927][T15425] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 981.443481][T15425] bond6: left promiscuous mode [ 981.448450][T15425] vcan1: left promiscuous mode [ 981.479159][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18348'. [ 981.629668][T15425] vxlan2: left promiscuous mode [ 981.816002][T15425] veth13: left allmulticast mode [ 981.829186][ T2047] bond14: (slave bridge17): failed to get link speed/duplex [ 981.983356][T15434] bond15: (slave veth7): Enslaving as an active interface with a down link [ 982.060664][T15435] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.092230][T15435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.138624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 982.146714][ C1] lec:lec_tx_timeout: lec0 [ 982.151579][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 982.174359][ T991] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.183428][ T991] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 982.199769][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 982.227099][T15439] bond15: (slave veth9): Enslaving as an active interface with a down link [ 982.243241][T15443] 8021q: adding VLAN 0 to HW filter on device bond15 [ 982.308765][ T2050] bond14: (slave bridge17): failed to get link speed/duplex [ 982.420602][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 982.452764][ T2044] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.462114][ T2044] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 982.571755][ T2044] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.596091][ T2044] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 982.628838][ T2044] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.668987][ T2044] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 982.688833][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 982.742943][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18352'. [ 982.790637][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18353'. [ 982.800015][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 983.281164][T15481] team_slave_1: entered promiscuous mode [ 983.292148][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18359'. [ 983.449927][T15480] team_slave_1: left promiscuous mode [ 983.655004][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18363'. [ 983.682544][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18363'. [ 983.757188][T15495] netlink: 'syz.0.18362': attribute type 27 has an invalid length. [ 983.882351][T15495] tipc: Resetting bearer [ 984.143890][T15495] bond14: left allmulticast mode [ 984.275088][T15495] bond16: left promiscuous mode [ 984.299753][T15495] vti1: left promiscuous mode [ 984.322218][T15495] vlan2: left allmulticast mode [ 984.344288][T15495] bond17: left allmulticast mode [ 984.354429][T15495] geneve4: left allmulticast mode [ 984.422712][T15495] bond18: left promiscuous mode [ 984.440275][T15495] bond19: left promiscuous mode [ 984.449907][T15495] bridge21: left promiscuous mode [ 984.472404][T15495] ipvlan2: left allmulticast mode [ 984.484128][T15495] bond19: left allmulticast mode [ 984.506483][T15495] bridge21: left allmulticast mode [ 984.641604][T15502] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.832039][ T991] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.840739][ T991] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.874505][T15515] ip6tnl0: Caught tx_queue_len zero misconfig [ 984.969203][ T991] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.987357][ T991] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.011208][T15524] syzkaller0: entered promiscuous mode [ 985.016751][T15524] syzkaller0: entered allmulticast mode [ 985.069436][T15511] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 985.125386][T15532] tipc: Enabled bearer , priority 0 [ 985.135255][T15534] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 985.144407][T15534] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 985.157301][T15534] tipc: Resetting bearer [ 985.166400][T15532] syzkaller0: entered promiscuous mode [ 985.186359][T15532] syzkaller0: entered allmulticast mode [ 985.297014][T15540] netlink: 'syz.4.18375': attribute type 10 has an invalid length. [ 985.587240][T15541] tipc: Resetting bearer [ 985.620372][T15531] tipc: Resetting bearer [ 985.763558][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18377'. [ 985.789545][T15531] tipc: Disabling bearer [ 985.809115][ T2047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 985.853556][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18376'. [ 985.881866][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18376'. [ 986.044007][T15511] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 986.148946][ T2047] net_ratelimit: 13 callbacks suppressed [ 986.148968][ T2047] bond14: (slave bridge17): failed to get link speed/duplex [ 986.227858][T15565] wg1 speed is unknown, defaulting to 1000 [ 986.240985][T15565] lo speed is unknown, defaulting to 1000 [ 986.338753][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 986.452748][ T973] bond14: (slave bridge17): failed to get link speed/duplex [ 986.503797][T15579] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 986.516030][T15579] pim6reg1: entered promiscuous mode [ 986.536885][T15579] pim6reg1: entered allmulticast mode [ 986.578894][ T2047] bond14: (slave bridge17): failed to get link speed/duplex [ 986.748834][ T2044] bond14: (slave bridge17): failed to get link speed/duplex [ 986.840651][ T2044] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 986.862011][ T2044] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 986.873281][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18390'. [ 986.899996][T15594] netlink: 'syz.3.18390': attribute type 1 has an invalid length. [ 986.933188][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18393'. [ 986.997511][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18391'. [ 987.158744][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 987.166836][ C1] lec:lec_tx_timeout: lec0 [ 987.172000][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 987.319891][T15613] netlink: 108 bytes leftover after parsing attributes in process `syz.4.18394'. [ 987.377435][T15604] bridge22: port 1(veth17) entered blocking state [ 987.398961][T15604] bridge22: port 1(veth17) entered disabled state [ 987.412786][T15604] veth17: entered allmulticast mode [ 987.433098][T15604] veth17: entered promiscuous mode [ 987.465459][T15610] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.508752][ T2047] bond14: (slave bridge17): failed to get link speed/duplex [ 987.594750][T15600] bridge22: port 2(veth19) entered blocking state [ 987.603882][T15600] bridge22: port 2(veth19) entered disabled state [ 987.610752][T15600] veth19: entered allmulticast mode [ 987.618412][T15600] veth19: entered promiscuous mode [ 987.631268][T15610] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.639699][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 987.708880][ T2047] bond14: (slave bridge17): failed to get link speed/duplex [ 987.756427][T15610] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.806769][T15620] syzkaller0: entered promiscuous mode [ 987.813350][T15620] syzkaller0: entered allmulticast mode [ 987.828999][ T37] bond14: (slave bridge17): failed to get link speed/duplex [ 987.871758][T15610] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.948994][ T991] bond14: (slave bridge17): failed to get link speed/duplex [ 987.996046][T15627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18400'. [ 988.015863][T15627] netlink: 'syz.1.18400': attribute type 5 has an invalid length. [ 988.031708][ T991] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.055435][T15626] tipc: Enabled bearer , priority 0 [ 988.063620][T15627] smc: net device wlan0 erased user defined pnetid SYZ0 [ 988.064663][T15626] syzkaller0: entered promiscuous mode [ 988.097249][T15626] syzkaller0: entered allmulticast mode [ 988.104620][ T991] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.158269][ T991] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.185450][T15626] tipc: Resetting bearer [ 988.209514][T15624] tipc: Resetting bearer [ 988.235089][T15624] tipc: Disabling bearer [ 988.247777][ T991] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.395666][T15641] bond20: entered allmulticast mode [ 988.419799][T15641] 8021q: adding VLAN 0 to HW filter on device bond20 [ 988.445533][T15645] netlink: 'syz.4.18404': attribute type 27 has an invalid length. [ 988.474807][T15645] xfrm0: left allmulticast mode [ 988.489409][T15645] gre1: left allmulticast mode [ 988.503661][T15645] geneve3: left promiscuous mode [ 988.516101][T15645] ip6gretap2: left allmulticast mode [ 988.823604][T15645] bond5: left promiscuous mode [ 988.920888][T15645] gretap0: left allmulticast mode [ 988.926546][T15645] macvtap0: left promiscuous mode [ 988.932403][T15645] macvtap0: left allmulticast mode [ 989.472271][T15645] ip6gre1: left promiscuous mode [ 989.490284][T15645] ip6gre1: left allmulticast mode [ 989.608710][T15645] veth0_to_bond: left allmulticast mode [ 989.628463][T15645] macvlan1: left allmulticast mode [ 989.649135][T15645] bond9: left allmulticast mode [ 989.659093][T15645] ip6gretap3: left allmulticast mode [ 989.676361][T15645] bond10: left promiscuous mode [ 989.683333][T15645] wireguard1: left promiscuous mode [ 989.726210][T15693] netlink: 'syz.1.18411': attribute type 13 has an invalid length. [ 989.759510][T15645] bond14: left promiscuous mode [ 989.764525][T15645] bridge17: left promiscuous mode [ 989.770302][T15645] bridge18: left promiscuous mode [ 989.777075][T15645] bond14: left allmulticast mode [ 989.782639][T15645] bridge17: left allmulticast mode [ 989.787946][T15645] bridge18: left allmulticast mode [ 989.851244][T13766] lo speed is unknown, defaulting to 1000 [ 989.857051][T13766] syz2: Port: 1 Link DOWN [ 989.892778][T15649] 8021q: adding VLAN 0 to HW filter on device ` [ 990.050003][T15693] tipc: Resetting bearer [ 990.087237][ T2044] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.111235][ T2044] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.131177][T15694] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 990.164761][T13766] lo speed is unknown, defaulting to 1000 [ 990.177035][T13766] syz2: Port: 1 Link ACTIVE [ 990.177035][ T2044] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.177200][ T2044] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.221287][T15701] syzkaller0: entered promiscuous mode [ 990.226853][T15701] syzkaller0: entered allmulticast mode [ 990.316640][T15701] tipc: Enabled bearer , priority 0 [ 990.326854][T15698] tipc: Resetting bearer [ 990.352630][T15698] tipc: Disabling bearer [ 990.378970][T15709] syzkaller0: entered promiscuous mode [ 990.384807][T15709] syzkaller0: entered allmulticast mode [ 990.397439][T15710] syzkaller0: entered promiscuous mode [ 990.403670][T15710] syzkaller0: entered allmulticast mode [ 990.678954][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 990.903566][T15711] lec:lec_atm_close: lec0: Shut down! [ 990.942327][T15728] syzkaller0: entered promiscuous mode [ 990.952096][T15728] syzkaller0: entered allmulticast mode [ 991.085724][T15735] gre0 speed is unknown, defaulting to 1000 [ 991.114171][T15735] gre0 speed is unknown, defaulting to 1000 [ 991.152699][T15735] gre0 speed is unknown, defaulting to 1000 [ 991.227609][T15738] net_ratelimit: 2 callbacks suppressed [ 991.227621][T15738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.249113][ T9818] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 991.413442][T15746] tipc: Resetting bearer [ 991.429310][T13766] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 991.597180][T15735] infiniband syz1: set active [ 991.602507][T15735] infiniband syz1: added gre0 [ 991.616082][T13762] gre0 speed is unknown, defaulting to 1000 [ 991.772495][T15735] RDS/IB: syz1: added [ 991.796294][T15735] smc: adding ib device syz1 with port count 1 [ 991.840489][T15735] smc: ib device syz1 port 1 has no pnetid [ 991.866898][T13762] gre0 speed is unknown, defaulting to 1000 [ 991.881684][T15735] gre0 speed is unknown, defaulting to 1000 [ 992.487719][T15735] gre0 speed is unknown, defaulting to 1000 [ 992.892860][T15783] xt_CT: No such helper "snmp_trap" [ 993.209204][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.284758][T15735] gre0 speed is unknown, defaulting to 1000 [ 993.886723][T15735] gre0 speed is unknown, defaulting to 1000 [ 994.409405][T15735] gre0 speed is unknown, defaulting to 1000 [ 994.651986][T15821] syzkaller0: entered promiscuous mode [ 994.872006][T15831] netlink: 'syz.3.18452': attribute type 10 has an invalid length. [ 994.945642][T15834] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.18454'. [ 995.055111][T15839] netlink: 'syz.1.18455': attribute type 1 has an invalid length. [ 995.184601][T15839] 8021q: adding VLAN 0 to HW filter on device bond11 [ 995.390055][T15844] bond11: (slave veth15): Enslaving as an active interface with a down link [ 995.526346][T15851] bond11: (slave veth17): Enslaving as an active interface with a down link [ 995.564624][T15839] bond11: entered allmulticast mode [ 995.671977][T15857] syzkaller0: entered promiscuous mode [ 996.039160][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 996.047275][ C1] lec:lec_tx_timeout: lec0 [ 996.052498][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 998.206627][T15897] ieee802154 phy0 wpan0: encryption failed: -126 [ 998.278838][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 998.890864][T15894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 999.630757][T15913] netlink: 'syz.3.18470': attribute type 39 has an invalid length. [ 999.671668][T15910] wg1 speed is unknown, defaulting to 1000 [ 999.712468][T15910] lo speed is unknown, defaulting to 1000 [ 999.746269][T15910] gre0 speed is unknown, defaulting to 1000 [ 999.888693][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 1000.063932][T15929] wg1 speed is unknown, defaulting to 1000 [ 1000.073110][T15929] lo speed is unknown, defaulting to 1000 [ 1000.282658][T15929] gre0 speed is unknown, defaulting to 1000 [ 1000.505773][T15907] syzkaller0: entered promiscuous mode [ 1000.511713][T15907] syzkaller0: entered allmulticast mode [ 1001.058648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1001.066787][ C1] lec:lec_tx_timeout: lec0 [ 1001.071715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1001.096045][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18477'. [ 1001.194797][T15958] netlink: 'syz.3.18479': attribute type 1 has an invalid length. [ 1001.402129][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18480'. [ 1001.600469][T15961] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1001.614206][T15961] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 1001.671003][T15963] macvlan3: entered promiscuous mode [ 1001.676495][T15963] macvlan3: entered allmulticast mode [ 1001.689246][T15963] bond15: entered promiscuous mode [ 1001.695152][T15963] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1001.712280][T15963] bond15: left promiscuous mode [ 1001.747030][T15966] ipvlan0: entered allmulticast mode [ 1001.753178][T15966] syz_tun: entered allmulticast mode [ 1001.952278][T15978] netlink: 'syz.3.18483': attribute type 1 has an invalid length. [ 1002.126868][T15978] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1002.149821][T15987] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18483'. [ 1002.365432][T15980] bond16: (slave veth17): Enslaving as an active interface with a down link [ 1002.384902][T15982] dummy0: left allmulticast mode [ 1002.395896][T15982] bond16: (slave dummy0): making interface the new active one [ 1002.405745][T15982] dummy0: entered promiscuous mode [ 1002.412033][T15982] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 1002.440736][T15987] bond16: (slave dummy0): Releasing active interface [ 1002.447783][T15987] dummy0 (unregistering): left promiscuous mode [ 1002.760871][T15988] tipc: Resetting bearer [ 1003.047226][ T5947] gre0 speed is unknown, defaulting to 1000 [ 1003.087359][ T5947] syz1: Port: 1 Link DOWN [ 1003.237306][T16000] syzkaller0: entered promiscuous mode [ 1003.243716][T16000] syzkaller0: entered allmulticast mode [ 1003.265277][ T8629] gre0 speed is unknown, defaulting to 1000 [ 1005.423426][T16040] bond17: Removing last arp target with arp_interval on [ 1005.437848][T16053] dummy0: entered promiscuous mode [ 1005.459078][T16053] vlan2: entered promiscuous mode [ 1005.491957][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1005.588447][ T2050] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.610607][ T2050] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.629614][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1005.641052][ T2044] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.660923][ T2044] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.694378][T16068] syzkaller0: entered promiscuous mode [ 1005.700101][T16068] syzkaller0: entered allmulticast mode [ 1005.737577][T16068] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1005.745706][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1005.812517][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18503'. [ 1005.905477][T16073] macvtap0: entered promiscuous mode [ 1005.918777][T16073] virtio_net virtio1 eth0: entered promiscuous mode [ 1005.939800][T16073] macvtap0: entered allmulticast mode [ 1005.945249][T16073] virtio_net virtio1 eth0: entered allmulticast mode [ 1006.078626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1006.086676][ C1] lec:lec_tx_timeout: lec0 [ 1006.091666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1006.107957][T16093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18509'. [ 1006.158964][T16093] unsupported nlmsg_type 40 [ 1006.227270][T16087] syzkaller0: entered promiscuous mode [ 1006.243926][T16087] syzkaller0: entered allmulticast mode [ 1006.411058][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18503'. [ 1006.479193][T16073] virtio_net virtio1 eth0: left allmulticast mode [ 1006.513328][T16073] virtio_net virtio1 eth0: left promiscuous mode [ 1006.579772][T16101] wg1 speed is unknown, defaulting to 1000 [ 1006.587551][T16101] lo speed is unknown, defaulting to 1000 [ 1006.598086][T16103] syzkaller0: entered promiscuous mode [ 1006.604924][T16103] syzkaller0: entered allmulticast mode [ 1006.677496][T16101] gre0 speed is unknown, defaulting to 1000 [ 1006.950434][T16115] tipc: Enabled bearer , priority 0 [ 1006.968499][T16115] syzkaller0: entered promiscuous mode [ 1006.975540][T16115] syzkaller0: entered allmulticast mode [ 1006.986512][T16115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1007.136397][T16124] tipc: Resetting bearer [ 1007.173494][T16113] tipc: Resetting bearer [ 1007.242747][T16113] tipc: Disabling bearer [ 1007.306360][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18519'. [ 1007.585192][T16142] netlink: 550 bytes leftover after parsing attributes in process `syz.2.18522'. [ 1007.967386][T16155] syzkaller0: entered promiscuous mode [ 1007.983453][T16155] syzkaller0: entered allmulticast mode [ 1008.030256][T16159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18528'. [ 1008.115488][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18529'. [ 1008.206938][T16170] vlan2: entered allmulticast mode [ 1008.212881][T16170] bridge11: entered allmulticast mode [ 1008.223255][T16169] bridge11: port 1(erspan0) entered blocking state [ 1008.235141][T16169] bridge11: port 1(erspan0) entered disabled state [ 1008.244476][T16169] erspan0: entered allmulticast mode [ 1008.256121][T16169] erspan0: entered promiscuous mode [ 1008.281975][T16169] bridge11: port 1(erspan0) entered blocking state [ 1008.288712][T16169] bridge11: port 1(erspan0) entered forwarding state [ 1008.451437][T16170] bridge11: port 2(bond12) entered blocking state [ 1008.458276][T16170] bridge11: port 2(bond12) entered disabled state [ 1008.465668][T16170] bond12: entered allmulticast mode [ 1008.474285][T16170] bond12: entered promiscuous mode [ 1008.508468][T16184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1008.821542][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18538'. [ 1009.133303][T16216] syzkaller0: entered promiscuous mode [ 1009.197273][T16216] syzkaller0: entered allmulticast mode [ 1009.221522][T16216] TC_ACT_REPEAT abuse ? [ 1009.413374][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18547'. [ 1009.469120][T16223] dvmrp8: entered allmulticast mode [ 1009.481264][T16230] bond0: option min_links: invalid value (18446744071972701165) [ 1009.501924][T16230] bond0: option min_links: allowed values 0 - 2147483647 [ 1009.647037][ T30] audit: type=1800 audit(1775308657.837:20): pid=16228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18546" name="cgroup.controllers" dev="tmpfs" ino=18758 res=0 errno=0 [ 1009.712132][T16240] syzkaller0: entered promiscuous mode [ 1009.713531][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18549'. [ 1009.717684][T16240] syzkaller0: entered allmulticast mode [ 1009.867814][T16247] netlink: 'syz.4.18554': attribute type 1 has an invalid length. [ 1010.020674][T16253] syzkaller0: entered promiscuous mode [ 1010.026248][T16253] syzkaller0: entered allmulticast mode [ 1010.135971][T16247] veth13: entered promiscuous mode [ 1010.290515][T16247] bond16: (slave veth13): Enslaving as a backup interface with a down link [ 1010.568415][T16281] netlink: 124 bytes leftover after parsing attributes in process `syz.4.18559'. [ 1010.666357][T16279] tipc: Enabled bearer , priority 0 [ 1010.674598][T16279] syzkaller0: entered promiscuous mode [ 1010.680337][T16279] syzkaller0: entered allmulticast mode [ 1010.692972][T16279] tipc: Resetting bearer [ 1010.710551][T16278] tipc: Resetting bearer [ 1010.752985][T16278] tipc: Disabling bearer [ 1010.773017][T16285] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 1010.858943][T16275] syzkaller0: entered promiscuous mode [ 1010.864480][T16275] syzkaller0: entered allmulticast mode [ 1011.098921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1011.107057][ C1] lec:lec_tx_timeout: lec0 [ 1011.117515][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1011.194830][T16296] syzkaller0: entered promiscuous mode [ 1011.204908][T16296] syzkaller0: entered allmulticast mode [ 1011.213253][T16288] syzkaller0: entered promiscuous mode [ 1011.219236][T16288] syzkaller0: entered allmulticast mode [ 1011.712717][T16306] syzkaller0: entered promiscuous mode [ 1011.718272][T16306] syzkaller0: entered allmulticast mode [ 1012.906316][T16354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18577'. [ 1012.929346][T16354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18577'. [ 1014.425814][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18586'. [ 1014.452741][T16386] bond0: option lp_interval: invalid value (0) [ 1014.469377][T16386] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1014.903581][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18590'. [ 1014.975451][T16374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1015.059509][T16395] nbd: socks must be embedded in a SOCK_ITEM attr [ 1015.114242][T16402] syzkaller0: entered promiscuous mode [ 1015.119993][T16402] syzkaller0: entered allmulticast mode [ 1015.130578][T16369] block nbd64: NBD_DISCONNECT [ 1015.142956][T16397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18590'. [ 1015.169518][T16400] syzkaller0: entered promiscuous mode [ 1015.175340][T16397] nbd: device at index 64 is going down [ 1015.185515][T16400] syzkaller0: entered allmulticast mode [ 1015.897696][T16407] syzkaller0: entered promiscuous mode [ 1015.904216][T16407] syzkaller0: entered allmulticast mode [ 1015.960806][T16404] bond6: entered allmulticast mode [ 1015.966001][T16404] vcan1: entered allmulticast mode [ 1016.128639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1016.136868][ C1] lec:lec_tx_timeout: lec0 [ 1016.141829][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1016.153655][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18601'. [ 1017.835919][T16452] syzkaller0: entered promiscuous mode [ 1017.842845][T16452] syzkaller0: entered allmulticast mode [ 1017.963784][T16456] tipc: Enabled bearer , priority 0 [ 1018.081428][T16456] syzkaller0: entered promiscuous mode [ 1018.087057][T16456] syzkaller0: entered allmulticast mode [ 1018.094163][T16456] tipc: Resetting bearer [ 1018.119224][T16455] tipc: Resetting bearer [ 1020.108317][T16455] tipc: Disabling bearer [ 1020.318535][T16503] syzkaller0: entered promiscuous mode [ 1020.324772][T16503] syzkaller0: entered allmulticast mode [ 1020.589450][T16512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18616'. [ 1020.619038][T16512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18616'. [ 1020.827050][T16533] netlink: 'syz.4.18618': attribute type 17 has an invalid length. [ 1020.837593][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18618'. [ 1020.879893][T16533] bond0: option all_slaves_active: invalid value (44) [ 1021.148914][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1021.157011][ C1] lec:lec_tx_timeout: lec0 [ 1021.161755][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1021.286393][T16544] wg1 speed is unknown, defaulting to 1000 [ 1021.340900][T16544] lo speed is unknown, defaulting to 1000 [ 1021.388471][T16544] gre0 speed is unknown, defaulting to 1000 [ 1021.577907][T16560] netlink: 276 bytes leftover after parsing attributes in process `syz.1.18623'. [ 1021.779295][T16565] netlink: 'syz.3.18626': attribute type 1 has an invalid length. [ 1021.857830][T16565] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1021.870904][T16570] netlink: 'syz.2.18627': attribute type 12 has an invalid length. [ 1021.991571][T16562] syzkaller0: entered promiscuous mode [ 1021.997206][T16562] syzkaller0: entered allmulticast mode [ 1022.021177][T16562] tc action pedit offset must be on 32 bit boundaries [ 1022.105443][T16579] ip6t_rpfilter: unknown options [ 1022.206938][T16583] netlink: 'syz.0.18629': attribute type 10 has an invalid length. [ 1022.260988][T16583] team0: left allmulticast mode [ 1022.278038][T16586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18630'. [ 1022.279953][T16583] team_slave_0: left allmulticast mode [ 1022.308515][T16583] : left allmulticast mode [ 1022.322288][T16583] bridge18: left allmulticast mode [ 1022.336556][T16583] team0: left promiscuous mode [ 1022.352039][T16583] team_slave_0: left promiscuous mode [ 1022.369667][T16583] : left promiscuous mode [ 1022.374465][T16583] bridge18: left promiscuous mode [ 1022.381398][T16583] bridge0: port 3(team0) entered disabled state [ 1022.437596][T16588] syzkaller0: entered promiscuous mode [ 1022.468935][T16588] syzkaller0: entered allmulticast mode [ 1022.746210][T16599] TC_ACT_REPEAT abuse ? [ 1023.097046][T16589] mpoa:mpoad_close: () going down [ 1023.310575][T16621] syzkaller0: entered promiscuous mode [ 1023.317487][T16621] syzkaller0: entered allmulticast mode [ 1023.543359][T16634] netlink: 'syz.4.18644': attribute type 4 has an invalid length. [ 1023.630859][T13762] lo speed is unknown, defaulting to 1000 [ 1023.638910][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.646967][T13762] syz2: Port: 1 Link DOWN [ 1023.650607][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.808448][T16641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1023.815841][T16641] IPv6: NLM_F_CREATE should be set when creating new route [ 1023.850533][T16643] lo: entered allmulticast mode [ 1023.856367][T16643] tunl0: entered allmulticast mode [ 1023.887740][T16643] gre0: entered allmulticast mode [ 1023.910728][T16641] netlink: 'syz.4.18646': attribute type 30 has an invalid length. [ 1023.959637][T16643] gretap0: entered allmulticast mode [ 1024.036262][T16643] erspan0: entered allmulticast mode [ 1024.054223][T16643] ip_vti0: entered allmulticast mode [ 1024.086291][T16643] ip6_vti0: entered allmulticast mode [ 1024.166979][T16643] sit0: entered allmulticast mode [ 1024.228936][T16643] ip6tnl0: entered allmulticast mode [ 1024.256178][T16643] ip6gre0: entered allmulticast mode [ 1024.272471][T16643] ip6gretap0: entered allmulticast mode [ 1024.283650][T16643] `: entered allmulticast mode [ 1024.291937][T16643] dummy0: entered allmulticast mode [ 1024.309571][T16643] nlmon0: entered allmulticast mode [ 1024.384308][T16643] caif0: entered allmulticast mode [ 1024.397155][T16643] vxcan0: entered allmulticast mode [ 1024.404166][T16643] vxcan1: entered allmulticast mode [ 1024.419159][T16643] veth0: entered allmulticast mode [ 1024.429105][T16643] veth1: entered allmulticast mode [ 1024.434559][T16643] wg1: entered allmulticast mode [ 1024.454945][T16643] wg2: entered allmulticast mode [ 1024.474569][T16643] veth0_to_bridge: entered allmulticast mode [ 1024.484396][T16643] bridge_slave_0: entered allmulticast mode [ 1024.490963][T16643] veth1_to_bridge: entered allmulticast mode [ 1024.497396][T16643] bridge_slave_1: entered allmulticast mode [ 1024.503865][T16643] veth0_to_bond: entered allmulticast mode [ 1024.511401][T16643] bond_slave_0: entered allmulticast mode [ 1024.517553][T16643] veth1_to_bond: entered allmulticast mode [ 1024.528127][T16643] bond_slave_1: entered allmulticast mode [ 1024.534752][T16643] veth0_to_team: entered allmulticast mode [ 1024.541157][T16643] team_slave_0: entered allmulticast mode [ 1024.547180][T16643] veth1_to_team: entered allmulticast mode [ 1024.553814][T16643] team_slave_1: entered allmulticast mode [ 1024.560120][T16643] veth0_to_batadv: entered allmulticast mode [ 1024.568049][T16643] batadv_slave_0: entered allmulticast mode [ 1024.574565][T16643] xfrm0: entered allmulticast mode [ 1024.580145][T16643] veth0_to_hsr: entered allmulticast mode [ 1024.586300][T16643] hsr_slave_0: entered allmulticast mode [ 1024.592837][T16643] veth1_virt_wifi: entered allmulticast mode [ 1024.599968][T16643] veth0_virt_wifi: entered allmulticast mode [ 1024.606333][T16643] virt_wifi0: entered allmulticast mode [ 1024.616452][T16643] veth1_macvtap: entered allmulticast mode [ 1024.672160][T16643] veth0_macvtap: entered allmulticast mode [ 1024.680462][T16643] geneve0: entered allmulticast mode [ 1024.686263][T16643] geneve1: entered allmulticast mode [ 1024.744339][T16643] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1024.775626][T16643] geneve2: entered allmulticast mode [ 1024.812037][T16643] syztnl0: entered allmulticast mode [ 1024.841876][T16643] bridge0: entered allmulticast mode [ 1024.854201][T16643] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 1024.876537][T16643] gretap1: entered allmulticast mode [ 1024.885827][T16643] l24): entered allmulticast mode [ 1024.892164][T16643] mac80211_hwsim hwsim23 wlan3: entered allmulticast mode [ 1024.902287][T16643] mac80211_hwsim hwsim24 wlan4: entered allmulticast mode [ 1024.912944][T16643] mac80211_hwsim hwsim25 wlan5: entered allmulticast mode [ 1024.922927][T16643] bridge1: entered allmulticast mode [ 1024.929260][T16643] mac80211_hwsim hwsim29 wlan6: entered allmulticast mode [ 1024.937236][T16643] bond1: entered allmulticast mode [ 1024.943073][T16643] xfrm1: entered allmulticast mode [ 1024.948482][T16643] bridge2: entered allmulticast mode [ 1024.957635][T16643] ip6tnl1: entered allmulticast mode [ 1024.964357][T16643] ip6gretap1: entered allmulticast mode [ 1024.970455][T16643] mac80211_hwsim hwsim34 wlan7: entered allmulticast mode [ 1024.977762][T16643] gretap2: entered allmulticast mode [ 1024.983508][T16643] syztnl2: entered allmulticast mode [ 1024.989171][T16643] ip6tnl2: entered allmulticast mode [ 1024.994572][T16643] gre1: entered allmulticast mode [ 1025.003743][T16643] bond2: entered allmulticast mode [ 1025.009699][T16643] geneve3: entered allmulticast mode [ 1025.015262][T16643] bridge3: entered allmulticast mode [ 1025.020942][T16643] ip6gretap2: entered allmulticast mode [ 1025.026713][T16643] syztnl1: entered allmulticast mode [ 1025.032484][T16643] vxlan0: entered allmulticast mode [ 1025.037805][T16643] bridge4: entered allmulticast mode [ 1025.043594][T16643] macvlan0: entered allmulticast mode [ 1025.049302][T16643] ip6tnl3: entered allmulticast mode [ 1025.054713][T16643] macsec0: entered allmulticast mode [ 1025.060936][T16643] sit1: entered allmulticast mode [ 1025.066174][T16643] vlan0: entered allmulticast mode [ 1025.071555][T16643] nicvf0: entered allmulticast mode [ 1025.076973][T16643] bond3: entered allmulticast mode [ 1025.082407][T16643] ip6tnl4: entered allmulticast mode [ 1025.087863][T16643] bond4: entered allmulticast mode [ 1025.093395][T16643] geneve4: entered allmulticast mode [ 1025.099013][T16643] ip6erspan0: entered allmulticast mode [ 1025.104757][T16643] ipip0: entered allmulticast mode [ 1025.110108][T16643] gretap3: entered allmulticast mode [ 1025.115539][T16643] sit2: entered allmulticast mode [ 1025.121103][T16643] gre2: entered allmulticast mode [ 1025.126308][T16643] bond5: entered allmulticast mode [ 1025.131677][T16643] ip6tnl5: entered allmulticast mode [ 1025.137161][T16643] macvtap0: entered allmulticast mode [ 1025.142813][T16643] bond6: entered allmulticast mode [ 1025.148076][T16643] gretap4: entered allmulticast mode [ 1025.153877][T16643] gre3: entered allmulticast mode [ 1025.159194][T16643] bridge5: entered allmulticast mode [ 1025.164610][T16643] bridge6: entered allmulticast mode [ 1025.170134][T16643] bridge7: entered allmulticast mode [ 1025.175619][T16643] bridge8: entered allmulticast mode [ 1025.181452][T16643] veth2: entered allmulticast mode [ 1025.186701][T16643] veth3: entered allmulticast mode [ 1025.192075][T16643] veth4: entered allmulticast mode [ 1025.197442][T16643] veth5: entered allmulticast mode [ 1025.202802][T16643] bridge9: entered allmulticast mode [ 1025.208230][T16643] bridge10: entered allmulticast mode [ 1025.214070][T16643] bridge11: entered allmulticast mode [ 1025.219701][T16643] gtp0: entered allmulticast mode [ 1025.224865][T16643] : entered allmulticast mode [ 1025.229862][T16643] bridge12: entered allmulticast mode [ 1025.235354][T16643] ip6gre1: entered allmulticast mode [ 1025.241126][T16643] bridge13: entered allmulticast mode [ 1025.246615][T16643] bond7: entered allmulticast mode [ 1025.251993][T16643] bridge14: entered allmulticast mode [ 1025.257522][T16643] bond8: entered allmulticast mode [ 1025.262767][T16643] macvlan1: entered allmulticast mode [ 1025.268367][T16643] bridge15: entered allmulticast mode [ 1025.274265][T16643] bond9: entered allmulticast mode [ 1025.279470][T16643] ip6gretap3: entered allmulticast mode [ 1025.285245][T16643] bond10: entered allmulticast mode [ 1025.290553][T16643] wireguard1: entered allmulticast mode [ 1025.296355][T16643] wireguard2: entered allmulticast mode [ 1025.302386][T16643] bridge16: entered allmulticast mode [ 1025.307926][T16643] bond11: entered allmulticast mode [ 1025.313361][T16643] bond12: entered allmulticast mode [ 1025.318662][T16643] geneve5: entered allmulticast mode [ 1025.324178][T16643] bond13: entered allmulticast mode [ 1025.329918][T16643] ipvlan0: entered allmulticast mode [ 1025.335422][T16643] gtp1: entered allmulticast mode [ 1025.340695][T16643] bond14: entered allmulticast mode [ 1025.345926][T16643] bridge17: entered allmulticast mode [ 1025.351474][T16643] bridge18: entered allmulticast mode [ 1025.357279][T16643] bond15: entered allmulticast mode [ 1025.363088][T16643] veth6: entered allmulticast mode [ 1025.370631][T16643] veth7: entered allmulticast mode [ 1025.376225][T16643] veth8: entered allmulticast mode [ 1025.381857][T16643] veth9: entered allmulticast mode [ 1025.387319][T16643] veth10: entered allmulticast mode [ 1025.393207][T16643] veth11: entered allmulticast mode [ 1025.399072][T16643] netdevsim netdevsim4 eth0: entered allmulticast mode [ 1025.406209][T16643] netdevsim netdevsim4 eth1: entered allmulticast mode [ 1025.413799][T16643] netdevsim netdevsim4 eth2: entered allmulticast mode [ 1025.421083][T16643] netdevsim netdevsim4 eth3: entered allmulticast mode [ 1025.428232][T16643] bond16: entered allmulticast mode [ 1025.434544][T16643] veth13: entered allmulticast mode [ 1025.440208][T16643] veth12: entered allmulticast mode [ 1025.445805][T16643] veth13: left promiscuous mode [ 1025.572105][T16655] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1025.606250][T16650] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1025.683281][T16676] syzkaller0: entered promiscuous mode [ 1025.689284][T16676] syzkaller0: entered allmulticast mode [ 1026.168657][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1026.176826][ C1] lec:lec_tx_timeout: lec0 [ 1026.181690][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1026.391245][T16714] netlink: 'syz.3.18659': attribute type 3 has an invalid length. [ 1026.442574][T16704] syzkaller0: entered promiscuous mode [ 1026.451735][T16704] syzkaller0: entered allmulticast mode [ 1026.596259][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18659'. [ 1027.172568][T16737] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1028.528953][T13767] page_pool_release_retry() stalled pool shutdown: id 176, 1 inflight 121 sec [ 1028.744936][T16746] openvswitch: netlink: EtherType 50a is less than min 600 [ 1030.330997][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18665'. [ 1030.544184][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18671'. [ 1030.602181][T16755] wg1 speed is unknown, defaulting to 1000 [ 1030.615582][T16755] lo speed is unknown, defaulting to 1000 [ 1030.645146][T16755] gre0 speed is unknown, defaulting to 1000 [ 1030.730589][T16770] syzkaller0: entered promiscuous mode [ 1030.736221][T16770] syzkaller0: entered allmulticast mode [ 1031.188906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1031.197026][ C1] lec:lec_tx_timeout: lec0 [ 1031.201690][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1031.762359][T16810] syzkaller0: entered promiscuous mode [ 1031.782558][T16810] syzkaller0: entered allmulticast mode [ 1031.875785][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18687'. [ 1031.902665][T16820] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 1031.955437][T16822] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1031.980717][T16822] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1032.006568][T16822] tipc: Resetting bearer [ 1034.232538][T16829] wg1 speed is unknown, defaulting to 1000 [ 1034.264961][T16829] lo speed is unknown, defaulting to 1000 [ 1034.297229][T16829] gre0 speed is unknown, defaulting to 1000 [ 1034.593513][T16861] syzkaller0: entered promiscuous mode [ 1034.609624][T16861] syzkaller0: entered allmulticast mode [ 1036.210068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1036.218133][ C1] lec:lec_tx_timeout: lec0 [ 1036.222872][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1036.897278][T16902] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1036.905850][T16902] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1036.914283][T16902] tipc: Resetting bearer [ 1036.976051][T16894] wg1 speed is unknown, defaulting to 1000 [ 1037.014303][T16894] lo speed is unknown, defaulting to 1000 [ 1037.035969][T16907] wg1 speed is unknown, defaulting to 1000 [ 1037.035984][T16894] gre0 speed is unknown, defaulting to 1000 [ 1037.077493][T16907] lo speed is unknown, defaulting to 1000 [ 1037.141734][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18703'. [ 1037.262014][T16919] syzkaller0: entered promiscuous mode [ 1037.267573][T16919] syzkaller0: entered allmulticast mode [ 1037.371876][T16925] syzkaller0: entered promiscuous mode [ 1037.377399][T16925] syzkaller0: entered allmulticast mode [ 1037.411043][T16925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18705'. [ 1037.495760][T16927] syzkaller0: entered promiscuous mode [ 1037.504393][T16927] syzkaller0: entered allmulticast mode [ 1037.535907][T16907] gre0 speed is unknown, defaulting to 1000 [ 1039.310112][T16947] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x31313230386c6e ref_ctr_offset(new): 0x0 [ 1040.098234][T16912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.321422][T16954] netlink: 'syz.1.18712': attribute type 39 has an invalid length. [ 1040.357514][T16952] syzkaller0: entered promiscuous mode [ 1040.363563][T16952] syzkaller0: entered allmulticast mode [ 1040.674800][T16970] netlink: 'syz.4.18716': attribute type 13 has an invalid length. [ 1040.699637][T16970] netlink: 'syz.4.18716': attribute type 17 has an invalid length. [ 1040.708473][T16970] lo: left allmulticast mode [ 1040.803002][T16970] tunl0: left allmulticast mode [ 1040.864600][T16970] gre0: left allmulticast mode [ 1040.887088][T16970] erspan0: left allmulticast mode [ 1040.912130][T16976] scsi_nl_rcv_msg: discarding partial skb [ 1040.932612][T16970] ip_vti0: left allmulticast mode [ 1040.940053][T16970] ip6_vti0: left allmulticast mode [ 1040.947393][T16970] sit0: left allmulticast mode [ 1040.958523][T16970] ip6tnl0: left allmulticast mode [ 1040.966191][T16970] ip6gre0: left allmulticast mode [ 1040.973976][T16970] ip6gretap0: left allmulticast mode [ 1040.982062][T16970] `: left allmulticast mode [ 1040.987550][T16970] 8021q: adding VLAN 0 to HW filter on device ` [ 1040.996161][T16970] dummy0: left allmulticast mode [ 1041.003274][T16970] nlmon0: left allmulticast mode [ 1041.011290][T16970] caif0: left allmulticast mode [ 1041.016299][T16970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.040812][T16653] lo speed is unknown, defaulting to 1000 [ 1041.046795][T16653] syz2: Port: 1 Link ACTIVE [ 1041.066542][T16983] tipc: Enabled bearer , priority 0 [ 1041.108353][T16981] syzkaller0: entered promiscuous mode [ 1041.115067][T16981] syzkaller0: entered allmulticast mode [ 1041.186399][T16981] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 1041.270270][T16982] tipc: Resetting bearer [ 1041.291694][T16980] tipc: Resetting bearer [ 1041.377823][T16980] tipc: Disabling bearer [ 1041.598047][T16985] syzkaller0: entered promiscuous mode [ 1041.607233][T16985] syzkaller0: entered allmulticast mode [ 1041.712581][T17002] netlink: 'syz.4.18726': attribute type 21 has an invalid length. [ 1041.723690][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18726'. [ 1041.811076][T16997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18725'. [ 1041.837739][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18724'. [ 1042.039870][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 1042.047956][ C1] lec:lec_tx_timeout: lec0 [ 1042.052939][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1043.462479][T17002] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1043.486211][T16997] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1043.672447][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18730'. [ 1043.902296][T17040] netlink: 'syz.0.18733': attribute type 5 has an invalid length. [ 1044.015674][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18728'. [ 1044.162591][T17057] tipc: Enabling of bearer rejected, failed to enable media [ 1044.281053][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18735'. [ 1044.818217][T17070] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1044.906703][T17072] syzkaller0: entered promiscuous mode [ 1044.912510][T17072] syzkaller0: entered allmulticast mode [ 1044.992290][T17078] netlink: 'syz.4.18740': attribute type 1 has an invalid length. [ 1045.012710][T17075] tipc: Enabling of bearer rejected, already enabled [ 1045.014048][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18740'. [ 1045.485263][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18748'. [ 1045.497179][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18747'. [ 1045.506612][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18747'. [ 1045.611682][T17099] syzkaller0: entered promiscuous mode [ 1045.617427][T17099] syzkaller0: entered allmulticast mode [ 1045.661104][T17101] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1045.763739][T17106] netlink: 168 bytes leftover after parsing attributes in process `syz.4.18753'. [ 1046.530677][T17136] gretap5: entered promiscuous mode [ 1046.596210][T17147] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1046.915360][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18763'. [ 1047.068905][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1047.077060][ C1] lec:lec_tx_timeout: lec0 [ 1047.082269][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1047.227461][T17165] xt_hashlimit: size too large, truncated to 1048576 [ 1047.508421][T17174] syzkaller0: entered promiscuous mode [ 1047.518778][T17174] syzkaller0: entered allmulticast mode [ 1047.552529][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18767'. [ 1047.574605][T17174] 0: reclassify loop, rule prio 0, protocol 800 [ 1048.005341][T17185] netlink: 'syz.2.18769': attribute type 5 has an invalid length. [ 1048.236019][T17197] tipc: Enabled bearer , priority 0 [ 1048.259977][T17197] syzkaller0: entered promiscuous mode [ 1048.265543][T17197] syzkaller0: entered allmulticast mode [ 1048.420905][T17197] tipc: Resetting bearer [ 1048.458898][T17195] tipc: Resetting bearer [ 1048.546577][T17195] tipc: Disabling bearer [ 1048.987491][T17219] __nla_validate_parse: 4 callbacks suppressed [ 1048.987512][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18777'. [ 1049.107260][T17224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.730576][T17241] siw: device registration error -23 [ 1049.956855][T17253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18783'. [ 1049.973160][T17252] syzkaller0: entered promiscuous mode [ 1049.978862][T17252] syzkaller0: entered allmulticast mode [ 1050.069109][T17258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18783'. [ 1050.103553][T17258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18783'. [ 1050.383307][T17265] netlink: 'syz.0.18787': attribute type 20 has an invalid length. [ 1050.505805][T17271] wg1: entered allmulticast mode [ 1050.596391][T17275] syzkaller1: entered promiscuous mode [ 1050.629160][T17275] syzkaller1: entered allmulticast mode [ 1051.224995][T17290] netlink: 'syz.0.18792': attribute type 3 has an invalid length. [ 1051.235413][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18793'. [ 1051.263216][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18792'. [ 1051.285619][T17292] erspan0: left allmulticast mode [ 1051.305255][T17292] erspan0: left promiscuous mode [ 1051.314625][T17293] netlink: 260 bytes leftover after parsing attributes in process `syz.0.18792'. [ 1051.346189][T17292] bridge11: port 1(erspan0) entered disabled state [ 1051.415495][T17292] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1051.668172][T17300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18794'. [ 1051.693499][T17300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18794'. [ 1051.780655][T17301] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18794'. [ 1052.098879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1052.107004][ C1] lec:lec_tx_timeout: lec0 [ 1052.111695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1052.228116][T17324] sctp: [Deprecated]: syz.0.18798 (pid 17324) Use of int in maxseg socket option. [ 1052.228116][T17324] Use struct sctp_assoc_value instead [ 1052.241987][T17318] wg1 speed is unknown, defaulting to 1000 [ 1052.277011][T17318] lo speed is unknown, defaulting to 1000 [ 1052.312032][T17326] tipc: Enabling of bearer rejected, already enabled [ 1052.337934][T17318] gre0 speed is unknown, defaulting to 1000 [ 1052.459021][T17328] syzkaller0: entered promiscuous mode [ 1052.464575][T17328] syzkaller0: entered allmulticast mode [ 1052.594423][T17334] syzkaller0: entered promiscuous mode [ 1052.628511][T17334] 0: reclassify loop, rule prio 0, protocol 800 [ 1053.761660][T17378] netlink: 'syz.0.18808': attribute type 9 has an invalid length. [ 1053.769746][T17378] netlink: 'syz.0.18808': attribute type 11 has an invalid length. [ 1053.777705][T17378] netlink: 'syz.0.18808': attribute type 12 has an invalid length. [ 1054.301756][T16653] lo speed is unknown, defaulting to 1000 [ 1054.310425][T16653] syz2: Port: 1 Link DOWN [ 1054.561846][T17391] __nla_validate_parse: 5 callbacks suppressed [ 1054.561868][T17391] netlink: 324 bytes leftover after parsing attributes in process `syz.2.18811'. [ 1054.610254][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.875569][T17395] 8021q: adding VLAN 0 to HW filter on device ` [ 1054.968287][T17395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1055.006166][T17397] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18814'. [ 1055.038777][T17397] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18814'. [ 1055.072581][ T5126] lo speed is unknown, defaulting to 1000 [ 1055.078477][ T5126] syz2: Port: 1 Link ACTIVE [ 1055.109133][T17416] Cannot find del_set index 4 as target [ 1055.423029][T17427] netlink: 'syz.2.18821': attribute type 4 has an invalid length. [ 1055.474774][T17431] netlink: 'syz.2.18821': attribute type 4 has an invalid length. [ 1055.607051][T17433] bond18: option lacp_active: invalid value (8) [ 1055.616607][T17433] bond18 (unregistering): Released all slaves [ 1055.706055][T17409] tipc: Resetting bearer [ 1056.220808][T17449] syzkaller0: entered promiscuous mode [ 1056.229843][T17449] syzkaller0: entered allmulticast mode [ 1056.563654][T17461] xt_hashlimit: size too large, truncated to 1048576 [ 1057.106340][T17478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18836'. [ 1057.118890][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1057.126980][ C1] lec:lec_tx_timeout: lec0 [ 1057.131778][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1057.571709][T17496] rdma_rxe: rxe_newlink: failed to add lo [ 1058.143617][T17504] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1058.187955][T17482] tipc: Resetting bearer [ 1058.572181][T17512] wg1 speed is unknown, defaulting to 1000 [ 1058.582409][T17512] lo speed is unknown, defaulting to 1000 [ 1058.592234][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18844'. [ 1058.604206][T17512] gre0 speed is unknown, defaulting to 1000 [ 1058.722507][T17508] bond1: entered promiscuous mode [ 1058.733861][T17528] netlink: 'syz.0.18848': attribute type 10 has an invalid length. [ 1058.781780][T17508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1058.911364][T17520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1058.931869][T17520] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1058.955611][T17520] bond1: (slave vti0): Error -95 calling set_mac_address [ 1059.213503][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18851'. [ 1059.515737][T17560] wg1 speed is unknown, defaulting to 1000 [ 1059.524020][T17560] lo speed is unknown, defaulting to 1000 [ 1059.636954][T17560] gre0 speed is unknown, defaulting to 1000 [ 1059.846940][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18855'. [ 1059.856598][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18855'. [ 1059.896495][T17574] wg1 speed is unknown, defaulting to 1000 [ 1059.973907][T17574] lo speed is unknown, defaulting to 1000 [ 1060.151898][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18857'. [ 1060.174358][T17574] gre0 speed is unknown, defaulting to 1000 [ 1060.392299][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1061.388974][T17615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18861'. [ 1061.545284][T17616] syzkaller0: entered promiscuous mode [ 1061.565039][T17616] syzkaller0: entered allmulticast mode [ 1062.088865][T17643] netlink: zone id is out of range [ 1062.094060][T17643] netlink: zone id is out of range [ 1062.119214][T17643] netlink: zone id is out of range [ 1062.128719][T17643] netlink: zone id is out of range [ 1062.133907][T17643] netlink: zone id is out of range [ 1062.139238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1062.139336][ C1] lec:lec_tx_timeout: lec0 [ 1062.152196][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1062.177493][T17643] netlink: zone id is out of range [ 1062.186503][T17643] netlink: zone id is out of range [ 1062.191810][T17643] netlink: zone id is out of range [ 1062.197149][T17643] netlink: zone id is out of range [ 1062.202413][T17643] netlink: zone id is out of range [ 1062.430205][T17659] tipc: Resetting bearer [ 1062.439091][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18872'. [ 1062.946391][T17684] netlink: 'syz.4.18879': attribute type 1 has an invalid length. [ 1063.057322][T17692] bond18: (slave geneve6): making interface the new active one [ 1063.070770][T17692] bond18: (slave geneve6): Enslaving as an active interface with an up link [ 1063.099586][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1063.133844][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1063.165308][T17684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18879'. [ 1063.185484][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1063.234978][T17684] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1063.602179][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1063.648045][T13762] lo speed is unknown, defaulting to 1000 [ 1063.936371][T17702] syzkaller0: entered promiscuous mode [ 1063.957954][T17702] syzkaller0: entered allmulticast mode [ 1064.020682][T17708] netlink: 'syz.4.18882': attribute type 1 has an invalid length. [ 1064.039363][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1064.045523][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1064.045829][T17708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18882'. [ 1064.336685][T17685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18876'. [ 1064.365339][T17685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18876'. [ 1064.453386][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18883'. [ 1064.910923][T17727] __nla_validate_parse: 2 callbacks suppressed [ 1064.910952][T17727] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18885'. [ 1066.186092][T17720] team0: Port device team_slave_0 removed [ 1066.212533][T17729] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1066.267232][T17730] bond17 (unregistering): Released all slaves [ 1066.763509][T17749] syzkaller1: entered promiscuous mode [ 1066.774342][T17749] syzkaller1: entered allmulticast mode [ 1066.978221][T13767] IPVS: starting estimator thread 0... [ 1067.018345][T17758] lo speed is unknown, defaulting to 1000 [ 1067.026736][T17758] gre0 speed is unknown, defaulting to 1000 [ 1067.069037][T17764] IPVS: using max 30 ests per chain, 72000 per kthread [ 1067.158959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1067.167019][ C1] lec:lec_tx_timeout: lec0 [ 1067.171767][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1067.208397][T17766] netlink: 'syz.3.18892': attribute type 2 has an invalid length. [ 1067.231127][T17766] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18892'. [ 1067.487662][T17775] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.18895'. [ 1067.579614][T17775] syzkaller1: entered promiscuous mode [ 1067.585246][T17775] syzkaller1: entered allmulticast mode [ 1067.745984][T17780] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18897'. [ 1068.329439][T17812] netlink: 'syz.0.18904': attribute type 13 has an invalid length. [ 1068.337432][T17812] netlink: 'syz.0.18904': attribute type 17 has an invalid length. [ 1068.400266][T17812] netlink: 'syz.0.18904': attribute type 27 has an invalid length. [ 1068.737847][T17825] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1068.862541][T17830] netlink: 488 bytes leftover after parsing attributes in process `syz.2.18908'. [ 1068.893215][T17830] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.18908'. [ 1069.123478][T17841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18901'. [ 1069.168852][T17841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18901'. [ 1070.258691][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18915'. [ 1070.432895][T17860] ip6gre0: entered promiscuous mode [ 1070.469460][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18915'. [ 1070.583752][T17868] lo speed is unknown, defaulting to 1000 [ 1070.591563][T17868] gre0 speed is unknown, defaulting to 1000 [ 1071.385017][T17897] netlink: 'syz.1.18923': attribute type 89 has an invalid length. [ 1071.687175][T17901] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.18924'. [ 1071.745385][T17901] net_ratelimit: 430 callbacks suppressed [ 1071.745408][T17901] openvswitch: netlink: Key type 11488 is out of range max 32 [ 1072.052921][T17909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18926'. [ 1072.179219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1072.187374][ C1] lec:lec_tx_timeout: lec0 [ 1072.192652][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1072.275649][T17909] tipc: Resetting bearer [ 1072.299015][T17909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.314636][T17909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1072.332154][T13767] gre0 speed is unknown, defaulting to 1000 [ 1072.342231][T13767] syz1: Port: 1 Link ACTIVE [ 1072.346939][T13767] gre0 speed is unknown, defaulting to 1000 [ 1072.957728][T17928] lo speed is unknown, defaulting to 1000 [ 1072.984041][T17928] gre0 speed is unknown, defaulting to 1000 [ 1073.671082][T17947] lo speed is unknown, defaulting to 1000 [ 1073.877075][T17947] gre0 speed is unknown, defaulting to 1000 [ 1074.871122][T17975] lo speed is unknown, defaulting to 1000 [ 1074.882592][T17975] gre0 speed is unknown, defaulting to 1000 [ 1074.889754][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18947'. [ 1074.901136][T17987] netlink: 'syz.4.18947': attribute type 2 has an invalid length. [ 1074.962280][T17988] netlink: 'syz.4.18947': attribute type 2 has an invalid length. [ 1074.991847][T17987] !9: entered promiscuous mode [ 1075.012124][T17988] !9: left promiscuous mode [ 1075.072547][T17990] netlink: 'syz.2.18948': attribute type 1 has an invalid length. [ 1075.734995][T18009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18956'. [ 1076.196746][T18025] xt_hashlimit: size too large, truncated to 1048576 [ 1076.564736][T18032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18961'. [ 1076.920589][T18039] netlink: 'syz.2.18964': attribute type 1 has an invalid length. [ 1076.939415][T18039] netlink: 240 bytes leftover after parsing attributes in process `syz.2.18964'. [ 1076.981871][T18039] veth0: Caught tx_queue_len zero misconfig [ 1077.100684][T18049] xt_TCPMSS: Only works on TCP SYN packets [ 1077.142817][T18049] syzkaller0: entered promiscuous mode [ 1077.158818][T18049] syzkaller0: entered allmulticast mode [ 1077.208605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1077.216691][ C1] lec:lec_tx_timeout: lec0 [ 1077.221451][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1077.288479][T18061] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1077.328745][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18965'. [ 1079.902571][T18072] lo speed is unknown, defaulting to 1000 [ 1079.913509][T18051] lo speed is unknown, defaulting to 1000 [ 1079.930301][T18051] gre0 speed is unknown, defaulting to 1000 [ 1080.069364][T18081] netlink: 'syz.2.18973': attribute type 5 has an invalid length. [ 1080.229091][T18072] lo speed is unknown, defaulting to 1000 [ 1080.235953][T18072] lo speed is unknown, defaulting to 1000 [ 1081.300495][ T5126] lo speed is unknown, defaulting to 1000 [ 1081.319479][T18100] tipc: Enabled bearer , priority 0 [ 1081.340306][T18100] syzkaller0: entered promiscuous mode [ 1081.347021][T18072] infiniband syz0: set active [ 1081.356234][T18100] syzkaller0: entered allmulticast mode [ 1081.358743][T18072] infiniband syz0: added lo [ 1081.368275][T18072] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1081.425626][T18072] infiniband syz0: Couldn't open port 1 [ 1081.442837][T18100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18980'. [ 1081.476190][T18100] tipc: Resetting bearer [ 1081.492749][T18106] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1081.525611][T18099] tipc: Resetting bearer [ 1081.572416][T18072] RDS/IB: syz0: added [ 1081.580361][T18072] smc: adding ib device syz0 with port count 1 [ 1081.586653][T18072] smc: ib device syz0 port 1 has no pnetid [ 1081.595723][T18099] tipc: Disabling bearer [ 1081.639521][T13762] lo speed is unknown, defaulting to 1000 [ 1081.646760][T18072] lo speed is unknown, defaulting to 1000 [ 1081.928520][T18115] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1082.096161][T18072] lo speed is unknown, defaulting to 1000 [ 1082.172310][T18119] netlink: 'syz.1.18986': attribute type 21 has an invalid length. [ 1082.209612][T18119] IPv6: NLM_F_CREATE should be specified when creating new route [ 1082.337399][T18119] tipc: Resetting bearer [ 1082.510102][T18124] lo speed is unknown, defaulting to 1000 [ 1082.530800][T18124] gre0 speed is unknown, defaulting to 1000 [ 1082.602084][T18072] lo speed is unknown, defaulting to 1000 [ 1082.998590][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1083.006699][ C1] lec:lec_tx_timeout: lec0 [ 1083.011866][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1083.139005][T18136] lo speed is unknown, defaulting to 1000 [ 1083.164572][T18136] gre0 speed is unknown, defaulting to 1000 [ 1083.431506][T18072] lo speed is unknown, defaulting to 1000 [ 1083.888310][T18124] lo speed is unknown, defaulting to 1000 [ 1084.412867][T18136] lo speed is unknown, defaulting to 1000 [ 1084.776427][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18993'. [ 1084.830339][T18168] tipc: New replicast peer: 255.255.255.255 [ 1084.837462][T18168] tipc: Enabled bearer , priority 26 [ 1084.993413][T18072] lo speed is unknown, defaulting to 1000 [ 1085.593022][T18180] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1085.829476][T18182] netlink: 'syz.4.18997': attribute type 4 has an invalid length. [ 1085.876970][ T9818] lo speed is unknown, defaulting to 1000 [ 1085.885014][T18182] netlink: 'syz.4.18997': attribute type 4 has an invalid length. [ 1085.895518][ T9818] syz0: Port: 1 Link DOWN [ 1085.905447][T13767] lo speed is unknown, defaulting to 1000 [ 1085.933990][ T9818] lo speed is unknown, defaulting to 1000 [ 1085.945938][ T9818] syz0: Port: 1 Link ACTIVE [ 1086.896521][T18201] tipc: Failed to remove unknown binding: 66,0,0/1024:273728102/273728104 [ 1086.998251][T18204] tipc: Failed to remove unknown binding: 66,0,0/1024:273728102/273728104 [ 1087.875629][T18210] lo speed is unknown, defaulting to 1000 [ 1087.930265][T18221] gretap2: entered promiscuous mode [ 1087.944860][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19005'. [ 1087.960911][T18221] batman_adv: batadv0: Adding interface: gretap2 [ 1088.005811][T18221] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1088.038596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1088.046792][ C1] lec:lec_tx_timeout: lec0 [ 1088.052185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1088.109152][T18221] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1088.215857][T18210] gre0 speed is unknown, defaulting to 1000 [ 1088.215883][T18219] lo speed is unknown, defaulting to 1000 [ 1088.751781][T18210] lo speed is unknown, defaulting to 1000 [ 1088.751915][T18219] gre0 speed is unknown, defaulting to 1000 [ 1088.919117][ T5126] page_pool_release_retry() stalled pool shutdown: id 176, 1 inflight 181 sec [ 1089.445977][T18219] lo speed is unknown, defaulting to 1000 [ 1089.552693][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19009'. [ 1089.602858][T18242] ieee802154 phy0 wpan0: encryption failed: -126 [ 1089.772156][ T30] audit: type=1107 audit(1775308737.957:21): pid=18244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1089.791816][T18246] syzkaller0: entered promiscuous mode [ 1089.804888][T18246] syzkaller0: entered allmulticast mode [ 1089.831447][T18246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19011'. [ 1089.865459][T18246] bond0: entered promiscuous mode [ 1089.879061][T18246] batadv_slave_0: entered promiscuous mode [ 1089.896237][T18246] bond0: left promiscuous mode [ 1089.906346][T18246] batadv_slave_0: left promiscuous mode [ 1090.839457][T18261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.554808][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19018'. [ 1091.760492][T18289] tipc: Resetting bearer [ 1091.901608][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19018'. [ 1092.375600][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19022'. [ 1092.396383][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19022'. [ 1092.543616][T18314] tipc: Failed to remove unknown binding: 66,0,0/2886997007:779355809/779355811 [ 1092.567226][T18314] tipc: Failed to remove unknown binding: 66,0,0/2886997007:779355809/779355811 [ 1092.624213][T18320] xt_hashlimit: size too large, truncated to 1048576 [ 1093.059200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1093.067307][ C1] lec:lec_tx_timeout: lec0 [ 1093.315998][T18338] batman_adv: batadv0: Interface deactivated: gretap4 [ 1093.421064][ T2050] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.456743][ T2050] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.488268][ T2050] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.727444][ T2050] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.108054][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19035'. [ 1094.165836][ T5829] block nbd0: Receive control failed (result -1) [ 1094.357763][T18389] lo speed is unknown, defaulting to 1000 [ 1094.406543][T18389] gre0 speed is unknown, defaulting to 1000 [ 1094.824027][T18407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1095.066319][T18419] netlink: 41 bytes leftover after parsing attributes in process `syz.1.19040'. [ 1095.107148][T18419] netlink: 116 bytes leftover after parsing attributes in process `syz.1.19040'. [ 1095.139602][T18419] netlink: 41 bytes leftover after parsing attributes in process `syz.1.19040'. [ 1095.346913][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19042'. [ 1095.367060][T18426] lo speed is unknown, defaulting to 1000 [ 1095.424281][ T5829] block nbd4: Receive control failed (result -1) [ 1095.458853][T18426] gre0 speed is unknown, defaulting to 1000 [ 1095.467101][T18389] lo speed is unknown, defaulting to 1000 [ 1095.715950][T18443] veth1_macvtap: renamed from vlan1 [ 1096.122900][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19047'. [ 1096.172394][T18455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.202343][ T2049] bond0: (slave ip6gretap2): link status definitely down, disabling slave [ 1096.231948][ T2049] bond0: now running without any active interface! [ 1096.376955][T18426] lo speed is unknown, defaulting to 1000 [ 1096.529761][T18469] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1096.594132][T18467] lo speed is unknown, defaulting to 1000 [ 1096.652210][T18467] gre0 speed is unknown, defaulting to 1000 [ 1097.425892][T18467] lo speed is unknown, defaulting to 1000 [ 1097.911968][T18500] netlink: 'syz.3.19053': attribute type 1 has an invalid length. [ 1097.942709][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19053'. [ 1098.003460][T18500] netlink: 148 bytes leftover after parsing attributes in process `syz.3.19053'. [ 1098.660912][T18518] netlink: 140 bytes leftover after parsing attributes in process `syz.4.19055'. [ 1098.694669][T18518] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1098.780884][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19055'. [ 1098.830924][T18524] openvswitch: netlink: Flow key attr not present in new flow. [ 1100.829897][T18570] netlink: 'syz.1.19063': attribute type 24 has an invalid length. [ 1100.837891][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19063'. [ 1100.903486][T18570] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1101.110064][T18580] lo speed is unknown, defaulting to 1000 [ 1101.130519][T18580] gre0 speed is unknown, defaulting to 1000 [ 1101.141418][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19067'. [ 1101.165743][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19067'. [ 1101.189005][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19069'. [ 1101.220963][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19069'. [ 1101.379580][T18596] netlink: 'syz.4.19071': attribute type 142 has an invalid length. [ 1101.923179][T18580] lo speed is unknown, defaulting to 1000 [ 1102.511803][T18623] netlink: 'syz.3.19078': attribute type 3 has an invalid length. [ 1102.694911][T18625] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1102.743668][T18633] lo speed is unknown, defaulting to 1000 [ 1102.780809][T18633] gre0 speed is unknown, defaulting to 1000 [ 1102.835702][T18627] netlink: 'syz.1.19081': attribute type 21 has an invalid length. [ 1102.991474][T18627] netlink: 'syz.1.19081': attribute type 1 has an invalid length. [ 1103.009017][T18627] netlink: 124 bytes leftover after parsing attributes in process `syz.1.19081'. [ 1103.197474][T18633] lo speed is unknown, defaulting to 1000 [ 1103.289751][T18644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19085'. [ 1103.311342][T18644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19085'. [ 1103.338977][T18644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19085'. [ 1103.569256][T18653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19087'. [ 1104.507096][T18666] syzkaller0: entered promiscuous mode [ 1104.515066][T18666] syzkaller0: entered allmulticast mode [ 1107.024499][T18718] [ 1107.026931][T18718] ====================================================== [ 1107.033967][T18718] WARNING: possible circular locking dependency detected [ 1107.041039][T18718] syzkaller #0 Not tainted [ 1107.045493][T18718] ------------------------------------------------------ [ 1107.052548][T18718] syz.0.19097/18718 is trying to acquire lock: [ 1107.058757][T18718] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1107.068123][T18718] [ 1107.068123][T18718] but task is already holding lock: [ 1107.075504][T18718] ffff8880315db860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1107.085211][T18718] [ 1107.085211][T18718] which lock already depends on the new lock. [ 1107.085211][T18718] [ 1107.095723][T18718] [ 1107.095723][T18718] the existing dependency chain (in reverse order) is: [ 1107.104760][T18718] [ 1107.104760][T18718] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1107.112688][T18718] lock_sock_nested+0x41/0x100 [ 1107.118086][T18718] mptcp_connect+0x4c3/0x830 [ 1107.123217][T18718] __inet_stream_connect+0x25a/0xdd0 [ 1107.129043][T18718] inet_stream_connect+0x66/0xa0 [ 1107.134535][T18718] __sys_connect+0x312/0x450 [ 1107.139679][T18718] __x64_sys_connect+0x7a/0x90 [ 1107.145004][T18718] do_syscall_64+0x14d/0xf80 [ 1107.150153][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.156590][T18718] [ 1107.156590][T18718] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1107.164430][T18718] lock_sock_nested+0x41/0x100 [ 1107.169731][T18718] inet_shutdown+0x6a/0x390 [ 1107.174784][T18718] nbd_mark_nsock_dead+0x2e9/0x560 [ 1107.180448][T18718] recv_work+0x1c7f/0x1d90 [ 1107.185413][T18718] process_scheduled_works+0xb6e/0x18c0 [ 1107.191546][T18718] worker_thread+0xa53/0xfc0 [ 1107.196723][T18718] kthread+0x388/0x470 [ 1107.201335][T18718] ret_from_fork+0x51e/0xb90 [ 1107.206471][T18718] ret_from_fork_asm+0x1a/0x30 [ 1107.211791][T18718] [ 1107.211791][T18718] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1107.219471][T18718] __mutex_lock+0x19f/0x1300 [ 1107.224605][T18718] nbd_queue_rq+0x37b/0x1100 [ 1107.229745][T18718] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1107.235845][T18718] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1107.242722][T18718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1107.249255][T18718] blk_mq_run_hw_queue+0x348/0x4f0 [ 1107.254909][T18718] blk_mq_dispatch_list+0xd16/0xe10 [ 1107.260655][T18718] blk_mq_flush_plug_list+0x48d/0x570 [ 1107.266581][T18718] __blk_flush_plug+0x3ed/0x4d0 [ 1107.271992][T18718] __submit_bio+0x28d/0x580 [ 1107.277045][T18718] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1107.283228][T18718] block_read_full_folio+0x599/0x830 [ 1107.289081][T18718] filemap_read_folio+0x137/0x3b0 [ 1107.294673][T18718] do_read_cache_folio+0x358/0x590 [ 1107.300335][T18718] read_part_sector+0xb6/0x2b0 [ 1107.305650][T18718] adfspart_check_ICS+0xa5/0xa40 [ 1107.311156][T18718] bdev_disk_changed+0x7ba/0x1550 [ 1107.316916][T18718] blkdev_get_whole+0x380/0x510 [ 1107.322307][T18718] bdev_open+0x31e/0xd30 [ 1107.327104][T18718] blkdev_open+0x470/0x610 [ 1107.332067][T18718] do_dentry_open+0x785/0x14e0 [ 1107.337469][T18718] vfs_open+0x3b/0x340 [ 1107.342088][T18718] path_openat+0x2e08/0x3860 [ 1107.347221][T18718] do_file_open+0x23e/0x4a0 [ 1107.352264][T18718] do_sys_openat2+0x113/0x200 [ 1107.357576][T18718] __x64_sys_openat+0x138/0x170 [ 1107.362973][T18718] do_syscall_64+0x14d/0xf80 [ 1107.368114][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.374560][T18718] [ 1107.374560][T18718] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1107.381823][T18718] __mutex_lock+0x19f/0x1300 [ 1107.386972][T18718] nbd_queue_rq+0xc6/0x1100 [ 1107.392025][T18718] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1107.398113][T18718] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1107.405034][T18718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1107.411583][T18718] blk_mq_run_hw_queue+0x348/0x4f0 [ 1107.417243][T18718] blk_mq_dispatch_list+0xd16/0xe10 [ 1107.422989][T18718] blk_mq_flush_plug_list+0x48d/0x570 [ 1107.428914][T18718] __blk_flush_plug+0x3ed/0x4d0 [ 1107.434319][T18718] __submit_bio+0x28d/0x580 [ 1107.439413][T18718] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1107.445590][T18718] block_read_full_folio+0x599/0x830 [ 1107.451419][T18718] filemap_read_folio+0x137/0x3b0 [ 1107.457007][T18718] do_read_cache_folio+0x358/0x590 [ 1107.462662][T18718] read_part_sector+0xb6/0x2b0 [ 1107.467975][T18718] adfspart_check_ICS+0xa5/0xa40 [ 1107.473457][T18718] bdev_disk_changed+0x7ba/0x1550 [ 1107.479022][T18718] blkdev_get_whole+0x380/0x510 [ 1107.484427][T18718] bdev_open+0x31e/0xd30 [ 1107.489220][T18718] blkdev_open+0x470/0x610 [ 1107.494178][T18718] do_dentry_open+0x785/0x14e0 [ 1107.499487][T18718] vfs_open+0x3b/0x340 [ 1107.504450][T18718] path_openat+0x2e08/0x3860 [ 1107.509585][T18718] do_file_open+0x23e/0x4a0 [ 1107.514629][T18718] do_sys_openat2+0x113/0x200 [ 1107.519880][T18718] __x64_sys_openat+0x138/0x170 [ 1107.525281][T18718] do_syscall_64+0x14d/0xf80 [ 1107.530423][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.536865][T18718] [ 1107.536865][T18718] -> #3 (set->srcu){.+.+}-{0:0}: [ 1107.544019][T18718] __synchronize_srcu+0xca/0x300 [ 1107.549510][T18718] elevator_switch+0x1e8/0x7a0 [ 1107.554820][T18718] elevator_change+0x2cc/0x450 [ 1107.560130][T18718] elevator_set_default+0x36c/0x430 [ 1107.565874][T18718] blk_register_queue+0x366/0x430 [ 1107.571449][T18718] __add_disk+0x677/0xd50 [ 1107.576334][T18718] add_disk_fwnode+0xfb/0x480 [ 1107.581576][T18718] nbd_dev_add+0x72c/0xb50 [ 1107.586546][T18718] nbd_init+0x168/0x1f0 [ 1107.591249][T18718] do_one_initcall+0x250/0x8d0 [ 1107.596650][T18718] do_initcall_level+0x104/0x190 [ 1107.602141][T18718] do_initcalls+0x59/0xa0 [ 1107.607041][T18718] kernel_init_freeable+0x2a6/0x3e0 [ 1107.612792][T18718] kernel_init+0x1d/0x1d0 [ 1107.617661][T18718] ret_from_fork+0x51e/0xb90 [ 1107.622799][T18718] ret_from_fork_asm+0x1a/0x30 [ 1107.628115][T18718] [ 1107.628115][T18718] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1107.635963][T18718] __mutex_lock+0x19f/0x1300 [ 1107.641105][T18718] elevator_change+0x1b3/0x450 [ 1107.646413][T18718] elevator_set_none+0xb5/0x140 [ 1107.651842][T18718] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1107.658197][T18718] nbd_start_device+0x17f/0xb10 [ 1107.663588][T18718] nbd_genl_connect+0x165b/0x1cf0 [ 1107.669151][T18718] genl_family_rcv_msg_doit+0x22a/0x330 [ 1107.675245][T18718] genl_rcv_msg+0x61c/0x7a0 [ 1107.680291][T18718] netlink_rcv_skb+0x232/0x4b0 [ 1107.685607][T18718] genl_rcv+0x28/0x40 [ 1107.690152][T18718] netlink_unicast+0x80f/0x9b0 [ 1107.695466][T18718] netlink_sendmsg+0x813/0xb40 [ 1107.700772][T18718] ____sys_sendmsg+0x972/0x9f0 [ 1107.706084][T18718] ___sys_sendmsg+0x2a5/0x360 [ 1107.711307][T18718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1107.716799][T18718] do_syscall_64+0x14d/0xf80 [ 1107.722034][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.728479][T18718] [ 1107.728479][T18718] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1107.737111][T18718] blk_alloc_queue+0x546/0x680 [ 1107.742423][T18718] __blk_mq_alloc_disk+0x197/0x390 [ 1107.748164][T18718] nbd_dev_add+0x499/0xb50 [ 1107.753133][T18718] nbd_init+0x168/0x1f0 [ 1107.757828][T18718] do_one_initcall+0x250/0x8d0 [ 1107.763141][T18718] do_initcall_level+0x104/0x190 [ 1107.768628][T18718] do_initcalls+0x59/0xa0 [ 1107.773506][T18718] kernel_init_freeable+0x2a6/0x3e0 [ 1107.779251][T18718] kernel_init+0x1d/0x1d0 [ 1107.784125][T18718] ret_from_fork+0x51e/0xb90 [ 1107.789257][T18718] ret_from_fork_asm+0x1a/0x30 [ 1107.794571][T18718] [ 1107.794571][T18718] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1107.801809][T18718] __lock_acquire+0x15a5/0x2cf0 [ 1107.807203][T18718] lock_acquire+0xf0/0x2e0 [ 1107.812173][T18718] fs_reclaim_acquire+0x71/0x100 [ 1107.817682][T18718] __kmalloc_cache_noprof+0x40/0x660 [ 1107.823541][T18718] tcp_fastopen_defer_connect+0x250/0x390 [ 1107.829924][T18718] tcp_v4_connect+0x10ac/0x19b0 [ 1107.835346][T18718] tcp_v6_connect+0xbbb/0x1b10 [ 1107.840666][T18718] __inet_stream_connect+0x25a/0xdd0 [ 1107.846530][T18718] inet_stream_connect+0x66/0xa0 [ 1107.852020][T18718] __sys_connect+0x312/0x450 [ 1107.857168][T18718] __x64_sys_connect+0x7a/0x90 [ 1107.862494][T18718] do_syscall_64+0x14d/0xf80 [ 1107.867650][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.874123][T18718] [ 1107.874123][T18718] other info that might help us debug this: [ 1107.874123][T18718] [ 1107.884459][T18718] Chain exists of: [ 1107.884459][T18718] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1107.884459][T18718] [ 1107.897438][T18718] Possible unsafe locking scenario: [ 1107.897438][T18718] [ 1107.904902][T18718] CPU0 CPU1 [ 1107.910280][T18718] ---- ---- [ 1107.915660][T18718] lock(k-sk_lock-AF_INET6); [ 1107.920364][T18718] lock(sk_lock-AF_INET6); [ 1107.927403][T18718] lock(k-sk_lock-AF_INET6); [ 1107.934615][T18718] lock(fs_reclaim); [ 1107.938618][T18718] [ 1107.938618][T18718] *** DEADLOCK *** [ 1107.938618][T18718] [ 1107.946781][T18718] 1 lock held by syz.0.19097/18718: [ 1107.952003][T18718] #0: ffff8880315db860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1107.962134][T18718] [ 1107.962134][T18718] stack backtrace: [ 1107.968139][T18718] CPU: 0 UID: 0 PID: 18718 Comm: syz.0.19097 Not tainted syzkaller #0 PREEMPT(full) [ 1107.968164][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1107.968176][T18718] Call Trace: [ 1107.968185][T18718] [ 1107.968194][T18718] dump_stack_lvl+0xe8/0x150 [ 1107.968225][T18718] print_circular_bug+0x2e1/0x300 [ 1107.968256][T18718] check_noncircular+0x12e/0x150 [ 1107.968285][T18718] __lock_acquire+0x15a5/0x2cf0 [ 1107.968311][T18718] ? __tcp_get_metrics+0x7ec/0x870 [ 1107.968342][T18718] lock_acquire+0xf0/0x2e0 [ 1107.968364][T18718] ? __kmalloc_cache_noprof+0x40/0x660 [ 1107.968389][T18718] fs_reclaim_acquire+0x71/0x100 [ 1107.968410][T18718] ? __kmalloc_cache_noprof+0x40/0x660 [ 1107.968429][T18718] __kmalloc_cache_noprof+0x40/0x660 [ 1107.968449][T18718] ? tcp_fastopen_defer_connect+0x250/0x390 [ 1107.968480][T18718] tcp_fastopen_defer_connect+0x250/0x390 [ 1107.968508][T18718] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1107.968539][T18718] ? sk_setup_caps+0x9ef/0xc40 [ 1107.968566][T18718] ? sk_setup_caps+0x29/0xc40 [ 1107.968592][T18718] tcp_v4_connect+0x10ac/0x19b0 [ 1107.968627][T18718] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1107.968651][T18718] ? aa_label_sk_perm+0x52b/0x6e0 [ 1107.968677][T18718] ? tcp_v6_connect+0x62d/0x1b10 [ 1107.968706][T18718] tcp_v6_connect+0xbbb/0x1b10 [ 1107.968728][T18718] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1107.968759][T18718] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1107.968786][T18718] __inet_stream_connect+0x25a/0xdd0 [ 1107.968810][T18718] ? do_raw_spin_lock+0x12b/0x2f0 [ 1107.968829][T18718] ? __pfx___inet_stream_connect+0x10/0x10 [ 1107.968851][T18718] ? inet_stream_connect+0x51/0xa0 [ 1107.968872][T18718] ? __local_bh_enable_ip+0xd0/0x130 [ 1107.968898][T18718] inet_stream_connect+0x66/0xa0 [ 1107.968919][T18718] __sys_connect+0x312/0x450 [ 1107.968943][T18718] ? __pfx___sys_connect+0x10/0x10 [ 1107.968968][T18718] ? rcu_is_watching+0x15/0xb0 [ 1107.968997][T18718] __x64_sys_connect+0x7a/0x90 [ 1107.969018][T18718] do_syscall_64+0x14d/0xf80 [ 1107.969041][T18718] ? trace_irq_disable+0x3b/0x150 [ 1107.969056][T18718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.969074][T18718] ? clear_bhb_loop+0x40/0x90 [ 1107.969093][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.969112][T18718] RIP: 0033:0x7fba4c19c819 [ 1107.969130][T18718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.969146][T18718] RSP: 002b:00007fba4d0d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1107.969167][T18718] RAX: ffffffffffffffda RBX: 00007fba4c415fa0 RCX: 00007fba4c19c819 [ 1107.969181][T18718] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000006 [ 1107.969192][T18718] RBP: 00007fba4c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1107.969203][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.969214][T18718] R13: 00007fba4c416038 R14: 00007fba4c415fa0 R15: 00007ffe1ea48e88 [ 1107.969235][T18718] [ 1108.367553][T18720] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1108.468304][T18723] lo speed is unknown, defaulting to 1000 [ 1108.476393][T18723] gre0 speed is unknown, defaulting to 1000 [ 1108.568608][T18723] lo speed is unknown, defaulting to 1000 [ 1109.115561][T18725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1109.121607][T18725] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1109.135099][T18725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1109.141364][T18725] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1109.161048][T18725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1109.178853][T18725] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1109.198487][T18725] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1109.205055][T18725] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1116.042270][ T1300] lec:lec_start_xmit: lec0:No lecd attached