last executing test programs: 8.861944466s ago: executing program 2 (id=17064): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r4, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 7.460708326s ago: executing program 4 (id=17078): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 7.101963156s ago: executing program 4 (id=17081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 6.560475427s ago: executing program 1 (id=17085): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0xfffffcc7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x800) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r9}, &(0x7f00000002c0)=0x8) 6.393447874s ago: executing program 1 (id=17087): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.688687309s ago: executing program 0 (id=17090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xca4}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc70386b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="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", 0x12b}], 0x5}, 0x8bb3a321efc09a) 3.979916648s ago: executing program 1 (id=17093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000100)={'netdevsim0\x00', @ifru_mtu}) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x0, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 3.918484466s ago: executing program 4 (id=17095): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000380)="11d778de6bd15fdefac8388c0401", 0xe}, {0x0}], 0x2, 0x1) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) splice(r0, 0x0, r1, 0x0, 0x3, 0x5) 3.881798287s ago: executing program 0 (id=17096): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x40}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r0, r3, 0x0, 0x20000000002) 3.861976843s ago: executing program 1 (id=17097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x1}, {0xe0000, 0xffffff81, 0x0, 0xa, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)="1e", 0x1}], 0x1}, 0x4c00c) 3.763953616s ago: executing program 2 (id=17098): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000020000000100000f03deffff01000000010000000300000044942d00"], &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x922bac8576bdadce) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044800}, 0x200440c4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) 3.695938013s ago: executing program 3 (id=17099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/51, 0x33}], 0x1}, 0xfca}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4900ffff99de8b9bf683f339fb3c28f4c3ae4dfee02b88fd12d6434b88790e1c2ca8b00000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090029000000"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdb5b}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x38}}, 0x800) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0801000000"], 0x12f8}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x30, r3, 0x61e54000) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000340)={0x1, 0x2}) 3.400792484s ago: executing program 1 (id=17100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000001100000300000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 3.385323896s ago: executing program 2 (id=17101): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.055034058s ago: executing program 4 (id=17102): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 2.812278204s ago: executing program 0 (id=17103): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.620657277s ago: executing program 3 (id=17104): socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x1000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xfff1, 0xf}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 2.457367357s ago: executing program 0 (id=17105): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e25, 0xf, @empty, 0x4001}, 0x1c) close(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 2.456074426s ago: executing program 2 (id=17106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.397527355s ago: executing program 3 (id=17107): socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x2}}, 0x1c) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000140), 0x3, r3}, 0x38) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.313255641s ago: executing program 3 (id=17108): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000600)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0xc800) 1.966920063s ago: executing program 4 (id=17109): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r1, &(0x7f0000000300)="240000001a005f03e494d9ecfd8900a9c4244b4b0a150c000800e6331d8ddcccfe66fcd7", 0x24) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004018}, 0x4000) 520.843467ms ago: executing program 0 (id=17110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 449.746654ms ago: executing program 4 (id=17111): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000000a80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000040)=""/55, 0x37}], 0x2, &(0x7f00000004c0)}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/63, 0x3f}, {0xfffffffffffffffd}, {&(0x7f0000000640)=""/40, 0x28}, {0x0}, {&(0x7f0000000bc0)=""/35, 0x23}], 0x6, &(0x7f0000000940)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}], 0x2, 0x2001, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 445.037461ms ago: executing program 1 (id=17112): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000380)="11d778de6bd15fdefac8388c0401", 0xe}, {0x0}], 0x2, 0x1) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) splice(r0, 0x0, r1, 0x0, 0x3, 0x5) 393.556469ms ago: executing program 2 (id=17113): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040040) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x40000}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1004000, 0x800, 0x3, 0x3}, 0x1c) 393.162375ms ago: executing program 3 (id=17114): unshare(0x2c020400) read(0xffffffffffffffff, &(0x7f00000005c0)=""/93, 0x5d) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000380)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0x68}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x10) 251.48939ms ago: executing program 0 (id=17115): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="c4010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e6574646576"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket(0x15, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000018c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x14, 0x2, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 33.553365ms ago: executing program 3 (id=17116): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 2 (id=17117): unshare(0x22020600) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0136030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x20000044) kernel console output (not intermixed with test programs): tunl0 may have been left with an inconsistent configuration, please check. [ 602.464385][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14200'. [ 602.476696][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14200'. [ 602.853930][ T3873] wg1 speed is unknown, defaulting to 1000 [ 603.257905][ T3873] wlan1 speed is unknown, defaulting to 1000 [ 603.276533][ T3873] lo speed is unknown, defaulting to 1000 [ 603.324856][ T3936] netlink: 'syz.3.14217': attribute type 10 has an invalid length. [ 604.310995][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14226'. [ 604.333856][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14226'. [ 604.362686][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14226'. [ 604.372954][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14226'. [ 604.880627][ T3977] netlink: 'syz.4.14233': attribute type 4 has an invalid length. [ 604.936195][ T3977] netlink: 'syz.4.14233': attribute type 4 has an invalid length. [ 604.959276][ T3979] netlink: 'syz.3.14235': attribute type 83 has an invalid length. [ 605.403720][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14242'. [ 605.428656][ T3996] netlink: 'syz.4.14242': attribute type 9 has an invalid length. [ 605.549160][ T4000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14244'. [ 605.822806][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14250'. [ 606.186290][ T4018] sit0: left promiscuous mode [ 606.193144][ T4018] wg1: left promiscuous mode [ 606.199886][ T4018] wg1: left allmulticast mode [ 606.207560][ T4018] xfrm0: left promiscuous mode [ 606.212669][ T4018] xfrm0: left allmulticast mode [ 606.223540][ T4018] bridge3: left promiscuous mode [ 606.230134][ T4018] bridge3: left allmulticast mode [ 606.236996][ T4018] bridge4: left promiscuous mode [ 606.242318][ T4018] ip6tnl3: left allmulticast mode [ 606.249020][ T4018] macsec1: left promiscuous mode [ 606.254113][ T4018] macsec1: left allmulticast mode [ 606.261308][ T4018] macsec2: left promiscuous mode [ 606.268086][ T4018] ip6gre1: left promiscuous mode [ 606.273322][ T4018] ip6gre1: left allmulticast mode [ 606.279734][ T4018] vlan1: left allmulticast mode [ 606.284897][ T4018] bridge_slave_0: left allmulticast mode [ 606.324420][ T3987] wg1 speed is unknown, defaulting to 1000 [ 606.868209][ T3987] wlan1 speed is unknown, defaulting to 1000 [ 606.887970][ T3987] lo speed is unknown, defaulting to 1000 [ 607.090885][ T4053] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14264'. [ 607.380605][ T4060] netlink: 165 bytes leftover after parsing attributes in process `syz.2.14266'. [ 608.652958][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14285'. [ 608.872042][ T4112] netlink: 'syz.3.14289': attribute type 1 has an invalid length. [ 608.936284][ T4116] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14288'. [ 609.010616][ T4112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 609.099765][ T4096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.113216][ T4115] bond4: (slave geneve3): making interface the new active one [ 609.120203][ T4096] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 609.133244][ T4115] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 609.176226][ T1446] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 609.206178][ T1446] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 609.214481][ T1446] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 609.270203][ T1446] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 609.372405][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14294'. [ 609.439974][ T4129] bond5: entered promiscuous mode [ 609.446665][ T4129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.480395][ T4135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.534114][ T4135] bond5: (slave ip6tnl6): The slave device specified does not support setting the MAC address [ 609.590235][ T4135] bond5: (slave ip6tnl6): Error -95 calling set_mac_address [ 609.781514][ T4145] syzkaller1: entered promiscuous mode [ 609.789259][ T4145] syzkaller1: entered allmulticast mode [ 610.267350][ T4174] netlink: 'syz.3.14311': attribute type 2 has an invalid length. [ 610.295908][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14311'. [ 610.335238][ T4177] sit2: entered allmulticast mode [ 610.494363][ T4193] netlink: 'syz.0.14319': attribute type 30 has an invalid length. [ 610.830581][ T4206] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.14326'. [ 610.987578][ T4215] netlink: 'syz.0.14330': attribute type 8 has an invalid length. [ 611.005307][ T4215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14330'. [ 611.169583][ T4229] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 611.452769][ T4242] ip6tnl4: entered allmulticast mode [ 611.776304][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14344'. [ 611.798393][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14344'. [ 611.830252][ T107] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.839355][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14344'. [ 611.870591][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14344'. [ 611.880606][ T107] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.906393][ T107] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.927125][ T107] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.581485][ T4291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14360'. [ 612.777970][ T4305] nbd: couldn't find a device at index 0 [ 612.930407][ T4313] netlink: 'syz.1.14373': attribute type 7 has an invalid length. [ 612.957112][ T3022] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.957185][ T4313] netlink: 'syz.1.14373': attribute type 7 has an invalid length. [ 612.968187][ T3022] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.002415][ T3022] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.026554][ T3022] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.328133][ T4332] bridge0: port 5(gretap0) entered blocking state [ 613.334743][ T4332] bridge0: port 5(gretap0) entered forwarding state [ 613.350480][ T4332] 8021q: adding VLAN 0 to HW filter on device .` [ 613.359403][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.373039][ T4332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.456311][ T775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.520285][ T4342] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.14384'. [ 613.723170][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14391'. [ 613.841543][ T4362] "syz.4.14394" (4362) uses obsolete ecb(arc4) skcipher [ 613.886216][ T775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.192049][ T4387] netlink: 'syz.4.14404': attribute type 9 has an invalid length. [ 614.202656][ T4387] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.14404'. [ 614.266434][ T155] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.423983][ T4403] netlink: 'syz.1.14412': attribute type 22 has an invalid length. [ 614.440938][ T4403] netlink: 'syz.1.14412': attribute type 22 has an invalid length. [ 615.307861][ T1446] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.316945][ T1446] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.366975][ T4456] syzkaller1: entered promiscuous mode [ 615.372485][ T4456] syzkaller1: entered allmulticast mode [ 615.527107][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.558183][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.584883][ T4461] bond0 (unregistering): Released all slaves [ 615.595385][ T5829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.800518][ T4486] netlink: 'syz.4.14447': attribute type 22 has an invalid length. [ 615.809561][ T4486] netlink: 'syz.4.14447': attribute type 22 has an invalid length. [ 615.949096][ T4495] __nla_validate_parse: 10 callbacks suppressed [ 615.949110][ T4495] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14451'. [ 616.587788][ T4536] netlink: 'syz.2.14469': attribute type 2 has an invalid length. [ 616.776814][ T4552] netlink: 'syz.3.14476': attribute type 1 has an invalid length. [ 617.218982][ T4584] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14490'. [ 617.267574][ T4586] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20001 [ 617.430203][ T4599] bond6: option ad_select: invalid value (34) [ 617.452638][ T4602] netlink: 'syz.1.14498': attribute type 1 has an invalid length. [ 617.465117][ T4599] bond6 (unregistering): Released all slaves [ 617.587664][ T4602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 617.872081][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14503'. [ 618.153422][ T4644] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.14514'. [ 618.252006][ T4652] IPv6: NLM_F_CREATE should be specified when creating new route [ 618.271915][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14518'. [ 618.730130][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14531'. [ 618.816639][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14531'. [ 619.136868][ T4709] @0Ù: renamed from bond_slave_1 [ 619.370688][ T4726] netlink: 'syz.4.14551': attribute type 25 has an invalid length. [ 619.379271][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14551'. [ 619.404418][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.422585][ T4726] netlink: 'syz.4.14551': attribute type 25 has an invalid length. [ 619.437032][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14551'. [ 619.450574][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.460516][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.467427][ T4732] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967280. macoff=96 [ 619.478719][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.545766][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 619.590756][ T4736] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14555'. [ 619.714667][ T4744] netlink: 'syz.2.14560': attribute type 1 has an invalid length. [ 619.724017][ T4744] netlink: 'syz.2.14560': attribute type 22 has an invalid length. [ 620.352457][ T4787] pim6reg1: entered promiscuous mode [ 620.388700][ T4787] pim6reg1: entered allmulticast mode [ 621.099298][ T4818] __nla_validate_parse: 3 callbacks suppressed [ 621.099316][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14589'. [ 621.116493][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14589'. [ 621.297985][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14590'. [ 621.317139][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14590'. [ 622.267658][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14607'. [ 622.289607][ T4866] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14608'. [ 622.455724][ T4864] netlink: 'syz.4.14607': attribute type 7 has an invalid length. [ 622.486332][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14607'. [ 622.516084][ T4864] netlink: 'syz.4.14607': attribute type 7 has an invalid length. [ 623.128558][ T4920] netlink: 'syz.3.14632': attribute type 9 has an invalid length. [ 623.176968][ T4920] netlink: 'syz.3.14632': attribute type 11 has an invalid length. [ 623.184922][ T4920] netlink: 'syz.3.14632': attribute type 12 has an invalid length. [ 623.226986][ T4920] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.14632'. [ 623.267662][ T4922] syzkaller1: entered promiscuous mode [ 623.273181][ T4922] syzkaller1: entered allmulticast mode [ 623.359060][ T4937] netlink: 'syz.3.14639': attribute type 7 has an invalid length. [ 623.640171][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14649'. [ 623.653191][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14648'. [ 623.785210][ T4958] bond0: entered promiscuous mode [ 623.820087][ T4958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.331097][ T5122] __nla_validate_parse: 6 callbacks suppressed [ 626.331118][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.346754][ T1808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 626.357090][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.367877][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.379541][ T5118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.396190][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.416201][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.437476][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.446736][ T1808] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 626.467359][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.497774][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.516839][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14716'. [ 626.537634][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14716'. [ 627.192790][ T5169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.213477][ T5169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.294604][ T5186] sit2: entered promiscuous mode [ 627.616471][ T5204] validate_nla: 6 callbacks suppressed [ 627.616493][ T5204] netlink: 'syz.2.14742': attribute type 13 has an invalid length. [ 628.105612][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 628.228719][ T5229] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 628.241894][ T5229] bond6 (unregistering): Released all slaves [ 628.762013][ T5259] netlink: 'syz.1.14764': attribute type 2 has an invalid length. [ 628.969325][ T5269] netlink: 'syz.0.14770': attribute type 1 has an invalid length. [ 629.432536][ T5251] wg1 speed is unknown, defaulting to 1000 [ 629.714014][ T5251] wlan1 speed is unknown, defaulting to 1000 [ 629.722936][ T5251] lo speed is unknown, defaulting to 1000 [ 630.714033][ T5324] netlink: 'syz.0.14791': attribute type 13 has an invalid length. [ 630.777085][ T155] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.777176][ T5324] netlink: 'syz.0.14791': attribute type 13 has an invalid length. [ 630.785482][ T155] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.828478][ T155] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.840020][ T155] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.536631][ T5345] syzkaller1: entered promiscuous mode [ 631.542236][ T5345] syzkaller1: entered allmulticast mode [ 632.028535][ T5385] __nla_validate_parse: 14 callbacks suppressed [ 632.028556][ T5385] netlink: 176 bytes leftover after parsing attributes in process `syz.0.14817'. [ 632.367495][ T5390] batman_adv: batadv0: Interface deactivated: macsec0 [ 632.433080][ T1808] lo speed is unknown, defaulting to 1000 [ 632.439881][ T1808] sqz0: Port: 1 Link DOWN [ 632.440461][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 632.478218][ T36] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.511105][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 632.538886][ T36] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.563617][ T5403] lo speed is unknown, defaulting to 1000 [ 632.564394][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 632.588929][ T36] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.598424][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 632.607910][ T36] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.637954][ T30] audit: type=1800 audit(1773458854.361:15): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14822" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=14998 res=0 errno=0 [ 632.769026][ T5421] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14827'. [ 632.863270][ T5427] netlink: 'syz.3.14828': attribute type 30 has an invalid length. [ 633.003048][ T5427] bond6: option arp_missed_max: invalid value (0) [ 633.023166][ T5427] bond6: option arp_missed_max: allowed values 1 - 255 [ 633.038813][ T5427] bond6 (unregistering): Released all slaves [ 633.881935][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14854'. [ 633.959999][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14857'. [ 634.702431][ T5534] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14869'. [ 634.733147][ T5534] netlink: Conntrack attr has 4 unknown bytes [ 637.612471][ T5660] pim6reg: entered allmulticast mode [ 637.686486][ T5657] pim6reg: left allmulticast mode [ 638.054765][ T5688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14930'. [ 638.079171][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14932'. [ 638.544694][ T5719] ±ÿ: Caught tx_queue_len zero misconfig [ 638.550711][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14945'. [ 638.576306][ T5722] "syz.0.14944" (5722) uses obsolete ecb(arc4) skcipher [ 638.614568][ T5721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 638.650005][ T5726] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 639.920522][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14975'. [ 640.355260][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14985'. [ 640.388550][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14985'. [ 641.377598][ T5921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.783015][ T5943] atomic_op ffff888037ab4998 conn xmit_atomic 0000000000000000 [ 644.580436][ T6027] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 644.658701][ T6029] netlink: 'syz.1.15052': attribute type 9 has an invalid length. [ 644.686217][ T6029] netlink: 'syz.1.15052': attribute type 11 has an invalid length. [ 644.694234][ T6029] netlink: 'syz.1.15052': attribute type 12 has an invalid length. [ 644.728793][ T6029] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.15052'. [ 644.745756][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 644.768655][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15052'. [ 644.997992][ T6042] netlink: 'syz.1.15055': attribute type 13 has an invalid length. [ 645.021446][ T6042] netlink: 'syz.1.15055': attribute type 17 has an invalid length. [ 645.061572][ T1446] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.080174][ T1446] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.152840][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.162200][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.178324][ T6042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.218062][ T1446] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.249767][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.866539][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.031269][ T6071] syzkaller1: entered promiscuous mode [ 646.039519][ T6071] syzkaller1: entered allmulticast mode [ 646.648779][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15081'. [ 646.662088][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15081'. [ 646.734474][ T6103] netlink: 'syz.1.15082': attribute type 11 has an invalid length. [ 646.744331][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15082'. [ 646.777694][ T6103] netlink: 'syz.1.15082': attribute type 11 has an invalid length. [ 646.786506][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15082'. [ 646.810001][ T6103] netlink: 'syz.1.15082': attribute type 11 has an invalid length. [ 646.821883][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15082'. [ 647.446186][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15095'. [ 647.484544][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.504658][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.562134][ T60] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.585049][ T60] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.173614][ T6168] nlmon0: Caught tx_queue_len zero misconfig [ 648.398612][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15118'. [ 648.951464][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15130'. [ 649.156303][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.167699][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.181055][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.201509][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.421074][ T6224] netlink: 'syz.2.15136': attribute type 11 has an invalid length. [ 649.737735][ T6210] wg1 speed is unknown, defaulting to 1000 [ 649.899288][ T6241] netlink: 'syz.1.15143': attribute type 1 has an invalid length. [ 649.976940][ T6241] bond6: entered promiscuous mode [ 649.982548][ T6241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.032518][ T6241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.039944][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 650.090768][ T6241] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 650.116340][ T6241] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 650.141968][ T6241] bond6: (slave vcan0): making interface the new active one [ 650.153032][ T6241] vcan0: entered promiscuous mode [ 650.164211][ T6241] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 650.174122][ T6210] wlan1 speed is unknown, defaulting to 1000 [ 650.214782][ T6210] lo speed is unknown, defaulting to 1000 [ 650.715023][ T6277] netlink: 'syz.1.15157': attribute type 1 has an invalid length. [ 650.791521][ T6277] bond7: entered promiscuous mode [ 650.802106][ T6277] bond7: entered allmulticast mode [ 650.808534][ T6277] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.868696][ T6279] erspan2: entered allmulticast mode [ 650.878963][ T6279] bond7: (slave erspan2): making interface the new active one [ 650.889177][ T6279] erspan2: entered promiscuous mode [ 650.899003][ T6279] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 651.225578][ T6285] syzkaller1: entered promiscuous mode [ 651.276033][ T6285] syzkaller1: entered allmulticast mode [ 652.519079][ T6320] __nla_validate_parse: 1 callbacks suppressed [ 652.519099][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15173'. [ 653.447119][ T6320] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 653.448319][ T6321] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 653.764806][ T6288] wg1 speed is unknown, defaulting to 1000 [ 653.897935][ T6346] syzkaller1: entered promiscuous mode [ 653.911743][ T6346] syzkaller1: entered allmulticast mode [ 653.991832][ T6348] netlink: 'syz.2.15181': attribute type 1 has an invalid length. [ 654.021215][ T6348] netlink: 'syz.2.15181': attribute type 1 has an invalid length. [ 654.179160][ T6288] wlan1 speed is unknown, defaulting to 1000 [ 654.190867][ T6288] lo speed is unknown, defaulting to 1000 [ 654.251420][ T6356] netlink: 'syz.4.15182': attribute type 83 has an invalid length. [ 654.342914][ T6360] syzkaller1: entered promiscuous mode [ 654.353606][ T6360] syzkaller1: entered allmulticast mode [ 654.724124][ T6372] team_slave_1: Caught tx_queue_len zero misconfig [ 655.193548][ T6389] .`: (slave dummy0): Releasing backup interface [ 655.735163][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15204'. [ 656.656222][ T6439] PKCS7: Unknown OID: [4] (bad) [ 656.661129][ T6439] PKCS7: Only support pkcs7_signedData type [ 657.009566][ T6454] netlink: 88 bytes leftover after parsing attributes in process `syz.4.15223'. [ 657.709621][ T6476] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 658.185673][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.486641][ T6501] netlink: 240 bytes leftover after parsing attributes in process `syz.0.15236'. [ 659.269588][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15245'. [ 659.296048][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15245'. [ 659.316816][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15245'. [ 659.328482][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15245'. [ 659.351229][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15247'. [ 661.688888][ T6604] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15279'. [ 661.707136][ T6604] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15279'. [ 661.809956][ T6610] netlink: 'syz.1.15282': attribute type 10 has an invalid length. [ 661.846407][ T6610] team0: Failed to send options change via netlink (err -105) [ 661.853916][ T6610] team0: Port device dummy0 added [ 661.870356][ T6611] netlink: 'syz.1.15282': attribute type 10 has an invalid length. [ 661.893816][ T6611] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 661.952175][ T6611] team0: Failed to send options change via netlink (err -105) [ 661.981522][ T6611] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 661.996483][ T6611] team0: Port device dummy0 removed [ 662.005197][ T6611] dummy0: entered promiscuous mode [ 662.037053][ T6611] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 662.202415][ T1446] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.236161][ T1446] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.244556][ T1446] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.278180][ T1446] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.875270][ T6696] gretap3: entered promiscuous mode [ 663.968638][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15315'. [ 664.011177][ T6699] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 665.242606][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15337'. [ 665.657881][ T6752] netlink: 'syz.1.15339': attribute type 2 has an invalid length. [ 665.666474][ T6752] netlink: 'syz.1.15339': attribute type 2 has an invalid length. [ 667.377427][ T6792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.066473][ T6811] netlink: 'syz.1.15361': attribute type 1 has an invalid length. [ 668.074459][ T6811] netlink: 352 bytes leftover after parsing attributes in process `syz.1.15361'. [ 668.103550][ T6811] netlink: 'syz.1.15361': attribute type 1 has an invalid length. [ 668.134681][ T6811] netlink: 352 bytes leftover after parsing attributes in process `syz.1.15361'. [ 668.512813][ T6822] netlink: 'syz.3.15368': attribute type 13 has an invalid length. [ 668.546546][ T6822] netlink: 'syz.3.15368': attribute type 17 has an invalid length. [ 668.701455][ T6822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.747416][ T9] lo speed is unknown, defaulting to 1000 [ 668.753192][ T9] sqz0: Port: 1 Link ACTIVE [ 668.768865][ T5402] lo speed is unknown, defaulting to 1000 [ 668.930078][ T6834] syzkaller1: entered promiscuous mode [ 668.946953][ T6834] syzkaller1: entered allmulticast mode [ 669.399149][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15376'. [ 669.409208][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15376'. [ 669.710953][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15380'. [ 669.729238][ T6859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.735057][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15380'. [ 669.790102][ T6859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.967944][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15383'. [ 670.756574][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15400'. [ 670.766386][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15400'. [ 670.768161][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15399'. [ 670.796705][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15399'. [ 670.831186][ T6899] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 671.610755][ T6904] wg1 speed is unknown, defaulting to 1000 [ 672.439127][ T6904] wlan1 speed is unknown, defaulting to 1000 [ 672.464682][ T6904] lo speed is unknown, defaulting to 1000 [ 672.478764][ T6919] wg1 speed is unknown, defaulting to 1000 [ 673.222260][ T6919] wlan1 speed is unknown, defaulting to 1000 [ 673.280074][ T6919] lo speed is unknown, defaulting to 1000 [ 673.708972][ T6950] netlink: 100 bytes leftover after parsing attributes in process `syz.1.15414'. [ 674.826065][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 675.030662][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15425'. [ 675.181933][ T6981] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15426'. [ 675.348707][ T6988] netlink: 'syz.1.15429': attribute type 13 has an invalid length. [ 675.951069][ T7004] xt_hashlimit: size too large, truncated to 1048576 [ 676.603636][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15445'. [ 676.628584][ T7036] gtp1: entered promiscuous mode [ 676.633564][ T7036] gtp1: entered allmulticast mode [ 676.643738][ T7038] veth1_to_bond: entered allmulticast mode [ 676.690696][ T7038] veth1_to_bond: left allmulticast mode [ 676.766754][ T7040] syzkaller1: entered promiscuous mode [ 676.784344][ T7040] syzkaller1: entered allmulticast mode [ 677.163370][ T7061] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 677.960349][ T7063] wg1 speed is unknown, defaulting to 1000 [ 678.027431][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 678.260774][ T7063] wlan1 speed is unknown, defaulting to 1000 [ 678.270610][ T7063] lo speed is unknown, defaulting to 1000 [ 678.619565][ T7118] sock: sock_set_timeout: `syz.3.15480' (pid 7118) tries to set negative timeout [ 678.818596][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15484'. [ 678.828525][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15484'. [ 678.878620][ T7127] erspan0: entered promiscuous mode [ 678.900334][ T7127] gretap0: entered promiscuous mode [ 679.714189][ T7155] bridge8: entered promiscuous mode [ 679.723359][ T7155] bridge8: entered allmulticast mode [ 679.993454][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15499'. [ 682.053888][ T7217] wg1 speed is unknown, defaulting to 1000 [ 682.318192][ T7217] wlan1 speed is unknown, defaulting to 1000 [ 682.327059][ T7217] lo speed is unknown, defaulting to 1000 [ 682.513853][ T7234] wg1 speed is unknown, defaulting to 1000 [ 682.796287][ T7247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.818563][ T7245] nbd: couldn't find a device at index 0 [ 682.947623][ T7254] netlink: 'syz.4.15530': attribute type 1 has an invalid length. [ 682.986481][ T7254] netlink: 'syz.4.15530': attribute type 1 has an invalid length. [ 682.994332][ T7254] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 683.027070][ T7259] bridge_slave_1: left allmulticast mode [ 683.034913][ T7259] bridge_slave_1: left promiscuous mode [ 683.043221][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.078715][ T7259] bridge_slave_1: entered promiscuous mode [ 683.090749][ T7259] bridge_slave_1: entered allmulticast mode [ 683.103506][ T7259] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 683.123610][ T7234] wlan1 speed is unknown, defaulting to 1000 [ 683.153304][ T7234] lo speed is unknown, defaulting to 1000 [ 684.637109][ T7256] wg1 speed is unknown, defaulting to 1000 [ 685.026397][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15546'. [ 685.059383][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15546'. [ 685.348801][ T7256] wlan1 speed is unknown, defaulting to 1000 [ 685.379220][ T7256] lo speed is unknown, defaulting to 1000 [ 685.538059][ T7313] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.15553'. [ 685.556483][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15555'. [ 687.132683][ T7356] netlink: 1323 bytes leftover after parsing attributes in process `syz.4.15569'. [ 687.906862][ T7372] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.15575'. [ 688.087564][ T7378] lo: Caught tx_queue_len zero misconfig [ 688.187190][ T7382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 688.536757][ T7401] netlink: 'syz.1.15588': attribute type 1 has an invalid length. [ 688.601086][ T7401] bond8: (slave bridge0): making interface the new active one [ 688.610523][ T7401] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 688.620120][ T7404] vlan2: left promiscuous mode [ 688.627443][ T7404] dummy0: left promiscuous mode [ 688.643215][ T7404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 688.868691][ T7410] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15592'. [ 689.168327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888086759400: rx timeout, send abort [ 689.655005][ T7418] wg1 speed is unknown, defaulting to 1000 [ 689.677762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888086759400: abort rx timeout. Force session deactivation [ 689.816932][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15602'. [ 689.886175][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15602'. [ 690.240847][ T7418] wlan1 speed is unknown, defaulting to 1000 [ 690.289296][ T7418] lo speed is unknown, defaulting to 1000 [ 690.318170][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15605'. [ 690.362014][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15605'. [ 690.536754][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15607'. [ 690.970304][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15611'. [ 691.015357][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15611'. [ 691.333487][ T7472] netlink: 'syz.0.15615': attribute type 1 has an invalid length. [ 691.574075][ T7477] bond5: (slave bridge4): making interface the new active one [ 691.615052][ T7477] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 692.261345][ T7501] netlink: 'syz.3.15626': attribute type 21 has an invalid length. [ 692.282091][ T7501] netlink: 'syz.3.15626': attribute type 22 has an invalid length. [ 692.306151][ T7501] netlink: 'syz.3.15626': attribute type 23 has an invalid length. [ 692.335034][ T7501] netlink: 136 bytes leftover after parsing attributes in process `syz.3.15626'. [ 693.753759][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15633'. [ 694.380836][ T7518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.396401][ T7518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.570002][ T7518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.581176][ T7518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.707964][ T7518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.746340][ T7518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.883338][ T7518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.894539][ T7518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.962297][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15642'. [ 695.032241][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.041081][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.083665][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.121241][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.176124][ T107] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.184904][ T107] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.229397][ T107] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.242007][ T107] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.456450][ T7576] tipc: Resetting bearer [ 695.492060][ T7576] bridge0: port 5(gretap0) entered disabled state [ 695.743755][ T107] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.786321][ T107] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.809620][ T107] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.820168][ T107] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.154621][ T7609] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15666'. [ 696.698364][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15673'. [ 696.767298][ T7639] "syz.0.15678" (7639) uses obsolete ecb(arc4) skcipher [ 696.793938][ T7640] delete_channel: no stack [ 697.190483][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15688'. [ 697.904880][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15696'. [ 698.093114][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15699'. [ 698.199846][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15699'. [ 698.262570][ T7670] wg1 speed is unknown, defaulting to 1000 [ 698.292104][ T7700] bond0: Caught tx_queue_len zero misconfig [ 698.306176][ T7698] syzkaller1: entered promiscuous mode [ 698.312114][ T7698] syzkaller1: entered allmulticast mode [ 698.530951][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15707'. [ 698.551552][ T7670] wlan1 speed is unknown, defaulting to 1000 [ 698.567630][ T7670] lo speed is unknown, defaulting to 1000 [ 699.421469][ T7711] wg1 speed is unknown, defaulting to 1000 [ 699.541236][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15716'. [ 699.566125][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15716'. [ 699.575198][ T7732] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 699.610934][ T7732] iwpm_mapping_info_cb: Unable to parse nlmsg [ 699.791059][ T7711] wlan1 speed is unknown, defaulting to 1000 [ 699.828168][ T7711] lo speed is unknown, defaulting to 1000 [ 701.279030][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15722'. [ 701.340826][ T7734] wg1 speed is unknown, defaulting to 1000 [ 701.530585][ T7756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.649371][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15725'. [ 701.670722][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15725'. [ 701.943871][ T7767] sctp: [Deprecated]: syz.3.15728 (pid 7767) Use of int in max_burst socket option. [ 701.943871][ T7767] Use struct sctp_assoc_value instead [ 701.957026][ T7734] wlan1 speed is unknown, defaulting to 1000 [ 701.960920][ T7740] wg1 speed is unknown, defaulting to 1000 [ 701.967661][ T7734] lo speed is unknown, defaulting to 1000 [ 702.163229][ T7771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 702.281497][ T7740] wlan1 speed is unknown, defaulting to 1000 [ 702.362289][ T7740] lo speed is unknown, defaulting to 1000 [ 702.709451][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15735'. [ 702.865177][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15736'. [ 703.606528][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15741'. [ 703.625200][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15740'. [ 703.875043][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15745'. [ 704.092557][ T7821] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address [ 704.216455][ T7821] bond9: (slave wireguard1): Error -95 calling set_mac_address [ 704.987859][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15748'. [ 705.096620][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15749'. [ 705.364332][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.954942][ T7834] bridge2: left promiscuous mode [ 705.972796][ T7834] veth3: left promiscuous mode [ 705.987092][ T7834] bond1: left allmulticast mode [ 705.997182][ T7834] ip6tnl2: left promiscuous mode [ 706.004441][ T7834] ip6tnl2: left allmulticast mode [ 706.031196][ T7834] vlan0: left promiscuous mode [ 706.036997][ T7834] geneve1: left promiscuous mode [ 706.042219][ T7834] vlan0: left allmulticast mode [ 706.048572][ T7834] geneve1: left allmulticast mode [ 706.069032][ T7834] veth1: left allmulticast mode [ 706.084079][ T7834] macsec2: left allmulticast mode [ 706.126333][ T7834] bond4: left promiscuous mode [ 706.131148][ T7834] veth7: left promiscuous mode [ 706.219685][ T7834] bond0: left promiscuous mode [ 706.348631][ T7834] bridge8: left promiscuous mode [ 706.353618][ T7834] bridge8: left allmulticast mode [ 706.563438][ T60] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.576101][ T60] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.600511][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15757'. [ 706.606345][ T60] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.637387][ T60] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.656256][ T60] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.675288][ T60] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.729026][ T60] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.747191][ T60] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.893680][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15764'. [ 706.941488][ T7863] scsi_nl_rcv_msg: discarding partial skb [ 707.133814][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15769'. [ 707.158828][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15769'. [ 707.174654][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15768'. [ 707.346798][ T7884] sctp: [Deprecated]: syz.2.15771 (pid 7884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.346798][ T7884] Use struct sctp_sack_info instead [ 707.428605][ T7868] wg1 speed is unknown, defaulting to 1000 [ 707.500208][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15772'. [ 707.508240][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15773'. [ 707.815221][ T7868] wlan1 speed is unknown, defaulting to 1000 [ 707.845216][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15779'. [ 707.857365][ T7868] lo speed is unknown, defaulting to 1000 [ 708.745668][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.816690][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15799'. [ 712.483725][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15806'. [ 712.512946][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15807'. [ 712.574938][ T8007] bond8: entered promiscuous mode [ 712.580804][ T8007] bond8: entered allmulticast mode [ 712.587704][ T8007] 8021q: adding VLAN 0 to HW filter on device bond8 [ 712.647884][ T8012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15808'. [ 712.772729][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15810'. [ 712.789354][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15810'. [ 712.922310][ T7963] wg1 speed is unknown, defaulting to 1000 [ 712.978790][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15812'. [ 713.105516][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15815'. [ 713.426373][ T7963] wlan1 speed is unknown, defaulting to 1000 [ 713.445281][ T7963] lo speed is unknown, defaulting to 1000 [ 713.814122][ T8014] wg1 speed is unknown, defaulting to 1000 [ 714.420824][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15823'. [ 714.677340][ T8014] wlan1 speed is unknown, defaulting to 1000 [ 714.686639][ T8014] lo speed is unknown, defaulting to 1000 [ 714.687171][ T8036] wg1 speed is unknown, defaulting to 1000 [ 714.750708][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15827'. [ 715.052615][ T8072] syzkaller1: entered promiscuous mode [ 715.066242][ T8072] syzkaller1: entered allmulticast mode [ 715.349161][ T8078] syzkaller1: entered promiscuous mode [ 715.354650][ T8078] syzkaller1: entered allmulticast mode [ 715.776888][ T8036] wlan1 speed is unknown, defaulting to 1000 [ 715.785085][ T8036] lo speed is unknown, defaulting to 1000 [ 715.792515][ T8042] wg1 speed is unknown, defaulting to 1000 [ 716.445042][ T8042] wlan1 speed is unknown, defaulting to 1000 [ 716.452616][ T8067] wg1 speed is unknown, defaulting to 1000 [ 716.630081][ T8042] lo speed is unknown, defaulting to 1000 [ 717.201078][ T8095] __nla_validate_parse: 4 callbacks suppressed [ 717.201097][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15839'. [ 717.267605][ T8067] wlan1 speed is unknown, defaulting to 1000 [ 717.329922][ T8067] lo speed is unknown, defaulting to 1000 [ 719.024515][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15855'. [ 719.477572][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15858'. [ 719.624250][ T8149] netlink: 'syz.0.15858': attribute type 1 has an invalid length. [ 719.944049][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15865'. [ 720.720011][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15871'. [ 720.757868][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15872'. [ 721.361676][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15884'. [ 721.484166][ T8223] netlink: 'syz.1.15886': attribute type 1 has an invalid length. [ 721.538526][ T8223] bond10: entered promiscuous mode [ 721.543693][ T8223] bond10: entered allmulticast mode [ 721.570793][ T8223] 8021q: adding VLAN 0 to HW filter on device bond10 [ 721.591547][ T8227] macvlan2: entered promiscuous mode [ 721.597649][ T8227] macvlan2: entered allmulticast mode [ 721.604934][ T8227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 721.783439][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15889'. [ 722.034295][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15894'. [ 722.348275][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15903'. [ 722.587999][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15907'. [ 722.782272][ T8284] netlink: 'syz.4.15909': attribute type 13 has an invalid length. [ 722.811779][ T8284] erspan0: left promiscuous mode [ 722.827993][ T8284] erspan0: refused to change device tx_queue_len [ 722.834902][ T8284] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 723.182316][ T8298] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.210743][ T8298] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.297985][ T8298] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.324101][ T8298] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.410170][ T8298] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.435784][ T8298] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.721040][ T8298] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.741405][ T8298] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.906954][ T1446] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.921415][ T1446] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.961860][ T155] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.987488][ T155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.042194][ T155] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.060694][ T155] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.089848][ T155] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.117958][ T155] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.193819][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15933'. [ 724.682388][ T8367] netlink: 'syz.2.15942': attribute type 1 has an invalid length. [ 724.728577][ T8367] bond6: entered promiscuous mode [ 724.734206][ T8367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 724.816466][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15942'. [ 724.841770][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15942'. [ 724.883313][ T8338] wg1 speed is unknown, defaulting to 1000 [ 724.959224][ T8367] bond6: (slave bridge12): making interface the new active one [ 724.967675][ T8367] bridge12: entered promiscuous mode [ 724.976134][ T8367] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 725.054007][ T8343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.066224][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15944'. [ 725.478879][ T8338] wlan1 speed is unknown, defaulting to 1000 [ 725.492140][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15947'. [ 725.502949][ T8338] lo speed is unknown, defaulting to 1000 [ 725.723822][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15953'. [ 725.887529][ T8376] wg1 speed is unknown, defaulting to 1000 [ 726.739661][ T5821] block nbd5: Receive control failed (result -32) [ 727.038118][ T8376] wlan1 speed is unknown, defaulting to 1000 [ 727.062763][ T8376] lo speed is unknown, defaulting to 1000 [ 727.744605][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15960'. [ 728.312502][ T8434] netlink: 'syz.4.15964': attribute type 4 has an invalid length. [ 728.384756][ T8434] netlink: 'syz.4.15964': attribute type 4 has an invalid length. [ 728.802548][ T8442] netlink: 'syz.3.15968': attribute type 1 has an invalid length. [ 728.867534][ T8442] netlink: 'syz.3.15968': attribute type 4 has an invalid length. [ 728.892304][ T8442] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.15968'. [ 729.964948][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15973'. [ 729.988075][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15973'. [ 730.292399][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.336799][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.391484][ T8474] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 730.416848][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.466590][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.526721][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.576021][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.616378][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.671697][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.734438][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.748919][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.787186][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.823311][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.866017][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.909375][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.936427][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.968338][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.995138][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.048455][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.097589][ T8468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.236324][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15982'. [ 731.734065][ T8505] wg1 speed is unknown, defaulting to 1000 [ 731.763567][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15987'. [ 732.052288][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15990'. [ 732.087066][ T8527] netlink: 'syz.0.15990': attribute type 7 has an invalid length. [ 732.094913][ T8527] netlink: 'syz.0.15990': attribute type 8 has an invalid length. [ 732.136531][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15990'. [ 732.136955][ T8530] netlink: 'syz.2.15992': attribute type 1 has an invalid length. [ 732.190474][ T8505] wlan1 speed is unknown, defaulting to 1000 [ 732.273599][ T8505] lo speed is unknown, defaulting to 1000 [ 732.358128][ T8539] bond7: (slave geneve4): making interface the new active one [ 732.366913][ T8539] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 732.386513][ T107] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 732.394808][ T107] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 732.445205][ T107] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 732.464282][ T107] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 732.590349][ T8556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16000'. [ 733.287343][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16003'. [ 733.687572][ T8598] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 733.954553][ T8609] netlink: 'syz.1.16009': attribute type 1 has an invalid length. [ 734.016225][ T8609] bond11: entered promiscuous mode [ 734.021174][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16009'. [ 734.056744][ T8609] 8021q: adding VLAN 0 to HW filter on device bond11 [ 734.094471][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16009'. [ 734.162048][ T8616] bond11: (slave bridge8): making interface the new active one [ 734.242453][ T8616] bridge8: entered promiscuous mode [ 734.279472][ T8616] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 734.417771][ T8621] syzkaller1: entered promiscuous mode [ 734.433524][ T8621] syzkaller1: entered allmulticast mode [ 734.859929][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16018'. [ 735.550276][ T8664] syzkaller0: entered promiscuous mode [ 735.578438][ T8664] syzkaller0: entered allmulticast mode [ 735.615158][ T8674] netlink: 'syz.1.16027': attribute type 1 has an invalid length. [ 735.620821][ T8664] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 735.641948][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16025'. [ 735.725112][ T8679] netlink: 'syz.2.16028': attribute type 4 has an invalid length. [ 735.732311][ T8674] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 735.749570][ T8674] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 735.776866][ T8682] netlink: 'syz.2.16028': attribute type 4 has an invalid length. [ 735.823025][ T8674] bond12: (slave ip6gre3): making interface the new active one [ 735.832540][ T8674] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 736.006386][ T1446] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.014772][ T1446] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.032798][ T1446] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.082623][ T1446] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.103134][ T1446] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.120082][ T1446] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.147463][ T1446] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.162387][ T1446] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.172234][ T1446] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.184826][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16034'. [ 736.236675][ T1446] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.252702][ T1446] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.263059][ T1446] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 736.276088][ T8692] syzkaller1: entered promiscuous mode [ 736.281577][ T8692] syzkaller1: entered allmulticast mode [ 736.329020][ T8701] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 736.337011][ T8701] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 736.355925][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16034'. [ 736.451958][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16035'. [ 736.484288][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16035'. [ 736.753516][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16041'. [ 736.947474][ T8734] : entered promiscuous mode [ 737.284579][ T8703] wg1 speed is unknown, defaulting to 1000 [ 737.409488][ T8757] tipc: Started in network mode [ 737.418452][ T8757] tipc: Node identity 0afb66369d39, cluster identity 4711 [ 737.436193][ T8757] tipc: Enabled bearer , priority 0 [ 737.604657][ T8757] syzkaller0: entered promiscuous mode [ 737.610774][ T8757] syzkaller0: entered allmulticast mode [ 737.618243][ T8757] tipc: Resetting bearer [ 737.676237][ T8703] wlan1 speed is unknown, defaulting to 1000 [ 737.707618][ T8770] bond0: (slave dummy0): Releasing backup interface [ 737.716211][ T8770] dummy0 (unregistering): left promiscuous mode [ 737.744661][ T8703] lo speed is unknown, defaulting to 1000 [ 737.766292][ T8753] tipc: Resetting bearer [ 739.700769][ T8753] tipc: Disabling bearer [ 739.718184][ T5403] tipc: Node number set to 2546099766 [ 740.327009][ T8831] __nla_validate_parse: 3 callbacks suppressed [ 740.327030][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16084'. [ 740.503325][ T8831] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 740.512543][ T8831] syzkaller0: entered promiscuous mode [ 740.522649][ T8831] syzkaller0: entered allmulticast mode [ 740.657115][ T8782] wg1 speed is unknown, defaulting to 1000 [ 740.993235][ T8813] wg1 speed is unknown, defaulting to 1000 [ 741.014366][ T8782] wlan1 speed is unknown, defaulting to 1000 [ 741.043641][ T8782] lo speed is unknown, defaulting to 1000 [ 741.162639][ T8838] bond7: entered promiscuous mode [ 741.186187][ T8840] macvlan0: entered promiscuous mode [ 741.191516][ T8840] macvlan0: entered allmulticast mode [ 741.203878][ T8840] bond7: (slave macvlan0): Opening slave failed [ 741.368309][ T8813] wlan1 speed is unknown, defaulting to 1000 [ 741.610892][ T8813] lo speed is unknown, defaulting to 1000 [ 742.031198][ T8863] 8021q: adding VLAN 0 to HW filter on device bond13 [ 742.143975][ T8863] bond13: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 742.235668][ T36] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 742.366049][ T3022] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 744.388768][ T8915] netlink: 'syz.2.16105': attribute type 11 has an invalid length. [ 744.997198][ T8928] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.16111'. [ 745.046513][ T8932] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16112'. [ 745.056783][ T8928] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.16111'. [ 745.472323][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16118'. [ 745.797354][ T8959] bond0: entered promiscuous mode [ 745.815568][ T8959] bond0: entered allmulticast mode [ 745.836855][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.639192][ T9007] tipc: Enabled bearer , priority 0 [ 746.664733][ T9007] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 746.702182][ T9007] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 746.726457][ T9007] tipc: Resetting bearer [ 747.101594][ T155] tipc: Resetting bearer [ 747.566735][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16150'. [ 747.807943][ T9060] tipc: Enabled bearer , priority 0 [ 747.913157][ T9060] syzkaller0: entered promiscuous mode [ 747.928276][ T9060] syzkaller0: entered allmulticast mode [ 747.946134][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16157'. [ 747.956808][ T9060] tipc: Resetting bearer [ 747.963165][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16157'. [ 748.091810][ T155] tipc: Resetting bearer [ 748.124136][ T9059] tipc: Resetting bearer [ 748.812942][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16163'. [ 749.698732][ T9059] tipc: Disabling bearer [ 749.795969][ T9080] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 750.117543][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16168'. [ 751.454390][ T9150] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 751.660084][ T9173] netlink: 'syz.1.16183': attribute type 1 has an invalid length. [ 751.681434][ T9174] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 751.787019][ T9173] 8021q: adding VLAN 0 to HW filter on device bond14 [ 751.900373][ T9177] veth11: entered promiscuous mode [ 751.909987][ T9177] bond14: (slave veth11): Enslaving as an active interface with an up link [ 753.329003][ T9223] wg1 speed is unknown, defaulting to 1000 [ 753.691471][ T9223] wlan1 speed is unknown, defaulting to 1000 [ 753.706672][ T9223] lo speed is unknown, defaulting to 1000 [ 753.986329][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16202'. [ 754.308934][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16206'. [ 754.346056][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16206'. [ 754.467601][ T9260] atomic_op ffff888042373198 conn xmit_atomic 0000000000000000 [ 754.539764][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16210'. [ 754.588063][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16211'. [ 754.672101][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16211'. [ 755.226859][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16217'. [ 755.593538][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16220'. [ 755.614902][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16220'. [ 755.874342][ T9218] mpoa:mpoad_close: () going down [ 755.913883][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16225'. [ 756.930974][ T9319] wg1 speed is unknown, defaulting to 1000 [ 757.211738][ T9319] wlan1 speed is unknown, defaulting to 1000 [ 757.237039][ T9319] lo speed is unknown, defaulting to 1000 [ 758.567510][ T9373] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 758.586832][ T9373] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 759.342945][ T9369] wg1 speed is unknown, defaulting to 1000 [ 760.187154][ T9369] wlan1 speed is unknown, defaulting to 1000 [ 760.236711][ T9369] lo speed is unknown, defaulting to 1000 [ 760.907481][ T9381] wg1 speed is unknown, defaulting to 1000 [ 761.454678][ T9403] lec:lec_atm_close: lec0: Shut down! [ 761.698944][ T9394] wg1 speed is unknown, defaulting to 1000 [ 762.152359][ T9381] wlan1 speed is unknown, defaulting to 1000 [ 762.173807][ T9394] wlan1 speed is unknown, defaulting to 1000 [ 762.184886][ T9381] lo speed is unknown, defaulting to 1000 [ 762.779606][ T9459] __nla_validate_parse: 3 callbacks suppressed [ 762.779623][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16271'. [ 762.895509][ T30] audit: type=1800 audit(1773458984.611:16): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16270" name="memory.events" dev="tmpfs" ino=16678 res=0 errno=0 [ 762.941692][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.966726][ T5396] lec:lec_start_xmit: lec0:No lecd attached [ 762.983479][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.110642][ T9466] netlink: 'syz.3.16273': attribute type 13 has an invalid length. [ 763.131260][ T9469] netlink: 'syz.1.16274': attribute type 1 has an invalid length. [ 763.249536][ T9466] tipc: Resetting bearer [ 763.398542][ T9469] bond15: entered promiscuous mode [ 763.416082][ T9469] 8021q: adding VLAN 0 to HW filter on device bond15 [ 763.449771][ T9474] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 763.478287][ T9474] pim6reg1: entered promiscuous mode [ 763.493840][ T9474] pim6reg1: entered allmulticast mode [ 763.522506][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16276'. [ 763.534743][ T9476] 8021q: adding VLAN 0 to HW filter on device bond15 [ 763.549091][ T9476] bond15: (slave vti0): The slave device specified does not support setting the MAC address [ 763.564764][ T9476] bond15: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 763.584859][ T9476] bond15: (slave vti0): making interface the new active one [ 763.592800][ T9476] vti0: entered promiscuous mode [ 763.602631][ T9476] bond15: (slave vti0): Enslaving as an active interface with an up link [ 763.612262][ T9394] lo speed is unknown, defaulting to 1000 [ 764.216218][ T9511] wg1: entered promiscuous mode [ 764.221738][ T9511] wg1: entered allmulticast mode [ 765.269999][ T9544] syzkaller1: entered promiscuous mode [ 765.276269][ T9544] syzkaller1: entered allmulticast mode [ 765.451678][ T9558] netlink: 'syz.3.16294': attribute type 1 has an invalid length. [ 765.559166][ T9558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 765.692157][ T9563] bond9: (slave dummy0): making interface the new active one [ 765.702240][ T9563] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 765.928481][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16299'. [ 765.967947][ T9575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16300'. [ 766.059645][ T9577] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16300'. [ 766.095374][ T9572] 8021q: adding VLAN 0 to HW filter on device bond10 [ 766.139105][ T9576] macvlan0: entered allmulticast mode [ 766.147219][ T9576] veth0_to_bond: entered allmulticast mode [ 766.184718][ T9576] bond10: (slave macvlan0): Enslaving as an active interface with an up link [ 766.213055][ T9577] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16300'. [ 766.488717][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16303'. [ 766.589517][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16304'. [ 766.702557][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16305'. [ 766.758701][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16305'. [ 767.620007][ T9604] syzkaller0: entered promiscuous mode [ 767.627102][ T9604] syzkaller0: entered allmulticast mode [ 767.692728][ T9603] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.716808][ T9607] nbd: nbd64 already in use [ 767.718041][ T9126] block nbd64: NBD_DISCONNECT [ 767.913185][ T9614] __nla_validate_parse: 2 callbacks suppressed [ 767.913205][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16311'. [ 767.961077][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16314'. [ 767.978270][ T8890] udevd[8890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 768.096047][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16318'. [ 768.113481][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16318'. [ 768.265373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 768.273962][ C0] lec:lec_tx_timeout: lec0 [ 768.280677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 768.361235][ T9644] syzkaller1: entered promiscuous mode [ 768.388220][ T9644] syzkaller1: entered allmulticast mode [ 768.551783][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16326'. [ 768.969762][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16330'. [ 768.990436][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16330'. [ 769.001907][ T9664] syzkaller0: entered promiscuous mode [ 769.029296][ T9664] syzkaller0: entered allmulticast mode [ 769.029555][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16330'. [ 769.228128][ T9671] tipc: Resetting bearer [ 769.768131][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16339'. [ 769.777544][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16339'. [ 771.377123][ T9682] pim6reg: tun_chr_ioctl cmd 1074812118 [ 771.387093][ T9661] wg1 speed is unknown, defaulting to 1000 [ 771.710701][ T9720] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 771.734586][ T9720] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 771.771255][ T9714] macvlan2: entered promiscuous mode [ 771.777649][ T9714] macvlan2: entered allmulticast mode [ 771.787901][ T9714] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 771.988787][ T9728] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 772.010756][ T9728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.140181][ T9732] netlink: 'syz.2.16357': attribute type 1 has an invalid length. [ 772.161881][ T9732] netlink: 'syz.2.16357': attribute type 1 has an invalid length. [ 772.350950][ T9657] wg1 speed is unknown, defaulting to 1000 [ 772.372970][ T9661] wlan1 speed is unknown, defaulting to 1000 [ 772.530358][ T9661] lo speed is unknown, defaulting to 1000 [ 773.236357][ T9741] __nla_validate_parse: 3 callbacks suppressed [ 773.236380][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16359'. [ 773.275955][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16359'. [ 773.306095][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16359'. [ 773.335925][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16359'. [ 773.712783][ T9732] wg1 speed is unknown, defaulting to 1000 [ 773.720159][ T9657] wlan1 speed is unknown, defaulting to 1000 [ 773.833158][ T9657] lo speed is unknown, defaulting to 1000 [ 774.025368][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 774.033465][ C0] lec:lec_tx_timeout: lec0 [ 774.038622][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 774.361121][ T9732] wlan1 speed is unknown, defaulting to 1000 [ 774.547722][ T9732] lo speed is unknown, defaulting to 1000 [ 774.898530][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16371'. [ 776.456478][ T9827] pim6reg1: entered promiscuous mode [ 776.474873][ T9827] pim6reg1: entered allmulticast mode [ 776.864776][ T9834] netlink: 'syz.4.16385': attribute type 2 has an invalid length. [ 776.883568][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16385'. [ 777.671245][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16388'. [ 777.865617][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 777.896605][ T9859] lo: Caught tx_queue_len zero misconfig [ 777.994017][ T9858] tipc: Enabled bearer , priority 0 [ 778.116984][ T9858] syzkaller0: entered promiscuous mode [ 778.131915][ T9858] syzkaller0: entered allmulticast mode [ 778.151285][ T9858] tipc: Resetting bearer [ 778.220902][ T9857] tipc: Resetting bearer [ 779.790395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 779.798512][ C0] lec:lec_tx_timeout: lec0 [ 779.804120][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 780.013434][ T9857] tipc: Disabling bearer [ 780.322554][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16403'. [ 780.374825][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16403'. [ 780.439889][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16404'. [ 780.455134][ T107] bond0: (slave syz_tun): interface is now down [ 780.479598][ T107] bond0: now running without any active interface! [ 780.508698][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16404'. [ 780.573860][ T9867] wg1 speed is unknown, defaulting to 1000 [ 780.696704][ T9887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.919015][ T9867] wlan1 speed is unknown, defaulting to 1000 [ 780.940994][ T9916] netlink: 'syz.0.16409': attribute type 1 has an invalid length. [ 780.958720][ T9867] lo speed is unknown, defaulting to 1000 [ 780.986456][ T9916] sctp: [Deprecated]: syz.0.16409 (pid 9916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.986456][ T9916] Use struct sctp_sack_info instead [ 781.449440][ T9929] netlink: 'syz.0.16414': attribute type 1 has an invalid length. [ 781.668240][ T9906] wg1 speed is unknown, defaulting to 1000 [ 781.932559][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16419'. [ 782.183213][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16420'. [ 782.229649][ T9906] wlan1 speed is unknown, defaulting to 1000 [ 782.284452][ T9906] lo speed is unknown, defaulting to 1000 [ 782.541006][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16425'. [ 782.713650][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16427'. [ 782.799685][ T9963] 8021q: adding VLAN 0 to HW filter on device bond11 [ 782.828250][ T9966] geneve5: entered promiscuous mode [ 782.835593][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 50795 - 0 [ 782.844112][ T1446] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 50795 - 0 [ 782.921991][ T9963] ipvlan2: entered promiscuous mode [ 782.945453][ T9963] ipvlan2: entered allmulticast mode [ 782.950878][ T9963] bond11: entered allmulticast mode [ 782.957686][ T1446] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 50795 - 0 [ 782.975244][ T1446] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 50795 - 0 [ 782.994950][ T9972] netlink: 'syz.2.16429': attribute type 2 has an invalid length. [ 783.026743][ T9972] netlink: 'syz.2.16429': attribute type 2 has an invalid length. [ 783.099510][ T9974] netlink: 'syz.3.16430': attribute type 1 has an invalid length. [ 783.208691][ T9974] bond12: entered promiscuous mode [ 783.214196][ T9974] 8021q: adding VLAN 0 to HW filter on device bond12 [ 783.256600][ T9977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16431'. [ 783.261835][ T9978] bridge0: Device is already in use. [ 783.285005][ T9977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16431'. [ 783.761202][ T9998] netlink: 'syz.3.16437': attribute type 13 has an invalid length. [ 783.824628][ T9994] tipc: Resetting bearer [ 784.636054][T10007] netlink: 'syz.3.16441': attribute type 4 has an invalid length. [ 784.682478][T10010] netlink: 'syz.3.16441': attribute type 4 has an invalid length. [ 784.715098][ T5398] lo speed is unknown, defaulting to 1000 [ 784.728848][ T5396] lo speed is unknown, defaulting to 1000 [ 784.746757][ T5398] lo speed is unknown, defaulting to 1000 [ 784.825388][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 784.833424][ C0] lec:lec_tx_timeout: lec0 [ 784.839067][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 785.159580][T10029] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 785.491292][T10048] __nla_validate_parse: 4 callbacks suppressed [ 785.491311][T10048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16455'. [ 785.509257][T10048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16455'. [ 785.835155][T10070] netlink: 200 bytes leftover after parsing attributes in process `syz.0.16461'. [ 785.973946][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16461'. [ 785.985597][T10071] Cannot find del_set index 0 as target [ 786.430677][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16468'. [ 786.447468][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16468'. [ 786.683839][T10065] wg1 speed is unknown, defaulting to 1000 [ 786.813903][T10106] netlink: 'syz.2.16475': attribute type 13 has an invalid length. [ 786.822502][T10106] netlink: 'syz.2.16475': attribute type 17 has an invalid length. [ 787.096585][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.121341][T10106] dummy0: entered promiscuous mode [ 787.147818][T10106] bridge0: port 1(vlan2) entered blocking state [ 787.154279][T10106] bridge0: port 1(vlan2) entered forwarding state [ 787.228506][T10106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.314274][T10065] wlan1 speed is unknown, defaulting to 1000 [ 787.332324][T10065] lo speed is unknown, defaulting to 1000 [ 787.531878][T10118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16477'. [ 788.287153][T10100] wg1 speed is unknown, defaulting to 1000 [ 788.823753][T10100] wlan1 speed is unknown, defaulting to 1000 [ 788.832769][T10100] lo speed is unknown, defaulting to 1000 [ 788.857966][T10115] wg1 speed is unknown, defaulting to 1000 [ 789.087050][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16487'. [ 789.294297][T10148] syzkaller1: entered promiscuous mode [ 789.301495][T10148] syzkaller1: entered allmulticast mode [ 789.393257][T10115] wlan1 speed is unknown, defaulting to 1000 [ 789.478470][T10115] lo speed is unknown, defaulting to 1000 [ 789.639914][T10152] syzkaller0: entered promiscuous mode [ 789.649631][T10152] syzkaller0: entered allmulticast mode [ 789.845956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 789.854053][ C0] lec:lec_tx_timeout: lec0 [ 789.860395][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 790.520792][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16498'. [ 791.102399][T10186] syzkaller0: entered promiscuous mode [ 791.118347][T10186] syzkaller0: entered allmulticast mode [ 791.394964][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 791.415485][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16505'. [ 791.456897][T10198] bond6: (slave vcan0): Releasing backup interface [ 791.466443][T10198] vcan0 (unregistering): left promiscuous mode [ 791.481866][T10198] bond6: Destroying bond [ 791.503978][T10198] bond6 (unregistering): Released all slaves [ 791.825685][T10208] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 791.838343][T10208] syzkaller0: entered promiscuous mode [ 791.844083][T10208] syzkaller0: entered allmulticast mode [ 792.174666][T10217] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2588914182/2588914184 [ 792.184999][T10217] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2588914182/2588914183 [ 792.196573][T10217] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2588914182/2588914184 [ 792.206845][T10217] tipc: Failed to remove unknown binding: 66,0,0/2886997039:2588914182/2588914183 [ 792.654167][T10228] syzkaller1: entered promiscuous mode [ 792.660062][T10228] syzkaller1: entered allmulticast mode [ 793.812037][T10179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.987435][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16525'. [ 794.024813][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.024909][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16525'. [ 794.043201][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.043240][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.072596][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.578390][T10264] syzkaller0: entered promiscuous mode [ 794.584148][T10264] syzkaller0: entered allmulticast mode [ 794.875963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 794.884035][ C0] lec:lec_tx_timeout: lec0 [ 794.889622][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 796.770379][T10297] netlink: 'syz.2.16542': attribute type 1 has an invalid length. [ 796.800869][T10297] 8021q: adding VLAN 0 to HW filter on device bond9 [ 796.836300][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16542'. [ 796.888652][T10297] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 796.946405][T10297] bond9: entered allmulticast mode [ 797.003720][T10297] bond9: (slave ip6gretap5): Enslaving as an active interface with an up link [ 797.391359][T10281] wg1 speed is unknown, defaulting to 1000 [ 797.783173][T10281] wlan1 speed is unknown, defaulting to 1000 [ 797.814169][T10281] lo speed is unknown, defaulting to 1000 [ 798.132687][T10343] tipc: Resetting bearer [ 798.361448][T10352] netlink: 'syz.3.16557': attribute type 32 has an invalid length. [ 798.370148][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16557'. [ 798.443583][T10352] bond13: Setting coupled_control to off (0) [ 798.917252][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16564'. [ 799.798485][T10371] bond6: entered promiscuous mode [ 799.804148][T10371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.879583][T10385] netlink: 'syz.1.16567': attribute type 1 has an invalid length. [ 799.906211][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 799.914313][ C0] lec:lec_tx_timeout: lec0 [ 799.919881][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 799.936251][T10385] bond16: entered promiscuous mode [ 799.942698][T10385] 8021q: adding VLAN 0 to HW filter on device bond16 [ 800.341844][T10401] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 800.961985][T10420] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16579'. [ 800.976337][T10406] wg1 speed is unknown, defaulting to 1000 [ 801.022928][T10420] ip6gre4: entered promiscuous mode [ 801.040024][T10420] ip6gre4: entered allmulticast mode [ 801.056889][ T36] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 801.064747][ T36] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 801.081233][T10421] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 801.090040][ T5397] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 801.279629][T10406] wlan1 speed is unknown, defaulting to 1000 [ 801.288340][T10406] lo speed is unknown, defaulting to 1000 [ 801.566249][ T5396] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 801.866357][ T5396] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 802.307297][T10440] tipc: Failed to remove unknown binding: 66,0,0/2994205373:299285566/299285568 [ 802.335700][T10440] tipc: Failed to remove unknown binding: 66,0,0/2994205373:299285566/299285567 [ 802.358819][T10440] tipc: Failed to remove unknown binding: 66,0,0/2994205373:299285566/299285568 [ 802.376111][T10440] tipc: Failed to remove unknown binding: 66,0,0/2994205373:299285566/299285567 [ 802.516587][T10442] netlink: 'syz.2.16586': attribute type 1 has an invalid length. [ 802.526013][T10431] wg1 speed is unknown, defaulting to 1000 [ 802.659928][T10444] syzkaller0: entered promiscuous mode [ 802.676259][T10444] syzkaller0: entered allmulticast mode [ 802.863655][T10431] wlan1 speed is unknown, defaulting to 1000 [ 802.886217][T10431] lo speed is unknown, defaulting to 1000 [ 802.970023][T10448] netlink: 'syz.2.16589': attribute type 4 has an invalid length. [ 803.044561][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16590'. [ 803.142011][T10450] xfrm0: entered allmulticast mode [ 804.936003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 804.944079][ C0] lec:lec_tx_timeout: lec0 [ 804.949166][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 805.465541][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 805.707734][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16600'. [ 805.947251][T10462] wg1 speed is unknown, defaulting to 1000 [ 806.091268][T10478] syzkaller1: entered promiscuous mode [ 806.136046][T10478] syzkaller1: entered allmulticast mode [ 806.629548][T10462] wlan1 speed is unknown, defaulting to 1000 [ 806.650840][T10462] lo speed is unknown, defaulting to 1000 [ 806.984904][T10500] netlink: 'syz.0.16609': attribute type 27 has an invalid length. [ 807.024628][T10500] erspan1: left promiscuous mode [ 807.047358][T10500] erspan1: left allmulticast mode [ 807.052801][T10500] veth3: left promiscuous mode [ 807.060213][T10500] ip6erspan0: left allmulticast mode [ 807.066674][T10500] bond0: left promiscuous mode [ 807.071542][T10500] bridge_slave_1: left promiscuous mode [ 807.078607][T10500] bond0: left allmulticast mode [ 807.084632][T10500] bridge_slave_1: left allmulticast mode [ 807.119098][T10500] bridge1: left allmulticast mode [ 807.124294][T10500] geneve4: left promiscuous mode [ 807.186419][T10500] geneve4: left allmulticast mode [ 807.193059][T10500] vlan2: left promiscuous mode [ 807.228339][T10500] geneve1: left promiscuous mode [ 807.250649][T10500] vlan2: left allmulticast mode [ 807.269257][T10500] geneve1: left allmulticast mode [ 807.282835][T10500] vlan3: left promiscuous mode [ 807.312644][T10500] vlan4: left promiscuous mode [ 807.324477][T10500] bridge0: left promiscuous mode [ 807.329820][T10500] gretap2: left promiscuous mode [ 807.335045][T10500] vxlan0: left promiscuous mode [ 807.359139][T10500] vxlan0: left allmulticast mode [ 807.371421][T10500] bridge2: left promiscuous mode [ 807.377586][T10500] sit2: left allmulticast mode [ 807.383026][T10500] gretap3: left promiscuous mode [ 808.608131][T10500] ip6gre4: left promiscuous mode [ 808.616017][T10500] ip6gre4: left allmulticast mode [ 808.633859][T10500] xfrm0: left allmulticast mode [ 808.702053][T10505] bridge0: port 5(gretap0) entered blocking state [ 808.708670][T10505] bridge0: port 5(gretap0) entered forwarding state [ 808.727462][T10505] 8021q: adding VLAN 0 to HW filter on device .` [ 808.736201][T10505] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.748356][T10505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.827809][ T797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.086757][ T797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.626466][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.955917][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 809.963984][ C0] lec:lec_tx_timeout: lec0 [ 809.969356][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 810.314812][T10559] xt_hashlimit: size too large, truncated to 1048576 [ 810.418194][T10563] syzkaller1: entered promiscuous mode [ 810.423732][T10563] syzkaller1: entered allmulticast mode [ 810.566568][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16631'. [ 810.669201][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 810.680260][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 810.932037][T10587] syzkaller0: entered promiscuous mode [ 810.938349][T10587] syzkaller0: entered allmulticast mode [ 811.068864][T10591] syzkaller0: entered promiscuous mode [ 811.084569][T10591] syzkaller0: entered allmulticast mode [ 811.225600][ T5397] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 811.572306][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16651'. [ 811.602677][T10619] tipc: Resetting bearer [ 811.663908][T10619] bridge0: port 5(gretap0) entered disabled state [ 811.951858][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16655'. [ 812.371705][T10661] lo speed is unknown, defaulting to 1000 [ 812.396160][T10661] lo speed is unknown, defaulting to 1000 [ 812.408620][T10661] lo speed is unknown, defaulting to 1000 [ 812.518288][T10661] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 812.570110][T10661] lo speed is unknown, defaulting to 1000 [ 812.578464][T10661] lo speed is unknown, defaulting to 1000 [ 812.586812][T10661] lo speed is unknown, defaulting to 1000 [ 812.593634][T10661] lo speed is unknown, defaulting to 1000 [ 812.601255][T10661] lo speed is unknown, defaulting to 1000 [ 812.609650][T10669] smc: removing ib device !yz! [ 813.099404][T10655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 813.852789][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16678'. [ 813.981301][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16680'. [ 814.431979][T10733] bond7: (slave veth13): Enslaving as an active interface with a down link [ 814.465232][T10743] bond7: (slave veth15): Enslaving as an active interface with a down link [ 814.578124][T10751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.585456][T10751] IPv6: NLM_F_CREATE should be set when creating new route [ 814.592718][T10751] IPv6: NLM_F_CREATE should be set when creating new route [ 814.713261][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16696'. [ 814.779683][T10744] wg1 speed is unknown, defaulting to 1000 [ 814.979552][T10744] wlan1 speed is unknown, defaulting to 1000 [ 814.985819][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 814.985896][ C0] lec:lec_tx_timeout: lec0 [ 814.986011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 815.009250][T10744] lo speed is unknown, defaulting to 1000 [ 815.497866][T10761] wg1 speed is unknown, defaulting to 1000 [ 815.690555][T10744] lo speed is unknown, defaulting to 1000 [ 815.770289][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16703'. [ 815.900860][T10761] wlan1 speed is unknown, defaulting to 1000 [ 815.980163][T10761] lo speed is unknown, defaulting to 1000 [ 816.212231][T10782] lec:lec_atm_close: lec0: Shut down! [ 816.407951][T10785] wg1 speed is unknown, defaulting to 1000 [ 816.537089][ T5397] lo speed is unknown, defaulting to 1000 [ 816.543289][ T5397] syz2: Port: 1 Link DOWN [ 816.630335][T10761] lo speed is unknown, defaulting to 1000 [ 816.630335][T10785] wlan1 speed is unknown, defaulting to 1000 [ 816.631954][T10785] lo speed is unknown, defaulting to 1000 [ 817.236847][T10791] wg1 speed is unknown, defaulting to 1000 [ 817.237112][T10785] lo speed is unknown, defaulting to 1000 [ 817.896428][T10791] wlan1 speed is unknown, defaulting to 1000 [ 817.923391][T10791] lo speed is unknown, defaulting to 1000 [ 818.689684][T10828] sctp: [Deprecated]: syz.1.16713 (pid 10828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.689684][T10828] Use struct sctp_sack_info instead [ 818.815820][T10832] xt_hashlimit: size too large, truncated to 1048576 [ 818.999817][T10791] lo speed is unknown, defaulting to 1000 [ 819.513808][T10845] syzkaller0: entered promiscuous mode [ 819.524297][T10845] syzkaller0: entered allmulticast mode [ 819.892868][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16721'. [ 820.131131][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16723'. [ 820.168046][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16723'. [ 820.194271][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16726'. [ 820.304059][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16725'. [ 820.316645][T10866] vlan5: entered allmulticast mode [ 820.321800][T10866] bridge8: entered allmulticast mode [ 820.798244][T10883] syzkaller0: entered promiscuous mode [ 820.803764][T10883] syzkaller0: entered allmulticast mode [ 820.861787][T10885] tipc: Resetting bearer [ 821.328827][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16738'. [ 821.355098][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16738'. [ 821.381512][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16737'. [ 821.391613][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16737'. [ 821.655021][T10923] xt_hashlimit: size too large, truncated to 1048576 [ 821.671342][T10925] netlink: 'syz.4.16746': attribute type 1 has an invalid length. [ 821.711077][T10925] bond8: entered promiscuous mode [ 821.717821][T10925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.766467][T10925] ipvlan0: entered allmulticast mode [ 821.771806][T10925] bond8: entered allmulticast mode [ 821.785374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 821.793397][ C0] lec:lec_tx_timeout: lec0 [ 821.798595][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 822.074689][T10934] bond8: (slave bridge10): making interface the new active one [ 822.417836][T10934] bridge10: entered promiscuous mode [ 822.436792][T10934] bridge10: entered allmulticast mode [ 822.464560][T10934] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 822.576513][T10937] netlink: 'syz.0.16747': attribute type 10 has an invalid length. [ 822.639612][T10937] .`: (slave wlan1): Enslaving as an active interface with an up link [ 822.734941][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16748'. [ 822.761790][ T3022] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.776540][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.784775][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.835970][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.946143][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16753'. [ 822.964831][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16753'. [ 823.081210][T10958] netlink: 'syz.4.16755': attribute type 3 has an invalid length. [ 823.096320][T10958] netlink: 'syz.4.16755': attribute type 3 has an invalid length. [ 823.371853][T10965] syzkaller1: entered promiscuous mode [ 823.401379][T10965] syzkaller1: entered allmulticast mode [ 823.464800][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16760'. [ 823.821341][T10967] wg1 speed is unknown, defaulting to 1000 [ 824.032341][T10967] wlan1 speed is unknown, defaulting to 1000 [ 824.037167][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16766'. [ 824.040316][T10967] lo speed is unknown, defaulting to 1000 [ 824.104938][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16766'. [ 824.427166][T11009] ip6tnl0: Caught tx_queue_len zero misconfig [ 824.567702][T11017] macvtap0: entered promiscuous mode [ 824.657332][T11012] macvtap0 (unregistering): left promiscuous mode [ 824.742832][T10967] lo speed is unknown, defaulting to 1000 [ 825.242433][T11040] netlink: 'syz.1.16775': attribute type 1 has an invalid length. [ 825.416304][T11046] bond17: (slave gretap2): making interface the new active one [ 825.453079][T11046] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 825.542869][T11040] vlan3: entered allmulticast mode [ 825.616132][T11040] bond17: entered allmulticast mode [ 825.626447][T11040] gretap2: entered allmulticast mode [ 825.647655][T11040] bond17: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 826.153925][T11079] wg1: entered promiscuous mode [ 826.165266][T11079] wg1: entered allmulticast mode [ 826.406101][T11089] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 826.641789][T11099] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 826.825371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 826.833431][ C0] lec:lec_tx_timeout: lec0 [ 826.838108][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 827.081798][T11080] lec:lec_atm_close: lec0: Shut down! [ 827.120913][T11107] syzkaller0: entered promiscuous mode [ 827.127251][T11107] syzkaller0: entered allmulticast mode [ 827.949984][T11143] syzkaller0: entered promiscuous mode [ 827.957863][T11143] syzkaller0: entered allmulticast mode [ 828.208378][T11154] __nla_validate_parse: 3 callbacks suppressed [ 828.208398][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16803'. [ 828.252887][T11154] vlan3: entered allmulticast mode [ 828.259350][T11154] bridge13: entered allmulticast mode [ 828.308053][T11154] bridge13: port 1(erspan0) entered blocking state [ 828.315590][T11154] bridge13: port 1(erspan0) entered disabled state [ 828.322280][T11154] erspan0: entered allmulticast mode [ 828.332903][T11154] erspan0: entered promiscuous mode [ 828.346856][ T30] audit: type=1800 audit(1773459050.071:17): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.16804" name="memory.events" dev="tmpfs" ino=16815 res=0 errno=0 [ 828.734291][T11174] netlink: 'syz.0.16811': attribute type 1 has an invalid length. [ 828.756980][T11174] bond7: entered promiscuous mode [ 828.762353][T11174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 828.785228][T11174] vlan7: entered allmulticast mode [ 828.790613][T11174] bond7: entered allmulticast mode [ 828.808215][T11174] bond7: (slave bridge9): making interface the new active one [ 828.815788][T11174] bridge9: entered promiscuous mode [ 828.821137][T11174] bridge9: entered allmulticast mode [ 828.828433][T11174] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 830.612601][T11122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.741609][T11183] netlink: 'syz.1.16813': attribute type 1 has an invalid length. [ 830.804395][T11183] 8021q: adding VLAN 0 to HW filter on device bond18 [ 830.812872][T11187] syzkaller0: entered promiscuous mode [ 830.823293][T11187] syzkaller0: entered allmulticast mode [ 830.843813][T11183] vlan4: entered promiscuous mode [ 830.862652][T11183] bond18: entered promiscuous mode [ 830.872928][T11183] vlan4: entered allmulticast mode [ 830.893502][T11183] bond18: entered allmulticast mode [ 830.899713][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16818'. [ 830.911503][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16818'. [ 830.921691][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16818'. [ 831.011594][T11196] bond18: (slave bridge14): making interface the new active one [ 831.025180][T11196] bridge14: entered promiscuous mode [ 831.031528][T11196] bridge14: entered allmulticast mode [ 831.044382][T11196] bond18: (slave bridge14): Enslaving as an active interface with an up link [ 831.076425][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16822'. [ 831.103685][T11205] tipc: Enabling of bearer rejected, already enabled [ 831.151026][T11205] tipc: Resetting bearer [ 832.412049][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16834'. [ 832.825481][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 832.833578][ C0] lec:lec_tx_timeout: lec0 [ 832.838203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 832.924411][T11268] netlink: 'syz.4.16841': attribute type 1 has an invalid length. [ 832.969267][T11268] 8021q: adding VLAN 0 to HW filter on device bond10 [ 832.977987][T11268] bond9: (slave bond10): making interface the new active one [ 832.986120][T11268] bond9: (slave bond10): Enslaving as an active interface with an up link [ 833.010881][T11268] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 833.471110][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16845'. [ 834.411342][T11220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.539532][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16847'. [ 834.726620][T11302] wg1 speed is unknown, defaulting to 1000 [ 834.757083][T11299] tipc: Enabled bearer , priority 0 [ 834.802843][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16852'. [ 834.816272][T11297] tipc: Disabling bearer [ 834.971484][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16856'. [ 835.098069][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16858'. [ 835.114739][T11323] vlan2: entered promiscuous mode [ 835.121047][T11323] `: entered promiscuous mode [ 835.127364][T11323] C: entered promiscuous mode [ 835.136439][T11323] team_slave_1: entered promiscuous mode [ 835.977250][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16866'. [ 836.042176][T11351] bridge10: port 1(veth15) entered blocking state [ 836.049233][T11351] bridge10: port 1(veth15) entered disabled state [ 836.056662][T11351] veth15: entered allmulticast mode [ 836.063830][T11351] veth15: entered promiscuous mode [ 836.071012][T11347] wg1 speed is unknown, defaulting to 1000 [ 836.071294][T11354] bridge10: port 2(veth0_to_bond) entered blocking state [ 836.085259][T11354] bridge10: port 2(veth0_to_bond) entered disabled state [ 836.093643][T11354] veth0_to_bond: entered allmulticast mode [ 836.102516][T11354] veth0_to_bond: entered promiscuous mode [ 836.204092][T11351] bridge10: port 3(veth17) entered blocking state [ 836.211508][T11351] bridge10: port 3(veth17) entered disabled state [ 836.216559][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16868'. [ 836.219689][T11351] veth17: entered allmulticast mode [ 836.256772][T11351] veth17: entered promiscuous mode [ 836.396240][T11347] wlan1 speed is unknown, defaulting to 1000 [ 836.405110][T11347] lo speed is unknown, defaulting to 1000 [ 836.489228][T11364] syzkaller0: entered promiscuous mode [ 836.494910][T11364] syzkaller0: entered allmulticast mode [ 836.604018][T11367] netlink: 67 bytes leftover after parsing attributes in process `syz.3.16872'. [ 836.626549][T11367] bond0: Caught tx_queue_len zero misconfig [ 836.793398][T11369] syzkaller0: entered promiscuous mode [ 836.808401][T11369] syzkaller0: entered allmulticast mode [ 836.877060][T11347] lo speed is unknown, defaulting to 1000 [ 836.884956][T11375] tipc: Enabling of bearer rejected, already enabled [ 837.007706][T11380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.395711][T11391] syzkaller0: entered promiscuous mode [ 837.401243][T11391] syzkaller0: entered allmulticast mode [ 837.773369][T11401] netlink: 67 bytes leftover after parsing attributes in process `syz.4.16884'. [ 837.824663][T11403] tipc: Resetting bearer [ 837.845349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 837.853433][ C0] lec:lec_tx_timeout: lec0 [ 837.858664][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 838.136200][T11418] netlink: 'syz.4.16889': attribute type 3 has an invalid length. [ 838.147220][T11418] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16889'. [ 838.307628][T11423] syzkaller0: entered promiscuous mode [ 838.313485][T11423] syzkaller0: entered allmulticast mode [ 838.449531][T11432] netlink: 'syz.1.16896': attribute type 1 has an invalid length. [ 838.533809][T11432] 8021q: adding VLAN 0 to HW filter on device bond19 [ 838.542301][T11434] __nla_validate_parse: 1 callbacks suppressed [ 838.542320][T11434] netlink: 67 bytes leftover after parsing attributes in process `syz.3.16897'. [ 838.602062][T11435] bond19: (slave bridge15): making interface the new active one [ 838.612051][T11435] bond19: (slave bridge15): Enslaving as an active interface with an up link [ 839.012255][T11453] netlink: 'syz.4.16903': attribute type 1 has an invalid length. [ 839.035994][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16903'. [ 839.397695][T11457] wg1 speed is unknown, defaulting to 1000 [ 839.856665][T11457] wlan1 speed is unknown, defaulting to 1000 [ 839.871220][T11457] lo speed is unknown, defaulting to 1000 [ 840.182558][T11457] lo speed is unknown, defaulting to 1000 [ 840.429659][T11499] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16918'. [ 840.610436][T11502] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 841.191579][T11514] tipc: Enabled bearer , priority 0 [ 841.200043][T11514] syzkaller0: entered promiscuous mode [ 841.205878][T11514] syzkaller0: entered allmulticast mode [ 841.229378][T11514] tipc: Resetting bearer [ 841.240739][T11513] tipc: Resetting bearer [ 841.257428][T11513] tipc: Disabling bearer [ 841.422366][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16925'. [ 841.500131][T11523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16927'. [ 841.510649][T11525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16928'. [ 841.510845][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16927'. [ 841.648827][T11529] syzkaller0: entered promiscuous mode [ 841.654496][T11529] syzkaller0: entered allmulticast mode [ 841.963142][T11545] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16937'. [ 842.322611][T11562] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16942'. [ 842.355453][T11562] netlink: 'syz.3.16942': attribute type 1 has an invalid length. [ 842.569109][T11566] IPv6: NLM_F_CREATE should be specified when creating new route [ 842.865362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 842.873448][ C0] lec:lec_tx_timeout: lec0 [ 842.878161][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 843.473006][T11577] wg1 speed is unknown, defaulting to 1000 [ 843.951528][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16952'. [ 843.985677][T11597] netlink: 'syz.0.16954': attribute type 13 has an invalid length. [ 844.006622][T11597] netlink: 'syz.0.16954': attribute type 17 has an invalid length. [ 844.036245][T11602] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 844.168315][T11597] bridge0: port 5(gretap0) entered blocking state [ 844.174867][T11597] bridge0: port 5(gretap0) entered forwarding state [ 844.201384][T11597] 8021q: adding VLAN 0 to HW filter on device .` [ 844.209571][T11597] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.220358][T11597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.242695][T11577] wlan1 speed is unknown, defaulting to 1000 [ 844.316394][T11577] lo speed is unknown, defaulting to 1000 [ 844.735964][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.754422][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.772269][ T1444] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.780933][T11577] lo speed is unknown, defaulting to 1000 [ 844.791230][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.806497][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.830370][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.839182][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.870582][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.879357][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.897757][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16961'. [ 844.908747][T11623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16961'. [ 844.918427][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16961'. [ 844.928272][T11623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16961'. [ 845.078994][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16963'. [ 845.088815][T11619] wg1 speed is unknown, defaulting to 1000 [ 845.362195][T11619] wlan1 speed is unknown, defaulting to 1000 [ 845.403492][T11619] lo speed is unknown, defaulting to 1000 [ 845.644118][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16967'. [ 845.780907][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16970'. [ 845.819241][T11651] netlink: 'syz.3.16970': attribute type 7 has an invalid length. [ 845.837691][T11651] netlink: 'syz.3.16970': attribute type 8 has an invalid length. [ 845.848747][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16970'. [ 845.862470][T11653] netlink: 'syz.4.16971': attribute type 10 has an invalid length. [ 846.051660][T11656] syzkaller0: entered promiscuous mode [ 846.059802][T11656] syzkaller0: entered allmulticast mode [ 846.405062][T11619] lo speed is unknown, defaulting to 1000 [ 846.479718][T11667] bridge0: port 2(macvlan0) entered blocking state [ 846.488090][T11667] bridge0: port 2(macvlan0) entered disabled state [ 846.526535][T11667] macvlan0: entered allmulticast mode [ 846.539805][T11667] bridge0: entered allmulticast mode [ 846.562698][T11667] macvlan0: left allmulticast mode [ 846.569824][T11667] bridge0: left allmulticast mode [ 846.946093][T11688] syzkaller0: entered promiscuous mode [ 846.973213][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16984'. [ 846.982354][T11688] syzkaller0: entered allmulticast mode [ 847.023381][T11688] 0: reclassify loop, rule prio 0, protocol 800 [ 847.528563][T11714] syzkaller0: entered promiscuous mode [ 847.549192][T11714] syzkaller0: entered allmulticast mode [ 847.885435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 847.893522][ C0] lec:lec_tx_timeout: lec0 [ 847.898616][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 848.091913][T11728] netlink: 'syz.0.16995': attribute type 1 has an invalid length. [ 848.200140][T11730] bond8: (slave veth19): Enslaving as an active interface with a down link [ 848.419180][T11728] bond8: (slave veth21): Enslaving as an active interface with a down link [ 848.439963][T11730] 8021q: adding VLAN 0 to HW filter on device bond8 [ 848.505475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.011186][T11754] __nla_validate_parse: 1 callbacks suppressed [ 849.011205][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17005'. [ 849.067459][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17005'. [ 849.067906][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.103643][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.118586][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17005'. [ 849.129388][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.149132][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.163882][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17005'. [ 849.580821][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17009'. [ 850.189260][T11787] syzkaller0: entered promiscuous mode [ 850.207118][T11787] syzkaller0: entered allmulticast mode [ 850.250167][T11782] wg1 speed is unknown, defaulting to 1000 [ 850.454934][T11782] wlan1 speed is unknown, defaulting to 1000 [ 850.494150][T11782] lo speed is unknown, defaulting to 1000 [ 850.523415][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17017'. [ 850.860441][T11809] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 851.106589][T11782] lo speed is unknown, defaulting to 1000 [ 851.200541][T11801] wg1 speed is unknown, defaulting to 1000 [ 851.556468][ T5829] lo speed is unknown, defaulting to 1000 [ 851.562249][ T5829] sqz0: Port: 1 Link DOWN [ 851.586509][ T5829] lo speed is unknown, defaulting to 1000 [ 851.733761][T11801] wlan1 speed is unknown, defaulting to 1000 [ 851.747723][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17027'. [ 851.749212][T11801] lo speed is unknown, defaulting to 1000 [ 851.779512][T11836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17026'. [ 852.477870][T11801] lo speed is unknown, defaulting to 1000 [ 852.548699][T11850] syzkaller0: entered promiscuous mode [ 852.557614][T11850] syzkaller0: entered allmulticast mode [ 852.733052][T11832] wg1 speed is unknown, defaulting to 1000 [ 852.905450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 852.913517][ C0] lec:lec_tx_timeout: lec0 [ 852.918255][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 852.992183][T11832] wlan1 speed is unknown, defaulting to 1000 [ 853.048730][T11832] lo speed is unknown, defaulting to 1000 [ 853.068195][T11859] 0: reclassify loop, rule prio 0, protocol 700 [ 853.660997][T11832] lo speed is unknown, defaulting to 1000 [ 853.668973][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17037'. [ 853.995978][T11878] syzkaller0: entered promiscuous mode [ 854.002752][T11878] syzkaller0: entered allmulticast mode [ 854.319797][T11883] syzkaller0: entered promiscuous mode [ 854.335897][T11883] syzkaller0: entered allmulticast mode [ 854.688262][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17045'. [ 854.711737][T11888] bond5: option mode: unable to set because the bond device has slaves [ 854.725370][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17046'. [ 854.735514][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17045'. [ 854.744477][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17045'. [ 854.790490][T11893] netlink: 'syz.4.17045': attribute type 4 has an invalid length. [ 854.802795][T11893] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17045'. [ 855.069358][T11893] .`: renamed from bridge7 [ 855.973303][T11922] netlink: 'syz.1.17055': attribute type 1 has an invalid length. [ 856.066282][T11922] 8021q: adding VLAN 0 to HW filter on device bond20 [ 856.240241][T11924] vlan5: entered allmulticast mode [ 856.270977][T11924] syz_tun: entered allmulticast mode [ 856.319877][T11924] bond20: (slave vlan5): Opening slave failed [ 856.362848][T11922] vlan5: entered allmulticast mode [ 856.368810][T11922] bond20: entered allmulticast mode [ 856.585501][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 857.390878][T11954] syzkaller0: entered promiscuous mode [ 857.412224][T11954] syzkaller0: entered allmulticast mode [ 857.504972][T11940] lec:lec_atm_close: lec0: Shut down! [ 857.878141][T11960] tipc: Started in network mode [ 857.888973][T11960] tipc: Node identity 06470317089e, cluster identity 4711 [ 857.916166][T11960] tipc: Enabled bearer , priority 0 [ 857.976079][T11960] syzkaller0: entered promiscuous mode [ 857.982299][T11960] syzkaller0: entered allmulticast mode [ 858.061468][T11968] syzkaller0: entered promiscuous mode [ 858.081255][T11968] syzkaller0: entered allmulticast mode [ 858.304682][T11966] wg1 speed is unknown, defaulting to 1000 [ 858.345051][T11973] tipc: Resetting bearer [ 858.421957][T11959] tipc: Resetting bearer [ 858.482149][T11959] tipc: Disabling bearer [ 858.797383][T11966] wlan1 speed is unknown, defaulting to 1000 [ 858.889851][T11966] lo speed is unknown, defaulting to 1000 [ 858.929092][T11990] syzkaller0: entered promiscuous mode [ 858.935554][T11990] syzkaller0: entered allmulticast mode [ 859.038211][T11995] netlink: 'syz.0.17076': attribute type 1 has an invalid length. [ 859.127848][T11999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17076'. [ 859.169020][T11998] tipc: Enabling of bearer rejected, already enabled [ 859.218638][T11999] bond9: entered allmulticast mode [ 859.256730][T11995] bond9: (slave geneve6): making interface the new active one [ 859.264399][T11995] geneve6: entered allmulticast mode [ 859.270935][T11995] bond9: (slave geneve6): Enslaving as an active interface with an up link [ 859.280432][T11966] lo speed is unknown, defaulting to 1000 [ 859.280449][T11998] syzkaller0: mtu less than device minimum [ 859.307397][ T107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 859.325649][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17078'. [ 859.334781][ T107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 859.356344][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17078'. [ 859.384668][ T107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 859.404891][ T107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 859.887592][T12022] syzkaller0: entered promiscuous mode [ 859.893193][T12022] syzkaller0: entered allmulticast mode [ 859.964566][T12026] netlink: 'syz.1.17084': attribute type 3 has an invalid length. [ 862.754254][T12075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17094'. [ 862.825371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 862.833448][ C0] lec:lec_tx_timeout: lec0 [ 862.838300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 862.868676][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17096'. [ 862.905541][T12083] syzkaller0: entered promiscuous mode [ 862.911059][T12083] syzkaller0: entered allmulticast mode [ 862.939666][ T5821] block nbd6: Receive control failed (result -1) [ 863.144468][T12093] netlink: zone id is out of range [ 863.152857][T12093] netlink: zone id is out of range [ 863.169569][T12093] netlink: zone id is out of range [ 863.183912][T12093] netlink: zone id is out of range [ 863.218385][T12093] netlink: zone id is out of range [ 863.228804][T12093] netlink: zone id is out of range [ 863.253746][T12093] netlink: zone id is out of range [ 863.276413][T12093] netlink: zone id is out of range [ 863.297515][T12093] netlink: zone id is out of range [ 863.842076][T12090] veth0_to_bond: left allmulticast mode [ 863.983083][T12108] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 864.005478][T12108] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 864.052496][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17104'. [ 864.064228][T12099] syzkaller0: entered promiscuous mode [ 864.075405][T12099] syzkaller0: entered allmulticast mode [ 864.083923][T12119] netlink: 79 bytes leftover after parsing attributes in process `syz.0.17103'. [ 866.030638][T12140] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 866.038809][T12140] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 866.119654][T12153] tipc: Enabled bearer , priority 0 [ 866.134421][T12153] syzkaller0: entered promiscuous mode [ 866.140044][T12153] syzkaller0: entered allmulticast mode [ 866.219971][T12153] tipc: Resetting bearer [ 866.242278][T12152] tipc: Resetting bearer [ 866.274216][T12152] tipc: Disabling bearer [ 866.390181][T12169] Cannot find set identified by id 65534 to match [ 866.662722][T12174] netlink: 63 bytes leftover after parsing attributes in process `syz.3.17116'. [ 866.755745][T12177] bridge0: entered promiscuous mode [ 866.761606][T12177] vlan2: entered promiscuous mode [ 866.766982][T12177] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 866.776498][T12177] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12177, name: syz.2.17117 [ 866.785756][T12177] preempt_count: 201, expected: 0 [ 866.790830][T12177] RCU nest depth: 0, expected: 0 [ 866.795850][T12177] 3 locks held by syz.2.17117/12177: [ 866.801149][T12177] #0: ffffffff90116898 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 866.811030][T12177] #1: ffffffff8fbc6f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 866.820158][T12177] #2: ffff888037968370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 866.830528][T12177] Preemption disabled at: [ 866.830541][T12177] [] dev_uc_add+0x56/0x120 [ 866.840919][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.17117 Not tainted syzkaller #0 PREEMPT(full) [ 866.840947][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.840968][T12177] Call Trace: [ 866.840976][T12177] [ 866.840985][T12177] dump_stack_lvl+0xe8/0x150 [ 866.841122][T12177] __might_resched+0x378/0x4d0 [ 866.841172][T12177] ? dev_uc_add+0x56/0x120 [ 866.841196][T12177] __mutex_lock+0x119/0x1300 [ 866.841287][T12177] ? __pfx__printk+0x10/0x10 [ 866.841318][T12177] ? __wake_up_klogd+0xe6/0x120 [ 866.841346][T12177] ? dev_set_promiscuity+0x10e/0x260 [ 866.841413][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 866.841441][T12177] ? netdev_info+0x11e/0x180 [ 866.841475][T12177] ? __pfx_netdev_info+0x10/0x10 [ 866.841493][T12177] ? _printk+0xdd/0x130 [ 866.841521][T12177] dev_set_promiscuity+0x10e/0x260 [ 866.841556][T12177] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 866.841658][T12177] __dev_set_promiscuity+0x515/0x710 [ 866.841718][T12177] ? netdev_info+0x11e/0x180 [ 866.841740][T12177] netif_set_promiscuity+0x50/0xe0 [ 866.841774][T12177] dev_set_promiscuity+0x126/0x260 [ 866.841810][T12177] br_manage_promisc+0x180/0x560 [ 866.841917][T12177] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 866.841941][T12177] __dev_set_promiscuity+0x515/0x710 [ 866.841972][T12177] ? __hw_addr_add_ex+0x361/0x650 [ 866.841997][T12177] __dev_set_rx_mode+0x17c/0x260 [ 866.842030][T12177] dev_uc_add+0xc8/0x120 [ 866.842053][T12177] macsec_dev_open+0xf2/0x5a0 [ 866.842136][T12177] ? __pfx_macsec_dev_open+0x10/0x10 [ 866.842160][T12177] ? ib_device_get_by_netdev+0x81/0x4f0 [ 866.842268][T12177] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 866.842325][T12177] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 866.842415][T12177] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 866.842490][T12177] ? ip6_route_dev_notify+0x9a/0x5b0 [ 866.842544][T12177] ? notifier_call_chain+0x3da/0x400 [ 866.842584][T12177] __dev_open+0x44d/0x830 [ 866.842671][T12177] ? __pfx___dev_open+0x10/0x10 [ 866.842695][T12177] ? __dev_change_flags+0x1b0/0x690 [ 866.842729][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 866.842775][T12177] __dev_change_flags+0x1f7/0x690 [ 866.842812][T12177] ? __pfx___dev_change_flags+0x10/0x10 [ 866.842855][T12177] rtnl_newlink_create+0x587/0xb70 [ 866.842887][T12177] ? __pfx___nla_validate_parse+0x10/0x10 [ 866.842993][T12177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 866.843024][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 866.843066][T12177] ? ns_capable+0x89/0xe0 [ 866.843096][T12177] rtnl_newlink+0x1666/0x1be0 [ 866.843141][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.843167][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.843245][T12177] ? kasan_quarantine_put+0xbb/0x1f0 [ 866.843293][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 866.843353][T12177] ? kmem_cache_free+0x187/0x630 [ 866.843375][T12177] ? nlmon_xmit+0xb0/0x100 [ 866.843467][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 866.843500][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 866.843526][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 866.843554][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 866.843574][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 866.843598][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 866.843646][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.843677][T12177] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 866.843710][T12177] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 866.843737][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.843763][T12177] ? ref_tracker_free+0x693/0x840 [ 866.843827][T12177] ? __copy_skb_header+0xa3/0x4a0 [ 866.843876][T12177] ? __pfx_ref_tracker_free+0x10/0x10 [ 866.843915][T12177] netlink_rcv_skb+0x232/0x4b0 [ 866.843985][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.844016][T12177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.844057][T12177] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.844090][T12177] netlink_unicast+0x80f/0x9b0 [ 866.844122][T12177] ? __pfx_netlink_unicast+0x10/0x10 [ 866.844154][T12177] ? netlink_sendmsg+0x650/0xb40 [ 866.844181][T12177] ? skb_put+0x11b/0x210 [ 866.844251][T12177] netlink_sendmsg+0x813/0xb40 [ 866.844291][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.844324][T12177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.844395][T12177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.844436][T12177] ____sys_sendmsg+0x972/0x9f0 [ 866.844497][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.844527][T12177] ? import_iovec+0x73/0xa0 [ 866.844622][T12177] ___sys_sendmsg+0x2a5/0x360 [ 866.844642][T12177] ? try_to_wake_up+0x832/0x1390 [ 866.844667][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.844695][T12177] ? futex_wake+0x4ac/0x580 [ 866.844752][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 866.844790][T12177] ? file_init_path+0x434/0x590 [ 866.844844][T12177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.844868][T12177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.844898][T12177] ? rcu_is_watching+0x15/0xb0 [ 866.844944][T12177] do_syscall_64+0x14d/0xf80 [ 866.844972][T12177] ? trace_irq_disable+0x3b/0x150 [ 866.845009][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.845029][T12177] ? clear_bhb_loop+0x40/0x90 [ 866.845055][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.845081][T12177] RIP: 0033:0x7fb59b79c799 [ 866.845102][T12177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.845121][T12177] RSP: 002b:00007fb59c6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.845142][T12177] RAX: ffffffffffffffda RBX: 00007fb59ba15fa0 RCX: 00007fb59b79c799 [ 866.845157][T12177] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 000000000000000d [ 866.845170][T12177] RBP: 00007fb59b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 866.845181][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.845192][T12177] R13: 00007fb59ba16038 R14: 00007fb59ba15fa0 R15: 00007ffd3735d7c8 [ 866.845222][T12177] [ 866.845233][T12177] [ 867.407846][T12177] ============================= [ 867.412682][T12177] [ BUG: Invalid wait context ] [ 867.417520][T12177] syzkaller #0 Tainted: G W [ 867.423492][T12177] ----------------------------- [ 867.428323][T12177] syz.2.17117/12177 is trying to lock: [ 867.433769][T12177] ffff8880332e4d40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 867.444137][T12177] other info that might help us debug this: [ 867.450021][T12177] context-{5:5} [ 867.453474][T12177] 3 locks held by syz.2.17117/12177: [ 867.459118][T12177] #0: ffffffff90116898 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 867.468972][T12177] #1: ffffffff8fbc6f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 867.478051][T12177] #2: ffff888037968370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 867.488242][T12177] stack backtrace: [ 867.491954][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.17117 Tainted: G W syzkaller #0 PREEMPT(full) [ 867.491976][T12177] Tainted: [W]=WARN [ 867.491982][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.491993][T12177] Call Trace: [ 867.492001][T12177] [ 867.492009][T12177] dump_stack_lvl+0xe8/0x150 [ 867.492034][T12177] __lock_acquire+0xec1/0x2cf0 [ 867.492057][T12177] ? __show_trace_log_lvl+0x478/0x550 [ 867.492084][T12177] lock_acquire+0xf0/0x2e0 [ 867.492102][T12177] ? dev_set_promiscuity+0x10e/0x260 [ 867.492128][T12177] ? __might_resched+0x378/0x4d0 [ 867.492151][T12177] __mutex_lock+0x19f/0x1300 [ 867.492174][T12177] ? dev_set_promiscuity+0x10e/0x260 [ 867.492199][T12177] ? __pfx__printk+0x10/0x10 [ 867.492213][T12177] ? __wake_up_klogd+0xe6/0x120 [ 867.492230][T12177] ? dev_set_promiscuity+0x10e/0x260 [ 867.492256][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 867.492277][T12177] ? netdev_info+0x11e/0x180 [ 867.492294][T12177] ? __pfx_netdev_info+0x10/0x10 [ 867.492308][T12177] ? _printk+0xdd/0x130 [ 867.492324][T12177] dev_set_promiscuity+0x10e/0x260 [ 867.492349][T12177] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 867.492370][T12177] __dev_set_promiscuity+0x515/0x710 [ 867.492395][T12177] ? netdev_info+0x11e/0x180 [ 867.492410][T12177] netif_set_promiscuity+0x50/0xe0 [ 867.492435][T12177] dev_set_promiscuity+0x126/0x260 [ 867.492460][T12177] br_manage_promisc+0x180/0x560 [ 867.492486][T12177] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 867.492504][T12177] __dev_set_promiscuity+0x515/0x710 [ 867.492528][T12177] ? __hw_addr_add_ex+0x361/0x650 [ 867.492545][T12177] __dev_set_rx_mode+0x17c/0x260 [ 867.492569][T12177] dev_uc_add+0xc8/0x120 [ 867.492584][T12177] macsec_dev_open+0xf2/0x5a0 [ 867.492608][T12177] ? __pfx_macsec_dev_open+0x10/0x10 [ 867.492626][T12177] ? ib_device_get_by_netdev+0x81/0x4f0 [ 867.492650][T12177] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 867.492672][T12177] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 867.492696][T12177] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 867.492715][T12177] ? ip6_route_dev_notify+0x9a/0x5b0 [ 867.492734][T12177] ? notifier_call_chain+0x3da/0x400 [ 867.492767][T12177] __dev_open+0x44d/0x830 [ 867.492789][T12177] ? __pfx___dev_open+0x10/0x10 [ 867.492807][T12177] ? __dev_change_flags+0x1b0/0x690 [ 867.492832][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 867.492853][T12177] __dev_change_flags+0x1f7/0x690 [ 867.492879][T12177] ? __pfx___dev_change_flags+0x10/0x10 [ 867.492907][T12177] rtnl_newlink_create+0x587/0xb70 [ 867.492931][T12177] ? __pfx___nla_validate_parse+0x10/0x10 [ 867.492959][T12177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 867.492983][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 867.493009][T12177] ? ns_capable+0x89/0xe0 [ 867.493030][T12177] rtnl_newlink+0x1666/0x1be0 [ 867.493056][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 867.493076][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.493105][T12177] ? kasan_quarantine_put+0xbb/0x1f0 [ 867.493122][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.493144][T12177] ? kmem_cache_free+0x187/0x630 [ 867.493161][T12177] ? nlmon_xmit+0xb0/0x100 [ 867.493189][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 867.493210][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 867.493229][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.493251][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 867.493267][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 867.493285][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 867.493310][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 867.493331][T12177] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 867.493354][T12177] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 867.493374][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 867.493394][T12177] ? ref_tracker_free+0x693/0x840 [ 867.493414][T12177] ? __copy_skb_header+0xa3/0x4a0 [ 867.493429][T12177] ? __pfx_ref_tracker_free+0x10/0x10 [ 867.493453][T12177] netlink_rcv_skb+0x232/0x4b0 [ 867.493476][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 867.493497][T12177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.493522][T12177] ? netlink_deliver_tap+0x2e/0x1b0 [ 867.493545][T12177] netlink_unicast+0x80f/0x9b0 [ 867.493567][T12177] ? __pfx_netlink_unicast+0x10/0x10 [ 867.493586][T12177] ? netlink_sendmsg+0x650/0xb40 [ 867.493607][T12177] ? skb_put+0x11b/0x210 [ 867.493631][T12177] netlink_sendmsg+0x813/0xb40 [ 867.493656][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.493678][T12177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.493699][T12177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.493718][T12177] ____sys_sendmsg+0x972/0x9f0 [ 867.493736][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.493759][T12177] ? import_iovec+0x73/0xa0 [ 867.493784][T12177] ___sys_sendmsg+0x2a5/0x360 [ 867.493798][T12177] ? try_to_wake_up+0x832/0x1390 [ 867.493814][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.493831][T12177] ? futex_wake+0x4ac/0x580 [ 867.493859][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 867.493882][T12177] ? file_init_path+0x434/0x590 [ 867.493908][T12177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 867.493924][T12177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.493943][T12177] ? rcu_is_watching+0x15/0xb0 [ 867.493968][T12177] do_syscall_64+0x14d/0xf80 [ 867.493990][T12177] ? trace_irq_disable+0x3b/0x150 [ 867.494017][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.494033][T12177] ? clear_bhb_loop+0x40/0x90 [ 867.494051][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.494066][T12177] RIP: 0033:0x7fb59b79c799 [ 867.494082][T12177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.494096][T12177] RSP: 002b:00007fb59c6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.494113][T12177] RAX: ffffffffffffffda RBX: 00007fb59ba15fa0 RCX: 00007fb59b79c799 [ 867.494125][T12177] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 000000000000000d [ 867.494136][T12177] RBP: 00007fb59b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 867.494146][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.494155][T12177] R13: 00007fb59ba16038 R14: 00007fb59ba15fa0 R15: 00007ffd3735d7c8 [ 867.494174][T12177] [ 868.081645][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 868.089681][ C0] lec:lec_tx_timeout: lec0 [ 868.094481][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 868.103962][T12177] macsec2: entered allmulticast mode [ 868.109392][T12177] bridge0: entered allmulticast mode [ 868.192037][T12177] bridge0: left allmulticast mode [ 868.197172][T12177] bridge0: left promiscuous mode [ 868.202212][T12177] vlan2: left promiscuous mode [ 868.207093][T12177] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 868.216411][T12177] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12177, name: syz.2.17117 [ 868.225646][T12177] preempt_count: 201, expected: 0 [ 868.230675][T12177] RCU nest depth: 0, expected: 0 [ 868.235636][T12177] INFO: lockdep is turned off. [ 868.240414][T12177] Preemption disabled at: [ 868.240426][T12177] [] dev_uc_del+0x56/0x110 [ 868.250789][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.2.17117 Tainted: G W syzkaller #0 PREEMPT(full) [ 868.250821][T12177] Tainted: [W]=WARN [ 868.250827][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.250840][T12177] Call Trace: [ 868.250849][T12177] [ 868.250858][T12177] dump_stack_lvl+0xe8/0x150 [ 868.250887][T12177] __might_resched+0x378/0x4d0 [ 868.250913][T12177] ? dev_uc_del+0x56/0x110 [ 868.250932][T12177] __mutex_lock+0x119/0x1300 [ 868.250968][T12177] ? __pfx__printk+0x10/0x10 [ 868.250988][T12177] ? dev_set_promiscuity+0x10e/0x260 [ 868.251019][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 868.251046][T12177] ? netdev_info+0x11e/0x180 [ 868.251067][T12177] ? __pfx_netdev_info+0x10/0x10 [ 868.251083][T12177] ? __hw_addr_add_ex+0x361/0x650 [ 868.251107][T12177] dev_set_promiscuity+0x10e/0x260 [ 868.251137][T12177] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 868.251164][T12177] __dev_set_promiscuity+0x515/0x710 [ 868.251195][T12177] ? lock_release+0x4b/0x3d0 [ 868.251226][T12177] netif_set_promiscuity+0x50/0xe0 [ 868.251256][T12177] dev_set_promiscuity+0x126/0x260 [ 868.251287][T12177] br_manage_promisc+0x4db/0x560 [ 868.251319][T12177] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 868.251341][T12177] __dev_set_promiscuity+0x515/0x710 [ 868.251370][T12177] ? __hw_addr_del_ex+0x73/0x4e0 [ 868.251391][T12177] __dev_set_rx_mode+0x17c/0x260 [ 868.251420][T12177] dev_uc_del+0xc0/0x110 [ 868.251439][T12177] macsec_dev_stop+0x32f/0x410 [ 868.251465][T12177] ? __pfx_macsec_dev_stop+0x10/0x10 [ 868.251487][T12177] ? do_raw_spin_lock+0x12b/0x2f0 [ 868.251506][T12177] ? rcu_is_watching+0x15/0xb0 [ 868.251533][T12177] ? dev_deactivate_many+0xb70/0xd40 [ 868.251745][T12177] ? rcu_is_watching+0x15/0xb0 [ 868.251770][T12177] ? dev_deactivate_many+0xb70/0xd40 [ 868.251795][T12177] ? trace_irq_enable+0x3b/0x150 [ 868.251823][T12177] ? dev_deactivate_many+0xb70/0xd40 [ 868.251849][T12177] ? dev_deactivate_many+0xb70/0xd40 [ 868.251875][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 868.251900][T12177] ? dev_deactivate_many+0xd02/0xd40 [ 868.251928][T12177] ? dev_deactivate_many+0x24f/0xd40 [ 868.251955][T12177] ? __pfx_macsec_dev_stop+0x10/0x10 [ 868.251980][T12177] __dev_close_many+0x36d/0x6e0 [ 868.252009][T12177] ? __pfx___dev_close_many+0x10/0x10 [ 868.252034][T12177] ? kasan_save_track+0x3e/0x80 [ 868.252054][T12177] ? kasan_save_free_info+0x46/0x50 [ 868.252082][T12177] ? kfree+0x1c1/0x630 [ 868.252097][T12177] ? rtnl_newlink_create+0x843/0xb70 [ 868.252126][T12177] ? rtnl_newlink+0x1666/0x1be0 [ 868.252151][T12177] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 868.252178][T12177] netif_close_many+0x225/0x420 [ 868.252202][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.252234][T12177] ? __pfx_netif_close_many+0x10/0x10 [ 868.252263][T12177] unregister_netdevice_many_notify+0xb47/0x2370 [ 868.252294][T12177] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 868.252317][T12177] ? rcu_is_watching+0x15/0xb0 [ 868.252343][T12177] ? trace_irq_enable+0x3b/0x150 [ 868.252374][T12177] ? kfree+0x1c1/0x630 [ 868.252390][T12177] ? rtnl_newlink_create+0x843/0xb70 [ 868.252421][T12177] rtnl_newlink_create+0x84b/0xb70 [ 868.252451][T12177] ? __pfx___nla_validate_parse+0x10/0x10 [ 868.252485][T12177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 868.252516][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 868.252550][T12177] ? ns_capable+0x89/0xe0 [ 868.252575][T12177] rtnl_newlink+0x1666/0x1be0 [ 868.252609][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 868.252633][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.252670][T12177] ? kasan_quarantine_put+0xbb/0x1f0 [ 868.252690][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 868.252718][T12177] ? kmem_cache_free+0x187/0x630 [ 868.252736][T12177] ? nlmon_xmit+0xb0/0x100 [ 868.252768][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 868.252794][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 868.252818][T12177] ? lockdep_hardirqs_on+0x7a/0x110 [ 868.252844][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 868.252864][T12177] ? __local_bh_enable_ip+0xd0/0x130 [ 868.252887][T12177] ? __dev_queue_xmit+0x28d/0x38d0 [ 868.252920][T12177] ? __pfx_rtnl_newlink+0x10/0x10 [ 868.252945][T12177] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 868.252973][T12177] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 868.252999][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 868.253024][T12177] ? ref_tracker_free+0x693/0x840 [ 868.253049][T12177] ? __copy_skb_header+0xa3/0x4a0 [ 868.253068][T12177] ? __pfx_ref_tracker_free+0x10/0x10 [ 868.253100][T12177] netlink_rcv_skb+0x232/0x4b0 [ 868.253127][T12177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 868.253155][T12177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 868.253185][T12177] ? netlink_deliver_tap+0x2e/0x1b0 [ 868.253220][T12177] netlink_unicast+0x80f/0x9b0 [ 868.253248][T12177] ? __pfx_netlink_unicast+0x10/0x10 [ 868.253272][T12177] ? netlink_sendmsg+0x650/0xb40 [ 868.253298][T12177] ? skb_put+0x11b/0x210 [ 868.253328][T12177] netlink_sendmsg+0x813/0xb40 [ 868.253359][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.253386][T12177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 868.253412][T12177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 868.253434][T12177] ____sys_sendmsg+0x972/0x9f0 [ 868.253463][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 868.253485][T12177] ? import_iovec+0x73/0xa0 [ 868.253515][T12177] ___sys_sendmsg+0x2a5/0x360 [ 868.253533][T12177] ? try_to_wake_up+0x832/0x1390 [ 868.253554][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.253575][T12177] ? futex_wake+0x4ac/0x580 [ 868.253609][T12177] ? __lock_acquire+0x6b5/0x2cf0 [ 868.253638][T12177] ? file_init_path+0x434/0x590 [ 868.253671][T12177] __x64_sys_sendmsg+0x1bd/0x2a0 [ 868.253691][T12177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 868.253713][T12177] ? rcu_is_watching+0x15/0xb0 [ 868.253744][T12177] do_syscall_64+0x14d/0xf80 [ 868.253771][T12177] ? trace_irq_disable+0x3b/0x150 [ 868.253799][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.253819][T12177] ? clear_bhb_loop+0x40/0x90 [ 868.253838][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.253858][T12177] RIP: 0033:0x7fb59b79c799 [ 868.253880][T12177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.253898][T12177] RSP: 002b:00007fb59c6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.253919][T12177] RAX: ffffffffffffffda RBX: 00007fb59ba15fa0 RCX: 00007fb59b79c799 [ 868.253935][T12177] RDX: 0000000020000044 RSI: 0000200000000040 RDI: 000000000000000d [ 868.253949][T12177] RBP: 00007fb59b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 868.253961][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.253973][T12177] R13: 00007fb59ba16038 R14: 00007fb59ba15fa0 R15: 00007ffd3735d7c8 [ 868.253998][T12177] [ 872.585560][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 873.875321][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 873.883335][ C0] lec:lec_tx_timeout: lec0 [ 873.887939][ C0] lec:lec_start_xmit: lec0:No lecd attached