last executing test programs: 8.358126645s ago: executing program 3 (id=8159): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1d", 0x9c}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.816745628s ago: executing program 0 (id=8180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f0000002380)="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", 0x2f1}], 0x2}, 0x4005) 5.693577512s ago: executing program 0 (id=8181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 5.630023646s ago: executing program 3 (id=8182): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002404000000a080001400000000108000340030000000900010073797a30"], 0xc8}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r2, r3, 0x3, 0x0, 0x0, 0xc, 0xf, 0x6, 0x5508, 0x100, 0x1, 0xb, 'syz0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 5.515462277s ago: executing program 3 (id=8185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, r3, 0x1, 0xffffffff, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) 5.465669451s ago: executing program 1 (id=8186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 3.576502799s ago: executing program 3 (id=8189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) epoll_create(0x10001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xaf) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000380)={0x1d, 0x4, 0x42, 0x200320a, @vifc_lcl_ifindex, @remote}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 3.52973724s ago: executing program 0 (id=8191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2000003, 0x3, 0x6361, 0x5, 0xfffffffd, 0x100006}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x10, 0xfff8, 0xffff668f, 0x1, 0x3, 0x1ff, 0x1}}, {0x6, 0x2, [0x40]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.699841071s ago: executing program 2 (id=8193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.653715343s ago: executing program 1 (id=8195): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x2, 0x0, 0x8001}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003f00090000000000040000000400000000000000080008"], 0x20}}, 0x4004080) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r4, {}, {}, {0x10}}}, 0x24}}, 0x0) 1.585040449s ago: executing program 3 (id=8196): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80000) sendto$inet(r1, &(0x7f0000000080)="4b134a6299cd19a4a38d8ef40e307b337476a4ddfdc3d7e73336", 0x1a, 0x48001, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000002001000000000000000000000000000000000000000000000000000003000000000000007f000001000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003300000004000000ffffffff0000000000000000000000000000000001"], 0x23c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001440)=ANY=[], &(0x7f00000001c0), 0x46, 0x0, 0x1}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 1.570533528s ago: executing program 0 (id=8197): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1.503124927s ago: executing program 4 (id=8198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.218129415s ago: executing program 3 (id=8199): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x300000000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) socket$kcm(0x29, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x8}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x11, 0x3, 0x21, 0x0, @broadcast, @broadcast}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0x4}}}}}, 0x6a) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 1.217714641s ago: executing program 1 (id=8200): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 1.17997186s ago: executing program 0 (id=8201): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$qrtr(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0xb, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xa0}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.170216304s ago: executing program 2 (id=8202): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)) socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.161444229s ago: executing program 4 (id=8203): r0 = socket(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f00000010c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket(0x27, 0x80001, 0x0) 1.021339732s ago: executing program 2 (id=8204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 973.815943ms ago: executing program 1 (id=8205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 802.167652ms ago: executing program 0 (id=8206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) epoll_create(0x10001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xaf) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000380)={0x1d, 0x4, 0x42, 0x200320a, @vifc_lcl_ifindex, @remote}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 801.786424ms ago: executing program 2 (id=8207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 608.490127ms ago: executing program 4 (id=8208): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) connect$inet(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 498.127672ms ago: executing program 1 (id=8209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 497.677659ms ago: executing program 2 (id=8210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100626f6e64000000e60b00028005000e000a000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'veth0\x00', {0x2, 0x0, @broadcast}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x11ac, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "8824de439e0e4b3109238dacd3c8d9f35e7efbef7f9245b1c8b8137bd312c3bf88f60a3f"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1150, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "c05f63515513ba4d064dc4763d890ab49457972a99a54949ee8e19bcb3f6e5c7dbc1dd88765886fd1780c16f779ae750b61583a8e5093aa18bcbf7a6ff647c877049f9c4fd6e9b38afd62a6d80a2f33d7d559bed23b07cb14f27a8fa1b848b96304bd81e4e11330c492f1d2514c6fca3ec7ee1876b183523608adec6d45ec0477d59967c903091446bef3beb30358265d692d3aef0368510e5307170c46fcd499807f8e078500fd4667da140fc7b6d6e69552c8fc8e143061d0d2c87c43788162f90fafe04e4e8ba5f001ea1f2b6971eca4064970a40c7b531021fd95ee84f5b83ae3b9212fb48979b7bcab6bf7aec8f0e5291bdcdc090801d5a2a2ecd0db346b0cbd018cb238f9761dc9d7f2b503d61f9aec58af4604496c21940b8c1e874b9aed481cfa18313bf617e84fea991c51a00a3dd1f9e46bd01d9b2fdef9463f581a0ecd0644919a826ea764a854aac9afb58c1208405d2ed22583ed7856c46fd0d51d3c0dd41beb2beddf542f4693ddf3e7c9abe2cbfe2c4cae110f5e95dc117ba6867aee7832e1877a3a360b9895b9fc6fa1bd9812af31b56277a58d0fbc5fb6036964a60c942025819346bbe00e78d823f993ce55c5a0954d218993d5a21392ee9b7ab1c21c766de7019b3030a99443c0e74bfd527146f7606f8592ffc12c8687c05c102ded40b8f0021c8b0f4d33d1c2193730d04e9fb2650879ab106a77a8ab60de0cfda18153234de494fb6f2ebf6e4bf170121efb03c6b2ab691dea94b2de08bf47653ad74c06ad4dc0040b8f2b4e148d62591f67e3ad17a9a0d91046cee89a723c04a54fc03b623632f5fc1cf6b6b6f24d47e2d02282019493ff2120f5b5bbb137697c01ff3701db5140f76fa9165e8fe5a838a08a14df7b1f6ea4e05ba005922348545dfdc4ba27f6d844511cdcfec1094f1bdd0a4429a49601d06e21010f3dfd7efc52cca2d52e8d972ef0279b5d1836d1146f4527fc22e86438c7ebdce18b88bf68f665383ef3dae0457c426adca3f163457eac6694fdf8762cbe0c196a4f14f05b859db6542e489647e789efa4fb3b13963e4f0c071918d1fc11cd5241a73eb5e13be61a4f2c7962c7416e3dfe29ca8b01e1e334061650e873f081b87debd1be60aaa103c89cba84776c8166e4523feb71a62a5c389ae3be9901375621ddbe920d98e19b69b3159887d947a401a65f180dad5195de052313c130780373c87f0f80dc56305be99748f2f730909204608d7dc56e20db0d576fc832fa966e7b79fdd964a691fd2f65a87b069055ede79c17b4247b98f489214d079c7b2baa05059ad9ae3bb1a8d20940db8013ad13078e5a9dde7850905d755206ffc544d76afc42cc405d247c2b698c322cafa588c44776dbb5a476379d99b6f1b112d8e5cb2c2444dce8d69c90869e30291dbdc6f261b43210f8156be12df4e60dfae3544b07df43cbbfe252b2f9275ad435c6f60ffcf46676891793d2f22b765a3ff9b8affbe7016fc8f4cf36570a7cb7c178f47b3e5305680b00995b9c8ba0fde451b2f4701d2c2aa63c78c39a20e26ac3509d62adfd21c00dea1504c370003084b8721e94009960d0af7a7300823280aec404e3ea9e0a94a308dbb4f771edb5c5495fd9799b54b9dc0b6eab1162eef3711f13d0c48965cd11be3b9df875ff49ef2ad819ec3167846fdddf277f2d5a0e53222df75cf86afc204d464cd12a61c135cf6e5a70fa5c9d157a2be19e7cb1b01613c4bd0324f346553c9f8b8a1e6c8ddcb547ac1c9bc4d98a5eae2e65de081e9e1199ef0a38015f11128b329256fc612a1cfbb4715e170ec3dd33e9884ce51da9480b9b2c2c3e98e3bc153b1731ef36b127427ebf65fadbaeb81b7ec33797c8c50cadaa133155add65de2c7bc83c888c12bc8096b99e8a31e6f2ed1f1e4732aed895cfe08165b7b26ad4581959632bfcd04f7cc289f3917da4d069e778ac17e6e82e24ca9a5e28c94d6b5db6b7482c4391cafe6a24b38ab986ba596397eee7f1ca99b8fb4fb418f1604a64259aa642659a2ecd262d22247688b714126805f36edf0d12721e9eeb92a3de2f24b406dd201c6ea9d06ddd4b13c7c36ed85c4219251c7d3ded7eecfcabde087735166afbc46848f4eaaec9999d8425c053405150ce3ba9cd3c3d0c030727ed7df6b7d7a834a3816af79e3d64d00c9f494736de7001e4d247a1f1f3c8f6f542ab93b8f4cba5270b2f7ede86c8bcd6fd77eb7595e9eec39fb89e59b1b9f51d655a525c4f8aa91aac7c9de680e4e8462fe6955ecacd646882e29cdadaae0b87a405cd6d7f26e1e41c454cd5bd21b5d79604eb8f06a7876b314f4b09f05b22f7e2008b9fde4f1681732de23ab15bb71641d1ce5d82c543d3d87ee39b7a343bc21c74211da7cc2c0cfae1bace115e7bb8ed840734c053776e7159acf949220217d8034b136b0d3ef600f6527bb5abf5894b0e3848dd10c9606bac53b017277ca08312e6f7379f6dba1a15d6a3c98abd62c9b98e6406a20cb6a5543d800a9ab5803e0447b234ef427bbc479152b65201e41a6570cc57bcda5683f6397e4e0069a5706c5bed53f1cdf8ca795747bac42098b45c925fd3f62de272db62cd12ec1b85cfb519d23e72b4423e60825aa7495edf004cb832dd396cc2b89d1f1efb72f610f9580c0425dd6f3324c9f87d4bc6ecdec63c899cbf59bb619dcf080fbf4c5c772b47770a8271b9fc921d45abb6ab47a3aece34051b6b9fe05c1460f8958ec19542bc990ae60ed700546f378225ac1a2eb03b92695055a5c2dbdb621f85c3c9501107dd6b60bc23c7ea33e2a08ac6c6d280c07cf82b51f56c1aca91b1a47ff961e701c5807521a1935ed5d1073bd0ad37fae6aad4de296a077316648bbcbaeb07c7ef5434a76b3c3b83cb825fa480226c95506d4ca5a3cf4f8d2f662f3e48f6df133e1a76a978d94900536417ca61c82c1449c99e07780e4b35b7f8444366a32910ea73fd5a975e76d75d892b66b070404622f66a220cad5e107a9e8f5eae714c5df7038fdb12dded2db03b5d82cc7f9659418fea7526c2417bc6baeb4641bc2f8a5af57e686581c6901bad8fd87b225aef17bd0df4713458b53076f664abc9acfd002a8490c5864c5df9fae1dd7dd4f07bd71a64d74a775ae2f04a12313034bf337da9128f3139c20727b01f403b9b5f55fc96e412e7275516363cd3fbacbea8d30c5f5b4741d3689afd05420c5b953a32b55f4745b8f47a1242714c3b7693caab1b0451a10b3564e82de475e93773d88cce2314871ed9ad9430c5cb82a798fb70e164d85ae49acf46dfab1bdb34d242ed4c87f88673d844f653037b3e47024b3ffa41013d753328610c5bc2ce00c86ce39e4f799f674e03cb14dd94c61c31ae458dd52a5965876aa5a2cd54e15f928bb2cdc35b4cb56860e4672f8a5deb71f003b52fe2dc421e8cbbd30d75af67d9718c1cb9c8749547f4a2f2e8c07bf401f21008e9fb7fa8b472b9378b1d40c38bcaf8b63308bdfc883eea7c17f553d38dce4987db4041467e9c24da6e95d91d0ffafcbd19686c4b92d7911037706b9db2c7a7cd071955cce4ba725be1f37f424f6d7707117bc7e722307cfaf59ad0cdf0d8f6ccc045561db849e94ac596f856a443063e8554a746cd10404b4c6a39b38884df6a3a83d1abe5c3e177d04f92497a18bcecd98f2a4f51b49ad7904f9bd595b943b3ccfc192807371ac85b3f4bec7efd31e9cf1f2aa87da63ec597177db908905b37d3f6e4dca2d1cf4d748215e988c6ffb3da7ace28b415990bd10b9cd83fa6cacd436dd325ff69b3487ef9ec25188639cc53375bea8e5443b41750dc5390ea5b00191460d30b1e512c1e4f71eb35471406720c072c06c5ed58c7eaccb210e8c1fc450e1a9aeab5ef25da9ac2d369e710d87251660388f962dfc5b5d6964d9954f13c82cded1123f23f9f10eb8ef7a1de64dafb8a8a2599eae952469e48ef4d6ea28ba1414d34802a77dbd317a4be6caf11309790ce789b39345cf6c72d16d8c0af501485e108d538f16b8da6d513dd80754e4d6bf900fcfa1e4bcbfb50f24d251c4820d1feb8ebb29f199daa3010c86fa3fb12b50da219798b1497b5dfb62a19353a702b5f0d66d3233b814ef091945f7f4c5a15be8a37019418f62aade5f8a8638c345f68f8fbf54427ad406e1a2df251c5cae0ac6af6bdb7c4bc40ef7057807ace91ac8e13ef609f76e651a5c07488ab79b97caed7d7332fc0e46ba29a7ad4e931cc718f97ac67baaca9495e3dc2b6845792c483fbce1c1eb0378634c36c9c3fba4e94858f43cd6f55751cb007d9b60eb9b01715e2b416dbff1a04ec8008a9c8605aa33efdded1760793092912e803a1aa489ec98c1efd426c2fa6a57307f48b5271de0e6a9c75a8c93513d6271295da18bc6017b899e57061d72b589cbaab888ea4194fb37357db11ca0e4bbe695436980f08f42f35e6a83ae96b9b0807942fe851306e578c633f220ded5a22bc689e8ae1b6f9704db1208d7535d77571fe99031e06fb826bafd2e4aa40a4c6a1e581f3b783b11d93d28694c283d6285ee1bf4ddef2e8e385be18f610a8bfeca240509af83a293452b5f8b6f49f5a351cac5ba15e951f80a624a7b2d6cdf3699a2eaf6400f526a430b739c649818905078ffaf22bb7c4ecae179a179c5d9ebafd39f076153922d9d3f8e5c031c9ad9a63d9cf231a84233433e0342a70063933950e1cd46787aa03eb369860d3451912d4e449b0c5e3887f7b44d7dc2e02108c83e066dcb8756708cc7b3b5da0cc60707c04d15ce6aa713baad885814c6622fa7b1f8583192e3fe99e5caa21b012fd992c0ce0d8d95d3c7459acc17b518e2907b818c4c7791fa80990c0c035e93a0433e36cb9b20fc2becea93e1dad334b48b4f6e64de66f1707f77c8afa9de0fb32f1ecbd2ea2c4b53c9dcf32ec233ff2939e9701dcd202ec94015d10d3afacef5fe905d87bc0c658478f0876f07a05e431ee959bf8b6b61c1f56823b3c9edc83b2ec11fdbae3c468ed219a75dee607b89cb7f75955c4d3d722baaa66db57588bcef53b77088223a44c123a726ecb12d68921230e53899fc85bfa6763a0199613a1b4087f40e846f71e576ba6e341aa3282dcc9593cdb7549de569c99f40e6262c57d29c39ab4703d05abd53cd1b17950d33a268abe8274fb8c265186d8a08638e62aa4447fdf27582c1eba15643d2bda25e59dceb72976a3e95a719b19f122f70230fc446b36a6878a457f3989f648c06217c8bd847612277b58b41a9ff4d88ce803607e75f100becb7a4e589cc4ac2cb99c4622563daab9e57183786dd58edafb9a33c7ea2e02714320659c33e19d07111c52a3625d76bfc99541280466afdc59a3ed2e9f16bdb19f8b065420e7df814a54d193f17167758580f4200aa06adde0fb98b6a633b7bbbba779c25deb00187770368b1200bc4dd99fc73329626b6c0ba5cd7fafb11ebe48021e0f1676e78a7d3be3b7e440dd6d9c4e0ea46d2cc334378a6cc34b679339368d6e37b1916b011dc2b71a39b0ed9317d8a3bbfc027a27eb3613f6aed806972fc00685b148a6bf6c7c39c019e766d15b17545275378244edfacae77e7c0dff22649e487847f333848510622123ab0d9056c1ba962ac2a930de1b9a1a6a2084622630399bec5afb876322e6018f1f3fa769d7f87a4cd7a9c5e5a827fb2f9ae72d3e1d45f3be64b8e2b4b3f78e634dab7ad4e125d11c1ca13af4880b567220358d73d45ed637b1f8914f8a3a150e2ec4a81b1501f100e211733612ff35b627a31255b3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xbc, 0x5, "4c720adb5f027c49b24bd85904dde115b8ad2e479d5aa041c63666ce3d15ca3d5baef2fa9a768e399d9ba8a8cb8e36c4ed8b74e560eb2ee3c1881e3fb5f4e0f4498e0a1c39f7583abf9c5d553aa5524b12860ed804480f45677f4da062929723a69f475c477475fb7aa95fde8529c7bd389420690521b65306c2f4c6eb55bffe9357dbaab9b1ad49ab179161b0b86593926c107b95e45769d91d8f66acaab3ac08d9212541262ba7a2c628e74c5d627f3b36a527fd8f63b3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\f]]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x2000c080}, 0x81) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=@newsa={0x1c8, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x0, 0x0, 0x4}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x1c8}}, 0x0) 497.40196ms ago: executing program 4 (id=8211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x40080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r1, r1, 0xd, 0x24, &(0x7f00000001c0)="205efe13b3e930f26895609d2f2b1cae8c8a1267dd916b65070d70973b22360db37aa695", 0x5, 0x81, 0x10cf, 0x80, 0x8b, 0x3, 0x9, 'syz0\x00'}) 372.393393ms ago: executing program 4 (id=8212): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xfe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 321.610778ms ago: executing program 1 (id=8213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 28.834628ms ago: executing program 4 (id=8214): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)) socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=8215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) read(r1, &(0x7f00000003c0)=""/123, 0x7b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): nown, defaulting to 1000 [ 643.274673][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6087'. [ 643.300662][T23212] tipc: Resetting bearer [ 643.331651][T23210] tipc: Resetting bearer [ 643.359672][T23210] tipc: Disabling bearer [ 643.379827][T23217] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 643.552935][T23223] netlink: 'syz.1.6089': attribute type 10 has an invalid length. [ 643.587469][T23223] netlink: 'syz.1.6089': attribute type 10 has an invalid length. [ 643.661617][T23229] netlink: 'syz.0.6090': attribute type 1 has an invalid length. [ 643.734437][T23236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6090'. [ 643.809013][T23229] 8021q: adding VLAN 0 to HW filter on device bond11 [ 643.876311][T23229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6090'. [ 643.965827][T23229] bond11: entered allmulticast mode [ 643.986692][T23236] batman_adv: batadv0: Removing interface: dummy0 [ 644.039870][T23236] bond11: (slave dummy0): making interface the new active one [ 644.047790][T23236] dummy0: entered allmulticast mode [ 644.066909][T23236] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 644.443515][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6092'. [ 644.889790][ T1165] net_ratelimit: 16 callbacks suppressed [ 644.889810][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 645.017103][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 645.057204][T23279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.116950][T23282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6096'. [ 645.136819][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 645.352761][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 645.496959][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 645.574314][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6099'. [ 645.606622][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 645.726539][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 645.836564][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 645.947645][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 646.057211][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 647.582711][T23268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.153711][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6105'. [ 648.685386][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 648.717825][T23354] ip6tnl0: Caught tx_queue_len zero misconfig [ 648.723979][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6108'. [ 649.234034][T23368] netlink: 'syz.0.6111': attribute type 10 has an invalid length. [ 649.254276][T23368] bond11: (slave dummy0): Releasing active interface [ 649.261190][T23368] dummy0: left allmulticast mode [ 649.272248][T23368] netlink: 'syz.0.6111': attribute type 10 has an invalid length. [ 649.284231][T23368] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 649.976642][T21457] net_ratelimit: 34 callbacks suppressed [ 649.976665][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 650.096571][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 650.206584][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 650.316531][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 650.426704][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 650.536650][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 650.646541][ T58] bond4: (slave bridge12): failed to get link speed/duplex [ 650.757037][ T3499] bond4: (slave bridge12): failed to get link speed/duplex [ 650.786552][T23301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.998347][ T3499] bond4: (slave bridge12): failed to get link speed/duplex [ 651.007442][T23379] netlink: 'syz.3.6113': attribute type 1 has an invalid length. [ 651.120797][ T7744] bond4: (slave bridge12): failed to get link speed/duplex [ 651.338286][T23400] team0 (unregistering): Port device bridge1 removed [ 651.352194][T23400] team0 (unregistering): Port device geneve0 removed [ 651.360925][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6118'. [ 651.374781][T23400] team0 (unregistering): Port device bridge16 removed [ 651.406868][T23402] bond6: (slave vcan0): Releasing backup interface [ 651.415305][T23402] bond6: Destroying bond [ 651.436201][T23402] bond6 (unregistering): Released all slaves [ 651.517237][T23406] tipc: Enabling of bearer rejected, already enabled [ 651.662803][T23412] syzkaller0: entered promiscuous mode [ 651.668562][T23412] syzkaller0: entered allmulticast mode [ 651.908485][T23434] delete_channel: no stack [ 651.935736][T23419] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 651.948492][T23419] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6123'. [ 653.758695][T23443] tipc: Enabling of bearer rejected, failed to enable media [ 653.934042][T23470] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6128'. [ 653.960806][T23470] 0ªî{X¹¦: renamed from gretap0 [ 654.129758][T23486] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6131'. [ 654.549275][T23470] 0ªî{X¹¦: entered allmulticast mode [ 654.629661][T23489] syzkaller0: entered promiscuous mode [ 654.656521][T23489] syzkaller0: entered allmulticast mode [ 654.681368][T23502] tipc: Enabled bearer , priority 0 [ 654.722751][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 654.745757][T23482] tipc: Resetting bearer [ 654.802386][T23482] tipc: Disabling bearer [ 655.029940][T21457] net_ratelimit: 6 callbacks suppressed [ 655.029961][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 655.157923][T23527] lo speed is unknown, defaulting to 1000 [ 655.165910][T23526] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6139'. [ 655.186871][T23526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6139'. [ 655.216726][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 655.269653][T23533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6139'. [ 655.322502][T23534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6139'. [ 655.332207][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 655.448870][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 655.472182][T23523] lo speed is unknown, defaulting to 1000 [ 655.586447][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 655.716766][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 655.836446][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 656.070871][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 656.196499][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 656.275632][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6141'. [ 656.311604][ T3499] bond4: (slave bridge12): failed to get link speed/duplex [ 656.329641][T17457] IPVS: starting estimator thread 0... [ 656.390885][T23544] lo speed is unknown, defaulting to 1000 [ 656.426601][T23547] IPVS: using max 28 ests per chain, 67200 per kthread [ 657.816840][T23510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.028200][T23567] syzkaller0: entered promiscuous mode [ 658.048684][T23567] syzkaller0: entered allmulticast mode [ 658.084264][T23569] netlink: 'syz.1.6147': attribute type 10 has an invalid length. [ 658.203816][T23572] lo speed is unknown, defaulting to 1000 [ 658.300428][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6150'. [ 658.381135][T23584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6150'. [ 658.912310][T23597] gtp0: entered promiscuous mode [ 658.995326][T23599] syzkaller0: entered promiscuous mode [ 659.001344][T23599] syzkaller0: entered allmulticast mode [ 659.022727][T23597] IPVS: Unknown mcast interface: vcan0 [ 659.050519][T23599] tipc: Enabled bearer , priority 0 [ 659.075268][T23597] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.089888][T23599] tipc: Resetting bearer [ 659.106674][T23598] tipc: Resetting bearer [ 659.199631][T23598] tipc: Disabling bearer [ 659.584654][T23630] netlink: 'syz.0.6162': attribute type 10 has an invalid length. [ 659.663915][T23632] __nla_validate_parse: 4 callbacks suppressed [ 659.663929][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6159'. [ 660.136576][ T36] net_ratelimit: 25 callbacks suppressed [ 660.136598][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 660.256548][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 660.366591][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 660.476596][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 660.586662][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 660.696576][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 660.806527][ T58] bond4: (slave bridge12): failed to get link speed/duplex [ 660.916553][ T58] bond4: (slave bridge12): failed to get link speed/duplex [ 661.026590][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 661.136594][ T58] bond4: (slave bridge12): failed to get link speed/duplex [ 661.960028][T23601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.143175][T23651] x_tables: duplicate underflow at hook 2 [ 662.183109][T23652] lo speed is unknown, defaulting to 1000 [ 662.245688][T23658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6165'. [ 662.255973][T23657] netlink: 'syz.0.6163': attribute type 21 has an invalid length. [ 662.297165][T23657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6163'. [ 662.355521][T23662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6164'. [ 662.628141][T23655] lo speed is unknown, defaulting to 1000 [ 662.954755][T23671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.432266][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6171'. [ 663.535902][T23686] lo speed is unknown, defaulting to 1000 [ 664.159128][T23703] siw: device registration error -23 [ 664.194277][T23697] lo speed is unknown, defaulting to 1000 [ 665.145552][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6176'. [ 665.162981][T23744] block nbd4: NBD_DISCONNECT [ 665.184844][T23744] block nbd4: Send disconnect failed -32 [ 665.242593][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'. [ 665.256685][ T3499] net_ratelimit: 25 callbacks suppressed [ 665.256707][ T3499] bond4: (slave bridge12): failed to get link speed/duplex [ 665.416038][T23749] netlink: 'syz.2.6177': attribute type 1 has an invalid length. [ 665.756461][T23749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.824031][T23756] bond5: (slave gretap3): making interface the new active one [ 665.864940][T23756] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 666.136952][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 666.322305][T23765] lo speed is unknown, defaulting to 1000 [ 666.328400][ T1165] bond4: (slave bridge12): failed to get link speed/duplex [ 666.529823][ T58] bond4: (slave bridge12): failed to get link speed/duplex [ 666.659271][ T1162] bond4: (slave bridge12): failed to get link speed/duplex [ 666.778775][T21457] bond4: (slave bridge12): failed to get link speed/duplex [ 666.896503][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 667.142148][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6184'. [ 667.177235][ T36] bond4: (slave bridge12): failed to get link speed/duplex [ 667.200701][T23784] lo speed is unknown, defaulting to 1000 [ 667.228441][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6184'. [ 667.376389][T23798] bond0: entered allmulticast mode [ 667.381585][T23798] vti0: entered allmulticast mode [ 667.390351][T23796] 0ªî{X¹¦: left allmulticast mode [ 667.419813][T23796] tipc: Resetting bearer [ 667.440202][T23796] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 667.447764][T23796] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 667.460260][T23795] netlink: 'syz.1.6186': attribute type 3 has an invalid length. [ 667.542356][T23795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.566522][ T1162] bond4: (slave bridge12): failed to get link speed/duplex [ 667.731719][T23802] IPVS: length: 132 != 8 [ 667.855066][T23799] siw: device registration error -23 [ 667.874222][T23794] bond0: left allmulticast mode [ 667.888506][T23794] vti0: left allmulticast mode [ 668.539754][T23815] lo speed is unknown, defaulting to 1000 [ 668.779451][T23832] bond0: Caught tx_queue_len zero misconfig [ 668.904869][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 668.926721][T23836] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6193'. [ 668.941435][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 669.219645][T23844] netlink: 'syz.4.6195': attribute type 10 has an invalid length. [ 669.401670][T23851] geneve7: left allmulticast mode [ 669.457293][T23851] bond4: left allmulticast mode [ 669.471586][T23851] bridge12: left allmulticast mode [ 669.483017][T23851] bridge13: left allmulticast mode [ 669.653254][ T1162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 43733 - 0 [ 669.671430][T23855] syzkaller0: entered promiscuous mode [ 669.679795][T23855] syzkaller0: entered allmulticast mode [ 669.766911][T23859] tipc: Enabled bearer , priority 0 [ 669.779829][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6200'. [ 669.790260][T23867] tipc: Resetting bearer [ 669.797936][ T1162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 43733 - 0 [ 669.807584][ T1162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 43733 - 0 [ 669.823501][ T1162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 43733 - 0 [ 669.834527][T23849] tipc: Resetting bearer [ 669.860964][T23849] tipc: Disabling bearer [ 669.999582][T23872] bond4: left promiscuous mode [ 670.004442][T23872] erspan1: left promiscuous mode [ 670.010335][T23872] bond4: left allmulticast mode [ 670.015414][T23872] erspan1: left allmulticast mode [ 670.022591][T23872] bond6: left promiscuous mode [ 670.029650][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6200'. [ 670.039307][T23872] bond7: left promiscuous mode [ 670.044140][T23872] bridge2: left promiscuous mode [ 670.053606][T23872] geneve0: left promiscuous mode [ 670.060420][T23872] geneve4: left promiscuous mode [ 670.097637][T23872] bond11: left allmulticast mode [ 670.200867][T23874] hsr_slave_0: left promiscuous mode [ 670.211237][T23874] hsr_slave_1: left promiscuous mode [ 670.308854][T23885] macsec0: entered allmulticast mode [ 670.452961][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6205'. [ 670.470603][T23889] syzkaller0: entered promiscuous mode [ 670.487291][T23889] syzkaller0: entered allmulticast mode [ 670.707497][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6203'. [ 672.413706][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 672.695614][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 673.058801][T23898] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 673.298974][T23928] tipc: Enabled bearer , priority 0 [ 673.398908][T23928] syzkaller0: entered promiscuous mode [ 673.408058][T23928] syzkaller0: entered allmulticast mode [ 673.427224][T23928] tipc: Resetting bearer [ 673.444106][T23931] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 673.467083][T23931] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 673.502987][T23931] tipc: Resetting bearer [ 673.538931][T23927] tipc: Resetting bearer [ 673.660333][T23947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6213'. [ 673.689950][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6215'. [ 675.215730][T23927] tipc: Disabling bearer [ 675.225245][T23931] tipc: Enabling of bearer rejected, already enabled [ 675.244560][T23947] hsr_slave_1 (unregistering): left promiscuous mode [ 675.373947][T23966] netlink: 'syz.2.6217': attribute type 3 has an invalid length. [ 675.409741][T23966] veth13: entered allmulticast mode [ 675.410729][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6218'. [ 675.421520][T23966] siw: device registration error -23 [ 675.425105][T23967] netlink: 'syz.4.6218': attribute type 1 has an invalid length. [ 675.497311][T23966] net_ratelimit: 11 callbacks suppressed [ 675.497323][T23966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.581510][T23964] veth13: left allmulticast mode [ 675.659673][T23976] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 675.843162][T23987] syzkaller0: entered promiscuous mode [ 675.857438][T23987] syzkaller0: entered allmulticast mode [ 675.988716][T23995] netlink: 'syz.4.6224': attribute type 89 has an invalid length. [ 676.983919][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6226'. [ 677.593124][T23990] syzkaller0: entered promiscuous mode [ 677.598769][T23990] syzkaller0: entered allmulticast mode [ 677.692580][T24006] lo speed is unknown, defaulting to 1000 [ 678.410921][T23969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.750139][T24023] netlink: 'syz.1.6230': attribute type 33 has an invalid length. [ 678.806442][T24023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6230'. [ 679.117805][T24034] syzkaller0: entered promiscuous mode [ 679.143281][T24023] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6230'. [ 679.226996][T24034] syzkaller0: entered allmulticast mode [ 679.483158][T24034] tipc: Enabled bearer , priority 0 [ 679.494934][T24031] tipc: Resetting bearer [ 679.548490][T24031] tipc: Disabling bearer [ 680.110335][T24049] tipc: Resetting bearer [ 680.130904][ T5818] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 680.203182][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6237'. [ 680.455276][T24059] syzkaller0: entered promiscuous mode [ 680.464009][T24059] syzkaller0: entered allmulticast mode [ 680.469744][ T5818] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 680.706133][T24069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6239'. [ 680.986225][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6239'. [ 682.700517][ T58] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 682.710922][T24076] netlink: 'syz.0.6240': attribute type 12 has an invalid length. [ 683.034429][T24114] netlink: 'syz.4.6244': attribute type 3 has an invalid length. [ 683.124882][T24122] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 683.150979][T24122] pimreg: left allmulticast mode [ 683.161263][T24123] netlink: 'syz.2.6246': attribute type 30 has an invalid length. [ 683.216089][T24119] lo speed is unknown, defaulting to 1000 [ 683.346851][T24113] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6243'. [ 683.488930][T24122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.531829][T24122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.579134][ T10] lo speed is unknown, defaulting to 1000 [ 683.606579][ T10] syz0: Port: 1 Link ACTIVE [ 683.611406][ T10] lo speed is unknown, defaulting to 1000 [ 683.707489][ T1162] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 683.726676][ T1162] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 683.829848][T24126] siw: device registration error -23 [ 683.864899][T24111] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 684.071142][T24158] syzkaller0: entered promiscuous mode [ 684.087168][T24158] syzkaller0: entered allmulticast mode [ 684.376780][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6251'. [ 684.426661][T17458] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 684.454416][T24169] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6251'. [ 685.771125][T24100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.975298][T24175] tipc: Enabling of bearer rejected, already enabled [ 686.008468][T24176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.025183][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6255'. [ 686.078332][T24184] netlink: 'syz.3.6255': attribute type 12 has an invalid length. [ 686.154396][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6255'. [ 686.178023][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6252'. [ 686.207537][T24196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.248066][T24184] netlink: 'syz.3.6255': attribute type 12 has an invalid length. [ 686.361162][T24193] syzkaller0: entered promiscuous mode [ 686.378963][T24193] syzkaller0: entered allmulticast mode [ 686.946877][T24224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6258'. [ 687.462112][T24233] netlink: 'syz.2.6260': attribute type 3 has an invalid length. [ 688.028507][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 688.568711][T24235] xt_bpf: check failed: parse error [ 688.615000][T24237] tipc: Enabling of bearer rejected, already enabled [ 688.708795][T24239] xt_l2tp: missing protocol rule (udp|l2tpip) [ 688.878812][T24256] nbd: nbd2 already in use [ 688.885041][T24256] block nbd2: NBD_DISCONNECT [ 688.898801][T24256] block nbd2: Send disconnect failed -32 [ 688.907032][T24256] block nbd2: shutting down sockets [ 688.953535][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'. [ 689.097731][T24265] syzkaller0: entered promiscuous mode [ 689.138357][T24265] syzkaller0: entered allmulticast mode [ 689.228845][T24265] tipc: Enabled bearer , priority 0 [ 689.256117][T24264] tipc: Resetting bearer [ 689.312488][T24264] tipc: Disabling bearer [ 689.357245][T24273] lo speed is unknown, defaulting to 1000 [ 689.544129][T24281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6271'. [ 689.870019][T24294] tipc: Enabling of bearer rejected, already enabled [ 690.280419][T24306] syzkaller0: entered promiscuous mode [ 690.296549][T24306] syzkaller0: entered allmulticast mode [ 690.668849][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 691.001259][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.017985][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 692.833665][T24319] lo speed is unknown, defaulting to 1000 [ 693.257556][T24346] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6283'. [ 693.319353][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6283'. [ 693.441904][T24348] syzkaller0: entered promiscuous mode [ 693.451629][T24348] syzkaller0: entered allmulticast mode [ 694.755207][T24386] netlink: 'syz.2.6290': attribute type 1 has an invalid length. [ 694.811824][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6290'. [ 694.899375][T24386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 694.929450][T24391] macvlan3: entered promiscuous mode [ 694.934903][T24391] macvlan3: entered allmulticast mode [ 694.980992][T24392] syzkaller0: entered promiscuous mode [ 694.986732][T24392] syzkaller0: entered allmulticast mode [ 695.105264][T24402] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6295'. [ 695.114943][T24402] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 695.471239][T24402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.803218][T24411] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6296'. [ 696.029153][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 696.037335][ C0] lec:lec_tx_timeout: lec0 [ 696.746517][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 697.278130][T24429] syzkaller0: entered promiscuous mode [ 697.292608][T24429] syzkaller0: entered allmulticast mode [ 697.342538][T24438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6301'. [ 697.595455][T24438] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6301'. [ 697.667281][T24444] netlink: 'syz.2.6301': attribute type 3 has an invalid length. [ 697.732264][T24448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6304'. [ 697.781980][ T5821] block nbd2: Receive control failed (result -1) [ 698.204730][T24456] netlink: 'syz.0.6305': attribute type 10 has an invalid length. [ 698.556544][T24459] netlink: 'syz.2.6306': attribute type 4 has an invalid length. [ 698.614346][T24465] netlink: 'syz.2.6306': attribute type 4 has an invalid length. [ 698.673835][T24466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.686758][T24466] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6306'. [ 698.834239][T14526] lec:lec_start_xmit: lec0:No lecd attached [ 699.977925][T24473] syzkaller0: entered promiscuous mode [ 699.993752][T24473] syzkaller0: entered allmulticast mode [ 700.064428][T24478] lo: Caught tx_queue_len zero misconfig [ 702.405860][T24487] lo speed is unknown, defaulting to 1000 [ 703.164889][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6318'. [ 703.174120][T24527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6318'. [ 703.183203][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6318'. [ 703.252032][T24527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.531957][T24530] tipc: Resetting bearer [ 703.586721][T17469] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 703.662256][T24538] syzkaller0: entered promiscuous mode [ 703.669356][T24538] syzkaller0: entered allmulticast mode [ 703.726693][T17469] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 703.852811][T24550] netlink: 'syz.0.6322': attribute type 10 has an invalid length. [ 705.308245][T24553] lo speed is unknown, defaulting to 1000 [ 705.492693][T24507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.675282][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 705.688523][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6324'. [ 705.867750][T24560] syzkaller0: entered promiscuous mode [ 705.873290][T24560] syzkaller0: entered allmulticast mode [ 706.307846][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6323'. [ 707.850835][T24566] netlink: 'syz.4.6327': attribute type 12 has an invalid length. [ 708.010475][T24590] lo speed is unknown, defaulting to 1000 [ 708.099841][T24600] netlink: 'syz.1.6330': attribute type 9 has an invalid length. [ 708.142202][T24595] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 708.266343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 708.274472][ C1] lec:lec_tx_timeout: lec0 [ 708.279722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 708.488443][T24610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6334'. [ 708.714455][T24599] lo speed is unknown, defaulting to 1000 [ 709.024696][T24622] syzkaller0: entered promiscuous mode [ 709.030873][T24622] syzkaller0: entered allmulticast mode [ 710.233504][T24647] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 711.656022][T24615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.838048][T24683] syzkaller0: entered promiscuous mode [ 711.843790][T24683] syzkaller0: entered allmulticast mode [ 711.990943][T24694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6350'. [ 712.159347][T24703] netlink: 'syz.0.6350': attribute type 1 has an invalid length. [ 712.188391][T24703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6350'. [ 712.366682][ T5818] lo speed is unknown, defaulting to 1000 [ 712.386901][ T5818] syz0: Port: 1 Link DOWN [ 712.494180][T24709] vlan0: entered promiscuous mode [ 712.499436][T24709] bridge0: entered promiscuous mode [ 712.515010][ T5818] lo speed is unknown, defaulting to 1000 [ 712.524629][T24690] lo speed is unknown, defaulting to 1000 [ 712.564121][T24713] syzkaller0: entered promiscuous mode [ 712.570010][T24713] syzkaller0: entered allmulticast mode [ 712.727088][T24715] netlink: 'syz.3.6353': attribute type 1 has an invalid length. [ 712.734887][T24715] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6353'. [ 713.039875][T24722] wg1: entered promiscuous mode [ 713.044832][T24722] wg1: entered allmulticast mode [ 713.580878][T24743] netem: incorrect ge model size [ 713.586713][T24743] netem: change failed [ 714.026343][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 714.034461][ C1] lec:lec_tx_timeout: lec0 [ 714.180139][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 714.195880][T24772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6362'. [ 714.252693][T24772] 8021q: adding VLAN 0 to HW filter on device bond14 [ 714.266003][T24772] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 714.322104][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6363'. [ 714.403136][T24777] lo speed is unknown, defaulting to 1000 [ 716.063626][T24728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.266524][T24788] netlink: 'syz.1.6364': attribute type 1 has an invalid length. [ 716.312602][T24788] 8021q: adding VLAN 0 to HW filter on device bond15 [ 716.370800][T24800] netlink: 'syz.0.6365': attribute type 10 has an invalid length. [ 716.429265][T24788] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 716.472070][T24788] bond15: (slave batadv2): making interface the new active one [ 716.486123][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6364'. [ 716.499084][T24788] bond15: (slave batadv2): Enslaving as an active interface with an up link [ 716.506724][ T5821] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 716.544373][T24796] bond15 (unregistering): (slave batadv2): Releasing active interface [ 716.573338][T24796] bond15 (unregistering): Released all slaves [ 716.597234][T24799] lo speed is unknown, defaulting to 1000 [ 716.741819][T24810] IPVS: Scheduler module ip_vs_sip not found [ 716.769343][T24808] pimreg: entered allmulticast mode [ 716.934827][T24815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6372'. [ 716.987743][T24813] lo speed is unknown, defaulting to 1000 [ 717.250559][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6373'. [ 717.546549][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 717.691577][T24831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6374'. [ 717.770102][T24834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6375'. [ 717.780336][T24834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6375'. [ 717.951846][T24825] lo speed is unknown, defaulting to 1000 [ 718.384261][T24859] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 718.722768][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6382'. [ 719.040370][T24882] netlink: 'syz.3.6384': attribute type 89 has an invalid length. [ 719.753549][T24888] netlink: 'syz.2.6385': attribute type 10 has an invalid length. [ 720.108522][T24890] bond7: invalid ARP target 0.0.0.0 specified for addition [ 720.115801][T24890] bond7: option arp_ip_target: invalid value (0) [ 720.127566][T24890] bond7 (unregistering): Released all slaves [ 720.252251][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6387'. [ 720.276554][T24894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.283883][T24894] IPv6: NLM_F_CREATE should be set when creating new route [ 720.292935][T24894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.300214][T24894] IPv6: NLM_F_CREATE should be set when creating new route [ 720.794128][T24840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.162471][T24919] lo speed is unknown, defaulting to 1000 [ 722.211453][T24942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 722.358738][T24942] netlink: 'syz.3.6396': attribute type 4 has an invalid length. [ 722.822339][T24973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6398'. [ 722.906966][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 722.915072][ C1] lec:lec_tx_timeout: lec0 [ 722.920386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 722.944235][T24976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6398'. [ 722.954183][T24976] openvswitch: netlink: Flow key attr not present in new flow. [ 722.998205][T24969] netlink: 'syz.0.6400': attribute type 10 has an invalid length. [ 723.246885][T24988] netlink: 'syz.3.6401': attribute type 10 has an invalid length. [ 723.399156][T24986] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6402'. [ 723.422144][T24986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6402'. [ 723.510674][T24991] lo speed is unknown, defaulting to 1000 [ 724.115719][T25004] lo speed is unknown, defaulting to 1000 [ 725.398221][T25049] netlink: 'syz.3.6413': attribute type 10 has an invalid length. [ 725.582227][T25041] lo: Caught tx_queue_len zero misconfig [ 725.673391][T25048] lo speed is unknown, defaulting to 1000 [ 726.068269][T25062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6417'. [ 726.318827][T25068] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 726.351194][T25068] bond12 (unregistering): Released all slaves [ 726.494394][T25073] lo speed is unknown, defaulting to 1000 [ 727.691000][T25090] block nbd1: NBD_DISCONNECT [ 727.703951][T25090] block nbd1: Send disconnect failed -32 [ 727.946454][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 727.954591][ C1] lec:lec_tx_timeout: lec0 [ 728.396635][T25107] netlink: 'syz.4.6424': attribute type 10 has an invalid length. [ 728.650060][T25118] netlink: 'syz.1.6430': attribute type 13 has an invalid length. [ 728.708725][T25122] lo speed is unknown, defaulting to 1000 [ 728.715246][T25113] syzkaller0: entered promiscuous mode [ 728.722673][T25113] syzkaller0: entered allmulticast mode [ 728.737178][T25122] lo speed is unknown, defaulting to 1000 [ 728.917143][T25120] tipc: Enabled bearer , priority 0 [ 728.939392][T25122] lo speed is unknown, defaulting to 1000 [ 728.968882][T25122] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 728.981615][T25133] tipc: Resetting bearer [ 729.000430][T25112] tipc: Resetting bearer [ 729.052731][T25112] tipc: Disabling bearer [ 729.144792][T25122] lo speed is unknown, defaulting to 1000 [ 729.164611][T25114] lo speed is unknown, defaulting to 1000 [ 729.204780][T25122] lo speed is unknown, defaulting to 1000 [ 729.265322][T25122] lo speed is unknown, defaulting to 1000 [ 729.284063][T25137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6432'. [ 729.327890][T25135] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 729.344231][T25122] lo speed is unknown, defaulting to 1000 [ 729.375580][T25122] lo speed is unknown, defaulting to 1000 [ 729.405637][T25143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6433'. [ 729.512506][T25122] lo speed is unknown, defaulting to 1000 [ 729.715584][T25154] block nbd2: NBD_DISCONNECT [ 729.728097][T25154] block nbd2: Send disconnect failed -32 [ 729.733921][T25154] block nbd2: shutting down sockets [ 729.814242][T25156] lo speed is unknown, defaulting to 1000 [ 730.100130][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6437'. [ 730.124866][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6437'. [ 730.353457][T25156] lo speed is unknown, defaulting to 1000 [ 731.209452][T25185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6442'. [ 731.231659][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 731.310334][T25206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6445'. [ 731.859757][T25221] bond7: option packets_per_slave: invalid value (1048582) [ 731.868678][T25221] bond7: option packets_per_slave: allowed values 0 - 65535 [ 731.917961][T25221] bond7 (unregistering): Released all slaves [ 732.054458][T25236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6453'. [ 732.097536][T25232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6448'. [ 732.296841][T25238] lo speed is unknown, defaulting to 1000 [ 732.666844][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 732.849061][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6452'. [ 733.450988][T25252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6455'. [ 733.478981][T25252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6455'. [ 733.498244][T25252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6455'. [ 733.669923][T25240] lo speed is unknown, defaulting to 1000 [ 733.738696][T25238] lo speed is unknown, defaulting to 1000 [ 734.079832][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6457'. [ 734.213285][T25240] lo speed is unknown, defaulting to 1000 [ 734.764035][ T5821] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 734.837363][T25285] netlink: 'syz.3.6462': attribute type 10 has an invalid length. [ 735.381152][T25294] lo speed is unknown, defaulting to 1000 [ 735.800647][T25307] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.827404][T25299] syzkaller1: entered promiscuous mode [ 735.833051][T25299] syzkaller1: entered allmulticast mode [ 735.879271][T25309] gretap0: entered promiscuous mode [ 736.233843][T25316] __nla_validate_parse: 2 callbacks suppressed [ 736.233864][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'. [ 736.276122][T25294] lo speed is unknown, defaulting to 1000 [ 736.289074][T25313] siw: device registration error -23 [ 736.501807][T25330] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 736.523983][T25332] bond0: (slave gre0): Error: Device type is different from other slaves [ 736.690753][T25336] gretap1: entered promiscuous mode [ 736.708128][T25337] siw: device registration error -23 [ 736.883658][T25344] netlink: 'syz.0.6476': attribute type 10 has an invalid length. [ 737.028257][T25347] lo speed is unknown, defaulting to 1000 [ 737.117771][T25318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.299540][T25355] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6478'. [ 737.337106][T25353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6477'. [ 737.445829][T25366] netlink: 'syz.4.6480': attribute type 1 has an invalid length. [ 737.467068][T25355] nbd3: detected capacity change from 0 to 63 [ 737.484746][T25362] block nbd3: NBD_DISCONNECT [ 737.496756][T25362] block nbd3: Disconnected due to user request. [ 737.503076][T25362] block nbd3: shutting down sockets [ 737.536031][T25366] 8021q: adding VLAN 0 to HW filter on device bond21 [ 737.552694][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6480'. [ 737.578285][ C0] blk_print_req_error: 138 callbacks suppressed [ 737.578306][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.594178][ C0] buffer_io_error: 138 callbacks suppressed [ 737.594198][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 737.608026][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.617576][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 737.625401][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.634982][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 737.642828][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.652398][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 737.695020][T24504] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.715378][T24504] Buffer I/O error on dev nbd3, logical block 0, async page read [ 737.735708][T24504] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.811279][T24504] Buffer I/O error on dev nbd3, logical block 1, async page read [ 737.831723][T24504] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.886663][T24504] Buffer I/O error on dev nbd3, logical block 2, async page read [ 737.914075][T25370] macvlan0: entered promiscuous mode [ 737.914499][T24504] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.922893][T25370] macvlan0: entered allmulticast mode [ 737.946467][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 737.954572][ C1] lec:lec_tx_timeout: lec0 [ 737.959605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 738.011762][T24504] Buffer I/O error on dev nbd3, logical block 3, async page read [ 738.035271][T24504] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.066359][T24504] Buffer I/O error on dev nbd3, logical block 0, async page read [ 738.074359][T24504] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.098635][T24504] Buffer I/O error on dev nbd3, logical block 1, async page read [ 738.119122][T24504] ldm_validate_partition_table(): Disk read failed. [ 738.126601][T24504] Dev nbd3: unable to read RDB block 0 [ 738.132756][T24504] nbd3: unable to read partition table [ 738.194008][T25347] lo speed is unknown, defaulting to 1000 [ 738.208586][T24504] ldm_validate_partition_table(): Disk read failed. [ 738.234448][T24504] Dev nbd3: unable to read RDB block 0 [ 738.240762][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6481'. [ 738.267960][T24504] nbd3: unable to read partition table [ 738.278881][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6483'. [ 738.319460][T25389] netlink: 'syz.3.6483': attribute type 11 has an invalid length. [ 738.392885][T25391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6482'. [ 738.419008][T25390] lo speed is unknown, defaulting to 1000 [ 738.589476][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6485'. [ 738.598761][T25400] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6485'. [ 738.612178][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6485'. [ 738.737608][T25408] bpq0: entered promiscuous mode [ 738.964493][T25390] lo speed is unknown, defaulting to 1000 [ 739.015931][T25416] netlink: 'syz.1.6487': attribute type 1 has an invalid length. [ 739.090699][T25416] 8021q: adding VLAN 0 to HW filter on device bond15 [ 739.106639][T25419] macvlan0: entered promiscuous mode [ 739.112124][T25419] macvlan0: entered allmulticast mode [ 739.304250][T25418] lo speed is unknown, defaulting to 1000 [ 739.709691][T25421] nr3: entered promiscuous mode [ 739.728579][T25421] nr3: entered allmulticast mode [ 739.971487][T25440] gre0: entered promiscuous mode [ 739.980907][T25440] gre0: entered allmulticast mode [ 740.192428][T25418] lo speed is unknown, defaulting to 1000 [ 740.352008][T25445] lo speed is unknown, defaulting to 1000 [ 740.497640][T25450] syzkaller0: entered promiscuous mode [ 740.503293][T25450] syzkaller0: entered allmulticast mode [ 741.124931][T25468] netlink: 'syz.4.6498': attribute type 10 has an invalid length. [ 741.147673][T25467] netlink: 'syz.1.6499': attribute type 1 has an invalid length. [ 741.167082][T25445] lo speed is unknown, defaulting to 1000 [ 741.287676][T25467] 8021q: adding VLAN 0 to HW filter on device bond16 [ 741.339322][T25472] macvlan1: entered promiscuous mode [ 741.344846][T25472] macvlan1: entered allmulticast mode [ 742.042289][T25495] __nla_validate_parse: 5 callbacks suppressed [ 742.042311][T25495] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6505'. [ 742.066042][T25495] ..0ªî{X¹¦: renamed from 30ªî{X¹¦ [ 742.080788][T25495] ..0ªî{X¹¦: entered allmulticast mode [ 742.089244][T25495] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 742.112126][T25494] syzkaller0: entered promiscuous mode [ 742.120618][T25494] syzkaller0: entered allmulticast mode [ 742.260820][T25498] syzkaller0: entered promiscuous mode [ 742.267131][T25498] syzkaller0: entered allmulticast mode [ 742.539779][T25513] netlink: 'syz.0.6511': attribute type 1 has an invalid length. [ 742.597592][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6511'. [ 742.827416][T25527] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6508'. [ 742.970449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 742.978534][ C1] lec:lec_tx_timeout: lec0 [ 744.003172][T25513] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 744.218321][T25537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6513'. [ 744.327851][T25547] syzkaller0: entered promiscuous mode [ 744.347137][T25547] syzkaller0: entered allmulticast mode [ 744.469353][T25551] bpq0: left promiscuous mode [ 744.490439][T25551] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.522664][T25549] netlink: 'syz.4.6519': attribute type 1 has an invalid length. [ 744.637501][T25554] 8021q: adding VLAN 0 to HW filter on device bond24 [ 744.657118][T25554] bond23: (slave bond24): making interface the new active one [ 744.664901][T25561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.666099][T25554] bond23: (slave bond24): Enslaving as an active interface with an up link [ 744.723006][T25554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6519'. [ 744.732174][T25560] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 744.802808][ T30] audit: type=1800 audit(1771257020.634:16): pid=25553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6513" name="memory.events" dev="tmpfs" ino=6465 res=0 errno=0 [ 744.814951][T25554] 8021q: adding VLAN 0 to HW filter on device bond23 [ 744.838625][T25565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6519'. [ 744.879089][T25549] vlan0: entered promiscuous mode [ 744.904593][T25549] bond23: entered promiscuous mode [ 744.939518][T25549] bond24: entered promiscuous mode [ 745.395550][T25579] syzkaller0: entered promiscuous mode [ 745.406543][T25579] syzkaller0: entered allmulticast mode [ 745.501403][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 745.515058][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6526'. [ 745.541235][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6526'. [ 745.578488][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 745.590976][T25577] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 747.302003][T25576] __nla_validate_parse: 4 callbacks suppressed [ 747.302024][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6523'. [ 747.351577][T25585] lo speed is unknown, defaulting to 1000 [ 747.518735][T25609] syzkaller0: entered promiscuous mode [ 747.544751][T25609] syzkaller0: entered allmulticast mode [ 747.648229][T25614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6530'. [ 747.786507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 747.839540][T25623] netlink: 'syz.4.6533': attribute type 10 has an invalid length. [ 747.891304][T25585] lo speed is unknown, defaulting to 1000 [ 747.993635][T25629] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6538'. [ 748.121833][T25630] syzkaller0: entered promiscuous mode [ 748.127750][T25634] netlink: 'syz.1.6540': attribute type 10 has an invalid length. [ 748.135687][T25630] syzkaller0: entered allmulticast mode [ 748.143315][T25633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6538'. [ 748.160622][T25633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6538'. [ 749.958572][T25644] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 750.002540][T25644] : renamed from bond_slave_0 [ 750.024947][T25645] lo speed is unknown, defaulting to 1000 [ 750.264211][T25649] syzkaller0: entered promiscuous mode [ 750.280443][T25649] syzkaller0: entered allmulticast mode [ 750.800032][T25679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.129257][T25690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6550'. [ 752.334596][T25645] lo speed is unknown, defaulting to 1000 [ 752.339574][T25678] tipc: Enabling of bearer rejected, failed to enable media [ 752.431015][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.441022][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.742768][T25702] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 752.790884][T25702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.816657][T25702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.825139][T25702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.838356][T25709] lo speed is unknown, defaulting to 1000 [ 752.906381][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 752.914495][ C1] lec:lec_tx_timeout: lec0 [ 752.919230][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 752.978234][T25719] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6554'. [ 753.188261][T25719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.337006][T25719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.395264][T25719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.414425][T25713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 753.799384][T25719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.132979][T25725] lo speed is unknown, defaulting to 1000 [ 754.163600][T25709] lo speed is unknown, defaulting to 1000 [ 754.573939][T25746] tipc: Enabling of bearer rejected, already enabled [ 754.756446][T25748] lo speed is unknown, defaulting to 1000 [ 754.826958][T25725] lo speed is unknown, defaulting to 1000 [ 755.126154][T25768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6570'. [ 755.293303][T25772] netlink: 'syz.4.6569': attribute type 12 has an invalid length. [ 755.404854][T25748] lo speed is unknown, defaulting to 1000 [ 756.148149][T25802] IPVS: stopping backup sync thread 7026 ... [ 756.163181][T25805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6579'. [ 756.266203][T25812] netlink: 'syz.0.6580': attribute type 1 has an invalid length. [ 756.322971][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6580'. [ 756.350231][T25812] 8021q: adding VLAN 0 to HW filter on device bond12 [ 756.399899][T25817] macvlan0: entered promiscuous mode [ 756.413213][T25817] macvlan0: entered allmulticast mode [ 756.503827][T25826] netlink: 'syz.0.6585': attribute type 3 has an invalid length. [ 756.512662][T25826] netlink: 'syz.0.6585': attribute type 1 has an invalid length. [ 756.521104][T25826] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6585'. [ 756.772596][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6585'. [ 756.795284][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6585'. [ 757.443599][T25857] xt_NFQUEUE: number of queues (61121) out of range (got 68417) [ 757.946475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 757.954651][ C1] lec:lec_tx_timeout: lec0 [ 758.922165][T25796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.078822][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6591'. [ 759.159852][T25866] lo speed is unknown, defaulting to 1000 [ 759.313796][T25874] netlink: 'syz.0.6595': attribute type 1 has an invalid length. [ 759.423428][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6595'. [ 759.493367][T25874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 759.567802][T25883] macvlan1: entered promiscuous mode [ 759.573379][T25883] macvlan1: entered allmulticast mode [ 759.581598][T25866] lo speed is unknown, defaulting to 1000 [ 759.634830][T25895] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 759.659021][T25884] syzkaller0: entered promiscuous mode [ 759.664617][T25884] syzkaller0: entered allmulticast mode [ 759.810965][T25901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6603'. [ 759.820635][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6603'. [ 760.019623][T25912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6606'. [ 760.759833][T25904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.880464][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6617'. [ 762.285902][T25957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6615'. [ 762.540312][T25959] lo speed is unknown, defaulting to 1000 [ 762.907059][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 762.916431][T25905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.909570][T26000] netlink: 'syz.2.6629': attribute type 10 has an invalid length. [ 764.166114][T25959] lo speed is unknown, defaulting to 1000 [ 764.202767][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6637'. [ 764.246428][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6637'. [ 764.527097][T26029] netlink: 'syz.0.6644': attribute type 1 has an invalid length. [ 764.673284][T26029] 8021q: adding VLAN 0 to HW filter on device bond14 [ 765.138197][T26064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6652'. [ 765.220509][T26030] dvmrp0: entered allmulticast mode [ 765.648763][T26077] netlink: 'syz.0.6658': attribute type 1 has an invalid length. [ 765.748095][T26077] 8021q: adding VLAN 0 to HW filter on device bond15 [ 765.922895][T26088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6663'. [ 766.059770][T26095] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 766.648391][T26118] lo speed is unknown, defaulting to 1000 [ 766.971749][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'. [ 767.246435][T26118] lo speed is unknown, defaulting to 1000 [ 767.334423][T26152] netlink: 'syz.3.6687': attribute type 1 has an invalid length. [ 767.392811][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6687'. [ 767.429481][T26152] 8021q: adding VLAN 0 to HW filter on device bond7 [ 767.497389][T26155] macvlan2: entered promiscuous mode [ 767.502884][T26155] macvlan2: entered allmulticast mode [ 767.508985][T26153] tipc: Enabled bearer , priority 0 [ 767.521551][T26157] netlink: 'syz.3.6687': attribute type 12 has an invalid length. [ 767.533938][T26157] netlink: 'syz.3.6687': attribute type 5 has an invalid length. [ 767.543302][T26157] netlink: 'syz.3.6687': attribute type 2 has an invalid length. [ 767.551591][T26157] netlink: 'syz.3.6687': attribute type 7 has an invalid length. [ 767.560960][T26157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6687'. [ 767.636753][T26147] tipc: Disabling bearer [ 767.770956][T26163] syzkaller0: entered promiscuous mode [ 767.791757][T26163] syzkaller0: entered allmulticast mode [ 767.953133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 767.961230][ C1] lec:lec_tx_timeout: lec0 [ 767.966329][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 767.980835][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6695'. [ 769.429793][T26177] tipc: Enabling of bearer rejected, failed to enable media [ 769.840925][T26206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6706'. [ 770.129863][T26220] syzkaller0: entered promiscuous mode [ 770.146551][T26220] syzkaller0: entered allmulticast mode [ 770.232192][T26225] block nbd2: NBD_DISCONNECT [ 770.677983][T26250] lo speed is unknown, defaulting to 1000 [ 770.984534][T26268] syzkaller0: entered promiscuous mode [ 770.990416][T26268] syzkaller0: entered allmulticast mode [ 771.845652][T26250] lo speed is unknown, defaulting to 1000 [ 772.022388][T26280] pimreg: entered allmulticast mode [ 772.322811][T26284] tipc: Enabling of bearer rejected, failed to enable media [ 772.717366][T26294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6740'. [ 772.901907][T26298] syzkaller0: entered promiscuous mode [ 772.916636][T26298] syzkaller0: entered allmulticast mode [ 772.986314][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 772.994495][ C1] lec:lec_tx_timeout: lec0 [ 773.219803][T26309] netlink: 'syz.2.6746': attribute type 1 has an invalid length. [ 773.273009][T26309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 773.382425][T26315] netlink: 'syz.0.6750': attribute type 9 has an invalid length. [ 773.491422][T26322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6752'. [ 773.725833][T26329] syzkaller0: entered promiscuous mode [ 773.737354][T26329] syzkaller0: entered allmulticast mode [ 773.971369][T26336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6758'. [ 774.308842][T26349] tipc: Enabled bearer , priority 0 [ 774.322075][T26349] tipc: Resetting bearer [ 774.347661][T26348] tipc: Disabling bearer [ 774.591391][T26357] tipc: Enabling of bearer rejected, failed to enable media [ 774.609707][T26359] syzkaller0: entered promiscuous mode [ 774.615286][T26359] syzkaller0: entered allmulticast mode [ 774.866503][T26368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6773'. [ 775.743684][T26392] tipc: Enabling of bearer rejected, already enabled [ 776.019141][T26401] syzkaller0: entered promiscuous mode [ 776.024681][T26401] syzkaller0: entered allmulticast mode [ 776.922541][T26416] lo speed is unknown, defaulting to 1000 [ 777.163576][T26424] netlink: 'syz.3.6792': attribute type 1 has an invalid length. [ 777.216006][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6792'. [ 777.261414][T26424] 8021q: adding VLAN 0 to HW filter on device bond8 [ 777.283086][T26427] netlink: 'syz.3.6792': attribute type 12 has an invalid length. [ 777.296433][T26427] netlink: 'syz.3.6792': attribute type 5 has an invalid length. [ 777.304202][T26427] netlink: 'syz.3.6792': attribute type 2 has an invalid length. [ 777.369669][T26427] netlink: 'syz.3.6792': attribute type 7 has an invalid length. [ 777.397670][T26427] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6792'. [ 777.513239][T26416] lo speed is unknown, defaulting to 1000 [ 777.703954][T26431] netlink: 'syz.3.6794': attribute type 1 has an invalid length. [ 777.766004][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6794'. [ 777.828102][T26431] 8021q: adding VLAN 0 to HW filter on device bond9 [ 777.881306][T26439] netlink: 'syz.3.6794': attribute type 12 has an invalid length. [ 777.893309][T26439] netlink: 'syz.3.6794': attribute type 5 has an invalid length. [ 777.901934][T26439] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6794'. [ 778.027195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 778.336957][T26458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.344258][T26458] IPv6: NLM_F_CREATE should be set when creating new route [ 778.351840][T26458] IPv6: NLM_F_CREATE should be set when creating new route [ 778.611114][T26464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6807'. [ 778.661796][T26468] validate_nla: 2 callbacks suppressed [ 778.661815][T26468] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 778.733052][T26468] 8021q: adding VLAN 0 to HW filter on device bond17 [ 779.099224][T26487] netlink: 'syz.0.6816': attribute type 1 has an invalid length. [ 779.182753][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 779.207413][T26487] 8021q: adding VLAN 0 to HW filter on device bond16 [ 779.349880][T26495] nbd3: detected capacity change from 0 to 63 [ 779.379405][ T5821] block nbd3: Receive control failed (result -104) [ 779.427059][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6821'. [ 779.444276][T26500] netlink: 'syz.2.6822': attribute type 1 has an invalid length. [ 779.605332][T26500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 779.688896][T26512] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6826'. [ 779.698305][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6826'. [ 779.801888][T26518] netlink: 'syz.2.6827': attribute type 10 has an invalid length. [ 781.494583][T26599] syzkaller0: entered promiscuous mode [ 781.504101][T26599] syzkaller0: entered allmulticast mode [ 782.684273][T26640] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 783.036445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 783.044556][ C1] lec:lec_tx_timeout: lec0 [ 783.056660][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6878'. [ 783.067025][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 783.283068][T26676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6886'. [ 783.295230][T26676] netlink: 39 bytes leftover after parsing attributes in process `syz.4.6886'. [ 783.548268][T26687] netlink: 'syz.4.6889': attribute type 1 has an invalid length. [ 783.691258][T26695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6894'. [ 783.857333][T26705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6896'. [ 784.235284][T26716] lo speed is unknown, defaulting to 1000 [ 784.527025][T26716] lo speed is unknown, defaulting to 1000 [ 784.994463][T26744] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6909'. [ 785.027360][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6911'. [ 785.139144][T26752] tipc: Enabling of bearer rejected, failed to enable media [ 785.428665][T26766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6918'. [ 785.996576][T26792] netlink: 'syz.0.6926': attribute type 10 has an invalid length. [ 786.488335][T26809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6934'. [ 786.726041][T26821] bond0: entered promiscuous mode [ 786.766251][T26821] bond0: left promiscuous mode [ 786.833842][T26827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6939'. [ 787.183299][T26842] netlink: 'syz.3.6945': attribute type 10 has an invalid length. [ 787.738280][T26857] tipc: Enabling of bearer rejected, already enabled [ 787.998681][T26866] syzkaller0: entered promiscuous mode [ 788.004939][T26866] syzkaller0: entered allmulticast mode [ 788.063017][T26873] netlink: 'syz.4.6953': attribute type 1 has an invalid length. [ 788.076335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 788.084389][ C1] lec:lec_tx_timeout: lec0 [ 788.106402][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 788.118004][T26868] __nla_validate_parse: 1 callbacks suppressed [ 788.118025][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6953'. [ 788.292972][T26879] debugfs: 'hsr1' already exists in 'hsr' [ 788.313605][T26879] Cannot create hsr debugfs directory [ 788.321071][T26879] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 788.321173][T26884] netlink: 'syz.2.6961': attribute type 10 has an invalid length. [ 788.333324][T26879] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 788.351577][T26879] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 788.390162][T26886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6963'. [ 788.989455][T26901] syzkaller0: entered promiscuous mode [ 788.994993][T26901] syzkaller0: entered allmulticast mode [ 789.072522][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6972'. [ 789.320298][T26922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6979'. [ 789.585832][T26932] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6983'. [ 789.693938][T26935] syzkaller0: entered promiscuous mode [ 789.705343][T26935] syzkaller0: entered allmulticast mode [ 789.734071][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6985'. [ 789.992328][T26947] netlink: 'syz.1.6987': attribute type 10 has an invalid length. [ 790.025457][T26946] lo speed is unknown, defaulting to 1000 [ 790.431080][T26965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6996'. [ 790.447733][T26965] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6996'. [ 790.619044][T26970] syzkaller0: entered promiscuous mode [ 790.624598][T26970] syzkaller0: entered allmulticast mode [ 790.651212][T26973] netlink: 'syz.4.6998': attribute type 1 has an invalid length. [ 790.682619][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6998'. [ 790.764240][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7000'. [ 790.851477][T26946] lo speed is unknown, defaulting to 1000 [ 790.982242][T26987] netem: incorrect gi model size [ 790.993576][T26987] netem: change failed [ 791.446077][T27007] netlink: 'syz.1.7011': attribute type 1 has an invalid length. [ 791.482142][T27009] syzkaller0: entered promiscuous mode [ 791.487985][T27009] syzkaller0: entered allmulticast mode [ 791.587424][T27011] syzkaller0: entered promiscuous mode [ 791.593308][T27011] syzkaller0: entered allmulticast mode [ 792.041258][T27041] netlink: 'syz.3.7022': attribute type 10 has an invalid length. [ 792.293493][T27049] block nbd0: reconnected socket [ 792.313844][ T5821] block nbd0: Receive control failed (result -32) [ 792.967374][T27080] netlink: 'syz.4.7038': attribute type 1 has an invalid length. [ 793.041937][T27080] 8021q: adding VLAN 0 to HW filter on device bond25 [ 793.126348][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 793.134509][ C1] lec:lec_tx_timeout: lec0 [ 793.147021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 793.170041][T27092] __nla_validate_parse: 5 callbacks suppressed [ 793.170061][T27092] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7041'. [ 793.223426][T27095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7042'. [ 793.344631][T27098] tipc: Enabled bearer , priority 0 [ 793.355645][T27098] tipc: Resetting bearer [ 793.395743][T27097] tipc: Disabling bearer [ 793.415728][T27102] 8021q: VLANs not supported on bond0 [ 793.628019][T27109] lo speed is unknown, defaulting to 1000 [ 794.082035][T27136] tipc: Enabled bearer , priority 0 [ 794.102553][T27142] netlink: 'syz.4.7061': attribute type 1 has an invalid length. [ 794.120832][T27136] tipc: Resetting bearer [ 794.160246][T27148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7061'. [ 794.218843][T27142] 8021q: adding VLAN 0 to HW filter on device bond26 [ 794.236161][T27135] tipc: Disabling bearer [ 794.250068][T27109] lo speed is unknown, defaulting to 1000 [ 794.645977][T27167] block nbd3: reconnected socket [ 794.654308][ T5821] block nbd3: Receive control failed (result -32) [ 794.872523][T27177] tipc: Enabling of bearer rejected, already enabled [ 794.981353][T27179] tipc: Enabled bearer , priority 0 [ 794.993017][T27179] tipc: Resetting bearer [ 795.021724][T27178] tipc: Disabling bearer [ 795.205382][T27188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7080'. [ 795.342935][T27201] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 795.505099][T27207] syzkaller0: entered promiscuous mode [ 795.517660][T27207] syzkaller0: entered allmulticast mode [ 795.722540][T27211] tipc: Enabled bearer , priority 0 [ 795.747801][T27210] tipc: Disabling bearer [ 795.777969][T27215] tipc: Enabled bearer , priority 0 [ 795.800131][T27215] tipc: Resetting bearer [ 795.840810][T27213] tipc: Disabling bearer [ 796.017149][T27228] lo speed is unknown, defaulting to 1000 [ 796.324215][T27228] lo speed is unknown, defaulting to 1000 [ 796.665819][T27259] netlink: 'syz.0.7104': attribute type 1 has an invalid length. [ 796.686665][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7104'. [ 796.712614][T27256] tipc: Enabled bearer , priority 0 [ 796.734483][T27256] tipc: Resetting bearer [ 796.798269][T27254] tipc: Disabling bearer [ 797.132722][T27278] syzkaller0: entered promiscuous mode [ 797.139319][T27278] syzkaller0: entered allmulticast mode [ 797.434429][T27298] syzkaller0: entered promiscuous mode [ 797.440394][T27298] syzkaller0: entered allmulticast mode [ 797.454627][T27298] tipc: Enabled bearer , priority 0 [ 797.468403][T27298] tipc: Resetting bearer [ 797.503078][T27297] tipc: Resetting bearer [ 797.550529][T27297] tipc: Disabling bearer [ 799.146291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6000 ms [ 799.154376][ C1] lec:lec_tx_timeout: lec0 [ 799.159438][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 799.635405][T27364] tipc: Enabled bearer , priority 0 [ 799.655716][T27364] tipc: Resetting bearer [ 799.664495][T27365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7138'. [ 799.704548][T27362] tipc: Disabling bearer [ 800.070454][T27378] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7144'. [ 800.451354][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7150'. [ 800.524550][T27395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7151'. [ 801.712598][T27416] gre0: entered promiscuous mode [ 801.730605][T27416] gre0: entered allmulticast mode [ 801.811750][T27420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7162'. [ 802.074094][T27432] syzkaller0: entered promiscuous mode [ 802.079785][T27432] syzkaller0: entered allmulticast mode [ 802.193338][T27434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7167'. [ 803.307535][T27384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.530351][T27451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7173'. [ 803.648328][T27457] netlink: 'syz.1.7176': attribute type 6 has an invalid length. [ 803.671208][T27457] netlink: 'syz.1.7176': attribute type 6 has an invalid length. [ 803.690382][T27459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7178'. [ 803.838637][T27463] syzkaller0: entered promiscuous mode [ 803.844203][T27463] syzkaller0: entered allmulticast mode [ 804.183129][T27483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7186'. [ 804.351513][T27491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.541462][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7192'. [ 804.906339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 804.914447][ C1] lec:lec_tx_timeout: lec0 [ 805.260864][T27517] syzkaller0: entered promiscuous mode [ 805.268805][T27517] syzkaller0: entered allmulticast mode [ 805.381334][T27519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7199'. [ 805.522847][T27527] pimreg: entered allmulticast mode [ 805.543942][T27529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7204'. [ 805.659122][T27533] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 806.812173][T27558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7215'. [ 807.268434][T27489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.663469][T27576] syzkaller0: entered promiscuous mode [ 807.677077][T27576] syzkaller0: entered allmulticast mode [ 808.070569][T27597] macvlan1: entered allmulticast mode [ 808.144547][T27602] netlink: 'syz.3.7231': attribute type 1 has an invalid length. [ 808.203256][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7231'. [ 808.261159][T27602] 8021q: adding VLAN 0 to HW filter on device bond10 [ 808.287467][T27610] netlink: 'syz.3.7231': attribute type 12 has an invalid length. [ 808.310444][T27610] netlink: 'syz.3.7231': attribute type 5 has an invalid length. [ 808.322174][T27610] netlink: 'syz.3.7231': attribute type 2 has an invalid length. [ 808.338150][T27610] netlink: 'syz.3.7231': attribute type 7 has an invalid length. [ 808.348004][T27610] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7231'. [ 808.379689][T27607] macvlan3: entered promiscuous mode [ 808.387428][T27607] macvlan3: entered allmulticast mode [ 808.623905][T27629] syzkaller0: entered promiscuous mode [ 808.630555][T27629] syzkaller0: entered allmulticast mode [ 809.388414][ T1166] block nbd3: Possible stuck request ffff888026328c00: control (read@0,1024B). Runtime 30 seconds [ 809.401546][ T1166] block nbd3: Possible stuck request ffff888026328e00: control (read@1024,1024B). Runtime 30 seconds [ 809.413259][ T11] block nbd3: Dead connection, failed to find a fallback [ 809.421216][ T11] block nbd3: shutting down sockets [ 809.426583][ T1166] block nbd3: Possible stuck request ffff888026329000: control (read@2048,1024B). Runtime 30 seconds [ 809.437591][ T11] blk_print_req_error: 138 callbacks suppressed [ 809.437607][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.453892][ T1166] block nbd3: Possible stuck request ffff888026329200: control (read@3072,1024B). Runtime 30 seconds [ 809.464977][ T11] buffer_io_error: 138 callbacks suppressed [ 809.464993][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 809.478971][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.488633][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 809.496474][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.506062][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 809.513989][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.523534][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 809.533014][T26420] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.542975][T26420] Buffer I/O error on dev nbd3, logical block 0, async page read [ 809.550875][T26420] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.561752][T26420] Buffer I/O error on dev nbd3, logical block 1, async page read [ 809.569867][T26420] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.579737][T26420] Buffer I/O error on dev nbd3, logical block 2, async page read [ 809.588255][T26420] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.598335][T26420] Buffer I/O error on dev nbd3, logical block 3, async page read [ 809.606517][T26420] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.616216][T26420] Buffer I/O error on dev nbd3, logical block 0, async page read [ 809.624107][T26420] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 809.633849][T26420] Buffer I/O error on dev nbd3, logical block 1, async page read [ 809.642436][T26420] ldm_validate_partition_table(): Disk read failed. [ 809.649750][T26420] Dev nbd3: unable to read RDB block 0 [ 809.655967][T26420] nbd3: unable to read partition table [ 809.667106][T26420] ldm_validate_partition_table(): Disk read failed. [ 809.674242][T26420] Dev nbd3: unable to read RDB block 0 [ 809.681457][T26420] nbd3: unable to read partition table [ 811.018849][T27595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.421673][T27653] net_ratelimit: 1 callbacks suppressed [ 811.421692][T27653] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 811.446070][T27661] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 811.527381][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7245'. [ 811.605774][T27661] 8021q: adding VLAN 0 to HW filter on device bond27 [ 811.669976][T27664] macvlan1: entered promiscuous mode [ 811.675345][T27664] macvlan1: entered allmulticast mode [ 811.797515][T27669] syzkaller0: entered promiscuous mode [ 811.803096][T27669] syzkaller0: entered allmulticast mode [ 811.999523][T27694] syzkaller0: entered promiscuous mode [ 812.005100][T27694] syzkaller0: entered allmulticast mode [ 812.178114][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7262'. [ 812.244439][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7264'. [ 813.870060][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.878766][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.886998][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 814.875996][T27684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.087968][T27726] syzkaller0: entered promiscuous mode [ 815.093792][T27726] syzkaller0: entered allmulticast mode [ 815.140034][T27732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7273'. [ 815.302247][T27741] netlink: 'syz.2.7277': attribute type 1 has an invalid length. [ 815.354351][T27744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7278'. [ 815.365531][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7277'. [ 815.377272][T27741] 8021q: adding VLAN 0 to HW filter on device bond10 [ 815.406123][T27749] macvlan4: entered promiscuous mode [ 815.416965][T27749] macvlan4: entered allmulticast mode [ 815.929752][T27777] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.7293'. [ 815.939470][T27777] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 815.973073][T27779] netlink: 'syz.1.7294': attribute type 1 has an invalid length. [ 816.015661][T27779] 8021q: adding VLAN 0 to HW filter on device bond18 [ 816.102274][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7297'. [ 816.114176][T27786] netlink: 'syz.1.7297': attribute type 21 has an invalid length. [ 816.232379][T27790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7299'. [ 816.400543][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7301'. [ 816.864341][T27819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7310'. [ 817.070194][T27832] netlink: 'syz.4.7307': attribute type 1 has an invalid length. [ 817.139717][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7307'. [ 817.300163][T27832] 8021q: adding VLAN 0 to HW filter on device bond28 [ 817.397124][T27840] macvlan2: entered promiscuous mode [ 817.402485][T27840] macvlan2: entered allmulticast mode [ 817.438909][T27848] lo speed is unknown, defaulting to 1000 [ 817.500581][T27850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7317'. [ 817.939560][T27848] lo speed is unknown, defaulting to 1000 [ 818.177358][T27870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7324'. [ 818.399764][T27877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7327'. [ 818.483357][T27887] netlink: 'syz.1.7326': attribute type 10 has an invalid length. [ 818.906366][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 818.914473][ C1] lec:lec_tx_timeout: lec0 [ 819.133127][T27907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7335'. [ 819.565523][T27921] netlink: 'syz.0.7337': attribute type 10 has an invalid length. [ 819.961189][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7345'. [ 820.070080][T27941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7346'. [ 820.238243][ T1162] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 820.349994][T27957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7349'. [ 820.870289][T27974] netlink: 'syz.1.7353': attribute type 10 has an invalid length. [ 820.879358][T27973] tipc: Enabling of bearer rejected, already enabled [ 821.390273][T27995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7364'. [ 822.312577][T28013] lo speed is unknown, defaulting to 1000 [ 822.439153][T28022] netlink: 'syz.3.7373': attribute type 1 has an invalid length. [ 822.501570][T28024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7373'. [ 822.536700][T28022] 8021q: adding VLAN 0 to HW filter on device bond11 [ 822.601054][T28024] macvlan4: entered promiscuous mode [ 822.643948][T28024] macvlan4: entered allmulticast mode [ 822.657320][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7374'. [ 822.731754][T28013] lo speed is unknown, defaulting to 1000 [ 822.887304][T28042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7379'. [ 823.275132][T28054] netlink: 'syz.1.7383': attribute type 1 has an invalid length. [ 823.333321][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7383'. [ 823.404061][T28054] 8021q: adding VLAN 0 to HW filter on device bond19 [ 823.607429][T28060] macvlan4: entered promiscuous mode [ 823.612800][T28060] macvlan4: entered allmulticast mode [ 823.751472][T28067] tipc: Enabling of bearer rejected, already enabled [ 823.869410][T28073] syzkaller1: entered promiscuous mode [ 823.874958][T28073] syzkaller1: entered allmulticast mode [ 824.294729][T28097] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 824.373255][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'. [ 824.391204][T28097] 8021q: adding VLAN 0 to HW filter on device bond20 [ 824.415436][T28101] macvlan5: entered promiscuous mode [ 824.426318][T28101] macvlan5: entered allmulticast mode [ 824.855250][T28122] Bluetooth: MGMT ver 1.23 [ 824.866435][T28122] Bluetooth: hci1: too big key_count value 29096 [ 825.201982][T28138] pimreg: entered allmulticast mode [ 825.213423][T28137] syzkaller1: entered promiscuous mode [ 825.220506][T28137] syzkaller1: entered allmulticast mode [ 825.679132][T28158] syzkaller1: entered promiscuous mode [ 825.684671][T28158] syzkaller1: entered allmulticast mode [ 825.781238][T28165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7424'. [ 826.020836][T28177] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 826.055025][T28176] syzkaller0: entered promiscuous mode [ 826.072965][T28176] syzkaller0: entered allmulticast mode [ 826.420466][T14526] lec:lec_start_xmit: lec0:No lecd attached [ 826.916028][T28200] syzkaller1: entered promiscuous mode [ 826.922557][T28200] syzkaller1: entered allmulticast mode [ 827.220739][T28224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7444'. [ 827.443155][T28244] xt_hashlimit: size too large, truncated to 1048576 [ 827.486773][T28247] netlink: 'syz.1.7451': attribute type 1 has an invalid length. [ 827.542398][T28247] 8021q: adding VLAN 0 to HW filter on device bond21 [ 827.550595][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7451'. [ 827.593103][T28251] macvlan6: entered promiscuous mode [ 827.607767][T28251] macvlan6: entered allmulticast mode [ 827.941560][T28272] netlink: 'syz.4.7460': attribute type 1 has an invalid length. [ 828.009058][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7460'. [ 828.048076][T28272] 8021q: adding VLAN 0 to HW filter on device bond29 [ 828.104604][T28275] macvlan3: entered promiscuous mode [ 828.118787][T28275] macvlan3: entered allmulticast mode [ 828.308495][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 828.637296][T28307] lo speed is unknown, defaulting to 1000 [ 828.705961][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7475'. [ 829.369603][T28307] lo speed is unknown, defaulting to 1000 [ 829.707308][T28372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7492'. [ 829.719460][T28355] syzkaller0: entered promiscuous mode [ 829.725170][T28355] syzkaller0: entered allmulticast mode [ 831.950871][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 831.958981][ C1] lec:lec_tx_timeout: lec0 [ 831.981861][T28413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7508'. [ 832.287907][T28436] "syz.3.7514" (28436) uses obsolete ecb(arc4) skcipher [ 832.483808][T28448] lo speed is unknown, defaulting to 1000 [ 832.934501][T28448] lo speed is unknown, defaulting to 1000 [ 833.820050][T28504] netlink: 'syz.1.7535': attribute type 1 has an invalid length. [ 833.888494][T28504] 8021q: adding VLAN 0 to HW filter on device bond22 [ 833.932923][T28507] lo speed is unknown, defaulting to 1000 [ 834.870370][T28507] lo speed is unknown, defaulting to 1000 [ 835.448335][T28558] netlink: 'syz.4.7548': attribute type 1 has an invalid length. [ 835.521566][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 835.628818][T28558] 8021q: adding VLAN 0 to HW filter on device bond30 [ 835.691175][T28551] macvlan4: entered promiscuous mode [ 835.699219][T28551] macvlan4: entered allmulticast mode [ 836.213800][T28556] lo speed is unknown, defaulting to 1000 [ 836.675857][T28556] lo speed is unknown, defaulting to 1000 [ 838.256223][T28629] lo speed is unknown, defaulting to 1000 [ 838.489010][T28649] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7574'. [ 838.764764][T28629] lo speed is unknown, defaulting to 1000 [ 838.764803][T28648] lo speed is unknown, defaulting to 1000 [ 839.155025][T28648] lo speed is unknown, defaulting to 1000 [ 839.762306][T28677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7583'. [ 839.861694][T28679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7584'. [ 839.871871][T28679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7584'. [ 839.974430][T28683] netlink: 'syz.0.7586': attribute type 29 has an invalid length. [ 840.001457][T28683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7586'. [ 840.928080][T28723] syzkaller0: entered promiscuous mode [ 840.933622][T28723] syzkaller0: entered allmulticast mode [ 841.110734][T28727] netlink: 'syz.1.7604': attribute type 1 has an invalid length. [ 841.136410][T28727] 8021q: adding VLAN 0 to HW filter on device bond23 [ 841.147393][T28727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7604'. [ 841.161685][T28727] macvlan7: entered promiscuous mode [ 841.167342][T28727] macvlan7: entered allmulticast mode [ 841.203115][T28636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.477394][T28736] netlink: 'syz.2.7607': attribute type 10 has an invalid length. [ 841.485606][T28741] lo speed is unknown, defaulting to 1000 [ 841.509738][T28736] bond0: (slave wlan1): Opening slave failed [ 841.645958][T28755] netlink: 'syz.4.7613': attribute type 1 has an invalid length. [ 841.745421][T28755] 8021q: adding VLAN 0 to HW filter on device bond31 [ 841.799680][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7613'. [ 841.868265][T28755] macvlan5: entered promiscuous mode [ 841.888790][T28755] macvlan5: entered allmulticast mode [ 842.004612][T28768] netlink: 'syz.0.7617': attribute type 1 has an invalid length. [ 842.058751][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7617'. [ 842.091438][T28768] 8021q: adding VLAN 0 to HW filter on device bond17 [ 842.127615][T28771] macvlan3: entered promiscuous mode [ 842.133180][T28771] macvlan3: entered allmulticast mode [ 842.153345][T28741] lo speed is unknown, defaulting to 1000 [ 842.844661][T28790] lo speed is unknown, defaulting to 1000 [ 843.152524][T28790] lo speed is unknown, defaulting to 1000 [ 843.269898][T28806] netlink: 'syz.0.7630': attribute type 10 has an invalid length. [ 843.475544][T28812] xt_hashlimit: size too large, truncated to 1048576 [ 843.607450][T28816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7634'. [ 844.002429][T28824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7637'. [ 844.111854][T28828] netlink: 'syz.1.7639': attribute type 1 has an invalid length. [ 844.142757][T28828] 8021q: adding VLAN 0 to HW filter on device bond24 [ 844.153463][T28828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7639'. [ 844.169745][T28828] macvlan8: entered promiscuous mode [ 844.175253][T28828] macvlan8: entered allmulticast mode [ 844.311108][T28834] lo speed is unknown, defaulting to 1000 [ 844.480167][T28834] lo speed is unknown, defaulting to 1000 [ 844.613146][T28839] syzkaller0: entered promiscuous mode [ 844.619155][T28839] syzkaller0: entered allmulticast mode [ 844.844605][T28762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 845.534219][T28860] netlink: 'syz.3.7650': attribute type 1 has an invalid length. [ 845.637190][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7650'. [ 845.668207][T28860] 8021q: adding VLAN 0 to HW filter on device bond12 [ 845.704231][T28862] macvlan5: entered promiscuous mode [ 845.729242][T28862] macvlan5: entered allmulticast mode [ 845.786795][T28860] netlink: 'syz.3.7650': attribute type 12 has an invalid length. [ 845.794835][T28860] netlink: 'syz.3.7650': attribute type 5 has an invalid length. [ 845.836464][T28860] netlink: 'syz.3.7650': attribute type 2 has an invalid length. [ 845.860330][T28860] netlink: 'syz.3.7650': attribute type 7 has an invalid length. [ 845.885910][T28860] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7650'. [ 845.961959][T28870] lo speed is unknown, defaulting to 1000 [ 846.451239][T28899] netlink: 'syz.3.7658': attribute type 10 has an invalid length. [ 846.890404][T28884] lo speed is unknown, defaulting to 1000 [ 846.897253][T28870] lo speed is unknown, defaulting to 1000 [ 847.483484][T28890] lo speed is unknown, defaulting to 1000 [ 847.722147][T28917] netlink: 'syz.3.7664': attribute type 1 has an invalid length. [ 847.773888][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7664'. [ 847.793322][T28917] 8021q: adding VLAN 0 to HW filter on device bond13 [ 847.823034][T28919] macvlan6: entered promiscuous mode [ 847.829308][T28919] macvlan6: entered allmulticast mode [ 847.859389][T28917] netlink: 'syz.3.7664': attribute type 12 has an invalid length. [ 847.875559][T28917] netlink: 'syz.3.7664': attribute type 5 has an invalid length. [ 847.886325][T28917] netlink: 'syz.3.7664': attribute type 2 has an invalid length. [ 847.894192][T28917] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7664'. [ 847.931482][T28890] lo speed is unknown, defaulting to 1000 [ 847.985762][T28884] lo speed is unknown, defaulting to 1000 [ 848.480628][T28934] lo speed is unknown, defaulting to 1000 [ 848.487044][T28937] syzkaller0: entered promiscuous mode [ 848.505289][T28937] syzkaller0: entered allmulticast mode [ 848.913620][T28934] lo speed is unknown, defaulting to 1000 [ 848.923590][T28942] lo speed is unknown, defaulting to 1000 [ 849.493756][T28942] lo speed is unknown, defaulting to 1000 [ 849.895097][T28966] 8021q: adding VLAN 0 to HW filter on device bond18 [ 849.914206][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7678'. [ 849.932293][T28968] macvlan4: entered promiscuous mode [ 849.938172][T28968] macvlan4: entered allmulticast mode [ 850.473949][T28983] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7683'. [ 850.486796][T28983] netlink: Conntrack attr has 4 unknown bytes [ 850.544090][T28981] 8021q: adding VLAN 0 to HW filter on device bond14 [ 850.562262][T28985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7682'. [ 850.626707][T28985] macvlan7: entered promiscuous mode [ 850.632269][T28985] macvlan7: entered allmulticast mode [ 850.648610][T28981] validate_nla: 3 callbacks suppressed [ 850.648631][T28981] netlink: 'syz.3.7682': attribute type 12 has an invalid length. [ 850.693291][T28981] netlink: 'syz.3.7682': attribute type 5 has an invalid length. [ 850.701975][T28981] netlink: 'syz.3.7682': attribute type 2 has an invalid length. [ 850.710336][T28981] netlink: 'syz.3.7682': attribute type 7 has an invalid length. [ 850.721137][T28981] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7682'. [ 850.779563][T28991] lo speed is unknown, defaulting to 1000 [ 851.000929][T28999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7688'. [ 851.034351][T28991] lo speed is unknown, defaulting to 1000 [ 851.054324][T28998] syzkaller0: entered promiscuous mode [ 851.060174][T28998] syzkaller0: entered allmulticast mode [ 851.175555][T29009] netlink: 'syz.0.7690': attribute type 1 has an invalid length. [ 851.257994][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7690'. [ 851.273767][T29009] 8021q: adding VLAN 0 to HW filter on device bond19 [ 851.344544][T29014] macvlan5: entered promiscuous mode [ 851.358751][T29014] macvlan5: entered allmulticast mode [ 851.399241][T29019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 851.774707][T29035] netlink: 'syz.2.7698': attribute type 1 has an invalid length. [ 851.842172][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7698'. [ 851.922785][T29035] 8021q: adding VLAN 0 to HW filter on device bond11 [ 851.954595][T29002] lec:lec_atm_close: lec0: Shut down! [ 851.982643][T29039] macvlan5: entered promiscuous mode [ 851.996466][T29039] macvlan5: entered allmulticast mode [ 852.698676][T29069] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.874597][T29079] netlink: 'syz.2.7711': attribute type 1 has an invalid length. [ 852.960773][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7711'. [ 853.040303][T29079] 8021q: adding VLAN 0 to HW filter on device bond12 [ 853.050396][T29067] syzkaller0: entered promiscuous mode [ 853.056005][T29067] syzkaller0: entered allmulticast mode [ 853.072955][T29083] macvlan6: entered promiscuous mode [ 853.078623][T29083] macvlan6: entered allmulticast mode [ 853.929976][T29105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7718'. [ 854.728865][T29134] netlink: 'syz.0.7727': attribute type 10 has an invalid length. [ 854.753231][T29132] syzkaller0: entered promiscuous mode [ 854.759534][T29132] syzkaller0: entered allmulticast mode [ 855.908020][T29182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7748'. [ 856.019065][T29187] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 856.027385][T29187] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 856.187539][T29192] lo speed is unknown, defaulting to 1000 [ 856.558525][T29192] lo speed is unknown, defaulting to 1000 [ 856.733934][T29199] lo speed is unknown, defaulting to 1000 [ 856.956313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 856.964377][ C1] lec:lec_tx_timeout: lec0 [ 856.975906][T29212] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 856.985875][T29212] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 859.463194][T29199] lo speed is unknown, defaulting to 1000 [ 859.583566][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7763'. [ 859.726436][T29237] netlink: 'syz.0.7764': attribute type 10 has an invalid length. [ 859.814420][T29239] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 859.830216][T29239] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 859.975143][T29244] syzkaller0: entered promiscuous mode [ 859.992727][T29244] syzkaller0: entered allmulticast mode [ 860.494541][T29257] netlink: 'syz.4.7770': attribute type 10 has an invalid length. [ 860.600517][T29262] syzkaller0: entered promiscuous mode [ 860.606193][T29262] syzkaller0: entered allmulticast mode [ 860.958963][T29269] lo speed is unknown, defaulting to 1000 [ 861.255269][T29269] lo speed is unknown, defaulting to 1000 [ 861.364282][T29285] netlink: 'syz.3.7780': attribute type 12 has an invalid length. [ 861.387816][T29285] netlink: 'syz.3.7780': attribute type 5 has an invalid length. [ 861.395613][T29285] netlink: 'syz.3.7780': attribute type 2 has an invalid length. [ 861.413299][T29285] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7780'. [ 861.471505][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7781'. [ 861.518864][T29291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7782'. [ 861.680459][T29295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7783'. [ 861.741320][T29293] syzkaller1: entered promiscuous mode [ 861.756939][T29293] syzkaller1: entered allmulticast mode [ 862.562598][T29314] lo speed is unknown, defaulting to 1000 [ 862.946066][T29323] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7790'. [ 863.125437][T29344] netlink: 'syz.2.7794': attribute type 10 has an invalid length. [ 863.267774][T29316] lo speed is unknown, defaulting to 1000 [ 863.322506][T29314] lo speed is unknown, defaulting to 1000 [ 863.867927][T29316] lo speed is unknown, defaulting to 1000 [ 865.130254][T29370] lo speed is unknown, defaulting to 1000 [ 865.594301][T29388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7808'. [ 865.696548][T29388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7808'. [ 865.711503][T29389] syzkaller0: entered promiscuous mode [ 865.721497][T29389] syzkaller0: entered allmulticast mode [ 865.739588][T29370] lo speed is unknown, defaulting to 1000 [ 865.765997][T29389] macsec1: entered promiscuous mode [ 865.888898][T29394] lo speed is unknown, defaulting to 1000 [ 866.194348][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7814'. [ 866.243012][T29394] lo speed is unknown, defaulting to 1000 [ 866.252847][T29400] lo speed is unknown, defaulting to 1000 [ 866.957514][T29400] lo speed is unknown, defaulting to 1000 [ 867.335769][T29425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 867.995852][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7828'. [ 868.060459][T29453] lo speed is unknown, defaulting to 1000 [ 868.247273][T29453] lo speed is unknown, defaulting to 1000 [ 868.914383][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7834'. [ 869.023418][T29466] syzkaller0: entered promiscuous mode [ 869.029903][T29466] syzkaller0: entered allmulticast mode [ 869.648929][T29409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.919785][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7836'. [ 871.864449][T29496] tipc: Enabled bearer , priority 0 [ 871.883976][T29503] lo speed is unknown, defaulting to 1000 [ 871.891229][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7842'. [ 872.052529][T29496] syzkaller0: entered promiscuous mode [ 872.084613][T29496] syzkaller0: entered allmulticast mode [ 872.100048][T29496] tipc: Resetting bearer [ 872.126844][T29495] tipc: Resetting bearer [ 873.982765][T29495] tipc: Disabling bearer [ 873.992032][T29503] lo speed is unknown, defaulting to 1000 [ 874.010737][T17458] tipc: Node number set to 1898500059 [ 874.043552][T29530] lo speed is unknown, defaulting to 1000 [ 874.427772][T29558] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 874.435660][T29558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.555662][T29530] lo speed is unknown, defaulting to 1000 [ 875.309458][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.320818][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 875.382388][T29522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.651913][T29577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7858'. [ 876.232574][T29583] lec:lec_atm_close: lec0: Shut down! [ 876.854127][T29617] lo speed is unknown, defaulting to 1000 [ 877.040842][T29626] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 877.337669][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7880'. [ 877.426708][T29617] lo speed is unknown, defaulting to 1000 [ 878.380898][T29671] lo speed is unknown, defaulting to 1000 [ 878.427175][T29677] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7893'. [ 878.466498][T29677] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7893'. [ 878.486628][T29677] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7893'. [ 878.591111][T29674] lo speed is unknown, defaulting to 1000 [ 878.592883][T29671] lo speed is unknown, defaulting to 1000 [ 878.697937][T29679] syzkaller1: entered promiscuous mode [ 878.703480][T29679] syzkaller1: entered allmulticast mode [ 878.955547][T29674] lo speed is unknown, defaulting to 1000 [ 879.637247][T29698] lo speed is unknown, defaulting to 1000 [ 879.860305][T29698] lo speed is unknown, defaulting to 1000 [ 880.610423][T29652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.872724][T29713] netlink: 'syz.2.7903': attribute type 8 has an invalid length. [ 880.891243][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7903'. [ 880.915423][T29716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7900'. [ 880.940817][T29713] bond0: entered promiscuous mode [ 880.962401][T29713] gretap0: entered promiscuous mode [ 880.970142][T29713] veth1_to_hsr: entered promiscuous mode [ 880.977724][T29713] debugfs: 'hsr1' already exists in 'hsr' [ 880.983647][T29713] Cannot create hsr debugfs directory [ 881.009348][T29713] hsr1: entered promiscuous mode [ 881.058004][T29715] lo speed is unknown, defaulting to 1000 [ 881.395247][T29715] lo speed is unknown, defaulting to 1000 [ 881.468940][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7909'. [ 881.667669][T29738] syzkaller0: entered promiscuous mode [ 881.673423][T29738] syzkaller0: entered allmulticast mode [ 881.687477][T29741] tipc: Enabled bearer , priority 0 [ 881.701109][T29737] tipc: Resetting bearer [ 881.946456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 881.954695][ C1] lec:lec_tx_timeout: lec0 [ 883.602127][T29737] tipc: Disabling bearer [ 883.648825][T29743] lo speed is unknown, defaulting to 1000 [ 883.815217][T29767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7917'. [ 884.060303][T29743] lo speed is unknown, defaulting to 1000 [ 884.073741][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7922'. [ 884.112339][T29777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7923'. [ 884.236539][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7923'. [ 884.337025][T29781] syzkaller0: entered promiscuous mode [ 884.342767][T29781] syzkaller0: entered allmulticast mode [ 884.487964][T29781] tipc: Enabling of bearer rejected, failed to enable media [ 885.006451][T29815] netlink: 'syz.1.7934': attribute type 4 has an invalid length. [ 885.014919][T29802] lo speed is unknown, defaulting to 1000 [ 885.530262][T29828] lo speed is unknown, defaulting to 1000 [ 885.536400][T29802] lo speed is unknown, defaulting to 1000 [ 886.185787][T29833] syzkaller0: entered promiscuous mode [ 886.203712][T29833] syzkaller0: entered allmulticast mode [ 886.230561][T29828] lo speed is unknown, defaulting to 1000 [ 888.112080][T29855] netlink: 'syz.3.7947': attribute type 2 has an invalid length. [ 888.134870][T29855] : entered promiscuous mode [ 888.140947][T29853] syzkaller0: entered promiscuous mode [ 888.152961][T29853] syzkaller0: entered allmulticast mode [ 888.167582][T29855] netlink: 'syz.3.7947': attribute type 2 has an invalid length. [ 888.514796][T29864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7950'. [ 888.647338][T29868] syzkaller1: entered promiscuous mode [ 888.654743][T29868] syzkaller1: entered allmulticast mode [ 888.669894][T29866] tipc: Enabled bearer , priority 0 [ 888.914940][T29866] syzkaller0: entered promiscuous mode [ 888.933644][T29866] syzkaller0: entered allmulticast mode [ 888.951128][T29866] tipc: Resetting bearer [ 889.081649][ T36] tipc: Resetting bearer [ 889.107539][T29865] tipc: Resetting bearer [ 889.680346][T29918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7965'. [ 890.951327][T14526] lec:lec_start_xmit: lec0:No lecd attached [ 891.193896][T29865] tipc: Disabling bearer [ 891.251310][T29918] ip6gre2: entered promiscuous mode [ 891.268278][T29918] ip6gre2: entered allmulticast mode [ 891.283887][T29924] netlink: 'syz.1.7965': attribute type 6 has an invalid length. [ 891.307209][T29924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7965'. [ 891.416666][T29931] lo speed is unknown, defaulting to 1000 [ 891.427765][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7970'. [ 891.705871][T29953] netlink: 'syz.3.7975': attribute type 1 has an invalid length. [ 891.799715][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7975'. [ 891.847891][T29939] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 891.920834][T29953] 8021q: adding VLAN 0 to HW filter on device bond16 [ 891.974072][T29956] macvlan8: entered promiscuous mode [ 891.990628][T29956] macvlan8: entered allmulticast mode [ 892.066662][T29957] netlink: 'syz.3.7975': attribute type 12 has an invalid length. [ 892.086532][T29957] netlink: 'syz.3.7975': attribute type 5 has an invalid length. [ 892.118135][T29957] netlink: 'syz.3.7975': attribute type 2 has an invalid length. [ 892.145074][T29957] netlink: 'syz.3.7975': attribute type 7 has an invalid length. [ 892.162005][T29957] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7975'. [ 892.208697][T29931] lo speed is unknown, defaulting to 1000 [ 893.177789][T29995] netlink: 'syz.2.7988': attribute type 1 has an invalid length. [ 893.212041][T29995] 8021q: adding VLAN 0 to HW filter on device bond13 [ 893.223861][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7988'. [ 893.248302][T29995] macvlan7: entered promiscuous mode [ 893.253815][T29995] macvlan7: entered allmulticast mode [ 893.267025][T29999] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7990'. [ 893.268212][T29996] syzkaller0: entered promiscuous mode [ 893.281621][T29996] syzkaller0: entered allmulticast mode [ 893.341085][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7991'. [ 893.677926][T30013] netlink: 'syz.2.7995': attribute type 10 has an invalid length. [ 893.949400][T30022] lo speed is unknown, defaulting to 1000 [ 894.400081][T30042] netlink: 'syz.3.8007': attribute type 10 has an invalid length. [ 894.417042][T30040] tipc: Enabled bearer , priority 0 [ 894.443634][T30039] tipc: Disabling bearer [ 894.499790][T30042] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 894.521431][T30042] hsr0: mtu greater than device maximum [ 894.555347][T30042] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 894.582443][T30022] lo speed is unknown, defaulting to 1000 [ 894.919200][T30054] netlink: 'syz.3.8010': attribute type 10 has an invalid length. [ 895.282397][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8012'. [ 895.508187][T30066] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 895.515930][T30066] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 895.584630][T30068] netlink: 'syz.1.8015': attribute type 1 has an invalid length. [ 895.629869][T30068] 8021q: adding VLAN 0 to HW filter on device bond26 [ 895.642471][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 895.659987][T30068] macvlan9: entered promiscuous mode [ 895.665512][T30068] macvlan9: entered allmulticast mode [ 895.743851][T30078] syzkaller0: entered promiscuous mode [ 895.750045][T30078] syzkaller0: entered allmulticast mode [ 895.776010][T30080] netlink: 'syz.4.8017': attribute type 1 has an invalid length. [ 895.827459][T30075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'. [ 895.849834][T30080] 8021q: adding VLAN 0 to HW filter on device bond32 [ 895.869183][T30078] tipc: Enabling of bearer rejected, failed to enable media [ 895.883708][T30075] macvlan6: entered promiscuous mode [ 895.892284][T30075] macvlan6: entered allmulticast mode [ 895.955376][T30086] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 895.966273][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 895.974403][ C1] lec:lec_tx_timeout: lec0 [ 896.002933][T30086] tipc: Enabling of bearer rejected, already enabled [ 896.109763][T30089] lo speed is unknown, defaulting to 1000 [ 896.257010][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8023'. [ 896.585400][T30107] netlink: 'syz.0.8028': attribute type 1 has an invalid length. [ 896.642673][T30111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8028'. [ 896.675361][T30107] 8021q: adding VLAN 0 to HW filter on device bond20 [ 896.721656][T30111] macvlan6: entered promiscuous mode [ 896.727338][T30111] macvlan6: entered allmulticast mode [ 896.733296][T30089] lo speed is unknown, defaulting to 1000 [ 896.914615][T30122] netlink: 'syz.4.8029': attribute type 10 has an invalid length. [ 896.998365][T30117] syzkaller0: entered promiscuous mode [ 897.003992][T30117] syzkaller0: entered allmulticast mode [ 897.698122][T30139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8036'. [ 897.768425][T30141] lo speed is unknown, defaulting to 1000 [ 897.952140][T30141] lo speed is unknown, defaulting to 1000 [ 898.690853][T30146] lo speed is unknown, defaulting to 1000 [ 898.747013][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8038'. [ 898.755995][T30148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8038'. [ 898.778372][T30148] netlink: 'syz.1.8038': attribute type 6 has an invalid length. [ 898.817698][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.826196][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.835913][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.845357][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8038'. [ 898.859095][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.868050][T30148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8038'. [ 898.877424][T30148] netlink: 'syz.1.8038': attribute type 6 has an invalid length. [ 898.958888][T30146] lo speed is unknown, defaulting to 1000 [ 899.283723][T30158] netlink: 'syz.1.8041': attribute type 1 has an invalid length. [ 899.329180][T30158] 8021q: adding VLAN 0 to HW filter on device bond27 [ 899.346145][T30158] macvlan10: entered promiscuous mode [ 899.351908][T30158] macvlan10: entered allmulticast mode [ 899.864825][T30118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.993964][T30167] lo speed is unknown, defaulting to 1000 [ 900.379871][T30188] __nla_validate_parse: 3 callbacks suppressed [ 900.379892][T30188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8051'. [ 900.557640][T30190] syzkaller0: entered promiscuous mode [ 900.573425][T30190] syzkaller0: entered allmulticast mode [ 900.596032][T30190] tipc: Enabled bearer , priority 0 [ 900.603696][T30192] netlink: 'syz.2.8052': attribute type 1 has an invalid length. [ 900.612408][T30167] lo speed is unknown, defaulting to 1000 [ 900.619083][T30189] tipc: Resetting bearer [ 900.655540][T30189] tipc: Disabling bearer [ 900.658058][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8052'. [ 900.714239][T30192] 8021q: adding VLAN 0 to HW filter on device bond14 [ 900.810154][T30195] macvlan8: entered promiscuous mode [ 900.815524][T30195] macvlan8: entered allmulticast mode [ 900.944688][T30202] syzkaller0: entered promiscuous mode [ 900.964095][T30202] syzkaller0: entered allmulticast mode [ 901.105902][T30213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8059'. [ 901.118355][T30208] tipc: Enabling of bearer rejected, failed to enable media [ 901.367251][T30212] syzkaller0: entered promiscuous mode [ 901.375736][T30212] syzkaller0: entered allmulticast mode [ 901.589508][T30230] netlink: 'syz.0.8065': attribute type 1 has an invalid length. [ 901.656096][T30233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8065'. [ 903.138376][T30230] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 903.272374][T30240] lo speed is unknown, defaulting to 1000 [ 903.352055][T30246] netlink: 'syz.2.8067': attribute type 10 has an invalid length. [ 903.727270][T30259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8072'. [ 903.794106][T30261] netlink: 592 bytes leftover after parsing attributes in process `syz.3.8073'. [ 903.870865][T30263] syzkaller0: entered promiscuous mode [ 903.880232][T30263] syzkaller0: entered allmulticast mode [ 903.917506][T30263] tipc: Enabling of bearer rejected, failed to enable media [ 903.987918][T30240] lo speed is unknown, defaulting to 1000 [ 904.047248][T30265] syzkaller0: entered promiscuous mode [ 904.052926][T30265] syzkaller0: entered allmulticast mode [ 904.199667][T30276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8078'. [ 905.856668][T30280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 906.215475][T30293] lo speed is unknown, defaulting to 1000 [ 906.549165][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8085'. [ 906.579519][T30310] netlink: 592 bytes leftover after parsing attributes in process `syz.0.8086'. [ 906.798699][T30315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8089'. [ 907.095532][T30294] lo speed is unknown, defaulting to 1000 [ 907.117282][T30293] lo speed is unknown, defaulting to 1000 [ 907.724693][T30345] netlink: 592 bytes leftover after parsing attributes in process `syz.0.8097'. [ 907.770090][T30294] lo speed is unknown, defaulting to 1000 [ 908.112745][T30354] lo speed is unknown, defaulting to 1000 [ 908.478685][T30370] syzkaller0: entered promiscuous mode [ 908.484394][T30370] syzkaller0: entered allmulticast mode [ 908.524985][T30354] lo speed is unknown, defaulting to 1000 [ 909.110967][T30387] syzkaller0: entered promiscuous mode [ 909.136513][T30387] syzkaller0: entered allmulticast mode [ 909.454917][T30391] syzkaller0: entered promiscuous mode [ 909.462155][T30391] syzkaller0: entered allmulticast mode [ 909.611478][T30402] netlink: 592 bytes leftover after parsing attributes in process `syz.2.8109'. [ 909.837433][T30406] syzkaller0: entered promiscuous mode [ 909.843067][T30406] syzkaller0: entered allmulticast mode [ 911.701814][T30435] syzkaller0: entered promiscuous mode [ 911.713492][T30435] syzkaller0: entered allmulticast mode [ 911.721163][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.851893][T30443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8118'. [ 911.903878][T30432] lo speed is unknown, defaulting to 1000 [ 911.933482][T30448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8118'. [ 912.374370][T30432] lo speed is unknown, defaulting to 1000 [ 912.530024][T30468] syzkaller0: entered promiscuous mode [ 912.535658][T30468] syzkaller0: entered allmulticast mode [ 913.221364][T30481] syzkaller0: entered promiscuous mode [ 913.228113][T30481] syzkaller0: entered allmulticast mode [ 913.462312][T30492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8134'. [ 913.922544][T30501] syzkaller0: entered promiscuous mode [ 913.947322][T30501] syzkaller0: entered allmulticast mode [ 914.402761][T30516] netlink: 'syz.1.8141': attribute type 1 has an invalid length. [ 914.415075][T30517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8140'. [ 914.452319][T30516] 8021q: adding VLAN 0 to HW filter on device bond28 [ 914.488149][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8141'. [ 914.690667][T30516] macvlan11: entered promiscuous mode [ 914.696128][T30516] macvlan11: entered allmulticast mode [ 915.486930][T30542] netlink: 'syz.3.8146': attribute type 1 has an invalid length. [ 915.539891][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 917.447140][T30542] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 917.448314][T30544] netlink: 'syz.3.8146': attribute type 12 has an invalid length. [ 917.465027][T30544] netlink: 'syz.3.8146': attribute type 5 has an invalid length. [ 917.474083][T30544] netlink: 'syz.3.8146': attribute type 2 has an invalid length. [ 917.482255][T30544] netlink: 'syz.3.8146': attribute type 7 has an invalid length. [ 917.490789][T30544] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8146'. [ 917.774708][T30579] netlink: 'syz.3.8155': attribute type 1 has an invalid length. [ 917.840342][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8155'. [ 917.851519][T30579] 8021q: adding VLAN 0 to HW filter on device bond17 [ 917.890872][T30586] macvlan9: entered promiscuous mode [ 917.897951][T30586] macvlan9: entered allmulticast mode [ 917.907848][T30589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8156'. [ 917.948878][T30579] netlink: 'syz.3.8155': attribute type 12 has an invalid length. [ 917.960294][T30579] netlink: 'syz.3.8155': attribute type 5 has an invalid length. [ 917.968911][T30579] netlink: 'syz.3.8155': attribute type 2 has an invalid length. [ 917.977099][T30579] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8155'. [ 918.212824][T30599] 8021q: adding VLAN 0 to HW filter on device bond15 [ 918.225170][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8161'. [ 918.242192][T30599] macvlan9: entered promiscuous mode [ 918.247863][T30599] macvlan9: entered allmulticast mode [ 918.328389][T30605] vlan5: entered promiscuous mode [ 918.484043][T30611] syzkaller0: entered promiscuous mode [ 918.490609][T30611] syzkaller0: entered allmulticast mode [ 918.779831][T30619] syzkaller0: entered promiscuous mode [ 918.785411][T30619] syzkaller0: entered allmulticast mode [ 918.970270][T30626] syzkaller0: entered promiscuous mode [ 918.975923][T30626] syzkaller0: entered allmulticast mode [ 919.401795][T30635] 8021q: adding VLAN 0 to HW filter on device bond21 [ 919.413233][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'. [ 919.428812][T30635] macvlan7: entered promiscuous mode [ 919.434259][T30635] macvlan7: entered allmulticast mode [ 919.680918][T30641] lo speed is unknown, defaulting to 1000 [ 919.831117][T30641] lo speed is unknown, defaulting to 1000 [ 919.984420][T30646] syzkaller0: entered promiscuous mode [ 919.994632][T30646] syzkaller0: entered allmulticast mode [ 920.124681][T30648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8177'. [ 920.518038][T30651] syzkaller0: entered promiscuous mode [ 920.523644][T30651] syzkaller0: entered allmulticast mode [ 920.674427][T30655] syzkaller0: entered promiscuous mode [ 920.680775][T30655] syzkaller0: entered allmulticast mode [ 920.755441][T30578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.925884][T30662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8183'. [ 921.089428][T30669] syzkaller0: entered promiscuous mode [ 921.095097][T30669] syzkaller0: entered allmulticast mode [ 921.103759][T30665] validate_nla: 4 callbacks suppressed [ 921.103778][T30665] netlink: 'syz.4.8184': attribute type 3 has an invalid length. [ 921.118500][T30665] netlink: 'syz.4.8184': attribute type 3 has an invalid length. [ 922.941207][T30682] syzkaller0: entered promiscuous mode [ 922.947082][T30682] syzkaller0: entered allmulticast mode [ 924.706039][T30702] tipc: Enabling of bearer rejected, failed to enable media [ 924.857568][T30723] syzkaller0: entered promiscuous mode [ 924.863119][T30723] syzkaller0: entered allmulticast mode [ 925.021133][T30741] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8196'. [ 925.053056][T30741] xt_connbytes: Forcing CT accounting to be enabled [ 925.176193][T30745] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 925.259827][T30747] syzkaller0: entered promiscuous mode [ 925.266015][T30747] syzkaller0: entered allmulticast mode [ 925.376922][T30755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8202'. [ 925.442924][T30754] syzkaller0: entered promiscuous mode [ 925.454383][T30756] netlink: 'syz.3.8199': attribute type 10 has an invalid length. [ 925.462714][T30754] syzkaller0: entered allmulticast mode [ 925.494242][T30752] netlink: 'syz.4.8203': attribute type 16 has an invalid length. [ 925.516111][T30752] netlink: 'syz.4.8203': attribute type 17 has an invalid length. [ 925.563246][T30752] ..0ªî{X¹¦: left allmulticast mode [ 925.592349][T30752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.610432][T30752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.671470][T17469] lo speed is unknown, defaulting to 1000 [ 925.684924][T17469] syz0: Port: 1 Link ACTIVE [ 925.715738][ T5893] lo speed is unknown, defaulting to 1000 [ 925.765906][T30769] syzkaller0: entered promiscuous mode [ 925.772026][T30769] syzkaller0: entered allmulticast mode [ 925.999698][T30775] syzkaller0: entered promiscuous mode [ 926.005255][T30775] syzkaller0: entered allmulticast mode [ 926.018897][T30775] 0: reclassify loop, rule prio 0, protocol 800 [ 926.161234][T30778] bond16: option xmit_hash_policy: invalid value (10) [ 926.180769][T30778] bond16 (unregistering): Released all slaves [ 926.277783][T30783] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 926.349974][T30786] syzkaller0: entered promiscuous mode [ 926.355964][T30786] syzkaller0: entered allmulticast mode [ 926.492600][T30796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8214'. [ 926.506588][ C0] ------------[ cut here ]------------ [ 926.512729][ C0] ODEBUG: free active (active state 0) object: ffff888051f01090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 926.525721][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 926.536071][ C0] Modules linked in: [ 926.540446][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 926.549491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.559646][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 926.566102][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 926.585819][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 926.592067][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a524f18 RCX: 0000000000000000 [ 926.600138][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 926.608167][ C0] RBP: ffffffff8bcf4a00 R08: ffff888051f01090 R09: ffffffff8bcf5d20 [ 926.616270][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888051f01200 [ 926.624369][ C0] R13: ffffffff901b4570 R14: ffff888051f01000 R15: ffff888051f01090 [ 926.632458][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 926.641472][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.648124][ C0] CR2: 0000001b30922ff8 CR3: 0000000027dca000 CR4: 00000000003526f0 [ 926.656187][ C0] Call Trace: [ 926.659550][ C0] [ 926.662402][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 926.668123][ C0] kfree+0x13a/0x610 [ 926.672052][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 926.677245][ C0] rose_timer_expiry+0x4cb/0x600 [ 926.682229][ C0] ? call_timer_fn+0x178/0x5a0 [ 926.687075][ C0] call_timer_fn+0x192/0x5a0 [ 926.691699][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 926.697243][ C0] ? call_timer_fn+0xd4/0x5a0 [ 926.701955][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 926.707150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.712399][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 926.717994][ C0] __run_timer_base+0x652/0x8b0 [ 926.722882][ C0] ? ktime_get+0x45/0x200 [ 926.727400][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 926.732841][ C0] ? sched_clock_cpu+0x74/0x440 [ 926.737785][ C0] run_timer_softirq+0xb7/0x170 [ 926.742686][ C0] handle_softirqs+0x22a/0x7c0 [ 926.747546][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 926.752373][ C0] __irq_exit_rcu+0x5f/0x150 [ 926.757058][ C0] irq_exit_rcu+0x9/0x30 [ 926.761342][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 926.767162][ C0] [ 926.770143][ C0] [ 926.773120][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 926.779217][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 926.784905][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 926.804623][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 926.810798][ C0] RAX: 00000000002a76cf RBX: ffffffff8199661d RCX: 0000000080000001 [ 926.818870][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 926.827113][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 926.835147][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 926.843228][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 926.851306][ C0] ? do_idle+0x1bd/0x500 [ 926.855633][ C0] default_idle+0x9/0x20 [ 926.859983][ C0] default_idle_call+0x72/0xb0 [ 926.864810][ C0] do_idle+0x1bd/0x500 [ 926.868991][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 926.874254][ C0] ? __pfx_do_idle+0x10/0x10 [ 926.878973][ C0] cpu_startup_entry+0x43/0x60 [ 926.883815][ C0] rest_init+0x2de/0x300 [ 926.888168][ C0] start_kernel+0x380/0x3d0 [ 926.892733][ C0] x86_64_start_reservations+0x24/0x30 [ 926.898317][ C0] x86_64_start_kernel+0x143/0x1c0 [ 926.903496][ C0] common_startup_64+0x13e/0x147 [ 926.908580][ C0] [ 926.911656][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 926.918993][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 926.927968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.938070][ C0] Call Trace: [ 926.941387][ C0] [ 926.944362][ C0] vpanic+0x1e0/0x670 [ 926.948414][ C0] panic+0xc5/0xd0 [ 926.952280][ C0] ? __pfx_panic+0x10/0x10 [ 926.956760][ C0] ? common_startup_64+0x13e/0x147 [ 926.961942][ C0] __warn+0x315/0x4a0 [ 926.965984][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 926.971762][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 926.977545][ C0] __report_bug+0x29a/0x540 [ 926.982103][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 926.987540][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 926.993326][ C0] ? __pfx___report_bug+0x10/0x10 [ 926.998408][ C0] ? kfree+0x1c1/0x610 [ 927.002526][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 927.007684][ C0] ? call_timer_fn+0x192/0x5a0 [ 927.012519][ C0] ? __run_timer_base+0x652/0x8b0 [ 927.017590][ C0] ? run_timer_softirq+0xb7/0x170 [ 927.022659][ C0] ? handle_softirqs+0x22a/0x7c0 [ 927.027656][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 927.032476][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 927.038425][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.044644][ C0] ? pv_native_safe_halt+0xf/0x20 [ 927.049721][ C0] ? default_idle+0x9/0x20 [ 927.054195][ C0] ? default_idle_call+0x72/0xb0 [ 927.059191][ C0] report_bug_entry+0x19a/0x290 [ 927.064109][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 927.069891][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 927.075671][ C0] handle_bug+0xca/0x200 [ 927.079965][ C0] exc_invalid_op+0x1a/0x50 [ 927.084552][ C0] asm_exc_invalid_op+0x1a/0x20 [ 927.089452][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 927.095838][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 927.115487][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 927.121610][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a524f18 RCX: 0000000000000000 [ 927.129633][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 927.137649][ C0] RBP: ffffffff8bcf4a00 R08: ffff888051f01090 R09: ffffffff8bcf5d20 [ 927.145679][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888051f01200 [ 927.153698][ C0] R13: ffffffff901b4570 R14: ffff888051f01000 R15: ffff888051f01090 [ 927.161764][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 927.167192][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 927.172883][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 927.178586][ C0] kfree+0x13a/0x610 [ 927.182569][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 927.187759][ C0] rose_timer_expiry+0x4cb/0x600 [ 927.192748][ C0] ? call_timer_fn+0x178/0x5a0 [ 927.197584][ C0] call_timer_fn+0x192/0x5a0 [ 927.202225][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 927.207738][ C0] ? call_timer_fn+0xd4/0x5a0 [ 927.212464][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 927.217640][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 927.222889][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 927.228416][ C0] __run_timer_base+0x652/0x8b0 [ 927.233329][ C0] ? ktime_get+0x45/0x200 [ 927.237735][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 927.243231][ C0] ? sched_clock_cpu+0x74/0x440 [ 927.248146][ C0] run_timer_softirq+0xb7/0x170 [ 927.253041][ C0] handle_softirqs+0x22a/0x7c0 [ 927.257902][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 927.262727][ C0] __irq_exit_rcu+0x5f/0x150 [ 927.267361][ C0] irq_exit_rcu+0x9/0x30 [ 927.271651][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 927.277329][ C0] [ 927.280295][ C0] [ 927.283262][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.289287][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 927.294971][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 927.314616][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 927.320731][ C0] RAX: 00000000002a76cf RBX: ffffffff8199661d RCX: 0000000080000001 [ 927.328751][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 927.336949][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 927.344969][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 927.352985][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 927.361012][ C0] ? do_idle+0x1bd/0x500 [ 927.365315][ C0] default_idle+0x9/0x20 [ 927.369626][ C0] default_idle_call+0x72/0xb0 [ 927.374449][ C0] do_idle+0x1bd/0x500 [ 927.378574][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 927.383820][ C0] ? __pfx_do_idle+0x10/0x10 [ 927.388457][ C0] cpu_startup_entry+0x43/0x60 [ 927.393257][ C0] rest_init+0x2de/0x300 [ 927.397521][ C0] start_kernel+0x380/0x3d0 [ 927.402035][ C0] x86_64_start_reservations+0x24/0x30 [ 927.407552][ C0] x86_64_start_kernel+0x143/0x1c0 [ 927.412736][ C0] common_startup_64+0x13e/0x147 [ 927.417720][ C0] [ 927.421388][ C0] Kernel Offset: disabled [ 927.425734][ C0] Rebooting in 86400 seconds..