last executing test programs: 12.50201573s ago: executing program 0 (id=6837): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) syz_open_procfs$namespace(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f666973682900"/189], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket(0x1a, 0xa, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e00000000000000"], 0x48) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) 6.520390675s ago: executing program 0 (id=6863): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0x13c}}, 0x4000) 6.323279169s ago: executing program 0 (id=6867): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x22, 0x0, &(0x7f00000021c0)="f8ad48dc8b93f500b66f583608007f8631d88058c49e14cd6dce3c1b927492768ebc", 0x0, 0x7ffff7fe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.382195911s ago: executing program 0 (id=6882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.30344356s ago: executing program 3 (id=6902): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x47}, 0x80, 0x0}, 0x0) 4.146675359s ago: executing program 3 (id=6904): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) 4.016911492s ago: executing program 3 (id=6906): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000318ff00000005000500000000000a"], 0x70}}, 0x0) 3.950787032s ago: executing program 1 (id=6907): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) 3.859079961s ago: executing program 3 (id=6908): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xd0256000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="7c773d39aeef") ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a5bd681f5807f70cafc37317f221f64a2ed24f5fdbe31ece0e089e8e5789717adcb39d07ef9517052f9926b42a6d9cc315195ac9244400c4e7cd709fa21ab28afd7059212f906abdbf12e55c4ac2e098daf982081e8ae6b401056a9740f9c06da4e3b23ac4ba93593992f099f2b5f53b1d84428517da38bca362b32d6e8d922abbdaed046dfec9fc04a246f76c2f149bdad7998d47f3ea898675049b14130f93b6be87ed767c064330dccc13ef2ba1798bf6303a6cadd37a43606647be860"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010024bd70e1f4dbdf25030000000c00018008001c00", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@delchain={0x34, 0x11, 0x1, 0x20001f, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0xd}, {}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xa3}}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000f00000000000000080000002a290000000000009500000000000000818494b26df507816d9b6123e62f4465eedaf2ba23fa5e37d2ee9aa9c90e391b6a29ada6b4b799f67b30617659fbe07fc6ea3966b64efb1012f3811a36820944ceed1f603fd2b32dae436897ed61c4efab72379edd165c9652aeecb06ab523d2363d036f3e7fa9eafb40a290bc3c05293c6a764749e961564ff0f0"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x40, &(0x7f00000008c0)=""/64, 0x40f00, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x6, 0x10000}, 0x10, 0x155f2, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) readv(r11, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x8, @none, 0x2, 0x2}, 0xe) 3.81704642s ago: executing program 1 (id=6910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b", 0x6e}, {&(0x7f0000000880)="3aa854", 0x3}], 0x2}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.773717853s ago: executing program 0 (id=6911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680", @ANYRES64], 0x38}}, 0x10) 3.495348759s ago: executing program 0 (id=6914): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) accept4$alg(r5, 0x0, 0x0, 0x800) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000fc0)={&(0x7f0000000400)="e94fd6b362905bae34cb3a8a3d0b56383c9be91861be49d5c2fc9fc1b63c689a", &(0x7f0000000440)=""/78, &(0x7f0000000ec0)="2b0e3e5a144ae2429ea033ffe34d3502a0fabc798a52cb6c2254747c77f8b5a7069416adea3cc556d3e78b5b4e8321c438fbe4b6e9aa478040ca15d1ce2e93809b0fa06ca9349672068fcee5c13110ac5a36600c35cca06fdb19a12b0f5d4cada7afaca4782980f17fb4195bd2de22efd5afb15102db6b6aa29633e55e9136a141a243e9c85817a63233939c960e79b820177c8fa0d8bc218dd4d99659d8574df12f81804f62eac06ff1239c42988b1a4665519daac07f65ebd3b1645ae11e153a97cc682e6403dcf73d7032fc715b514cffa2ae35ab8dd9339d59a5dc364efb815e0ce396a0c3586eb6837df490c19d09b8737fd40ac23650", &(0x7f00000004c0)="63de27a8207b8e8359cf96fd92e3d5b0", 0xc, r5, 0x4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xdfffffe}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x3, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7e, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xeb}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a0104000000000000000001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.258783878s ago: executing program 3 (id=6916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.94696562s ago: executing program 3 (id=6918): syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa448100000086dd60f53a0400383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900003200fc010000000000000000000000000002ff0000000000000000000000000000003300000000000000a0c9ab3712531f709529085271"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40040) socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.860111537s ago: executing program 1 (id=6920): unshare(0x20000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4109, 0x100d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 974.49291ms ago: executing program 1 (id=6923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 889.752691ms ago: executing program 1 (id=6924): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x23, 0x81, 0x5}, {@broadcast, 0x4e23, 0x10000, 0x1cf, 0x12d61, 0x12d58}}, 0x44) 779.655738ms ago: executing program 1 (id=6928): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r8, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 738.666865ms ago: executing program 2 (id=6929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) 655.961584ms ago: executing program 4 (id=6930): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 655.382946ms ago: executing program 2 (id=6931): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IFA_FLAGS={0x8, 0x8, 0x52a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 566.581266ms ago: executing program 4 (id=6932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 566.270932ms ago: executing program 2 (id=6933): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 452.379065ms ago: executing program 2 (id=6934): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 264.852451ms ago: executing program 2 (id=6935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd0}'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x10004000) 189.471522ms ago: executing program 2 (id=6936): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000640)) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000440)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) 188.470032ms ago: executing program 4 (id=6937): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, {{@in=@rand_addr=0x64010102, 0xfffffffc, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x2, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 96.061955ms ago: executing program 4 (id=6938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40000c0) 78.188569ms ago: executing program 4 (id=6939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) 0s ago: executing program 4 (id=6940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x9}, 0xc) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @default, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCNRDECOBS(r1, 0x89e2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) unshare(0x22020400) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x81}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000940)={r2, &(0x7f0000000840)='\xff\xff', 0x200, &(0x7f0000000880)={@_ha_fsid={[0x6, 0xffff]}, {0x100, 0x8, 0x7b, 0x1}}, 0x8000, &(0x7f00000008c0), &(0x7f0000000900)=0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000310100000080000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000400"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)='%pK \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000000002000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="01000000030000000200"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)) kernel console output (not intermixed with test programs): 0][T21826] bond7: (slave batadv2): making interface the new active one [ 542.741044][T21826] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 542.794759][T21823] bond7 (unregistering): (slave batadv2): Releasing active interface [ 542.806595][T21823] bond7 (unregistering): Released all slaves [ 542.894104][T21845] lo: Caught tx_queue_len zero misconfig [ 543.022262][T21850] tipc: Enabled bearer , priority 0 [ 543.051642][T21848] tipc: Disabling bearer [ 543.154902][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5043'. [ 543.431167][T21886] netlink: 'syz.2.5053': attribute type 1 has an invalid length. [ 543.469865][T21886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 543.495086][T21886] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 543.518933][T21886] bond7: (slave batadv3): making interface the new active one [ 543.529146][T21886] bond7: (slave batadv3): Enslaving as an active interface with an up link [ 543.539445][T21890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5053'. [ 543.706736][T21890] bond7 (unregistering): (slave batadv3): Releasing active interface [ 543.728332][T21890] bond7 (unregistering): Released all slaves [ 543.807431][T21901] tipc: Enabled bearer , priority 0 [ 543.850988][T21900] tipc: Disabling bearer [ 543.948390][T21911] xt_hashlimit: size too large, truncated to 1048576 [ 544.007940][T21917] syzkaller0: entered promiscuous mode [ 544.013520][T21917] syzkaller0: entered allmulticast mode [ 544.048057][T21922] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.059876][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5062'. [ 544.129802][T21915] 8021q: VLANs not supported on 60ªX¹¦À [ 544.169799][T21922] gre0 speed is unknown, defaulting to 1000 [ 544.252549][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 544.395003][T21932] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5068'. [ 544.404704][T21932] netlink: 'syz.3.5068': attribute type 2 has an invalid length. [ 544.599026][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5072'. [ 544.608865][T21940] 8021q: VLANs not supported on caif0 [ 544.625024][T21948] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.717411][T21922] lo speed is unknown, defaulting to 1000 [ 544.718628][T21948] gre0 speed is unknown, defaulting to 1000 [ 544.858281][T21959] xt_hashlimit: size too large, truncated to 1048576 [ 545.034487][T21948] lo speed is unknown, defaulting to 1000 [ 546.455533][T22014] __nla_validate_parse: 1 callbacks suppressed [ 546.455555][T22014] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5096'. [ 546.523241][T22012] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5096'. [ 546.536752][T22014] rdma_rxe: rxe_newlink: failed to add bond0 [ 546.896875][T22030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5103'. [ 547.035422][T22037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5106'. [ 547.067458][T22037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5106'. [ 547.209980][T22045] netlink: 'syz.3.5108': attribute type 1 has an invalid length. [ 547.253554][T22045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 547.281203][T22045] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 547.292426][T22045] bond11: (slave batadv4): making interface the new active one [ 547.305075][T22045] bond11: (slave batadv4): Enslaving as an active interface with an up link [ 547.319714][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5108'. [ 547.359249][T22045] bond11 (unregistering): (slave batadv4): Releasing active interface [ 547.396744][T22045] bond11 (unregistering): Released all slaves [ 547.941346][T22070] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5115'. [ 548.064698][T22085] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 548.086712][T22086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'. [ 548.123171][T22086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'. [ 548.195947][T22097] netlink: 'syz.0.5125': attribute type 1 has an invalid length. [ 548.238935][T22097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.270592][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5123'. [ 548.277662][T22097] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 548.312102][T22097] bond6: (slave batadv1): making interface the new active one [ 548.321416][T22097] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 548.371741][T22104] bond6 (unregistering): (slave batadv1): Releasing active interface [ 548.382437][T22104] bond6 (unregistering): Released all slaves [ 548.664098][T22117] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 548.879083][T22126] openvswitch: netlink: IPv6 tunnel dst address is zero [ 548.982328][T22134] tipc: Resetting bearer [ 548.997376][T22132] tipc: Resetting bearer [ 549.007793][T22131] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 549.116118][T22139] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 549.158285][T22142] xt_hashlimit: size too large, truncated to 1048576 [ 549.207371][T22147] lo: Caught tx_queue_len zero misconfig [ 549.243485][T22150] netlink: 'syz.3.5142': attribute type 11 has an invalid length. [ 549.292450][T22150] gretap2: entered promiscuous mode [ 549.470250][ T1345] tipc: Resetting bearer [ 549.862448][T22193] netlink: 'syz.4.5157': attribute type 11 has an invalid length. [ 550.056255][T22200] netlink: 'syz.4.5160': attribute type 1 has an invalid length. [ 550.117934][T22200] 8021q: adding VLAN 0 to HW filter on device bond17 [ 550.351227][T22210] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 550.360888][T22210] bond17: (slave batadv4): making interface the new active one [ 550.370124][T22210] bond17: (slave batadv4): Enslaving as an active interface with an up link [ 550.447581][T22200] bond17 (unregistering): (slave batadv4): Releasing active interface [ 550.458259][T22200] bond17 (unregistering): Released all slaves [ 550.473629][T22214] tunl0: Caught tx_queue_len zero misconfig [ 550.490898][T22217] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 550.531964][T22213] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 550.741336][T22233] netlink: 'syz.3.5170': attribute type 11 has an invalid length. [ 551.084699][T22248] tunl0: Caught tx_queue_len zero misconfig [ 551.155952][T22249] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 551.189808][T22238] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 551.197780][T22257] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 551.306087][T22260] vlan2: entered promiscuous mode [ 551.321444][T22260] bridge0: entered promiscuous mode [ 551.436810][T22274] netlink: 'syz.4.5186': attribute type 11 has an invalid length. [ 551.633419][ T1152] TC_ACT_REPEAT abuse ? [ 551.831339][T22288] __nla_validate_parse: 7 callbacks suppressed [ 551.831362][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5191'. [ 551.977363][T22300] sock: sock_set_timeout: `syz.0.5194' (pid 22300) tries to set negative timeout [ 552.054892][T22306] netlink: 'syz.2.5198': attribute type 11 has an invalid length. [ 552.260357][T22316] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 552.591726][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5204'. [ 552.668827][T22345] netlink: 'syz.2.5209': attribute type 11 has an invalid length. [ 552.772669][T22349] netlink: 'syz.0.5213': attribute type 1 has an invalid length. [ 552.796998][T22355] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5212'. [ 552.849249][T22349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.889031][T22349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5213'. [ 552.889235][T22362] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 552.907887][T22362] bond6: (slave batadv2): making interface the new active one [ 552.917470][T22362] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 553.021439][T22349] bond6 (unregistering): (slave batadv2): Releasing active interface [ 553.043323][T22360] rdma_rxe: rxe_newlink: failed to add bond0 [ 553.059073][T22349] bond6 (unregistering): Released all slaves [ 553.089284][T22361] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5214'. [ 553.098823][T22361] tunl0: Caught tx_queue_len zero misconfig [ 553.109253][T22370] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5215'. [ 553.119866][T22366] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5215'. [ 553.361836][T22384] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 553.815833][T22407] netlink: 'syz.3.5231': attribute type 1 has an invalid length. [ 553.859773][T22408] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5229'. [ 553.935373][T22416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5231'. [ 554.106987][T22407] 8021q: adding VLAN 0 to HW filter on device bond11 [ 554.127004][T22410] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 554.136794][T22410] bond11: (slave batadv5): making interface the new active one [ 554.146054][T22410] bond11: (slave batadv5): Enslaving as an active interface with an up link [ 554.175710][T22416] bond11 (unregistering): (slave batadv5): Releasing active interface [ 554.191324][T22416] bond11 (unregistering): Released all slaves [ 554.364683][T22421] netlink: 'syz.0.5234': attribute type 5 has an invalid length. [ 554.553020][T22437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5240'. [ 554.595723][T22437] 8021q: VLANs not supported on caif0 [ 554.764124][T22444] netlink: 'syz.2.5244': attribute type 9 has an invalid length. [ 554.901496][T22451] C: renamed from team_slave_0 [ 554.934928][T22451] netlink: 'syz.2.5246': attribute type 4 has an invalid length. [ 554.942668][T22451] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 554.964226][T22451] netlink: 'syz.2.5246': attribute type 2 has an invalid length. [ 554.971998][T22451] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 555.048302][T22457] netlink: 'syz.4.5248': attribute type 1 has an invalid length. [ 555.097279][T22457] 8021q: adding VLAN 0 to HW filter on device bond17 [ 555.129499][T22463] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 555.141224][T22463] bond17: (slave batadv5): making interface the new active one [ 555.150669][T22463] bond17: (slave batadv5): Enslaving as an active interface with an up link [ 555.300615][T22457] bond17 (unregistering): (slave batadv5): Releasing active interface [ 555.313000][T22457] bond17 (unregistering): Released all slaves [ 555.470656][T22477] 8021q: VLANs not supported on caif0 [ 555.677136][T22489] rdma_rxe: rxe_newlink: failed to add bond0 [ 555.715334][T22485] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 556.217029][T22513] netlink: 'syz.0.5266': attribute type 1 has an invalid length. [ 559.074457][T22513] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 559.291542][T22524] __nla_validate_parse: 7 callbacks suppressed [ 559.291563][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5267'. [ 559.325382][T22524] 8021q: VLANs not supported on caif0 [ 559.333688][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5268'. [ 559.344020][T22525] 8021q: VLANs not supported on caif0 [ 559.356354][T22529] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 559.602912][T22541] gre0 speed is unknown, defaulting to 1000 [ 559.671237][T22539] xt_CT: No such helper "syz1" [ 559.906486][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5281'. [ 559.989554][T22558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.010615][T22541] lo speed is unknown, defaulting to 1000 [ 560.244209][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5285'. [ 560.304387][ T3031] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.337814][T22569] 8021q: VLANs not supported on caif0 [ 560.366715][T22565] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 560.868405][T22589] sctp: [Deprecated]: syz.1.5291 (pid 22589) Use of int in max_burst socket option. [ 560.868405][T22589] Use struct sctp_assoc_value instead [ 561.330766][T22599] gretap4: entered promiscuous mode [ 561.337158][T22599] batman_adv: batadv0: Adding interface: gretap4 [ 561.344846][T22599] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 561.372895][T22599] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 561.556458][T22615] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 561.569624][T22614] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 561.577102][T22614] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 561.588100][T22614] tipc: Resetting bearer [ 561.619376][T22615] gre0 speed is unknown, defaulting to 1000 [ 562.110794][T22629] tipc: Resetting bearer [ 562.154135][T22615] lo speed is unknown, defaulting to 1000 [ 562.474471][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5313'. [ 562.499665][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5313'. [ 562.622891][T22642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.871892][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.883934][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.890132][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 562.894331][T22665] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 562.999941][T22656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.023341][T22656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.038177][T22656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.209663][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.230661][T22661] gre0 speed is unknown, defaulting to 1000 [ 563.254771][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.263028][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.322670][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.353507][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.376788][T22665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.493406][T22693] netlink: 'syz.0.5325': attribute type 1 has an invalid length. [ 563.533486][T22693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.554003][T22693] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 563.565408][T22693] bond6: (slave batadv3): making interface the new active one [ 563.574733][T22693] bond6: (slave batadv3): Enslaving as an active interface with an up link [ 563.589282][T22693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5325'. [ 563.627375][T22693] bond6 (unregistering): (slave batadv3): Releasing active interface [ 563.659412][T22693] bond6 (unregistering): Released all slaves [ 563.700395][T22661] lo speed is unknown, defaulting to 1000 [ 564.301766][T22720] Bluetooth: hci1: too big key_count value 29096 [ 564.681302][T22728] syzkaller1: entered promiscuous mode [ 564.695216][T22728] syzkaller1: entered allmulticast mode [ 564.810114][T22733] netlink: 'syz.0.5340': attribute type 11 has an invalid length. [ 565.055074][T22744] netlink: 'syz.2.5345': attribute type 1 has an invalid length. [ 565.086619][T22744] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.108252][T22744] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 565.115249][T22741] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 565.121679][T22744] bond7: (slave batadv4): making interface the new active one [ 565.130208][T22744] bond7: (slave batadv4): Enslaving as an active interface with an up link [ 565.140945][T22744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5345'. [ 565.146647][T22745] gre0 speed is unknown, defaulting to 1000 [ 565.195941][T22744] bond7 (unregistering): (slave batadv4): Releasing active interface [ 565.227897][T22744] bond7 (unregistering): Released all slaves [ 565.378555][T22757] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5349'. [ 565.590046][T22745] lo speed is unknown, defaulting to 1000 [ 565.630458][T22767] bond0: Caught tx_queue_len zero misconfig [ 565.930912][T22784] netlink: 'syz.4.5361': attribute type 1 has an invalid length. [ 565.970223][T22784] 8021q: adding VLAN 0 to HW filter on device bond17 [ 566.016070][T22784] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 566.040779][T22784] bond17: (slave batadv6): making interface the new active one [ 566.057256][T22790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5361'. [ 566.092847][T22784] bond17: (slave batadv6): Enslaving as an active interface with an up link [ 566.140999][T22790] bond17 (unregistering): (slave batadv6): Releasing active interface [ 566.160883][T22790] bond17 (unregistering): Released all slaves [ 566.171737][T22795] netlink: 'syz.1.5365': attribute type 1 has an invalid length. [ 566.254990][T22795] 8021q: adding VLAN 0 to HW filter on device bond17 [ 566.281192][T22795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5365'. [ 566.338798][T22795] bond17 (unregistering): Released all slaves [ 566.650929][T22806] "syz.4.5368" (22806) uses obsolete ecb(arc4) skcipher [ 566.899956][T22811] netlink: 'syz.4.5370': attribute type 22 has an invalid length. [ 566.936088][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 567.018425][T22811] netlink: 'syz.4.5370': attribute type 22 has an invalid length. [ 567.027477][ T3031] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.054576][ T3031] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.062892][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 567.094798][ T3031] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.103360][ T3031] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.206915][T22818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5373'. [ 567.218217][T22816] IPVS: Scheduler module ip_vs_ not found [ 567.400204][T22833] netlink: 'syz.1.5377': attribute type 1 has an invalid length. [ 567.457548][T22833] 8021q: adding VLAN 0 to HW filter on device bond17 [ 567.479395][T22832] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 567.488877][T22832] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 567.497129][T22832] tipc: Resetting bearer [ 567.509697][T22833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5377'. [ 567.524915][T22838] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 567.537400][T22838] bond17: (slave batadv2): making interface the new active one [ 567.550214][T22843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5379'. [ 567.559356][T22838] bond17: (slave batadv2): Enslaving as an active interface with an up link [ 567.596358][T22833] bond17 (unregistering): (slave batadv2): Releasing active interface [ 567.614477][T22833] bond17 (unregistering): Released all slaves [ 567.864005][T22859] nbd1: detected capacity change from 0 to 63 [ 567.870616][T22864] block nbd1: NBD_DISCONNECT [ 567.875228][T22866] macvtap0: entered promiscuous mode [ 567.875387][T22866] macvtap0: entered allmulticast mode [ 567.875402][T22866] veth1_vlan: entered allmulticast mode [ 567.894412][T22864] block nbd1: Disconnected due to user request. [ 567.900830][T22864] block nbd1: shutting down sockets [ 567.903772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.908025][T22866] macvtap1: entered promiscuous mode [ 567.914097][ C0] lec:lec_tx_timeout: lec0 [ 567.925323][T22866] macvtap1: entered allmulticast mode [ 567.930949][ C1] blk_print_req_error: 138 callbacks suppressed [ 567.930969][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.937704][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.946770][ C1] buffer_io_error: 138 callbacks suppressed [ 567.946783][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 567.956275][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 567.973826][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.987097][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 567.994954][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.004470][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 568.015032][T22545] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.025453][T22545] Buffer I/O error on dev nbd1, logical block 0, async page read [ 568.033497][T22545] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.043610][T22545] Buffer I/O error on dev nbd1, logical block 1, async page read [ 568.052133][T22545] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.062034][T22545] Buffer I/O error on dev nbd1, logical block 2, async page read [ 568.085078][T22545] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.098162][T22545] Buffer I/O error on dev nbd1, logical block 3, async page read [ 568.106997][T22545] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.117340][T22545] Buffer I/O error on dev nbd1, logical block 0, async page read [ 568.127359][T22545] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 568.140205][T22545] Buffer I/O error on dev nbd1, logical block 1, async page read [ 568.149418][T22545] ldm_validate_partition_table(): Disk read failed. [ 568.157335][T22545] Dev nbd1: unable to read RDB block 0 [ 568.174365][T22545] nbd1: unable to read partition table [ 568.206102][T22545] ldm_validate_partition_table(): Disk read failed. [ 568.215325][T22545] Dev nbd1: unable to read RDB block 0 [ 568.221853][T22545] nbd1: unable to read partition table [ 568.727850][T22889] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5391'. [ 568.801098][T22894] gre0 speed is unknown, defaulting to 1000 [ 569.177511][T22894] lo speed is unknown, defaulting to 1000 [ 570.478905][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 570.514493][T22947] 8021q: VLANs not supported on 60ªX¹¦À [ 570.977548][T22958] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 570.990246][T22955] gre0 speed is unknown, defaulting to 1000 [ 571.009810][T22953] net_ratelimit: 42 callbacks suppressed [ 571.009829][T22953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.032038][T22953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.042965][T22953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.122848][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.144207][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.183121][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.199833][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.223992][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.232523][T22958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.240965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.401201][T22955] lo speed is unknown, defaulting to 1000 [ 571.799592][T22977] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 571.819403][T22979] netlink: 'syz.0.5423': attribute type 1 has an invalid length. [ 571.844565][T22977] 8021q: adding VLAN 0 to HW filter on device bond17 [ 571.864770][T12980] lec:lec_start_xmit: lec0:No lecd attached [ 571.906272][T22979] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.928944][T22981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5422'. [ 571.935329][T22977] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 571.955826][T22977] bond17: (slave batadv3): making interface the new active one [ 571.964920][T22977] bond17: (slave batadv3): Enslaving as an active interface with an up link [ 572.008829][T22983] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 572.021509][T22979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5423'. [ 572.034612][T22989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5425'. [ 572.047680][T22983] bond6: (slave batadv4): making interface the new active one [ 572.057842][T22983] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 572.085049][T22981] bond17 (unregistering): (slave batadv3): Releasing active interface [ 572.121612][T22981] bond17 (unregistering): Released all slaves [ 572.223126][T22989] geneve3: entered promiscuous mode [ 572.286378][T22979] bond6 (unregistering): (slave batadv4): Releasing active interface [ 572.346563][T22979] bond6 (unregistering): Released all slaves [ 572.440096][T23003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5427'. [ 572.458243][ T1161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.544191][ T1161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.577430][ T1161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.589493][T23009] sctp: [Deprecated]: syz.2.5430 (pid 23009) Use of int in max_burst socket option. [ 572.589493][T23009] Use struct sctp_assoc_value instead [ 572.596030][ T1161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.642709][T23011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5431'. [ 573.606228][T23042] syzkaller1: entered promiscuous mode [ 573.613770][T23042] syzkaller1: entered allmulticast mode [ 573.676613][T23049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.683948][T23049] IPv6: NLM_F_CREATE should be set when creating new route [ 573.889445][T23057] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 573.909906][T23052] gre0 speed is unknown, defaulting to 1000 [ 574.152313][T23052] lo speed is unknown, defaulting to 1000 [ 574.378018][T23071] syzkaller1: entered promiscuous mode [ 574.383542][T23071] syzkaller1: entered allmulticast mode [ 574.523085][T23077] netlink: 'syz.1.5454': attribute type 3 has an invalid length. [ 574.823625][T23087] tipc: Resetting bearer [ 575.019402][T23094] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.5460'. [ 575.477884][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5468'. [ 575.487455][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5468'. [ 576.659760][T23151] pim6reg1: entered promiscuous mode [ 576.676919][T23151] pim6reg1: entered allmulticast mode [ 576.686523][T23143] netlink: 'syz.1.5475': attribute type 1 has an invalid length. [ 576.695105][T23143] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5475'. [ 576.705631][T23143] netlink: 'syz.1.5475': attribute type 1 has an invalid length. [ 576.713829][T23143] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5475'. [ 576.852507][T23166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5481'. [ 576.873701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 576.881748][ C0] lec:lec_tx_timeout: lec0 [ 576.902773][T23166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5481'. [ 577.238793][T23176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5483'. [ 577.299066][T23181] netlink: 'syz.0.5485': attribute type 1 has an invalid length. [ 577.366526][T23181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.393265][T23184] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 577.405130][T23184] bond6: (slave batadv5): making interface the new active one [ 577.419934][T23184] bond6: (slave batadv5): Enslaving as an active interface with an up link [ 577.444656][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5485'. [ 577.475220][T23181] bond6 (unregistering): (slave batadv5): Releasing active interface [ 577.486287][T23181] bond6 (unregistering): Released all slaves [ 578.081406][T23209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5496'. [ 578.104008][T23209] 8021q: VLANs not supported on caif0 [ 578.326240][T23215] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 578.403973][T23222] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 578.658921][T23227] netlink: 'syz.4.5503': attribute type 83 has an invalid length. [ 578.733145][T23230] netlink: 'syz.0.5504': attribute type 1 has an invalid length. [ 578.767242][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5505'. [ 578.797899][T23230] 8021q: adding VLAN 0 to HW filter on device bond6 [ 578.805858][T23233] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5506'. [ 578.821239][T23235] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 578.831958][T23235] bond6: (slave batadv6): making interface the new active one [ 578.845065][T23235] bond6: (slave batadv6): Enslaving as an active interface with an up link [ 578.898104][T23230] bond6 (unregistering): (slave batadv6): Releasing active interface [ 578.928109][T23230] bond6 (unregistering): Released all slaves [ 578.952611][T23239] syzkaller1: entered promiscuous mode [ 578.958780][T23239] syzkaller1: entered allmulticast mode [ 579.026175][T23246] policy can only be matched on NF_INET_PRE_ROUTING [ 579.026194][T23246] unable to load match [ 579.344552][T23261] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 579.431984][T23261] gre0 speed is unknown, defaulting to 1000 [ 579.938096][T23274] gre0 speed is unknown, defaulting to 1000 [ 579.938096][T23261] lo speed is unknown, defaulting to 1000 [ 580.027099][T23276] netlink: 'syz.4.5522': attribute type 1 has an invalid length. [ 580.168765][T23276] 8021q: adding VLAN 0 to HW filter on device bond17 [ 580.187284][T23279] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 580.215221][T23279] bond17: (slave batadv7): making interface the new active one [ 580.267833][T23279] bond17: (slave batadv7): Enslaving as an active interface with an up link [ 580.304261][T23280] bond17 (unregistering): (slave batadv7): Releasing active interface [ 580.315340][T23280] bond17 (unregistering): Released all slaves [ 580.638150][T23274] lo speed is unknown, defaulting to 1000 [ 581.296563][T23294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.587103][T23297] netlink: 'syz.2.5528': attribute type 1 has an invalid length. [ 581.642097][T23297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.661361][T23299] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 581.678317][T23299] bond7: (slave batadv5): making interface the new active one [ 581.688194][T23299] bond7: (slave batadv5): Enslaving as an active interface with an up link [ 581.728198][T23297] __nla_validate_parse: 6 callbacks suppressed [ 581.728219][T23297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5528'. [ 581.779468][T23297] bond7 (unregistering): (slave batadv5): Releasing active interface [ 581.815661][T23297] bond7 (unregistering): Released all slaves [ 581.890532][T23302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5529'. [ 582.306764][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5537'. [ 582.382118][T23330] gre0 speed is unknown, defaulting to 1000 [ 582.595260][T23330] lo speed is unknown, defaulting to 1000 [ 582.656661][T23342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5540'. [ 583.186179][T23351] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 583.415976][T23365] tipc: Resetting bearer [ 584.004101][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5553'. [ 584.108031][T23396] netlink: 'syz.0.5556': attribute type 13 has an invalid length. [ 584.128831][T23396] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 584.423254][T23373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.053616][T23425] tipc: Resetting bearer [ 585.060327][T23425] tipc: Resetting bearer [ 585.140479][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 585.171282][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 585.186342][T23440] netlink: 'syz.0.5568': attribute type 13 has an invalid length. [ 585.613372][T23456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5575'. [ 585.719802][T23459] 8021q: adding VLAN 0 to HW filter on device bond17 [ 585.768577][T23465] bond17: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 585.778883][T23466] tipc: Resetting bearer [ 585.788988][T23470] xt_hashlimit: size too large, truncated to 1048576 [ 585.808628][T23472] netlink: 'syz.1.5579': attribute type 13 has an invalid length. [ 585.824838][ T1345] net_ratelimit: 25 callbacks suppressed [ 585.824857][ T1345] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 585.942345][T23464] tipc: Resetting bearer [ 585.973802][ T1161] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 586.102269][T23475] syzkaller1: entered promiscuous mode [ 586.122938][T23475] syzkaller1: entered allmulticast mode [ 586.140187][ T1161] tipc: Resetting bearer [ 586.244128][T23491] syzkaller1: entered promiscuous mode [ 586.253947][T23491] syzkaller1: entered allmulticast mode [ 586.351156][T23497] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 586.371410][T23497] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 586.394313][T23497] tipc: Resetting bearer [ 586.422936][T23497] macsec2: entered promiscuous mode [ 586.706614][T23512] netlink: 'syz.2.5594': attribute type 13 has an invalid length. [ 586.721866][T23512] tipc: Resetting bearer [ 586.767306][T23518] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 586.982349][T23532] netlink: 'syz.0.5602': attribute type 1 has an invalid length. [ 587.068636][T23532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.097928][T23535] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 587.141119][T23535] bond6: (slave batadv7): making interface the new active one [ 587.150829][T23535] bond6: (slave batadv7): Enslaving as an active interface with an up link [ 587.167984][T23532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5602'. [ 587.244308][T23532] bond6 (unregistering): (slave batadv7): Releasing active interface [ 587.270196][T23532] bond6 (unregistering): Released all slaves [ 587.461315][T23547] gre0 speed is unknown, defaulting to 1000 [ 587.593866][T23547] lo speed is unknown, defaulting to 1000 [ 588.169415][T23561] netlink: 'syz.4.5611': attribute type 13 has an invalid length. [ 588.193783][ T3031] bond17: (slave ip6gretap0): link status up again after 0 ms [ 588.202828][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 588.223279][T23564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5610'. [ 588.323839][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 588.414372][T23570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5612'. [ 588.434171][T23570] syzkaller1: entered promiscuous mode [ 588.439850][T23570] syzkaller1: entered allmulticast mode [ 588.456873][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 588.585872][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 588.627328][T23573] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5614'. [ 588.636711][T23573] tunl0: Caught tx_queue_len zero misconfig [ 588.937026][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 589.074203][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 589.120203][T23602] gre0 speed is unknown, defaulting to 1000 [ 589.170780][T23608] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 589.185471][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 589.422106][T23602] lo speed is unknown, defaulting to 1000 [ 590.007173][T23639] tipc: Enabled bearer , priority 0 [ 590.054774][T23639] syzkaller0: entered promiscuous mode [ 590.074246][T23639] syzkaller0: entered allmulticast mode [ 590.080613][T23639] tipc: Resetting bearer [ 590.108660][T23638] tipc: Resetting bearer [ 590.747797][T23655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5631'. [ 590.855598][T23641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.185333][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5634'. [ 592.084615][T23638] tipc: Disabling bearer [ 592.104005][ T36] net_ratelimit: 26 callbacks suppressed [ 592.104026][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.223952][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5638'. [ 592.307791][ T6317] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.364318][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.473936][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.521199][T23695] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 592.613746][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.671242][T23703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5646'. [ 592.723565][T23701] gre0 speed is unknown, defaulting to 1000 [ 592.734011][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.844242][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 592.862355][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5647'. [ 592.953987][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 593.014067][T23715] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 593.066395][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 593.163507][T23701] lo speed is unknown, defaulting to 1000 [ 593.194074][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 593.209024][T23726] pim6reg1: entered promiscuous mode [ 593.215209][T23726] pim6reg1: entered allmulticast mode [ 593.497112][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5656'. [ 593.718198][T23741] xt_hashlimit: size too large, truncated to 1048576 [ 594.727463][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5667'. [ 594.917615][T23784] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 595.127005][T23792] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 595.135107][T23792] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 595.142673][T23792] tipc: Resetting bearer [ 595.422224][T23798] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 595.446971][T23798] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 595.655488][T23810] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 595.731867][T23811] gre0 speed is unknown, defaulting to 1000 [ 595.846585][T23811] lo speed is unknown, defaulting to 1000 [ 596.349822][T23819] gre0 speed is unknown, defaulting to 1000 [ 596.501015][T23819] lo speed is unknown, defaulting to 1000 [ 596.838362][T23824] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 597.113773][ T36] net_ratelimit: 33 callbacks suppressed [ 597.113810][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.233792][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.354351][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.463948][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.574048][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.603380][T23771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.684116][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.814425][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.843357][T23841] tipc: Resetting bearer [ 597.887190][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5688'. [ 597.887568][T23839] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5691'. [ 597.933853][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 597.989958][T23839] syzkaller1: entered promiscuous mode [ 597.995789][T23839] syzkaller1: entered allmulticast mode [ 598.044526][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 598.126345][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5697'. [ 598.173940][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 598.197880][T23864] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 598.205865][T23864] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 598.608411][T23836] tipc: Resetting bearer [ 598.864077][ T36] tipc: Resetting bearer [ 600.785606][T23837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.127559][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5709'. [ 601.150899][T23897] vlan0: entered promiscuous mode [ 601.285243][T23907] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 601.960299][T23926] tipc: Resetting bearer [ 601.991673][T23925] tipc: Resetting bearer [ 602.134188][ T1152] net_ratelimit: 34 callbacks suppressed [ 602.134209][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.185278][ T6317] tipc: Resetting bearer [ 602.254134][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.373772][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.483799][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.594046][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.704806][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.814227][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 602.924149][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 603.033833][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 603.143885][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 604.405187][T23912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.716581][T23962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5731'. [ 604.779319][T23965] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 604.790077][T23965] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 604.800548][T23965] tipc: Resetting bearer [ 604.952582][T23973] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 605.457310][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5739'. [ 605.585898][T24000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5741'. [ 605.625831][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 605.706922][T24003] syzkaller0: entered promiscuous mode [ 605.712505][T24003] syzkaller0: entered allmulticast mode [ 606.035629][T24009] netlink: 'syz.1.5744': attribute type 11 has an invalid length. [ 607.223876][ T36] net_ratelimit: 35 callbacks suppressed [ 607.223892][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.344792][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.453992][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.564056][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.683929][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.793977][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 607.904076][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 608.013938][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 608.021585][T23978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.127438][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 608.419882][T24027] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 608.433747][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 608.452730][T24020] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 608.481866][T24036] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5751'. [ 608.570648][T24040] tipc: Enabling of bearer rejected, failed to enable media [ 608.696366][T24051] netlink: 'syz.3.5755': attribute type 1 has an invalid length. [ 608.754501][T24051] 8021q: adding VLAN 0 to HW filter on device bond11 [ 608.784730][T24057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5758'. [ 608.838592][T24055] bond11: (slave geneve6): making interface the new active one [ 608.856903][T24055] bond11: (slave geneve6): Enslaving as an active interface with an up link [ 608.885474][T24064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5757'. [ 608.905182][ T1152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.931559][ T1152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.997161][ T1152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.023246][T24060] gre0 speed is unknown, defaulting to 1000 [ 609.031073][ T1152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.090710][T24075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5761'. [ 609.307497][T24060] lo speed is unknown, defaulting to 1000 [ 609.683265][T24084] syzkaller0: entered promiscuous mode [ 609.691109][T24084] syzkaller0: entered allmulticast mode [ 609.698680][T24089] tipc: Resetting bearer [ 609.812208][T24089] tipc: Enabling of bearer rejected, failed to enable media [ 609.822833][T24088] tipc: Resetting bearer [ 609.980442][T24098] netlink: 'syz.4.5770': attribute type 11 has an invalid length. [ 610.313208][ T1152] tipc: Resetting bearer [ 610.422613][T24117] tipc: Resetting bearer [ 610.434007][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5775'. [ 610.642843][T24117] tipc: Resetting bearer [ 610.672554][T24129] tipc: Enabling of bearer rejected, failed to enable media [ 611.249235][T24156] netlink: 'syz.2.5783': attribute type 1 has an invalid length. [ 611.333982][T24161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5783'. [ 611.420600][T24156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5783'. [ 611.449756][T24160] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 611.504252][T24161] bond7: (slave bridge0): making interface the new active one [ 611.515546][T24161] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 611.532224][T24147] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 611.560963][T24156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 611.720460][T24176] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 611.934840][T24184] syzkaller0: entered promiscuous mode [ 611.953882][T24184] syzkaller0: entered allmulticast mode [ 612.072288][T24196] netlink: 'syz.1.5794': attribute type 1 has an invalid length. [ 612.166729][T24196] 8021q: adding VLAN 0 to HW filter on device bond17 [ 612.246797][T24198] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 612.247038][T24196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5794'. [ 612.262675][T24198] bond17: (slave batadv4): making interface the new active one [ 612.336422][T24198] bond17: (slave batadv4): Enslaving as an active interface with an up link [ 612.445072][ T1161] net_ratelimit: 24 callbacks suppressed [ 612.445091][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 612.634864][T24196] bond17 (unregistering): (slave batadv4): Releasing active interface [ 612.676259][T24196] bond17 (unregistering): Released all slaves [ 612.824312][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 612.934289][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.054125][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.167580][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.284504][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.387425][T24249] gre0 speed is unknown, defaulting to 1000 [ 613.396372][T24254] tipc: Resetting bearer [ 613.423432][T24252] tipc: Resetting bearer [ 613.543982][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.607954][ T49] tipc: Resetting bearer [ 613.622235][T24249] lo speed is unknown, defaulting to 1000 [ 613.675598][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.794255][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 613.914872][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 614.015258][T24270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5806'. [ 614.203024][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5807'. [ 614.266460][T24279] syzkaller0: entered promiscuous mode [ 614.275526][T24279] syzkaller0: entered allmulticast mode [ 614.314174][T24281] ip6tnl0: Caught tx_queue_len zero misconfig [ 615.117096][T24319] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.5817'. [ 615.129013][T24319] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.5817'. [ 615.157778][T24319] netlink: 'syz.1.5817': attribute type 1 has an invalid length. [ 615.361785][T24324] gre0 speed is unknown, defaulting to 1000 [ 615.389965][T24332] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 615.532369][T24340] syzkaller0: entered promiscuous mode [ 615.538704][T24340] syzkaller0: entered allmulticast mode [ 615.563350][T24343] tipc: Enabling of bearer rejected, already enabled [ 615.724684][T24324] lo speed is unknown, defaulting to 1000 [ 615.980005][T24353] syzkaller0: entered promiscuous mode [ 616.460038][T24357] syzkaller0: entered promiscuous mode [ 616.571845][T24379] netlink: 'syz.0.5834': attribute type 4 has an invalid length. [ 616.618965][T24381] netlink: 'syz.0.5834': attribute type 4 has an invalid length. [ 618.123993][ T1345] net_ratelimit: 13 callbacks suppressed [ 618.124012][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.224180][T24365] gre0 speed is unknown, defaulting to 1000 [ 618.244068][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.354099][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.363245][T24400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5835'. [ 618.474768][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.573433][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5838'. [ 618.583765][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.694177][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.804458][ T1345] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 618.860546][T24423] netlink: 'syz.1.5841': attribute type 1 has an invalid length. [ 618.921132][T24425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5841'. [ 618.981281][T24423] bond17: entered promiscuous mode [ 618.988597][T24423] 8021q: adding VLAN 0 to HW filter on device bond17 [ 618.998463][T24425] bond17: entered allmulticast mode [ 619.059658][T24423] bond17: (slave bridge16): making interface the new active one [ 619.067502][T24423] bridge16: entered promiscuous mode [ 619.072977][T24423] bridge16: entered allmulticast mode [ 619.081397][T24423] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 619.096908][T24365] lo speed is unknown, defaulting to 1000 [ 619.124237][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 619.261457][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5843'. [ 619.308733][T24434] syzkaller0: entered promiscuous mode [ 619.324065][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 619.332486][T24434] 0: reclassify loop, rule prio 0, protocol 800 [ 620.313235][T24466] tipc: Resetting bearer [ 620.327693][T24466] tipc: Resetting bearer [ 620.779900][T24476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5855'. [ 620.910872][T24481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5859'. [ 621.290548][T24504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5863'. [ 621.308264][T24504] netlink: 'syz.1.5863': attribute type 7 has an invalid length. [ 621.316159][T24504] netlink: 'syz.1.5863': attribute type 8 has an invalid length. [ 621.324029][T24504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5863'. [ 621.350052][T24504] syz_tun: entered promiscuous mode [ 621.359059][T24504] syz_tun: left promiscuous mode [ 622.099457][T24529] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 622.179599][T24532] tipc: Resetting bearer [ 622.195831][T24531] tipc: Resetting bearer [ 622.290462][T24536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5872'. [ 622.395600][T24542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5873'. [ 622.537336][T24539] tunl0: Caught tx_queue_len zero misconfig [ 622.827993][T24563] netlink: 'syz.0.5880': attribute type 5 has an invalid length. [ 622.855233][T24563] smc: net device wlan0 erased user defined pnetid SYZ0 [ 622.909459][ T3031] tipc: Resetting bearer [ 623.133907][ T3031] net_ratelimit: 43 callbacks suppressed [ 623.133926][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 623.324060][ T1967] lo speed is unknown, defaulting to 1000 [ 623.338072][ T1161] bond17: (slave ip6gretap0): link status up again after 0 ms [ 623.354612][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 623.445216][T24584] tipc: Enabled bearer , priority 0 [ 623.468487][T24584] syzkaller0: entered promiscuous mode [ 623.533827][T24584] syzkaller0: entered allmulticast mode [ 623.632073][T24584] tipc: Resetting bearer [ 623.644840][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 623.652586][T24583] tipc: Resetting bearer [ 623.684898][T24583] tipc: Disabling bearer [ 623.990241][T24591] __nla_validate_parse: 3 callbacks suppressed [ 623.990261][T24591] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5887'. [ 624.013086][T24591] tunl0: Caught tx_queue_len zero misconfig [ 624.270077][T24597] syzkaller0: entered promiscuous mode [ 624.296577][T24597] syzkaller0: entered allmulticast mode [ 624.309118][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.322046][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.333801][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.333837][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 624.365631][T24615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5891'. [ 624.384448][T24606] syzkaller1: entered allmulticast mode [ 626.331342][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 626.465053][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 626.511447][T24652] tipc: Enabled bearer , priority 0 [ 626.549682][T24653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5899'. [ 626.581909][T24652] syzkaller0: entered promiscuous mode [ 626.594595][T24652] syzkaller0: entered allmulticast mode [ 626.765404][T24652] tipc: Resetting bearer [ 626.773305][T24650] tipc: Resetting bearer [ 626.813377][T24650] tipc: Disabling bearer [ 626.833977][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 626.964084][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 626.980040][T24671] syzkaller0: entered promiscuous mode [ 626.993772][T24671] syzkaller0: entered allmulticast mode [ 627.267956][T24676] syzkaller0: entered promiscuous mode [ 627.273483][T24676] syzkaller0: entered allmulticast mode [ 627.419751][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5906'. [ 627.583867][T24687] gre0 speed is unknown, defaulting to 1000 [ 627.603718][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5911'. [ 627.613567][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5911'. [ 627.673206][T24695] tipc: Resetting bearer [ 627.702465][T24695] tipc: Enabling of bearer rejected, already enabled [ 627.722546][T24695] syzkaller0: left promiscuous mode [ 627.774825][T24695] tipc: Resetting bearer [ 627.791085][T24694] tipc: Resetting bearer [ 627.816774][T24697] syzkaller0: entered promiscuous mode [ 627.833836][T24697] syzkaller0: entered allmulticast mode [ 627.928048][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5914'. [ 627.988189][T24687] lo speed is unknown, defaulting to 1000 [ 628.088054][T24701] netlink: 'syz.4.5915': attribute type 13 has an invalid length. [ 628.109620][T24703] gre0 speed is unknown, defaulting to 1000 [ 628.117651][T24701] gretap0: refused to change device tx_queue_len [ 628.154022][T24708] macsec0: entered promiscuous mode [ 628.169736][T24708] macsec0: left promiscuous mode [ 628.204079][ T49] net_ratelimit: 8 callbacks suppressed [ 628.204105][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 628.236189][T24712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5918'. [ 628.472597][ T1152] tipc: Resetting bearer [ 628.644545][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 628.659561][T24703] lo speed is unknown, defaulting to 1000 [ 628.763846][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 628.795278][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5920'. [ 628.874176][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 628.984222][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 629.070840][T24729] syzkaller0: entered promiscuous mode [ 629.076520][T24729] syzkaller0: entered allmulticast mode [ 629.093914][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 629.392521][T24728] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5922'. [ 629.411340][T24728] tunl0: Caught tx_queue_len zero misconfig [ 629.513283][T24733] syzkaller0: entered promiscuous mode [ 629.519181][T24733] tipc: Resetting bearer [ 629.691314][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5925'. [ 629.773750][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 629.823747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 629.831819][ C0] lec:lec_tx_timeout: lec0 [ 629.897771][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 629.978043][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5928'. [ 630.030653][T24750] vlan3: entered promiscuous mode [ 630.041926][T24750] dummy0: entered promiscuous mode [ 630.073149][T24752] tipc: Resetting bearer [ 630.090458][T24752] netlink: 'syz.3.5929': attribute type 13 has an invalid length. [ 630.098490][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 630.147294][T24752] gretap0: refused to change device tx_queue_len [ 630.186751][T24752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 630.284161][T24751] tipc: Resetting bearer [ 630.361235][T24758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5931'. [ 630.458316][T24765] syzkaller0: entered promiscuous mode [ 630.464292][T24765] syzkaller0: entered allmulticast mode [ 630.492330][T24766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5932'. [ 630.546268][ T36] tipc: Resetting bearer [ 630.707900][T24773] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5935'. [ 630.976582][T24782] vlan2: entered allmulticast mode [ 630.981745][T24782] bond0: entered allmulticast mode [ 630.992968][T24782] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5938'. [ 631.005047][T24782] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5938'. [ 631.059317][T24784] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 631.351153][T24802] syzkaller0: entered promiscuous mode [ 631.357770][T24802] syzkaller0: entered allmulticast mode [ 631.408062][T24806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5944'. [ 631.596497][T24816] netlink: 'syz.3.5947': attribute type 2 has an invalid length. [ 631.646185][T24821] netlink: 'syz.3.5947': attribute type 2 has an invalid length. [ 631.700673][T24816] !©9: entered promiscuous mode [ 631.722309][T24825] syzkaller0: entered promiscuous mode [ 631.732325][T24825] syzkaller0: entered allmulticast mode [ 631.853302][T24823] syzkaller0: entered promiscuous mode [ 631.883962][T24823] syzkaller0: entered allmulticast mode [ 632.150145][T24846] netlink: 'syz.2.5952': attribute type 1 has an invalid length. [ 632.254388][T24851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5952'. [ 632.323035][T24846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 632.355515][T24847] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 632.364977][T24847] bond8: (slave batadv6): making interface the new active one [ 632.373579][T24847] bond8: (slave batadv6): Enslaving as an active interface with an up link [ 632.392856][T24851] bond8 (unregistering): (slave batadv6): Releasing active interface [ 632.425259][T24851] bond8 (unregistering): Released all slaves [ 632.466517][T24859] bond0: option min_links: invalid value (18446744072300265489) [ 632.493120][T24859] bond0: option min_links: allowed values 0 - 2147483647 [ 632.513273][T24857] tipc: Enabled bearer , priority 0 [ 632.538603][T24857] syzkaller0: entered promiscuous mode [ 632.554188][T24857] syzkaller0: entered allmulticast mode [ 632.629690][T24857] tipc: Resetting bearer [ 632.649834][T24856] tipc: Resetting bearer [ 632.694316][T24856] tipc: Disabling bearer [ 632.837386][T24874] 8021q: VLANs not supported on nlmon0 [ 633.029948][T24886] tipc: Resetting bearer [ 633.050199][T24886] netlink: 'syz.3.5961': attribute type 13 has an invalid length. [ 633.126033][T24885] tipc: Resetting bearer [ 633.253813][ T3031] net_ratelimit: 20 callbacks suppressed [ 633.253832][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 633.352692][T24901] netlink: 'syz.3.5965': attribute type 39 has an invalid length. [ 633.394118][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 633.498600][T24905] tipc: Resetting bearer [ 633.574548][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 633.594024][ T36] tipc: Resetting bearer [ 633.632984][T24906] gre0 speed is unknown, defaulting to 1000 [ 633.684283][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 633.806100][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 634.100502][T24928] 8021q: VLANs not supported on nlmon0 [ 634.113815][ T49] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 634.234105][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 634.328206][T24906] lo speed is unknown, defaulting to 1000 [ 634.337332][T24937] tipc: Enabled bearer , priority 0 [ 634.363373][T24937] syzkaller0: entered promiscuous mode [ 634.389492][T24937] syzkaller0: entered allmulticast mode [ 634.456555][T24938] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 634.471434][T24938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.494052][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 634.501342][T24938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.535906][T24937] tipc: Resetting bearer [ 634.564390][T24941] gre0 speed is unknown, defaulting to 1000 [ 634.586773][T24949] __nla_validate_parse: 7 callbacks suppressed [ 634.586793][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5974'. [ 634.609767][T24935] tipc: Resetting bearer [ 634.707360][T24935] tipc: Disabling bearer [ 634.930774][T24941] lo speed is unknown, defaulting to 1000 [ 635.089149][T24955] syzkaller0: entered promiscuous mode [ 635.107596][T24955] syzkaller0: entered allmulticast mode [ 635.304637][T24957] gre0 speed is unknown, defaulting to 1000 [ 635.358956][T24959] xt_CT: No such helper "syz1" [ 635.450605][T24971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5978'. [ 635.887269][T24957] lo speed is unknown, defaulting to 1000 [ 635.893576][T24982] syzkaller0: entered promiscuous mode [ 635.912442][T24982] syzkaller0: entered allmulticast mode [ 636.232273][T24985] tipc: Resetting bearer [ 636.252139][T24985] tipc: Resetting bearer [ 636.358258][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5983'. [ 636.369127][T24990] 8021q: VLANs not supported on nlmon0 [ 636.676277][T12980] lec:lec_start_xmit: lec0:No lecd attached [ 636.970215][T24996] gre0 speed is unknown, defaulting to 1000 [ 637.194154][T25004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5987'. [ 637.368273][T25009] netlink: 'syz.0.5988': attribute type 1 has an invalid length. [ 637.368287][T25008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5989'. [ 637.387814][T25008] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5989'. [ 637.567602][T25009] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.660126][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 637.687586][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 637.702242][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 637.732839][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5990'. [ 637.793880][T24996] lo speed is unknown, defaulting to 1000 [ 637.869644][T25017] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 638.055924][T25029] syzkaller0: entered promiscuous mode [ 638.091857][T25029] syzkaller0: entered allmulticast mode [ 638.138738][T25034] gre0 speed is unknown, defaulting to 1000 [ 638.175248][T25038] netlink: 'syz.4.5995': attribute type 1 has an invalid length. [ 638.289611][ T3031] net_ratelimit: 36 callbacks suppressed [ 638.289634][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 638.343268][T25043] tipc: Enabling of bearer rejected, already enabled [ 638.564574][T25034] lo speed is unknown, defaulting to 1000 [ 638.577315][ T5491] veth0_macvtap: left promiscuous mode [ 638.608569][T25043] tipc: Resetting bearer [ 638.632515][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 638.774038][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 638.889542][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 639.123875][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 639.369078][T25083] netlink: 'syz.1.6003': attribute type 2 has an invalid length. [ 639.415171][T25083] !: entered promiscuous mode [ 639.676547][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 639.805489][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 639.924175][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 639.974685][T25096] __nla_validate_parse: 9 callbacks suppressed [ 639.974705][T25096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6005'. [ 640.024068][T25096] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 640.067456][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 640.203876][T25102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6006'. [ 640.320866][T25102] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 640.623930][T25117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6009'. [ 640.709383][T25115] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 640.768665][ T5896] lo speed is unknown, defaulting to 1000 [ 640.778036][T25122] gre0 speed is unknown, defaulting to 1000 [ 640.788587][T25115] 8021q: VLANs not supported on gre0 [ 641.010342][T25135] netlink: 'syz.0.6014': attribute type 1 has an invalid length. [ 641.085518][T25137] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 641.096803][T25137] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 641.121563][T25122] lo speed is unknown, defaulting to 1000 [ 641.146387][T25135] bond8: (slave gretap3): making interface the new active one [ 641.156601][T25135] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 641.181304][T25135] macvlan3: entered promiscuous mode [ 641.187545][T25135] macvlan3: entered allmulticast mode [ 641.194335][T25135] bond8: entered promiscuous mode [ 641.199991][T25135] gretap3: entered promiscuous mode [ 641.209179][T25135] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 641.220354][T25135] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 641.234803][T25135] bond8: left promiscuous mode [ 641.239612][T25135] gretap3: left promiscuous mode [ 641.274630][T25139] syzkaller0: entered promiscuous mode [ 641.280139][T25139] syzkaller0: entered allmulticast mode [ 641.414643][T25141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6016'. [ 641.443536][T25141] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 641.505387][T25143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6017'. [ 641.525605][T25143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6017'. [ 641.707412][T25147] gre0 speed is unknown, defaulting to 1000 [ 641.826227][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 641.834343][ C0] lec:lec_tx_timeout: lec0 [ 642.037082][T25147] lo speed is unknown, defaulting to 1000 [ 642.980405][T25191] gre0 speed is unknown, defaulting to 1000 [ 643.008593][T25194] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 643.209098][T25191] lo speed is unknown, defaulting to 1000 [ 643.224236][T25195] gre0 speed is unknown, defaulting to 1000 [ 643.324350][ T1152] net_ratelimit: 44 callbacks suppressed [ 643.324371][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 643.377795][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 643.387080][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 643.464580][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 643.521283][T25200] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 643.533171][T25200] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 643.542810][T25200] tipc: Resetting bearer [ 643.584855][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 643.713814][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 643.844659][T25195] lo speed is unknown, defaulting to 1000 [ 643.864084][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 644.104226][T25213] tipc: Resetting bearer [ 644.114324][T25213] tipc: Resetting bearer [ 644.313993][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 644.554473][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 644.851799][T25233] tipc: Resetting bearer [ 644.861604][T25233] tipc: Resetting bearer [ 644.888957][T25234] bond3: entered allmulticast mode [ 644.902191][T25234] vti0: entered allmulticast mode [ 644.921215][T25228] SET target dimension over the limit! [ 645.023291][T25239] netlink: 'syz.1.6042': attribute type 2 has an invalid length. [ 645.043850][T25239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6042'. [ 645.062958][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 645.234206][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 645.344975][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 645.370013][T25246] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 645.384280][T25246] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 645.471451][T25248] tipc: Enabling of bearer rejected, already enabled [ 645.497496][T25248] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 645.518307][T25248] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 645.535493][T25248] tipc: Resetting bearer [ 645.572917][T25250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6048'. [ 645.622387][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6047'. [ 645.639605][T25252] bond9: option mode: invalid value (254) [ 645.642879][T25255] xt_hashlimit: size too large, truncated to 1048576 [ 645.662218][T25252] bond9 (unregistering): Released all slaves [ 645.779881][T25259] syz.0.6049 (25259) used obsolete PPPIOCDETACH ioctl [ 645.835350][T25263] netlink: 'syz.3.6051': attribute type 11 has an invalid length. [ 645.991249][T25275] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 646.014965][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 646.098344][T25277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6055'. [ 646.110634][T25277] netlink: 'syz.4.6055': attribute type 1 has an invalid length. [ 646.118634][T25277] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6055'. [ 646.251849][T25275] gre0 speed is unknown, defaulting to 1000 [ 646.259826][T25285] netlink: 'syz.0.6058': attribute type 4 has an invalid length. [ 646.279515][T25280] netlink: 'syz.1.6056': attribute type 21 has an invalid length. [ 646.290010][T25280] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6056'. [ 646.299444][T25284] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6057'. [ 646.301213][T25285] netlink: 'syz.0.6058': attribute type 4 has an invalid length. [ 646.317322][T25284] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6057'. [ 646.320703][T25284] netlink: 'syz.3.6057': attribute type 1 has an invalid length. [ 646.344848][T25284] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6057'. [ 646.389220][T25289] netlink: 'syz.1.6056': attribute type 1 has an invalid length. [ 646.439093][T25280] netlink: 'syz.1.6056': attribute type 4 has an invalid length. [ 646.472487][T25280] bond18: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 646.536943][T25280] bond18 (unregistering): Released all slaves [ 646.732055][T25275] lo speed is unknown, defaulting to 1000 [ 646.817351][T25297] syzkaller0: left promiscuous mode [ 646.822614][T25297] syzkaller0: left allmulticast mode [ 646.858991][T25297] tipc: Resetting bearer [ 646.995753][T25309] netlink: 'syz.3.6063': attribute type 11 has an invalid length. [ 647.414885][T25326] gre0 speed is unknown, defaulting to 1000 [ 647.565396][T25331] xt_CT: No such helper "syz1" [ 647.812577][T25326] lo speed is unknown, defaulting to 1000 [ 648.433794][ T1161] net_ratelimit: 18 callbacks suppressed [ 648.433813][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 648.554375][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 648.664108][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 648.676295][T25348] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 648.723630][T25351] gre0 speed is unknown, defaulting to 1000 [ 648.757495][T25353] sit0: entered allmulticast mode [ 648.766316][T25353] sit0: left allmulticast mode [ 648.819563][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 648.950352][ T3031] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 649.065285][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 649.205165][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 649.314059][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 649.425260][T25367] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 649.507722][T25351] lo speed is unknown, defaulting to 1000 [ 649.515770][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 649.786246][T25383] gre0 speed is unknown, defaulting to 1000 [ 650.433056][T25383] lo speed is unknown, defaulting to 1000 [ 650.828263][T11847] lo speed is unknown, defaulting to 1000 [ 651.077266][T25415] tipc: Resetting bearer [ 651.694044][T25437] validate_nla: 3 callbacks suppressed [ 651.694065][T25437] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 651.763281][T25439] __nla_validate_parse: 9 callbacks suppressed [ 651.763297][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6094'. [ 651.790633][T25437] 8021q: adding VLAN 0 to HW filter on device bond18 [ 651.922474][T25422] lec:lec_atm_close: lec0: Shut down! [ 652.179630][T25456] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 652.222884][T25458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6097'. [ 652.334806][T25458] netlink: 'syz.2.6097': attribute type 5 has an invalid length. [ 652.357755][T25456] gre0 speed is unknown, defaulting to 1000 [ 652.383419][T25463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6098'. [ 652.392628][T25463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6098'. [ 652.412047][T25458] tipc: Resetting bearer [ 652.437039][T25458] tipc: Resetting bearer [ 653.041474][T25493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6105'. [ 653.241940][T25456] lo speed is unknown, defaulting to 1000 [ 653.534051][ T36] net_ratelimit: 21 callbacks suppressed [ 653.534071][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 653.659782][T25522] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6109'. [ 653.674790][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 653.856821][T25530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'. [ 653.866518][T25530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'. [ 653.875778][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.034370][T25540] tipc: Resetting bearer [ 654.137798][T25549] tipc: Resetting bearer [ 654.193465][T25549] tipc: Resetting bearer [ 654.294100][ T1161] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.435465][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.554274][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.674558][ T6317] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.689533][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6128'. [ 654.794127][ T36] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.831776][T25576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'. [ 654.914084][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 654.992165][T25585] netlink: 'syz.1.6130': attribute type 1 has an invalid length. [ 655.198011][ T1152] bond17: (slave ip6gretap0): failed to get link speed/duplex [ 655.281922][T25589] IPVS: ip_vs_add_dest(): server weight less than zero [ 655.697044][T25596] gretap3: left promiscuous mode [ 655.712157][T25596] gretap4: left promiscuous mode [ 655.731852][T25596] vlan2: left promiscuous mode [ 655.741256][T25596] bridge0: left promiscuous mode [ 655.757275][T25596] geneve3: left promiscuous mode [ 655.794355][T11847] lo speed is unknown, defaulting to 1000 [ 655.795150][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.800117][T11847] syz2: Port: 1 Link DOWN [ 655.854532][ T49] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.873253][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.895031][ T49] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.912264][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.931037][ T49] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.948257][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.976538][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.049353][T25617] syz0: rxe_newlink: already configured on bond0 [ 656.084366][T25613] 8021q: VLANs not supported on caif0 [ 656.282682][T25627] tipc: Resetting bearer [ 656.412005][T25636] netlink: 'syz.0.6146': attribute type 1 has an invalid length. [ 656.505420][T25636] 8021q: adding VLAN 0 to HW filter on device bond9 [ 656.556900][T25643] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 656.571685][T25643] bond9: (slave batadv8): making interface the new active one [ 656.581001][T25643] bond9: (slave batadv8): Enslaving as an active interface with an up link [ 656.680717][T25636] bond9 (unregistering): (slave batadv8): Releasing active interface [ 656.710241][T25636] bond9 (unregistering): Released all slaves [ 656.812298][T25650] gre0 speed is unknown, defaulting to 1000 [ 656.828357][T25658] __nla_validate_parse: 6 callbacks suppressed [ 656.828377][T25658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6155'. [ 656.923703][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 656.931773][ C0] lec:lec_tx_timeout: lec0 [ 656.948304][T25655] xt_CT: No such helper "syz1" [ 657.140241][T25650] lo speed is unknown, defaulting to 1000 [ 657.165202][T25675] netlink: 'syz.1.6161': attribute type 16 has an invalid length. [ 657.176482][T25675] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6161'. [ 657.187521][T25675] veth1_macvtap: entered allmulticast mode [ 657.328859][T25679] netlink: 'syz.1.6163': attribute type 13 has an invalid length. [ 657.452496][T25683] netlink: 292 bytes leftover after parsing attributes in process `syz.2.6165'. [ 657.516143][T25686] netlink: 'syz.1.6166': attribute type 1 has an invalid length. [ 657.579206][T25686] 8021q: adding VLAN 0 to HW filter on device bond18 [ 657.608394][T25686] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 657.620581][T25686] bond18: (slave batadv5): making interface the new active one [ 657.629376][T25686] bond18: (slave batadv5): Enslaving as an active interface with an up link [ 657.642418][T25686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6166'. [ 657.678035][T25686] bond18 (unregistering): (slave batadv5): Releasing active interface [ 657.691911][T25686] bond18 (unregistering): Released all slaves [ 657.716333][T25690] gre0 speed is unknown, defaulting to 1000 [ 658.080124][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'. [ 658.185944][T25690] lo speed is unknown, defaulting to 1000 [ 658.253279][ T5889] IPVS: starting estimator thread 0... [ 658.349467][T25712] IPVS: using max 31 ests per chain, 74400 per kthread [ 658.506588][T25723] netlink: 'syz.3.6176': attribute type 13 has an invalid length. [ 658.517644][T25701] gre0 speed is unknown, defaulting to 1000 [ 658.524187][T25720] tipc: Resetting bearer [ 658.875552][T25719] tipc: Resetting bearer [ 658.988403][T25730] tipc: Resetting bearer [ 659.118477][T25734] netlink: 'syz.3.6177': attribute type 4 has an invalid length. [ 659.213600][T25733] lo: Caught tx_queue_len zero misconfig [ 659.247080][T25701] lo speed is unknown, defaulting to 1000 [ 659.264030][T25733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6177'. [ 659.480950][T25736] netlink: 'syz.4.6179': attribute type 1 has an invalid length. [ 659.544903][T25736] 8021q: adding VLAN 0 to HW filter on device bond19 [ 659.581958][T25740] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 659.619916][T25736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6179'. [ 659.655032][T25740] bond19: (slave batadv8): making interface the new active one [ 659.692824][T25740] bond19: (slave batadv8): Enslaving as an active interface with an up link [ 659.737860][ T6317] tipc: Resetting bearer [ 659.780446][T25736] bond19 (unregistering): (slave batadv8): Releasing active interface [ 659.803992][T25736] bond19 (unregistering): Released all slaves [ 660.121084][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 660.148912][T25755] net_ratelimit: 3 callbacks suppressed [ 660.148932][T25755] openvswitch: netlink: Flow actions attr not present in new flow. [ 660.201790][T25764] Cannot find add_set index 4 as target [ 660.567407][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6193'. [ 660.691874][T25783] netlink: 'syz.2.6195': attribute type 17 has an invalid length. [ 660.708982][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6195'. [ 660.805915][T25771] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 660.849254][T25777] vlan3: entered promiscuous mode [ 660.985457][T25774] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 661.000477][T25783] bond0: option all_slaves_active: invalid value (17) [ 661.010770][ T5889] lo speed is unknown, defaulting to 1000 [ 661.016842][T25786] netlink: 'syz.0.6196': attribute type 10 has an invalid length. [ 661.166883][T25791] netlink: 'syz.3.6199': attribute type 12 has an invalid length. [ 661.346333][T25795] netlink: 'syz.3.6201': attribute type 1 has an invalid length. [ 661.408317][T25795] 8021q: adding VLAN 0 to HW filter on device bond12 [ 661.421233][T25801] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 661.461997][T25801] bond12: (slave batadv6): making interface the new active one [ 661.472102][T25801] bond12: (slave batadv6): Enslaving as an active interface with an up link [ 661.534620][T25795] bond12 (unregistering): (slave batadv6): Releasing active interface [ 661.565700][T25795] bond12 (unregistering): Released all slaves [ 661.753237][T25811] geneve0: entered promiscuous mode [ 661.830983][T25816] gre0 speed is unknown, defaulting to 1000 [ 662.059817][T25816] lo speed is unknown, defaulting to 1000 [ 663.071798][T25868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.316145][T25876] netlink: 'syz.2.6225': attribute type 11 has an invalid length. [ 663.556422][T25883] bridge0: port 1(gretap0) entered blocking state [ 663.563143][T25883] bridge0: port 1(gretap0) entered forwarding state [ 663.638113][T25883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.092642][T25850] tipc: Resetting bearer [ 664.113941][T25850] tipc: Resetting bearer [ 664.238955][ T5491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.301643][T25904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.314819][T25891] gre0 speed is unknown, defaulting to 1000 [ 664.813580][T25930] netlink: 'syz.4.6236': attribute type 11 has an invalid length. [ 664.865593][T25891] lo speed is unknown, defaulting to 1000 [ 664.870438][T25920] gre0 speed is unknown, defaulting to 1000 [ 665.419481][T25920] lo speed is unknown, defaulting to 1000 [ 665.511263][T25959] xt_hashlimit: size too large, truncated to 1048576 [ 665.749495][T25964] netlink: 'syz.4.6250': attribute type 11 has an invalid length. [ 665.920583][T25968] __nla_validate_parse: 3 callbacks suppressed [ 665.920603][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6253'. [ 666.597452][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 666.639858][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6262'. [ 666.984568][T26004] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0101 [ 667.028559][T26004] tipc: Enabled bearer , priority 10 [ 667.551574][T26033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6281'. [ 667.560918][T26033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6281'. [ 667.656715][T26041] ip6_vti0: Caught tx_queue_len zero misconfig [ 667.886501][T26055] netlink: 'syz.1.6291': attribute type 13 has an invalid length. [ 668.311920][T25904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.496597][T26098] gre0 speed is unknown, defaulting to 1000 [ 668.507655][T26101] netlink: 'syz.0.6309': attribute type 39 has an invalid length. [ 668.578058][T26107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6309'. [ 668.597795][T26107] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6309'. [ 668.654125][T26107] netlink: 'syz.0.6309': attribute type 5 has an invalid length. [ 668.662138][T26107] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6309'. [ 668.736926][T26113] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 668.789748][T26113] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 668.979025][T26098] lo speed is unknown, defaulting to 1000 [ 669.136080][T26133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 669.264357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.297953][T26138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.854034][T26173] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6332'. [ 669.855300][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 669.882699][T26173] netlink: 'syz.4.6332': attribute type 2 has an invalid length. [ 669.882887][T26176] 8021q: VLANs not supported on caif0 [ 670.399007][T26138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.713424][T26184] gre0 speed is unknown, defaulting to 1000 [ 671.269280][T26184] lo speed is unknown, defaulting to 1000 [ 671.269280][T26201] gre0 speed is unknown, defaulting to 1000 [ 671.768478][T26228] gre0 speed is unknown, defaulting to 1000 [ 671.774926][T26201] lo speed is unknown, defaulting to 1000 [ 671.849913][T26138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.339873][T26247] tipc: Resetting bearer [ 672.614558][T26228] lo speed is unknown, defaulting to 1000 [ 674.313881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.417331][T26310] netlink: 'syz.4.6372': attribute type 17 has an invalid length. [ 674.450231][T26310] __nla_validate_parse: 1 callbacks suppressed [ 674.450249][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6372'. [ 674.481138][T26314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6375'. [ 674.501809][T26310] bond0: option all_slaves_active: invalid value (17) [ 674.510597][T26314] 8021q: VLANs not supported on 60ªX¹¦À [ 675.622622][T26375] netlink: 'syz.1.6391': attribute type 13 has an invalid length. [ 675.903727][T17121] lo speed is unknown, defaulting to 1000 [ 676.150835][T26394] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6393'. [ 676.205865][T26397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6395'. [ 676.215039][T26397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6395'. [ 676.244560][T25904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.276014][T26400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6396'. [ 676.554672][T26417] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 676.621093][T26426] netlink: 'syz.3.6405': attribute type 1 has an invalid length. [ 676.703198][T26426] 8021q: adding VLAN 0 to HW filter on device bond12 [ 676.730829][T26433] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 676.774030][T26433] bond12: (slave batadv7): making interface the new active one [ 676.783370][T26433] bond12: (slave batadv7): Enslaving as an active interface with an up link [ 676.845905][T26426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6405'. [ 676.892643][T26426] bond12 (unregistering): (slave batadv7): Releasing active interface [ 676.913282][T26426] bond12 (unregistering): Released all slaves [ 676.987130][T26442] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.124024][T26452] batadv_slave_0: Caught tx_queue_len zero misconfig [ 677.484448][T26477] block nbd0: reconnected socket [ 677.489451][T26477] nbd: socks must be embedded in a SOCK_ITEM attr [ 677.499314][ T51] block nbd0: Receive control failed (result -32) [ 677.758577][T26497] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6428'. [ 678.135988][T26523] netlink: 'syz.1.6442': attribute type 1 has an invalid length. [ 678.145938][T26523] netlink: 'syz.1.6442': attribute type 2 has an invalid length. [ 678.181958][T26525] netlink: 'syz.2.6443': attribute type 1 has an invalid length. [ 678.193301][T26525] netlink: 'syz.2.6443': attribute type 2 has an invalid length. [ 678.339847][T26538] netlink: 'syz.2.6449': attribute type 4 has an invalid length. [ 678.376401][T26540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 678.395766][T26541] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 678.516578][T26547] gre0 speed is unknown, defaulting to 1000 [ 678.576506][T26545] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 678.638227][T26553] netlink: 'syz.0.6451': attribute type 1 has an invalid length. [ 678.725285][T26553] 8021q: adding VLAN 0 to HW filter on device bond9 [ 678.781139][T26553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6451'. [ 678.871628][T26560] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 678.883436][T26560] bond9: (slave batadv9): making interface the new active one [ 678.893176][T26560] bond9: (slave batadv9): Enslaving as an active interface with an up link [ 678.934365][T26553] bond9 (unregistering): (slave batadv9): Releasing active interface [ 678.970374][T26553] bond9 (unregistering): Released all slaves [ 679.003860][T26547] lo speed is unknown, defaulting to 1000 [ 679.343256][T26590] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.354242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.576872][T26595] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6465'. [ 679.648912][T26598] netlink: 'syz.0.6466': attribute type 17 has an invalid length. [ 679.660683][T26598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'. [ 679.670416][T26598] bond0: option all_slaves_active: invalid value (17) [ 679.995384][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6471'. [ 680.014897][T26614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6471'. [ 680.112303][T26616] sit3: entered promiscuous mode [ 680.127489][T26618] syzkaller1: entered promiscuous mode [ 680.141706][T26618] syzkaller1: entered allmulticast mode [ 680.395199][T26632] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6477'. [ 680.408506][T26632] tunl0: Caught tx_queue_len zero misconfig [ 680.722240][T26649] netlink: 'syz.2.6484': attribute type 1 has an invalid length. [ 680.811254][T26649] 8021q: adding VLAN 0 to HW filter on device bond8 [ 680.860714][T26655] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 680.870846][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6484'. [ 680.885120][T26655] bond8: (slave batadv7): making interface the new active one [ 680.896183][T26655] bond8: (slave batadv7): Enslaving as an active interface with an up link [ 680.910619][T26649] bond8 (unregistering): (slave batadv7): Releasing active interface [ 680.928728][T26649] bond8 (unregistering): Released all slaves [ 681.064840][T26663] netlink: 'syz.3.6490': attribute type 1 has an invalid length. [ 681.122329][T26663] bond12: entered allmulticast mode [ 681.160167][T26663] 8021q: adding VLAN 0 to HW filter on device bond12 [ 681.173145][T26672] IPVS: Scheduler module ip_vs_sip not found [ 681.221980][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6490'. [ 681.281164][T26674] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 681.299433][T26674] bond12: (slave batadv8): making interface the new active one [ 681.310221][T26674] batadv8: entered allmulticast mode [ 681.318174][T26674] bond12: (slave batadv8): Enslaving as an active interface with an up link [ 681.332745][T26686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6495'. [ 681.334948][T26688] netlink: 'syz.0.6496': attribute type 14 has an invalid length. [ 681.351610][T26686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6495'. [ 681.352813][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6496'. [ 681.412002][T26681] bond12 (unregistering): (slave batadv8): Releasing active interface [ 681.422656][T26681] batadv8: left allmulticast mode [ 681.447664][T26681] bond12 (unregistering): Released all slaves [ 681.482461][T26688] netlink: 'syz.0.6496': attribute type 14 has an invalid length. [ 681.695185][T26698] netlink: 'syz.3.6500': attribute type 4 has an invalid length. [ 681.708091][T26700] tc_dump_action: action bad kind [ 682.058685][T26725] netlink: 'syz.2.6509': attribute type 1 has an invalid length. [ 682.084321][T26725] netlink: 'syz.2.6509': attribute type 1 has an invalid length. [ 682.103824][T26725] netlink: 'syz.2.6509': attribute type 1 has an invalid length. [ 682.337890][T26737] gre0 speed is unknown, defaulting to 1000 [ 682.686281][T26737] lo speed is unknown, defaulting to 1000 [ 683.273128][T26764] syzkaller1: entered promiscuous mode [ 683.284036][T26764] syzkaller1: entered allmulticast mode [ 683.335278][T26773] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.645241][T26780] gre0 speed is unknown, defaulting to 1000 [ 683.934482][T26780] lo speed is unknown, defaulting to 1000 [ 684.384212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.484681][T26808] lo: Caught tx_queue_len zero misconfig [ 684.719764][T26811] gre0 speed is unknown, defaulting to 1000 [ 685.222406][T26836] bridge8: entered promiscuous mode [ 685.290829][T26836] bridge8: entered allmulticast mode [ 685.345901][T26836] team0: Port device bridge8 added [ 685.379771][T26841] bridge0: port 1(team0) entered blocking state [ 685.431982][T26841] bridge0: port 1(team0) entered disabled state [ 685.444241][T26841] team0: entered allmulticast mode [ 685.463851][T26841] team0: left allmulticast mode [ 685.503337][T26811] lo speed is unknown, defaulting to 1000 [ 685.748194][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.760378][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 685.768012][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 685.775095][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.395941][T26869] pim6reg1: entered promiscuous mode [ 686.416492][T26869] pim6reg1: entered allmulticast mode [ 687.191501][T26900] __nla_validate_parse: 3 callbacks suppressed [ 687.191522][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6562'. [ 687.219848][T26900] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 687.459797][T26910] syzkaller1: entered promiscuous mode [ 687.470337][T26910] syzkaller1: entered allmulticast mode [ 687.589610][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6568'. [ 687.756643][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6569'. [ 688.255664][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6584'. [ 688.442457][T26969] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6587'. [ 688.813582][T26989] netlink: 'syz.1.6594': attribute type 17 has an invalid length. [ 688.822587][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'. [ 688.843220][T26989] bond0: option all_slaves_active: invalid value (17) [ 688.964356][T26994] tipc: Enabled bearer , priority 0 [ 689.027214][T26997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6597'. [ 689.030677][T26994] syzkaller0: entered promiscuous mode [ 689.041728][T26994] syzkaller0: entered allmulticast mode [ 689.048585][T26994] tipc: Resetting bearer [ 689.083365][T26993] tipc: Resetting bearer [ 689.235018][T27001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6598'. [ 689.414421][T27008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6599'. [ 689.433902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.864403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 690.872441][ C0] lec:lec_tx_timeout: lec0 [ 691.023963][T26993] tipc: Disabling bearer [ 691.050909][T27009] bridge9: entered promiscuous mode [ 691.058959][T27009] bridge9: port 1(macvtap2) entered blocking state [ 691.067241][T27009] bridge9: port 1(macvtap2) entered disabled state [ 691.074778][T27009] macvtap2: entered allmulticast mode [ 691.080340][T27009] bridge9: entered allmulticast mode [ 691.088733][T27009] macvtap2: left allmulticast mode [ 691.094440][T27009] bridge9: left allmulticast mode [ 691.115953][T27009] bridge9: left promiscuous mode [ 691.258499][T25904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.423477][T27047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6608'. [ 691.452846][T27048] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 691.511900][T27048] gre0 speed is unknown, defaulting to 1000 [ 691.696023][T27048] lo speed is unknown, defaulting to 1000 [ 692.091518][T27067] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 692.480420][T27057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.503500][T27078] __nla_validate_parse: 1 callbacks suppressed [ 692.503519][T27078] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6616'. [ 693.108850][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6625'. [ 693.117976][T27118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6625'. [ 693.228604][T17132] lo speed is unknown, defaulting to 1000 [ 693.586908][T27134] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.649621][T27132] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6633'. [ 693.709349][T27148] netlink: 'syz.2.6636': attribute type 1 has an invalid length. [ 693.772528][T27148] bond8: entered promiscuous mode [ 693.781888][T27148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.833554][T27152] bond8: (slave bridge7): making interface the new active one [ 693.913916][T27152] bridge7: entered promiscuous mode [ 693.920548][T27152] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 693.930358][T27148] bridge0: Device is already in use. [ 694.040202][T27162] tipc: Enabling of bearer rejected, already enabled [ 694.417304][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6647'. [ 694.463827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.521278][T27187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6649'. [ 694.532786][T27187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6649'. [ 694.543260][T27187] netlink: 'syz.2.6649': attribute type 4 has an invalid length. [ 694.552204][T27187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6649'. [ 694.564765][T27187] .`: renamed from bond0 [ 694.865799][T27204] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6652'. [ 695.297215][T27213] syzkaller0: entered promiscuous mode [ 695.302725][T27213] syzkaller0: entered allmulticast mode [ 695.905769][T27234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'. [ 696.183141][T27238] gre0 speed is unknown, defaulting to 1000 [ 696.191628][T27241] ±ÿ8»XÃ!¡Hû: renamed from lo (while UP) [ 696.399374][T27238] lo speed is unknown, defaulting to 1000 [ 696.670333][T27249] tipc: Resetting bearer [ 696.828956][T27251] syzkaller0: entered promiscuous mode [ 696.837454][T27251] syzkaller0: entered allmulticast mode [ 697.698321][T27196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.865934][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6670'. [ 698.891191][T27268] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 698.892687][T27275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6673'. [ 698.910173][T27275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6673'. [ 698.930340][T27281] syzkaller0: entered promiscuous mode [ 698.942594][T27281] syzkaller0: entered allmulticast mode [ 698.954646][T27281] tipc: Resetting bearer [ 699.218238][T27305] tipc: Resetting bearer [ 699.490528][T27302] tipc: Resetting bearer [ 699.499079][T27304] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6683'. [ 699.504121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.642271][T27317] tipc: Resetting bearer [ 699.656410][T27316] tipc: Resetting bearer [ 699.842510][T27324] gre0 speed is unknown, defaulting to 1000 [ 699.848710][T27328] bond17: option mode: unable to set because the bond device has slaves [ 699.953867][ T3031] tipc: Resetting bearer [ 700.367432][T27324] lo speed is unknown, defaulting to 1000 [ 700.379176][T27344] tipc: Enabled bearer , priority 0 [ 700.409263][T27344] syzkaller0: entered promiscuous mode [ 700.422235][T27344] syzkaller0: entered allmulticast mode [ 700.431308][T27349] netlink: 'syz.2.6695': attribute type 1 has an invalid length. [ 700.453070][T27344] tipc: Resetting bearer [ 700.483991][T27342] tipc: Resetting bearer [ 700.535707][T27352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6695'. [ 700.545488][T27342] tipc: Disabling bearer [ 700.678568][T27349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.891933][T27352] bond0 (unregistering): Released all slaves [ 701.059906][T12980] lec:lec_start_xmit: lec0:No lecd attached [ 701.182421][T27358] tipc: Resetting bearer [ 701.878237][T27376] tipc: Enabling of bearer rejected, already enabled [ 701.925853][T27376] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 701.933463][T27376] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 702.010198][T27380] syzkaller0: entered promiscuous mode [ 702.016012][T27380] syzkaller0: entered allmulticast mode [ 702.158014][T27386] gre0 speed is unknown, defaulting to 1000 [ 702.410933][T27391] tipc: Resetting bearer [ 702.436661][T27391] syzkaller0: left promiscuous mode [ 702.442043][T27391] syzkaller0: left allmulticast mode [ 702.477669][T27391] vlan0: left promiscuous mode [ 702.483113][T27404] netlink: 'syz.2.6712': attribute type 2 has an invalid length. [ 702.491374][T27391] bridge0: left promiscuous mode [ 702.521075][T27391] gretap2: left promiscuous mode [ 702.535988][T27405] netlink: 'syz.2.6712': attribute type 2 has an invalid length. [ 702.614338][T27391] bridge8: left promiscuous mode [ 702.628280][T27391] bridge8: left allmulticast mode [ 702.648530][T17121] gre0 speed is unknown, defaulting to 1000 [ 702.666095][T27404] !: entered promiscuous mode [ 702.673739][T17121] syz1: Port: 1 Link DOWN [ 702.680573][ T1161] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.694693][ T1161] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.734400][T27386] lo speed is unknown, defaulting to 1000 [ 702.737869][ T1161] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.779998][ T1161] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.794267][T27408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6713'. [ 702.803287][T17121] gre0 speed is unknown, defaulting to 1000 [ 703.050383][T27417] gre0 speed is unknown, defaulting to 1000 [ 703.094619][T27425] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 703.235578][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6718'. [ 703.468578][T27417] lo speed is unknown, defaulting to 1000 [ 703.835819][T16861] lo speed is unknown, defaulting to 1000 [ 704.543896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.169638][T27445] tipc: Resetting bearer [ 706.327292][T27465] tipc: Resetting bearer [ 706.504834][T27473] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 706.609630][T27481] netlink: 'syz.2.6732': attribute type 1 has an invalid length. [ 706.645020][T27483] tipc: Resetting bearer [ 706.674450][T27483] tipc: Enabling of bearer rejected, already enabled [ 706.712369][T27483] syzkaller0: entered promiscuous mode [ 706.719139][T27483] syzkaller0: entered allmulticast mode [ 706.727996][T27482] tipc: Resetting bearer [ 706.863815][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 706.871897][ C0] lec:lec_tx_timeout: lec0 [ 707.081388][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6740'. [ 707.095860][T27500] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 707.106873][T27500] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 707.129565][T27500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6740'. [ 707.140572][T27500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6740'. [ 707.179866][T27491] tipc: Resetting bearer [ 707.239482][T27500] team0: entered promiscuous mode [ 707.244697][T27500] bridge8: entered promiscuous mode [ 707.251196][T27500] team0: left promiscuous mode [ 707.256514][T27500] bridge8: left promiscuous mode [ 707.266798][ T36] tipc: Resetting bearer [ 707.481583][T27509] gre0 speed is unknown, defaulting to 1000 [ 707.936211][T27509] lo speed is unknown, defaulting to 1000 [ 707.976448][T27528] tipc: Enabled bearer , priority 0 [ 707.997579][T27528] syzkaller0: entered promiscuous mode [ 708.007847][T27528] syzkaller0: entered allmulticast mode [ 708.038645][T27528] tipc: Resetting bearer [ 708.057083][T27527] tipc: Resetting bearer [ 708.161327][T27527] tipc: Disabling bearer [ 708.526372][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'. [ 708.892646][T27559] rdma_rxe: rxe_newlink: failed to add lo [ 708.983224][T27551] gre0 speed is unknown, defaulting to 1000 [ 709.429802][T27551] lo speed is unknown, defaulting to 1000 [ 709.584164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.696972][T27580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6761'. [ 709.727926][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6761'. [ 709.779154][T27580] netlink: 'syz.1.6761': attribute type 2 has an invalid length. [ 709.785552][T27582] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 709.794173][T27580] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6761'. [ 709.809921][T27584] ip6tnl0: Caught tx_queue_len zero misconfig [ 709.969331][T27586] tipc: Enabling of bearer rejected, already enabled [ 709.999315][T27586] syzkaller0: mtu less than device minimum [ 710.141748][T27592] tipc: Resetting bearer [ 710.280631][T27590] tipc: Resetting bearer [ 710.544878][T27611] gre0 speed is unknown, defaulting to 1000 [ 710.575683][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6774'. [ 710.616652][T27616] vlan0: entered promiscuous mode [ 710.707544][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6775'. [ 710.816134][T27618] macvtap0: entered promiscuous mode [ 710.840615][T27618] virtio_net virtio1 eth0: entered promiscuous mode [ 710.862975][T27618] macvtap0: entered allmulticast mode [ 710.894942][T27618] virtio_net virtio1 eth0: entered allmulticast mode [ 711.069598][ T1161] tipc: Resetting bearer [ 711.235492][T27611] lo speed is unknown, defaulting to 1000 [ 711.245395][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 711.325473][T27618] virtio_net virtio1 eth0: left allmulticast mode [ 711.332160][T27618] virtio_net virtio1 eth0: left promiscuous mode [ 711.367791][T27637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6778'. [ 711.892610][T27664] gre0 speed is unknown, defaulting to 1000 [ 712.400228][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6787'. [ 712.422913][T27693] netlink: 4496 bytes leftover after parsing attributes in process `syz.3.6788'. [ 712.691885][T27664] lo speed is unknown, defaulting to 1000 [ 712.699382][T27686] gre0 speed is unknown, defaulting to 1000 [ 713.088555][T27712] netlink: 'syz.2.6792': attribute type 17 has an invalid length. [ 713.539879][T27686] lo speed is unknown, defaulting to 1000 [ 713.797517][T27723] tipc: Resetting bearer [ 714.280853][T27738] __nla_validate_parse: 4 callbacks suppressed [ 714.280872][T27738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6796'. [ 714.405096][T27748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6797'. [ 714.530741][T27738] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6796'. [ 714.624267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.336486][T27775] "syz.4.6801" (27775) uses obsolete ecb(arc4) skcipher [ 715.730365][T27778] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6802'. [ 715.804669][T27788] netlink: 'syz.2.6804': attribute type 17 has an invalid length. [ 715.824150][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6804'. [ 715.891574][T27789] gre0 speed is unknown, defaulting to 1000 [ 716.048611][T27800] netlink: 'syz.0.6808': attribute type 1 has an invalid length. [ 716.104554][T27800] bond9: entered promiscuous mode [ 716.110757][T27800] 8021q: adding VLAN 0 to HW filter on device bond9 [ 716.138076][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6808'. [ 716.169294][T27800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6808'. [ 716.213426][T27806] xt_hashlimit: size too large, truncated to 1048576 [ 716.420341][T27816] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6814'. [ 716.444801][T27816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6814'. [ 716.650043][T27789] lo speed is unknown, defaulting to 1000 [ 716.659488][T27799] gre0 speed is unknown, defaulting to 1000 [ 716.813093][T27826] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6816'. [ 717.018493][T27834] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 717.193614][T27799] lo speed is unknown, defaulting to 1000 [ 717.658392][T27855] bond0: option lacp_active: invalid value (8) [ 717.700244][T27855] bond0 (unregistering): Released all slaves [ 717.831684][T27856] gre0 speed is unknown, defaulting to 1000 [ 717.980721][T27867] tipc: Enabling of bearer rejected, already enabled [ 718.218435][T27856] lo speed is unknown, defaulting to 1000 [ 718.254507][T27871] netlink: 'syz.2.6828': attribute type 1 has an invalid length. [ 718.400085][T27871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.479153][T27875] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 718.490703][T27875] bond0: (slave batadv8): making interface the new active one [ 718.500525][T27875] bond0: (slave batadv8): Enslaving as an active interface with an up link [ 718.544938][T27877] bond0 (unregistering): (slave batadv8): Releasing active interface [ 718.572584][T27877] bond0 (unregistering): Released all slaves [ 718.788210][T27880] netlink: 'syz.0.6830': attribute type 10 has an invalid length. [ 718.858756][T27885] netlink: 'syz.2.6831': attribute type 17 has an invalid length. [ 719.663882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.714950][T27904] tipc: Resetting bearer [ 719.731234][T27904] netlink: 'syz.3.6835': attribute type 13 has an invalid length. [ 719.840392][T27910] __nla_validate_parse: 7 callbacks suppressed [ 719.840413][T27910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6836'. [ 720.032897][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6837'. [ 720.363820][T27903] tipc: Resetting bearer [ 720.375576][ T6317] tipc: Resetting bearer [ 720.429817][T27914] gre0 speed is unknown, defaulting to 1000 [ 720.764858][T27928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6840'. [ 720.779392][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6841'. [ 721.018359][T27914] lo speed is unknown, defaulting to 1000 [ 721.210849][T27951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6843'. [ 721.342702][T27954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6845'. [ 723.228644][T25904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.368713][T27965] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6846'. [ 724.408127][T27964] netlink: 'syz.3.6847': attribute type 3 has an invalid length. [ 724.430407][T27970] netlink: 'syz.4.6849': attribute type 89 has an invalid length. [ 724.558387][T27964] siw: device registration error -23 [ 724.587200][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6850'. [ 724.667843][T27964] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.695206][T27964] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 724.711398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.726862][T17121] gre0 speed is unknown, defaulting to 1000 [ 724.752607][T17121] syz1: Port: 1 Link ACTIVE [ 724.776562][T17121] gre0 speed is unknown, defaulting to 1000 [ 724.991920][T27992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6851'. [ 725.041683][T27994] netlink: 'syz.1.6853': attribute type 2 has an invalid length. [ 725.135462][T27990] netlink: 'syz.4.6852': attribute type 7 has an invalid length. [ 725.161292][T28002] veth19: entered allmulticast mode [ 725.171860][T28002] SET target dimension over the limit! [ 725.210035][T28001] veth19: left allmulticast mode [ 725.214122][T27990] netlink: 'syz.4.6852': attribute type 5 has an invalid length. [ 725.222727][T27990] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6852'. [ 725.390525][T28009] netlink: 'syz.3.6857': attribute type 1 has an invalid length. [ 725.474764][T28009] 8021q: adding VLAN 0 to HW filter on device bond12 [ 725.497481][T28011] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 725.510248][T28009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6857'. [ 725.527277][T28011] bond12: (slave batadv9): making interface the new active one [ 725.537351][T28011] bond12: (slave batadv9): Enslaving as an active interface with an up link [ 725.571035][T28009] bond12 (unregistering): (slave batadv9): Releasing active interface [ 725.586266][T28009] bond12 (unregistering): Released all slaves [ 725.625391][T28013] xt_connbytes: Forcing CT accounting to be enabled [ 725.815961][T28015] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6859'. [ 725.880565][T28023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6861'. [ 725.960938][T28030] netlink: 'syz.4.6864': attribute type 16 has an invalid length. [ 726.009070][T28030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6864'. [ 726.060539][T28030] veth1_macvtap: entered allmulticast mode [ 726.125922][T28036] netlink: 'syz.1.6868': attribute type 4 has an invalid length. [ 726.417386][T28050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6872'. [ 726.564081][T28058] netlink: 'syz.3.6876': attribute type 1 has an invalid length. [ 726.638721][T28058] 8021q: adding VLAN 0 to HW filter on device bond12 [ 726.692643][T28062] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 726.721601][T28058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6876'. [ 726.741419][T28062] bond12: (slave batadv10): making interface the new active one [ 726.756627][T28062] bond12: (slave batadv10): Enslaving as an active interface with an up link [ 726.839343][T28058] bond12 (unregistering): (slave batadv10): Releasing active interface [ 726.862366][T28058] bond12 (unregistering): Released all slaves [ 727.018760][T28074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6881'. [ 727.341133][T28094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6888'. [ 727.465912][T28099] siw: device registration error -23 [ 727.499824][T28101] syzkaller0: entered promiscuous mode [ 727.513732][T28101] syzkaller0: entered allmulticast mode [ 727.675280][T28113] Cannot find add_set index 4 as target [ 728.379294][T28091] tipc: Resetting bearer [ 728.547398][T28163] netlink: 'syz.3.6908': attribute type 1 has an invalid length. [ 728.628038][T28163] 8021q: adding VLAN 0 to HW filter on device bond12 [ 728.692568][T28166] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 728.771949][T28166] bond12: (slave batadv11): making interface the new active one [ 728.802163][T28166] bond12: (slave batadv11): Enslaving as an active interface with an up link [ 728.884622][T28163] bond12 (unregistering): (slave batadv11): Releasing active interface [ 728.956370][T28163] bond12 (unregistering): Released all slaves [ 729.440146][T28194] gre0 speed is unknown, defaulting to 1000 [ 729.744006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.276114][T28194] lo speed is unknown, defaulting to 1000 [ 731.388581][T28218] gre0 speed is unknown, defaulting to 1000 [ 731.741674][T28245] netlink: 'syz.1.6928': attribute type 11 has an invalid length. [ 731.760490][T28245] netlink: 'syz.1.6928': attribute type 23 has an invalid length. [ 731.778679][T28245] __nla_validate_parse: 7 callbacks suppressed [ 731.778698][T28245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6928'. [ 731.872458][T28245] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 731.884143][T28245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6928'. [ 731.893252][T28245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6928'. [ 731.910140][T28245] gretap5: entered promiscuous mode [ 732.001872][T28256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6934'. [ 732.082984][T28218] lo speed is unknown, defaulting to 1000 [ 732.521782][T28270] [ 732.524156][T28270] ====================================================== [ 732.531179][T28270] WARNING: possible circular locking dependency detected [ 732.538198][T28270] syzkaller #0 Not tainted [ 732.542590][T28270] ------------------------------------------------------ [ 732.549577][T28270] syz.4.6940/28270 is trying to acquire lock: [ 732.555611][T28270] ffffffff8fd45638 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 732.564719][T28270] [ 732.564719][T28270] but task is already holding lock: [ 732.572052][T28270] ffff8880226fc170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 732.581248][T28270] [ 732.581248][T28270] which lock already depends on the new lock. [ 732.581248][T28270] [ 732.591628][T28270] [ 732.591628][T28270] the existing dependency chain (in reverse order) is: [ 732.600616][T28270] [ 732.600616][T28270] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 732.608580][T28270] _raw_spin_lock_bh+0x36/0x50 [ 732.613846][T28270] nr_rt_device_down+0x153/0x860 [ 732.619278][T28270] nr_device_event+0x137/0x150 [ 732.624543][T28270] notifier_call_chain+0x1be/0x400 [ 732.630184][T28270] netif_close_many+0x2ae/0x420 [ 732.635531][T28270] netif_close+0x160/0x220 [ 732.640440][T28270] dev_close+0x10a/0x220 [ 732.645178][T28270] bpq_device_event+0x377/0x6a0 [ 732.650529][T28270] notifier_call_chain+0x1be/0x400 [ 732.656139][T28270] __dev_notify_flags+0x16d/0x310 [ 732.661658][T28270] netif_change_flags+0xe8/0x1a0 [ 732.667089][T28270] dev_change_flags+0x130/0x260 [ 732.672433][T28270] dev_ioctl+0x7b4/0x1150 [ 732.677259][T28270] sock_do_ioctl+0x23e/0x320 [ 732.682351][T28270] sock_ioctl+0x5c6/0x7f0 [ 732.687179][T28270] __se_sys_ioctl+0xfc/0x170 [ 732.692345][T28270] do_syscall_64+0x14d/0xf80 [ 732.697451][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.703851][T28270] [ 732.703851][T28270] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 732.711646][T28270] _raw_spin_lock_bh+0x36/0x50 [ 732.716913][T28270] nr_rt_device_down+0xbe/0x860 [ 732.722260][T28270] nr_device_event+0x137/0x150 [ 732.727530][T28270] notifier_call_chain+0x1be/0x400 [ 732.733186][T28270] __dev_notify_flags+0x16d/0x310 [ 732.738737][T28270] netif_change_flags+0xe8/0x1a0 [ 732.744202][T28270] dev_change_flags+0x130/0x260 [ 732.749581][T28270] dev_ioctl+0x7b4/0x1150 [ 732.754432][T28270] sock_do_ioctl+0x23e/0x320 [ 732.759559][T28270] sock_ioctl+0x5c6/0x7f0 [ 732.764429][T28270] __se_sys_ioctl+0xfc/0x170 [ 732.769555][T28270] do_syscall_64+0x14d/0xf80 [ 732.774685][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.781109][T28270] [ 732.781109][T28270] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 732.789034][T28270] __lock_acquire+0x15a5/0x2cf0 [ 732.794424][T28270] lock_acquire+0xf0/0x2e0 [ 732.799369][T28270] _raw_spin_lock_bh+0x36/0x50 [ 732.804668][T28270] nr_rt_ioctl+0x40c/0xf90 [ 732.809608][T28270] sock_do_ioctl+0x101/0x320 [ 732.814729][T28270] sock_ioctl+0x5c6/0x7f0 [ 732.819591][T28270] __se_sys_ioctl+0xfc/0x170 [ 732.824708][T28270] do_syscall_64+0x14d/0xf80 [ 732.829831][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.836246][T28270] [ 732.836246][T28270] other info that might help us debug this: [ 732.836246][T28270] [ 732.846470][T28270] Chain exists of: [ 732.846470][T28270] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 732.846470][T28270] [ 732.860301][T28270] Possible unsafe locking scenario: [ 732.860301][T28270] [ 732.867737][T28270] CPU0 CPU1 [ 732.873084][T28270] ---- ---- [ 732.878430][T28270] lock(&nr_node->node_lock); [ 732.883181][T28270] lock(nr_node_list_lock); [ 732.890286][T28270] lock(&nr_node->node_lock); [ 732.897569][T28270] lock(nr_neigh_list_lock); [ 732.902248][T28270] [ 732.902248][T28270] *** DEADLOCK *** [ 732.902248][T28270] [ 732.910384][T28270] 2 locks held by syz.4.6940/28270: [ 732.915563][T28270] #0: ffffffff8fd45698 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 732.925047][T28270] #1: ffff8880226fc170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 732.934694][T28270] [ 732.934694][T28270] stack backtrace: [ 732.940566][T28270] CPU: 1 UID: 0 PID: 28270 Comm: syz.4.6940 Not tainted syzkaller #0 PREEMPT(full) [ 732.940584][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.940595][T28270] Call Trace: [ 732.940602][T28270] [ 732.940610][T28270] dump_stack_lvl+0xe8/0x150 [ 732.940633][T28270] print_circular_bug+0x2e1/0x300 [ 732.940659][T28270] check_noncircular+0x12e/0x150 [ 732.940684][T28270] __lock_acquire+0x15a5/0x2cf0 [ 732.940705][T28270] ? kasan_save_track+0x4f/0x80 [ 732.940722][T28270] ? __kasan_slab_free+0x5c/0x80 [ 732.940738][T28270] ? kfree+0x1c1/0x630 [ 732.940751][T28270] ? tomoyo_path_number_perm+0x501/0x630 [ 732.940770][T28270] ? security_file_ioctl+0xc3/0x2a0 [ 732.940787][T28270] ? __se_sys_ioctl+0x47/0x170 [ 732.940804][T28270] ? do_syscall_64+0x14d/0xf80 [ 732.940827][T28270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.940847][T28270] lock_acquire+0xf0/0x2e0 [ 732.940865][T28270] ? nr_rt_ioctl+0x40c/0xf90 [ 732.940881][T28270] ? nr_rt_ioctl+0x821/0xf90 [ 732.940899][T28270] ? nr_rt_ioctl+0x40c/0xf90 [ 732.940915][T28270] _raw_spin_lock_bh+0x36/0x50 [ 732.940935][T28270] ? nr_rt_ioctl+0x40c/0xf90 [ 732.940951][T28270] nr_rt_ioctl+0x40c/0xf90 [ 732.940977][T28270] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 732.940998][T28270] ? apparmor_capable+0x126/0x170 [ 732.941019][T28270] ? capable+0x88/0xe0 [ 732.941038][T28270] ? nr_ioctl+0x1b1/0x3b0 [ 732.941054][T28270] sock_do_ioctl+0x101/0x320 [ 732.941078][T28270] ? __pfx_sock_do_ioctl+0x10/0x10 [ 732.941106][T28270] sock_ioctl+0x5c6/0x7f0 [ 732.941129][T28270] ? __pfx_sock_ioctl+0x10/0x10 [ 732.941151][T28270] ? __fget_files+0x2a/0x420 [ 732.941173][T28270] ? __fget_files+0x3a0/0x420 [ 732.941195][T28270] ? __fget_files+0x2a/0x420 [ 732.941217][T28270] ? bpf_lsm_file_ioctl+0x9/0x20 [ 732.941239][T28270] ? __pfx_sock_ioctl+0x10/0x10 [ 732.941260][T28270] __se_sys_ioctl+0xfc/0x170 [ 732.941278][T28270] do_syscall_64+0x14d/0xf80 [ 732.941300][T28270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.941315][T28270] ? clear_bhb_loop+0x40/0x90 [ 732.941332][T28270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.941347][T28270] RIP: 0033:0x7f24e519c799 [ 732.941362][T28270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.941377][T28270] RSP: 002b:00007f24e60c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.941392][T28270] RAX: ffffffffffffffda RBX: 00007f24e5415fa0 RCX: 00007f24e519c799 [ 732.941403][T28270] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 732.941412][T28270] RBP: 00007f24e5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 732.941422][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.941431][T28270] R13: 00007f24e5416038 R14: 00007f24e5415fa0 R15: 00007ffcedfefa38 [ 732.941448][T28270] [ 734.783870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.823835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog