last executing test programs: 15.353197154s ago: executing program 4 (id=17216): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 14.332456203s ago: executing program 3 (id=17219): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4024}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 13.856237819s ago: executing program 3 (id=17222): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 13.659198725s ago: executing program 3 (id=17224): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x20044080) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076000d0b00401e000000000003000000000000000800010001"], 0x20}}, 0x0) socket(0x2, 0x80805, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 13.467191276s ago: executing program 3 (id=17225): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x18, 0x6, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0}], 0x1, 0x0, 0x0, 0x0) 12.103458887s ago: executing program 2 (id=17232): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 11.4840184s ago: executing program 1 (id=17233): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 9.801898118s ago: executing program 2 (id=17235): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 9.322456776s ago: executing program 2 (id=17238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 9.101144397s ago: executing program 2 (id=17239): r0 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xf5, @mcast1, 0x1}, @in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}], 0x38) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x96, 0xff9, 0x8}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0102, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000016c0)=[{0x6, 0xfc}]}) write$ppp(r1, &(0x7f00000005c0)='6\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) 8.929174698s ago: executing program 2 (id=17241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 8.641933061s ago: executing program 2 (id=17243): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7.103521448s ago: executing program 4 (id=17246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.956605541s ago: executing program 4 (id=17247): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) close(0x4) 5.53128802s ago: executing program 1 (id=17252): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x48}, {r2, 0x808}, {r0, 0x224}], 0x3, 0x0, 0x0, 0x0) 5.386767905s ago: executing program 0 (id=17254): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet_mptcp(0x2, 0x1, 0x106) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 5.355029286s ago: executing program 1 (id=17255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) 5.214415523s ago: executing program 1 (id=17256): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f0000002000)) 4.883951995s ago: executing program 3 (id=17257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.708722009s ago: executing program 3 (id=17258): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet(0x2, 0x2, 0x1) 4.601861697s ago: executing program 0 (id=17259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0xc0841, &(0x7f00000001c0)={0x11, 0x1c, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.130975654s ago: executing program 1 (id=17260): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 4.124032062s ago: executing program 0 (id=17261): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 3.943841287s ago: executing program 0 (id=17262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x520}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 3.089711552s ago: executing program 1 (id=17263): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000060c11afb0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x4e22, 0x0, 0x8}}}}}, 0x0) 1.306542717s ago: executing program 0 (id=17264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 1.121407939s ago: executing program 4 (id=17265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xbd1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0x9, 0x200, 0x3000000, 0x80000002, 0x5, 0x10, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x8804) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 703.941285ms ago: executing program 4 (id=17266): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) 558.0014ms ago: executing program 4 (id=17267): connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x4, 0x1}) syz_genetlink_get_family_id$mptcp(0x0, r2) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) sendto$inet(r1, &(0x7f0000000540)="0eb1f097c074acc353accbee995228f4f7f93f2344bb305df373f17800805fbf6d0391e360db2ddcc1d7049836f9061940bd5ccf68fdeafa8ad2d20315acb49d82c3f2f58497562fca13bc0d4918ae28b8722be46186882849a396073bd46623c46c491a3c8c2c1743d809f4a5", 0x6d, 0x1000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 0s ago: executing program 0 (id=17268): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, 0x0, 0xfffffe5a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) kernel console output (not intermixed with test programs): 0][ T4249] netlink: 'syz.2.14262': attribute type 39 has an invalid length. [ 577.007161][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.030704][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.066123][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14264'. [ 577.323421][ T4274] wg1 speed is unknown, defaulting to 1000 [ 578.002634][ T4298] wg1 speed is unknown, defaulting to 1000 [ 578.264592][ T4274] lo speed is unknown, defaulting to 1000 [ 578.809097][ T4304] netlink: 'syz.2.14283': attribute type 2 has an invalid length. [ 579.342140][ T4298] lo speed is unknown, defaulting to 1000 [ 579.852003][ T4317] Set syz1 is full, maxelem 65536 reached [ 580.280780][ T4345] syzkaller1: entered promiscuous mode [ 580.290173][ T4345] syzkaller1: entered allmulticast mode [ 580.342176][ T4349] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14305'. [ 582.583409][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14339'. [ 582.761662][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14340'. [ 582.792692][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14342'. [ 582.908409][ T4431] bond2: option ad_actor_sys_prio: invalid value (0) [ 582.920191][ T4431] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 582.949614][ T4431] bond2 (unregistering): Released all slaves [ 583.173562][ T4438] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.14345'. [ 583.747197][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14356'. [ 584.923121][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14386'. [ 585.120859][ T4547] syzkaller1: entered promiscuous mode [ 585.130758][ T4547] syzkaller1: entered allmulticast mode [ 585.999136][ T4599] netlink: 'syz.2.14416': attribute type 12 has an invalid length. [ 586.008505][ T4599] netlink: 'syz.2.14416': attribute type 29 has an invalid length. [ 586.017649][ T4599] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14416'. [ 586.029148][ T4599] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14416'. [ 586.296058][ T4611] netlink: 'syz.2.14421': attribute type 21 has an invalid length. [ 586.308609][ T4611] netlink: 'syz.2.14421': attribute type 22 has an invalid length. [ 586.317000][ T4611] netlink: 'syz.2.14421': attribute type 23 has an invalid length. [ 586.345528][ T4611] netlink: 'syz.2.14421': attribute type 25 has an invalid length. [ 586.355708][ T4611] netlink: 'syz.2.14421': attribute type 26 has an invalid length. [ 586.376059][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14421'. [ 587.188347][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14449'. [ 587.492184][ T4689] netlink: 'syz.3.14455': attribute type 1 has an invalid length. [ 587.605391][ T4689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.616972][ T4689] bond4: (slave bond5): making interface the new active one [ 587.647161][ T4689] bond4: (slave bond5): Enslaving as an active interface with an up link [ 587.907622][ T4714] bridge0: entered allmulticast mode [ 587.923028][ T4714] bridge0: left allmulticast mode [ 588.342623][ T4747] netlink: 'syz.1.14482': attribute type 7 has an invalid length. [ 588.363005][ T4747] netlink: 'syz.1.14482': attribute type 8 has an invalid length. [ 588.379641][ T4747] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.14482'. [ 588.611226][ T4762] syzkaller1: entered promiscuous mode [ 588.619802][ T4762] syzkaller1: entered allmulticast mode [ 588.855518][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14498'. [ 588.893533][ T1111] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.905028][ T1111] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.921523][ T1111] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.942758][ T1111] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.678811][ T4841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.228336][ T4873] bridge0: port 3(syz_tun) entered blocking state [ 590.234986][ T4873] bridge0: port 3(syz_tun) entered forwarding state [ 590.247428][ T4873] 8021q: adding VLAN 0 to HW filter on device .` [ 590.257562][ T4873] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.294444][ T4873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.315830][ T4884] syzkaller1: left promiscuous mode [ 590.327028][ T4884] syzkaller1: left allmulticast mode [ 590.435312][ T4893] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 590.440198][ T4896] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14542'. [ 590.457284][ T4894] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.14544'. [ 590.498725][ T4896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.524001][ T4896] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.564787][ T4896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.584546][ T5923] lo speed is unknown, defaulting to 1000 [ 590.592202][ T5923] sqz0: Port: 1 Link ACTIVE [ 590.610282][ T5923] lo speed is unknown, defaulting to 1000 [ 591.039499][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14558'. [ 591.714070][ T4965] validate_nla: 8 callbacks suppressed [ 591.714089][ T4965] netlink: 'syz.4.14572': attribute type 13 has an invalid length. [ 591.744264][ T1165] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.755249][ T1165] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.766196][ T1165] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.775922][ T4965] netlink: 'syz.4.14572': attribute type 13 has an invalid length. [ 591.785972][ T1165] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.026196][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14579'. [ 592.705184][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14591'. [ 593.165402][ T5034] syzkaller1: entered promiscuous mode [ 593.171043][ T5034] syzkaller1: entered allmulticast mode [ 593.569839][ T5046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14605'. [ 594.166917][ T5060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14613'. [ 594.186266][ T5062] netlink: 'syz.1.14614': attribute type 29 has an invalid length. [ 594.200268][ T5060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14613'. [ 594.220860][ T5062] netlink: 'syz.1.14614': attribute type 29 has an invalid length. [ 594.246470][ T5062] netlink: 596 bytes leftover after parsing attributes in process `syz.1.14614'. [ 594.394587][ T5071] IPVS: Scheduler module ip_vs_ not found [ 594.408460][ T5075] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.14620'. [ 594.424365][ T5078] IPVS: length: 24 != 36888 [ 594.588964][ T5085] netlink: 876 bytes leftover after parsing attributes in process `syz.1.14623'. [ 594.611244][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14623'. [ 595.154420][ T5111] bond5: (slave ªªªªªª5gæ¹Q[Ô): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 595.168609][ T5111] A link change request failed with some changes committed already. Interface ªªªªªª5gæ¹Q[Ô may have been left with an inconsistent configuration, please check. [ 595.281958][ T5117] netlink: 'syz.3.14637': attribute type 1 has an invalid length. [ 595.344509][ T5117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 595.462324][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 595.506621][ T5117] bond6: (slave batadv2): making interface the new active one [ 595.538288][ T5117] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 596.019052][ T5154] netlink: 'syz.1.14651': attribute type 22 has an invalid length. [ 596.522276][ T5187] netlink: 'syz.4.14664': attribute type 1 has an invalid length. [ 596.540391][ T5187] netlink: 'syz.4.14664': attribute type 6 has an invalid length. [ 596.558573][ T5187] netlink: 'syz.4.14664': attribute type 3 has an invalid length. [ 597.417636][ T5227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.656269][ T5237] ip6gre2: entered promiscuous mode [ 597.696120][ T5237] ip6gre2: entered allmulticast mode [ 597.696213][ T5244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 597.730350][ T5245] netlink: 'syz.3.14688': attribute type 4 has an invalid length. [ 597.739052][ T1111] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 597.761567][ T1111] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 597.769463][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 597.782660][ T5241] netlink: 'syz.3.14688': attribute type 4 has an invalid length. [ 597.910685][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 598.320774][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 598.419060][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14704'. [ 598.439042][ T5280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14704'. [ 598.462315][ T5280] netlink: 'syz.3.14704': attribute type 6 has an invalid length. [ 598.474377][ T5280] netlink: 'syz.3.14704': attribute type 5 has an invalid length. [ 598.493644][ T1111] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.502272][ T1111] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.511085][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14704'. [ 598.520937][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.521256][ T5280] netlink: 'syz.3.14704': attribute type 6 has an invalid length. [ 598.531803][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.537691][ T5280] netlink: 'syz.3.14704': attribute type 5 has an invalid length. [ 598.744145][ T5288] __nla_validate_parse: 1 callbacks suppressed [ 598.744164][ T5288] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.14709'. [ 598.786117][ T5288] netlink: Unknown conntrack attr (type=2304, max=9) [ 598.801673][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14711'. [ 598.830293][ T5292] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14711'. [ 598.849667][ T5292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14711'. [ 598.902912][ T5292] vlan7: entered allmulticast mode [ 598.927517][ T5292] dummy0: entered allmulticast mode [ 599.244183][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14722'. [ 599.267510][ T5317] netlink: 'syz.2.14722': attribute type 30 has an invalid length. [ 599.352477][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14722'. [ 599.363053][ T5317] netlink: 'syz.2.14722': attribute type 30 has an invalid length. [ 600.096539][ T5351] netlink: 'syz.3.14735': attribute type 15 has an invalid length. [ 600.105900][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14735'. [ 600.138251][ T36] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 600.140405][ T5351] netlink: 'syz.3.14735': attribute type 15 has an invalid length. [ 600.154777][ T36] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 600.164640][ T36] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 600.175218][ T36] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 600.198071][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14735'. [ 600.702110][ T1111] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 600.768673][ T5389] syzkaller1: entered promiscuous mode [ 600.775721][ T5389] syzkaller1: entered allmulticast mode [ 601.416084][ T5425] atomic_op ffff88802a179998 conn xmit_atomic 0000000000000000 [ 601.530192][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 601.599044][ T5440] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14766'. [ 601.961082][ T5454] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14777'. [ 603.326141][ T5553] validate_nla: 2 callbacks suppressed [ 603.326161][ T5553] netlink: 'syz.2.14817': attribute type 19 has an invalid length. [ 603.354616][ T5553] netlink: 'syz.2.14817': attribute type 19 has an invalid length. [ 604.005411][ T5604] __nla_validate_parse: 4 callbacks suppressed [ 604.005429][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14835'. [ 604.025185][ T5604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14835'. [ 604.051331][ T5604] geneve3: entered promiscuous mode [ 604.056774][ T5604] geneve3: entered allmulticast mode [ 604.068111][ T4893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.077481][ T4893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.102675][ T4893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.119444][ T4893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.198271][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.419920][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14849'. [ 604.633399][ T5650] netlink: 41 bytes leftover after parsing attributes in process `syz.2.14855'. [ 604.660688][ T5650] netlink: 140 bytes leftover after parsing attributes in process `syz.2.14855'. [ 604.676944][ T5650] netlink: 41 bytes leftover after parsing attributes in process `syz.2.14855'. [ 604.804427][ T5662] netlink: 'syz.2.14861': attribute type 9 has an invalid length. [ 604.813604][ T5662] netlink: 'syz.2.14861': attribute type 11 has an invalid length. [ 604.823085][ T5662] netlink: 'syz.2.14861': attribute type 12 has an invalid length. [ 604.832436][ T5662] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.14861'. [ 604.858915][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14861'. [ 605.479346][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14882'. [ 605.524909][ T5709] netlink: 'syz.2.14882': attribute type 2 has an invalid length. [ 605.550728][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14882'. [ 605.895553][ T5827] block nbd3: Receive control failed (result -107) [ 606.718500][ T5784] atomic_op ffff88806ab77998 conn xmit_atomic 0000000000000000 [ 607.016371][ T5824] netlink: 'syz.1.14928': attribute type 1 has an invalid length. [ 607.087474][ T5824] bond6: entered promiscuous mode [ 607.097806][ T5824] 8021q: adding VLAN 0 to HW filter on device bond6 [ 607.157171][ T5831] bond6: (slave bridge6): making interface the new active one [ 607.165770][ T5831] bridge6: entered promiscuous mode [ 607.173811][ T5831] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 607.290352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.292046][ T30] audit: type=1800 audit(1770957992.052:10): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14933" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=14959 res=0 errno=0 [ 607.298831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.579483][ T5906] netlink: 'syz.4.14944': attribute type 5 has an invalid length. [ 608.035388][ T5944] netlink: 'syz.3.14958': attribute type 13 has an invalid length. [ 608.384853][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.055404][ T5993] __nla_validate_parse: 3 callbacks suppressed [ 609.055423][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14976'. [ 609.060256][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.241175][ T1111] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.253461][ T1111] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 609.263000][ T1111] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 609.272990][ T1111] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.281913][ T1111] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.290880][ T1111] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 609.299235][ T1111] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 609.312176][ T1111] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.340322][ T1111] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.380756][ T1111] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 609.389591][ T1111] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 609.440417][ T1111] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.448850][ T1111] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.478244][ T1111] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 609.496381][ T1111] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 609.515873][ T1111] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.526279][ T6012] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14980'. [ 609.913829][ T6031] netlink: 'syz.3.14991': attribute type 4 has an invalid length. [ 611.356650][ T6096] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.15017'. [ 611.547314][ T6100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15019'. [ 611.878984][ T6111] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 612.285820][ T6127] delete_channel: no stack [ 613.509202][ T6189] batadv_slave_0: entered promiscuous mode [ 613.530145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.538414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.559239][ T6189] batadv2: entered promiscuous mode [ 613.698433][ T6188] batadv_slave_0: left promiscuous mode [ 614.022541][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15064'. [ 615.080507][ T6247] syzkaller1: entered promiscuous mode [ 615.103718][ T6247] syzkaller1: entered allmulticast mode [ 615.308411][ T6259] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 615.477553][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15089'. [ 615.519848][ T6268] xfrm2: entered promiscuous mode [ 615.533471][ T6268] xfrm2: entered allmulticast mode [ 615.542110][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15089'. [ 615.655967][ T6282] netlink: 240 bytes leftover after parsing attributes in process `syz.1.15092'. [ 616.231807][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15111'. [ 616.244706][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15111'. [ 616.501879][ T6334] netlink: 'syz.1.15118': attribute type 18 has an invalid length. [ 616.614899][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15119'. [ 616.624694][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15119'. [ 616.701306][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15118'. [ 616.712823][ T6334] netlink: 'syz.1.15118': attribute type 18 has an invalid length. [ 616.726226][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15118'. [ 617.076261][ T6348] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 617.718544][ T6379] syzkaller1: entered promiscuous mode [ 617.727135][ T6379] syzkaller1: entered allmulticast mode [ 618.409792][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15145'. [ 618.564469][ T6274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.598005][ T6467] xt_cgroup: invalid path, errno=-2 [ 620.696643][ T6468] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 620.734201][ T6468] bond7 (unregistering): Released all slaves [ 620.852154][ T6471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 620.863114][ T6471] syzkaller1: linktype set to 260 [ 620.998170][ T6487] __nla_validate_parse: 3 callbacks suppressed [ 620.998188][ T6487] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.15182'. [ 621.017705][ T6487] netlink: Unknown conntrack attr (0) [ 622.111668][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15203'. [ 622.165167][ T6540] netlink: 'syz.1.15204': attribute type 1 has an invalid length. [ 622.251369][ T6540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.293313][ T6545] bond7: (slave geneve3): making interface the new active one [ 622.325979][ T6545] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 623.321731][ T6607] netlink: 'syz.4.15232': attribute type 9 has an invalid length. [ 623.329798][ T6607] netlink: 'syz.4.15232': attribute type 11 has an invalid length. [ 623.339102][ T6607] netlink: 'syz.4.15232': attribute type 12 has an invalid length. [ 623.348519][ T6607] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.15232'. [ 623.358391][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15232'. [ 623.647211][ T6626] netlink: 112 bytes leftover after parsing attributes in process `syz.1.15241'. [ 623.797808][ T6635] netlink: 100 bytes leftover after parsing attributes in process `syz.4.15245'. [ 623.817247][ T6637] dvmrp0: left allmulticast mode [ 623.831585][ T6637] dvmrp6: left allmulticast mode [ 623.903196][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15249'. [ 623.927436][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15249'. [ 623.949943][ T6642] netlink: 'syz.1.15249': attribute type 6 has an invalid length. [ 623.973876][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15249'. [ 623.986990][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15249'. [ 624.003469][ T6642] netlink: 'syz.1.15249': attribute type 6 has an invalid length. [ 624.124974][ T6654] netlink: 'syz.2.15255': attribute type 13 has an invalid length. [ 625.050224][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 625.349508][ T6723] pim6reg: entered allmulticast mode [ 625.432999][ T6724] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 625.477995][ T6724] bond8 (unregistering): Released all slaves [ 625.569549][ T6723] bridge0: entered allmulticast mode [ 625.578205][ T6727] pim6reg: left allmulticast mode [ 625.587641][ T6727] bridge0: left allmulticast mode [ 626.241130][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15300'. [ 626.300355][ T6765] netlink: 'syz.2.15300': attribute type 7 has an invalid length. [ 626.412706][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15300'. [ 626.429332][ T6765] netlink: 'syz.2.15300': attribute type 7 has an invalid length. [ 627.851965][ T6848] netlink: 'syz.0.15333': attribute type 2 has an invalid length. [ 627.860154][ T6848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15333'. [ 627.943363][ T6852] netlink: 'syz.0.15335': attribute type 1 has an invalid length. [ 627.968459][ T6852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15335'. [ 628.509064][ T6885] wg1 speed is unknown, defaulting to 1000 [ 628.569467][ T6889] netlink: 'syz.4.15351': attribute type 1 has an invalid length. [ 628.669554][ T6888] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 629.065969][ T6885] lo speed is unknown, defaulting to 1000 [ 629.327881][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15366'. [ 629.821173][ T6951] netlink: 27 bytes leftover after parsing attributes in process `syz.4.15376'. [ 630.218694][ T6972] netlink: 'syz.1.15385': attribute type 5 has an invalid length. [ 630.325131][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15387'. [ 630.501008][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15392'. [ 630.510968][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15392'. [ 630.521854][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15392'. [ 631.012572][ T7007] netlink: 'syz.4.15401': attribute type 13 has an invalid length. [ 631.438437][ T7022] __nla_validate_parse: 4 callbacks suppressed [ 631.438456][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15406'. [ 631.589033][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15409'. [ 631.632489][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15409'. [ 631.663412][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15409'. [ 631.775771][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15409'. [ 631.790756][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15409'. [ 631.820237][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15409'. [ 632.233289][ T7056] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.15420'. [ 632.423593][ T7071] syzkaller0: entered allmulticast mode [ 632.441813][ T7071] syzkaller0 (unregistering): left allmulticast mode [ 632.617607][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15432'. [ 632.895460][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15439'. [ 633.188635][ T7114] wg1 speed is unknown, defaulting to 1000 [ 633.402567][ T7123] netlink: 'syz.3.15449': attribute type 10 has an invalid length. [ 633.467910][ T7124] netlink: 'syz.3.15449': attribute type 10 has an invalid length. [ 633.565390][ T7123] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 633.575625][ T7123] team0: Failed to send options change via netlink (err -105) [ 633.583798][ T7123] team0: Port device dummy0 added [ 633.591053][ T7124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 633.616385][ T7124] team0: Failed to send options change via netlink (err -105) [ 633.625119][ T7124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 633.635077][ T7124] team0: Port device dummy0 removed [ 633.657122][ T7124] dummy0: entered promiscuous mode [ 633.925446][ T7138] pim6reg1: entered promiscuous mode [ 633.947505][ T7138] pim6reg1: entered allmulticast mode [ 634.237026][ T7114] lo speed is unknown, defaulting to 1000 [ 634.387559][ T7147] syzkaller1: entered promiscuous mode [ 634.432411][ T7147] syzkaller1: entered allmulticast mode [ 636.092259][ T7192] lo: Caught tx_queue_len zero misconfig [ 636.369095][ T7200] wg1 speed is unknown, defaulting to 1000 [ 637.576983][ T7221] __nla_validate_parse: 5 callbacks suppressed [ 637.577003][ T7221] netlink: 116 bytes leftover after parsing attributes in process `syz.3.15488'. [ 637.600174][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15488'. [ 637.788468][ T7200] lo speed is unknown, defaulting to 1000 [ 638.486085][ T7246] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.501119][ T7246] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.635855][ T7246] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.650279][ T7246] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.748866][ T7248] netlink: 'syz.2.15499': attribute type 13 has an invalid length. [ 638.787695][ T7246] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.798262][ T7246] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.886949][ T7246] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.899198][ T7246] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.061882][ T7257] netlink: 'syz.1.15501': attribute type 4 has an invalid length. [ 639.118274][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.136141][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.228195][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.261841][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.315193][ T58] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.348691][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.424430][ T7275] netlink: 'syz.1.15506': attribute type 2 has an invalid length. [ 639.517393][ T1165] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.534491][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.654202][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15508'. [ 639.665869][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15508'. [ 639.691352][ T7276] wg1 speed is unknown, defaulting to 1000 [ 639.761173][ T7284] netlink: 'syz.3.15510': attribute type 13 has an invalid length. [ 640.036289][ T7290] syzkaller1: entered promiscuous mode [ 640.050460][ T7290] syzkaller1: entered allmulticast mode [ 640.726840][ T7306] netlink: 'syz.1.15515': attribute type 8 has an invalid length. [ 640.767251][ T7306] netlink: 'syz.1.15515': attribute type 9 has an invalid length. [ 640.795818][ T7306] netlink: 'syz.1.15515': attribute type 10 has an invalid length. [ 640.813011][ T7306] netlink: 'syz.1.15515': attribute type 11 has an invalid length. [ 640.825069][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15515'. [ 640.871515][ T7308] policy can only be matched on NF_INET_PRE_ROUTING [ 640.871536][ T7308] unable to load match [ 641.106207][ T7316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 641.548101][ T7276] lo speed is unknown, defaulting to 1000 [ 641.727567][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15529'. [ 642.043078][ T7362] netlink: 'syz.1.15536': attribute type 26 has an invalid length. [ 642.295182][ T7367] netlink: 'syz.1.15538': attribute type 1 has an invalid length. [ 642.356140][ T7368] gretap2: entered allmulticast mode [ 642.824709][ T7381] lo: Caught tx_queue_len zero misconfig [ 642.962910][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15545'. [ 643.019032][ T7386] wg1 speed is unknown, defaulting to 1000 [ 644.964284][ T7386] lo speed is unknown, defaulting to 1000 [ 645.123861][ T7420] netlink: 9 bytes leftover after parsing attributes in process `syz.3.15558'. [ 645.138312][ T7420] gretap0: entered promiscuous mode [ 645.168793][ T7420] gretap0: left promiscuous mode [ 645.201437][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.251178][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.277376][ T7420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.486704][ T7428] validate_nla: 1 callbacks suppressed [ 645.486724][ T7428] netlink: 'syz.1.15561': attribute type 1 has an invalid length. [ 645.599732][ T7432] bond9: (slave bridge7): making interface the new active one [ 645.608516][ T7432] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 645.619665][ T7422] wg1 speed is unknown, defaulting to 1000 [ 645.787269][ T7439] netlink: 'syz.1.15564': attribute type 4 has an invalid length. [ 645.816573][ T7439] netlink: 'syz.1.15564': attribute type 4 has an invalid length. [ 647.339303][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15571'. [ 647.421963][ T7422] lo speed is unknown, defaulting to 1000 [ 648.073962][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15579'. [ 648.415059][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15586'. [ 648.477687][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15586'. [ 651.325465][ T7554] netlink: 'syz.0.15608': attribute type 1 has an invalid length. [ 651.357771][ T7551] wg1 speed is unknown, defaulting to 1000 [ 651.760951][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15626'. [ 651.794403][ T7573] netlink: 'syz.4.15616': attribute type 10 has an invalid length. [ 651.854445][ T7573] team0: Failed to send options change via netlink (err -105) [ 651.882983][ T7573] team0: Port device dummy0 added [ 651.883462][ T7576] netlink: 'syz.4.15616': attribute type 10 has an invalid length. [ 651.944253][ T7576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 652.002539][ T7576] team0: Failed to send options change via netlink (err -105) [ 652.081072][ T7576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 652.110895][ T7576] team0: Port device dummy0 removed [ 652.132240][ T7576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 652.201915][ T7551] lo speed is unknown, defaulting to 1000 [ 652.383395][ T7592] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.401618][ T7592] netlink: 'syz.1.15623': attribute type 3 has an invalid length. [ 652.551303][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15627'. [ 652.570216][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15627'. [ 652.579704][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15627'. [ 652.610283][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15627'. [ 652.983606][ T7607] veth0: entered promiscuous mode [ 653.011293][ T7607] bond0: entered promiscuous mode [ 653.016367][ T7607] bond_slave_0: entered promiscuous mode [ 653.041286][ T7606] bond0: left promiscuous mode [ 653.049753][ T7606] bond_slave_0: left promiscuous mode [ 653.060995][ T7606] veth0: left promiscuous mode [ 653.157204][ T7614] netlink: 'syz.1.15634': attribute type 1 has an invalid length. [ 653.178186][ T7611] wg1 speed is unknown, defaulting to 1000 [ 653.294948][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15634'. [ 653.332835][ T7614] 8021q: adding VLAN 0 to HW filter on device bond10 [ 653.436149][ T7616] bond10: (slave gretap3): making interface the new active one [ 653.453201][ T7616] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 653.525337][ T7618] bond10 (unregistering): (slave gretap3): Releasing active interface [ 653.573183][ T7618] bond10 (unregistering): Released all slaves [ 653.825589][ T7632] netlink: 'syz.1.15640': attribute type 1 has an invalid length. [ 653.966022][ T7632] bond10: entered promiscuous mode [ 653.994186][ T7632] 8021q: adding VLAN 0 to HW filter on device bond10 [ 654.035212][ T7639] 8021q: adding VLAN 0 to HW filter on device bond10 [ 654.083226][ T7639] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 654.114755][ T7639] bond10: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 654.136917][ T7639] bond10: (slave vcan0): making interface the new active one [ 654.144993][ T7639] vcan0: entered promiscuous mode [ 654.152885][ T7639] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 654.163331][ T7611] lo speed is unknown, defaulting to 1000 [ 654.185124][ T7641] netlink: 'syz.4.15642': attribute type 5 has an invalid length. [ 654.415307][ T7634] wg1 speed is unknown, defaulting to 1000 [ 654.678430][ T7658] batadv_slave_1: entered promiscuous mode [ 654.695386][ T7657] batadv_slave_1: left promiscuous mode [ 655.398179][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15655'. [ 656.183593][ T7634] lo speed is unknown, defaulting to 1000 [ 656.410639][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 656.835898][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15665'. [ 658.238397][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 658.452234][ T7748] netlink: 192 bytes leftover after parsing attributes in process `syz.1.15682'. [ 658.464383][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15682'. [ 658.576235][ T7752] wg1 speed is unknown, defaulting to 1000 [ 658.952760][ T7735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.127344][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15689'. [ 659.163805][ T7767] netlink: 'syz.0.15689': attribute type 5 has an invalid length. [ 659.195081][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15689'. [ 659.387270][ T7767] geneve3: entered promiscuous mode [ 659.396881][ T7767] geneve3: entered allmulticast mode [ 659.417528][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 40037 - 0 [ 659.434828][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 40037 - 0 [ 659.443645][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 40037 - 0 [ 659.458822][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 40037 - 0 [ 659.602982][ T7777] netlink: 'syz.0.15693': attribute type 1 has an invalid length. [ 659.752688][ T7777] bond2: entered promiscuous mode [ 659.778250][ T7777] bond2: entered allmulticast mode [ 659.785088][ T7777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 659.892924][ T7780] erspan1: entered allmulticast mode [ 659.933224][ T7780] bond2: (slave erspan1): making interface the new active one [ 659.951763][ T7780] erspan1: entered promiscuous mode [ 659.983073][ T7780] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 660.316048][ T7752] lo speed is unknown, defaulting to 1000 [ 661.124873][ T7822] wg1 speed is unknown, defaulting to 1000 [ 664.003773][ T7822] lo speed is unknown, defaulting to 1000 [ 664.126942][ T7864] netlink: 'syz.2.15718': attribute type 1 has an invalid length. [ 664.191410][ T7864] 8021q: adding VLAN 0 to HW filter on device bond10 [ 664.253583][ T7868] bond10: (slave gretap3): making interface the new active one [ 664.271534][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15718'. [ 664.289608][ T7868] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 664.321734][ T7864] bond10 (unregistering): (slave gretap3): Releasing active interface [ 664.351859][ T7864] bond10 (unregistering): Released all slaves [ 664.415417][ T7875] netlink: 'syz.4.15722': attribute type 1 has an invalid length. [ 664.514462][ T7877] bond4: (slave bridge12): making interface the new active one [ 664.545185][ T7877] bond4: (slave bridge12): Enslaving as an active interface with an up link [ 664.632950][ T1111] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.663282][ T1111] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.689729][ T1111] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.716581][ T1111] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 664.852003][ T7883] netlink: 192 bytes leftover after parsing attributes in process `syz.2.15725'. [ 664.982799][ T7889] wg1 speed is unknown, defaulting to 1000 [ 664.993644][ T7893] pim6reg1: entered allmulticast mode [ 665.889799][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15732'. [ 666.112369][ T7911] netlink: 'syz.0.15734': attribute type 1 has an invalid length. [ 666.222705][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15734'. [ 666.279340][ T7911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.329129][ T7912] bond3: (slave gretap4): making interface the new active one [ 666.341792][ T7912] bond3: (slave gretap4): Enslaving as an active interface with an up link [ 666.369444][ T7916] bond3 (unregistering): (slave gretap4): Releasing active interface [ 666.387299][ T7916] bond3 (unregistering): Released all slaves [ 666.416950][ T7918] tipc: Disabling bearer [ 666.488659][ T7889] lo speed is unknown, defaulting to 1000 [ 666.791309][ T7929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 667.097710][ T7934] netlink: 1315 bytes leftover after parsing attributes in process `syz.0.15743'. [ 668.300835][ T5995] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 668.970626][ T5995] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 669.422132][ T7998] bridge0: port 1(batadv0) entered blocking state [ 669.443549][ T7998] bridge0: port 1(batadv0) entered disabled state [ 669.471534][ T7998] batadv0: entered allmulticast mode [ 669.528484][ T7998] batadv0: entered promiscuous mode [ 669.558448][ T7999] batadv0: left allmulticast mode [ 669.599728][ T7999] batadv0: left promiscuous mode [ 669.618031][ T7999] bridge0: port 1(batadv0) entered disabled state [ 669.670347][ T12] batman_adv: batadv0: IGMP Querier appeared [ 669.676363][ T12] batman_adv: batadv0: MLD Querier appeared [ 669.745937][ T8004] syzkaller1: entered promiscuous mode [ 669.752618][ T8004] syzkaller1: entered allmulticast mode [ 669.891803][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15773'. [ 669.902025][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15773'. [ 670.059047][ T8020] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15778'. [ 670.256631][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.381164][ T8043] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.15787'. [ 670.526818][ T8052] bridge0: port 3(syz_tun) entered disabled state [ 670.568466][ T8049] pim6reg1: entered promiscuous mode [ 670.574786][ T8049] pim6reg1: entered allmulticast mode [ 670.788967][ T8060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15794'. [ 670.894298][ T8066] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 670.910960][ T8066] team0 (unregistering): Port device team_slave_0 removed [ 670.919399][ T8066] team0 (unregistering): Failed to send options change via netlink (err -105) [ 670.929782][ T8066] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 670.940979][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15796'. [ 670.952494][ T8073] netlink: 'syz.1.15799': attribute type 13 has an invalid length. [ 670.953400][ T8066] team0 (unregistering): Port device team_slave_1 removed [ 670.969107][ T8073] netlink: 'syz.1.15799': attribute type 17 has an invalid length. [ 671.097994][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.124692][ T8073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.166015][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 671.193760][ T12] bond0: now running without any active interface! [ 671.741887][ T8109] delete_channel: no stack [ 672.128854][ T8134] pim6reg1: entered promiscuous mode [ 672.134517][ T8134] pim6reg1: entered allmulticast mode [ 672.341758][ T8143] netlink: 7920 bytes leftover after parsing attributes in process `syz.3.15826'. [ 672.821081][ T8168] ªªªªªª: renamed from wg2 [ 672.959495][ T8176] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15840'. [ 673.096078][ T8180] netlink: 165 bytes leftover after parsing attributes in process `syz.2.15843'. [ 673.115338][ T8180] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15843'. [ 674.474480][ T8232] syzkaller0: entered promiscuous mode [ 674.490505][ T8232] syzkaller0: entered allmulticast mode [ 676.389287][ T8240] lo: Caught tx_queue_len zero misconfig [ 677.067756][ T8280] vlan2: entered allmulticast mode [ 677.074010][ T8280] bridge0: port 5(vlan2) entered blocking state [ 677.092031][ T8280] bridge0: port 5(vlan2) entered disabled state [ 677.105200][ T8280] vlan2: entered promiscuous mode [ 677.434429][ T8297] wg1 speed is unknown, defaulting to 1000 [ 677.546722][ T8308] netlink: 71 bytes leftover after parsing attributes in process `syz.0.15894'. [ 677.882713][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15897'. [ 678.195886][ T8297] lo speed is unknown, defaulting to 1000 [ 678.747967][ T8312] wg1 speed is unknown, defaulting to 1000 [ 678.942591][ T8346] sctp: [Deprecated]: syz.3.15908 (pid 8346) Use of int in maxseg socket option. [ 678.942591][ T8346] Use struct sctp_assoc_value instead [ 679.176724][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15913'. [ 679.288873][ T8312] lo speed is unknown, defaulting to 1000 [ 679.887858][ T8304] rdma_rxe: rxe_newlink: failed to add syz_tun [ 681.121719][ T8399] netlink: 'syz.3.15926': attribute type 1 has an invalid length. [ 681.129562][ T8399] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15926'. [ 681.228903][ T8399] netlink: 'syz.3.15926': attribute type 1 has an invalid length. [ 681.252577][ T8399] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15926'. [ 681.395968][ T8394] wg1 speed is unknown, defaulting to 1000 [ 681.928902][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15931'. [ 682.373225][ T8426] netlink: 'syz.0.15935': attribute type 10 has an invalid length. [ 682.393991][ T8426] dummy0: left promiscuous mode [ 682.483615][ T8426] `: Port device dummy0 added [ 682.601474][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15935'. [ 682.778556][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15938'. [ 682.808694][ T8435] netlink: 'syz.3.15938': attribute type 5 has an invalid length. [ 682.832354][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15938'. [ 682.922046][ T8435] geneve4: entered promiscuous mode [ 682.935716][ T8435] geneve4: entered allmulticast mode [ 682.980517][ T1111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 51856 - 0 [ 683.022044][ T1111] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 51856 - 0 [ 683.040582][ T1111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 51856 - 0 [ 683.059334][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15942'. [ 683.098359][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15942'. [ 683.126083][ T8443] netlink: 'syz.0.15942': attribute type 1 has an invalid length. [ 683.136639][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15944'. [ 683.178300][ T1111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 51856 - 0 [ 683.351549][ T8450] wg1 speed is unknown, defaulting to 1000 [ 683.383930][ T8394] lo speed is unknown, defaulting to 1000 [ 683.488376][ T8459] netem: change failed [ 683.605405][ T8461] GUP no longer grows the stack in syz.1.15949 (8461): 200000003000-20000000a000 (200000001000) [ 683.628726][ T8461] CPU: 1 UID: 0 PID: 8461 Comm: syz.1.15949 Not tainted syzkaller #0 PREEMPT(full) [ 683.628759][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 683.628778][ T8461] Call Trace: [ 683.628786][ T8461] [ 683.628795][ T8461] dump_stack_lvl+0xe8/0x150 [ 683.628827][ T8461] __get_user_pages+0x2453/0x29d0 [ 683.628874][ T8461] ? __gup_longterm_locked+0xc4e/0x1630 [ 683.628895][ T8461] ? down_read_killable+0x1bb/0x340 [ 683.628922][ T8461] ? try_get_folio+0xec/0x650 [ 683.628948][ T8461] __gup_longterm_locked+0xdcf/0x1630 [ 683.629000][ T8461] gup_fast_fallback+0x1d82/0x22e0 [ 683.629060][ T8461] ? __pfx_gup_fast_fallback+0x10/0x10 [ 683.629083][ T8461] ? is_valid_gup_args+0x11f/0x200 [ 683.629107][ T8461] ? get_user_pages_fast+0x4d/0xb0 [ 683.629131][ T8461] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 683.629160][ T8461] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 683.629187][ T8461] iov_iter_get_pages2+0x5e/0xa0 [ 683.629210][ T8461] __se_sys_vmsplice+0x7b3/0x1490 [ 683.629252][ T8461] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 683.629273][ T8461] ? __pfx_futex_wait+0x10/0x10 [ 683.629308][ T8461] ? lockdep_hardirqs_on+0x7a/0x110 [ 683.629393][ T8461] do_syscall_64+0x14d/0xf80 [ 683.629417][ T8461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.629435][ T8461] ? trace_irq_disable+0x37/0x100 [ 683.629455][ T8461] ? clear_bhb_loop+0x40/0x90 [ 683.629478][ T8461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.629500][ T8461] RIP: 0033:0x7fe8e739bf79 [ 683.629518][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.629548][ T8461] RSP: 002b:00007fe8e8303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 683.629575][ T8461] RAX: ffffffffffffffda RBX: 00007fe8e7615fa0 RCX: 00007fe8e739bf79 [ 683.629590][ T8461] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 683.629602][ T8461] RBP: 00007fe8e74327e0 R08: 0000000000000000 R09: 0000000000000000 [ 683.629615][ T8461] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 683.629626][ T8461] R13: 00007fe8e7616038 R14: 00007fe8e7615fa0 R15: 00007ffded900188 [ 683.629659][ T8461] [ 684.336624][ T8450] lo speed is unknown, defaulting to 1000 [ 684.534370][ T8486] IPv6: sit4: Disabled Multicast RS [ 684.871957][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15962'. [ 685.047008][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15962'. [ 685.093489][ T8494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.142867][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.186423][ T8497] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 685.812354][ T8537] geneve5: entered promiscuous mode [ 685.920619][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15977'. [ 686.028734][ T8549] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 686.190694][ T8545] wg1 speed is unknown, defaulting to 1000 [ 687.182546][ T8573] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 687.433219][ T8545] lo speed is unknown, defaulting to 1000 [ 687.885160][ T8593] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 688.038962][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16000'. [ 688.514936][ T8615] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.16004'. [ 688.930952][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16009'. [ 689.432806][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16017'. [ 689.793618][ T8650] block nbd4: server does not support multiple connections per device. [ 689.830883][ T8650] block nbd4: shutting down sockets [ 691.031986][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16031'. [ 691.153815][ T8682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 691.208738][ T8685] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 691.349827][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16039'. [ 691.394907][ T8699] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.16038'. [ 691.417812][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16039'. [ 691.651929][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16046'. [ 692.148129][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16057'. [ 692.473922][ T8756] xt_hashlimit: size too large, truncated to 1048576 [ 693.408479][ T8811] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 693.534248][ T8819] __nla_validate_parse: 4 callbacks suppressed [ 693.534268][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16089'. [ 694.456938][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16104'. [ 694.797090][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16109'. [ 694.853405][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16110'. [ 695.147643][ T8891] netlink: 'syz.0.16115': attribute type 13 has an invalid length. [ 695.174778][ T8894] xt_hashlimit: size too large, truncated to 1048576 [ 695.341480][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16117'. [ 695.674420][ T8908] wg1 speed is unknown, defaulting to 1000 [ 696.163796][ T8908] lo speed is unknown, defaulting to 1000 [ 696.362383][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16126'. [ 697.186619][ T8949] syzkaller0: entered promiscuous mode [ 697.200184][ T8949] syzkaller0: entered allmulticast mode [ 697.312622][ T8853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.524976][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16137'. [ 697.643420][ T8964] netlink: 'syz.2.16139': attribute type 1 has an invalid length. [ 697.767141][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16139'. [ 697.841834][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16140'. [ 697.896319][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16140'. [ 699.036029][ T8964] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 699.181040][ T8980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16142'. [ 699.277154][ T8984] netlink: 'syz.0.16145': attribute type 1 has an invalid length. [ 699.428846][ T8984] bond4: entered promiscuous mode [ 699.447233][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16147'. [ 699.463194][ T8984] bond4: entered allmulticast mode [ 699.479109][ T8984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.567874][ T8986] macvlan4: entered promiscuous mode [ 699.588944][ T8986] macvlan4: entered allmulticast mode [ 699.603869][ T8986] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 700.009985][ T8999] netlink: 'syz.0.16150': attribute type 1 has an invalid length. [ 700.018029][ T8999] netlink: 'syz.0.16150': attribute type 8 has an invalid length. [ 700.049695][ T8999] netlink: 'syz.0.16150': attribute type 9 has an invalid length. [ 700.085023][ T8999] netlink: 'syz.0.16150': attribute type 10 has an invalid length. [ 700.111801][ T8999] netlink: 'syz.0.16150': attribute type 11 has an invalid length. [ 700.144258][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16150'. [ 700.266212][ T9010] wg1 speed is unknown, defaulting to 1000 [ 700.336726][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16156'. [ 700.448319][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16161'. [ 700.669335][ T9037] syzkaller0: entered allmulticast mode [ 700.684964][ T9037] syzkaller0: entered promiscuous mode [ 700.709329][ T9037] syzkaller0 (unregistering): left allmulticast mode [ 700.728554][ T9037] syzkaller0 (unregistering): left promiscuous mode [ 700.957737][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16169'. [ 701.106783][ T9010] lo speed is unknown, defaulting to 1000 [ 702.238648][ T9076] batman_adv: batadv0: Interface deactivated: gretap2 [ 702.256822][ T9076] batman_adv: batadv0: Interface deactivated: geneve4 [ 702.357595][ T58] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.388906][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.433120][ T58] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.452002][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.462304][ T9080] wg1 speed is unknown, defaulting to 1000 [ 702.516820][ T58] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.537010][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.567302][ T58] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.584217][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16183'. [ 702.585423][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.040079][ T9080] lo speed is unknown, defaulting to 1000 [ 703.763173][ T9118] wg1 speed is unknown, defaulting to 1000 [ 704.384923][ T9118] lo speed is unknown, defaulting to 1000 [ 704.751277][ T9123] netlink: 'syz.0.16195': attribute type 1 has an invalid length. [ 704.759245][ T9123] netlink: 'syz.0.16195': attribute type 4 has an invalid length. [ 704.767219][ T9123] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.16195'. [ 704.778911][ T9123] netlink: 'syz.0.16195': attribute type 1 has an invalid length. [ 704.786948][ T9123] netlink: 'syz.0.16195': attribute type 4 has an invalid length. [ 704.794911][ T9123] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.16195'. [ 704.849446][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16196'. [ 705.074952][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16197'. [ 705.085203][ T9082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.529826][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16200'. [ 705.872227][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16203'. [ 705.879880][ T9145] wg1 speed is unknown, defaulting to 1000 [ 705.914447][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16203'. [ 706.706988][ T9150] lec:lec_atm_close: lec0: Shut down! [ 706.769143][ T9173] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16210'. [ 707.170243][ T9145] lo speed is unknown, defaulting to 1000 [ 707.222186][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16217'. [ 707.555340][ T9207] syzkaller1: entered promiscuous mode [ 707.585132][ T9207] syzkaller1: entered allmulticast mode [ 708.135176][T10918] lec:lec_start_xmit: lec0:No lecd attached [ 708.678592][ T9248] wg1 speed is unknown, defaulting to 1000 [ 708.733799][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16233'. [ 709.967627][ T9287] __nla_validate_parse: 2 callbacks suppressed [ 709.967645][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16243'. [ 710.259781][ T9300] netlink: 'syz.1.16247': attribute type 1 has an invalid length. [ 710.407409][ T9300] bond12: entered promiscuous mode [ 710.419401][ T9300] 8021q: adding VLAN 0 to HW filter on device bond12 [ 710.427742][ T9248] lo speed is unknown, defaulting to 1000 [ 710.499618][ T9303] bond12: (slave bridge11): making interface the new active one [ 710.518092][ T9303] bridge11: entered promiscuous mode [ 710.531079][ T9303] bridge11: left promiscuous mode [ 710.571601][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16249'. [ 710.781105][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16251'. [ 710.850915][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16251'. [ 710.870836][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16251'. [ 710.934617][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16253'. [ 711.169651][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16257'. [ 711.222339][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16258'. [ 711.294869][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16258'. [ 711.304071][ T9337] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 711.439057][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16259'. [ 713.001810][ T9368] netlink: 'syz.1.16268': attribute type 3 has an invalid length. [ 713.014676][ T9368] netlink: 'syz.1.16268': attribute type 1 has an invalid length. [ 713.370057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 713.378554][ C0] lec:lec_tx_timeout: lec0 [ 713.383793][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 714.356111][ T9398] wg1 speed is unknown, defaulting to 1000 [ 715.294169][ T9398] lo speed is unknown, defaulting to 1000 [ 715.416721][ T9420] __nla_validate_parse: 3 callbacks suppressed [ 715.416742][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16288'. [ 715.943256][ T9432] xt_hashlimit: size too large, truncated to 1048576 [ 716.025831][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 51856 - 0 [ 716.062290][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 51856 - 0 [ 716.076696][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 51856 - 0 [ 716.085706][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 51856 - 0 [ 717.207835][ T9465] wg1 speed is unknown, defaulting to 1000 [ 717.575545][ T9472] vlan1: entered allmulticast mode [ 717.613616][ T9472] bond0: entered allmulticast mode [ 717.618901][ T9472] bond_slave_0: entered allmulticast mode [ 717.647781][ T9475] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16305'. [ 717.752858][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16307'. [ 717.823522][ T9475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.837444][ T9475] bond_slave_0: left allmulticast mode [ 717.846993][ T9475] bond0 (unregistering): Released all slaves [ 718.269401][ T9465] lo speed is unknown, defaulting to 1000 [ 718.739480][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16315'. [ 719.130042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 719.138092][ C0] lec:lec_tx_timeout: lec0 [ 719.143363][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 719.592153][ T9512] wg1 speed is unknown, defaulting to 1000 [ 719.952961][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16323'. [ 721.085557][ T9512] lo speed is unknown, defaulting to 1000 [ 721.293076][ T9558] wg1 speed is unknown, defaulting to 1000 [ 721.646074][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16336'. [ 721.690363][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.742122][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16336'. [ 721.855158][ T9566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.917298][ T9570] bond5 (unregistering): Released all slaves [ 722.883781][ T9558] lo speed is unknown, defaulting to 1000 [ 723.659427][ T9616] wg1 speed is unknown, defaulting to 1000 [ 723.666755][ T9597] lo speed is unknown, defaulting to 1000 [ 723.733526][ T9597] lo speed is unknown, defaulting to 1000 [ 723.786304][ T9597] lo speed is unknown, defaulting to 1000 [ 724.060463][ T9616] lo speed is unknown, defaulting to 1000 [ 724.406800][ T9597] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 724.515103][ T9597] lo speed is unknown, defaulting to 1000 [ 724.538022][ T9597] lo speed is unknown, defaulting to 1000 [ 724.614265][ T9597] lo speed is unknown, defaulting to 1000 [ 724.638951][ T9597] lo speed is unknown, defaulting to 1000 [ 724.770168][ T9597] lo speed is unknown, defaulting to 1000 [ 724.787809][ T9597] lo speed is unknown, defaulting to 1000 [ 724.805488][ T9597] lo speed is unknown, defaulting to 1000 [ 724.808364][ T9624] netlink: 'syz.0.16353': attribute type 1 has an invalid length. [ 724.903363][ T9624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 724.970054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 724.978151][ C0] lec:lec_tx_timeout: lec0 [ 724.983244][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 725.140725][ T9631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16355'. [ 725.157702][ T9627] bond5: (slave veth11): Enslaving as an active interface with a down link [ 725.194839][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 725.202649][ T9624] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 726.074461][ T9655] netlink: 'syz.3.16361': attribute type 1 has an invalid length. [ 726.204124][ T9654] geneve5: entered promiscuous mode [ 726.268561][ T9655] bond8: entered promiscuous mode [ 726.275889][ T9655] bond8: entered allmulticast mode [ 726.282011][ T9655] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.438457][ T9660] sctp: [Deprecated]: syz.0.16362 (pid 9660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.438457][ T9660] Use struct sctp_sack_info instead [ 727.776615][ T9681] wg1 speed is unknown, defaulting to 1000 [ 728.072407][ T9684] syzkaller0: entered promiscuous mode [ 728.083647][ T9684] syzkaller0: entered allmulticast mode [ 730.000127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 730.008208][ C0] lec:lec_tx_timeout: lec0 [ 730.013291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 730.404620][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16381'. [ 730.717037][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16384'. [ 730.727442][ T9726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16384'. [ 730.739905][ T9726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16384'. [ 730.750596][ T9726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16384'. [ 730.761366][ T9727] wg1 speed is unknown, defaulting to 1000 [ 730.803024][ T9681] lo speed is unknown, defaulting to 1000 [ 731.455649][ T9753] wg1 speed is unknown, defaulting to 1000 [ 731.767697][ T9727] lo speed is unknown, defaulting to 1000 [ 732.441710][ T9681] lo speed is unknown, defaulting to 1000 [ 732.528142][ T9773] wg1 speed is unknown, defaulting to 1000 [ 732.933077][ T9753] lo speed is unknown, defaulting to 1000 [ 733.399063][ T9727] lo speed is unknown, defaulting to 1000 [ 733.413527][ T9787] wg1 speed is unknown, defaulting to 1000 [ 733.413541][ T9773] lo speed is unknown, defaulting to 1000 [ 734.324507][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16407'. [ 734.989497][ T9815] netlink: 'syz.3.16412': attribute type 5 has an invalid length. [ 735.004229][ T9815] smc: net device wlan0 erased user defined pnetid SYZ0 [ 735.011735][ T9787] lo speed is unknown, defaulting to 1000 [ 735.020160][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 735.028166][ C0] lec:lec_tx_timeout: lec0 [ 735.032975][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 735.164655][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16413'. [ 735.334553][ T9753] lo speed is unknown, defaulting to 1000 [ 736.343326][ T9773] lo speed is unknown, defaulting to 1000 [ 736.763454][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16418'. [ 736.800594][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16418'. [ 737.243884][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16422'. [ 737.594341][ T9787] lo speed is unknown, defaulting to 1000 [ 738.261927][ T9854] wg1 speed is unknown, defaulting to 1000 [ 738.382718][ T9865] xt_hashlimit: size too large, truncated to 1048576 [ 739.489063][ T9854] lo speed is unknown, defaulting to 1000 [ 740.040063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 740.048334][ C0] lec:lec_tx_timeout: lec0 [ 740.053097][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 740.654740][ T9893] netlink: 'syz.4.16435': attribute type 29 has an invalid length. [ 740.721912][ T9893] netlink: 'syz.4.16435': attribute type 29 has an invalid length. [ 740.754881][ T9897] tipc: Failed to remove unknown binding: 66,1,1/0:2574244536/2574244538 [ 740.789885][ T9897] tipc: Failed to remove unknown binding: 66,1,1/0:2574244536/2574244538 [ 740.821806][ T9897] tipc: Failed to remove unknown binding: 66,1,1/0:2574244536/2574244538 [ 740.992684][ T9854] lo speed is unknown, defaulting to 1000 [ 742.094960][ T9921] syzkaller0: entered promiscuous mode [ 742.113588][ T9921] syzkaller0: entered allmulticast mode [ 742.276687][ T9921] macsec1: entered promiscuous mode [ 742.374296][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16448'. [ 742.803243][ T9938] dummy0: Caught tx_queue_len zero misconfig [ 743.342627][ T9959] netlink: 'syz.0.16459': attribute type 1 has an invalid length. [ 743.382711][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16458'. [ 743.410592][ T9959] netlink: 'syz.0.16459': attribute type 2 has an invalid length. [ 743.739848][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16461'. [ 743.809961][ T9970] syzkaller1: entered promiscuous mode [ 743.830519][ T9970] syzkaller1: entered allmulticast mode [ 743.836881][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16461'. [ 744.171326][ T9979] wg1 speed is unknown, defaulting to 1000 [ 744.834022][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16470'. [ 745.060058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 745.068122][ C0] lec:lec_tx_timeout: lec0 [ 745.073836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 745.216076][ T9979] lo speed is unknown, defaulting to 1000 [ 745.912408][T10003] bond5: entered promiscuous mode [ 745.956095][T10005] vcan1: entered promiscuous mode [ 745.990752][T10005] vcan1: entered allmulticast mode [ 745.997055][T10005] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 746.008738][T10005] bond5: (slave vcan1): Error -95 calling set_mac_address [ 746.169171][T10009] netlink: 'syz.3.16478': attribute type 1 has an invalid length. [ 746.252778][T10009] 8021q: adding VLAN 0 to HW filter on device bond9 [ 746.311810][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16478'. [ 746.374863][T10014] bond9: (slave veth15): Enslaving as an active interface with a down link [ 746.443479][T10009] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 746.469582][T10009] bond9: (slave batadv3): making interface the new active one [ 746.490573][T10009] batadv3: entered promiscuous mode [ 746.496734][T10009] bond9: (slave batadv3): Enslaving as an active interface with an up link [ 747.051503][T10029] wg1 speed is unknown, defaulting to 1000 [ 747.164475][ T9979] lo speed is unknown, defaulting to 1000 [ 747.834370][T10034] wg1 speed is unknown, defaulting to 1000 [ 747.894405][T10036] netlink: 168 bytes leftover after parsing attributes in process `syz.4.16486'. [ 748.794382][T10029] lo speed is unknown, defaulting to 1000 [ 748.875799][T10048] wg1 speed is unknown, defaulting to 1000 [ 749.118787][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16491'. [ 749.538791][T10054] wg1 speed is unknown, defaulting to 1000 [ 750.110131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 750.118172][ C0] lec:lec_tx_timeout: lec0 [ 750.123015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 750.352671][T10034] lo speed is unknown, defaulting to 1000 [ 750.744233][T10068] wg1 speed is unknown, defaulting to 1000 [ 750.801103][T10066] macsec0: entered promiscuous mode [ 750.806353][T10066] dummy0: entered promiscuous mode [ 750.822004][T10066] macsec0: entered allmulticast mode [ 750.852087][T10066] dummy0: entered allmulticast mode [ 751.153607][T10066] dummy0: left allmulticast mode [ 751.158714][T10066] dummy0: left promiscuous mode [ 751.509201][T10029] lo speed is unknown, defaulting to 1000 [ 751.521157][T10048] lo speed is unknown, defaulting to 1000 [ 752.545237][T10032] Set syz1 is full, maxelem 65536 reached [ 752.819753][T10068] lo speed is unknown, defaulting to 1000 [ 752.962229][T10054] lo speed is unknown, defaulting to 1000 [ 753.634368][T10034] lo speed is unknown, defaulting to 1000 [ 754.553936][T10054] lo speed is unknown, defaulting to 1000 [ 754.648656][T10048] lo speed is unknown, defaulting to 1000 [ 755.130254][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 755.138308][ C0] lec:lec_tx_timeout: lec0 [ 755.144063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 755.407892][T10068] lo speed is unknown, defaulting to 1000 [ 755.440156][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16502'. [ 756.155707][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16503'. [ 756.221558][T10099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.228817][T10099] IPv6: NLM_F_CREATE should be set when creating new route [ 756.248911][T10096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.256187][T10096] IPv6: NLM_F_CREATE should be set when creating new route [ 757.710994][ T4893] batadv3: left promiscuous mode [ 757.749378][T10144] netlink: 'syz.3.16514': attribute type 1 has an invalid length. [ 757.882759][T10144] 8021q: adding VLAN 0 to HW filter on device bond10 [ 758.035567][T10146] veth17: entered promiscuous mode [ 758.139656][T10146] bond10: (slave veth17): Enslaving as an active interface with an up link [ 758.462068][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16516'. [ 758.576804][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16519'. [ 758.829450][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16519'. [ 758.884651][T10157] wg1 speed is unknown, defaulting to 1000 [ 760.681655][T10171] wg1 speed is unknown, defaulting to 1000 [ 760.970050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 760.978107][ C0] lec:lec_tx_timeout: lec0 [ 760.983000][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 761.225576][T10157] lo speed is unknown, defaulting to 1000 [ 761.241279][T10201] wg1 speed is unknown, defaulting to 1000 [ 761.659166][T10203] wg1 speed is unknown, defaulting to 1000 [ 761.763440][T10171] lo speed is unknown, defaulting to 1000 [ 762.089392][T10210] wg1 speed is unknown, defaulting to 1000 [ 762.335691][T10201] lo speed is unknown, defaulting to 1000 [ 762.465055][T10157] lo speed is unknown, defaulting to 1000 [ 762.885964][T10203] lo speed is unknown, defaulting to 1000 [ 763.201315][T10210] lo speed is unknown, defaulting to 1000 [ 763.791330][T10171] lo speed is unknown, defaulting to 1000 [ 764.490387][T10201] lo speed is unknown, defaulting to 1000 [ 764.680739][T10203] lo speed is unknown, defaulting to 1000 [ 765.285231][T10210] lo speed is unknown, defaulting to 1000 [ 765.972411][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16539'. [ 765.990122][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 765.998236][ C0] lec:lec_tx_timeout: lec0 [ 766.003237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 767.154807][T10245] wg1 speed is unknown, defaulting to 1000 [ 768.665639][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16550'. [ 768.689991][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16550'. [ 768.940870][T10245] lo speed is unknown, defaulting to 1000 [ 769.065755][T10272] wg1 speed is unknown, defaulting to 1000 [ 769.537626][T10289] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16561'. [ 769.612608][T10289] syzkaller1: entered promiscuous mode [ 769.638528][T10289] syzkaller1: entered allmulticast mode [ 769.720671][T10291] netlink: 'syz.2.16562': attribute type 1 has an invalid length. [ 769.868453][T10292] macvlan2: entered promiscuous mode [ 769.875549][T10292] macvlan2: entered allmulticast mode [ 769.883773][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16563'. [ 769.895284][T10292] bond10: entered promiscuous mode [ 769.905797][T10292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 769.951355][T10292] bond10: left promiscuous mode [ 770.178563][T10307] syzkaller1: left promiscuous mode [ 770.192054][T10307] syzkaller1: left allmulticast mode [ 770.254317][T10272] lo speed is unknown, defaulting to 1000 [ 770.307205][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16571'. [ 770.385744][T10313] vlan3: entered allmulticast mode [ 770.412094][T10313] bond11: entered allmulticast mode [ 770.486230][T10245] lo speed is unknown, defaulting to 1000 [ 771.010094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 771.018172][ C0] lec:lec_tx_timeout: lec0 [ 771.023172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 771.917494][T10272] lo speed is unknown, defaulting to 1000 [ 772.679678][T10373] wg1 speed is unknown, defaulting to 1000 [ 772.688447][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16594'. [ 773.119106][T10386] smc: net device wlan0 applied user defined pnetid SYZ0 [ 773.135062][T10386] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 773.756288][T10410] atomic_op ffff88805ca15998 conn xmit_atomic 0000000000000000 [ 774.436356][T10373] lo speed is unknown, defaulting to 1000 [ 774.578580][T10450] netlink: 'syz.4.16627': attribute type 4 has an invalid length. [ 774.599827][ T4018] lo speed is unknown, defaulting to 1000 [ 774.607261][ T4018] sqz0: Port: 1 Link DOWN [ 774.620543][ T4018] lo speed is unknown, defaulting to 1000 [ 774.627169][T10450] netlink: 'syz.4.16627': attribute type 4 has an invalid length. [ 774.655857][ T4018] lo speed is unknown, defaulting to 1000 [ 774.661721][ T4018] sqz0: Port: 1 Link ACTIVE [ 774.674833][T10447] netlink: 192 bytes leftover after parsing attributes in process `syz.3.16626'. [ 774.768465][T10918] lo speed is unknown, defaulting to 1000 [ 774.794507][T10918] sqz0: Port: 1 Link DOWN [ 774.797956][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.845064][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.878982][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.912824][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.941645][ T5960] lo speed is unknown, defaulting to 1000 [ 774.947596][T10451] wg1 speed is unknown, defaulting to 1000 [ 774.955827][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.977114][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.997328][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.019728][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.325468][T10480] wg1 speed is unknown, defaulting to 1000 [ 775.653748][T10373] lo speed is unknown, defaulting to 1000 [ 775.800743][T10451] lo speed is unknown, defaulting to 1000 [ 775.984013][T10479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.034909][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 776.043077][ C0] lec:lec_tx_timeout: lec0 [ 776.048411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 776.302095][T10480] lo speed is unknown, defaulting to 1000 [ 776.513176][T10489] wg1 speed is unknown, defaulting to 1000 [ 776.594519][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16639'. [ 777.229041][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16641'. [ 777.240694][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16641'. [ 777.481328][T10489] lo speed is unknown, defaulting to 1000 [ 777.722261][T10480] lo speed is unknown, defaulting to 1000 [ 778.367513][T10451] lo speed is unknown, defaulting to 1000 [ 780.650225][T10489] lo speed is unknown, defaulting to 1000 [ 781.062693][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 781.070763][ C0] lec:lec_tx_timeout: lec0 [ 781.075908][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 781.239681][T10533] .`: (slave netdevsim0): Releasing backup interface [ 781.674145][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16655'. [ 782.077519][T10560] wg1 speed is unknown, defaulting to 1000 [ 782.508078][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16663'. [ 783.045460][T10586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16669'. [ 783.334196][T10560] lo speed is unknown, defaulting to 1000 [ 783.937062][T10601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16674'. [ 784.656654][T10560] lo speed is unknown, defaulting to 1000 [ 785.722716][T10561] mpoa:mpoad_close: () going down [ 785.946327][T10653] wg1 speed is unknown, defaulting to 1000 [ 785.982709][ T58] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb1 [ 786.090177][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 786.098261][ C0] lec:lec_tx_timeout: lec0 [ 786.102978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 786.298311][T10655] wg1 speed is unknown, defaulting to 1000 [ 786.341085][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16698'. [ 786.373062][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16698'. [ 786.732531][T10653] lo speed is unknown, defaulting to 1000 [ 787.144479][T10655] lo speed is unknown, defaulting to 1000 [ 787.666697][T10653] lo speed is unknown, defaulting to 1000 [ 787.841771][T10690] netlink: 'syz.4.16706': attribute type 11 has an invalid length. [ 788.160267][T10655] lo speed is unknown, defaulting to 1000 [ 788.686510][T10704] wg1 speed is unknown, defaulting to 1000 [ 788.830303][T10649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.105967][T10717] tipc: Enabled bearer , priority 0 [ 789.280899][T10717] syzkaller0: entered promiscuous mode [ 789.293145][T10717] syzkaller0: entered allmulticast mode [ 789.299661][T10717] tipc: Resetting bearer [ 789.315568][T10723] tipc: Enabled bearer , priority 0 [ 789.351629][T10723] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 789.363613][T10723] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 789.420820][T10716] tipc: Resetting bearer [ 791.086991][T10716] tipc: Disabling bearer [ 791.102228][T10726] wg1 speed is unknown, defaulting to 1000 [ 791.110127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 791.118181][ C0] lec:lec_tx_timeout: lec0 [ 791.123003][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 791.144467][ T5960] tipc: Node number set to 536936448 [ 791.331299][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16721'. [ 791.591648][T10704] lo speed is unknown, defaulting to 1000 [ 791.612060][T10746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16724'. [ 791.676484][T10747] syzkaller1: entered promiscuous mode [ 791.682067][T10747] syzkaller1: entered allmulticast mode [ 792.239065][T10726] lo speed is unknown, defaulting to 1000 [ 793.129200][T10704] lo speed is unknown, defaulting to 1000 [ 793.476071][T10779] netlink: 'syz.3.16736': attribute type 16 has an invalid length. [ 793.512919][T10779] netlink: 'syz.3.16736': attribute type 17 has an invalid length. [ 793.604608][T10779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.617347][T10779] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.628920][T10779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.644997][ T4018] lo speed is unknown, defaulting to 1000 [ 793.659169][T10726] lo speed is unknown, defaulting to 1000 [ 793.665024][ T4018] syz2: Port: 1 Link ACTIVE [ 793.676753][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16737'. [ 794.096293][T10795] syz_tun: entered promiscuous mode [ 794.102832][T10795] vlan1: entered promiscuous mode [ 794.828814][T10805] bridge5: entered promiscuous mode [ 794.995343][T10814] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.022884][T10814] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40037 - 0 [ 795.036606][T10814] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 795.217817][T10814] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.233682][T10814] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40037 - 0 [ 795.271380][T10814] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 795.391397][T10814] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.413743][T10814] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40037 - 0 [ 795.435599][T10814] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 795.697359][T10814] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.712035][T10814] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40037 - 0 [ 795.723635][T10814] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 795.959724][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.970256][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.989027][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 40037 - 0 [ 796.130214][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 796.138261][ C0] lec:lec_tx_timeout: lec0 [ 796.142848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 796.416409][ T58] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.447893][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.490369][ T58] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 40037 - 0 [ 796.563002][ T1165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.574905][ T1165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.591298][ T1165] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 40037 - 0 [ 796.630835][ T1165] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.639165][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.653406][ T1165] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 40037 - 0 [ 796.826410][T10844] syzkaller0: entered promiscuous mode [ 796.832949][T10844] syzkaller0: entered allmulticast mode [ 796.891182][T10810] Bluetooth: hci3: command 0x0406 tx timeout [ 798.486127][T10871] tipc: Enabling of bearer rejected, already enabled [ 798.629942][T10882] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16769'. [ 798.704011][T10880] bond0: entered allmulticast mode [ 798.743043][T10880] bridge15: entered promiscuous mode [ 798.748603][T10880] bridge15: entered allmulticast mode [ 798.757891][T10880] bond0: (slave bridge15): making interface the new active one [ 798.766826][T10880] bond0: (slave bridge15): Enslaving as an active interface with an up link [ 798.896542][T10898] netlink: 'syz.1.16775': attribute type 1 has an invalid length. [ 798.933579][T10896] wg1 speed is unknown, defaulting to 1000 [ 800.289212][T10896] lo speed is unknown, defaulting to 1000 [ 800.651671][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16784'. [ 800.951634][T10934] netlink: 'syz.3.16786': attribute type 4 has an invalid length. [ 800.975045][ T4018] lo speed is unknown, defaulting to 1000 [ 800.981662][ T4018] syz2: Port: 1 Link DOWN [ 800.991347][T10934] netlink: 'syz.3.16786': attribute type 4 has an invalid length. [ 801.013924][ T24] lo speed is unknown, defaulting to 1000 [ 801.019723][ T24] syz2: Port: 1 Link ACTIVE [ 801.660939][ T24] lo speed is unknown, defaulting to 1000 [ 801.690257][ T24] syz2: Port: 1 Link DOWN [ 801.914844][T10944] syzkaller0: entered promiscuous mode [ 801.930096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 801.938153][ C0] lec:lec_tx_timeout: lec0 [ 801.943229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 801.950772][T10944] syzkaller0: entered allmulticast mode [ 802.108048][T10896] lo speed is unknown, defaulting to 1000 [ 804.116503][T10966] rdma_rxe: rxe_newlink: failed to add syz_tun [ 804.545586][T10947] gtp2: entered allmulticast mode [ 804.550926][T10947] team0: Refused to change device type [ 804.615485][T10957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.634793][T10957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.803474][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16801'. [ 804.837223][T10957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.872778][T10957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.875936][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16801'. [ 804.898633][ T1111] bond0: (slave dummy0): interface is now down [ 804.909655][T10977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.044404][ T1165] bond0: (slave dummy0): interface is now down [ 805.191410][ T58] bond0: (slave dummy0): interface is now down [ 805.243404][T10957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.271298][T10957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.341398][ T1165] bond0: (slave dummy0): interface is now down [ 805.354823][T10957] team0: Port device netdevsim0 removed [ 805.368880][T10957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.401167][T10957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.490816][ T36] bond0: (slave dummy0): interface is now down [ 805.507318][ T36] bond0: now running without any active interface! [ 805.586198][T11002] tipc: Enabled bearer , priority 0 [ 805.722342][T11002] syzkaller0: entered promiscuous mode [ 805.727962][T11002] syzkaller0: entered allmulticast mode [ 805.764207][T11002] tipc: Resetting bearer [ 805.774054][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16808'. [ 805.870177][T11001] tipc: Resetting bearer [ 806.980196][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 806.988288][ C0] lec:lec_tx_timeout: lec0 [ 806.993133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 807.991926][T11001] tipc: Disabling bearer [ 808.304410][T11045] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16818'. [ 808.314652][T11045] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16818'. [ 808.435779][T11045] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16818'. [ 808.479357][T11051] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 808.508984][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.575903][ T58] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.578775][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16824'. [ 808.588460][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.621295][ T58] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.627261][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16824'. [ 808.629495][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.672151][T11059] netlink: 'syz.0.16823': attribute type 4 has an invalid length. [ 808.693970][ T58] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.703875][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.720970][ T58] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.729171][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.833410][T11066] xt_hashlimit: size too large, truncated to 1048576 [ 808.862434][T11068] netlink: 'syz.4.16827': attribute type 3 has an invalid length. [ 808.871571][T11068] netlink: 'syz.4.16827': attribute type 3 has an invalid length. [ 809.644354][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16835'. [ 809.888632][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16838'. [ 809.919909][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16841'. [ 809.932490][T11103] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3143150742/3143150743 [ 809.951687][T11103] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3143150742/3143150743 [ 810.055473][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.062806][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.070104][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.077430][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.084734][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.092020][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.099283][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.106585][T11109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 810.119853][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16844'. [ 810.352987][T11115] wg1 speed is unknown, defaulting to 1000 [ 810.734683][T11138] netlink: 'syz.4.16851': attribute type 1 has an invalid length. [ 810.803648][T11138] bond6: entered promiscuous mode [ 810.808866][T11138] bond6: entered allmulticast mode [ 810.814946][T11138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 810.837661][T11138] bridge16: entered promiscuous mode [ 810.843290][T11138] bridge16: entered allmulticast mode [ 810.849378][T11138] bond6: (slave bridge16): Enslaving as a backup interface with an up link [ 811.085748][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16856'. [ 811.288639][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16856'. [ 811.375804][T11115] lo speed is unknown, defaulting to 1000 [ 811.885917][T11176] syzkaller0: refused to change device tx_queue_len [ 812.006754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 812.014821][ C0] lec:lec_tx_timeout: lec0 [ 812.019541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 812.035393][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16865'. [ 812.200566][ T1111] nci: nci_rx_work: unknown MT 0x7 [ 812.472631][T11200] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 812.567699][T11115] lo speed is unknown, defaulting to 1000 [ 813.265010][T11226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16882'. [ 815.604150][T11208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.762299][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16897'. [ 815.904369][T11280] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 815.937382][T11280] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 815.974674][T11277] macvlan4: entered promiscuous mode [ 815.981137][T11277] macvlan4: entered allmulticast mode [ 815.987072][T11277] bond6: (slave macvlan4): Error -98 calling set_mac_address [ 816.313027][T11302] wg1 speed is unknown, defaulting to 1000 [ 816.347304][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad98000: rx timeout, send abort [ 816.421797][T11306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16908'. [ 816.441715][T11306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16908'. [ 816.470628][T11306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16908'. [ 816.479954][T11306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16908'. [ 816.856968][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad98000: abort rx timeout. Force session deactivation [ 816.858866][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16915'. [ 816.985340][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16916'. [ 817.030068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 817.038103][ C0] lec:lec_tx_timeout: lec0 [ 817.042920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 817.117635][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16918'. [ 817.128298][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16918'. [ 817.138053][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16918'. [ 817.216406][T11302] lo speed is unknown, defaulting to 1000 [ 817.404194][T11345] wg1 speed is unknown, defaulting to 1000 [ 817.710530][T11357] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 817.717957][T11357] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 817.840755][T11341] wg1 speed is unknown, defaulting to 1000 [ 818.616591][T11345] lo speed is unknown, defaulting to 1000 [ 818.771031][T11371] syzkaller0: entered allmulticast mode [ 819.141006][T11302] lo speed is unknown, defaulting to 1000 [ 820.196315][T11345] lo speed is unknown, defaulting to 1000 [ 820.208019][T11341] lo speed is unknown, defaulting to 1000 [ 821.576898][T11425] __nla_validate_parse: 4 callbacks suppressed [ 821.576917][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16949'. [ 822.043199][T11341] lo speed is unknown, defaulting to 1000 [ 822.060121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 822.068168][ C0] lec:lec_tx_timeout: lec0 [ 822.072916][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 822.086903][T11432] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2335994351/2335994353 [ 822.111236][T11432] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2335994351/2335994352 [ 822.127017][T11432] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2335994351/2335994353 [ 822.154021][T11432] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2335994351/2335994352 [ 822.631773][T11390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.886578][T11443] pim6reg1: entered promiscuous mode [ 822.901724][T11443] pim6reg1: entered allmulticast mode [ 824.255583][T11481] wg1 speed is unknown, defaulting to 1000 [ 824.682423][T11481] lo speed is unknown, defaulting to 1000 [ 825.292978][T11510] wg1 speed is unknown, defaulting to 1000 [ 825.518259][T11481] lo speed is unknown, defaulting to 1000 [ 825.789999][T11510] lo speed is unknown, defaulting to 1000 [ 826.873515][T11510] lo speed is unknown, defaulting to 1000 [ 827.080072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 827.088150][ C0] lec:lec_tx_timeout: lec0 [ 827.093090][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 827.886516][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16981'. [ 828.028993][T11501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.337582][T11553] syzkaller0: entered promiscuous mode [ 828.351738][T11553] syzkaller0: entered allmulticast mode [ 828.780908][T11574] syzkaller0: entered promiscuous mode [ 828.786521][T11574] syzkaller0: entered allmulticast mode [ 829.042101][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16995'. [ 829.468504][T11603] tipc: Enabled bearer , priority 0 [ 829.562707][T11603] syzkaller0: entered promiscuous mode [ 829.578490][T11603] syzkaller0: entered allmulticast mode [ 829.591373][T11603] tipc: Resetting bearer [ 829.682613][T11602] tipc: Resetting bearer [ 829.734403][T11617] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17006'. [ 830.261577][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17011'. [ 831.358290][T11602] tipc: Disabling bearer [ 831.449908][T11633] net_ratelimit: 3259 callbacks suppressed [ 831.449919][T11633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.480860][ T5957] tipc: Node number set to 4278255617 [ 831.521776][T11613] wg1 speed is unknown, defaulting to 1000 [ 831.614082][T11648] xt_connbytes: Forcing CT accounting to be enabled [ 831.628630][T11648] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 831.630891][T11651] netlink: 'syz.1.17016': attribute type 1 has an invalid length. [ 831.675162][T11651] 8021q: adding VLAN 0 to HW filter on device bond13 [ 831.730399][T11651] bond13: entered allmulticast mode [ 831.749898][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17018'. [ 831.779989][T11655] bond13: (slave ip6gretap3): making interface the new active one [ 831.831079][T11655] ip6gretap3: entered allmulticast mode [ 831.851716][T11655] bond13: (slave ip6gretap3): Enslaving as an active interface with an up link [ 831.875062][T11629] wg1 speed is unknown, defaulting to 1000 [ 831.897481][T11658] syzkaller0: entered promiscuous mode [ 831.903183][T11658] syzkaller0: entered allmulticast mode [ 831.987591][T11662] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 831.996150][T11662] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 832.008879][T11662] tipc: Enabling of bearer rejected, already enabled [ 832.100154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 832.108225][ C0] lec:lec_tx_timeout: lec0 [ 832.120147][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 832.292695][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17022'. [ 832.484236][T11613] lo speed is unknown, defaulting to 1000 [ 832.902994][T11672] syz_tun (unregistering): left allmulticast mode [ 832.924120][T11672] syz_tun (unregistering): left promiscuous mode [ 832.945820][T11672] bridge0: port 3(syz_tun) entered disabled state [ 833.535210][T11692] tipc: Enabling of bearer rejected, already enabled [ 833.606637][T11629] lo speed is unknown, defaulting to 1000 [ 833.651956][T11694] syzkaller0: entered promiscuous mode [ 833.657464][T11694] syzkaller0: entered allmulticast mode [ 836.000118][T11613] lo speed is unknown, defaulting to 1000 [ 837.130069][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 837.138116][ C0] lec:lec_tx_timeout: lec0 [ 837.142712][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 837.441109][T11629] lo speed is unknown, defaulting to 1000 [ 838.292150][T11752] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 838.533119][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17051'. [ 838.635038][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17052'. [ 838.711851][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17053'. [ 838.807382][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17052'. [ 839.563812][T11778] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.17058'. [ 839.828762][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17061'. [ 839.925493][T11787] lo: Caught tx_queue_len zero misconfig [ 840.832464][T11811] syzkaller0: entered promiscuous mode [ 840.837979][T11811] syzkaller0: entered allmulticast mode [ 842.980246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 842.988348][ C0] lec:lec_tx_timeout: lec0 [ 842.993698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 843.194362][T11850] netlink: 'syz.3.17079': attribute type 1 has an invalid length. [ 843.271275][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17082'. [ 843.313509][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17079'. [ 843.326605][T11858] bond11: (slave geneve5): making interface the new active one [ 843.335963][T11858] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 843.368476][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 843.390945][T11863] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 843.435707][T11861] bond11 (unregistering): (slave geneve5): Releasing active interface [ 843.454802][T11861] bond11 (unregistering): Released all slaves [ 843.506423][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 844.456883][T11898] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3754622985/3754622987 [ 844.481141][T11898] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3754622985/3754622986 [ 844.506763][T11898] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3754622985/3754622987 [ 844.533016][T11898] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3754622985/3754622986 [ 844.570283][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 844.666076][T11906] netlink: 200 bytes leftover after parsing attributes in process `syz.3.17097'. [ 844.963646][T11917] syzkaller0: entered promiscuous mode [ 844.969171][T11917] syzkaller0: entered allmulticast mode [ 845.323790][T11934] syzkaller0: entered promiscuous mode [ 845.329478][T11934] syzkaller0: entered allmulticast mode [ 845.522043][T11947] netlink: 'syz.3.17113': attribute type 1 has an invalid length. [ 845.591082][T11947] bond11: entered promiscuous mode [ 845.599426][T11947] 8021q: adding VLAN 0 to HW filter on device bond11 [ 845.658601][T11954] netlink: 'syz.4.17114': attribute type 1 has an invalid length. [ 845.669976][T11950] bond11: (slave bridge13): making interface the new active one [ 845.681201][T11950] bridge13: entered promiscuous mode [ 845.691330][T11950] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 845.715696][T11947] bond11: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.732311][T11947] bond11: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 845.787305][T11954] bond7: entered promiscuous mode [ 845.794854][T11954] 8021q: adding VLAN 0 to HW filter on device bond7 [ 845.804623][T11955] bridge0: Device is already in use. [ 845.848006][T11958] syzkaller0: entered promiscuous mode [ 845.860763][T11958] syzkaller0: entered allmulticast mode [ 845.951427][T11963] wg1 speed is unknown, defaulting to 1000 [ 845.982192][T11965] veth1: left promiscuous mode [ 845.987005][T11965] veth1: left allmulticast mode [ 846.002391][T11965] wg1: left promiscuous mode [ 846.008794][T11965] wg1: left allmulticast mode [ 846.019936][T11965] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 846.056255][T11965] veth3: left promiscuous mode [ 846.062686][T11965] erspan1: left promiscuous mode [ 846.069350][T11965] erspan1: left allmulticast mode [ 846.077025][T11965] bridge2: left allmulticast mode [ 846.084758][T11965] vlan0: left promiscuous mode [ 846.092722][T11965] geneve1: left promiscuous mode [ 846.098298][T11965] vlan0: left allmulticast mode [ 846.104559][T11965] geneve1: left allmulticast mode [ 846.111570][T11965] macsec1: left promiscuous mode [ 846.116790][T11965] macsec1: left allmulticast mode [ 846.125480][T11965] vlan1: left allmulticast mode [ 846.130570][T11965] team0: left allmulticast mode [ 846.135951][T11965] vlan3: left promiscuous mode [ 846.141775][T11965] bridge0: left promiscuous mode [ 846.154054][T11965] vlan4: left promiscuous mode [ 846.163344][T11965] vlan5: left allmulticast mode [ 846.168367][T11965] bridge_slave_0: left allmulticast mode [ 846.187832][T11965] geneve3: left promiscuous mode [ 846.194532][T11965] geneve3: left allmulticast mode [ 846.199919][T11965] bridge5: left promiscuous mode [ 846.206255][T11965] vlan6: left promiscuous mode [ 846.212456][T11965] bond0: left promiscuous mode [ 846.221612][T11965] vlan7: left allmulticast mode [ 846.226703][T11965] dummy0: left allmulticast mode [ 846.233982][T11965] geneve4: left promiscuous mode [ 846.239114][T11965] geneve4: left allmulticast mode [ 846.247136][T11965] bond8: left promiscuous mode [ 846.252640][T11965] bond8: left allmulticast mode [ 846.259318][T11965] veth17: left promiscuous mode [ 846.267691][T11965] bond11: left promiscuous mode [ 846.275252][T11965] bridge13: left promiscuous mode [ 846.555275][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17123'. [ 846.779012][T11963] lo speed is unknown, defaulting to 1000 [ 846.892985][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17128'. [ 846.977023][T12003] bond14: entered promiscuous mode [ 846.984443][T12003] 8021q: adding VLAN 0 to HW filter on device bond14 [ 847.116228][T12008] 8021q: adding VLAN 0 to HW filter on device bond14 [ 847.128968][T12008] bond14: (slave sit5): The slave device specified does not support setting the MAC address [ 847.140539][T12008] bond14: (slave sit5): Error -95 calling set_mac_address [ 847.148137][T12008] sit5: mtu greater than device maximum [ 847.167083][T12009] syzkaller0: entered promiscuous mode [ 847.174667][T12009] syzkaller0: entered allmulticast mode [ 847.297423][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17131'. [ 847.708979][T12034] lo: Caught tx_queue_len zero misconfig [ 847.717596][T12034] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 847.805173][T12035] wg1 speed is unknown, defaulting to 1000 [ 847.879865][T12037] syzkaller0: entered promiscuous mode [ 847.886470][T12037] syzkaller0: entered allmulticast mode [ 847.985040][T11963] lo speed is unknown, defaulting to 1000 [ 848.000055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 848.008076][ C0] lec:lec_tx_timeout: lec0 [ 848.012961][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 848.376589][T12057] team0: Mode changed to "loadbalance" [ 848.468086][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17144'. [ 848.827889][T12035] lo speed is unknown, defaulting to 1000 [ 849.240611][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17149'. [ 849.284265][T12080] ip6gre3: entered promiscuous mode [ 849.289700][T12080] ip6gre3: entered allmulticast mode [ 849.308902][T12080] netlink: 'syz.4.17149': attribute type 6 has an invalid length. [ 849.317052][T12080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.17149'. [ 849.696091][T12086] wg1 speed is unknown, defaulting to 1000 [ 850.392967][T12035] lo speed is unknown, defaulting to 1000 [ 850.679879][T12086] lo speed is unknown, defaulting to 1000 [ 850.728367][T12091] bond15: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 850.742827][T12091] bond15 (unregistering): Released all slaves [ 851.126554][T12086] lo speed is unknown, defaulting to 1000 [ 851.669654][T12066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 851.731371][T12096] wg1 speed is unknown, defaulting to 1000 [ 851.899365][T12100] tipc: Enabled bearer , priority 0 [ 852.053814][T12100] syzkaller0: entered promiscuous mode [ 852.059478][T12100] syzkaller0: entered allmulticast mode [ 852.068353][T12100] tipc: Resetting bearer [ 852.135273][T12099] tipc: Resetting bearer [ 853.030072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 853.038172][ C0] lec:lec_tx_timeout: lec0 [ 853.043441][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 854.147564][T12099] tipc: Disabling bearer [ 854.156553][T12112] tipc: Invalid UDP bearer configuration [ 854.156591][T12112] tipc: Enabling of bearer rejected, failed to enable media [ 854.325935][T12122] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2333065789/2333065791 [ 854.370767][T12122] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2333065789/2333065790 [ 854.392013][T12126] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2333065789/2333065791 [ 854.445970][T12126] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2333065789/2333065790 [ 854.648984][T12136] netlink: 'syz.2.17166': attribute type 10 has an invalid length. [ 854.679052][T12096] lo speed is unknown, defaulting to 1000 [ 854.743511][T12139] netlink: 'syz.3.17168': attribute type 1 has an invalid length. [ 855.385538][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17175'. [ 855.491007][T12160] wg1 speed is unknown, defaulting to 1000 [ 855.511571][ T36] bond6: (slave bridge16): link status up again after 0 ms [ 855.559807][ T58] bond6: (slave bridge16): link status up again after 0 ms [ 855.600633][T10186] bond6: (slave bridge16): link status up again after 0 ms [ 855.620817][T12165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17177'. [ 855.624257][T10186] bond6: (slave bridge16): link status up again after 0 ms [ 855.670940][ T36] bond6: (slave bridge16): link status up again after 0 ms [ 855.694222][ T36] bond6: (slave bridge16): link status up again after 0 ms [ 855.740930][T10186] bond6: (slave bridge16): link status up again after 0 ms [ 855.762223][ T36] bond6: (slave bridge16): link status up again after 0 ms [ 855.780886][T10186] bond6: (slave bridge16): link status up again after 0 ms [ 855.820713][T10186] bond6: (slave bridge16): link status up again after 0 ms [ 855.849068][T12161] syzkaller0: delete flow: hash 2273634894 index 1 [ 857.431898][T12096] lo speed is unknown, defaulting to 1000 [ 857.641396][T12183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.754490][T12160] lo speed is unknown, defaulting to 1000 [ 857.883407][T12192] netlink: 67 bytes leftover after parsing attributes in process `syz.0.17185'. [ 857.893986][T12192] bond0: Caught tx_queue_len zero misconfig [ 858.050085][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 858.060174][ C0] lec:lec_tx_timeout: lec0 [ 858.065809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 858.631034][T12169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.834440][T12203] syzkaller0: entered promiscuous mode [ 858.839950][T12203] syzkaller0: entered allmulticast mode [ 858.943587][T12160] lo speed is unknown, defaulting to 1000 [ 860.354259][T12243] syzkaller0: entered promiscuous mode [ 860.399150][T12243] syzkaller0: entered allmulticast mode [ 860.482007][T12251] netlink: 'syz.4.17196': attribute type 1 has an invalid length. [ 860.654637][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17196'. [ 860.716729][T12251] bond8: entered promiscuous mode [ 860.742682][T12251] bond8: entered allmulticast mode [ 860.854540][T12255] bond8: (slave ip6gretap4): making interface the new active one [ 860.870649][T12255] ip6gretap4: entered promiscuous mode [ 860.876306][T12255] ip6gretap4: entered allmulticast mode [ 860.908597][T12255] bond8: (slave ip6gretap4): Enslaving as an active interface with an up link [ 860.945132][T12256] bond8: left promiscuous mode [ 860.983043][T12256] ip6gretap4: left promiscuous mode [ 860.988459][T12256] bond8: left allmulticast mode [ 861.015582][T12256] ip6gretap4: left allmulticast mode [ 861.030462][T12256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 861.045572][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17200'. [ 861.257466][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17200'. [ 861.445395][T12258] wg1 speed is unknown, defaulting to 1000 [ 861.470902][ T36] net_ratelimit: 107 callbacks suppressed [ 861.470919][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 861.527438][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17203'. [ 861.576757][T12281] bond15: entered promiscuous mode [ 861.623071][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 861.639694][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17204'. [ 861.821724][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 861.950501][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 862.220705][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 862.314140][T12258] lo speed is unknown, defaulting to 1000 [ 862.332473][ T1165] bond6: (slave bridge16): failed to get link speed/duplex [ 862.437858][T12324] wg1 speed is unknown, defaulting to 1000 [ 862.450697][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 862.571273][ T1165] bond6: (slave bridge16): failed to get link speed/duplex [ 862.681224][ T1165] bond6: (slave bridge16): failed to get link speed/duplex [ 862.800610][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 863.080059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 863.088133][ C0] lec:lec_tx_timeout: lec0 [ 863.092885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 863.361163][T12344] netlink: 'syz.3.17219': attribute type 4 has an invalid length. [ 863.426781][T12349] netlink: 'syz.3.17219': attribute type 4 has an invalid length. [ 863.469519][T12351] netlink: 'syz.1.17220': attribute type 10 has an invalid length. [ 863.549356][ T4018] lo speed is unknown, defaulting to 1000 [ 863.571234][ T4018] syz2: Port: 1 Link ACTIVE [ 864.074734][T12324] lo speed is unknown, defaulting to 1000 [ 864.378218][T12383] wg1 speed is unknown, defaulting to 1000 [ 864.501065][T12258] lo speed is unknown, defaulting to 1000 [ 865.148828][T12397] netlink: 'syz.2.17229': attribute type 1 has an invalid length. [ 865.218242][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17229'. [ 865.294755][T12399] 8021q: adding VLAN 0 to HW filter on device bond12 [ 865.343799][T12397] 8021q: adding VLAN 0 to HW filter on device bond12 [ 865.374121][T12397] bond12: (slave geneve6): making interface the new active one [ 865.397257][T12397] bond12: (slave geneve6): Enslaving as an active interface with an up link [ 865.425897][ T1165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 865.437310][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 865.447835][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 865.456881][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 865.476565][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17231'. [ 865.492131][T12383] lo speed is unknown, defaulting to 1000 [ 865.585053][T12404] 8021q: adding VLAN 0 to HW filter on device bond16 [ 865.742263][T12404] bond0: left allmulticast mode [ 865.759027][T12404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.787398][T12404] bond16: (slave bond0): Enslaving as an active interface with an up link [ 865.898360][T12406] bridge_slave_0 (unregistering): left allmulticast mode [ 865.926992][T12406] bridge_slave_0 (unregistering): left promiscuous mode [ 865.944088][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.344439][T12419] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 867.740588][T12324] lo speed is unknown, defaulting to 1000 [ 867.815584][T12412] wg1 speed is unknown, defaulting to 1000 [ 867.933396][T12428] bridge_slave_1: left allmulticast mode [ 867.939071][T12428] bridge_slave_1: left promiscuous mode [ 867.966263][T12428] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.989089][T12428] bond0: (slave bridge_slave_1): speed changed to 0 on port 3 [ 868.002935][T12428] bond0: (slave bridge_slave_1): Enslaving as a backup interface with a down link [ 868.100593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 868.108704][ C0] lec:lec_tx_timeout: lec0 [ 868.113330][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 868.300661][ T58] net_ratelimit: 16 callbacks suppressed [ 868.300681][ T58] bond6: (slave bridge16): failed to get link speed/duplex [ 868.480187][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 868.600595][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 868.750230][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 868.769934][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17241'. [ 868.874361][ T58] bond6: (slave bridge16): failed to get link speed/duplex [ 868.956074][T12412] lo speed is unknown, defaulting to 1000 [ 868.987677][T12383] lo speed is unknown, defaulting to 1000 [ 869.001121][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 869.509969][T12453] wg1 speed is unknown, defaulting to 1000 [ 869.781130][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 869.900631][ T1165] bond6: (slave bridge16): failed to get link speed/duplex [ 870.012026][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 870.141586][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 870.469106][T12453] lo speed is unknown, defaulting to 1000 [ 870.772478][T12466] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 870.777488][T12468] wg1 speed is unknown, defaulting to 1000 [ 871.765569][T12412] lo speed is unknown, defaulting to 1000 [ 872.127692][T12468] lo speed is unknown, defaulting to 1000 [ 872.154400][T12482] netlink: 'syz.0.17253': attribute type 39 has an invalid length. [ 872.744029][T12495] netlink: 'syz.3.17257': attribute type 1 has an invalid length. [ 872.782854][T12495] bond12: entered promiscuous mode [ 872.788652][T12495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 872.832271][T12495] bond12: (slave bridge14): making interface the new active one [ 872.842661][T12495] bridge14: entered promiscuous mode [ 872.849558][T12495] bond12: (slave bridge14): Enslaving as an active interface with an up link [ 873.039907][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17258'. [ 873.049852][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17258'. [ 873.059433][T12498] netlink: 'syz.3.17258': attribute type 6 has an invalid length. [ 873.120131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 873.128152][ C0] lec:lec_tx_timeout: lec0 [ 873.132848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 873.158689][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17258'. [ 873.202886][T12502] syzkaller0: entered promiscuous mode [ 873.208463][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17258'. [ 873.217696][T12502] syzkaller0: entered allmulticast mode [ 873.246753][T12498] netlink: 'syz.3.17258': attribute type 6 has an invalid length. [ 873.373695][T12453] lo speed is unknown, defaulting to 1000 [ 873.383608][T12500] wg1 speed is unknown, defaulting to 1000 [ 873.391889][ T1087] net_ratelimit: 26 callbacks suppressed [ 873.391906][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 873.660769][ T12] bond6: (slave bridge16): failed to get link speed/duplex [ 873.966649][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 874.092215][T12511] syzkaller0: entered promiscuous mode [ 874.097744][T12511] syzkaller0: entered allmulticast mode [ 874.131262][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 876.226451][T12468] lo speed is unknown, defaulting to 1000 [ 876.303053][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 876.365899][T12530] wg1 speed is unknown, defaulting to 1000 [ 876.452586][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 876.569539][T12547] syzkaller0: entered promiscuous mode [ 876.579955][T12547] syzkaller0: entered allmulticast mode [ 876.789049][T12500] lo speed is unknown, defaulting to 1000 [ 876.809794][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 877.006495][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 877.120152][ T1165] bond6: (slave bridge16): failed to get link speed/duplex [ 877.240261][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 877.892019][ T36] [ 877.894397][ T36] ============================================ [ 877.900543][ T36] WARNING: possible recursive locking detected [ 877.906694][ T36] syzkaller #0 Not tainted [ 877.911109][ T36] -------------------------------------------- [ 877.917255][ T36] kworker/u8:2/36 is trying to acquire lock: [ 877.923224][ T36] ffff88807e757d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 877.933081][ T36] [ 877.933081][ T36] but task is already holding lock: [ 877.940445][ T36] ffff8880825cc958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 877.950299][ T36] [ 877.950299][ T36] other info that might help us debug this: [ 877.958361][ T36] Possible unsafe locking scenario: [ 877.958361][ T36] [ 877.965841][ T36] CPU0 [ 877.969127][ T36] ---- [ 877.972404][ T36] lock(&qdisc_xmit_lock_key#3); [ 877.977437][ T36] lock(&qdisc_xmit_lock_key#3); [ 877.982470][ T36] [ 877.982470][ T36] *** DEADLOCK *** [ 877.982470][ T36] [ 877.990628][ T36] May be due to missing lock nesting notation [ 877.990628][ T36] [ 877.998953][ T36] 11 locks held by kworker/u8:2/36: [ 878.004150][ T36] #0: ffff88805a627148 ((wq_completion)bond2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 878.015264][ T36] #1: ffffc90000ac7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 878.028162][ T36] #2: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 878.037936][ T36] #3: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 878.047933][ T36] #4: ffff888025472228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 878.060580][ T36] #5: ffff8880825cc958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 878.070885][ T36] #6: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 878.079796][ T36] #7: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 878.089565][ T36] #8: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 878.098375][ T36] #9: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 878.108322][ T36] #10: ffff88805a44f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 878.121052][ T36] [ 878.121052][ T36] stack backtrace: [ 878.126948][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 878.126972][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 878.126984][ T36] Workqueue: bond2 bond_alb_monitor [ 878.127007][ T36] Call Trace: [ 878.127014][ T36] [ 878.127021][ T36] dump_stack_lvl+0xe8/0x150 [ 878.127044][ T36] print_deadlock_bug+0x279/0x290 [ 878.127066][ T36] __lock_acquire+0x253f/0x2cf0 [ 878.127086][ T36] ? skb_network_protocol+0x23d/0x3f0 [ 878.127108][ T36] ? netif_skb_features+0x9bc/0xe40 [ 878.127132][ T36] ? sch_direct_xmit+0x15f/0x4c0 [ 878.127153][ T36] lock_acquire+0x106/0x330 [ 878.127169][ T36] ? sch_direct_xmit+0x15f/0x4c0 [ 878.127201][ T36] _raw_spin_lock+0x2e/0x40 [ 878.127219][ T36] ? sch_direct_xmit+0x15f/0x4c0 [ 878.127238][ T36] sch_direct_xmit+0x15f/0x4c0 [ 878.127263][ T36] ? __pfx_sch_direct_xmit+0x10/0x10 [ 878.127284][ T36] ? __kasan_slab_alloc+0x6c/0x80 [ 878.127304][ T36] ? arp_create+0x180/0xa00 [ 878.127322][ T36] ? arp_send_dst+0xa7/0x2a0 [ 878.127343][ T36] __dev_queue_xmit+0x1538/0x3850 [ 878.127369][ T36] ? __dev_queue_xmit+0x274/0x3850 [ 878.127390][ T36] ? arpt_do_table+0x261/0x1ec0 [ 878.127409][ T36] ? __pfx___dev_queue_xmit+0x10/0x10 [ 878.127434][ T36] ? __pfx_arpt_do_table+0x10/0x10 [ 878.127451][ T36] ? rcu_is_watching+0x15/0xb0 [ 878.127476][ T36] ? NF_HOOK+0xa2/0x3c0 [ 878.127496][ T36] NF_HOOK+0x33a/0x3c0 [ 878.127515][ T36] ? __pfx_arp_xmit_finish+0x10/0x10 [ 878.127534][ T36] ? NF_HOOK+0xa2/0x3c0 [ 878.127551][ T36] ? __pfx_NF_HOOK+0x10/0x10 [ 878.127569][ T36] ? lock_acquire+0x106/0x330 [ 878.127586][ T36] ? __pfx_arp_xmit_finish+0x10/0x10 [ 878.127605][ T36] ? inet_addr_type_dev_table+0x25/0x190 [ 878.127628][ T36] arp_xmit+0x16c/0x270 [ 878.127645][ T36] ? arp_xmit+0x23/0x270 [ 878.127665][ T36] arp_solicit+0xbe0/0xe40 [ 878.127686][ T36] ? arp_solicit+0x119/0xe40 [ 878.127706][ T36] ? __pfx_arp_solicit+0x10/0x10 [ 878.127729][ T36] ? __neigh_event_send+0xe9d/0x14a0 [ 878.127745][ T36] ? __pfx_arp_solicit+0x10/0x10 [ 878.127763][ T36] __neigh_event_send+0xf05/0x14a0 [ 878.127792][ T36] neigh_resolve_output+0x198/0x750 [ 878.127811][ T36] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 878.127836][ T36] ? ip_finish_output2+0x3c2/0x1070 [ 878.127854][ T36] ip_finish_output2+0xca9/0x1070 [ 878.127873][ T36] ? ip_skb_dst_mtu+0x109/0xa50 [ 878.127893][ T36] ? ip_finish_output+0x33a/0x3f0 [ 878.127912][ T36] ip_output+0x29f/0x450 [ 878.127930][ T36] ? ip_output+0x5b/0x450 [ 878.127948][ T36] iptunnel_xmit+0x59f/0xa00 [ 878.127976][ T36] ip_tunnel_xmit+0x193a/0x1f20 [ 878.128005][ T36] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 878.128027][ T36] ? __pfx_gre_build_header+0x10/0x10 [ 878.128046][ T36] ? kmem_cache_free+0x180/0x610 [ 878.128065][ T36] ? pskb_expand_head+0x356/0x1320 [ 878.128087][ T36] __gre_xmit+0x19e/0x240 [ 878.128106][ T36] ? __pfx___gre_xmit+0x10/0x10 [ 878.128127][ T36] erspan_xmit+0xa81/0x1670 [ 878.128145][ T36] ? __lock_acquire+0x6b5/0x2cf0 [ 878.128175][ T36] ? __pfx_erspan_xmit+0x10/0x10 [ 878.128198][ T36] dev_hard_start_xmit+0x2cd/0x7f0 [ 878.128225][ T36] sch_direct_xmit+0x251/0x4c0 [ 878.128250][ T36] ? __pfx_sch_direct_xmit+0x10/0x10 [ 878.128271][ T36] ? bond_alb_monitor+0x3d5/0x17e0 [ 878.128287][ T36] ? kthread+0x300/0x470 [ 878.128305][ T36] ? ret_from_fork+0x51e/0xb90 [ 878.128325][ T36] __dev_queue_xmit+0x1538/0x3850 [ 878.128350][ T36] ? __dev_queue_xmit+0x274/0x3850 [ 878.128374][ T36] ? __pfx___dev_queue_xmit+0x10/0x10 [ 878.128398][ T36] ? rcu_is_watching+0x15/0xb0 [ 878.128415][ T36] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 878.128433][ T36] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 878.128459][ T36] ? alb_send_lp_vid+0x14e/0x550 [ 878.128478][ T36] alb_send_lp_vid+0x348/0x550 [ 878.128497][ T36] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 878.128522][ T36] alb_send_learning_packets+0x12c/0x300 [ 878.128540][ T36] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 878.128557][ T36] ? bond_alb_monitor+0xf8/0x17e0 [ 878.128576][ T36] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 878.128596][ T36] bond_alb_monitor+0x3d5/0x17e0 [ 878.128615][ T36] ? bond_alb_monitor+0xf8/0x17e0 [ 878.128632][ T36] ? __pfx_bond_alb_monitor+0x10/0x10 [ 878.128649][ T36] ? process_scheduled_works+0xa0f/0x17a0 [ 878.128666][ T36] ? process_scheduled_works+0xa0f/0x17a0 [ 878.128683][ T36] process_scheduled_works+0xaec/0x17a0 [ 878.128713][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 878.128734][ T36] ? assign_work+0x3d5/0x5e0 [ 878.128752][ T36] worker_thread+0xa50/0xfc0 [ 878.128785][ T36] kthread+0x388/0x470 [ 878.128805][ T36] ? __pfx_worker_thread+0x10/0x10 [ 878.128821][ T36] ? __pfx_kthread+0x10/0x10 [ 878.128841][ T36] ret_from_fork+0x51e/0xb90 [ 878.128859][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 878.128875][ T36] ? __switch_to+0xc7d/0x1400 [ 878.128892][ T36] ? __pfx_kthread+0x10/0x10 [ 878.128911][ T36] ret_from_fork_asm+0x1a/0x30 [ 878.128939][ T36] [ 878.180147][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 878.625550][ C0] lec:lec_tx_timeout: lec0 [ 878.630584][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 878.642630][T12530] lo speed is unknown, defaulting to 1000 [ 878.651640][ T36] net_ratelimit: 4 callbacks suppressed [ 878.651656][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 878.808124][T12500] lo speed is unknown, defaulting to 1000 [ 878.880569][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 878.934790][T12530] lo speed is unknown, defaulting to 1000 [ 878.956782][T12562] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 879.610171][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 879.720579][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 879.850657][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 879.979406][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 880.100972][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 880.210771][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 880.320723][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 880.431171][ T1087] bond6: (slave bridge16): failed to get link speed/duplex [ 883.710469][ T36] net_ratelimit: 28 callbacks suppressed [ 883.710489][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 883.830518][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 883.940504][ T58] bond6: (slave bridge16): failed to get link speed/duplex [ 884.050629][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 884.162866][ T58] bond6: (slave bridge16): failed to get link speed/duplex [ 884.260076][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 884.268096][ C0] lec:lec_tx_timeout: lec0 [ 884.273113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 884.280282][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 884.390240][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 884.500285][ T36] bond6: (slave bridge16): failed to get link speed/duplex [ 884.610203][T10186] bond6: (slave bridge16): failed to get link speed/duplex [ 884.730238][ T36] bond6: (slave bridge16): failed to get link speed/duplex