last executing test programs: 5m29.944852498s ago: executing program 2 (id=8252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r1, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5m29.868512348s ago: executing program 2 (id=8254): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "45b8ab632c55e11ef507b0e9637481bbdcabbf83377540e837eb80365989538a6b88f008c1d6b5f5fbb966edf5628991370c1b724199ba37e0addc5637e0fe6a"}, 0x48}}, 0x840) 5m29.797230742s ago: executing program 2 (id=8257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5m29.704947062s ago: executing program 2 (id=8259): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x14, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x80) 5m29.619489979s ago: executing program 0 (id=8261): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r2) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) 5m29.547359793s ago: executing program 0 (id=8263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) 5m29.50692046s ago: executing program 0 (id=8265): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 5m29.450661678s ago: executing program 0 (id=8267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 5m29.150476197s ago: executing program 3 (id=8274): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m29.139495625s ago: executing program 1 (id=8275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 5m29.078779478s ago: executing program 3 (id=8276): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), 0x4) 5m28.992029599s ago: executing program 1 (id=8277): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 5m28.939221442s ago: executing program 3 (id=8278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) 5m28.906037762s ago: executing program 1 (id=8280): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0xfff2}}}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 5m28.838476771s ago: executing program 1 (id=8281): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) 5m28.837657759s ago: executing program 3 (id=8282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 5m28.662687622s ago: executing program 3 (id=8285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 5m28.618378345s ago: executing program 1 (id=8286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000824}, 0x810) 5m28.617685096s ago: executing program 2 (id=8287): r0 = socket(0xa, 0x2, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x21, 0x0, &(0x7f0000003c00)) 5m28.507949416s ago: executing program 0 (id=8288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) 5m28.269842874s ago: executing program 2 (id=8290): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r0, 0x1024}], 0x1, 0x0, 0x0, 0x0) 5m28.020913759s ago: executing program 32 (id=8290): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40000121, 0x0) ppoll(&(0x7f00000004c0)=[{r0, 0x1024}], 0x1, 0x0, 0x0, 0x0) 5m27.992546604s ago: executing program 0 (id=8292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) 5m27.671026395s ago: executing program 33 (id=8292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) 5m27.624346959s ago: executing program 1 (id=8293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) 5m27.614325898s ago: executing program 34 (id=8293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1ff, 0xa, 0xfff, 0x4fb4, 0x40, 0xb6b, 0x40}, &(0x7f00000000c0)=0x9c) 5m27.608427915s ago: executing program 3 (id=8294): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 5m27.524055125s ago: executing program 35 (id=8294): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 1.222782014s ago: executing program 7 (id=13134): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6(0xa, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 956.970485ms ago: executing program 7 (id=13139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) 894.455026ms ago: executing program 6 (id=13141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x80}}, 0x0) 893.110349ms ago: executing program 5 (id=13142): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 771.984827ms ago: executing program 4 (id=13144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x24}}, 0x4044080) 715.455314ms ago: executing program 6 (id=13146): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 715.102434ms ago: executing program 7 (id=13147): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x48040) sendto$unix(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 706.062853ms ago: executing program 5 (id=13148): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 599.160846ms ago: executing program 8 (id=13149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 598.755403ms ago: executing program 4 (id=13150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 598.087587ms ago: executing program 5 (id=13151): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 579.71681ms ago: executing program 7 (id=13152): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6(0xa, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 512.455756ms ago: executing program 4 (id=13153): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @mcast2, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 494.497598ms ago: executing program 6 (id=13154): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 457.758126ms ago: executing program 8 (id=13155): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 442.697427ms ago: executing program 4 (id=13156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x80}}, 0x0) 440.922061ms ago: executing program 7 (id=13157): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 373.043845ms ago: executing program 5 (id=13158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x1c, r1, 0x3, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x880) 371.920179ms ago: executing program 8 (id=13159): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 289.885958ms ago: executing program 8 (id=13160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x1c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 264.524331ms ago: executing program 5 (id=13161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110008000008000000000000000064000100080026006c09400008000c006400000008000d00"], 0x74}}, 0x0) 256.339949ms ago: executing program 4 (id=13162): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 234.959089ms ago: executing program 6 (id=13163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) 155.603998ms ago: executing program 7 (id=13164): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 155.047298ms ago: executing program 8 (id=13165): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 122.783822ms ago: executing program 6 (id=13166): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 100.315465ms ago: executing program 4 (id=13167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x5, 0x70bd27, 0x20003, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) 51.582883ms ago: executing program 5 (id=13168): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c00c884}, 0x20048050) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20.207883ms ago: executing program 6 (id=13169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 0s ago: executing program 8 (id=13170): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x2400920c) kernel console output (not intermixed with test programs): 731][T28208] team0 (unregistering): Port device team_slave_0 removed [ 457.968679][T28208] team0 (unregistering): Port device team_slave_1 removed [ 458.032773][T28210] netlink: 'syz.4.10276': attribute type 15 has an invalid length. [ 458.052224][T28210] netlink: 'syz.4.10276': attribute type 15 has an invalid length. [ 458.537648][T28258] __nla_validate_parse: 14 callbacks suppressed [ 458.537666][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10298'. [ 458.597023][T28261] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10299'. [ 458.618848][T28261] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10299'. [ 458.677194][T28267] netlink: 'syz.7.10302': attribute type 1 has an invalid length. [ 458.697792][T28267] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10302'. [ 458.712457][T28267] netlink: 1 bytes leftover after parsing attributes in process `syz.7.10302'. [ 458.803470][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10305'. [ 458.991576][T28283] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10310'. [ 459.566338][T28306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10321'. [ 459.799574][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 459.907799][T28326] netlink: 'syz.5.10327': attribute type 1 has an invalid length. [ 459.952503][T28326] bond3: entered promiscuous mode [ 459.957624][T28326] bond3: entered allmulticast mode [ 460.694705][T28360] netlink: 'syz.5.10338': attribute type 1 has an invalid length. [ 460.735194][T28360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.755838][T28360] ip6erspan0: entered promiscuous mode [ 460.779763][T28360] bond4: (slave ip6erspan0): making interface the new active one [ 460.796382][T28360] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 460.820078][T28364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10341'. [ 460.831540][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10341'. [ 460.958387][T28372] netlink: 'syz.5.10345': attribute type 9 has an invalid length. [ 460.971155][T28372] netlink: 'syz.5.10345': attribute type 11 has an invalid length. [ 460.988022][T28372] netlink: 'syz.5.10345': attribute type 12 has an invalid length. [ 461.239235][T28392] netlink: 'syz.5.10353': attribute type 9 has an invalid length. [ 461.248510][T28392] netlink: 'syz.5.10353': attribute type 11 has an invalid length. [ 461.453993][T28406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.199853][T28459] bridge0: port 4(batadv0) entered blocking state [ 462.207323][T28459] bridge0: port 4(batadv0) entered disabled state [ 462.214044][T28459] batadv0: entered allmulticast mode [ 462.221337][T28459] batadv0: entered promiscuous mode [ 462.691904][ T8370] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 462.701987][ T8370] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 463.351877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.835686][T28551] __nla_validate_parse: 15 callbacks suppressed [ 463.835704][T28551] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10426'. [ 463.871610][T28551] nbd: couldn't find a device at index 0 [ 464.138832][T28569] atomic_op ffff888057e77198 conn xmit_atomic 0000000000000000 [ 464.175939][T28567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10433'. [ 465.290795][T28564] validate_nla: 6 callbacks suppressed [ 465.290813][T28564] netlink: 'syz.7.10432': attribute type 30 has an invalid length. [ 465.446301][T28579] netlink: 'syz.6.10438': attribute type 1 has an invalid length. [ 465.541176][T28579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.574664][T28586] bond3: (slave geneve4): making interface the new active one [ 465.585152][T28586] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 465.600204][T28589] netlink: 'syz.7.10442': attribute type 1 has an invalid length. [ 465.601629][T28591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10443'. [ 465.717165][T28589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.806728][T28604] veth0: entered promiscuous mode [ 465.828960][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10447'. [ 465.924937][T28604] veth0 (unregistering): left promiscuous mode [ 467.151084][T28676] netlink: 'syz.7.10480': attribute type 22 has an invalid length. [ 467.169196][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10480'. [ 467.253030][T28676] netlink: 'syz.7.10480': attribute type 22 has an invalid length. [ 467.265635][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10480'. [ 467.611861][T28691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10488'. [ 467.620844][T28691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10488'. [ 467.662094][T28695] netlink: 480 bytes leftover after parsing attributes in process `syz.7.10489'. [ 467.673017][T28695] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.10489'. [ 468.215313][T28722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 468.445298][T28737] bond5: entered allmulticast mode [ 468.463114][T28737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.472817][T28735] syzkaller1: entered promiscuous mode [ 468.480858][T28735] syzkaller1: entered allmulticast mode [ 468.495564][T28743] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.532685][T28743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.550895][T28743] lo: entered allmulticast mode [ 468.561299][T28743] bond5: (slave lo): Enslaving as a backup interface with an up link [ 468.571017][T28743] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.590458][T28751] bond2: option mode: unable to set because the bond device has slaves [ 468.654905][ T8370] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.713036][ T8370] bond5: (slave lo): link status up again after 0 ms [ 468.720000][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 468.821871][ T8370] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.862309][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 469.002612][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 469.096335][T28785] __nla_validate_parse: 2 callbacks suppressed [ 469.096356][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10519'. [ 469.113604][ T13] bond5: (slave lo): failed to get link speed/duplex [ 469.115013][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10519'. [ 469.251763][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 469.366156][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10526'. [ 469.916127][T28828] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10535'. [ 469.967171][T28832] pim6reg1: entered promiscuous mode [ 469.981491][T28832] pim6reg1: entered allmulticast mode [ 470.181303][T28842] netlink: 'syz.6.10539': attribute type 64 has an invalid length. [ 470.195078][T28842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10539'. [ 470.207854][T28842] netlink: 'syz.6.10539': attribute type 64 has an invalid length. [ 470.224492][T28842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10539'. [ 470.342873][T28849] bridge_slave_0: left allmulticast mode [ 470.349122][T28849] bridge_slave_0: left promiscuous mode [ 470.357744][T28849] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.373838][T28849] bond0: (slave bridge_slave_1): Releasing backup interface [ 470.393107][T28849] bond0: (slave bond_slave_0): Releasing backup interface [ 470.405089][T28849] bond0: (slave bond_slave_1): Releasing backup interface [ 470.420638][T28849] team0: Port device team_slave_0 removed [ 470.430043][T28849] team0: Port device team_slave_1 removed [ 470.437200][T28849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.446614][T28849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.457288][T28849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.465467][T28849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.742200][T28873] netlink: 'syz.6.10551': attribute type 19 has an invalid length. [ 470.750578][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10551'. [ 470.764097][T28873] netlink: 'syz.6.10551': attribute type 19 has an invalid length. [ 470.802883][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10551'. [ 470.929222][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10556'. [ 471.069359][T28893] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10559'. [ 471.158204][T28893] ip6gre2: entered promiscuous mode [ 471.190252][T28893] ip6gre2: entered allmulticast mode [ 471.446054][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 120 seconds [ 471.759105][T28931] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 471.778971][T28931] syzkaller1: Refused to change device type [ 471.977492][T28938] syzkaller1: entered promiscuous mode [ 471.991950][T28938] syzkaller1: entered allmulticast mode [ 472.679728][T28994] gretap0: entered promiscuous mode [ 472.696649][T28994] gretap0: left promiscuous mode [ 472.709168][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.716488][T28994] bridge0: port 2(bridge_slave_1) entered listening state [ 472.724005][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.731169][T28994] bridge0: port 1(bridge_slave_0) entered listening state [ 472.895495][T29005] team1: entered promiscuous mode [ 472.900548][T29005] team1: entered allmulticast mode [ 472.974622][T29009] batadv_slave_1: entered promiscuous mode [ 472.982554][T29008] batadv_slave_1: left promiscuous mode [ 473.594909][ T3884] net_ratelimit: 34 callbacks suppressed [ 473.594938][ T3884] bond5: (slave lo): failed to get link speed/duplex [ 474.040610][ T36] bond5: (slave lo): failed to get link speed/duplex [ 474.161517][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 474.356015][ T36] bond5: (slave lo): failed to get link speed/duplex [ 474.367731][T29057] netlink: 'syz.8.10625': attribute type 1 has an invalid length. [ 474.499992][T29065] bond1: (slave geneve2): making interface the new active one [ 474.508733][T29065] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 474.519081][ T49] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.530117][ T49] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.549865][ T49] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.565987][ T49] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.603776][ T49] bond5: (slave lo): failed to get link speed/duplex [ 474.731992][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 474.810809][T29086] __nla_validate_parse: 7 callbacks suppressed [ 474.810829][T29086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10637'. [ 474.841804][T11145] bond5: (slave lo): failed to get link speed/duplex [ 474.862037][T29086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10637'. [ 474.961514][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 475.083373][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 475.196702][T29102] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10642'. [ 475.273925][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 475.451222][T29122] netlink: 'syz.7.10650': attribute type 1 has an invalid length. [ 475.567679][T29122] bond4: entered promiscuous mode [ 475.574092][T29122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.611823][T29131] netlink: 'syz.5.10652': attribute type 7 has an invalid length. [ 475.626717][T29123] bond4: (slave bridge2): making interface the new active one [ 475.635679][T29123] bridge2: entered promiscuous mode [ 475.642051][T29123] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 475.707269][T29131] netlink: 'syz.5.10652': attribute type 7 has an invalid length. [ 475.932215][T29133] veth1_vlan (unregistering): left allmulticast mode [ 476.390844][T29158] netlink: 'syz.5.10659': attribute type 1 has an invalid length. [ 476.514807][T29158] bond5: (slave gretap3): making interface the new active one [ 476.532743][T29158] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 476.723357][T29175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10666'. [ 476.745678][T29178] netlink: 'syz.8.10667': attribute type 1 has an invalid length. [ 476.755414][T29178] netlink: 'syz.8.10667': attribute type 4 has an invalid length. [ 476.778831][T29171] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 476.790206][T29178] netlink: 9422 bytes leftover after parsing attributes in process `syz.8.10667'. [ 476.809422][T29171] bond6 (unregistering): Released all slaves [ 477.010914][T29190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10675'. [ 477.212316][T29202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10677'. [ 477.253018][T29202] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10677'. [ 477.434499][T29209] netlink: 'syz.4.10682': attribute type 21 has an invalid length. [ 477.451952][T29209] netlink: 'syz.4.10682': attribute type 22 has an invalid length. [ 477.465824][T29209] netlink: 'syz.4.10682': attribute type 23 has an invalid length. [ 477.486187][T29209] netlink: 'syz.4.10682': attribute type 25 has an invalid length. [ 477.504167][T29209] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10682'. [ 478.114462][T29242] xt_hashlimit: size too large, truncated to 1048576 [ 478.702406][ T6323] net_ratelimit: 19 callbacks suppressed [ 478.702426][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 478.832416][ T69] bond5: (slave lo): failed to get link speed/duplex [ 478.951728][T11145] bond5: (slave lo): failed to get link speed/duplex [ 479.080124][ T69] bond5: (slave lo): failed to get link speed/duplex [ 479.152923][T29291] netlink: 'syz.7.10710': attribute type 1 has an invalid length. [ 479.248877][T29296] bond5: (slave gretap1): making interface the new active one [ 479.257421][T29296] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 479.276336][ T8370] bond5: (slave lo): failed to get link speed/duplex [ 479.401112][T29307] netlink: 'syz.6.10716': attribute type 1 has an invalid length. [ 479.411523][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 479.533125][T29307] bond4: (slave bridge1): making interface the new active one [ 479.554061][T29307] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 479.715648][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10722'. [ 479.731666][T11145] bond5: (slave lo): failed to get link speed/duplex [ 479.953434][ T6323] bond5: (slave lo): failed to get link speed/duplex [ 480.102018][ T3884] bond5: (slave lo): failed to get link speed/duplex [ 480.237913][ T49] bond5: (slave lo): failed to get link speed/duplex [ 480.262984][T29351] ip6gre2: entered promiscuous mode [ 480.268234][T29351] ip6gre2: entered allmulticast mode [ 480.470320][T29364] __nla_validate_parse: 1 callbacks suppressed [ 480.470339][T29364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10740'. [ 480.674222][T29377] only policy match revision 0 supported [ 480.674241][T29377] unable to load match [ 480.999437][T29396] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 481.191215][T29408] netlink: 'syz.7.10757': attribute type 2 has an invalid length. [ 481.216556][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10757'. [ 481.276861][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10757'. [ 481.894093][T29436] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 482.310361][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10774'. [ 482.400442][T29466] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10774'. [ 482.575982][T29400] Bluetooth: hci4: link tx timeout [ 482.581329][T29400] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 482.657166][T29473] bond2: option mode: unable to set because the bond device has slaves [ 482.785490][T29482] validate_nla: 1 callbacks suppressed [ 482.785509][T29482] netlink: 'syz.4.10783': attribute type 1 has an invalid length. [ 482.868437][T29486] block nbd8: not configured, cannot reconfigure [ 483.115559][T29399] Bluetooth: hci1: command 0x0406 tx timeout [ 483.122358][T29399] Bluetooth: hci3: command 0x0406 tx timeout [ 483.424582][T29518] bond5: option mode: unable to set because the bond device has slaves [ 484.275935][T29548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10809'. [ 484.362518][T29551] netlink: 'syz.5.10811': attribute type 1 has an invalid length. [ 484.460576][T29557] bond6: (slave gretap4): making interface the new active one [ 484.484038][T29557] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 484.633073][T25637] Bluetooth: hci4: command 0x0406 tx timeout [ 484.736862][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10818'. [ 484.800375][T29569] !: left allmulticast mode [ 484.816939][T29569] bridge0: port 3(0!) entered disabled state [ 484.853256][T29569] bridge_slave_1: left allmulticast mode [ 484.878704][T29569] bridge_slave_1: left promiscuous mode [ 484.906543][T29569] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.948264][T29569] bridge_slave_0: left allmulticast mode [ 484.978454][T29569] bridge_slave_0: left promiscuous mode [ 485.007218][T29569] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.054887][T29583] netlink: 'syz.8.10822': attribute type 1 has an invalid length. [ 485.233421][T29583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.263005][T29588] bond2: (slave geneve3): making interface the new active one [ 485.286208][T29588] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 486.090320][T29646] netlink: 240 bytes leftover after parsing attributes in process `syz.6.10838'. [ 486.126416][T29649] netlink: 'syz.5.10840': attribute type 1 has an invalid length. [ 486.193362][T29654] netlink: 'syz.4.10842': attribute type 1 has an invalid length. [ 486.251228][T29649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 486.431846][T29656] bond6: (slave ip6gretap1): making interface the new active one [ 486.440212][T29656] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 486.476227][T29656] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 486.503469][T29656] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 486.585944][T29655] bond7: (slave gretap5): making interface the new active one [ 486.630194][T29655] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 486.946409][T29693] netlink: 'syz.5.10848': attribute type 2 has an invalid length. [ 486.964859][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10850'. [ 487.007883][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10850'. [ 487.203257][T29711] netlink: 'syz.6.10854': attribute type 4 has an invalid length. [ 487.456146][T29727] bond5: (slave lo): Removing an active aggregator [ 487.499945][T29727] bond5: (slave lo): Releasing backup interface [ 487.549575][T29727] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 487.583427][T29727] lo: left allmulticast mode [ 487.635296][T29727] team0: Port device dummy0 removed [ 487.654466][T29727] veth0_to_bridge: left allmulticast mode [ 487.667387][T29727] veth0_to_bridge: left promiscuous mode [ 487.688794][T29727] bridge0: port 3(veth0_to_bridge) entered disabled state [ 487.726400][T29727] bridge_slave_0: left promiscuous mode [ 487.745984][T29727] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.766994][T29727] bridge_slave_1: left allmulticast mode [ 487.775126][T29727] bridge_slave_1: left promiscuous mode [ 487.787283][T29750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10867'. [ 487.811960][T29727] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.858299][T29727] bond0: (slave 32): Releasing backup interface [ 487.879559][T29727] bond0: (slave bond_slave_1): Releasing backup interface [ 487.897283][T29727] team0: Port device team_slave_0 removed [ 487.908186][T29727] team0: Port device team_slave_1 removed [ 487.916845][T29727] net_ratelimit: 23 callbacks suppressed [ 487.916863][T29727] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 488.188972][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10870'. [ 488.243620][T29767] veth1_to_bond: entered allmulticast mode [ 488.358109][T29771] veth1_to_bond (unregistering): left allmulticast mode [ 488.378909][T29779] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.10872'. [ 488.537251][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10874'. [ 489.418444][T29837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10890'. [ 489.456113][T29837] netlink: 'syz.5.10890': attribute type 7 has an invalid length. [ 489.475018][T29837] netlink: 'syz.5.10890': attribute type 8 has an invalid length. [ 489.495738][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10890'. [ 489.865501][T29865] netlink: 92 bytes leftover after parsing attributes in process `syz.6.10900'. [ 491.284296][T29936] __nla_validate_parse: 3 callbacks suppressed [ 491.284317][T29936] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10923'. [ 492.508985][T29985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10937'. [ 492.533035][T29985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10937'. [ 492.607217][T29992] netlink: 'syz.5.10940': attribute type 1 has an invalid length. [ 492.623430][T29985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10937'. [ 492.641257][T29995] batman_adv: batadv0: Removing interface: dummy0 [ 492.663333][T29985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10937'. [ 492.682425][T29995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.807197][T29992] bond8: entered promiscuous mode [ 492.826663][T29992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.890409][T29999] bond8: (slave bridge0): making interface the new active one [ 492.916044][T29999] bridge0: entered promiscuous mode [ 492.933206][T29999] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 492.987237][T29968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10934'. [ 493.209201][T30022] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10942'. [ 493.529098][T30036] gre0: left promiscuous mode [ 493.578379][T30036] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 493.619199][T30036] ip6gre1: left promiscuous mode [ 493.655444][T30036] ip6gre2: left promiscuous mode [ 493.669530][T30036] bond4: left promiscuous mode [ 493.676978][T30036] bridge2: left promiscuous mode [ 493.947789][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10957'. [ 494.017115][T30066] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.10960'. [ 494.067623][T30071] netlink: 'syz.8.10962': attribute type 26 has an invalid length. [ 494.092189][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10962'. [ 494.131162][T30071] netlink: 'syz.8.10962': attribute type 26 has an invalid length. [ 494.818168][T30117] netlink: 'syz.6.10976': attribute type 1 has an invalid length. [ 495.573036][T30121] bond5: (slave gretap1): making interface the new active one [ 495.591232][T30121] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 495.608117][T30142] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 495.623558][T30142] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 496.038134][T30169] netlink: 'syz.5.10990': attribute type 12 has an invalid length. [ 496.204804][T30181] nbd: couldn't find a device at index 0 [ 496.357992][T30188] __nla_validate_parse: 5 callbacks suppressed [ 496.358012][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10998'. [ 496.652506][T30203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.659753][T30203] IPv6: NLM_F_CREATE should be set when creating new route [ 496.779577][T30211] netlink: 'syz.6.11006': attribute type 1 has an invalid length. [ 496.908747][T30216] bond6: (slave bridge2): making interface the new active one [ 496.921639][T30216] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 497.695075][T30265] bridge0: entered allmulticast mode [ 498.042494][T30277] netlink: 'syz.7.11033': attribute type 1 has an invalid length. [ 498.054224][T30280] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 498.070746][T30277] netlink: 'syz.7.11033': attribute type 1 has an invalid length. [ 498.232434][T30288] policy can only be matched on NF_INET_PRE_ROUTING [ 498.232457][T30288] unable to load match [ 498.603938][T30315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11052'. [ 498.727479][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11054'. [ 498.935110][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11054'. [ 499.166435][T30345] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 499.227570][T30357] syzkaller1: entered promiscuous mode [ 499.233798][T30357] syzkaller1: entered allmulticast mode [ 499.385831][T30366] netlink: 'syz.6.11072': attribute type 1 has an invalid length. [ 499.534869][T30371] bond7: (slave gretap2): making interface the new active one [ 499.545734][T30371] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 499.817567][ T3654] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x3 [ 500.089632][T30405] tipc: Failed to remove unknown binding: 66,1,1/0:1437101191/1437101193 [ 500.110601][T30405] tipc: Failed to remove unknown binding: 66,1,1/0:1437101191/1437101193 [ 500.432502][T30426] netlink: 'syz.8.11096': attribute type 1 has an invalid length. [ 500.569925][T30430] bond3: (slave ip6gretap1): making interface the new active one [ 500.589475][T30430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.598499][T30430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 500.610607][T30430] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 500.680701][T30435] bond2: option mode: unable to set because the bond device has slaves [ 500.726534][T30433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11099'. [ 500.735124][T30438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 501.528227][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 150 seconds [ 501.668362][T30462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11108'. [ 501.718325][T30462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11108'. [ 502.025842][T30485] netlink: 'syz.7.11118': attribute type 2 has an invalid length. [ 502.747978][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11132'. [ 502.793214][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 502.799381][T30518] netlink: 'syz.4.11142': attribute type 15 has an invalid length. [ 502.801654][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 502.916665][T30524] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.11136'. [ 503.121670][T30532] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 503.285600][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11147'. [ 503.293864][T30547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11148'. [ 503.338080][T30547] 8021q: adding VLAN 0 to HW filter on device bond8 [ 503.364490][T30550] 8021q: adding VLAN 0 to HW filter on device bond8 [ 503.374218][T30550] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 503.386001][T30550] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 503.642240][T30561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.696706][T30614] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11174'. [ 505.278350][T30645] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.11183'. [ 505.290734][T30646] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.11184'. [ 505.665470][T30670] netlink: 'syz.5.11194': attribute type 8 has an invalid length. [ 505.742531][T30667] dvmrp0: entered allmulticast mode [ 505.778373][T30676] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 506.313438][T30694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11205'. [ 506.777293][T30722] __nla_validate_parse: 3 callbacks suppressed [ 506.777312][T30722] netlink: 208 bytes leftover after parsing attributes in process `syz.4.11213'. [ 507.336983][T30752] netlink: 'syz.4.11223': attribute type 1 has an invalid length. [ 507.355594][T30752] netlink: 'syz.4.11223': attribute type 4 has an invalid length. [ 507.381620][T30752] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.11223'. [ 507.693485][T30776] netlink: 'syz.7.11232': attribute type 1 has an invalid length. [ 507.706260][T30776] netlink: 'syz.7.11232': attribute type 4 has an invalid length. [ 507.732126][T30776] netlink: 9491 bytes leftover after parsing attributes in process `syz.7.11232'. [ 508.107175][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11239'. [ 508.132882][T30801] netlink: 'syz.5.11239': attribute type 5 has an invalid length. [ 508.152682][T30801] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11239'. [ 508.535270][T30796] !: left promiscuous mode [ 508.985251][T30796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.017735][T30796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.365420][T30796] bond3: left promiscuous mode [ 509.379100][T30796] bond3: left allmulticast mode [ 509.397585][T30796] ip6erspan0: left promiscuous mode [ 509.457379][T30796] bond8: left promiscuous mode [ 509.462247][T30796] bridge0: left promiscuous mode [ 509.536490][T30801] geneve2: entered promiscuous mode [ 509.551429][T30801] geneve2: entered allmulticast mode [ 509.676433][ T69] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.685854][ T69] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.695425][ T69] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 509.734609][ T69] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.780348][ T69] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.806751][ T69] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 509.823936][T30827] syzkaller1: entered promiscuous mode [ 509.849187][T30827] syzkaller1: entered allmulticast mode [ 509.862262][ T69] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.871199][ T69] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.891722][ T69] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 509.900442][ T69] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.910382][ T69] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.943890][ T69] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 510.313322][T30855] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 510.571351][T30876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11262'. [ 510.595545][T30876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11262'. [ 510.602502][T30878] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 510.624442][T30878] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 511.146302][T30909] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.11279'. [ 511.679313][ T5839] IPVS: starting estimator thread 0... [ 511.772081][T30938] IPVS: using max 34 ests per chain, 81600 per kthread [ 512.082264][T30953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11298'. [ 512.102460][T30955] x_tables: duplicate underflow at hook 4 [ 512.134920][T30953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11298'. [ 512.375306][T30967] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11304'. [ 512.429255][T30970] sctp: [Deprecated]: syz.6.11306 (pid 30970) Use of int in maxseg socket option. [ 512.429255][T30970] Use struct sctp_assoc_value instead [ 512.797878][T30991] netlink: 'syz.5.11316': attribute type 6 has an invalid length. [ 512.813626][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11317'. [ 512.832032][T30991] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11316'. [ 512.841188][T30991] nbd: couldn't find a device at index 0 [ 513.164610][T31014] netlink: 'syz.7.11326': attribute type 7 has an invalid length. [ 513.181794][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11326'. [ 513.326255][T31026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11332'. [ 513.348686][T31026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11332'. [ 513.697064][T31052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11343'. [ 513.719633][T31052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11343'. [ 514.468683][T31094] netlink: 'syz.7.11360': attribute type 11 has an invalid length. [ 514.479906][T31094] netlink: 'syz.7.11360': attribute type 4 has an invalid length. [ 514.488822][T31094] netlink: 'syz.7.11360': attribute type 5 has an invalid length. [ 514.497226][T31094] netlink: 'syz.7.11360': attribute type 6 has an invalid length. [ 515.244833][T31136] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 515.738020][T31156] syzkaller0: entered promiscuous mode [ 515.744417][T31156] syzkaller0: entered allmulticast mode [ 515.963222][T23388] udevd[23388]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.985544][T23366] udevd[23366]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.019130][T31209] __nla_validate_parse: 13 callbacks suppressed [ 518.019149][T31209] netlink: 27 bytes leftover after parsing attributes in process `syz.5.11403'. [ 518.346241][T31229] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11411'. [ 518.375072][T31225] syzkaller1: entered promiscuous mode [ 518.395688][T31225] syzkaller1: entered allmulticast mode [ 518.582091][T31243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11419'. [ 518.723913][T31245] netlink: 536 bytes leftover after parsing attributes in process `syz.7.11418'. [ 518.773088][T31255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11423'. [ 519.005107][T31265] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.11427'. [ 519.026138][T31266] syzkaller1: entered promiscuous mode [ 519.044397][T31266] syzkaller1: entered allmulticast mode [ 519.473902][T31279] atm:sigd_send: bad message type 33824513 [ 519.624540][T31287] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.11437'. [ 522.326808][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11445'. [ 523.007242][T31348] netlink: 'syz.7.11460': attribute type 1 has an invalid length. [ 523.053123][T31348] netlink: 'syz.7.11460': attribute type 4 has an invalid length. [ 523.089102][T31353] netlink: 'syz.7.11460': attribute type 1 has an invalid length. [ 523.089857][T31348] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.11460'. [ 523.119204][T31353] netlink: 'syz.7.11460': attribute type 4 has an invalid length. [ 523.152405][T31353] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.11460'. [ 523.308756][T31327] lec:lec_atm_close: lec0: Shut down! [ 523.774500][T31388] netlink: 'syz.8.11472': attribute type 1 has an invalid length. [ 523.897297][T31388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.942821][T31397] bond4: (slave veth7): Enslaving as an active interface with a down link [ 523.975408][T31399] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 524.223740][T23699] lec:lec_start_xmit: lec0:No lecd attached [ 524.454509][T31426] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 524.663853][T31438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11488'. [ 524.957442][T31454] netlink: 'syz.5.11488': attribute type 7 has an invalid length. [ 525.581953][T31487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11499'. [ 525.657930][T31487] netlink: 'syz.5.11499': attribute type 1 has an invalid length. [ 526.057485][T31504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11505'. [ 526.092351][T31505] netlink: 'syz.5.11506': attribute type 1 has an invalid length. [ 526.145390][T31505] bond9: entered promiscuous mode [ 526.161178][T31505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 526.273599][T31505] bond9: (slave bridge5): making interface the new active one [ 526.281113][T31505] bridge5: entered promiscuous mode [ 526.303452][T31505] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 526.604686][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11507'. [ 527.058067][T31529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.133853][T31533] erspan0: entered promiscuous mode [ 527.139199][T31533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11514'. [ 527.245358][T31535] syzkaller0: entered promiscuous mode [ 527.251307][T31535] syzkaller0: entered allmulticast mode [ 527.424247][T31556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11522'. [ 529.239119][T31592] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11531'. [ 529.875509][T31603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11534'. [ 529.914839][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 529.923242][ C0] lec:lec_tx_timeout: lec0 [ 529.928516][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.019862][T31598] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11531'. [ 531.109409][T31609] syz_tun: entered allmulticast mode [ 531.295750][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.303785][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.311722][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.319622][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.327565][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.335507][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.344074][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.352032][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.360031][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.368416][T31611] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 531.406878][T31616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11537'. [ 531.490939][T31608] syz_tun: left allmulticast mode [ 531.601574][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 180 seconds [ 532.595119][T31647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11548'. [ 532.871835][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.879109][ C1] bridge0: topology change detected, propagating [ 532.885918][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.893190][ C1] bridge0: topology change detected, propagating [ 533.106175][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11555'. [ 533.315572][ T5202] udevd[5202]: worker [23040] /devices/virtual/block/nbd1 timeout; kill it [ 533.343265][ T5202] udevd[5202]: seq 15265 '/devices/virtual/block/nbd1' killed [ 533.478277][T31685] netlink: 11562 bytes leftover after parsing attributes in process `syz.8.11564'. [ 533.738717][T31697] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11570'. [ 533.776459][T31701] netlink: 'syz.4.11572': attribute type 8 has an invalid length. [ 533.801114][T31701] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11572'. [ 533.815220][T31701] nbd: couldn't find a device at index 0 [ 533.883286][T31706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11574'. [ 533.898052][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.955788][T31706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.458394][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11585'. [ 534.583714][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11589'. [ 534.844962][T31757] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11592'. [ 534.875280][T31759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11593'. [ 534.875339][T31755] syzkaller1: entered promiscuous mode [ 534.890480][T31755] syzkaller1: entered allmulticast mode [ 534.951855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 534.960005][ C0] lec:lec_tx_timeout: lec0 [ 534.965204][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.972438][T31763] sctp: [Deprecated]: syz.7.11594 (pid 31763) Use of int in maxseg socket option. [ 534.972438][T31763] Use struct sctp_assoc_value instead [ 535.523804][T31794] netlink: 'syz.7.11606': attribute type 39 has an invalid length. [ 535.836976][T31812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11613'. [ 535.913993][T31812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 535.934339][T31812] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 535.957619][T31812] team0: Failed to send options change via netlink (err -105) [ 535.982070][T31812] team0: Port device batadv1 added [ 536.146053][T31824] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11611'. [ 536.430333][T31833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11618'. [ 536.705827][T31850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11623'. [ 536.793874][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11623'. [ 536.810271][T31850] bond9: entered promiscuous mode [ 536.816321][T31850] 8021q: adding VLAN 0 to HW filter on device bond9 [ 536.886848][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11623'. [ 536.944332][T31861] net_ratelimit: 45 callbacks suppressed [ 536.944363][T31861] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.947643][T31850] bond9: (slave xfrm2): refused to change device type [ 537.380898][T31880] syzkaller0: entered promiscuous mode [ 537.392198][T31880] syzkaller0: entered allmulticast mode [ 537.432746][T31880] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 538.601185][T31936] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 538.827745][T31934] netlink: 'syz.4.11652': attribute type 29 has an invalid length. [ 538.847435][T31934] netlink: 'syz.4.11652': attribute type 29 has an invalid length. [ 539.971957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 539.979995][ C0] lec:lec_tx_timeout: lec0 [ 539.984749][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 540.039359][T32011] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3996642945/3996642947 [ 540.365694][T32022] gtp1: entered promiscuous mode [ 540.515723][T32026] netlink: 'syz.5.11682': attribute type 1 has an invalid length. [ 540.538584][T32028] __nla_validate_parse: 11 callbacks suppressed [ 540.538602][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11684'. [ 540.585784][T32026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 540.594047][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11684'. [ 540.618681][T32030] bond10: (slave veth11): Enslaving as an active interface with a down link [ 540.678876][T32026] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 540.692575][T32026] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 541.411973][ T5908] IPVS: starting estimator thread 0... [ 541.521549][T32067] IPVS: using max 32 ests per chain, 76800 per kthread [ 541.601246][ T141] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 541.786217][T32088] delete_channel: no stack [ 541.854558][T32091] netlink: 'syz.8.11705': attribute type 1 has an invalid length. [ 541.900478][T32091] bond5: entered promiscuous mode [ 541.905812][T32091] bond5: entered allmulticast mode [ 541.920816][T32091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.965509][T32097] macvlan0: entered promiscuous mode [ 541.971934][T32097] macvlan0: entered allmulticast mode [ 541.987844][T32097] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 542.119958][T32104] syzkaller1: entered promiscuous mode [ 542.126804][T32104] syzkaller1: entered allmulticast mode [ 542.332630][T32112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11712'. [ 542.382863][T32112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11712'. [ 542.603901][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11715'. [ 543.138341][T32129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.453139][T32150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11728'. [ 543.490094][T32152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11729'. [ 543.543126][T32156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11729'. [ 543.786946][T32168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11734'. [ 544.632736][T32195] syzkaller0: entered promiscuous mode [ 544.638472][T32195] syzkaller0: entered allmulticast mode [ 544.991454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.999577][ C0] lec:lec_tx_timeout: lec0 [ 545.004367][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 545.534766][T32218] netlink: 156 bytes leftover after parsing attributes in process `syz.7.11752'. [ 545.805076][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11754'. [ 547.254015][T32250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11765'. [ 547.534587][T32270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11769'. [ 547.727363][T32283] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11775'. [ 547.856614][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11777'. [ 548.006352][T32294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11778'. [ 548.019527][T32294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11778'. [ 548.212465][T32303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11782'. [ 548.326987][T32311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11785'. [ 549.034132][T32344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11798'. [ 549.145362][T32346] syzkaller1: entered promiscuous mode [ 549.150993][T32346] syzkaller1: entered allmulticast mode [ 549.372325][T32356] syzkaller1: entered promiscuous mode [ 549.391133][T32356] syzkaller1: entered allmulticast mode [ 550.011420][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 550.019508][ C0] lec:lec_tx_timeout: lec0 [ 550.024810][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 550.163566][T32390] syzkaller1: entered promiscuous mode [ 550.169272][T32390] syzkaller1: entered allmulticast mode [ 550.916955][T32433] __nla_validate_parse: 3 callbacks suppressed [ 550.916968][T32433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11830'. [ 551.066056][T32437] netlink: 'syz.8.11831': attribute type 8 has an invalid length. [ 551.076524][T32437] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11831'. [ 551.086969][T32437] nbd: couldn't find a device at index 0 [ 551.337475][T32450] batadv_slave_0: entered promiscuous mode [ 551.354483][T32449] batadv_slave_0: left promiscuous mode [ 551.399314][T32452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.433964][T32452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.575711][T32461] syzkaller1: entered promiscuous mode [ 551.581434][T32461] syzkaller1: entered allmulticast mode [ 552.120012][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11856'. [ 552.125533][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11857'. [ 552.140719][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11857'. [ 552.213920][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11858'. [ 552.230063][T32493] netlink: 'syz.7.11856': attribute type 1 has an invalid length. [ 552.749211][T32527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11870'. [ 552.818384][T32531] tipc: Started in network mode [ 552.824897][T32531] tipc: Node identity ee9cdd2146ff, cluster identity 4711 [ 552.833675][T32531] tipc: Enabled bearer , priority 0 [ 552.924295][T32531] syzkaller0: entered promiscuous mode [ 552.929928][T32531] syzkaller0: entered allmulticast mode [ 552.941958][T32531] tipc: Resetting bearer [ 553.086391][T32546] netlink: 'syz.4.11876': attribute type 1 has an invalid length. [ 553.105477][T32530] tipc: Resetting bearer [ 554.856139][T32530] tipc: Disabling bearer [ 554.867931][T32544] syzkaller0: entered promiscuous mode [ 554.873752][T32544] syzkaller0: entered allmulticast mode [ 554.881035][T32546] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 554.928164][T32550] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 554.966376][T32550] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 554.984108][T32550] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 554.999140][ T55] tipc: Node number set to 2825116961 [ 555.031406][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 555.039507][ C0] lec:lec_tx_timeout: lec0 [ 555.044652][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 555.195716][T32569] netlink: 'syz.7.11885': attribute type 1 has an invalid length. [ 555.314904][T32569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.381039][T32572] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 555.438914][T32573] bond6: entered promiscuous mode [ 555.489431][T32573] bond6: entered allmulticast mode [ 555.814006][T32595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11896'. [ 555.875996][T29400] block nbd4: Receive control failed (result -107) [ 555.896178][T32603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11899'. [ 556.093006][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11904'. [ 556.445935][T32627] netlink: 'syz.7.11907': attribute type 1 has an invalid length. [ 556.538985][T32627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.560636][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11909'. [ 556.588611][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11909'. [ 556.634717][T32631] veth9: entered promiscuous mode [ 556.644816][T32631] bond7: (slave veth9): Enslaving as an active interface with an up link [ 557.238312][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11924'. [ 557.437381][T32677] tipc: Enabled bearer , priority 0 [ 557.536468][T32677] syzkaller0: entered promiscuous mode [ 557.542641][T32677] syzkaller0: entered allmulticast mode [ 557.549036][T32677] tipc: Resetting bearer [ 557.608653][T32674] tipc: Resetting bearer [ 557.773099][T32691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11934'. [ 559.832295][T12276] IPVS: ip_vs_send_async error -101 [ 560.051437][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 560.059550][ C0] lec:lec_tx_timeout: lec0 [ 560.064724][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.763849][T32688] Set syz1 is full, maxelem 65536 reached [ 560.831104][T32674] tipc: Disabling bearer [ 560.858848][ T980] tipc: Node number set to 3758096385 [ 560.998556][T32711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11940'. [ 561.415680][T32744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11950'. [ 561.676777][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 210 seconds [ 562.285224][ T306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11962'. [ 562.502871][ T317] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11967'. [ 562.512880][ T317] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11967'. [ 563.074036][ T60] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 563.585938][ T354] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 563.604376][ T354] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 563.980568][ T374] syzkaller0: refused to change device tx_queue_len [ 564.349894][ T398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12001'. [ 564.477559][ T404] netlink: 'syz.6.12003': attribute type 4 has an invalid length. [ 564.760073][ T420] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12010'. [ 565.073357][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 565.081417][ C0] lec:lec_tx_timeout: lec0 [ 565.086529][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.142566][ T440] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12020'. [ 565.203517][ T440] syzkaller1: entered promiscuous mode [ 565.209031][ T440] syzkaller1: entered allmulticast mode [ 565.416999][ T459] bridge: RTM_NEWNEIGH with invalid ether address [ 565.459344][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12029'. [ 565.477807][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12029'. [ 565.833021][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12037'. [ 566.606859][ T480] 8021q: adding VLAN 0 to HW filter on device bond10 [ 566.667950][ T484] vlan2: entered allmulticast mode [ 566.692630][ T484] bond10: entered allmulticast mode [ 566.738876][ T13] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.758750][ T13] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.781415][ T13] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 566.789934][ T13] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.813718][ T13] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.833649][ T13] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 566.867622][ T13] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.887132][ T13] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.923806][ T13] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 566.939639][ T13] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.949077][ T13] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.960008][ T13] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 567.142480][ T512] tipc: Enabled bearer , priority 0 [ 567.155520][ T509] mac80211_hwsim hwsim9 +: renamed from syzkaller0 (while UP) [ 567.166017][ T509] tipc: Disabling bearer [ 567.616367][ T538] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 567.640454][ T537] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12057'. [ 567.705536][ T544] syzkaller1: entered promiscuous mode [ 567.721315][ T544] syzkaller1: entered allmulticast mode [ 567.952965][T31530] nci: nci_rx_work: unknown MT 0x1 [ 567.962382][ T562] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12067'. [ 568.240491][ T576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12071'. [ 568.277304][ T582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12075'. [ 568.309650][ T582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12075'. [ 569.036469][ T30] audit: type=1800 audit(1768342705.049:3): pid=615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.12087" name="memory.events" dev="tmpfs" ino=3575 res=0 errno=0 [ 569.100647][ T620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12091'. [ 569.481907][ T627] : entered promiscuous mode [ 569.859877][ T646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12100'. [ 570.117135][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 570.125222][ C0] lec:lec_tx_timeout: lec0 [ 570.130860][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 571.969369][ T683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12111'. [ 572.046395][ T687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12112'. [ 572.157755][ T693] netlink: 'syz.7.12116': attribute type 10 has an invalid length. [ 572.183789][ T693] syz_tun: entered promiscuous mode [ 572.224302][ T696] netlink: 'syz.7.12116': attribute type 10 has an invalid length. [ 572.259162][ T693] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 572.293505][ T707] syzkaller1: entered promiscuous mode [ 572.299183][ T707] syzkaller1: entered allmulticast mode [ 572.319039][ T696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.355703][ T696] team0: Port device bond0 added [ 572.387510][ T705] bond0: (slave syz_tun): Releasing backup interface [ 572.432048][ T712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12121'. [ 572.473928][ T705] team0: Port device bond0 removed [ 572.502656][ T705] bond6: (slave veth0_to_bond): Releasing active interface [ 572.537576][ T705] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 572.728625][ T703] lec:lec_atm_close: lec0: Shut down! [ 572.728973][ T718] __nla_validate_parse: 1 callbacks suppressed [ 572.728988][ T718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12123'. [ 572.752525][ T714] tipc: Enabled bearer , priority 0 [ 572.767169][ T717] syzkaller0: MTU too low for tipc bearer [ 572.796338][ T717] tipc: Disabling bearer [ 573.828652][ T754] netlink: 'syz.6.12138': attribute type 4 has an invalid length. [ 573.961500][ T754] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12138'. [ 573.979931][ T754] nbd: couldn't find a device at index 0 [ 574.329712][ T766] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12142'. [ 574.373183][ T766] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.380438][ T766] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.383568][ T772] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12142'. [ 574.553450][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.560718][ T772] bridge0: port 2(bridge_slave_1) entered listening state [ 574.568156][ T772] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.575332][ T772] bridge0: port 1(bridge_slave_0) entered listening state [ 574.638438][ T772] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12142'. [ 574.825914][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.833271][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.098402][ T805] syzkaller1: entered promiscuous mode [ 575.135037][ T805] syzkaller1: entered allmulticast mode [ 575.177116][ T813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12159'. [ 575.202866][ T815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.362405][ T825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12163'. [ 575.608990][ T838] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12168'. [ 575.631056][ T838] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12168'. [ 575.674234][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12170'. [ 576.110024][ T864] nbd: couldn't find a device at index 0 [ 576.468752][ T885] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 576.501085][ T886] netlink: 'syz.6.12187': attribute type 10 has an invalid length. [ 576.552334][ T886] team0: Port device dummy0 added [ 576.655221][ T893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.700025][ T898] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1549909786/1549909787 [ 576.711032][ T898] tipc: Failed to remove unknown binding: 66,0,0/3758096385:1549909786/1549909787 [ 576.718104][ T893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.796898][ T893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.911517][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 577.919639][ C0] lec:lec_tx_timeout: lec0 [ 577.925046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.258331][ T948] syzkaller0: entered promiscuous mode [ 578.413044][ T961] __nla_validate_parse: 8 callbacks suppressed [ 578.413064][ T961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12211'. [ 578.445942][ T961] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12211'. [ 578.805417][ T978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12218'. [ 580.218235][ T976] erspan0: left promiscuous mode [ 580.295592][ T976] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.308786][ T976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.385499][ T69] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.408598][ T69] netdevsim netdevsim7 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 580.418880][ T69] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.429253][ T69] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.460477][ T69] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.475076][ T69] netdevsim netdevsim7 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 580.484243][ T69] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.494421][ T69] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.506232][ T69] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.517614][ T69] netdevsim netdevsim7 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 580.526680][ T69] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.537661][ T69] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.550522][ T69] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.563703][ T69] netdevsim netdevsim7 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 580.573030][ T69] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.584999][ T69] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.697944][ T1017] tipc: Failed to remove unknown binding: 66,0,0/3758096385:3900362214/3900362215 [ 580.710072][ T1017] tipc: Failed to remove unknown binding: 66,0,0/3758096385:3900362214/3900362215 [ 580.784092][ T1022] tipc: Enabled bearer , priority 0 [ 580.823830][ T1022] syzkaller0: entered promiscuous mode [ 580.829329][ T1022] syzkaller0: entered allmulticast mode [ 580.835601][ T1022] tipc: Resetting bearer [ 580.847468][ T1021] tipc: Resetting bearer [ 580.860947][ T997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.881958][ T997] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 580.894840][ T997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.900889][ T997] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 580.918239][ T997] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.926114][ T997] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 581.357581][ T1029] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12233'. [ 582.583087][ T1021] tipc: Disabling bearer [ 582.591833][ T1025] netlink: 'syz.6.12231': attribute type 1 has an invalid length. [ 582.616511][ T1038] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12234'. [ 582.951471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 582.959552][ C0] lec:lec_tx_timeout: lec0 [ 582.964911][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.241279][ T1085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12248'. [ 583.366262][ T1092] netlink: 'syz.8.12250': attribute type 4 has an invalid length. [ 583.435696][ T1092] netlink: 'syz.8.12250': attribute type 4 has an invalid length. [ 583.585734][ T1103] netlink: 'syz.6.12254': attribute type 1 has an invalid length. [ 583.667762][ T1103] bond11: entered promiscuous mode [ 583.675859][ T1103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 583.813960][ T1113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12257'. [ 583.830178][ T1103] bond11: (slave bridge8): making interface the new active one [ 583.863533][ T1103] bridge8: entered promiscuous mode [ 583.880610][ T1103] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 583.910233][ T1122] netlink: 'syz.5.12261': attribute type 1 has an invalid length. [ 584.058715][ T1126] bond11: (slave veth15): Enslaving as an active interface with a down link [ 584.127033][ T1122] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 584.193794][ T1134] bond11: entered promiscuous mode [ 584.239263][ T1134] bond11: entered allmulticast mode [ 584.663702][ T1159] syzkaller0: entered promiscuous mode [ 584.683468][ T1159] syzkaller0: entered allmulticast mode [ 584.806717][ T1166] syz_tun: entered allmulticast mode [ 584.816752][ T1166] syz_tun: left allmulticast mode [ 586.050397][ T1220] netlink: 'syz.5.12282': attribute type 3 has an invalid length. [ 586.073130][ T1220] netlink: 'syz.5.12282': attribute type 3 has an invalid length. [ 586.125144][ T1226] tipc: Enabled bearer , priority 0 [ 586.304731][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12285'. [ 586.346642][ T1227] syzkaller0: entered promiscuous mode [ 586.372715][ T1227] syzkaller0: entered allmulticast mode [ 586.383569][ T1227] tipc: Resetting bearer [ 586.521251][ T1216] tipc: Resetting bearer [ 587.971684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 587.979687][ C0] lec:lec_tx_timeout: lec0 [ 587.984696][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.354748][ T1216] tipc: Disabling bearer [ 589.137576][ T1309] syzkaller0: entered promiscuous mode [ 589.158880][ T1309] syzkaller0: entered allmulticast mode [ 589.178963][ T1324] syz_tun: entered allmulticast mode [ 589.196043][ T1323] syz_tun: left allmulticast mode [ 589.578589][ T1347] netlink: 'syz.7.12311': attribute type 4 has an invalid length. [ 589.630523][ T1348] netlink: 'syz.7.12311': attribute type 4 has an invalid length. [ 589.676950][ T1352] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12313'. [ 591.225349][ T1366] syzkaller0: entered promiscuous mode [ 591.233426][ T1366] syzkaller0: entered allmulticast mode [ 591.242200][ T4398] syzkaller0: tun_net_xmit 70 [ 591.250147][ T1366] syzkaller0: tun_net_xmit 14 [ 591.538536][ T1385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12324'. [ 591.753231][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 240 seconds [ 591.933865][ T1403] syzkaller0: entered promiscuous mode [ 591.941711][ T1403] syzkaller0: entered allmulticast mode [ 592.913865][ T1459] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12342'. [ 592.991546][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 592.999651][ C0] lec:lec_tx_timeout: lec0 [ 593.004697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.061169][ T1471] netlink: 'syz.6.12347': attribute type 4 has an invalid length. [ 594.653834][ T1501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12358'. [ 594.724348][ T1501] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 594.735519][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.764249][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.784277][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.868060][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.892597][ T1514] netlink: 'syz.5.12362': attribute type 4 has an invalid length. [ 594.953947][ T1522] netlink: 'syz.5.12362': attribute type 4 has an invalid length. [ 595.050087][ T1520] netlink: 576 bytes leftover after parsing attributes in process `syz.6.12364'. [ 595.170778][ T1530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12366'. [ 595.318318][ T1536] netlink: 'syz.5.12368': attribute type 13 has an invalid length. [ 595.505137][ T1550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12372'. [ 597.218597][ T1568] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12375'. [ 597.272754][ T1568] netlink: 'syz.8.12375': attribute type 5 has an invalid length. [ 597.286644][ T1568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12375'. [ 597.355667][ T1570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12379'. [ 597.603931][ T1584] netlink: 'syz.8.12382': attribute type 1 has an invalid length. [ 597.616690][ T1582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.764376][ T1591] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.779089][ T1591] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 597.800658][ T1591] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 597.866772][ T1594] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 597.899934][ T1594] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 598.011409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.019473][ C0] lec:lec_tx_timeout: lec0 [ 598.024811][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.295101][ T1618] netlink: 120 bytes leftover after parsing attributes in process `syz.7.12391'. [ 598.307431][ T1618] netlink: 'syz.7.12391': attribute type 1 has an invalid length. [ 598.322088][ T1618] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12391'. [ 598.484660][ T1620] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12392'. [ 598.500241][ T1624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12394'. [ 598.667057][ T1631] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 598.832427][ T1635] syzkaller0: entered promiscuous mode [ 598.852996][ T1635] syzkaller0: entered allmulticast mode [ 599.167770][ T1655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.200511][ T1655] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 599.230311][ T1655] bond0: (slave gre0): Error -95 calling set_mac_address [ 599.255392][ T1664] netlink: 'syz.5.12409': attribute type 1 has an invalid length. [ 599.303832][ T1664] 8021q: adding VLAN 0 to HW filter on device bond12 [ 599.327776][ T1655] bond0: (slave rose0): Enslaving as an active interface with an up link [ 599.555076][ T1684] syzkaller0: entered allmulticast mode [ 600.185312][ T1678] mpoa:mpoad_close: () going down [ 600.407550][ T1702] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 600.462436][ T1708] syzkaller0: refused to change device tx_queue_len [ 600.968003][ T1735] syzkaller0: entered promiscuous mode [ 600.999764][ T1735] syzkaller0: entered allmulticast mode [ 601.022562][ T1737] __nla_validate_parse: 5 callbacks suppressed [ 601.022581][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12426'. [ 601.505896][ T1763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12432'. [ 601.721602][ T1770] syzkaller0: entered promiscuous mode [ 601.735143][ T1770] syzkaller0: entered allmulticast mode [ 601.982907][ T1776] syzkaller0: entered allmulticast mode [ 602.111910][ T1789] syzkaller0: entered promiscuous mode [ 602.131525][ T1789] syzkaller0: entered allmulticast mode [ 602.133484][ T1749] lec:lec_atm_close: lec0: Shut down! [ 602.275498][ T1791] IPVS: Error connecting to the multicast addr [ 602.493402][ T1801] syzkaller0: entered promiscuous mode [ 602.499300][ T1801] syzkaller0: entered allmulticast mode [ 602.538894][ T1805] syzkaller0: entered promiscuous mode [ 602.555208][ T1805] syzkaller0: entered allmulticast mode [ 604.525945][ T1831] syz_tun: entered allmulticast mode [ 604.534612][ T1831] syz_tun: left allmulticast mode [ 604.712871][ T1839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12454'. [ 604.716061][ T1843] syzkaller0: entered promiscuous mode [ 604.730247][ T1843] syzkaller0: entered allmulticast mode [ 605.014322][ T1858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12459'. [ 605.187117][ T1871] GUP no longer grows the stack in syz.5.12464 (1871): 200000003000-20000000a000 (200000001000) [ 605.205695][ T1871] CPU: 1 UID: 0 PID: 1871 Comm: syz.5.12464 Not tainted syzkaller #0 PREEMPT(full) [ 605.205726][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.205747][ T1871] Call Trace: [ 605.205755][ T1871] [ 605.205765][ T1871] dump_stack_lvl+0xe8/0x150 [ 605.205799][ T1871] __get_user_pages+0x2465/0x29f0 [ 605.205830][ T1871] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 605.205868][ T1871] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 605.205921][ T1871] ? rcu_is_watching+0x15/0xb0 [ 605.205952][ T1871] __gup_longterm_locked+0xde4/0x1660 [ 605.206006][ T1871] gup_fast_fallback+0x1d26/0x2290 [ 605.206068][ T1871] ? __pfx_gup_fast_fallback+0x10/0x10 [ 605.206098][ T1871] ? is_valid_gup_args+0x11f/0x200 [ 605.206127][ T1871] ? get_user_pages_fast+0x4d/0xb0 [ 605.206155][ T1871] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 605.206188][ T1871] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 605.206215][ T1871] ? wait_for_space+0x248/0x2d0 [ 605.206243][ T1871] iov_iter_get_pages2+0x5e/0xa0 [ 605.206271][ T1871] __se_sys_vmsplice+0x548/0x10d0 [ 605.206317][ T1871] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 605.206344][ T1871] ? __pfx_futex_wait+0x10/0x10 [ 605.206382][ T1871] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 605.206470][ T1871] do_syscall_64+0xec/0xf80 [ 605.206492][ T1871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.206512][ T1871] ? trace_irq_disable+0x37/0x100 [ 605.206538][ T1871] ? clear_bhb_loop+0x60/0xb0 [ 605.206563][ T1871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.206588][ T1871] RIP: 0033:0x7fee7ef8f749 [ 605.206608][ T1871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.206627][ T1871] RSP: 002b:00007fee7fda5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 605.206655][ T1871] RAX: ffffffffffffffda RBX: 00007fee7f1e5fa0 RCX: 00007fee7ef8f749 [ 605.206671][ T1871] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 605.206690][ T1871] RBP: 00007fee7f013f91 R08: 0000000000000000 R09: 0000000000000000 [ 605.206703][ T1871] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 605.206716][ T1871] R13: 00007fee7f1e6038 R14: 00007fee7f1e5fa0 R15: 00007ffe4343f2a8 [ 605.206751][ T1871] [ 605.635509][ T1885] syzkaller0: entered promiscuous mode [ 605.643611][ T1885] syzkaller0: entered allmulticast mode [ 605.833832][ T1898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12475'. [ 606.017559][ T1904] syzkaller0: entered promiscuous mode [ 606.025565][ T1904] syzkaller0: entered allmulticast mode [ 606.051615][ T1911] netlink: 'syz.6.12479': attribute type 1 has an invalid length. [ 606.222397][ T1911] 8021q: adding VLAN 0 to HW filter on device bond12 [ 606.239554][ T1914] bond12: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 606.256922][ T1914] bond12: entered allmulticast mode [ 606.278522][ T1919] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 606.316656][ T1922] netlink: 'syz.7.12483': attribute type 10 has an invalid length. [ 606.373826][ T1926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.417512][ T1922] bond0: (slave wlan1): Opening slave failed [ 606.428729][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12486'. [ 606.586730][ T1943] syzkaller0: entered promiscuous mode [ 606.593018][ T1943] syzkaller0: entered allmulticast mode [ 606.601162][ T1941] syzkaller0: entered promiscuous mode [ 606.607407][ T1941] syzkaller0: entered allmulticast mode [ 606.828574][ T1952] syzkaller0: entered promiscuous mode [ 606.834304][ T1952] syzkaller0: entered allmulticast mode [ 606.878242][ T1954] syzkaller0: entered promiscuous mode [ 606.903177][ T1954] syzkaller0: entered allmulticast mode [ 607.168239][ T1967] syzkaller0: entered promiscuous mode [ 607.186181][ T1967] syzkaller0: entered allmulticast mode [ 607.384552][ T1977] syzkaller0: entered promiscuous mode [ 607.390529][ T1977] syzkaller0: entered allmulticast mode [ 607.483958][ T1987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12506'. [ 607.914718][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 607.922792][ C0] lec:lec_tx_timeout: lec0 [ 607.927345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 609.143561][ T1987] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 609.144856][ T1991] tipc: Enabled bearer , priority 0 [ 609.280932][ T1994] syzkaller0: entered promiscuous mode [ 609.289593][ T1994] syzkaller0: entered allmulticast mode [ 609.296130][ T1994] tipc: Resetting bearer [ 609.307299][ T1988] tipc: Resetting bearer [ 611.072367][ T1988] tipc: Disabling bearer [ 611.139565][ T2014] syzkaller0: entered promiscuous mode [ 611.145330][ T2014] syzkaller0: entered allmulticast mode [ 611.156164][T25886] tipc: Node number set to 3758096386 [ 611.329179][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12516'. [ 611.638063][ T2058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12522'. [ 611.751771][ T2064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12523'. [ 611.785055][ T2063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.792415][ T2063] IPv6: NLM_F_CREATE should be set when creating new route [ 611.799729][ T2063] IPv6: NLM_F_CREATE should be set when creating new route [ 612.174705][ T2080] syzkaller0: entered promiscuous mode [ 612.192686][ T2080] syzkaller0: entered allmulticast mode [ 612.211896][ T2080] tipc: Enabled bearer , priority 0 [ 612.240178][ T2079] tipc: Resetting bearer [ 612.297165][ T2079] tipc: Disabling bearer [ 612.452201][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12534'. [ 612.506887][ T2093] syzkaller0: entered promiscuous mode [ 612.514518][ T2098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12537'. [ 612.514796][ T2093] syzkaller0: entered allmulticast mode [ 612.672985][ T2100] syzkaller0: entered promiscuous mode [ 612.678777][ T2100] syzkaller0: entered allmulticast mode [ 612.951405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 612.959477][ C0] lec:lec_tx_timeout: lec0 [ 612.964343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 612.981832][ T2124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12545'. [ 613.155417][ T2123] pim6reg: entered allmulticast mode [ 613.164333][ T2124] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 613.200145][ T2124] team2: entered promiscuous mode [ 613.205649][ T2124] team2: entered allmulticast mode [ 613.348796][ T2136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12550'. [ 613.364187][ T2136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12550'. [ 613.421882][ T2140] syzkaller0: entered promiscuous mode [ 613.427395][ T2140] syzkaller0: entered allmulticast mode [ 613.439148][ T2140] sch_tbf: burst 680 is lower than device syzkaller0 mtu (1514) ! [ 613.874403][ T2159] syzkaller0: entered promiscuous mode [ 613.882543][ T2159] syzkaller0: entered allmulticast mode [ 614.011812][ T2164] netlink: 'syz.4.12563': attribute type 39 has an invalid length. [ 614.241319][ T2177] netlink: 'syz.7.12568': attribute type 1 has an invalid length. [ 614.398819][ T2182] 8021q: adding VLAN 0 to HW filter on device bond10 [ 614.425243][ T2182] bond9: (slave bond10): making interface the new active one [ 614.442892][ T2182] bond9: (slave bond10): Enslaving as an active interface with an up link [ 614.461599][ T2187] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12568'. [ 614.504176][ T2177] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 614.523844][ T2187] 8021q: adding VLAN 0 to HW filter on device bond9 [ 615.293364][ T2195] syzkaller0: entered promiscuous mode [ 615.299892][ T2195] syzkaller0: entered allmulticast mode [ 615.391093][ T2195] tipc: Enabled bearer , priority 0 [ 615.439038][ T2194] tipc: Resetting bearer [ 615.519278][ T2194] tipc: Disabling bearer [ 615.603648][ T2201] syzkaller0: entered promiscuous mode [ 615.609392][ T2201] syzkaller0: entered allmulticast mode [ 615.668366][ T2205] netlink: 'syz.7.12577': attribute type 1 has an invalid length. [ 615.821997][ T2205] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.960209][ T2213] macvlan2: entered promiscuous mode [ 615.973061][ T2213] macvlan2: entered allmulticast mode [ 615.983039][ T2213] bond11: entered allmulticast mode [ 615.988462][ T2213] bond11: entered promiscuous mode [ 615.998351][ T2213] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 616.011157][ T2213] team0: Port device macvlan2 added [ 616.024862][ T2217] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 616.223701][ T2204] lec:lec_atm_close: lec0: Shut down! [ 616.978712][ T2261] syzkaller0: entered promiscuous mode [ 616.992024][ T2261] syzkaller0: entered allmulticast mode [ 617.531828][ T2280] tipc: Enabled bearer , priority 0 [ 617.652844][ T2284] syzkaller0: entered promiscuous mode [ 617.658375][ T2284] syzkaller0: entered allmulticast mode [ 617.665076][ T2284] tipc: Resetting bearer [ 619.119399][ T3654] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.217564][ T2291] syzkaller0: entered promiscuous mode [ 619.224914][ T2291] syzkaller0: entered allmulticast mode [ 619.239520][ T2288] syzkaller0: entered promiscuous mode [ 619.244697][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12598'. [ 619.248391][ T2288] syzkaller0: entered allmulticast mode [ 619.256828][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12598'. [ 619.273237][ T2272] tipc: Resetting bearer [ 619.408303][ T2315] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 620.988287][ T2272] tipc: Disabling bearer [ 621.833253][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 270 seconds [ 621.911401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 621.919488][ C0] lec:lec_tx_timeout: lec0 [ 621.924510][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 622.528955][ T3654] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.537562][ T3654] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.546302][ T3654] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.572248][ T3654] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.641467][ T3654] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.666218][ T3654] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.698389][ T3654] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.729358][ T2334] syzkaller0: entered promiscuous mode [ 622.739648][ T2334] syzkaller0: entered allmulticast mode [ 622.749393][ T2338] syzkaller0: entered promiscuous mode [ 622.757168][ T2338] syzkaller0: entered allmulticast mode [ 622.974149][ T2346] syzkaller0: entered promiscuous mode [ 622.993380][ T2346] syzkaller0: entered allmulticast mode [ 623.478704][ T2375] syzkaller0: entered promiscuous mode [ 623.521929][ T2375] syzkaller0: entered allmulticast mode [ 623.555665][ T2377] syzkaller0: entered promiscuous mode [ 623.564725][ T2377] syzkaller0: entered allmulticast mode [ 624.134845][ T2418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12632'. [ 624.313608][ T2418] bridge7: port 1(veth21) entered blocking state [ 624.321110][ T2418] bridge7: port 1(veth21) entered disabled state [ 624.334483][ T2418] veth21: entered allmulticast mode [ 624.350592][ T2418] veth21: entered promiscuous mode [ 624.388538][ T2423] bond4: (slave veth0_to_bond): Releasing active interface [ 624.414626][ T2423] bridge7: port 2(veth0_to_bond) entered blocking state [ 624.431497][ T2423] bridge7: port 2(veth0_to_bond) entered disabled state [ 624.443942][ T2423] veth0_to_bond: entered allmulticast mode [ 624.451087][ T2423] veth0_to_bond: entered promiscuous mode [ 624.458077][ T2425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12634'. [ 624.469751][ T2426] syzkaller0: entered promiscuous mode [ 624.483373][ T2426] syzkaller0: entered allmulticast mode [ 625.495560][ T2472] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12639'. [ 626.463163][ T2480] syzkaller0: entered promiscuous mode [ 626.481090][ T2480] syzkaller0: entered allmulticast mode [ 626.629399][ T2488] syzkaller0: entered promiscuous mode [ 626.661770][ T2488] syzkaller0: entered allmulticast mode [ 626.951432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 626.959497][ C0] lec:lec_tx_timeout: lec0 [ 626.964228][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 627.034961][ T2512] netlink: 'syz.4.12648': attribute type 1 has an invalid length. [ 627.081537][ T2512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 627.084505][ T2515] netlink: 'syz.5.12649': attribute type 83 has an invalid length. [ 627.189748][ T2512] bond7: (slave veth15): Enslaving as an active interface with a down link [ 627.247698][ T2516] vlan2: entered allmulticast mode [ 627.269450][ T2516] veth1: entered allmulticast mode [ 627.276866][ T2516] bond7: (slave vlan2): Opening slave failed [ 627.315195][ T2521] syzkaller0: entered promiscuous mode [ 627.320877][ T2521] syzkaller0: entered allmulticast mode [ 627.350293][ T2528] syzkaller0: entered promiscuous mode [ 627.362920][ T2528] syzkaller0: entered allmulticast mode [ 627.560824][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.594763][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.633687][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.734762][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.744656][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.762337][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 627.815584][ T2533] netlink: 'syz.7.12654': attribute type 29 has an invalid length. [ 628.002770][ T2561] syzkaller0: entered promiscuous mode [ 628.012702][ T2561] syzkaller0: entered allmulticast mode [ 628.160335][ T2567] syzkaller0: entered promiscuous mode [ 628.171458][ T2567] syzkaller0: entered allmulticast mode [ 628.193568][ T2567] 0: reclassify loop, rule prio 0, protocol 800 [ 628.263540][ T2575] netlink: 'syz.5.12665': attribute type 1 has an invalid length. [ 628.348890][ T2575] 8021q: adding VLAN 0 to HW filter on device bond13 [ 628.375746][ T2569] syzkaller0: entered promiscuous mode [ 628.392592][ T2569] syzkaller0: entered allmulticast mode [ 628.435600][ T2575] bond13: (slave gretap6): making interface the new active one [ 628.446763][ T2575] bond13: (slave gretap6): Enslaving as an active interface with an up link [ 628.529657][ T2581] syzkaller0: entered promiscuous mode [ 628.536990][ T2581] syzkaller0: entered allmulticast mode [ 628.807167][ T2602] syzkaller0: entered promiscuous mode [ 628.823869][ T2602] syzkaller0: entered allmulticast mode [ 628.920894][ T2612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12675'. [ 631.055404][ T2659] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12679'. [ 631.349368][ T2674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.971567][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 631.979621][ C0] lec:lec_tx_timeout: lec0 [ 631.984586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 632.064904][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12689'. [ 633.056524][ T2678] vlan0: entered allmulticast mode [ 633.061970][ T2678] bond7: entered allmulticast mode [ 633.075825][ T2674] bond7: (slave gretap1): making interface the new active one [ 633.083810][ T2674] gretap1: entered allmulticast mode [ 633.090042][ T2674] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 633.162890][ T2704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12690'. [ 633.170989][ T2680] syzkaller0: entered promiscuous mode [ 633.185369][ T2680] syzkaller0: entered allmulticast mode [ 633.199455][T29400] block nbd5: Receive control failed (result -1) [ 635.355787][ T2734] syzkaller0: entered promiscuous mode [ 635.364578][ T2734] syzkaller0: entered allmulticast mode [ 636.832135][ T2822] syzkaller0: entered promiscuous mode [ 636.855971][ T2822] syzkaller0: entered allmulticast mode [ 636.859433][ T2824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12712'. [ 636.991895][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 636.999983][ C0] lec:lec_tx_timeout: lec0 [ 637.005255][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 637.025420][ T2824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12712'. [ 637.703835][ T2877] validate_nla: 2 callbacks suppressed [ 637.703853][ T2877] netlink: 'syz.8.12722': attribute type 1 has an invalid length. [ 637.821957][ T2877] 8021q: adding VLAN 0 to HW filter on device bond8 [ 637.895737][ T2877] veth23: entered promiscuous mode [ 637.920950][ T2877] bond8: (slave veth23): Enslaving as an active interface with a down link [ 637.965647][ T2896] netlink: 'syz.7.12726': attribute type 33 has an invalid length. [ 637.996146][ T2896] netlink: 152 bytes leftover after parsing attributes in process `syz.7.12726'. [ 638.010956][ T2892] syzkaller0: entered promiscuous mode [ 638.019323][ T2892] syzkaller0: entered allmulticast mode [ 638.026656][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12726'. [ 638.049332][ T2890] vlan1: entered allmulticast mode [ 638.054815][ T2890] bond8: entered allmulticast mode [ 638.068784][ T2890] bond8: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 638.381598][ T2911] bridge0: entered allmulticast mode [ 638.524821][ T2921] IPVS: sh: FWM 3 0x00000003 - no destination available [ 638.576760][ T2918] syzkaller0: entered promiscuous mode [ 638.597215][ T2918] syzkaller0: entered allmulticast mode [ 638.614891][ T2920] tipc: Enabled bearer , priority 0 [ 638.650455][ T2920] syzkaller0: entered promiscuous mode [ 638.666850][ T2920] syzkaller0: entered allmulticast mode [ 638.809268][ T2928] tipc: Resetting bearer [ 638.870821][ T2919] tipc: Resetting bearer [ 638.912578][ T2919] tipc: Disabling bearer [ 639.041608][ T2938] ipt_REJECT: TCP_RESET invalid for non-tcp [ 639.079853][ T2940] netlink: 'syz.5.12743': attribute type 1 has an invalid length. [ 639.160404][ T2944] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12744'. [ 639.313234][ T2953] netlink: 'syz.5.12746': attribute type 1 has an invalid length. [ 639.396841][ T2953] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 639.408256][ T2953] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 639.477238][ T2959] gretap7: entered promiscuous mode [ 639.509868][ T2959] bond14: (slave gretap7): making interface the new active one [ 639.519123][ T2959] bond14: (slave gretap7): Enslaving as an active interface with an up link [ 639.626336][ T2953] macvlan0: entered promiscuous mode [ 639.632891][ T2953] macvlan0: entered allmulticast mode [ 639.651911][ T2953] bond14: entered promiscuous mode [ 639.663234][ T2953] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 639.695780][ T2953] bond14: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap7 [ 639.716685][ T2953] bond14: left promiscuous mode [ 639.941072][ T2968] syzkaller0: entered promiscuous mode [ 639.957018][ T2968] syzkaller0: entered allmulticast mode [ 640.009686][ T2981] netlink: 'syz.5.12754': attribute type 1 has an invalid length. [ 640.012956][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12755'. [ 640.082676][ T2981] 8021q: adding VLAN 0 to HW filter on device bond15 [ 640.182906][ T2992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12754'. [ 640.206412][ T2993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12755'. [ 641.851124][ T2988] 8021q: adding VLAN 0 to HW filter on device bond15 [ 641.858659][ T2988] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address [ 641.869857][ T2988] bond15: (slave vxcan5): Error -95 calling set_mac_address [ 641.937620][ T2981] veth19: entered promiscuous mode [ 641.949438][ T2981] bond15: (slave veth19): Enslaving as an active interface with a down link [ 641.960189][ T2992] 8021q: adding VLAN 0 to HW filter on device bond15 [ 642.011404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 642.019505][ C0] lec:lec_tx_timeout: lec0 [ 642.024043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 642.073962][ T2998] tipc: Enabled bearer , priority 0 [ 642.082709][ T3019] tipc: Enabling of bearer rejected, failed to enable media [ 642.093786][ T2999] syzkaller0: entered promiscuous mode [ 642.109526][ T2999] syzkaller0: entered allmulticast mode [ 642.142671][ T3007] tipc: Resetting bearer [ 642.222938][ T2996] tipc: Resetting bearer [ 642.271279][ T2996] tipc: Disabling bearer [ 642.338277][ T3019] syzkaller0: entered promiscuous mode [ 642.344836][ T3019] syzkaller0: entered allmulticast mode [ 644.118182][ T3050] tipc: Enabled bearer , priority 0 [ 644.145080][ T3050] syzkaller0: entered promiscuous mode [ 644.150678][ T3050] syzkaller0: entered allmulticast mode [ 644.179465][ T3050] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 644.238668][ T3050] tipc: Resetting bearer [ 644.246509][ T3058] syzkaller0: entered promiscuous mode [ 644.253371][ T3058] syzkaller0: entered allmulticast mode [ 644.261687][ T3052] netlink: 'syz.7.12766': attribute type 1 has an invalid length. [ 644.347289][ T3049] tipc: Resetting bearer [ 644.363045][ T3049] tipc: Disabling bearer [ 644.410410][ T3057] 0: reclassify loop, rule prio 0, protocol 700 [ 644.516835][ T3067] tipc: Enabled bearer , priority 0 [ 644.532894][ T3067] syzkaller0: entered promiscuous mode [ 644.541434][ T3067] syzkaller0: entered allmulticast mode [ 644.580994][ T3069] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12774'. [ 644.590889][ T3069] nbd: couldn't find a device at index 0 [ 644.601278][ T3067] tipc: Resetting bearer [ 644.615237][ T3066] syzkaller0: entered promiscuous mode [ 644.620736][ T3066] syzkaller0: entered allmulticast mode [ 644.637880][ T3065] tipc: Resetting bearer [ 644.661487][ T3065] tipc: Disabling bearer [ 644.704623][ T3071] syzkaller0: entered promiscuous mode [ 644.716010][ T3071] syzkaller0: entered allmulticast mode [ 644.726975][ T3078] netlink: 'syz.5.12778': attribute type 4 has an invalid length. [ 644.735386][ T3075] syzkaller0: entered promiscuous mode [ 644.735409][ T3075] syzkaller0: entered allmulticast mode [ 644.833208][ T3075] tipc: Enabled bearer , priority 0 [ 644.881792][ T3080] syzkaller0: entered promiscuous mode [ 644.887498][ T3080] syzkaller0: entered allmulticast mode [ 644.901200][ T3074] tipc: Resetting bearer [ 644.920714][ T3074] tipc: Disabling bearer [ 644.956676][ T3083] syzkaller0: entered promiscuous mode [ 644.972017][ T3083] syzkaller0: entered allmulticast mode [ 645.023749][ T3086] syzkaller0: entered promiscuous mode [ 645.029260][ T3086] syzkaller0: entered allmulticast mode [ 645.287418][ T3096] netlink: 'syz.4.12784': attribute type 1 has an invalid length. [ 645.391921][ T3101] tipc: Enabled bearer , priority 0 [ 645.401552][ T3107] syzkaller0: entered promiscuous mode [ 645.407042][ T3107] syzkaller0: entered allmulticast mode [ 645.475475][ T3101] syzkaller0: entered promiscuous mode [ 645.481009][ T3101] syzkaller0: entered allmulticast mode [ 645.723682][ T3111] tipc: Resetting bearer [ 645.757556][ T3100] tipc: Resetting bearer [ 645.798585][ T3100] tipc: Disabling bearer [ 645.866236][ T3117] syzkaller0: entered promiscuous mode [ 645.880730][ T3117] syzkaller0: entered allmulticast mode [ 646.012026][ T3121] tipc: Enabled bearer , priority 0 [ 646.077815][ T3121] syzkaller0: entered promiscuous mode [ 646.112305][ T3121] syzkaller0: entered allmulticast mode [ 646.187803][ T3121] tipc: Resetting bearer [ 646.204937][ T3127] tipc: Enabled bearer , priority 0 [ 646.224237][ T3127] syzkaller0: entered promiscuous mode [ 646.229741][ T3127] syzkaller0: entered allmulticast mode [ 646.253803][ T3127] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 646.380838][ T3120] tipc: Resetting bearer [ 646.418181][ T3120] tipc: Disabling bearer [ 646.431228][ T3129] tipc: Enabled bearer , priority 0 [ 646.442884][ T3132] tipc: Resetting bearer [ 646.449734][ T3133] syzkaller0: entered promiscuous mode [ 646.455445][ T3133] syzkaller0: entered allmulticast mode [ 646.511783][ T3126] tipc: Resetting bearer [ 646.571258][ T3126] tipc: Disabling bearer [ 646.642247][ T3129] tipc: Resetting bearer [ 646.660350][ T3135] tipc: Enabled bearer , priority 0 [ 646.678883][ T3128] tipc: Resetting bearer [ 646.752724][ T3128] tipc: Disabling bearer [ 646.766316][ T3135] syzkaller0: entered promiscuous mode [ 646.772400][ T3135] syzkaller0: entered allmulticast mode [ 646.798351][ T3135] tipc: Resetting bearer [ 646.807252][ T3134] tipc: Resetting bearer [ 646.850812][ T3134] tipc: Disabling bearer [ 647.031903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 647.040026][ C0] lec:lec_tx_timeout: lec0 [ 647.044844][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 647.064206][ T3151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12803'. [ 647.170616][ T3152] syzkaller0: entered promiscuous mode [ 647.177251][ T3152] syzkaller0: entered allmulticast mode [ 647.633946][ T3164] syzkaller0: entered promiscuous mode [ 647.639504][ T3164] syzkaller0: entered allmulticast mode [ 647.676572][ T3169] tipc: Enabled bearer , priority 0 [ 647.717032][ T3169] syzkaller0: entered promiscuous mode [ 647.725110][ T3169] syzkaller0: entered allmulticast mode [ 647.751657][ T3169] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 647.852061][ T3169] tipc: Resetting bearer [ 647.862210][ T3167] tipc: Resetting bearer [ 647.927818][ T3167] tipc: Disabling bearer [ 647.954497][ T3181] netlink: 14 bytes leftover after parsing attributes in process `syz.7.12813'. [ 647.972617][ T3175] syzkaller0: entered promiscuous mode [ 647.978334][ T3175] syzkaller0: entered allmulticast mode [ 648.369029][ T3198] syzkaller0: entered promiscuous mode [ 648.374720][ T3198] syzkaller0: entered allmulticast mode [ 648.395259][ T3200] syzkaller0: entered promiscuous mode [ 648.400847][ T3200] syzkaller0: entered allmulticast mode [ 648.569042][ T3202] syzkaller0: entered promiscuous mode [ 648.582505][ T3202] syzkaller0: entered allmulticast mode [ 648.643848][ T3206] tipc: Enabled bearer , priority 0 [ 648.695678][ T3206] syzkaller0: entered promiscuous mode [ 648.701190][ T3206] syzkaller0: entered allmulticast mode [ 648.730835][ T3209] syzkaller0: entered promiscuous mode [ 648.739118][ T3209] syzkaller0: entered allmulticast mode [ 648.826903][ T3214] tipc: Resetting bearer [ 648.847424][ T3105] Set syz1 is full, maxelem 65536 reached [ 648.943843][ T3205] tipc: Resetting bearer [ 648.969409][ T3205] tipc: Disabling bearer [ 649.001750][ T3217] tipc: Enabled bearer , priority 0 [ 649.021138][ T3225] syzkaller0: entered promiscuous mode [ 649.050065][ T3225] syzkaller0: entered allmulticast mode [ 649.084076][ T3211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12826'. [ 649.160795][ T3217] tipc: Resetting bearer [ 649.168871][ T3228] syzkaller0: entered promiscuous mode [ 649.192031][ T3228] syzkaller0: entered allmulticast mode [ 649.201064][ T3216] tipc: Resetting bearer [ 649.242632][ T3216] tipc: Disabling bearer [ 651.022472][ T3233] syzkaller0: entered promiscuous mode [ 651.027953][ T3233] syzkaller0: entered allmulticast mode [ 651.067625][ T3245] syzkaller0: entered promiscuous mode [ 651.075675][ T3245] syzkaller0: entered allmulticast mode [ 651.083697][ T3244] syzkaller0: entered promiscuous mode [ 651.089482][ T3244] syzkaller0: entered allmulticast mode [ 651.930901][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 300 seconds [ 652.053203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 652.061207][ C0] lec:lec_tx_timeout: lec0 [ 652.066361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 653.326313][ T3306] syzkaller0: entered promiscuous mode [ 653.336260][ T3306] syzkaller0: entered allmulticast mode [ 653.352445][ T3306] TC_ACT_REPEAT abuse ? [ 653.366826][ T3311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12845'. [ 653.402426][ T3312] tipc: Enabled bearer , priority 0 [ 653.411145][ T3312] syzkaller0: entered promiscuous mode [ 653.417089][ T3312] syzkaller0: entered allmulticast mode [ 653.428419][ T3311] syzkaller0: entered promiscuous mode [ 653.439231][ T3311] syzkaller0: entered allmulticast mode [ 653.572787][ T3319] syzkaller0: entered promiscuous mode [ 653.579001][ T3319] syzkaller0: entered allmulticast mode [ 653.594817][ T3312] tipc: Resetting bearer [ 653.674962][ T3310] tipc: Resetting bearer [ 653.742978][ T3310] tipc: Disabling bearer [ 653.805231][ T3329] syzkaller0: entered promiscuous mode [ 653.811221][ T3329] syzkaller0: entered allmulticast mode [ 653.850240][ T3333] syzkaller0: entered promiscuous mode [ 653.856775][ T3333] syzkaller0: entered allmulticast mode [ 653.895568][ T3331] syzkaller0: entered promiscuous mode [ 653.901780][ T3331] syzkaller0: entered allmulticast mode [ 653.941730][ T3331] 0: reclassify loop, rule prio 0, protocol 800 [ 653.951904][ T3336] tipc: Enabled bearer , priority 0 [ 654.014855][ T3336] syzkaller0: entered promiscuous mode [ 654.039324][ T3336] syzkaller0: entered allmulticast mode [ 654.048597][ T3339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 654.103857][ T3336] tipc: Resetting bearer [ 654.124203][ T3335] tipc: Resetting bearer [ 654.147192][ T3335] tipc: Disabling bearer [ 654.162287][ T3342] syzkaller0: entered promiscuous mode [ 654.168077][ T3342] syzkaller0: entered allmulticast mode [ 654.174796][ T3343] syzkaller0: entered promiscuous mode [ 654.180391][ T3343] syzkaller0: entered allmulticast mode [ 654.191164][ T3345] syzkaller0: entered promiscuous mode [ 654.197241][ T3345] syzkaller0: entered allmulticast mode [ 654.411622][ T3351] syzkaller0: entered promiscuous mode [ 654.417252][ T3351] syzkaller0: entered allmulticast mode [ 654.506704][ T3357] tipc: Enabled bearer , priority 0 [ 654.514530][ T3357] syzkaller0: entered promiscuous mode [ 654.520033][ T3357] syzkaller0: entered allmulticast mode [ 654.534597][ T3357] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 654.585107][ T3357] tipc: Resetting bearer [ 654.592486][ T3358] syzkaller0: entered promiscuous mode [ 654.599421][ T3358] syzkaller0: entered allmulticast mode [ 654.609131][ T3356] tipc: Resetting bearer [ 654.628137][ T3356] tipc: Disabling bearer [ 654.675952][ T3362] tipc: Enabled bearer , priority 0 [ 654.685050][ T3362] syzkaller0: entered promiscuous mode [ 654.690684][ T3362] syzkaller0: entered allmulticast mode [ 654.741665][ T3365] syzkaller0: entered promiscuous mode [ 654.747174][ T3365] syzkaller0: entered allmulticast mode [ 654.757008][ T3367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12868'. [ 654.770452][ T3362] tipc: Resetting bearer [ 654.827268][ T3361] tipc: Resetting bearer [ 654.855732][ T3361] tipc: Disabling bearer [ 654.953788][ T3372] syzkaller0: entered promiscuous mode [ 654.959368][ T3372] syzkaller0: entered allmulticast mode [ 655.056082][ T3380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12874'. [ 655.061889][ T3378] 0: reclassify loop, rule prio 0, protocol 700 [ 655.180601][ T3384] syzkaller0: entered promiscuous mode [ 655.187240][ T3384] syzkaller0: entered allmulticast mode [ 655.256065][ T3386] syzkaller0: entered promiscuous mode [ 655.271384][ T3386] syzkaller0: entered allmulticast mode [ 655.328737][ T3388] tipc: Enabled bearer , priority 0 [ 655.338056][ T3388] syzkaller0: entered promiscuous mode [ 655.345195][ T3388] syzkaller0: entered allmulticast mode [ 655.366327][ T3392] syzkaller0: entered promiscuous mode [ 655.372838][ T3392] syzkaller0: entered allmulticast mode [ 655.416177][ T3388] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 655.528479][ T3407] tipc: Resetting bearer [ 655.542758][ T3401] syzkaller0: entered promiscuous mode [ 655.561954][ T3401] syzkaller0: entered allmulticast mode [ 655.574652][ T3411] syzkaller0: entered promiscuous mode [ 655.580382][ T3411] syzkaller0: entered allmulticast mode [ 655.589932][ T3387] tipc: Resetting bearer [ 655.610173][ T3387] tipc: Disabling bearer [ 655.643452][ T3406] syzkaller0: entered promiscuous mode [ 655.649093][ T3406] syzkaller0: entered allmulticast mode [ 655.678595][ T3406] 0: reclassify loop, rule prio 0, protocol 800 [ 655.828879][ T3417] syzkaller0: entered promiscuous mode [ 655.834592][ T3417] syzkaller0: entered allmulticast mode [ 655.864055][ T3417] TC_ACT_REPEAT abuse ? [ 655.884752][ T3422] netlink: 'syz.7.12889': attribute type 6 has an invalid length. [ 656.078662][ T3433] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12890'. [ 656.452277][ T3439] syzkaller0: entered promiscuous mode [ 656.457942][ T3439] syzkaller0: entered allmulticast mode [ 656.849270][ T3477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12899'. [ 656.867670][ T3477] netlink: 'syz.7.12899': attribute type 7 has an invalid length. [ 656.896550][ T3477] netlink: 'syz.7.12899': attribute type 8 has an invalid length. [ 656.922893][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12899'. [ 657.081867][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 657.089940][ C0] lec:lec_tx_timeout: lec0 [ 657.094852][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 658.578207][ T3457] syzkaller0: entered promiscuous mode [ 658.584033][ T3457] syzkaller0: entered allmulticast mode [ 659.579205][ T3510] delete_channel: no stack [ 659.806554][ T3516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.816496][ T3516] netlink: 'syz.6.12908': attribute type 2 has an invalid length. [ 661.644932][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.666932][ T3555] bond0: Caught tx_queue_len zero misconfig [ 661.688515][ T3561] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 662.107118][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 662.115189][ C0] lec:lec_tx_timeout: lec0 [ 662.121409][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 663.530820][ T3559] syzkaller0: entered promiscuous mode [ 663.536577][ T3559] syzkaller0: entered allmulticast mode [ 663.554148][ T3553] syzkaller0: entered promiscuous mode [ 663.559653][ T3553] syzkaller0: entered allmulticast mode [ 663.883536][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.956564][T29531] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 664.020621][ T3594] syzkaller0: entered promiscuous mode [ 664.049570][ T3594] syzkaller0: entered allmulticast mode [ 664.083713][T29531] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 664.113150][T29531] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 664.218986][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.264914][T29531] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 664.361120][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.655543][ T3629] v: renamed from 0! [ 664.925805][ T3633] syzkaller0: entered promiscuous mode [ 664.936442][ T3633] syzkaller0: entered allmulticast mode [ 664.951147][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12931'. [ 664.975164][ T3649] lo: Caught tx_queue_len zero misconfig [ 665.086480][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12931'. [ 665.093701][ T3656] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12933'. [ 665.106581][ T3656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12933'. [ 666.622917][ T3648] syzkaller0: entered promiscuous mode [ 666.628734][ T3648] syzkaller0: entered allmulticast mode [ 666.638729][ T3664] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 666.640344][ T3650] IPVS: stopping master sync thread 3664 ... [ 666.907937][ T49] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.921081][ T49] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.064057][ T3670] syzkaller0: entered promiscuous mode [ 667.087897][ T3670] syzkaller0: entered allmulticast mode [ 667.137236][ T49] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.308484][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12944'. [ 667.574460][ T3715] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12947'. [ 667.621434][ T3715] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12947'. [ 667.911464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 667.919511][ C0] lec:lec_tx_timeout: lec0 [ 667.924295][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 669.020157][ T3740] netlink: 'syz.4.12956': attribute type 13 has an invalid length. [ 670.614360][ T49] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.631824][ T36] .: left allmulticast mode [ 670.636523][ T36] .: left promiscuous mode [ 670.646276][ T36] bridge0: port 2(.) entered disabled state [ 670.673232][ T36] bridge_slave_0: left allmulticast mode [ 670.700637][ T36] bridge_slave_0: left promiscuous mode [ 670.712988][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.843886][ T36] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 671.853986][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.864861][ T36] bond0 (unregistering): (slave team0): Releasing backup interface [ 671.874511][ T36] bond0 (unregistering): Released all slaves [ 671.961505][ T36] tipc: Disabling bearer [ 671.998017][ T36] tipc: Left network mode [ 672.012688][ T3806] xt_TCPMSS: Only works on TCP SYN packets [ 672.208884][ T3798] infiniband !yz!: set down [ 672.213826][ T3798] infiniband !yz!: added team_slave_0 [ 672.394794][ T3798] RDS/IB: !yz!: added [ 672.403565][ T3798] smc: adding ib device !yz! with port count 1 [ 672.411768][ T3798] smc: ib device !yz! port 1 has no pnetid [ 672.443850][ T3820] ip6gre1: entered allmulticast mode [ 673.027387][ T3837] syzkaller0: entered promiscuous mode [ 673.035568][ T3837] syzkaller0: entered allmulticast mode [ 673.467299][ T3861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12989'. [ 673.518520][ T5497] netdevsim netdevsim2 eth9: default qdisc (pfifo_fast) fail, fallback to noqueue [ 673.574651][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12992'. [ 674.032804][ T3886] tipc: Enabled bearer , priority 0 [ 674.090998][ T3886] syzkaller0: entered promiscuous mode [ 674.108082][ T3886] syzkaller0: entered allmulticast mode [ 674.173811][ T3886] tipc: Resetting bearer [ 674.202341][ T3885] tipc: Resetting bearer [ 674.263170][ T3885] tipc: Disabling bearer [ 674.313599][ T3897] syzkaller0: entered promiscuous mode [ 674.331295][ T3897] syzkaller0: entered allmulticast mode [ 675.218818][ T3903] delete_channel: no stack [ 675.714973][ T3941] ip6gre2: entered allmulticast mode [ 675.739805][ T5497] netdevsim netdevsim2 eth10: default qdisc (pfifo_fast) fail, fallback to noqueue [ 676.094843][ T3960] tipc: Enabled bearer , priority 0 [ 676.122113][ T3960] syzkaller0: entered promiscuous mode [ 676.127823][ T3960] syzkaller0: entered allmulticast mode [ 676.224229][ T3960] tipc: Resetting bearer [ 676.231343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 676.239354][ C0] lec:lec_tx_timeout: lec0 [ 676.245119][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 676.314663][ T3959] tipc: Resetting bearer [ 676.402561][ T3959] tipc: Disabling bearer [ 676.508036][ T3980] tipc: Enabled bearer , priority 0 [ 676.515828][ T3980] syzkaller0: entered promiscuous mode [ 676.521908][ T3980] syzkaller0: entered allmulticast mode [ 676.532985][ T3980] tipc: Resetting bearer [ 676.578204][ T3979] tipc: Resetting bearer [ 676.678536][ T3979] tipc: Disabling bearer [ 676.796114][ T5497] eql: remember to turn off Van-Jacobson compression on your slave devices [ 677.191766][ T36] hsr_slave_0: left promiscuous mode [ 677.211015][ T36] hsr_slave_1: left promiscuous mode [ 677.229029][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.240701][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.256341][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.275869][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.285449][ T4018] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13052'. [ 677.321899][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13052'. [ 677.369898][ T36] veth0_macvtap: left promiscuous mode [ 677.389640][ T36] veth1_vlan: left promiscuous mode [ 677.411190][ T36] veth0_vlan: left promiscuous mode [ 678.016215][ T36] team0 (unregistering): Port device team_slave_1 removed [ 678.061069][ T36] team0 (unregistering): Port device C removed [ 678.535726][ T4034] lo speed is unknown, defaulting to 1000 [ 678.563436][ T4034] lo speed is unknown, defaulting to 1000 [ 678.569965][ T4034] lo speed is unknown, defaulting to 1000 [ 678.703902][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13060'. [ 679.242821][ T4034] infiniband syz2: set active [ 679.254727][ T5888] lo speed is unknown, defaulting to 1000 [ 679.285515][ T4078] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 679.305901][ T4034] infiniband syz2: added lo [ 679.326068][ T4034] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 679.345179][ T4034] infiniband syz2: Couldn't open port 1 [ 679.468264][ T4034] RDS/IB: syz2: added [ 679.501819][ T4034] smc: adding ib device syz2 with port count 1 [ 679.508040][ T4034] smc: ib device syz2 port 1 has no pnetid [ 679.561814][ T485] lo speed is unknown, defaulting to 1000 [ 679.589738][ T4034] lo speed is unknown, defaulting to 1000 [ 679.978777][ T4111] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 680.051290][ T4115] syzkaller0: entered promiscuous mode [ 680.058166][ T4115] syzkaller0: entered allmulticast mode [ 680.275739][ T4034] lo speed is unknown, defaulting to 1000 [ 680.312025][ T4129] tipc: Enabled bearer , priority 0 [ 680.350155][ T4129] syzkaller0: entered promiscuous mode [ 680.366398][ T4129] syzkaller0: entered allmulticast mode [ 680.404471][ T4129] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 680.504976][ T4138] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13087'. [ 680.506998][ T4129] tipc: Resetting bearer [ 680.537567][ T4138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13087'. [ 680.558208][ T4126] tipc: Resetting bearer [ 680.645892][ T4126] tipc: Disabling bearer [ 680.699362][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13090'. [ 680.744083][ T4149] syzkaller0: entered promiscuous mode [ 680.773263][ T4149] syzkaller0: entered allmulticast mode [ 680.821539][ T5497] netdevsim netdevsim2 eth11: default qdisc (pfifo_fast) fail, fallback to noqueue [ 680.890948][ T4034] lo speed is unknown, defaulting to 1000 [ 681.062671][ T4161] syzkaller0: entered promiscuous mode [ 681.077054][ T4161] syzkaller0: entered allmulticast mode [ 681.093105][ T4164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13096'. [ 681.296514][ T4171] vlan3: entered promiscuous mode [ 681.319660][ T4171] bridge0: entered promiscuous mode [ 681.408064][ T4034] lo speed is unknown, defaulting to 1000 [ 681.450830][ T4180] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13102'. [ 681.485241][ T4180] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13102'. [ 681.559602][ T4187] xt_HMARK: spi-set and port-set can't be combined [ 681.880245][ T4034] lo speed is unknown, defaulting to 1000 [ 681.991350][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 681.999427][ C0] lec:lec_tx_timeout: lec0 [ 682.011839][ T11] block nbd1: Possible stuck request ffff888025758000: control (read@0,4096B). Runtime 330 seconds [ 682.108873][ T4209] netlink: 'syz.4.13111': attribute type 4 has an invalid length. [ 682.173855][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13113'. [ 682.378395][ T4034] lo speed is unknown, defaulting to 1000 [ 682.387194][ T4219] tipc: Enabled bearer , priority 0 [ 682.445106][ T4219] syzkaller0: entered promiscuous mode [ 682.464142][ T4219] syzkaller0: entered allmulticast mode [ 682.483536][ T4227] xt_ipvs: protocol family 1 not supported [ 682.500897][ T4223] tipc: Enabled bearer , priority 0 [ 682.532337][ T4223] syzkaller0: entered promiscuous mode [ 682.548140][ T4223] syzkaller0: entered allmulticast mode [ 682.570790][ T4216] tipc: Resetting bearer [ 682.642610][ T4216] tipc: Disabling bearer [ 682.664495][ T4223] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 682.708454][ T4239] tipc: Resetting bearer [ 682.848114][ T4221] tipc: Resetting bearer [ 682.904832][ T4221] tipc: Disabling bearer [ 683.129507][ T4256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13127'. [ 683.164561][ T4259] netlink: 'syz.8.13126': attribute type 4 has an invalid length. [ 683.353852][ T4268] tipc: Enabled bearer , priority 0 [ 683.372398][ T4268] syzkaller0: entered promiscuous mode [ 683.378014][ T4268] syzkaller0: entered allmulticast mode [ 683.462954][ T4267] tipc: Resetting bearer [ 683.503192][ T4267] tipc: Disabling bearer [ 683.562672][ T4285] netlink: 'syz.5.13138': attribute type 1 has an invalid length. [ 683.592205][ T4285] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13138'. [ 683.708384][ T4292] bridge0: port 1(syz_tun) entered blocking state [ 683.715826][ T4292] bridge0: port 1(syz_tun) entered disabled state [ 683.749750][ T4292] syz_tun: entered allmulticast mode [ 683.767827][ T4292] syz_tun: entered promiscuous mode [ 684.416520][ T4339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13161'. [ 684.552627][ T31] INFO: task udevd:23040 blocked for more than 143 seconds. [ 684.571561][ T31] Not tainted syzkaller #0 [ 684.581901][ T31] Blocked by coredump. [ 684.586537][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.615941][ T31] task:udevd state:D stack:23176 pid:23040 tgid:23040 ppid:5202 task_flags:0x40054c flags:0x00080003 [ 684.635972][ T31] Call Trace: [ 684.640850][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13169'. [ 684.650756][ T31] [ 684.653902][ T31] __schedule+0x149b/0x4fd0 [ 684.665049][ T31] ? lockdep_unlock+0x6c/0xf0 [ 684.675336][ T31] ? __lock_acquire+0x146f/0x2cf0 [ 684.690327][ T31] ? __pfx___schedule+0x10/0x10 [ 684.699877][ T31] ? schedule+0x91/0x360 [ 684.706007][ T31] schedule+0x165/0x360 [ 684.710316][ T31] io_schedule+0x80/0xd0 [ 684.714868][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 684.746765][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 684.764665][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 684.786846][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 684.809118][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 684.815778][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 684.822162][ T31] truncate_inode_pages_range+0x3f0/0xd90 [ 684.828071][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 684.834402][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 684.841051][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 684.847451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 684.852591][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 684.857715][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 684.862973][ T31] bdev_release+0x417/0x650 [ 684.867479][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 684.872801][ T31] blkdev_release+0x15/0x20 [ 684.877311][ T31] __fput+0x44c/0xa70 [ 684.881348][ T31] task_work_run+0x1d4/0x260 [ 684.885968][ T31] ? __pfx_task_work_run+0x10/0x10 [ 684.891088][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 684.896766][ T31] do_exit+0x694/0x22f0 [ 684.900961][ T31] ? cgroup1_freezing+0x20/0x350 [ 684.906021][ T31] ? __pfx_do_exit+0x10/0x10 [ 684.912369][ T31] do_group_exit+0x21c/0x2d0 [ 684.916978][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 684.922402][ T31] get_signal+0x1285/0x1340 [ 684.927113][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 684.932689][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 684.938865][ T31] ? ksys_read+0x1e1/0x250 [ 684.943367][ T31] exit_to_user_mode_loop+0x87/0x4e0 [ 684.948664][ T31] ? rcu_is_watching+0x15/0xb0 [ 684.953470][ T31] do_syscall_64+0x2c1/0xf80 [ 684.958087][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.964196][ T31] ? trace_irq_disable+0x37/0x100 [ 684.969219][ T31] ? clear_bhb_loop+0x60/0xb0 [ 684.973931][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.979821][ T31] RIP: 0033:0x7f33e18a7407 [ 684.984340][ T31] RSP: 002b:00007ffc5aebc180 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 684.992806][ T31] RAX: fffffffffffffffc RBX: 00007f33e1f80880 RCX: 00007f33e18a7407 [ 685.000789][ T31] RDX: 0000000000000200 RSI: 00007f33e1f7f000 RDI: 0000000000000009 [ 685.008934][ T31] RBP: 000055efcffcc050 R08: 0000000000000000 R09: 0000000000000000 [ 685.017003][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 685.025227][ T31] R13: 0000000000000000 R14: 000055efcffdc1a8 R15: 00007f33e204539c [ 685.033394][ T31] [ 685.036593][ T31] [ 685.036593][ T31] Showing all locks held in the system: [ 685.044392][ T31] 1 lock held by khungtaskd/31: [ 685.049258][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 685.059659][ T31] 3 locks held by kworker/u8:2/36: [ 685.064837][ T31] #0: ffff8880303fa948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 685.076603][ T31] #1: ffffc90000ac7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 685.089406][ T31] #2: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 685.098949][ T31] 2 locks held by getty/5589: [ 685.103648][ T31] #0: ffff88814cc420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 685.114116][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 685.124395][ T31] 1 lock held by udevd/23040: [ 685.129069][ T31] #0: ffff8880256db358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 685.138956][ T31] 3 locks held by kworker/u8:20/31544: [ 685.144456][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 685.156499][ T31] #1: ffffc9000f70fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 685.167742][ T31] #2: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 685.176803][ T31] 2 locks held by syz.7.13164/4340: [ 685.182079][ T31] #0: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 685.191074][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 685.202040][ T31] 2 locks held by syz.4.13167/4347: [ 685.207235][ T31] #0: ffffffff8f379db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 685.215469][ T31] #1: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 685.224748][ T31] 1 lock held by syz.5.13168/4358: [ 685.229946][ T31] #0: ffffffff8f312048 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 685.239456][ T31] [ 685.242030][ T31] ============================================= [ 685.242030][ T31] [ 685.250672][ T31] NMI backtrace for cpu 1 [ 685.250689][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 685.250707][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.250717][ T31] Call Trace: [ 685.250725][ T31] [ 685.250733][ T31] dump_stack_lvl+0xe8/0x150 [ 685.250760][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 685.250784][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 685.250814][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 685.250840][ T31] sys_info+0x135/0x170 [ 685.250861][ T31] watchdog+0xf95/0xfe0 [ 685.250889][ T31] ? watchdog+0x20a/0xfe0 [ 685.250917][ T31] kthread+0x711/0x8a0 [ 685.250944][ T31] ? __pfx_watchdog+0x10/0x10 [ 685.250967][ T31] ? __pfx_kthread+0x10/0x10 [ 685.250994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 685.251017][ T31] ? __pfx_kthread+0x10/0x10 [ 685.251041][ T31] ret_from_fork+0x510/0xa50 [ 685.251061][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 685.251077][ T31] ? __switch_to+0xc9e/0x1480 [ 685.251106][ T31] ? __pfx_kthread+0x10/0x10 [ 685.251129][ T31] ret_from_fork_asm+0x1a/0x30 [ 685.251167][ T31] [ 685.251180][ T31] Sending NMI from CPU 1 to CPUs 0: [ 685.376878][ C0] NMI backtrace for cpu 0 [ 685.376896][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 685.376915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.376925][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 685.376947][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 91 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 685.376962][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 685.376978][ C0] RAX: 000000000016f0ff RBX: ffffffff819713ee RCX: 0000000080000001 [ 685.376990][ C0] RDX: 0000000000000001 RSI: ffffffff8d792b4a RDI: ffffffff8bc08360 [ 685.377002][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 685.377014][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822c70 [ 685.377026][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 685.377038][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 685.377051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 685.377063][ C0] CR2: 00007fae7a7b42f8 CR3: 0000000076f94000 CR4: 00000000003526f0 [ 685.377082][ C0] Call Trace: [ 685.377089][ C0] [ 685.377095][ C0] default_idle+0x13/0x20 [ 685.377114][ C0] default_idle_call+0x73/0xb0 [ 685.377135][ C0] do_idle+0x1be/0x4d0 [ 685.377153][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 685.377171][ C0] ? __pfx_do_idle+0x10/0x10 [ 685.377198][ C0] cpu_startup_entry+0x44/0x60 [ 685.377215][ C0] rest_init+0x2de/0x300 [ 685.377237][ C0] start_kernel+0x381/0x3d0 [ 685.377255][ C0] x86_64_start_reservations+0x24/0x30 [ 685.377277][ C0] x86_64_start_kernel+0x143/0x1c0 [ 685.377298][ C0] common_startup_64+0x13e/0x147 [ 685.377327][ C0] [ 685.566416][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 685.573291][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 685.582411][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.592460][ T31] Call Trace: [ 685.595730][ T31] [ 685.598648][ T31] vpanic+0x1e0/0x670 [ 685.602615][ T31] panic+0xb9/0xc0 [ 685.606319][ T31] ? __pfx_panic+0x10/0x10 [ 685.610715][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 685.616081][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 685.622238][ T31] watchdog+0xfdf/0xfe0 [ 685.626453][ T31] ? watchdog+0x20a/0xfe0 [ 685.630776][ T31] kthread+0x711/0x8a0 [ 685.634839][ T31] ? __pfx_watchdog+0x10/0x10 [ 685.639501][ T31] ? __pfx_kthread+0x10/0x10 [ 685.644185][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 685.649456][ T31] ? __pfx_kthread+0x10/0x10 [ 685.654067][ T31] ret_from_fork+0x510/0xa50 [ 685.658667][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 685.663771][ T31] ? __switch_to+0xc9e/0x1480 [ 685.668471][ T31] ? __pfx_kthread+0x10/0x10 [ 685.673044][ T31] ret_from_fork_asm+0x1a/0x30 [ 685.677800][ T31] [ 685.681227][ T31] Kernel Offset: disabled [ 685.685546][ T31] Rebooting in 86400 seconds..