last executing test programs: 5.56091912s ago: executing program 3 (id=18822): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 3.349873967s ago: executing program 4 (id=18852): socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x376, 0x46}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040804}, 0x240000d4) write$nci(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="6105070701"], 0x1a) 2.887153179s ago: executing program 3 (id=18854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x2c020400) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.626088209s ago: executing program 3 (id=18860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350602877", 0x1a}], 0x4) 2.201421408s ago: executing program 4 (id=18866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="bad3300200000000000000ea0756a85d86dde4318d226dbb4117e56b5c1adb6cecc2b54e2042ab0daf2b8d555303ef6f492ab7d5cea1a79b4042", 0x3a, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xdc, 0x6, @multicast}, 0x14) 1.924849751s ago: executing program 3 (id=18869): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, 0x0, 0x0, 0x12121, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000029bd9cb3000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.769455316s ago: executing program 4 (id=18872): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.768271195s ago: executing program 1 (id=18873): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.748111585s ago: executing program 3 (id=18874): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1.639831481s ago: executing program 2 (id=18875): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x48804}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0x3c, 0x10040, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x24060855}, 0xc000) 1.545315185s ago: executing program 1 (id=18877): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.465593881s ago: executing program 4 (id=18878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xa802, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) 1.380760207s ago: executing program 1 (id=18879): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.274769813s ago: executing program 1 (id=18880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8a080, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1db3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x9, 0x1}, {0x2, 0x448fb5d2ba34cfda, 0x6d1, 0x7, 0xfffd, 0xed4}, 0x8, 0x1, 0x1fcd}}, @TCA_TBF_BURST={0x8, 0x6, 0xafc5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x220000e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000180)='+', 0x1, 0x10, &(0x7f0000000200)={0x11, 0x15, r3, 0x1, 0x5, 0x6, @remote}, 0x14) 988.18079ms ago: executing program 0 (id=18882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r1, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="e7ffffffffff"}) write$bt_hci(r2, 0x0, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdc01, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) write$bt_hci(r2, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc9}}}, 0x6) 870.513311ms ago: executing program 0 (id=18883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 824.37392ms ago: executing program 4 (id=18884): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 803.237254ms ago: executing program 1 (id=18885): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf250700000005001300810000001400080000"], 0x38}}, 0x2) 786.025536ms ago: executing program 3 (id=18886): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800f7000a4211ec49c9c3be0300cbea98f28724", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf090000000000005509010000000000950000000000000085100000000000ffbf91000000000000b70200"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000040)=""/197, 0x41000}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 708.10007ms ago: executing program 2 (id=18887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) 636.461865ms ago: executing program 0 (id=18888): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$key(0xf, 0x3, 0x2) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) 570.010486ms ago: executing program 2 (id=18889): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 493.51617ms ago: executing program 0 (id=18890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0xa, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0x9, 0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0) 427.149914ms ago: executing program 2 (id=18891): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff91, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 356.702943ms ago: executing program 0 (id=18892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190400000c0001800800030007"], 0x20}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x28000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000500)}, {0x0}, {&(0x7f00000008c0)="dc8e8e4a60e94eb3b35742f486f6e7ff7cdd1fd97414c204e405ece104a0741442d99bb971a9d1dbbb72519d23dcff234dd592e3ea36a7ac359bc7070ecec05c7018e0c86fccdd4e3739613b250674d9ec88a5867805dc62fe4110b27a3e98558318293b49dba004cc79c0861684716f491429d0f606516e0f9183fb1faa7b5491ccc5c3c62e8eec39309d8058c1b737d1", 0x91}, {&(0x7f0000000580)="45d6bff987599a4d7cb26bd707b8e71bd87475eb42ffc8e877a37c4f257bf33ea0f7671eb84ab64cbea31e5ba557453915c87a83d28b013a5ecfdb89c76cfb195f6e4e0b395e60da3130efc74376ab5bdd5d27314654b1517675146b9315efd21cc9eece5e5f3c97fa", 0x69}, {0x0}], 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 350.728624ms ago: executing program 1 (id=18893): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 260.784387ms ago: executing program 4 (id=18894): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) unshare(0x22020600) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x80802, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 197.55313ms ago: executing program 2 (id=18895): socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0xa) 143.231549ms ago: executing program 0 (id=18896): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) 0s ago: executing program 2 (id=18897): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x8, 0x2, 0xdb7e) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) close(r1) kernel console output (not intermixed with test programs): process `syz.2.15371'. [ 758.705114][ T6492] bond3: entered promiscuous mode [ 758.711221][ T6492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.728313][ T6495] vlan0: entered allmulticast mode [ 758.738954][ T6495] bond0: entered allmulticast mode [ 758.744636][ T6495] bond_slave_0: entered allmulticast mode [ 758.752326][ T6495] : entered allmulticast mode [ 758.756605][ T6501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15372'. [ 758.804590][ T6498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 758.819069][ T6498] bond4: entered promiscuous mode [ 758.826249][ T6498] bond3: (slave bond4): Enslaving as an active interface with an up link [ 758.969941][ T6501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.263889][ T6526] netlink: 'syz.0.15384': attribute type 11 has an invalid length. [ 759.286703][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15384'. [ 759.692168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.701065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.709947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.828791][ T6501] bond_slave_0: left allmulticast mode [ 759.837519][ T6501] bond0 (unregistering): (slave ): Releasing backup interface [ 759.855420][ T6501] : left allmulticast mode [ 759.872213][ T6501] bond0 (unregistering): Released all slaves [ 760.115476][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15393'. [ 760.320428][ T29] audit: type=1800 audit(1774488591.420:12): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15396" name="memory.events" dev="tmpfs" ino=15529 res=0 errno=0 [ 760.470101][ T6564] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 760.505220][ T6564] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 760.729005][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15406'. [ 760.741367][ T6579] netlink: 'syz.2.15406': attribute type 30 has an invalid length. [ 760.818991][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15406'. [ 760.828293][ T3016] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.858972][ T3016] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.870581][ T6579] netlink: 'syz.2.15406': attribute type 30 has an invalid length. [ 760.889913][ T3016] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.927612][ T3016] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.520273][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15430'. [ 763.502638][ T6677] batman_adv: batadv0: Adding interface: gretap2 [ 763.524694][ T6677] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 763.607169][ T6677] batman_adv: batadv0: Interface activated: gretap2 [ 763.732887][ T6691] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 764.216664][ T6721] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 765.089574][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15482'. [ 765.157213][ T6775] syzkaller1: entered promiscuous mode [ 765.174682][ T6775] syzkaller1: entered allmulticast mode [ 765.193884][ T6775] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 765.772385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.781446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.790486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.993649][ T6824] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 766.118855][ T6834] netlink: 'syz.3.15505': attribute type 19 has an invalid length. [ 766.127736][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15505'. [ 766.156967][ T6824] bond5 (unregistering): Released all slaves [ 766.196985][ T6834] netlink: 'syz.3.15505': attribute type 19 has an invalid length. [ 766.212940][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15505'. [ 766.503691][ T6840] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15509'. [ 767.101491][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15521'. [ 768.586634][ T6914] netlink: 'syz.2.15541': attribute type 4 has an invalid length. [ 768.612112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.639886][ T6915] netlink: 'syz.2.15541': attribute type 4 has an invalid length. [ 768.732963][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.302237][ T6911] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 769.310851][ T6911] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 769.897145][ T6943] batman_adv: batadv0: Interface deactivated: gretap2 [ 769.932076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.012341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.092527][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.101517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.305597][ T6952] IPVS: Scheduler module ip_vs_ not found [ 770.311914][ T6956] IPVS: length: 24 != 73752 [ 770.642815][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15562'. [ 771.022470][ T6975] bond0: entered promiscuous mode [ 771.028684][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.772933][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.671390][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15600'. [ 772.681000][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15600'. [ 772.723296][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15600'. [ 772.733051][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15600'. [ 772.953215][ T7071] pim6reg: entered allmulticast mode [ 772.961423][ T7070] pim6reg: left allmulticast mode [ 773.084921][ T7077] atomic_op ffff888032e69998 conn xmit_atomic 0000000000000000 [ 773.149527][ T7079] netlink: 'syz.4.15610': attribute type 9 has an invalid length. [ 773.159127][ T7079] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.15610'. [ 774.129597][ T7120] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.15626'. [ 774.560638][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15633'. [ 774.575174][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15633'. [ 774.808065][ T7146] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15637'. [ 774.812005][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.572895][ T7167] tls_set_device_offload: netdev not found [ 775.853711][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.862839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.495353][ T7132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.645357][ T7224] netlink: 'syz.3.15669': attribute type 34 has an invalid length. [ 777.690755][ T7226] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 777.892576][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.965035][ T7242] netlink: 136 bytes leftover after parsing attributes in process `syz.4.15675'. [ 777.991888][ T7242] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 778.224464][ T7254] netlink: 'syz.4.15682': attribute type 11 has an invalid length. [ 778.546084][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15692'. [ 778.602241][ T7279] netlink: 'syz.0.15693': attribute type 83 has an invalid length. [ 779.829891][ T7342] netlink: 25 bytes leftover after parsing attributes in process `syz.0.15722'. [ 779.872491][ T7342] netlink: 140 bytes leftover after parsing attributes in process `syz.0.15722'. [ 779.914970][ T7342] netlink: 25 bytes leftover after parsing attributes in process `syz.0.15722'. [ 779.986790][ T7348] netlink: 'syz.3.15725': attribute type 8 has an invalid length. [ 779.995275][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15725'. [ 780.338221][ T7368] netlink: 'syz.0.15735': attribute type 1 has an invalid length. [ 780.444721][ T7368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.495895][ T7375] bond7: (slave geneve2): making interface the new active one [ 780.514814][ T7375] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 780.542548][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.588705][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.610612][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.625365][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 780.824973][ T7390] netlink: 'syz.4.15742': attribute type 1 has an invalid length. [ 780.859703][ T7390] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.879380][ T7390] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 780.889329][ T7390] bond6: (slave batadv1): making interface the new active one [ 780.900387][ T7390] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 780.955574][ T7395] netlink: 112 bytes leftover after parsing attributes in process `syz.4.15744'. [ 780.975134][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.619377][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.628079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.897075][ T7445] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15762'. [ 782.639111][ T7471] netlink: 'syz.1.15772': attribute type 1 has an invalid length. [ 782.647886][ T7471] netlink: 196 bytes leftover after parsing attributes in process `syz.1.15772'. [ 783.292283][ T7481] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 783.310379][ T7481] bond8: (slave lo): Enslaving as an active interface with an up link [ 783.329659][ T7481] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 783.460065][ T7488] netlink: 'syz.0.15780': attribute type 22 has an invalid length. [ 783.469583][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15780'. [ 783.486084][ T7488] netlink: 'syz.0.15780': attribute type 22 has an invalid length. [ 783.494721][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15780'. [ 783.531922][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 784.111945][ T7404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.255757][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.420035][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15790'. [ 784.437621][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15790'. [ 784.626335][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15790'. [ 784.641852][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15790'. [ 785.194796][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15803'. [ 785.237075][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15803'. [ 785.514806][ T7554] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.15808'. [ 785.721102][ T7565] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15812'. [ 785.766780][ T7565] netlink: Conntrack attr has 3 unknown bytes [ 785.789215][ T7568] netlink: 'syz.0.15814': attribute type 1 has an invalid length. [ 786.154645][ T7589] syzkaller1: entered promiscuous mode [ 786.174049][ T7589] syzkaller1: entered allmulticast mode [ 787.292185][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.343393][ T7622] netlink: 'syz.3.15836': attribute type 14 has an invalid length. [ 787.368242][ T7622] netlink: 'syz.3.15836': attribute type 14 has an invalid length. [ 787.382743][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.391246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.802380][ T7635] tun0: tun_chr_ioctl cmd 1074025675 [ 787.817930][ T7635] tun0: persist enabled [ 787.828162][ T7635] tun0: tun_chr_ioctl cmd 1074025675 [ 787.842046][ T7635] tun0: persist enabled [ 787.860179][ T7635] tun0: tun_chr_ioctl cmd 1074025673 [ 788.331320][ T7653] batadv_slave_1: entered allmulticast mode [ 788.342688][ T7653] batadv_slave_1: left allmulticast mode [ 789.368788][ T7690] lo: entered allmulticast mode [ 789.496494][ T7693] __nla_validate_parse: 2 callbacks suppressed [ 789.496517][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15869'. [ 789.541960][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15869'. [ 789.551552][ T7693] netlink: 'syz.2.15869': attribute type 6 has an invalid length. [ 789.560034][ T7693] netlink: 'syz.2.15869': attribute type 5 has an invalid length. [ 789.687214][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15869'. [ 789.698363][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15869'. [ 789.746955][ T7693] netlink: 'syz.2.15869': attribute type 6 has an invalid length. [ 789.756366][ T7693] netlink: 'syz.2.15869': attribute type 5 has an invalid length. [ 790.002810][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15879'. [ 790.333446][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.426335][ T7735] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 792.670763][ T7826] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15922'. [ 793.132874][ T638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.141895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.236126][ T7857] netlink: 'syz.1.15935': attribute type 9 has an invalid length. [ 793.268698][ T7857] netlink: 'syz.1.15935': attribute type 11 has an invalid length. [ 793.277829][ T7857] netlink: 'syz.1.15935': attribute type 12 has an invalid length. [ 793.287536][ T7857] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.15935'. [ 793.297420][ T7860] netlink: 'syz.3.15937': attribute type 4 has an invalid length. [ 793.300690][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15935'. [ 793.323715][ T7860] netlink: 'syz.3.15937': attribute type 8 has an invalid length. [ 793.352666][ T7860] netlink: 'syz.3.15937': attribute type 1 has an invalid length. [ 793.362734][ T7860] netlink: 172 bytes leftover after parsing attributes in process `syz.3.15937'. [ 793.373614][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.399962][ T7860] NCSI netlink: No device for ifindex 0 [ 793.714702][ T7883] netlink: 'syz.1.15946': attribute type 1 has an invalid length. [ 793.745437][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15946'. [ 794.176218][ T7910] netlink: 'syz.4.15958': attribute type 2 has an invalid length. [ 795.357248][ T7961] __nla_validate_parse: 1 callbacks suppressed [ 795.357271][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15980'. [ 796.412139][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.778891][ T7995] "syz.3.15993" (7995) uses obsolete ecb(arc4) skcipher [ 797.253812][ T8020] bond0: Caught tx_queue_len zero misconfig [ 798.266483][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16013'. [ 798.335050][ T8055] lo: left allmulticast mode [ 798.341227][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 798.661105][ T8066] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16019'. [ 798.890698][ T8081] netlink: 'syz.1.16027': attribute type 6 has an invalid length. [ 798.900864][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.902853][ T8082] netlink: 'syz.4.16028': attribute type 1 has an invalid length. [ 798.909528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.164299][ T8082] 8021q: adding VLAN 0 to HW filter on device bond7 [ 799.321764][ T8089] bond7: (slave geneve4): making interface the new active one [ 799.347248][ T8089] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 799.392244][ T5229] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.442803][ T5229] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.452353][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.466694][ T5229] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.523445][ T5229] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.841182][ T8128] netlink: 'syz.4.16047': attribute type 8 has an invalid length. [ 799.850350][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16047'. [ 799.903900][ T8128] gretap0: entered promiscuous mode [ 799.920575][ T8128] gretap0: left promiscuous mode [ 800.287156][ T8146] netlink: 'syz.3.16054': attribute type 30 has an invalid length. [ 801.109146][ T8175] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) ! [ 801.667150][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16076'. [ 801.687253][ T8199] netlink: 'syz.2.16076': attribute type 26 has an invalid length. [ 801.688901][ T8201] netlink: 'syz.3.16077': attribute type 8 has an invalid length. [ 801.707530][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16076'. [ 801.746253][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16076'. [ 801.767383][ T8199] netlink: 'syz.2.16076': attribute type 26 has an invalid length. [ 801.804849][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16076'. [ 802.573946][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.339477][ T8250] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16097'. [ 804.030444][ T8264] netlink: 'syz.0.16104': attribute type 8 has an invalid length. [ 804.040661][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16104'. [ 804.483360][ T8278] netlink: 'syz.0.16110': attribute type 9 has an invalid length. [ 804.491426][ T8278] netlink: 'syz.0.16110': attribute type 11 has an invalid length. [ 804.553425][ T8278] netlink: 'syz.0.16110': attribute type 12 has an invalid length. [ 804.569852][ T8283] IPVS: length: 132 != 8 [ 804.573514][ T8278] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.16110'. [ 804.592019][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16110'. [ 804.605733][ T8283] pimreg: entered allmulticast mode [ 804.652741][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.661411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.929410][ T8293] netlink: 'syz.2.16118': attribute type 11 has an invalid length. [ 804.964757][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16118'. [ 805.049172][ T8293] netlink: 'syz.2.16118': attribute type 11 has an invalid length. [ 805.071746][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16118'. [ 805.612422][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.849028][ T8370] sctp: [Deprecated]: syz.3.16149 (pid 8370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.849028][ T8370] Use struct sctp_sack_info instead [ 807.066495][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16155'. [ 807.141864][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16155'. [ 807.172091][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16155'. [ 807.183378][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16155'. [ 807.197746][ T8389] netlink: 'syz.0.16156': attribute type 1 has an invalid length. [ 807.231850][ T8389] netlink: 'syz.0.16156': attribute type 6 has an invalid length. [ 807.258269][ T8389] netlink: 'syz.0.16156': attribute type 3 has an invalid length. [ 807.853132][ T8412] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.16167'. [ 807.912774][ T8412] netlink: Unknown conntrack attr (type=2304, max=9) [ 808.236609][ T8427] netlink: 'syz.1.16173': attribute type 9 has an invalid length. [ 808.262713][ T8427] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.16173'. [ 808.275495][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16173'. [ 808.662196][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.136667][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.144728][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.563038][ T8466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.735459][ T8479] validate_nla: 2 callbacks suppressed [ 809.735483][ T8479] netlink: 'syz.1.16191': attribute type 13 has an invalid length. [ 809.750042][ T8479] netlink: 'syz.1.16191': attribute type 17 has an invalid length. [ 809.786349][ T8475] hsr0: left allmulticast mode [ 809.791628][ T8475] hsr_slave_0: left allmulticast mode [ 809.798756][ T8475] hsr_slave_1: left allmulticast mode [ 809.925718][ T8479] sit0: left promiscuous mode [ 810.006330][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.017407][ T8479] dummy0: left allmulticast mode [ 810.030076][ T8479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.413156][ T5229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.421828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.557317][ T8510] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16204'. [ 811.067977][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16220'. [ 811.089641][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16220'. [ 811.114182][ T8543] netlink: 'syz.3.16220': attribute type 7 has an invalid length. [ 811.137298][ T8543] netlink: 'syz.3.16220': attribute type 7 has an invalid length. [ 811.692149][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.717415][ T8580] @0Ù: renamed from bond_slave_1 [ 811.989157][ T8598] dummy0: Caught tx_queue_len zero misconfig [ 811.998778][ T8598] netlink: 'syz.3.16247': attribute type 1 has an invalid length. [ 812.174769][ T8607] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 812.188688][ T8607] syzkaller1: Linktype set failed because interface is up [ 812.197251][ T9] syzkaller1: tun_net_xmit 90 [ 812.840460][ T8634] veth1_to_hsr: left allmulticast mode [ 812.854445][ T8634] veth1_to_hsr: left promiscuous mode [ 812.866375][ T8634] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 812.969481][ T8636] __nla_validate_parse: 3 callbacks suppressed [ 812.969499][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16263'. [ 812.986724][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16263'. [ 812.992003][ T60] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.002251][ T8636] netlink: 'syz.1.16263': attribute type 12 has an invalid length. [ 813.004922][ T60] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.022796][ T60] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.031610][ T60] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.041259][ T60] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.041548][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16263'. [ 813.049947][ T60] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.070531][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16263'. [ 813.080104][ T8636] netlink: 'syz.1.16263': attribute type 12 has an invalid length. [ 813.088492][ T60] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.097475][ T60] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 813.210046][ T8642] netlink: 392 bytes leftover after parsing attributes in process `syz.1.16265'. [ 813.528251][ T8653] netlink: 'syz.4.16270': attribute type 13 has an invalid length. [ 813.849708][ T8672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16278'. [ 814.002410][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16281'. [ 814.088879][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16284'. [ 814.144085][ T8687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16284'. [ 814.328104][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16291'. [ 814.369958][ T8698] netlink: 'syz.3.16290': attribute type 7 has an invalid length. [ 814.444065][ T8698] netlink: 'syz.3.16290': attribute type 7 has an invalid length. [ 814.492252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.732732][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.114969][ T8737] validate_nla: 1 callbacks suppressed [ 815.114990][ T8737] netlink: 'syz.3.16309': attribute type 5 has an invalid length. [ 815.393291][ T8755] netlink: Conntrack attr has 4 unknown bytes [ 815.690984][ T8769] netlink: 'syz.0.16324': attribute type 1 has an invalid length. [ 815.868879][ T8769] 8021q: adding VLAN 0 to HW filter on device bond9 [ 815.908279][ T8774] bond9: (slave geneve3): making interface the new active one [ 815.923738][ T8774] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 815.934835][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.959105][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.979195][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.998760][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 816.172273][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.180873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.703558][ T8828] batadv_slave_0: entered promiscuous mode [ 816.727339][ T8826] batadv_slave_0: left promiscuous mode [ 816.923352][ T8845] netlink: 'syz.3.16353': attribute type 13 has an invalid length. [ 816.937263][ T8845] netlink: 'syz.3.16353': attribute type 17 has an invalid length. [ 817.287240][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.295075][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.815675][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.952468][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.011027][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.605014][ T8840] bond0: left promiscuous mode [ 818.609956][ T8840] bond_slave_0: left promiscuous mode [ 818.616019][ T8840] bond_slave_1: left promiscuous mode [ 818.689597][ T8845] syz_tun: left promiscuous mode [ 818.698339][ T8845] syz_tun: left allmulticast mode [ 818.718724][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.728273][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.739822][ T8845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.817424][ T8878] trusted_key: syz.3.16361 sent an empty control message without MSG_MORE. [ 818.830979][ T60] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.859108][ T60] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.889166][ T8861] __nla_validate_parse: 12 callbacks suppressed [ 818.889189][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16358'. [ 818.909975][ T60] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.927060][ T60] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.935852][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16358'. [ 818.951518][ T60] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.961868][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 818.962030][ T60] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.982298][ T60] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.990877][ T60] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.992239][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.045149][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.055493][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.065986][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.090843][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.110088][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.120624][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16362'. [ 819.272461][ T8896] netlink: 'syz.4.16370': attribute type 1 has an invalid length. [ 819.303513][ T8892] netlink: 'syz.1.16368': attribute type 21 has an invalid length. [ 819.311926][ T8896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 819.536062][ T8911] netlink: 'syz.0.16376': attribute type 7 has an invalid length. [ 819.545940][ T8911] netlink: 'syz.0.16376': attribute type 7 has an invalid length. [ 819.843813][ T8928] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 819.850213][ T8928] syzkaller1: Refused to change device type [ 820.616802][ T8965] netlink: 'syz.2.16400': attribute type 7 has an invalid length. [ 820.632585][ T8965] netlink: 'syz.2.16400': attribute type 8 has an invalid length. [ 820.641545][ T8965] netlink: 'syz.2.16400': attribute type 8 has an invalid length. [ 820.662014][ T8965] netlink: 'syz.2.16400': attribute type 4 has an invalid length. [ 820.677606][ T8965] netlink: 'syz.2.16400': attribute type 7 has an invalid length. [ 820.895665][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.051610][ T8990] netlink: 'syz.2.16410': attribute type 1 has an invalid length. [ 821.782731][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.802804][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.834165][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.848743][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.875659][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.908628][ T9017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.932650][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.941734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.967418][ T9016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.184610][ T9079] netlink: 'syz.1.16444': attribute type 2 has an invalid length. [ 823.690296][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 824.018661][ T9115] syzkaller1: entered promiscuous mode [ 824.032716][ T9115] syzkaller1: entered allmulticast mode [ 824.676903][ T9142] __nla_validate_parse: 14 callbacks suppressed [ 824.676925][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16469'. [ 824.724062][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16469'. [ 825.519250][ T9171] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.604739][ T9171] bond5: (slave lo): Enslaving as an active interface with an up link [ 825.854159][ T9181] vlan8: entered promiscuous mode [ 825.900997][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16488'. [ 825.991228][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16490'. [ 826.618427][ T9218] syzkaller1: entered promiscuous mode [ 826.634116][ T9218] syzkaller1: entered allmulticast mode [ 826.804281][ T9220] netlink: 'syz.1.16502': attribute type 5 has an invalid length. [ 827.217102][ T9231] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16507'. [ 827.738831][ T9241] syzkaller1: entered promiscuous mode [ 827.751919][ T9241] syzkaller1: entered allmulticast mode [ 828.305520][ T9275] net_ratelimit: 9 callbacks suppressed [ 828.305541][ T9275] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 828.514289][ T9291] netlink: 'syz.0.16533': attribute type 1 has an invalid length. [ 828.625757][ T9291] 8021q: adding VLAN 0 to HW filter on device bond10 [ 828.782541][ T9298] bond10: (slave gretap3): making interface the new active one [ 828.796241][ T9298] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 828.893831][ T9307] bond8: (slave tunl0): The slave device specified does not support setting the MAC address [ 828.906265][ T9307] bond8: (slave tunl0): Error -95 calling set_mac_address [ 828.914929][ T9307] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 829.046757][ T9318] bond8: option mode: unable to set because the bond device has slaves [ 829.073352][ T9318] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 829.286022][ T9335] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.16550'. [ 829.517717][ T9349] bridge0: entered promiscuous mode [ 829.536455][ T9349] bridge0: entered allmulticast mode [ 829.815475][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16561'. [ 830.062092][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16567'. [ 830.072826][ T9379] netlink: 'syz.3.16567': attribute type 30 has an invalid length. [ 830.092192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.100930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.109576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.118884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.165524][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.174503][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16567'. [ 830.198416][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.207695][ T9379] netlink: 'syz.3.16567': attribute type 30 has an invalid length. [ 830.227253][ T60] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.266990][ T60] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.325603][ T9412] syzkaller1: entered promiscuous mode [ 831.331484][ T9412] syzkaller1: entered allmulticast mode [ 831.746322][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16586'. [ 832.243530][ T9454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16594'. [ 832.283609][ T9454] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16594'. [ 833.601522][ T9517] syzkaller1: entered promiscuous mode [ 833.607863][ T9517] syzkaller1: entered allmulticast mode [ 833.641248][ T9519] ip6gre4: entered promiscuous mode [ 833.658806][ T9519] ip6gre4: entered allmulticast mode [ 833.871619][ T9535] netlink: 'syz.4.16631': attribute type 12 has an invalid length. [ 833.882373][ T9537] netlink: 165 bytes leftover after parsing attributes in process `syz.3.16632'. [ 835.212293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.221194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.634958][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16662'. [ 835.783587][ T9610] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 837.022769][ T9661] only policy match revision 0 supported [ 837.022793][ T9661] unable to load match [ 837.805714][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 837.823425][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 837.863832][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 837.892286][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 837.918345][ T9685] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.16692'. [ 838.332247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.341163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.349796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.580408][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16700'. [ 838.594699][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16700'. [ 838.649825][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16700'. [ 838.685308][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16700'. [ 839.401551][ T9732] netlink: 88 bytes leftover after parsing attributes in process `syz.2.16712'. [ 839.843214][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16723'. [ 839.987235][ T9763] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16725'. [ 841.261348][ T9787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.523835][ T9834] netlink: 'syz.0.16756': attribute type 2 has an invalid length. [ 841.535405][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16756'. [ 842.452787][ T9866] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.16770'. [ 843.672078][ T9894] netem: change failed [ 843.905809][ T9904] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.967620][ T9906] syzkaller1: entered promiscuous mode [ 843.977826][ T9906] syzkaller1: entered allmulticast mode [ 843.995909][ T9904] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.081084][ T9904] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.125981][ T9912] netlink: 'syz.0.16787': attribute type 1 has an invalid length. [ 844.176423][ T9912] bond11: entered promiscuous mode [ 844.185147][ T9912] bond11: entered allmulticast mode [ 844.193827][ T9912] 8021q: adding VLAN 0 to HW filter on device bond11 [ 844.210276][ T9916] erspan2: entered allmulticast mode [ 844.219695][ T9916] bond11: (slave erspan2): making interface the new active one [ 844.228084][ T9916] erspan2: entered promiscuous mode [ 844.235007][ T9916] bond11: (slave erspan2): Enslaving as an active interface with an up link [ 844.317161][ T9904] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.590475][ T5229] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.655728][ T638] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.675846][ T5229] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.701144][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.279313][ T9957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.940258][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16827'. [ 847.391780][ T9996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.541190][T10039] netlink: 'syz.4.16833': attribute type 1 has an invalid length. [ 847.548831][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16834'. [ 847.621197][T10041] gretap4: entered allmulticast mode [ 847.636041][T10041] bond9: (slave gretap4): making interface the new active one [ 847.745047][T10041] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 847.995147][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16842'. [ 848.004960][T10058] netlink: 121 bytes leftover after parsing attributes in process `syz.1.16842'. [ 848.062779][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16843'. [ 848.080821][T10061] syzkaller1: entered promiscuous mode [ 848.088167][T10061] syzkaller1: entered allmulticast mode [ 848.830281][T10096] netlink: 'syz.1.16859': attribute type 26 has an invalid length. [ 849.110018][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16864'. [ 849.203871][T10111] dummy0: mtu less than device minimum [ 849.209686][T10114] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 850.174275][T10165] bond5: option ad_user_port_key: invalid value (65535) [ 850.181436][T10165] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 850.204054][T10165] bond5 (unregistering): Released all slaves [ 851.171215][T10214] syzkaller1: entered promiscuous mode [ 851.177087][T10214] syzkaller1: entered allmulticast mode [ 852.000169][T10244] netlink: 'syz.3.16922': attribute type 10 has an invalid length. [ 852.041755][T10244] team0: Failed to send options change via netlink (err -105) [ 852.049726][T10244] team0: Port device dummy0 added [ 852.052261][T10246] netlink: 'syz.3.16922': attribute type 10 has an invalid length. [ 852.159127][T10246] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 852.192401][T10246] team0: Failed to send options change via netlink (err -105) [ 852.223237][T10246] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 852.249688][T10246] team0: Port device dummy0 removed [ 852.274646][T10246] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 852.740889][T10270] netlink: 'syz.0.16934': attribute type 1 has an invalid length. [ 852.862028][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16934'. [ 853.023021][T10270] 8021q: adding VLAN 0 to HW filter on device bond12 [ 853.157105][T10275] bond12: (slave gretap4): making interface the new active one [ 853.175022][T10275] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 853.235780][T10279] bond12 (unregistering): (slave gretap4): Releasing active interface [ 853.248588][T10279] bond12 (unregistering): Released all slaves [ 853.410942][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16938'. [ 853.429273][T10285] gtp2: entered promiscuous mode [ 853.436035][T10285] gtp2: entered allmulticast mode [ 854.107505][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16951'. [ 854.326028][T10327] netlink: 'syz.1.16955': attribute type 39 has an invalid length. [ 855.471494][T10375] bridge_slave_1: entered promiscuous mode [ 855.477960][T10375] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 855.488514][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16975'. [ 855.512042][T10374] syzkaller1: entered promiscuous mode [ 855.517658][T10374] syzkaller1: entered allmulticast mode [ 855.693240][T10383] netlink: 7 bytes leftover after parsing attributes in process `syz.0.16979'. [ 856.359970][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16987'. [ 856.370939][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16987'. [ 857.263979][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16998'. [ 857.290063][T10435] pim6reg1: entered promiscuous mode [ 857.311873][T10435] pim6reg1: entered allmulticast mode [ 857.336222][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16998'. [ 858.047745][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17015'. [ 858.085030][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17017'. [ 858.099304][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17017'. [ 858.103925][T10478] syzkaller1: entered promiscuous mode [ 858.133735][T10478] syzkaller1: entered allmulticast mode [ 858.339556][T10491] sctp: [Deprecated]: syz.0.17023 (pid 10491) Use of int in max_burst socket option. [ 858.339556][T10491] Use struct sctp_assoc_value instead [ 858.339648][T10486] netlink: 88 bytes leftover after parsing attributes in process `syz.1.17021'. [ 859.089086][T10531] syzkaller1: entered promiscuous mode [ 859.103854][T10531] syzkaller1: entered allmulticast mode [ 860.129108][T10557] sctp: [Deprecated]: syz.2.17050 (pid 10557) Use of int in maxseg socket option. [ 860.129108][T10557] Use struct sctp_assoc_value instead [ 860.705066][T10574] syzkaller1: entered promiscuous mode [ 860.710879][T10574] syzkaller1: entered allmulticast mode [ 861.166294][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17069'. [ 861.668065][T10625] openvswitch: : Dropping previously announced user features [ 861.698468][T10626] openvswitch: : Dropping previously announced user features [ 861.925378][T10634] netlink: 'syz.1.17082': attribute type 29 has an invalid length. [ 861.955441][T10634] netlink: 'syz.1.17082': attribute type 29 has an invalid length. [ 861.986596][T10634] netlink: 500 bytes leftover after parsing attributes in process `syz.1.17082'. [ 862.739188][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17095'. [ 862.766376][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17095'. [ 862.803714][T10667] netlink: 164 bytes leftover after parsing attributes in process `syz.1.17096'. [ 862.842010][T10667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17096'. [ 863.024243][T10671] netlink: 'syz.0.17100': attribute type 10 has an invalid length. [ 863.044957][T10671] bond0: (slave dummy0): Releasing backup interface [ 863.053844][T10671] dummy0: left promiscuous mode [ 863.076629][T10671] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 863.086193][T10671] team0: Failed to send options change via netlink (err -105) [ 863.102820][T10671] team0: Port device dummy0 added [ 863.104530][T10677] netlink: 'syz.0.17100': attribute type 10 has an invalid length. [ 863.174102][T10677] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 863.231969][T10677] team0: Failed to send options change via netlink (err -105) [ 863.255875][T10683] netlink: 'syz.1.17102': attribute type 11 has an invalid length. [ 863.258590][T10677] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 863.278408][T10677] team0: Port device dummy0 removed [ 863.290219][T10677] dummy0: entered promiscuous mode [ 863.297141][T10677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 863.707170][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17106'. [ 863.735442][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17106'. [ 863.785622][T10692] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 864.060628][T10712] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17112'. [ 864.096804][T10712] netlink: 220 bytes leftover after parsing attributes in process `syz.0.17112'. [ 864.125308][T10712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17112'. [ 864.697663][T10721] netlink: 'syz.1.17116': attribute type 10 has an invalid length. [ 864.768970][T10722] netlink: 'syz.1.17116': attribute type 10 has an invalid length. [ 865.003785][T10721] team0: Failed to send options change via netlink (err -105) [ 865.022807][T10721] team0: Port device dummy0 added [ 865.034427][T10722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 865.092601][T10722] team0: Failed to send options change via netlink (err -105) [ 865.139871][T10722] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 865.172267][T10722] team0: Port device dummy0 removed [ 865.203073][T10722] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 865.551070][T10742] veth0: entered promiscuous mode [ 865.587671][T10742] bond0: entered promiscuous mode [ 865.602724][T10742] bond_slave_0: entered promiscuous mode [ 865.630847][T10742] bond_slave_1: entered promiscuous mode [ 865.667765][T10742] dummy0: entered promiscuous mode [ 865.728500][T10741] bond0: left promiscuous mode [ 865.749010][T10741] bond_slave_0: left promiscuous mode [ 865.775455][T10741] bond_slave_1: left promiscuous mode [ 865.781530][T10741] dummy0: left promiscuous mode [ 865.824541][T10741] veth0: left promiscuous mode [ 866.719453][T10771] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.880661][T10771] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.017590][T10776] clip:clip_setentry: non-CLIP VCC [ 867.057133][T10771] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.167913][T10771] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.295676][T10783] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 867.343991][T10783] syzkaller0: entered promiscuous mode [ 867.360895][T10783] syzkaller0: entered allmulticast mode [ 867.523663][ T6533] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.550615][ T6533] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.598217][ T5229] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.702636][T10795] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17146'. [ 867.718227][ T5229] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.024229][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17150'. [ 868.208082][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17150'. [ 868.266584][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17154'. [ 868.361469][T10804] bond6: entered allmulticast mode [ 868.389480][T10804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 868.493257][T10807] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.512571][T10807] batadv1: entered allmulticast mode [ 868.518645][T10807] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 868.689927][T10824] delete_channel: no stack [ 869.210997][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17163'. [ 869.552137][T10842] netlink: 'syz.2.17164': attribute type 2 has an invalid length. [ 870.576879][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.585472][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.406498][T10910] GUP no longer grows the stack in syz.1.17192 (10910): 200000003000-20000000a000 (200000001000) [ 871.442540][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.1.17192 Not tainted syzkaller #0 PREEMPT(full) [ 871.442573][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.442586][T10910] Call Trace: [ 871.442594][T10910] [ 871.442604][T10910] dump_stack_lvl+0xe8/0x150 [ 871.442639][T10910] __get_user_pages+0x2453/0x29d0 [ 871.442673][T10910] ? __lock_acquire+0x6b5/0x2cf0 [ 871.442724][T10910] ? __gup_longterm_locked+0xc4e/0x1630 [ 871.442756][T10910] ? down_read_killable+0x1bb/0x340 [ 871.442793][T10910] __gup_longterm_locked+0xdcf/0x1630 [ 871.442854][T10910] gup_fast_fallback+0x1d82/0x22e0 [ 871.442924][T10910] ? __pfx_gup_fast_fallback+0x10/0x10 [ 871.442966][T10910] ? futex_unqueue+0x22/0x240 [ 871.442990][T10910] ? futex_unqueue+0x22/0x240 [ 871.443015][T10910] ? is_valid_gup_args+0x11f/0x200 [ 871.443048][T10910] ? get_user_pages_fast+0x4d/0xb0 [ 871.443083][T10910] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 871.443117][T10910] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 871.443146][T10910] iov_iter_get_pages2+0x5e/0xa0 [ 871.443174][T10910] __se_sys_vmsplice+0x7b3/0x1490 [ 871.443227][T10910] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 871.443261][T10910] ? __pfx_futex_wait+0x10/0x10 [ 871.443304][T10910] ? lockdep_hardirqs_on+0x7a/0x110 [ 871.443397][T10910] do_syscall_64+0x14d/0xf80 [ 871.443420][T10910] ? trace_irq_disable+0x3b/0x150 [ 871.443451][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.443472][T10910] ? clear_bhb_loop+0x40/0x90 [ 871.443498][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.443520][T10910] RIP: 0033:0x7f50bdf9c799 [ 871.443541][T10910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.443559][T10910] RSP: 002b:00007f50bee48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 871.443584][T10910] RAX: ffffffffffffffda RBX: 00007f50be215fa0 RCX: 00007f50bdf9c799 [ 871.443598][T10910] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 871.443612][T10910] RBP: 00007f50be032c99 R08: 0000000000000000 R09: 0000000000000000 [ 871.443625][T10910] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 871.443637][T10910] R13: 00007f50be216038 R14: 00007f50be215fa0 R15: 00007ffcb53b3888 [ 871.443674][T10910] [ 872.160418][T10937] sock: sock_set_timeout: `syz.0.17200' (pid 10937) tries to set negative timeout [ 872.441029][T10950] netlink: 'syz.2.17207': attribute type 21 has an invalid length. [ 872.467999][T10950] netlink: 'syz.2.17207': attribute type 22 has an invalid length. [ 872.503859][T10950] netlink: 'syz.2.17207': attribute type 23 has an invalid length. [ 872.525052][T10950] netlink: 136 bytes leftover after parsing attributes in process `syz.2.17207'. [ 872.683421][T10961] PKCS7: Unknown OID: [4] (bad) [ 872.688578][T10961] PKCS7: Only support pkcs7_signedData type [ 872.701349][T10959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17208'. [ 873.852813][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17222'. [ 873.911984][T10998] netlink: 'syz.3.17221': attribute type 4 has an invalid length. [ 875.068760][T11033] syzkaller1: entered promiscuous mode [ 875.084252][T11033] syzkaller1: entered allmulticast mode [ 876.600739][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17252'. [ 876.701464][T11084] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17253'. [ 876.771909][T11084] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17253'. [ 877.160026][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17256'. [ 877.595034][T11104] netlink: 'syz.3.17262': attribute type 1 has an invalid length. [ 877.724256][T11110] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 877.806556][T11110] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 877.862344][T11110] bond9: (slave ip6gre3): making interface the new active one [ 877.923551][T11110] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 878.680667][T11133] syzkaller1: entered promiscuous mode [ 878.711051][T11133] syzkaller1: entered allmulticast mode [ 879.208109][T11074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.396944][T11157] syzkaller1: entered promiscuous mode [ 879.424938][T11157] syzkaller1: entered allmulticast mode [ 879.703508][T11170] veth1_to_bond: entered allmulticast mode [ 879.748889][T11170] veth1_to_bond: left allmulticast mode [ 884.098622][T11269] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.17328'. [ 884.958871][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 884.967117][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 884.974908][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 884.982829][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 884.990717][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 884.998651][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 885.006382][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 885.014228][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 885.022085][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 885.024171][T11297] netlink: 'syz.4.17337': attribute type 10 has an invalid length. [ 885.029959][T11290] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 885.208295][T11275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 889.923660][T11351] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.17358'. [ 890.100409][T11359] netlink: 240 bytes leftover after parsing attributes in process `syz.1.17359'. [ 890.952353][T11381] netlink: 'syz.4.17370': attribute type 21 has an invalid length. [ 890.993604][T11381] netlink: 'syz.4.17370': attribute type 22 has an invalid length. [ 891.021877][T11381] netlink: 'syz.4.17370': attribute type 23 has an invalid length. [ 891.042399][T11381] netlink: 'syz.4.17370': attribute type 25 has an invalid length. [ 891.060199][T11385] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17372'. [ 891.079150][T11381] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17370'. [ 891.168607][T11390] netlink: 'syz.0.17373': attribute type 13 has an invalid length. [ 891.196569][T11390] netlink: 'syz.0.17373': attribute type 17 has an invalid length. [ 891.348211][T11390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.358961][T11390] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.378190][T11390] net_ratelimit: 3255 callbacks suppressed [ 891.378203][T11390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.414694][T11393] gre0 speed is unknown, defaulting to 1000 [ 891.503281][T11396] ip6gretap0: left promiscuous mode [ 891.513305][T11396] 8021q: adding VLAN 0 to HW filter on device ` [ 891.535144][T11396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.567628][T11393] gre0 speed is unknown, defaulting to 1000 [ 891.590050][T11393] gre0 speed is unknown, defaulting to 1000 [ 891.904867][T11393] infiniband syz1: set active [ 891.909642][T11393] infiniband syz1: added gre0 [ 891.915189][ T9] gre0 speed is unknown, defaulting to 1000 [ 892.186558][T11393] RDS/IB: syz1: added [ 892.190834][T11393] smc: adding ib device syz1 with port count 1 [ 892.289019][T11420] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3947482536/3947482538 [ 892.317649][T11393] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 892.332057][T11420] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3947482536/3947482538 [ 892.362710][ T43] gre0 speed is unknown, defaulting to 1000 [ 892.371292][T11393] gre0 speed is unknown, defaulting to 1000 [ 893.032327][T11393] gre0 speed is unknown, defaulting to 1000 [ 893.535274][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17396'. [ 893.639643][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17396'. [ 893.650594][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17396'. [ 893.677898][T11393] gre0 speed is unknown, defaulting to 1000 [ 894.336150][T11368] udevd[11368]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 894.367058][T11368] udevd[11368]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 894.431088][T11393] gre0 speed is unknown, defaulting to 1000 [ 895.855628][T11393] gre0 speed is unknown, defaulting to 1000 [ 897.565692][T11478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.789895][T11533] netlink: 'syz.0.17427': attribute type 1 has an invalid length. [ 897.798179][T11533] netlink: 'syz.0.17427': attribute type 4 has an invalid length. [ 897.815443][T11533] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.17427'. [ 901.810945][T11596] gre0 speed is unknown, defaulting to 1000 [ 902.666552][T11643] netlink: 'syz.2.17459': attribute type 13 has an invalid length. [ 902.687377][T11643] netlink: 'syz.2.17459': attribute type 17 has an invalid length. [ 902.894715][T11639] batman_adv: batadv0: Interface deactivated: vlan7 [ 902.944705][T11639] tipc: Resetting bearer [ 903.375010][T11639] tipc: Resetting bearer [ 905.185658][T11643] batman_adv: batadv0: Interface activated: vlan7 [ 905.196925][T11643] erspan0: left promiscuous mode [ 905.240189][T11643] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.254163][T11643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.272309][T11645] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.17462'. [ 905.292218][T11645] bridge_slave_1: default FDB implementation only supports local addresses [ 905.420343][ T3016] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.452901][ T3016] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.487403][ T3016] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.524304][ T3016] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.672864][ T3016] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.709480][ T3016] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.761888][ T3016] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.789741][ T3016] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.892073][ T5229] bond0: (slave batadv0): link status definitely down, disabling slave [ 906.465879][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17475'. [ 906.629106][T11693] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 906.909155][T11677] gre0 speed is unknown, defaulting to 1000 [ 907.919542][T11716] netlink: 'syz.2.17484': attribute type 5 has an invalid length. [ 907.929813][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17484'. [ 908.073307][T11722] sctp: [Deprecated]: syz.2.17486 (pid 11722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 908.073307][T11722] Use struct sctp_sack_info instead [ 908.373705][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17489'. [ 908.614982][T11707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.742914][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17500'. [ 910.098412][T11772] bond10: entered promiscuous mode [ 910.643270][T11791] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17513'. [ 910.697514][T11794] syz_tun: entered allmulticast mode [ 910.715563][T11793] syz_tun: left allmulticast mode [ 910.821061][T11798] netlink: 'syz.4.17515': attribute type 3 has an invalid length. [ 910.847660][T11798] netlink: 'syz.4.17515': attribute type 1 has an invalid length. [ 910.871486][T11798] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.17515'. [ 910.884306][T11803] netem: incorrect gi model size [ 910.895059][T11803] netem: change failed [ 911.002654][ T6533] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 911.700806][T11804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.881137][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17529'. [ 911.995290][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17529'. [ 912.630360][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17540'. [ 912.862433][T11862] gre0 speed is unknown, defaulting to 1000 [ 913.734667][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17549'. [ 913.997197][T11904] nbd4: detected capacity change from 63 to 65 [ 914.036070][T11685] blk_print_req_error: 138 callbacks suppressed [ 914.036092][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.068231][T11685] buffer_io_error: 138 callbacks suppressed [ 914.068252][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.083767][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.114919][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.123906][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.147605][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.157609][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.170177][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.178946][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.191264][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.199765][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.211732][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.219968][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.231056][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.239362][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.321426][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.362637][T11685] ldm_validate_partition_table(): Disk read failed. [ 914.377861][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.399518][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.426633][T11685] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.465076][T11685] Buffer I/O error on dev nbd4, logical block 0, async page read [ 914.509423][T11685] Dev nbd4: unable to read RDB block 0 [ 914.521204][T11685] nbd4: unable to read partition table [ 914.586898][T11685] ldm_validate_partition_table(): Disk read failed. [ 914.600026][T11685] Dev nbd4: unable to read RDB block 0 [ 914.610252][T11685] nbd4: unable to read partition table [ 915.524636][T11938] xt_hashlimit: size too large, truncated to 1048576 [ 915.556394][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17562'. [ 915.827849][T11901] gre0 speed is unknown, defaulting to 1000 [ 917.154647][T11968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17573'. [ 917.411990][T11975] netlink: 'syz.2.17575': attribute type 10 has an invalid length. [ 917.420312][T11975] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.17575'. [ 917.680015][T11981] scsi_nl_rcv_msg: discarding partial skb [ 918.165039][T11962] gre0 speed is unknown, defaulting to 1000 [ 919.775333][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17593'. [ 919.886043][T12008] gre0 speed is unknown, defaulting to 1000 [ 921.299817][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17598'. [ 921.646128][T12000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.695391][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.845829][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17601'. [ 922.790749][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17612'. [ 923.376133][T12087] syzkaller1: entered promiscuous mode [ 923.412151][T12087] syzkaller1: entered allmulticast mode [ 923.469736][ T60] nci: nci_rx_work: unknown MT 0x7 [ 923.710513][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17622'. [ 923.843987][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17623'. [ 924.147613][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17629'. [ 924.177321][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17629'. [ 924.200273][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17631'. [ 924.636655][T12133] netlink: 'syz.2.17636': attribute type 1 has an invalid length. [ 924.712163][T12133] bond7: entered promiscuous mode [ 924.733214][T12133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 924.740458][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17636'. [ 924.772869][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17636'. [ 924.942133][T12133] bond7: (slave bridge9): making interface the new active one [ 924.952393][T12133] bridge9: entered promiscuous mode [ 924.974283][T12133] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 925.639767][T12150] gre0 speed is unknown, defaulting to 1000 [ 925.667463][T12154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17643'. [ 926.270946][T12167] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 926.374699][T12090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.668535][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17652'. [ 926.782634][T12179] netlink: 'syz.4.17652': attribute type 1 has an invalid length. [ 928.769103][T12212] syzkaller1: entered promiscuous mode [ 928.787202][T12212] syzkaller1: entered allmulticast mode [ 929.014358][T12221] IPv6: Can't replace route, no match found [ 929.027693][T12221] IPv6: Can't replace route, no match found [ 929.483647][T12229] __nla_validate_parse: 1 callbacks suppressed [ 929.483671][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17672'. [ 929.909701][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17675'. [ 930.225324][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17677'. [ 930.508152][T12243] bond11: entered promiscuous mode [ 930.531869][T12243] bond11: entered allmulticast mode [ 930.562473][T12243] 8021q: adding VLAN 0 to HW filter on device bond11 [ 930.603723][T12249] netlink: 'syz.2.17678': attribute type 1 has an invalid length. [ 931.265238][T12251] gre0 speed is unknown, defaulting to 1000 [ 931.352529][T12263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17684'. [ 931.550963][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17684'. [ 931.570885][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17685'. [ 931.597169][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17685'. [ 931.631304][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17685'. [ 931.671916][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17685'. [ 931.703691][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17687'. [ 932.016060][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.025593][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.047020][T12280] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 934.617125][T12341] __nla_validate_parse: 4 callbacks suppressed [ 934.617148][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17712'. [ 935.780778][T12378] netlink: 'syz.0.17728': attribute type 29 has an invalid length. [ 935.811013][T12378] netlink: 'syz.0.17728': attribute type 29 has an invalid length. [ 936.172496][T12382] gre0 speed is unknown, defaulting to 1000 [ 936.518268][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17732'. [ 937.200416][T12320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.643660][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17740'. [ 939.298994][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17742'. [ 939.502463][T12419] gre0 speed is unknown, defaulting to 1000 [ 940.199593][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17756'. [ 940.649634][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17759'. [ 940.696984][T12461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.706606][T12461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.225202][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17765'. [ 945.902977][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17767'. [ 947.243861][T12505] syzkaller1: entered promiscuous mode [ 947.249653][T12505] syzkaller1: entered allmulticast mode [ 947.308066][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17774'. [ 947.433571][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17775'. [ 948.018128][T12529] netlink: 'syz.3.17782': attribute type 1 has an invalid length. [ 948.219855][T12529] bond11: entered promiscuous mode [ 948.241874][T12529] bond11: entered allmulticast mode [ 948.242001][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17785'. [ 948.282268][T12529] 8021q: adding VLAN 0 to HW filter on device bond11 [ 948.391178][T12533] macvlan0: entered promiscuous mode [ 948.412261][T12533] macvlan0: entered allmulticast mode [ 948.439496][T12533] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 948.569124][T12546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.727410][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17788'. [ 948.781387][T12554] netlink: 'syz.3.17789': attribute type 4 has an invalid length. [ 948.843452][T12554] netlink: 'syz.3.17789': attribute type 4 has an invalid length. [ 949.481911][ T3016] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.499431][ T3016] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.528924][ T3016] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.656250][ T3016] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.347608][T12595] syzkaller0: entered allmulticast mode [ 950.362668][T12569] gre0 speed is unknown, defaulting to 1000 [ 950.387584][T12595] syzkaller0 (unregistering): left allmulticast mode [ 951.933284][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17817'. [ 951.961479][T12645] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.17819'. [ 952.904915][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17827'. [ 956.446892][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17830'. [ 956.674227][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17832'. [ 956.808403][T12687] syzkaller1: entered promiscuous mode [ 956.822312][T12687] syzkaller1: entered allmulticast mode [ 957.065656][T12695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17835'. [ 957.092270][T12686] gre0 speed is unknown, defaulting to 1000 [ 959.663638][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17850'. [ 959.979112][T12740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17850'. [ 961.323882][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17870'. [ 961.432218][T12795] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17871'. [ 961.507844][T12777] gre0 speed is unknown, defaulting to 1000 [ 961.705012][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17874'. [ 961.784463][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17874'. [ 961.851192][T12801] team1: entered promiscuous mode [ 961.912113][T12801] team1: entered allmulticast mode [ 961.918130][T12801] 8021q: adding VLAN 0 to HW filter on device team1 [ 962.044737][T12804] team2: entered promiscuous mode [ 962.061841][T12804] team2: entered allmulticast mode [ 962.081512][T12804] 8021q: adding VLAN 0 to HW filter on device team2 [ 962.425566][T12815] netlink: 'syz.3.17879': attribute type 6 has an invalid length. [ 962.440714][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17879'. [ 962.624668][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17886'. [ 962.646602][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17886'. [ 962.808270][T12837] bridge2: entered allmulticast mode [ 963.312029][T12855] netlink: 'syz.3.17893': attribute type 11 has an invalid length. [ 963.627449][T12838] gre0 speed is unknown, defaulting to 1000 [ 964.712676][T12878] bond12: entered promiscuous mode [ 964.801160][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17906'. [ 964.858222][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17906'. [ 964.984178][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17908'. [ 965.014322][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17908'. [ 965.967199][T12922] netlink: 192 bytes leftover after parsing attributes in process `syz.4.17916'. [ 966.484061][T12906] lec:lec_atm_close: lec0: Shut down! [ 967.158193][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17929'. [ 969.888250][T13032] netlink: 'syz.2.17948': attribute type 1 has an invalid length. [ 970.240645][T13049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17951'. [ 970.719205][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 970.980682][T13042] gre0 speed is unknown, defaulting to 1000 [ 971.431104][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17956'. [ 971.433233][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17957'. [ 971.488234][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17957'. [ 971.759281][T13055] gre0 speed is unknown, defaulting to 1000 [ 972.277121][T13089] netlink: 240 bytes leftover after parsing attributes in process `syz.3.17963'. [ 972.434204][T13091] netlink: 'syz.4.17964': attribute type 1 has an invalid length. [ 972.631213][T13091] bond12: entered promiscuous mode [ 972.668516][T13091] 8021q: adding VLAN 0 to HW filter on device bond12 [ 972.941448][T13095] 8021q: adding VLAN 0 to HW filter on device bond12 [ 972.960337][T13095] bond12: (slave vti1): The slave device specified does not support setting the MAC address [ 972.982340][T13095] bond12: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 973.020319][T13095] bond12: (slave vti1): making interface the new active one [ 973.038445][T13095] vti1: entered promiscuous mode [ 973.058828][T13095] bond12: (slave vti1): Enslaving as an active interface with an up link [ 974.202419][T13104] bond0: left promiscuous mode [ 974.399124][T13104] bridge0: left promiscuous mode [ 974.412786][T13104] bridge0: left allmulticast mode [ 974.418935][T13104] gretap4: left allmulticast mode [ 974.748683][T13104] bond11: left promiscuous mode [ 974.759768][T13104] bond11: left allmulticast mode [ 974.790548][T13104] bond12: left promiscuous mode [ 974.802465][T13104] vti1: left promiscuous mode [ 974.837882][ T5971] gre0 speed is unknown, defaulting to 1000 [ 974.844504][ T5971] syz1: Port: 1 Link DOWN [ 974.877925][ T1106] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.913756][ T5971] gre0 speed is unknown, defaulting to 1000 [ 974.924162][ T1106] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.942529][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17970'. [ 974.963843][ T1106] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.978371][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17970'. [ 975.000188][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17970'. [ 975.020588][ T1106] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.035239][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17970'. [ 975.045331][T13080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 975.045957][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17970'. [ 975.065840][T13086] netlink: 'syz.3.17963': attribute type 2 has an invalid length. [ 975.244068][T13117] __nla_validate_parse: 4 callbacks suppressed [ 975.244091][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17974'. [ 975.405665][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17975'. [ 976.186029][T13156] bond9: entered allmulticast mode [ 976.288475][T13159] macvlan5: entered promiscuous mode [ 976.331678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 976.340653][ C0] lec:lec_tx_timeout: lec0 [ 976.345554][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 976.354184][T13159] macvlan5: entered allmulticast mode [ 976.423095][T13164] netlink: 'syz.4.17988': attribute type 27 has an invalid length. [ 976.432981][T13159] bond9: (slave macvlan5): Opening slave failed [ 977.515008][T13161] 8021q: adding VLAN 0 to HW filter on device ` [ 977.623869][T13161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 977.785672][ T24] gre0 speed is unknown, defaulting to 1000 [ 977.805101][ T24] syz1: Port: 1 Link ACTIVE [ 978.250989][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17996'. [ 978.265577][ T24] gre0 speed is unknown, defaulting to 1000 [ 978.295733][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17996'. [ 978.503235][T13196] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 978.537127][T13196] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 978.611352][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18001'. [ 978.948149][T13215] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.18005'. [ 979.121503][T13204] gre0 speed is unknown, defaulting to 1000 [ 979.190897][T13219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18007'. [ 981.096233][T13254] xt_hashlimit: size too large, truncated to 1048576 [ 981.299249][T13263] tipc: Started in network mode [ 981.317507][T13263] tipc: Node identity , cluster identity 9 [ 981.371719][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 981.379066][T13263] tipc: Failed to obtain node identity [ 981.379943][ C0] lec:lec_tx_timeout: lec0 [ 981.391025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 981.433160][T13263] tipc: Enabling of bearer rejected, failed to enable media [ 981.582245][T13260] syzkaller1: entered promiscuous mode [ 981.612530][T13260] syzkaller1: entered allmulticast mode [ 983.177333][T13269] gre0 speed is unknown, defaulting to 1000 [ 983.744472][T13314] tipc: Enabled bearer , priority 0 [ 983.941027][T13314] syzkaller0: entered promiscuous mode [ 983.958286][T13314] syzkaller0: entered allmulticast mode [ 983.978393][T13314] tipc: Resetting bearer [ 984.153164][ T3016] tipc: Resetting bearer [ 984.174199][T13313] tipc: Resetting bearer [ 984.806550][T13329] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 985.085529][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18041'. [ 985.422437][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18044'. [ 986.401680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 986.409896][ C0] lec:lec_tx_timeout: lec0 [ 986.415287][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 987.016040][T13313] tipc: Disabling bearer [ 987.035847][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18040'. [ 987.502707][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18050'. [ 987.513860][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18048'. [ 987.780233][T13366] 8021q: adding VLAN 0 to HW filter on device bond13 [ 987.983525][T13370] macsec2: entered promiscuous mode [ 988.007696][T13370] bond13: entered promiscuous mode [ 988.043023][T13370] bond13: left promiscuous mode [ 988.095383][T13375] syzkaller1: entered promiscuous mode [ 988.131554][T13375] syzkaller1: entered allmulticast mode [ 989.432341][T13393] lec:lec_atm_send: lec0: Unknown message type -129671631 [ 989.442814][T13392] lec:lec_atm_close: lec0: Shut down! [ 989.691814][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18062'. [ 989.830090][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18062'. [ 989.880388][T13425] bridge9: entered promiscuous mode [ 989.933054][T13425] bridge9: port 1(macsec4) entered blocking state [ 989.949934][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18066'. [ 989.963371][T13425] bridge9: port 1(macsec4) entered disabled state [ 989.986437][T13425] macsec4: entered allmulticast mode [ 989.996742][T13425] bridge9: entered allmulticast mode [ 990.041379][T13425] macsec4: left allmulticast mode [ 990.050604][T13425] bridge9: left allmulticast mode [ 990.080595][T13425] bridge9: left promiscuous mode [ 990.088714][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18066'. [ 990.193629][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18068'. [ 991.608025][T13460] gre0 speed is unknown, defaulting to 1000 [ 993.331361][T13519] netlink: 'syz.0.18093': attribute type 3 has an invalid length. [ 993.457150][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.464120][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.890168][T13529] bridge10: entered allmulticast mode [ 994.147508][T13534] netlink: 168 bytes leftover after parsing attributes in process `syz.4.18098'. [ 994.451796][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 994.460012][ C0] lec:lec_tx_timeout: lec0 [ 994.464830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 994.475723][T13539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18100'. [ 994.798734][T13550] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 994.863028][T13550] team0 (unregistering): Port device team_slave_0 removed [ 994.883362][T13550] team0 (unregistering): Failed to send options change via netlink (err -105) [ 994.911935][T13550] team0 (unregistering): Failed to send port change of device 76žÿ via netlink (err -105) [ 994.956233][T13550] team0 (unregistering): Port device 76žÿ removed [ 994.998215][T13558] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 995.036880][T13560] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 995.063934][T13560] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 996.020617][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18120'. [ 996.198545][T13593] 8021q: adding VLAN 0 to HW filter on device bond12 [ 996.223024][T13595] macvtap2: entered promiscuous mode [ 996.240318][T13595] bond12: entered promiscuous mode [ 996.250449][T13595] macvtap2: entered allmulticast mode [ 996.270606][T13595] bond12: entered allmulticast mode [ 996.277548][T13595] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 996.382985][T13595] bond12: left allmulticast mode [ 996.397869][T13595] bond12: left promiscuous mode [ 996.540261][T13597] netlink: 'syz.3.18121': attribute type 1 has an invalid length. [ 996.810645][T13597] macvlan0: entered promiscuous mode [ 996.830055][T13597] macvlan0: entered allmulticast mode [ 996.853243][T13597] bond14: entered promiscuous mode [ 996.875590][T13597] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 996.906606][T13597] bond14: left promiscuous mode [ 997.901277][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18137'. [ 998.942116][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18149'. [ 999.471643][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 999.479968][ C0] lec:lec_tx_timeout: lec0 [ 999.485029][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 999.811237][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18162'. [ 1000.715629][T13717] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1000.795384][T13720] tipc: Started in network mode [ 1000.800960][T13720] tipc: Node identity 4e38ef76ea9f, cluster identity 9 [ 1000.833943][T13720] tipc: Enabled bearer , priority 0 [ 1000.969829][T13730] rdma_rxe: rxe_newlink: failed to add gre0 [ 1001.017482][T13721] syzkaller0: entered promiscuous mode [ 1001.044401][T13721] syzkaller0: entered allmulticast mode [ 1001.064477][T13721] tipc: Resetting bearer [ 1001.101280][T13738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.246294][T13712] tipc: Resetting bearer [ 1001.532856][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18178'. [ 1002.699988][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18182'. [ 1002.713311][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18182'. [ 1004.394257][T13712] tipc: Disabling bearer [ 1004.407935][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18178'. [ 1004.433533][ T5831] tipc: Node number set to 2762469238 [ 1004.445560][T13731] gre0 speed is unknown, defaulting to 1000 [ 1004.454208][ T5489] erspan0: entered promiscuous mode [ 1004.491980][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1004.500270][ C0] lec:lec_tx_timeout: lec0 [ 1004.504970][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1004.856030][T13792] macsec4: entered allmulticast mode [ 1004.861401][T13792] ..0ªî{X¹¦: entered allmulticast mode [ 1004.983382][T13792] ..0ªî{X¹¦: left allmulticast mode [ 1005.026424][T13790] tipc: Enabled bearer , priority 0 [ 1005.083956][T13796] syzkaller0: entered promiscuous mode [ 1005.089611][T13796] syzkaller0: entered allmulticast mode [ 1005.095992][T13796] tipc: Resetting bearer [ 1005.165085][T13785] tipc: Resetting bearer [ 1009.520223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1009.528634][ C0] lec:lec_tx_timeout: lec0 [ 1009.533284][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1010.377808][T13785] tipc: Disabling bearer [ 1010.449680][T13811] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1010.471973][T13814] tipc: Enabling of bearer rejected, failed to enable media [ 1010.787001][T13834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18197'. [ 1011.050727][T13836] syzkaller1: entered promiscuous mode [ 1011.080324][T13836] syzkaller1: entered allmulticast mode [ 1012.809955][T13876] gre0 speed is unknown, defaulting to 1000 [ 1013.125479][T13896] syzkaller1: entered promiscuous mode [ 1013.151913][T13896] syzkaller1: entered allmulticast mode [ 1014.541632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1014.550225][ C0] lec:lec_tx_timeout: lec0 [ 1014.554977][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1015.040908][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18231'. [ 1015.246671][T13938] gre0 speed is unknown, defaulting to 1000 [ 1015.571063][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18232'. [ 1015.583850][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18232'. [ 1015.867838][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18233'. [ 1015.871712][T13958] xt_hashlimit: size too large, truncated to 1048576 [ 1016.520332][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18238'. [ 1016.919021][T13977] netlink: 'syz.1.18241': attribute type 9 has an invalid length. [ 1016.927943][T13977] netlink: 'syz.1.18241': attribute type 11 has an invalid length. [ 1016.941156][T13977] netlink: 'syz.1.18241': attribute type 12 has an invalid length. [ 1016.973558][T13977] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.18241'. [ 1017.030469][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18241'. [ 1018.706817][T14004] netlink: 'syz.1.18250': attribute type 1 has an invalid length. [ 1019.340534][T14027] tun0: tun_chr_ioctl cmd 1074812118 [ 1019.349427][T14027] tun0: tun_chr_ioctl cmd 1074033169 [ 1019.907952][T14049] syzkaller0: entered promiscuous mode [ 1019.931704][T14049] syzkaller0: entered allmulticast mode [ 1019.991133][T14049] macsec3: entered promiscuous mode [ 1020.023483][T14055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18267'. [ 1020.042944][T14055] netlink: 35 bytes leftover after parsing attributes in process `syz.2.18267'. [ 1020.062893][T14055] netlink: 'syz.2.18267': attribute type 5 has an invalid length. [ 1020.086646][T14055] netlink: 'syz.2.18267': attribute type 6 has an invalid length. [ 1020.104334][T14055] netlink: 35 bytes leftover after parsing attributes in process `syz.2.18267'. [ 1020.331641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1020.340342][ C0] lec:lec_tx_timeout: lec0 [ 1020.347795][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1021.107028][T14076] netlink: 'syz.2.18274': attribute type 27 has an invalid length. [ 1021.230123][T14076] batman_adv: batadv0: Interface deactivated: vlan7 [ 1021.309137][T14076] tipc: Resetting bearer [ 1021.676701][T14076] veth0_virt_wifi: left allmulticast mode [ 1021.693873][T14076] erspan1: left promiscuous mode [ 1021.701764][T14076] erspan1: left allmulticast mode [ 1021.707540][T14076] bridge3: left promiscuous mode [ 1021.712776][T14076] bridge3: left allmulticast mode [ 1021.732989][T14076] bond2: left promiscuous mode [ 1021.738185][T14076] bond2: left allmulticast mode [ 1021.753188][T14076] bridge4: left allmulticast mode [ 1021.758878][T14076] bridge6: left allmulticast mode [ 1021.784877][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18278'. [ 1021.792820][T14076] vlan2: left promiscuous mode [ 1021.798747][T14076] veth0_to_team: left promiscuous mode [ 1021.814800][T14076] vlan2: left allmulticast mode [ 1021.820119][T14076] veth0_to_team: left allmulticast mode [ 1021.826686][T14076] vlan3: left promiscuous mode [ 1021.833113][T14076] geneve1: left promiscuous mode [ 1021.838586][T14076] vlan3: left allmulticast mode [ 1021.844818][T14076] geneve1: left allmulticast mode [ 1021.851264][T14076] vlan4: left promiscuous mode [ 1021.860779][T14076] batadv_slave_1: left promiscuous mode [ 1021.868709][T14076] ip6gre4: left promiscuous mode [ 1021.874691][T14076] ip6gre4: left allmulticast mode [ 1021.880915][T14076] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 1021.889524][T14076] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 1021.900292][T14076] bond3: left promiscuous mode [ 1021.905601][T14076] bond4: left promiscuous mode [ 1021.911384][T14076] vlan8: left promiscuous mode [ 1021.929865][T14076] gtp2: left promiscuous mode [ 1021.948498][T14076] gtp2: left allmulticast mode [ 1021.977304][T14076] bond6: left allmulticast mode [ 1021.984764][T14076] batadv1: left allmulticast mode [ 1022.006681][T14076] bond7: left promiscuous mode [ 1022.017526][T14076] bridge9: left promiscuous mode [ 1022.148134][T14076] team1: left promiscuous mode [ 1022.166520][T14076] team1: left allmulticast mode [ 1022.289508][T14076] team2: left promiscuous mode [ 1022.298215][T14076] team2: left allmulticast mode [ 1022.308890][T14076] bond9: left allmulticast mode [ 1022.344506][T14077] batman_adv: batadv0: Interface activated: vlan7 [ 1022.378339][T14077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.389984][T14077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1022.408104][T14079] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1022.411373][T14067] gre0 speed is unknown, defaulting to 1000 [ 1022.480305][T14088] bridge4: entered promiscuous mode [ 1022.493801][T14088] bridge4: port 1(macvtap1) entered blocking state [ 1022.514061][T14088] bridge4: port 1(macvtap1) entered disabled state [ 1022.526222][T14088] macvtap1: entered allmulticast mode [ 1022.531824][T14088] bridge4: entered allmulticast mode [ 1022.563227][T14088] macvtap1: left allmulticast mode [ 1022.568427][T14088] bridge4: left allmulticast mode [ 1022.594913][T14088] bridge4: left promiscuous mode [ 1024.110927][T14084] gre0 speed is unknown, defaulting to 1000 [ 1024.781391][T14136] netlink: 'syz.2.18290': attribute type 1 has an invalid length. [ 1024.941038][T14136] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1024.959290][T14098] gre0 speed is unknown, defaulting to 1000 [ 1025.016566][T14137] veth17: entered promiscuous mode [ 1025.042408][T14137] bond10: (slave veth17): Enslaving as an active interface with an up link [ 1025.371649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1025.379874][ C0] lec:lec_tx_timeout: lec0 [ 1025.384654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1025.558035][T14134] gre0 speed is unknown, defaulting to 1000 [ 1025.610416][T14148] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1026.314560][T14164] pimreg: entered allmulticast mode [ 1026.533728][T14170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18298'. [ 1026.543078][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18298'. [ 1028.955056][T14220] netlink: 108 bytes leftover after parsing attributes in process `syz.0.18313'. [ 1030.023396][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18321'. [ 1030.070063][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18321'. [ 1030.391639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1030.399977][ C0] lec:lec_tx_timeout: lec0 [ 1030.404829][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1030.796263][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18326'. [ 1030.896051][T14276] bridge_slave_0: invalid flags given to default FDB implementation [ 1031.980069][ T29] audit: type=1800 audit(1774488863.080:13): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18333" name="memory.events" dev="tmpfs" ino=18948 res=0 errno=0 [ 1032.196064][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18339'. [ 1033.552551][T14339] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 1033.582889][T14339] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18349'. [ 1033.879126][T14349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18353'. [ 1033.932729][T14349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18353'. [ 1034.875626][T14334] gre0 speed is unknown, defaulting to 1000 [ 1034.956860][T14369] syzkaller0: entered promiscuous mode [ 1034.993428][T14369] syzkaller0: entered allmulticast mode [ 1035.411603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1035.420211][ C0] lec:lec_tx_timeout: lec0 [ 1035.431677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1035.742870][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18365'. [ 1035.874658][T14388] bond0: (slave dummy0): Releasing backup interface [ 1035.891414][T14388] batman_adv: batadv0: Adding interface: dummy0 [ 1035.907007][T14388] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.972606][T14388] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1037.426395][T14408] gre0 speed is unknown, defaulting to 1000 [ 1037.756176][T14433] syzkaller0: entered promiscuous mode [ 1037.773842][T14433] syzkaller0: entered allmulticast mode [ 1037.978177][T14440] IPVS: length: 100 != 8 [ 1039.480219][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18392'. [ 1039.520668][T14473] vlan5: entered promiscuous mode [ 1039.540720][T14473] bridge0: entered promiscuous mode [ 1039.754436][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18393'. [ 1039.922047][T14477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1039.946840][T14480] macvlan5: entered allmulticast mode [ 1039.965966][T14480] veth0_to_bond: entered allmulticast mode [ 1039.976549][T14480] bond11: (slave macvlan5): Enslaving as an active interface with an up link [ 1040.441649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1040.449849][ C0] lec:lec_tx_timeout: lec0 [ 1040.455198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1040.774352][T14504] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.18403'. [ 1042.614267][T14513] gre0 speed is unknown, defaulting to 1000 [ 1043.055803][T29005] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1044.026996][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18422'. [ 1044.139291][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18423'. [ 1044.435309][T14575] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.18425'. [ 1044.561356][T14578] netlink: 'syz.1.18427': attribute type 1 has an invalid length. [ 1044.826347][T14583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.832452][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18427'. [ 1044.842190][T14583] bond5: (slave bond6): making interface the new active one [ 1044.850602][T14583] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1044.872853][T14593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18429'. [ 1044.963826][T14578] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1045.011051][T14591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1045.054600][T14557] gre0 speed is unknown, defaulting to 1000 [ 1045.461638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1045.469748][ C0] lec:lec_tx_timeout: lec0 [ 1045.474919][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1045.744775][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18434'. [ 1047.241161][T14628] gre0 speed is unknown, defaulting to 1000 [ 1047.431852][T14647] netlink: 'syz.3.18447': attribute type 12 has an invalid length. [ 1047.552256][T14654] bond13: (slave vlan0): Opening slave failed [ 1047.841217][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18452'. [ 1049.104626][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18461'. [ 1050.463260][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18469'. [ 1050.481669][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1050.489927][ C0] lec:lec_tx_timeout: lec0 [ 1050.494917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1050.942935][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18469'. [ 1052.359874][T14755] gre0 speed is unknown, defaulting to 1000 [ 1053.361379][T14796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18488'. [ 1053.595706][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18488'. [ 1053.784330][T14804] batadv_slave_1: entered promiscuous mode [ 1053.792330][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18490'. [ 1053.871335][T14804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.919789][T14803] batadv_slave_1: left promiscuous mode [ 1054.895647][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.903356][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.502791][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1055.511105][ C0] lec:lec_tx_timeout: lec0 [ 1055.515847][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1055.573421][T14851] gre0 speed is unknown, defaulting to 1000 [ 1056.234322][T14874] bridge15: entered promiscuous mode [ 1056.240107][T14874] bridge15: entered allmulticast mode [ 1056.255642][T14874] team0: Port device bridge15 added [ 1056.322118][T14877] bridge0: port 1(team0) entered blocking state [ 1056.328798][T14877] bridge0: port 1(team0) entered disabled state [ 1056.407833][T14877] team0: entered allmulticast mode [ 1056.417691][T14877] veth5: entered allmulticast mode [ 1056.435490][T14877] team0: entered promiscuous mode [ 1056.451764][T14877] veth5: entered promiscuous mode [ 1056.471991][T14863] gre0 speed is unknown, defaulting to 1000 [ 1057.292043][T14864] Bluetooth: hci2: command 0x0406 tx timeout [ 1057.932051][T14517] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1058.543650][T14891] tipc: Resetting bearer [ 1059.002644][T14922] syzkaller1: entered promiscuous mode [ 1059.014921][T14922] syzkaller1: entered allmulticast mode [ 1059.510263][T14937] dummy0: entered promiscuous mode [ 1059.523691][T14937] dummy0: left promiscuous mode [ 1060.073997][T14928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.269502][T14965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18542'. [ 1060.293758][T14965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18542'. [ 1060.482303][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18547'. [ 1060.500315][T14974] netlink: 192 bytes leftover after parsing attributes in process `syz.3.18545'. [ 1060.531640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1060.539965][ C0] lec:lec_tx_timeout: lec0 [ 1060.545325][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1060.916599][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18548'. [ 1063.738118][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x37 [ 1063.885160][T14978] gre0 speed is unknown, defaulting to 1000 [ 1064.467062][T15032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.496957][T15054] bridge10: left allmulticast mode [ 1064.571921][ T24] gre0 speed is unknown, defaulting to 1000 [ 1064.591769][ T24] syz1: Port: 1 Link DOWN [ 1064.610617][T15064] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 1064.620685][T15064] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 1064.649522][ T24] gre0 speed is unknown, defaulting to 1000 [ 1064.653434][T15068] netlink: 'syz.0.18566': attribute type 1 has an invalid length. [ 1064.671767][T15068] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18566'. [ 1065.036620][T15074] syzkaller0: entered promiscuous mode [ 1065.043882][T15074] syzkaller0: entered allmulticast mode [ 1065.212132][T15062] gre0 speed is unknown, defaulting to 1000 [ 1065.300027][T15082] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 1065.906271][T15080] gre0 speed is unknown, defaulting to 1000 [ 1066.041111][T15094] netlink: 'syz.0.18577': attribute type 13 has an invalid length. [ 1066.331587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1066.339780][ C0] lec:lec_tx_timeout: lec0 [ 1066.345184][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1066.435147][T15097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18578'. [ 1066.489223][T15084] gre0 speed is unknown, defaulting to 1000 [ 1066.567363][T15099] tipc: Failed to remove unknown binding: 66,0,0/2762469238:619165237/619165239 [ 1066.577580][T15099] tipc: Failed to remove unknown binding: 66,0,0/2762469238:619165237/619165238 [ 1066.588745][T15099] tipc: Failed to remove unknown binding: 66,0,0/2762469238:619165237/619165239 [ 1066.601971][T15099] tipc: Failed to remove unknown binding: 66,0,0/2762469238:619165237/619165238 [ 1067.028818][T15111] macsec4: entered allmulticast mode [ 1067.040568][T15111] syz_tun: entered allmulticast mode [ 1067.085596][T15111] syz_tun: left allmulticast mode [ 1067.447131][T15116] netlink: 'syz.4.18585': attribute type 1 has an invalid length. [ 1067.739021][T15116] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1067.757021][T15118] bond13: entered allmulticast mode [ 1067.848034][T15119] bond13: (slave ip6gretap2): making interface the new active one [ 1067.857323][T15119] ip6gretap2: entered allmulticast mode [ 1067.865313][T15119] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1068.228825][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18587'. [ 1068.369198][T15108] gre0 speed is unknown, defaulting to 1000 [ 1069.160979][T15140] netlink: 'syz.4.18592': attribute type 1 has an invalid length. [ 1069.224408][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18592'. [ 1069.321224][T15140] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1069.447353][T15141] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1069.458985][T15141] bond14: entered allmulticast mode [ 1069.694218][T15152] syzkaller0: entered promiscuous mode [ 1069.699885][T15152] syzkaller0: entered allmulticast mode [ 1071.372049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1071.380160][ C0] lec:lec_tx_timeout: lec0 [ 1071.386230][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1071.486564][T15180] gre0 speed is unknown, defaulting to 1000 [ 1071.603876][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18604'. [ 1071.869865][T15195] netlink: 'syz.0.18606': attribute type 2 has an invalid length. [ 1071.878956][T15195] netlink: 'syz.0.18606': attribute type 9 has an invalid length. [ 1071.887050][T15195] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18606'. [ 1072.205919][T15200] netlink: 'syz.3.18610': attribute type 1 has an invalid length. [ 1072.290131][T15200] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1072.697470][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18613'. [ 1072.800813][T15205] bond15: (slave veth11): Enslaving as an active interface with a down link [ 1072.900028][T15200] bond15: (slave gretap5): making interface the new active one [ 1072.917646][T15200] gretap5: entered promiscuous mode [ 1072.934618][T15200] bond15: (slave gretap5): Enslaving as an active interface with an up link [ 1073.001098][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18613'. [ 1073.070223][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.078964][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.154674][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.176532][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.310939][T15222] batman_adv: batadv0: Interface deactivated: vlan7 [ 1073.409540][T15222] tipc: Resetting bearer [ 1073.627997][T15222] bridge0: port 1(team0) entered disabled state [ 1073.675755][T15222] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 1073.722455][T15222] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 1073.782826][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18624'. [ 1073.885892][T15222] veth17: left promiscuous mode [ 1073.889695][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18625'. [ 1074.002940][T15222] veth0_to_bond: left allmulticast mode [ 1074.019352][T15222] macvlan5: left allmulticast mode [ 1074.117455][T15224] lec:lec_atm_send: lec0: Unknown message type 252 [ 1074.127906][T15223] lec:lec_atm_close: lec0: Shut down! [ 1074.148903][T15249] bond15: entered promiscuous mode [ 1074.155444][T15249] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1074.282746][T15263] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1074.310583][T15263] bond15: (slave sit3): The slave device specified does not support setting the MAC address [ 1074.359479][T15263] bond15: (slave sit3): Error -95 calling set_mac_address [ 1074.610268][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18631'. [ 1074.626007][T15274] syzkaller0: entered promiscuous mode [ 1074.631838][T15274] syzkaller0: entered allmulticast mode [ 1074.753176][T15280] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1075.155558][T15307] tipc: Enabled bearer , priority 26 [ 1075.234373][T15310] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1075.653416][T15331] bridge0: port 3(vlan5) entered blocking state [ 1075.660014][T15331] bridge0: port 3(vlan5) entered disabled state [ 1075.666733][T15331] vlan5: entered allmulticast mode [ 1075.672203][T15331] bond0: entered allmulticast mode [ 1075.677854][T15331] bond_slave_0: entered allmulticast mode [ 1075.683881][T15331] bond_slave_1: entered allmulticast mode [ 1075.692860][T15331] vlan5: entered promiscuous mode [ 1075.698095][T15331] bond0: entered promiscuous mode [ 1075.703975][T15331] bond_slave_0: entered promiscuous mode [ 1075.710273][T15331] bond_slave_1: entered promiscuous mode [ 1075.800256][T15337] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 1075.808834][T15337] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 1078.223983][T15359] syzkaller0: entered promiscuous mode [ 1078.229899][T15359] syzkaller0: entered allmulticast mode [ 1078.332257][T15324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1078.343050][T15338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18651'. [ 1079.371847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1079.380498][ C0] lec:lec_tx_timeout: lec0 [ 1079.385210][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1079.541050][T15386] gre0 speed is unknown, defaulting to 1000 [ 1079.950308][T15411] syzkaller0: entered promiscuous mode [ 1079.956544][T15411] syzkaller0: entered allmulticast mode [ 1080.530942][T15432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18687'. [ 1080.644451][T15435] netlink: 'syz.4.18689': attribute type 11 has an invalid length. [ 1080.851184][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18693'. [ 1080.878307][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18692'. [ 1080.950385][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18692'. [ 1080.995968][T15440] team1: entered promiscuous mode [ 1081.013475][T15440] team1: entered allmulticast mode [ 1081.022889][T15440] 8021q: adding VLAN 0 to HW filter on device team1 [ 1081.041685][T15425] gre0 speed is unknown, defaulting to 1000 [ 1081.042828][T15446] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1081.148791][T15446] team2: entered promiscuous mode [ 1081.154109][T15446] team2: entered allmulticast mode [ 1081.159926][T15446] 8021q: adding VLAN 0 to HW filter on device team2 [ 1081.363987][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18696'. [ 1081.953164][T15470] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1082.004431][T15478] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.18704'. [ 1082.039080][T15470] bond16: (slave ip6gretap3): making interface the new active one [ 1082.049708][T15470] bond16: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1082.063781][ T1106] nci: nci_rsp_packet: unknown rsp opcode 0xd06 [ 1082.337264][T15487] syzkaller0: entered promiscuous mode [ 1082.350019][T15487] syzkaller0: entered allmulticast mode [ 1082.744742][T15501] syzkaller0: entered promiscuous mode [ 1082.750831][T15501] syzkaller0: entered allmulticast mode [ 1082.762638][T15473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1082.779938][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18713'. [ 1083.093927][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18719'. [ 1083.106002][T15520] bond0: ARP target 170.170.170.170 is already present [ 1083.121263][T15520] bond0: option arp_ip_target: invalid value (2863311530) [ 1084.337728][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18723'. [ 1084.358625][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18723'. [ 1084.387806][T15545] ip6gretap0: entered promiscuous mode [ 1084.393783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1084.393817][ C0] lec:lec_tx_timeout: lec0 [ 1084.402348][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1084.453577][T15545] syz_tun: entered promiscuous mode [ 1084.461173][T15545] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1084.482274][T15545] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1084.582473][T15554] Cannot find del_set index 1536 as target [ 1084.712062][T15556] netlink: 'syz.0.18728': attribute type 39 has an invalid length. [ 1085.117013][T15556] syz_tun (unregistering): left promiscuous mode [ 1085.192101][ T1106] gretap5: left promiscuous mode [ 1085.795400][T15574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 1086.208614][T15584] syzkaller0: entered promiscuous mode [ 1086.230992][T15584] syzkaller0: entered allmulticast mode [ 1086.267188][T15580] gre0 speed is unknown, defaulting to 1000 [ 1088.653594][T29005] Bluetooth: hci2: command 0x0406 tx timeout [ 1088.849314][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18753'. [ 1089.007024][T15628] gre0 speed is unknown, defaulting to 1000 [ 1089.411589][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1089.420018][ C0] lec:lec_tx_timeout: lec0 [ 1089.425587][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1089.904071][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18760'. [ 1089.931499][T15644] syzkaller0: entered promiscuous mode [ 1089.942254][T15644] syzkaller0: entered allmulticast mode [ 1090.136730][T15651] syzkaller0: entered promiscuous mode [ 1090.144121][T15651] syzkaller0: entered allmulticast mode [ 1090.510789][T15671] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1090.637197][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18766'. [ 1090.948855][T15687] Cannot find del_set index 4 as target [ 1091.037078][T15689] netlink: 'syz.3.18770': attribute type 4 has an invalid length. [ 1091.075856][T15691] tipc: Invalid UDP bearer configuration [ 1091.075919][T15691] tipc: Enabling of bearer rejected, failed to enable media [ 1091.125640][T15689] netlink: 'syz.3.18770': attribute type 4 has an invalid length. [ 1091.813402][T15714] syzkaller0: entered promiscuous mode [ 1091.819329][T15714] syzkaller0: entered allmulticast mode [ 1091.826479][T15705] gre0 speed is unknown, defaulting to 1000 [ 1092.100629][T15703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.274042][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18783'. [ 1092.390922][T14517] block nbd0: Receive control failed (result -1) [ 1094.441610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1094.450080][ C0] lec:lec_tx_timeout: lec0 [ 1094.454844][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1094.718673][T15764] xt_hashlimit: size too large, truncated to 1048576 [ 1094.819245][T15765] syzkaller1: entered promiscuous mode [ 1094.845647][T15765] syzkaller1: entered allmulticast mode [ 1095.221011][T15777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18794'. [ 1095.401373][T15773] bond7: (slave veth15): Enslaving as an active interface with a down link [ 1095.404275][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18794'. [ 1095.501776][T15774] bond7: (slave veth17): Enslaving as an active interface with a down link [ 1095.971185][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18801'. [ 1096.062377][T15803] bond13: left allmulticast mode [ 1096.067415][T15803] ip6gretap2: left allmulticast mode [ 1096.121290][T15803] bond14: left allmulticast mode [ 1096.558637][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18811'. [ 1096.716337][T15830] netlink: 'syz.1.18813': attribute type 1 has an invalid length. [ 1096.760767][T15830] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1096.804939][T15830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18813'. [ 1096.827562][T15830] bond8: entered promiscuous mode [ 1096.833601][T15830] bond8: entered allmulticast mode [ 1096.863152][T15830] bond0: (slave dummy0): Releasing backup interface [ 1096.884395][T15830] bond8: (slave dummy0): making interface the new active one [ 1096.893514][T15830] dummy0: entered promiscuous mode [ 1096.900165][T15830] dummy0: entered allmulticast mode [ 1096.908250][T15830] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1096.923531][T15838] vlan6: entered promiscuous mode [ 1097.188606][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18820'. [ 1097.224701][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18820'. [ 1097.335232][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18823'. [ 1097.385996][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18824'. [ 1097.585486][T15867] syzkaller0: entered promiscuous mode [ 1097.591480][T15867] syzkaller0: entered allmulticast mode [ 1097.691143][T15872] netlink: 'syz.2.18826': attribute type 39 has an invalid length. [ 1097.801736][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18830'. [ 1097.819638][T15877] ip6gretap4: entered allmulticast mode [ 1097.972411][T15886] syzkaller0: entered promiscuous mode [ 1097.978404][T15886] syzkaller0: entered allmulticast mode [ 1099.461636][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1099.470359][ C0] lec:lec_tx_timeout: lec0 [ 1099.475485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1099.774873][T15833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1100.635645][T15988] syzkaller0: entered promiscuous mode [ 1100.656351][T15988] syzkaller0: entered allmulticast mode [ 1101.046258][T16006] __nla_validate_parse: 2 callbacks suppressed [ 1101.046278][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18872'. [ 1101.082554][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18872'. [ 1101.103032][T16006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.136743][T16013] netlink: 'syz.4.18872': attribute type 4 has an invalid length. [ 1101.172179][T16006] bond16: (slave bond0): Enslaving as an active interface with a down link [ 1101.184871][T16013] netlink: 152 bytes leftover after parsing attributes in process `syz.4.18872'. [ 1101.243369][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18877'. [ 1101.276413][T16016] netlink: 'syz.1.18877': attribute type 5 has an invalid length. [ 1101.285570][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18877'. [ 1101.641250][T16029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1101.780466][T16033] syzkaller0: entered promiscuous mode [ 1101.787007][T16033] syzkaller0: entered allmulticast mode [ 1101.965486][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18885'. [ 1102.056839][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18885'. [ 1102.946907][T16081] ------------[ cut here ]------------ [ 1102.953676][T16081] ODEBUG: init active (active state 0) object: ffff8880744f2ef8 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 1102.966941][T16081] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.2.18897/16081 [ 1102.977991][T16081] Modules linked in: [ 1102.982439][T16081] CPU: 1 UID: 0 PID: 16081 Comm: syz.2.18897 Not tainted syzkaller #0 PREEMPT(full) [ 1102.992637][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1103.003073][T16081] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1103.009127][T16081] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 97 58 0b 83 fd 03 75 3f 4c 8b [ 1103.029431][T16081] RSP: 0018:ffffc90004cefa98 EFLAGS: 00010246 [ 1103.036200][T16081] RAX: 1ffffffff179e7b8 RBX: ffff8880744f2ef8 RCX: 0000000000000000 [ 1103.044451][T16081] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0e10 [ 1103.052752][T16081] RBP: 0000000000000003 R08: ffff8880744f2ef8 R09: ffffffff8bcf50e0 [ 1103.061029][T16081] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 1103.069116][T16081] R13: ffffffff8bcf3dc0 R14: ffffffff901c0e10 R15: dffffc0000000000 [ 1103.077360][T16081] FS: 00007f43da2216c0(0000) GS:ffff88812555f000(0000) knlGS:0000000000000000 [ 1103.086633][T16081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.093708][T16081] CR2: 0000001b30e19ff8 CR3: 00000000760be000 CR4: 00000000003526f0 [ 1103.102030][T16081] Call Trace: [ 1103.105361][T16081] [ 1103.108336][T16081] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1103.114458][T16081] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1103.120578][T16081] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1103.126632][T16081] timer_init_key+0x41/0x2f0 [ 1103.131414][T16081] lane_ioctl+0x1579/0x2220 [ 1103.136372][T16081] ? __pfx_clip_ioctl+0x10/0x10 [ 1103.141964][T16081] ? br2684_ioctl+0x110/0x6b0 [ 1103.146836][T16081] ? __pfx_lane_ioctl+0x10/0x10 [ 1103.151831][T16081] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1103.157093][T16081] do_vcc_ioctl+0x36d/0x9d0 [ 1103.161763][T16081] sock_do_ioctl+0x101/0x320 [ 1103.166627][T16081] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1103.171932][T16081] ? do_futex+0x395/0x420 [ 1103.176500][T16081] sock_ioctl+0x5c6/0x7f0 [ 1103.181686][T16081] ? __pfx_sock_ioctl+0x10/0x10 [ 1103.186761][T16081] ? __fget_files+0x2a/0x420 [ 1103.191391][T16081] ? __fget_files+0x3a0/0x420 [ 1103.196496][T16081] ? __fget_files+0x2a/0x420 [ 1103.201323][T16081] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1103.206597][T16081] ? __pfx_sock_ioctl+0x10/0x10 [ 1103.211514][T16081] __se_sys_ioctl+0xfc/0x170 [ 1103.216603][T16081] do_syscall_64+0x14d/0xf80 [ 1103.221258][T16081] ? trace_irq_disable+0x3b/0x150 [ 1103.226705][T16081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.233126][T16081] ? clear_bhb_loop+0x40/0x90 [ 1103.238072][T16081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.244080][T16081] RIP: 0033:0x7f43d939c799 [ 1103.248709][T16081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.268809][T16081] RSP: 002b:00007f43da221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.277517][T16081] RAX: ffffffffffffffda RBX: 00007f43d9615fa0 RCX: 00007f43d939c799 [ 1103.285638][T16081] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1103.293781][T16081] RBP: 00007f43d9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1103.302024][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.310061][T16081] R13: 00007f43d9616038 R14: 00007f43d9615fa0 R15: 00007ffc3ba49818 [ 1103.318179][T16081] [ 1103.321237][T16081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1103.328673][T16081] CPU: 1 UID: 0 PID: 16081 Comm: syz.2.18897 Not tainted syzkaller #0 PREEMPT(full) [ 1103.338170][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1103.348433][T16081] Call Trace: [ 1103.351735][T16081] [ 1103.354783][T16081] vpanic+0x56c/0xa60 [ 1103.358825][T16081] ? __pfx__printk+0x10/0x10 [ 1103.363553][T16081] ? __pfx_vpanic+0x10/0x10 [ 1103.368315][T16081] ? is_bpf_text_address+0x292/0x2b0 [ 1103.373702][T16081] ? is_bpf_text_address+0x26/0x2b0 [ 1103.379015][T16081] panic+0xc5/0xd0 [ 1103.382770][T16081] ? __pfx_panic+0x10/0x10 [ 1103.387320][T16081] __warn+0x315/0x4f0 [ 1103.391629][T16081] ? __debug_object_init+0x2b1/0x4e0 [ 1103.396946][T16081] ? __debug_object_init+0x2b1/0x4e0 [ 1103.402256][T16081] __report_bug+0x29a/0x540 [ 1103.406780][T16081] ? __debug_object_init+0x2b1/0x4e0 [ 1103.412081][T16081] ? __pfx___report_bug+0x10/0x10 [ 1103.417210][T16081] ? __lock_acquire+0x6b5/0x2cf0 [ 1103.422179][T16081] report_bug_entry+0x19a/0x290 [ 1103.427230][T16081] ? __debug_object_init+0x30f/0x4e0 [ 1103.432522][T16081] ? __debug_object_init+0x314/0x4e0 [ 1103.437862][T16081] handle_bug+0xce/0x200 [ 1103.442169][T16081] exc_invalid_op+0x1a/0x50 [ 1103.446731][T16081] asm_exc_invalid_op+0x1a/0x20 [ 1103.451773][T16081] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1103.457944][T16081] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 97 58 0b 83 fd 03 75 3f 4c 8b [ 1103.478178][T16081] RSP: 0018:ffffc90004cefa98 EFLAGS: 00010246 [ 1103.484383][T16081] RAX: 1ffffffff179e7b8 RBX: ffff8880744f2ef8 RCX: 0000000000000000 [ 1103.492365][T16081] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0e10 [ 1103.500523][T16081] RBP: 0000000000000003 R08: ffff8880744f2ef8 R09: ffffffff8bcf50e0 [ 1103.508674][T16081] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 1103.516837][T16081] R13: ffffffff8bcf3dc0 R14: ffffffff901c0e10 R15: dffffc0000000000 [ 1103.525086][T16081] ? __pfx_timer_debug_hint+0x10/0x10 [ 1103.530575][T16081] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1103.536478][T16081] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1103.542571][T16081] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1103.548490][T16081] timer_init_key+0x41/0x2f0 [ 1103.553092][T16081] lane_ioctl+0x1579/0x2220 [ 1103.557619][T16081] ? __pfx_clip_ioctl+0x10/0x10 [ 1103.562481][T16081] ? br2684_ioctl+0x110/0x6b0 [ 1103.567436][T16081] ? __pfx_lane_ioctl+0x10/0x10 [ 1103.572362][T16081] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1103.577066][T16081] do_vcc_ioctl+0x36d/0x9d0 [ 1103.581587][T16081] sock_do_ioctl+0x101/0x320 [ 1103.586282][T16081] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1103.591499][T16081] ? do_futex+0x395/0x420 [ 1103.595865][T16081] sock_ioctl+0x5c6/0x7f0 [ 1103.600304][T16081] ? __pfx_sock_ioctl+0x10/0x10 [ 1103.605384][T16081] ? __fget_files+0x2a/0x420 [ 1103.610166][T16081] ? __fget_files+0x3a0/0x420 [ 1103.614874][T16081] ? __fget_files+0x2a/0x420 [ 1103.619522][T16081] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1103.624590][T16081] ? __pfx_sock_ioctl+0x10/0x10 [ 1103.629659][T16081] __se_sys_ioctl+0xfc/0x170 [ 1103.634462][T16081] do_syscall_64+0x14d/0xf80 [ 1103.639180][T16081] ? trace_irq_disable+0x3b/0x150 [ 1103.644280][T16081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.650414][T16081] ? clear_bhb_loop+0x40/0x90 [ 1103.655261][T16081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.661305][T16081] RIP: 0033:0x7f43d939c799 [ 1103.665739][T16081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.686050][T16081] RSP: 002b:00007f43da221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.694738][T16081] RAX: ffffffffffffffda RBX: 00007f43d9615fa0 RCX: 00007f43d939c799 [ 1103.703240][T16081] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1103.711593][T16081] RBP: 00007f43d9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1103.719835][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.728066][T16081] R13: 00007f43d9616038 R14: 00007f43d9615fa0 R15: 00007ffc3ba49818 [ 1103.736060][T16081] [ 1103.739580][T16081] Kernel Offset: disabled [ 1103.743902][T16081] Rebooting in 86400 seconds..