last executing test programs: 1.744710481s ago: executing program 2 (id=13415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x80c4) 1.404499667s ago: executing program 1 (id=13420): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.404337314s ago: executing program 2 (id=13421): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.357432007s ago: executing program 2 (id=13422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) 1.300123734s ago: executing program 0 (id=13423): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.220673348s ago: executing program 0 (id=13424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x278, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1e4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x13c, 0x1, [@m_ctinfo={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9fb, 0x1, 0x5, 0xd, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xeb, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9b8a1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.181814876s ago: executing program 3 (id=13425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.104736775s ago: executing program 2 (id=13426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.104088702s ago: executing program 0 (id=13427): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000001680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "659b78", 0x44, 0x2f, 0x0, @empty, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x1, 0x6}, 0x2, {0x9, 0x6, 0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.03180977s ago: executing program 0 (id=13428): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="150a0000020100006111c400000000001800000000000000000000000000000095bbc26871ade2ca92506943340bd318eac6f05b4ab53732e9f6438541b88e53afa5f60600000047e770d2e52d6737bfed33f5a5e1b1a784c7faa3442ad5de1f47d9a5e22a4f1ebe7be69278dc83"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000240)=0x4, 0x4) mmap(&(0x7f000016f000/0x1000)=nil, 0x1000, 0x2, 0x4010, r1, 0x5000) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000008021100000108021106000000021100000010000005a60000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@broadcast, &(0x7f0000000fc0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_a, @initial, @device_a, {0x7, 0x80}}, @a_msdu=[{@device_a, @broadcast, 0x93, "585d109dbff2d6ea7069a575ca7d6e1c6d7054e8b74f9ac703c0e24d9bc483b160a8469ee2f890ca49a09893f71cb05b5f19510ccbab4f013d30c7f13706ba2d551360cf79ceba01c251475c2f37df7461e57c6b94965795379fa8bec494412d9627ec2c7f06917e8067b288bf0ef56e34c6440f222e4b87ef81e3a447c025c65e7c81774ad7029acf095547decc3cb5467fc0"}, {@device_b, @broadcast, 0x96, "eb56ecb0973a8ee38f2f6c101e070a6963489de74dccc4ee41d2fe6f49e4c30f4392f18ad14c2a8fbe793ac9f2f2111fea3aeda7040c1f0e4cb0c68fb207bbc255c3d7c50f5e6bb2bab7dbdcf297ae214a786dde1e25e1ccd6c0934b7944ab35adae91b230abe75d79f957a73bdd22148715b91dc8c415a6b1c39da4deccdcda2645582179d7e264701b8aec96f18c26e3db4d9ed6b0"}, {@broadcast, @device_a, 0x8, "f743f1b170b57ca4"}, {@device_b, @broadcast, 0x1d, "70876cb2bf4c52b2bc4a7d04f90918d0e5781696b7cc18486a73f8cfca"}, {@broadcast, @device_a, 0x68, "77d8389804f45ed35496f273c19fc1d7e19d7b9511c9c64e142196ad3464e853af8f966dcf7c21ed0b97144ff4d7de339e23a771a679bc4c06cded24b5c0705371f5dfd9b24a0f021ee5c736cd6988f40b5ca5e58acf9c3ceffc1650a6aa65be635324fe2ced2d7c"}, {@broadcast, @device_b, 0x84, "ea9c9a04c3f659efec6595628325f5d9dafda0471ebb57d22bbd78bf481f6ce37a7b623b1420dc556ea6a02969cb5786e0876beaf62566b90289107a0384a9c01791f38311a8c5726bfaff5377084e0266f38be8112016fb3348dfd2de970dad4bf62b1ff9f6a44b58ca45bac47bf3bad352f00cc25f54eafd0a562d04b48f6765497ad2"}, {@broadcast, @device_b, 0xf9, "d8fe68f0709c2928ac294289b456a9a202b8d4186d9a473f6790d9ccc1f0e89fbc629337e38d3845512180283c5e8da2930feeadb48ec9e5bf476c009c61191f7d5e1ed3884c55ae053446fef22040607b7e9e4d2a1d5c9434d139ed60747009df47a1c6a48bca0e971e1cf88925ec1b4e1da3a284d55f9b189984a862462d77741cfed5eb6ab2aab0fb17853a4030f186359eb8ca04c21690432008db1192691613646fdf5afbc609abcf4b3227e7bed2ee3e11b6971c75225a6a593f0929c9451b0204d4d0d450d50b2e4d049ad6915634edfb7b156e10b2a35277c428d2be890bb698edf6786005ad07fbeb8d536da342b298e2a1d486a9"}, {@broadcast, @device_a, 0xa3, "ff1faab8e7e0345f76c4de43d27af7562a2381edb886b934b2d0da70c6e767803284c94810f591457cabaf821bc662b27c0e8297b0310d94c44cd77029776b2d0ffe570fb3c71bd4f9e75547b41fbfe8b4ccdbc7dc23cc926426937e4bddb5bf3988cbee766d18fb677ffdabaa71866568cedc34dd933a662b8ce678bc978d9befb26a633e3a4fb93947eec7291a1632c34e6580b41324df4291dd4e1ebff7e0baed3e"}, {@device_b, @device_a, 0xdd, "80c432690139ffe18d5ba26b34f92ca5adc483bb15077431bcf683fac1ea54615c41813486ad8e586cf75646376225f759ba71eadace24a6f3863c26b9b812f154ef6bb1fac10dcf96538f364854d604d070f4c240c127d840fcf90ecdab7df069815cf29409a8bdf6a5882f24bb6b8af57708b761547a3f6ac22423d464c0d5bc9ba65bc281e6fe63b47a649b26a8023f9072d7cf7b116aae0b47543d5c2c25c867163de33389cb552a1a54841467578339426228042d26cfe28cca44b84cc0f6bb114fd607ff345f623c419f07e4085f3bce10d7776b626e04253170"}]}, 0x558) getsockopt$rose(r3, 0x104, 0x2, 0x0, &(0x7f00000005c0)=0xfffffca9) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa8, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb358e4737c268ec6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008094) sendmsg$netlink(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="10000000000000000000a5ad005218c67dfa4d22422d4d2c5753f9000000"], 0x10}, {&(0x7f0000000100)=ANY=[@ANYBLOB="10000000ed03"], 0x10}], 0x2}, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) 1.031319595s ago: executing program 3 (id=13429): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="ddd492bdde1c2afacccfc4f69f989d6846c60f4ab235351985865bf547cba624d7ca257efa0047920006c69383ef61bf820d581e6515e884ec183a7f68941b70b60e7df81def93a8e1725a90ee151299357272cd994a4d2a1a51cf7cd6d207d2722423bbff97603c8f8949766374efa31139d85ae16b437484628f3a099bfb50881e66b195650d105f84eeeb65304e3092c5e6317fd2754bcb34b6542540d1c612ea338c00dd0fd803e93e2a1b36d57298dd4da1222151ef092cd66978488373fd3be45a7b98d22c389c26431dd63fe0f98b87855c3dc33cfbf95092bb", 0xdd}, {0x0}, {&(0x7f0000000680)}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000044c0)}}, {{0x0, 0x0, &(0x7f0000004800), 0x0, &(0x7f0000006c00)}}], 0x6, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1, 0x10122, 0x0) 928.423275ms ago: executing program 3 (id=13430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 792.749846ms ago: executing program 3 (id=13431): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 712.38209ms ago: executing program 3 (id=13432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x0, 0x1, 0x0, {0x100, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x5, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 700.901493ms ago: executing program 4 (id=13433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r1, 0x1, 0x1070bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="76a3cdac698f"}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x82) 643.892556ms ago: executing program 3 (id=13434): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x5, &(0x7f00000006c0)=[{@none}, {@none}, {@fixed}, {@none}, {}]}) 643.196727ms ago: executing program 4 (id=13435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000404730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 551.524922ms ago: executing program 1 (id=13436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 492.543919ms ago: executing program 1 (id=13437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x64, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f46e226a84b2294b5453e4e856"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 453.636756ms ago: executing program 4 (id=13438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a17", 0x2f}], 0x1}}], 0x1, 0xc0) 404.463006ms ago: executing program 1 (id=13439): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 402.310913ms ago: executing program 4 (id=13440): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 389.748833ms ago: executing program 1 (id=13441): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "659b78", 0xd47, 0x2f, 0x0, @empty, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc42, 0x2, [], "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"}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8f], "5ffecb5355a3f86d4bacc83f3e9a9ee4e47ae3cede6f3f54a97b36cf2c73a57f356e541cf2e271b8cd7edf7fb88a13cd0298d1810e78794dd8b71f594e3bd17f0b1bfb991ca745a037"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x1, 0x6}, 0x2, {0x9, 0x6, 0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "090b48410100000000000000d8f505d7e11abce6d372df33a546b823641e47d483b455aaca8bc14ae0b7e0fbbf0fee27f2d934bb6d93467008c6ef5571fcccf2d961b489c65c8c3c8023759f19a2b126dbbbb1e14c95a0f3e53b86f8f2b4cdd6e5145248cb79a15859d5f445c8b4863a0fbee319029b"}}}}}}}, 0x0) 347.812639ms ago: executing program 4 (id=13442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x3, 0x2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0x7, 0x3}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 250.967294ms ago: executing program 0 (id=13443): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 165.874988ms ago: executing program 2 (id=13444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x400000b}, &(0x7f0000000700)=0x8) 146.495385ms ago: executing program 1 (id=13445): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x2, 0xff, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000480)={0x1d, r1, 0x1, {0x1, 0xf0, 0x1}}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8085}, 0x0) 87.223817ms ago: executing program 4 (id=13446): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 55.915001ms ago: executing program 0 (id=13447): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r2, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 2 (id=13448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r2, 0x25, 0x4, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4}, 0x6) kernel console output (not intermixed with test programs): rocess `syz.3.10643'. [ 484.448376][T28802] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10644'. [ 485.015483][T28839] netlink: 'syz.4.10659': attribute type 22 has an invalid length. [ 485.033869][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10659'. [ 485.063313][T28839] netlink: 'syz.4.10659': attribute type 22 has an invalid length. [ 485.085246][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10659'. [ 485.197352][T28850] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.10663'. [ 485.265953][ T9730] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.296639][ T9730] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.326489][ T9730] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.355604][ T9730] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.479742][T28866] netlink: 'syz.1.10673': attribute type 1 has an invalid length. [ 485.514043][T28866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.547663][T28866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 485.554854][T28866] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 485.567254][T28866] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 485.872847][T28888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10682'. [ 486.053824][T28894] syzkaller1: entered promiscuous mode [ 486.059939][T28897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10685'. [ 486.073145][T28894] syzkaller1: entered allmulticast mode [ 486.097960][T28897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10685'. [ 487.100438][T28951] openvswitch: netlink: IP tunnel TTL not specified. [ 489.589638][T29012] syzkaller1: left promiscuous mode [ 489.606127][T29012] syzkaller1: left allmulticast mode [ 489.821841][T29027] __nla_validate_parse: 1 callbacks suppressed [ 489.821862][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10738'. [ 489.850994][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10738'. [ 489.863640][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10738'. [ 489.878554][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10738'. [ 490.232877][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10750'. [ 490.242879][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10750'. [ 490.262309][ T9732] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.271786][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10750'. [ 490.286065][ T1039] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.288635][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10750'. [ 490.296896][ T1039] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.316236][ T1039] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.100669][ T1039] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 491.313796][T29099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10767'. [ 491.855813][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10772'. [ 492.023519][T29128] netlink: 'syz.2.10777': attribute type 4 has an invalid length. [ 492.752072][T29173] netlink: 'syz.3.10798': attribute type 5 has an invalid length. [ 493.363781][T29211] syzkaller1: entered promiscuous mode [ 493.371976][T29211] syzkaller1: entered allmulticast mode [ 493.483680][T29217] syzkaller1: left promiscuous mode [ 493.491814][T29217] syzkaller1: left allmulticast mode [ 493.869818][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88806973e400: rx timeout, send abort [ 493.879190][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806973e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 494.117097][T29251] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 494.776572][T29284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.002150][T29294] __nla_validate_parse: 6 callbacks suppressed [ 495.002172][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10852'. [ 495.041002][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10852'. [ 495.041783][ T3501] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.060073][ T3501] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.075546][ T3501] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.087605][ T3501] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.124699][T29296] netlink: 'syz.1.10853': attribute type 1 has an invalid length. [ 495.148991][T29296] netlink: 'syz.1.10853': attribute type 1 has an invalid length. [ 495.301480][T29305] policy can only be matched on NF_INET_PRE_ROUTING [ 495.301502][T29305] unable to load match [ 495.871255][T29340] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 496.070785][T29354] batadv0: left promiscuous mode [ 496.078817][T29354] bridge0: port 3(batadv0) entered disabled state [ 496.089284][T29354] bridge_slave_0: left promiscuous mode [ 496.095323][T29354] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.112225][T29354] bond0: (slave bridge_slave_1): Releasing backup interface [ 496.124638][T29354] bridge_slave_1: left allmulticast mode [ 496.136142][T29354] bond4: (slave veth0_to_bond): Releasing backup interface [ 496.148979][T29354] bond0: (slave bond_slave_0): Releasing backup interface [ 496.161436][T29354] bond0: (slave bond_slave_1): Releasing backup interface [ 496.170844][T29354] team0: Port device C removed [ 496.178625][T29354] team0: Port device team_slave_1 removed [ 496.185175][T29354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.187840][T29360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10878'. [ 496.202688][T29354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.212692][T29354] bond0: (slave geneve1): Releasing backup interface [ 496.225072][T29354] bond2: (slave bond3): Releasing backup interface [ 496.232450][T29354] bond3: left promiscuous mode [ 496.250058][T29354] bond5: (slave geneve2): Releasing active interface [ 496.283904][T29359] veth0: entered promiscuous mode [ 496.334099][T29360] veth0 (unregistering): left promiscuous mode [ 496.365534][ T3501] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.375363][ T3501] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.389656][ T3501] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.401226][ T3501] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.803288][T29384] netlink: 'syz.3.10888': attribute type 1 has an invalid length. [ 496.888155][T29387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10889'. [ 496.918728][T29384] bond5: (slave gretap0): making interface the new active one [ 496.931311][T29384] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 496.974916][T29387] macvtap2: entered promiscuous mode [ 497.002054][T29387] erspan0: entered promiscuous mode [ 497.019512][T29387] macvtap2: entered allmulticast mode [ 497.062000][T29393] erspan0: left promiscuous mode [ 497.434680][T29422] netlink: 'syz.3.10902': attribute type 1 has an invalid length. [ 497.484572][T29422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.595138][T29432] netlink: 'syz.1.10905': attribute type 1 has an invalid length. [ 497.665572][T29422] bond6: (slave gretap1): making interface the new active one [ 497.675256][T29422] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 497.879799][T29435] bond7: (slave bridge4): making interface the new active one [ 497.903369][T29435] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 497.920373][T29450] netlink: 'syz.0.10913': attribute type 1 has an invalid length. [ 497.949798][T29450] netlink: 'syz.0.10913': attribute type 4 has an invalid length. [ 497.969091][T29450] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10913'. [ 498.658531][T29475] lo speed is unknown, defaulting to 1000 [ 498.679083][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10927'. [ 498.818760][T29490] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 498.830962][T29490] bond7: (slave vcan0): Error -95 calling set_mac_address [ 498.954449][T29493] syzkaller0: entered promiscuous mode [ 498.962218][T29493] syzkaller0: entered allmulticast mode [ 501.470825][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.480150][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697044][T29549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10948'. [ 502.316847][T29584] netlink: 'syz.0.10958': attribute type 1 has an invalid length. [ 502.325522][T29584] netlink: 'syz.0.10958': attribute type 4 has an invalid length. [ 502.338176][T29584] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.10958'. [ 502.530948][T29593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10960'. [ 502.780530][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10966'. [ 503.151967][T29621] netlink: 'syz.1.10974': attribute type 1 has an invalid length. [ 503.453286][T29637] netlink: 'syz.4.10981': attribute type 1 has an invalid length. [ 503.584002][T29642] bond2: (slave geneve3): making interface the new active one [ 503.606893][T29642] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 503.636608][ T9730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 503.677638][ T9730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 503.709632][ T9730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 503.738713][ T9730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 504.000483][T29625] lo speed is unknown, defaulting to 1000 [ 504.007983][T29628] netlink: 'syz.3.10976': attribute type 13 has an invalid length. [ 504.034151][T29628] netlink: 'syz.3.10976': attribute type 17 has an invalid length. [ 504.174062][T29628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.462793][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10997'. [ 504.666266][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 120 seconds [ 504.685892][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 120 seconds [ 504.698255][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 120 seconds [ 504.710222][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 120 seconds [ 504.967886][ T9730] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 505.391065][T29688] lo speed is unknown, defaulting to 1000 [ 505.751066][T29720] netlink: 'syz.0.11014': attribute type 2 has an invalid length. [ 505.769778][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11014'. [ 505.812538][T29720] netlink: 'syz.0.11014': attribute type 2 has an invalid length. [ 505.835068][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11014'. [ 506.142355][T29728] syzkaller0: entered promiscuous mode [ 506.168380][T29728] syzkaller0: entered allmulticast mode [ 506.649144][T29750] tipc: Failed to remove unknown binding: 66,1,1/64:4094300679/4094300681 [ 506.658767][T29750] tipc: Failed to remove unknown binding: 66,1,1/64:4094300679/4094300681 [ 508.413815][T29752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11026'. [ 508.532964][T29770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11030'. [ 508.554249][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11031'. [ 510.172921][T29766] veth1_to_bond: entered allmulticast mode [ 510.179088][T29766] veth1_to_bond: left allmulticast mode [ 510.214262][T29770] bond0: (slave bond_slave_1): Releasing backup interface [ 510.489966][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11038'. [ 510.565464][T29787] team1: entered promiscuous mode [ 510.580921][T29787] team1: entered allmulticast mode [ 510.619691][T29791] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 510.713123][T29797] netlink: 'syz.1.11043': attribute type 1 has an invalid length. [ 510.732958][T29801] netlink: 'syz.4.11044': attribute type 1 has an invalid length. [ 510.741478][T29801] netlink: 'syz.4.11044': attribute type 4 has an invalid length. [ 510.767050][T29801] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.11044'. [ 510.864133][T29808] bond8: (slave bridge5): making interface the new active one [ 510.900221][T29808] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 511.174671][T29826] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 511.516062][T29852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11066'. [ 512.336247][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 150 seconds [ 512.349270][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 150 seconds [ 512.360597][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 150 seconds [ 512.371801][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 150 seconds [ 512.459029][T29889] syzkaller0: entered promiscuous mode [ 512.467246][T29889] syzkaller0: entered allmulticast mode [ 512.520655][T29895] vlan3: entered promiscuous mode [ 512.529269][T29895] hsr_slave_1: entered promiscuous mode [ 512.535042][T29895] vlan3: entered allmulticast mode [ 512.547522][T29895] hsr_slave_1: entered allmulticast mode [ 512.958637][T29916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.965939][T29916] IPv6: NLM_F_CREATE should be set when creating new route [ 513.135329][T29925] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11094'. [ 514.751202][T29916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.136795][T29952] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 515.546646][T29982] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11118'. [ 515.670931][T29988] netlink: 'syz.3.11120': attribute type 12 has an invalid length. [ 516.500818][T30035] tipc: New replicast peer: 255.255.255.255 [ 516.509887][T30035] tipc: Enabled bearer , priority 10 [ 516.873856][T30056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11150'. [ 516.887705][T30056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11150'. [ 517.001065][T30061] netlink: 'syz.2.11154': attribute type 1 has an invalid length. [ 517.013169][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11152'. [ 517.059088][T30061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.063770][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11155'. [ 517.104281][T30067] bond3: (slave gretap2): making interface the new active one [ 517.118344][T30067] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 517.596645][T30093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11167'. [ 517.626335][T25645] tipc: Node number set to 1 [ 517.669602][T30100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11170'. [ 518.113360][T30123] dvmrp0: entered allmulticast mode [ 518.150880][T30124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11180'. [ 518.304467][T30133] syzkaller0: entered promiscuous mode [ 518.352918][T30133] syzkaller0: entered allmulticast mode [ 518.419817][T30140] netlink: 'syz.2.11187': attribute type 1 has an invalid length. [ 518.520599][T30140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.622029][T30143] bond4: (slave geneve3): making interface the new active one [ 518.650120][T30143] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 518.922301][T30162] netlink: 'syz.4.11195': attribute type 1 has an invalid length. [ 518.936800][T30162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11195'. [ 519.167255][T30173] netlink: 'syz.1.11199': attribute type 4 has an invalid length. [ 519.200184][T30177] netlink: 'syz.4.11202': attribute type 7 has an invalid length. [ 519.211876][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11202'. [ 519.459132][T30185] netlink: 'syz.4.11205': attribute type 10 has an invalid length. [ 519.507112][T30185] netlink: 'syz.4.11205': attribute type 10 has an invalid length. [ 519.530803][T30185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 520.119832][T30216] netlink: 'syz.3.11220': attribute type 1 has an invalid length. [ 520.142286][T30224] netlink: 'syz.2.11221': attribute type 13 has an invalid length. [ 520.228550][T25645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.266756][T25645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.337253][T25645] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.408025][T30237] netlink: 'syz.3.11226': attribute type 29 has an invalid length. [ 520.884124][T30261] lo: Caught tx_queue_len zero misconfig [ 520.956438][T25646] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.044493][T30272] __nla_validate_parse: 2 callbacks suppressed [ 521.044512][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11242'. [ 521.064982][T30267] bond8: (slave gretap2): making interface the new active one [ 521.079649][T30267] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 521.281762][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11246'. [ 521.300033][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11246'. [ 521.421646][T30288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11248'. [ 521.435895][T30288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11248'. [ 521.469919][T30292] ieee802154 phy0 wpan0: encryption failed: -126 [ 521.724095][T30305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.757219][T30305] bond4: (slave geneve3): making interface the new active one [ 521.766394][T30305] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 521.775324][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.810498][ T36] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.838379][T30310] sctp: [Deprecated]: syz.0.11261 (pid 30310) Use of int in maxseg socket option. [ 521.838379][T30310] Use struct sctp_assoc_value instead [ 521.855350][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.883649][ T36] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 522.063484][T30322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11265'. [ 522.075165][T30322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11265'. [ 522.547019][T30349] validate_nla: 6 callbacks suppressed [ 522.547040][T30349] netlink: 'syz.3.11277': attribute type 4 has an invalid length. [ 523.507385][T30411] netlink: 'syz.0.11305': attribute type 26 has an invalid length. [ 523.516245][T30411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11305'. [ 523.531619][T30411] netlink: 'syz.0.11305': attribute type 26 has an invalid length. [ 523.543263][T30411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11305'. [ 523.563443][T30409] syzkaller1: entered promiscuous mode [ 523.572299][T30409] syzkaller1: entered allmulticast mode [ 524.354606][T30456] syzkaller1: entered promiscuous mode [ 524.364054][T30456] syzkaller1: entered allmulticast mode [ 524.710608][T30471] netlink: 'syz.3.11331': attribute type 21 has an invalid length. [ 524.742327][T30471] netlink: 'syz.3.11331': attribute type 22 has an invalid length. [ 524.759553][T30471] netlink: 'syz.3.11331': attribute type 23 has an invalid length. [ 524.779894][T30471] netlink: 'syz.3.11331': attribute type 25 has an invalid length. [ 524.805822][T30471] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11331'. [ 526.245475][T30528] __nla_validate_parse: 1 callbacks suppressed [ 526.245494][T30528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11352'. [ 526.522263][T30540] netlink: 'syz.0.11358': attribute type 2 has an invalid length. [ 526.531181][T30540] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11358'. [ 526.543558][T30540] nbd: must specify at least one socket [ 526.709643][T30547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11361'. [ 526.841094][T30558] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11366'. [ 527.055941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.303331][T30578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11375'. [ 527.851592][T30574] lo speed is unknown, defaulting to 1000 [ 527.938109][T30607] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11387'. [ 527.946313][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11388'. [ 528.113939][T30614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11391'. [ 528.125071][T30614] netlink: 'syz.4.11391': attribute type 12 has an invalid length. [ 528.156654][T30614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11391'. [ 528.191299][T30614] netlink: 'syz.4.11391': attribute type 12 has an invalid length. [ 528.378026][T30628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11398'. [ 528.412837][ T3501] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 528.490862][ T3501] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 528.574427][ T3501] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 528.596770][ T3501] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 530.213054][T30697] only policy match revision 0 supported [ 530.213076][T30697] unable to load match [ 531.488052][T30780] team0: No ports can be present during mode change [ 531.800733][T30804] syzkaller1: entered promiscuous mode [ 531.828292][T30804] syzkaller1: entered allmulticast mode [ 531.905437][T30809] __nla_validate_parse: 7 callbacks suppressed [ 531.905455][T30809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11477'. [ 532.631927][T30839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11487'. [ 533.007131][T30850] syzkaller1: left promiscuous mode [ 533.029397][T30850] syzkaller1: left allmulticast mode [ 533.645090][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11502'. [ 534.736447][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 150 seconds [ 534.748324][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 150 seconds [ 534.759674][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 150 seconds [ 534.770981][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 150 seconds [ 535.078022][T30915] lo speed is unknown, defaulting to 1000 [ 535.188141][T30928] vlan1: entered promiscuous mode [ 535.202367][T30928] vlan1: entered allmulticast mode [ 535.214674][T30928] hsr_slave_1: entered allmulticast mode [ 535.511129][T30937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.518440][T30937] IPv6: NLM_F_CREATE should be set when creating new route [ 536.742390][T30962] netlink: 'syz.3.11538': attribute type 6 has an invalid length. [ 537.059024][T30973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11545'. [ 537.214488][T30979] lo: entered allmulticast mode [ 537.226481][T30975] lo: left allmulticast mode [ 537.246978][T30982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11548'. [ 537.668956][T31000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11554'. [ 537.967305][T31009] batadv0: entered promiscuous mode [ 537.976894][T31009] batadv0: left promiscuous mode [ 538.104844][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11558'. [ 538.147386][T31013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11558'. [ 538.372849][T30797] Set syz1 is full, maxelem 65536 reached [ 538.571678][T31030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11565'. [ 538.646500][T31036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11568'. [ 538.984671][T31047] syzkaller0: entered promiscuous mode [ 538.995857][T31047] syzkaller0: entered allmulticast mode [ 539.118513][T31063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11578'. [ 541.172162][T31084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11585'. [ 541.513970][T31053] lo speed is unknown, defaulting to 1000 [ 541.673091][T31098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11586'. [ 541.773315][T31099] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.796033][T31099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 541.831679][T31099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 541.934760][T31099] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.979472][T31099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 542.024888][T31099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 542.026431][ T5236] udevd[5236]: worker [21769] /devices/virtual/block/nbd1 timeout; kill it [ 542.156996][ T5236] udevd[5236]: seq 15200 '/devices/virtual/block/nbd1' killed [ 542.167242][T31099] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.188621][T31099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 542.208863][T31099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 542.288977][T31099] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.315980][T31099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 542.343400][T31099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 542.416639][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 180 seconds [ 542.427928][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 180 seconds [ 542.439922][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 180 seconds [ 542.451408][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 180 seconds [ 542.628491][T31121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11593'. [ 542.670617][ T3501] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.683081][ T3501] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.686255][T31123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11595'. [ 542.692182][ T3501] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.773515][ T1039] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.793785][ T1039] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.802683][ T1039] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.906968][ T9732] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.915406][ T9732] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.944983][ T9732] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.987789][T31132] netlink: 788 bytes leftover after parsing attributes in process `syz.3.11597'. [ 543.006881][T31131] netlink: 'syz.4.11598': attribute type 1 has an invalid length. [ 543.044090][ T9732] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.054644][ T9732] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.071637][ T9732] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 543.130352][T31131] bond3: entered promiscuous mode [ 543.136103][T31131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.268145][T31137] bond3: (slave bridge6): making interface the new active one [ 543.276643][T31137] bridge6: entered promiscuous mode [ 543.287101][T31137] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 543.429222][T31142] netlink: 'syz.3.11601': attribute type 1 has an invalid length. [ 543.452779][T31142] netlink: 'syz.3.11601': attribute type 4 has an invalid length. [ 543.476685][T31142] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11601'. [ 543.781521][T31162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11611'. [ 544.286702][T31193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11625'. [ 544.448022][T31199] netlink: 'syz.4.11628': attribute type 12 has an invalid length. [ 544.638014][T31209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11631'. [ 544.816666][T31214] sctp: [Deprecated]: syz.2.11633 (pid 31214) Use of int in maxseg socket option. [ 544.816666][T31214] Use struct sctp_assoc_value instead [ 545.101055][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11637'. [ 545.211025][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11638'. [ 545.234229][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11638'. [ 545.352572][T31231] netlink: 'syz.4.11639': attribute type 11 has an invalid length. [ 545.378291][T31231] netlink: 'syz.4.11639': attribute type 11 has an invalid length. [ 545.710844][T31251] netlink: 'syz.3.11647': attribute type 1 has an invalid length. [ 546.094981][T31264] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 546.519765][T31273] lo speed is unknown, defaulting to 1000 [ 547.682087][T31290] lo speed is unknown, defaulting to 1000 [ 548.362216][T31314] __nla_validate_parse: 11 callbacks suppressed [ 548.362237][T31314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11666'. [ 548.378214][T31300] lo speed is unknown, defaulting to 1000 [ 549.805382][T31336] nbd: nbd1 already in use [ 549.813629][T31336] nbd: nbd1 already in use [ 550.051495][T31292] mpoa:mpoad_close: () going down [ 550.209250][T31350] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.11680:31350 [ 550.485329][T31367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11686'. [ 550.591359][T31372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11688'. [ 550.607658][T31367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11686'. [ 550.676599][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11689'. [ 550.798767][T31376] tipc: Failed to remove unknown binding: 66,1,1/3758096386:4205005661/4205005663 [ 550.861509][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11691'. [ 550.897848][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11691'. [ 551.085793][T31385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.504034][T31406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11702'. [ 551.570426][T31410] ip6tnl0: Caught tx_queue_len zero misconfig [ 551.570513][T31409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11704'. [ 551.618708][T31410] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.11703'. [ 552.608378][T31443] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.497788][T31479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.522692][T31479] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 553.525009][T31487] __nla_validate_parse: 2 callbacks suppressed [ 553.525027][T31487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11732'. [ 553.817264][T31501] netlink: 'syz.3.11737': attribute type 4 has an invalid length. [ 553.840772][T31501] netlink: 'syz.3.11737': attribute type 4 has an invalid length. [ 554.565200][T31489] lo speed is unknown, defaulting to 1000 [ 555.259425][T31533] syzkaller1: entered promiscuous mode [ 555.265054][T31533] syzkaller1: entered allmulticast mode [ 555.429276][T31544] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11752'. [ 555.651233][T31554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11756'. [ 555.769760][T31559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11758'. [ 556.081102][T31573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11764'. [ 556.157764][T31576] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 556.574758][T31597] syzkaller1: entered promiscuous mode [ 556.590348][T31597] syzkaller1: entered allmulticast mode [ 556.864602][T31608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11776'. [ 557.232209][T31624] syzkaller1: entered promiscuous mode [ 557.237858][T31624] syzkaller1: entered allmulticast mode [ 557.330970][T31634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 557.633820][T31649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11790'. [ 557.886716][T31663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11794'. [ 558.015084][T31663] netlink: 'syz.4.11794': attribute type 1 has an invalid length. [ 559.165798][T31710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11816'. [ 559.499110][T31725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11823'. [ 559.604072][T31726] syzkaller0: entered promiscuous mode [ 559.622366][T31726] syzkaller0: entered allmulticast mode [ 559.700072][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11826'. [ 560.219888][T31751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11832'. [ 561.919747][T31751] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 562.044195][T31776] nbd: nbd0 already in use [ 562.089177][T31778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11839'. [ 562.101064][T31776] block nbd0: NBD_DISCONNECT [ 562.102800][T31782] batadv_slave_0: entered promiscuous mode [ 562.111848][T31776] block nbd0: Send disconnect failed -32 [ 562.133917][T31781] batadv_slave_0: left promiscuous mode [ 562.141872][T31776] block nbd0: shutting down sockets [ 562.144608][T31778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11839'. [ 562.579913][T31807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11851'. [ 562.592701][T31806] GUP no longer grows the stack in syz.4.11852 (31806): 200000006000-200000008000 (200000005000) [ 562.606999][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11851'. [ 562.626163][T31806] CPU: 1 UID: 0 PID: 31806 Comm: syz.4.11852 Not tainted syzkaller #0 PREEMPT(full) [ 562.626191][T31806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 562.626205][T31806] Call Trace: [ 562.626212][T31806] [ 562.626220][T31806] dump_stack_lvl+0x189/0x250 [ 562.626250][T31806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.626270][T31806] ? __pfx__printk+0x10/0x10 [ 562.626290][T31806] ? find_vma+0xe7/0x160 [ 562.626329][T31806] __get_user_pages+0x24d0/0x2ce0 [ 562.626348][T31806] ? __lock_acquire+0xab9/0xd20 [ 562.626399][T31806] ? __gup_longterm_locked+0xc68/0x1660 [ 562.626428][T31806] __gup_longterm_locked+0xde9/0x1660 [ 562.626452][T31806] ? irqentry_exit+0x74/0x90 [ 562.626470][T31806] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.626496][T31806] ? sanity_check_pinned_pages+0x123a/0x1300 [ 562.626528][T31806] gup_fast_fallback+0x1e6a/0x2010 [ 562.626596][T31806] ? __pfx_gup_fast_fallback+0x10/0x10 [ 562.626623][T31806] ? __lock_acquire+0xab9/0xd20 [ 562.626655][T31806] ? pin_user_pages_fast+0x4d/0xb0 [ 562.626680][T31806] iov_iter_extract_pages+0x35a/0x5e0 [ 562.626713][T31806] extract_iter_to_sg+0xe46/0x24e0 [ 562.626750][T31806] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 562.626770][T31806] ? __local_bh_enable_ip+0x12d/0x1c0 [ 562.626789][T31806] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.626808][T31806] ? __local_bh_enable_ip+0x12d/0x1c0 [ 562.626824][T31806] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 562.626848][T31806] ? __asan_memset+0x22/0x50 [ 562.626870][T31806] hash_sendmsg+0x4f4/0x11d0 [ 562.626918][T31806] ? __pfx_hash_sendmsg+0x10/0x10 [ 562.626942][T31806] __sock_sendmsg+0x219/0x270 [ 562.626972][T31806] ____sys_sendmsg+0x52d/0x830 [ 562.627000][T31806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.627033][T31806] ? import_iovec+0x74/0xa0 [ 562.627058][T31806] ___sys_sendmsg+0x21f/0x2a0 [ 562.627081][T31806] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.627141][T31806] ? __fget_files+0x2a/0x420 [ 562.627154][T31806] ? __fget_files+0x3a0/0x420 [ 562.627181][T31806] __sys_sendmmsg+0x227/0x430 [ 562.627208][T31806] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.627224][T31806] ? do_futex+0x395/0x420 [ 562.627252][T31806] ? fd_install+0x97/0x540 [ 562.627294][T31806] ? rcu_is_watching+0x15/0xb0 [ 562.627319][T31806] __x64_sys_sendmmsg+0xa0/0xc0 [ 562.627340][T31806] do_syscall_64+0xfa/0x3b0 [ 562.627357][T31806] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.627374][T31806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.627390][T31806] ? clear_bhb_loop+0x60/0xb0 [ 562.627413][T31806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.627439][T31806] RIP: 0033:0x7fd59298eec9 [ 562.627457][T31806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.627473][T31806] RSP: 002b:00007fd593877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.627494][T31806] RAX: ffffffffffffffda RBX: 00007fd592be5fa0 RCX: 00007fd59298eec9 [ 562.627508][T31806] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 562.627520][T31806] RBP: 00007fd592a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 562.627531][T31806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.627542][T31806] R13: 00007fd592be6038 R14: 00007fd592be5fa0 R15: 00007ffeaccc0d98 [ 562.627581][T31806] [ 562.980852][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.990523][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.109373][T31810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11854'. [ 563.204957][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11857'. [ 563.308558][T31800] netlink: 'syz.3.11848': attribute type 13 has an invalid length. [ 563.316738][T31800] netlink: 'syz.3.11848': attribute type 17 has an invalid length. [ 563.339066][T31800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.612823][T31833] sctp: [Deprecated]: syz.4.11861 (pid 31833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.612823][T31833] Use struct sctp_sack_info instead [ 563.748197][T31839] netlink: 'syz.4.11866': attribute type 1 has an invalid length. [ 563.864407][T31839] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.871823][T31798] lo speed is unknown, defaulting to 1000 [ 564.320631][T31869] __nla_validate_parse: 1 callbacks suppressed [ 564.320651][T31869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11878'. [ 564.821499][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 180 seconds [ 564.832874][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 180 seconds [ 564.844308][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 180 seconds [ 564.856400][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 180 seconds [ 565.282668][T31896] vlan0: entered allmulticast mode [ 565.427880][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11895'. [ 565.759053][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11898'. [ 565.849921][T31937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11902'. [ 565.854815][T31935] tipc: Enabled bearer , priority 0 [ 565.921573][T31935] syzkaller0: entered promiscuous mode [ 565.927775][T31935] syzkaller0: entered allmulticast mode [ 565.933884][T31935] tipc: Resetting bearer [ 565.966993][T31933] tipc: Resetting bearer [ 567.941356][T31933] tipc: Disabling bearer [ 568.129920][ T5236] udevd[5236]: worker [22254] /devices/virtual/block/nbd2 timeout; kill it [ 568.145178][ T5236] udevd[5236]: seq 15367 '/devices/virtual/block/nbd2' killed [ 568.590439][T31971] lo speed is unknown, defaulting to 1000 [ 568.790718][T31994] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.11921'. [ 569.736885][T32004] nbd: must specify a device to reconfigure [ 571.704642][T32023] netlink: 'syz.2.11931': attribute type 1 has an invalid length. [ 571.723315][T32023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11931'. [ 571.779264][T32027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11934'. [ 571.828242][T32027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11934'. [ 571.904888][T32031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11935'. [ 571.932317][T31998] lo speed is unknown, defaulting to 1000 [ 572.516782][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 210 seconds [ 572.532736][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 210 seconds [ 572.543864][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 210 seconds [ 572.555460][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 210 seconds [ 572.925917][T32060] tipc: Enabled bearer , priority 0 [ 573.012056][T32061] syzkaller0: entered promiscuous mode [ 573.021538][T32061] syzkaller0: entered allmulticast mode [ 573.030286][T32061] tipc: Resetting bearer [ 573.177646][T32059] tipc: Resetting bearer [ 575.242751][T32059] tipc: Disabling bearer [ 575.452020][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11954'. [ 575.503454][T32086] netlink: 260 bytes leftover after parsing attributes in process `syz.4.11954'. [ 575.596014][T32090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11956'. [ 575.676726][T32097] tipc: Enabled bearer , priority 0 [ 575.743500][T32097] syzkaller0: entered promiscuous mode [ 575.753441][T32097] syzkaller0: entered allmulticast mode [ 575.768836][T32097] tipc: Resetting bearer [ 575.802827][T32095] tipc: Resetting bearer [ 576.022254][T32114] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11966'. [ 578.058843][T32095] tipc: Disabling bearer [ 578.096143][T32113] Bluetooth: hci4: command 0x0405 tx timeout [ 578.820789][T32157] syzkaller0: entered promiscuous mode [ 578.829406][T32157] syzkaller0: entered allmulticast mode [ 578.838906][T32150] lo speed is unknown, defaulting to 1000 [ 579.435347][T32179] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11990'. [ 579.526716][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11994'. [ 579.696244][T25645] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 580.031662][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11999'. [ 581.944970][T32235] bond0: (slave bond_slave_0): Releasing backup interface [ 581.972569][T32235] bond0: (slave bond_slave_1): Releasing backup interface [ 581.990061][T32235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.039122][T32235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.105183][T32235] bond4: (slave geneve3): Releasing active interface [ 582.143065][ T9730] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.161087][ T9730] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.192492][ T9730] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.212256][ T9730] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.228441][T32247] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 582.862627][T32279] syzkaller0: entered promiscuous mode [ 582.876660][T32279] syzkaller0: entered allmulticast mode [ 583.021431][T32290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12025'. [ 583.185017][T32298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12025'. [ 583.424968][T32306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12030'. [ 584.818463][T32297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12027'. [ 584.889428][T32299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12027'. [ 585.044574][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12032'. [ 585.172230][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12031'. [ 585.194778][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12031'. [ 585.203729][T32327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.162270][T32372] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12057'. [ 586.361388][T32392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12064'. [ 586.546596][ T3501] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 586.756694][ T3501] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 587.757443][T32420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12075'. [ 587.974488][T32410] veth0_to_team: left promiscuous mode [ 587.987792][T32410] veth0_to_team: left allmulticast mode [ 588.501847][T32410] tipc: Resetting bearer [ 588.778107][T32410] xfrm1: left allmulticast mode [ 588.806759][T32410] geneve2: left promiscuous mode [ 588.811768][T32410] geneve2: left allmulticast mode [ 588.959174][T32410] sit2: left promiscuous mode [ 588.964238][T32410] sit2: left allmulticast mode [ 589.070445][T32410] team1: left promiscuous mode [ 589.075392][T32410] team1: left allmulticast mode [ 589.081014][T32410] vlan3: left promiscuous mode [ 589.085951][T32410] hsr_slave_1: left promiscuous mode [ 589.091657][T32410] vlan3: left allmulticast mode [ 589.096913][T32410] hsr_slave_1: left allmulticast mode [ 589.195531][T32420] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 589.255027][ T1039] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.289158][ T1039] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.303407][ T1039] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.315976][ T1039] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.333773][ T1039] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.343151][ T1039] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.367939][ T1039] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.391907][ T1039] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.049633][T32499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12100'. [ 590.300077][T32511] bond0: (slave dummy0): Releasing backup interface [ 590.350954][T32511] batman_adv: batadv0: Adding interface: dummy0 [ 590.372893][T32511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.401044][T32511] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 590.419463][T32517] netlink: 'syz.3.12105': attribute type 4 has an invalid length. [ 590.439161][T32519] syzkaller0: entered promiscuous mode [ 590.440137][T32517] netlink: 'syz.3.12105': attribute type 4 has an invalid length. [ 590.444776][T32519] syzkaller0: entered allmulticast mode [ 590.564647][T32527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12110'. [ 590.660720][T32527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12110'. [ 590.734221][T32537] netlink: 'syz.3.12113': attribute type 1 has an invalid length. [ 590.807806][T32537] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.890944][T32542] bond9: (slave veth13): Enslaving as an active interface with a down link [ 590.910403][T32537] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 590.961200][T32537] bond9: (slave veth15): Enslaving as an active interface with a down link [ 591.821046][T32597] netlink: 'syz.2.12134': attribute type 1 has an invalid length. [ 592.022990][T32601] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.035938][T32601] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 592.047143][T32601] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 592.201603][T32597] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.233097][T32597] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 592.404971][T32610] syz.3.12136 uses old SIOCAX25GETINFO [ 593.399742][T32639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12146'. [ 593.562683][T32648] syzkaller1: entered promiscuous mode [ 593.569139][T32648] syzkaller1: entered allmulticast mode [ 593.598496][T32658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12152'. [ 594.911235][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 210 seconds [ 594.924836][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 210 seconds [ 594.950462][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 210 seconds [ 594.961753][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 210 seconds [ 595.856444][T19625] IPVS: ip_vs_send_async error -101 [ 596.184863][T32669] lo speed is unknown, defaulting to 1000 [ 596.732006][T32730] netlink: 'syz.1.12175': attribute type 10 has an invalid length. [ 596.758935][T32730] batadv0: left allmulticast mode [ 596.768600][T32730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.783843][T32730] batadv0: entered allmulticast mode [ 596.791898][T32730] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 596.851499][T32735] bond0: (slave batadv0): Releasing backup interface [ 596.871147][T32735] batadv0 (unregistering): left allmulticast mode [ 596.941306][T32736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'. [ 596.962235][T32736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'. [ 597.034637][T32738] ieee802154 phy0 wpan0: encryption failed: -126 [ 597.403530][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12185'. [ 597.439888][T32753] syzkaller0: entered allmulticast mode [ 597.458706][T32756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12186'. [ 598.219324][ T320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12195'. [ 598.749400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.793281][ T320] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 599.930894][ T329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12198'. [ 600.281760][ T349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12207'. [ 600.598093][ T359] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12208'. [ 600.740254][ T331] lec:lec_atm_close: lec0: Shut down! [ 600.959942][ T375] netlink: 'syz.3.12214': attribute type 1 has an invalid length. [ 601.126804][ T387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12214'. [ 601.169682][ T375] 8021q: adding VLAN 0 to HW filter on device bond11 [ 601.211704][ T375] bond10: (slave bond11): making interface the new active one [ 601.232874][ T375] bond10: (slave bond11): Enslaving as an active interface with an up link [ 601.362832][ T383] bond10: (slave gretap3): Enslaving as a backup interface with an up link [ 601.410894][ T387] 8021q: adding VLAN 0 to HW filter on device bond10 [ 601.701290][ T418] tipc: Enabling of bearer rejected, already enabled [ 601.724045][ T418] tipc: Enabling of bearer rejected, failed to enable media [ 602.215957][ T121] lec:lec_start_xmit: lec0:No lecd attached [ 602.575822][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 240 seconds [ 602.587582][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 240 seconds [ 602.599145][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 240 seconds [ 602.610498][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 240 seconds [ 602.883211][ T450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12229'. [ 603.021667][ T459] netlink: 'syz.1.12231': attribute type 39 has an invalid length. [ 603.136029][ T464] netlink: 'syz.2.12234': attribute type 9 has an invalid length. [ 603.332216][ T474] netlink: 'syz.0.12236': attribute type 1 has an invalid length. [ 603.411183][ T467] syzkaller0: entered promiscuous mode [ 603.417867][ T467] syzkaller0: entered allmulticast mode [ 603.469598][ T474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 603.502291][ T479] bond5: (slave gretap3): making interface the new active one [ 603.511133][ T479] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 604.878566][ T493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.635381][ T511] tipc: Enabled bearer , priority 0 [ 605.650087][ T511] syzkaller0: entered promiscuous mode [ 605.671475][ T511] syzkaller0: entered allmulticast mode [ 605.681403][ T515] netlink: 'syz.4.12247': attribute type 3 has an invalid length. [ 605.693939][ T515] netlink: 'syz.4.12247': attribute type 3 has an invalid length. [ 605.723844][ T511] tipc: Resetting bearer [ 605.753432][ T520] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 605.767526][ T509] tipc: Resetting bearer [ 605.843464][ T509] tipc: Disabling bearer [ 605.911372][ T527] batman_adv: batadv0: Removing interface: dummy0 [ 605.920088][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12254'. [ 606.043533][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12254'. [ 606.114892][ T535] netlink: 'syz.3.12257': attribute type 83 has an invalid length. [ 606.524209][ T555] netlink: 'syz.3.12261': attribute type 1 has an invalid length. [ 606.555837][ T555] netlink: 208 bytes leftover after parsing attributes in process `syz.3.12261'. [ 606.615535][ T560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12263'. [ 606.654657][ T560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12263'. [ 607.002094][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12264'. [ 607.036186][ T571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12265'. [ 607.052163][ T568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12264'. [ 607.069698][ T545] lo speed is unknown, defaulting to 1000 [ 607.077157][ T571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12265'. [ 607.361925][ T583] netlink: 'syz.0.12270': attribute type 1 has an invalid length. [ 607.472848][ T583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 607.555140][ T594] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 607.724063][ T597] 8021q: adding VLAN 0 to HW filter on device bond7 [ 607.760888][ T597] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 607.770374][T32447] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:dc5a:42ff:fe19:8ff6 error=-28 [ 607.779379][ T597] bond7: (slave macvlan0): Enslaving as a backup interface with a down link [ 608.379016][ T609] __nla_validate_parse: 2 callbacks suppressed [ 608.379035][ T609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12277'. [ 608.708919][ T628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12283'. [ 608.719780][ T628] netlink: 'syz.0.12283': attribute type 7 has an invalid length. [ 608.729586][ T628] netlink: 'syz.0.12283': attribute type 8 has an invalid length. [ 608.742001][ T628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12283'. [ 608.769410][ T628] ip6gretap0: entered promiscuous mode [ 608.784988][ T628] syz_tun: entered promiscuous mode [ 608.794446][ T628] gretap0: entered promiscuous mode [ 608.801486][ T628] gretap0: left promiscuous mode [ 608.810701][ T628] ip6gretap0: left promiscuous mode [ 608.820505][ T628] syz_tun: left promiscuous mode [ 609.198573][ T647] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 609.394652][ T638] lo speed is unknown, defaulting to 1000 [ 610.139683][ T669] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12298'. [ 611.136796][ T698] tipc: Started in network mode [ 611.141722][ T698] tipc: Node identity 2aa92f4185fd, cluster identity 1 [ 611.204054][ T698] tipc: Enabled bearer , priority 0 [ 611.343631][ T688] tipc: Resetting bearer [ 611.401340][ T705] syzkaller0: entered promiscuous mode [ 611.431361][ T705] syzkaller0: entered allmulticast mode [ 611.463744][ T702] syzkaller0: entered promiscuous mode [ 611.490475][ T702] syzkaller0: entered allmulticast mode [ 611.536430][ T687] tipc: Resetting bearer [ 611.587772][ T687] tipc: Disabling bearer [ 611.633598][ T727] syzkaller0: entered promiscuous mode [ 611.653866][ T727] syzkaller0: entered allmulticast mode [ 611.762279][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12313'. [ 611.811338][ T5531] eql: remember to turn off Van-Jacobson compression on your slave devices [ 611.851774][ T748] tipc: Enabled bearer , priority 0 [ 611.869043][ T751] bond0: (slave wlan1): Releasing backup interface [ 611.891810][ T751] bond2: (slave geneve3): Releasing active interface [ 611.943496][ T751] bond3: (slave bridge6): Releasing backup interface [ 611.974492][ T751] bridge6: left promiscuous mode [ 612.079641][ T752] syzkaller0: entered promiscuous mode [ 612.085240][ T752] syzkaller0: entered allmulticast mode [ 612.116907][ T3501] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.138532][ T748] tipc: Resetting bearer [ 612.175608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 612.184136][ C0] lec:lec_tx_timeout: lec0 [ 612.190209][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 612.201505][ T3501] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.249079][ T3501] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.302272][ T743] tipc: Resetting bearer [ 612.368501][ T743] tipc: Disabling bearer [ 612.452998][ T769] syzkaller0: entered promiscuous mode [ 612.459245][ T769] syzkaller0: entered allmulticast mode [ 612.472215][ T3501] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 612.554649][ T787] tipc: Enabled bearer , priority 0 [ 612.794121][ T805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12322'. [ 613.669988][T25645] tipc: Node number set to 2941529921 [ 614.546260][ T784] tipc: Resetting bearer [ 614.552543][ T791] syzkaller0: entered promiscuous mode [ 614.558991][ T791] syzkaller0: entered allmulticast mode [ 614.659002][ T776] tipc: Resetting bearer [ 614.690991][ T814] netlink: 'syz.1.12325': attribute type 1 has an invalid length. [ 614.716544][ T776] tipc: Disabling bearer [ 614.906245][ T814] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 614.916191][ T826] netlink: 'syz.3.12326': attribute type 1 has an invalid length. [ 615.030290][ T820] veth11: entered promiscuous mode [ 615.040754][ T820] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 615.092402][ T831] bond12 (unregistering): Released all slaves [ 615.203362][ T837] ip6tnl4: entered promiscuous mode [ 615.212835][ T837] ip6tnl4: entered allmulticast mode [ 615.266569][ T842] tipc: Enabled bearer , priority 0 [ 615.273794][ T846] syzkaller0: entered promiscuous mode [ 615.286165][ T846] syzkaller0: entered allmulticast mode [ 615.317824][ T839] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 615.347524][ T856] tipc: Enabled bearer , priority 0 [ 615.360305][ T850] syzkaller0: entered promiscuous mode [ 615.366660][ T850] syzkaller0: entered allmulticast mode [ 615.550396][ T832] tipc: Resetting bearer [ 615.570628][ T853] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 615.613270][ T863] tipc: Enabled bearer , priority 0 [ 615.638427][ T864] tipc: Resetting bearer [ 615.668624][ T829] tipc: Resetting bearer [ 615.701157][ T829] tipc: Disabling bearer [ 615.722113][ T871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12335'. [ 615.744003][ T865] syzkaller0: entered promiscuous mode [ 615.749801][ T865] syzkaller0: entered allmulticast mode [ 615.762984][ T847] tipc: Resetting bearer [ 615.816980][ T847] tipc: Disabling bearer [ 615.840416][ T861] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 616.009616][ T863] tipc: Resetting bearer [ 616.041109][ T858] tipc: Resetting bearer [ 616.132850][ T858] tipc: Disabling bearer [ 616.166559][ T880] tipc: Enabled bearer , priority 0 [ 616.176885][ T884] syzkaller0: entered promiscuous mode [ 616.191875][ T884] syzkaller0: entered allmulticast mode [ 616.235514][ T880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 616.280017][ T891] tipc: Enabled bearer , priority 0 [ 616.291374][ T892] tipc: Enabled bearer , priority 0 [ 616.302637][ T891] syzkaller0: entered promiscuous mode [ 616.309255][ T891] syzkaller0: entered allmulticast mode [ 616.329994][ T880] tipc: Resetting bearer [ 616.340650][ T892] syzkaller0: entered promiscuous mode [ 616.346503][ T892] syzkaller0: entered allmulticast mode [ 616.355515][ T891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 616.384348][ T879] tipc: Resetting bearer [ 616.418555][ T879] tipc: Disabling bearer [ 616.500628][ T901] tipc: Resetting bearer [ 616.524988][ T892] tipc: Resetting bearer [ 616.580227][ T888] tipc: Resetting bearer [ 616.629335][ T888] tipc: Disabling bearer [ 616.644800][ T890] tipc: Resetting bearer [ 616.671896][ T890] tipc: Disabling bearer [ 616.758323][ T920] tipc: Enabled bearer , priority 0 [ 616.787488][ T908] syzkaller0: entered promiscuous mode [ 616.804317][ T908] syzkaller0: entered allmulticast mode [ 616.847007][ T908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 616.942650][ T908] tipc: Resetting bearer [ 616.981740][ T907] tipc: Resetting bearer [ 617.118364][ T907] tipc: Disabling bearer [ 617.170726][ T943] tipc: Enabled bearer , priority 0 [ 617.193317][ T947] syzkaller0: entered promiscuous mode [ 617.199570][ T947] syzkaller0: entered allmulticast mode [ 617.340020][ T938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12348'. [ 617.382770][ T932] tipc: Resetting bearer [ 617.432747][ T931] tipc: Resetting bearer [ 617.581475][ T931] tipc: Disabling bearer [ 617.637151][ T963] tipc: Enabled bearer , priority 0 [ 617.647537][ T967] tipc: Enabled bearer , priority 0 [ 617.677822][ T963] syzkaller0: entered promiscuous mode [ 617.708420][ T963] syzkaller0: entered allmulticast mode [ 617.715950][ T967] syzkaller0: entered promiscuous mode [ 617.721450][ T967] syzkaller0: entered allmulticast mode [ 617.806854][ T978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12359'. [ 617.826279][ T978] openvswitch: netlink: Unknown nsh attribute 0 [ 617.844550][ T963] tipc: Resetting bearer [ 617.851115][ T978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.879275][ T967] tipc: Resetting bearer [ 617.908281][ T983] netlink: 'syz.2.12358': attribute type 10 has an invalid length. [ 617.927783][ T962] tipc: Resetting bearer [ 617.936708][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 617.944837][ C0] lec:lec_tx_timeout: lec0 [ 617.950686][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 617.971899][ T962] tipc: Disabling bearer [ 617.998971][ T966] tipc: Resetting bearer [ 618.057205][ T966] tipc: Disabling bearer [ 618.357076][ T1006] tipc: Enabled bearer , priority 0 [ 618.365282][ T1006] syzkaller0: entered promiscuous mode [ 618.374157][ T1009] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12365'. [ 618.391307][ T1006] syzkaller0: entered allmulticast mode [ 618.403508][ T1009] netlink: 'syz.2.12365': attribute type 1 has an invalid length. [ 618.432020][ T1009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12365'. [ 618.550658][ T1020] tipc: Resetting bearer [ 618.560269][ T1021] syzkaller0: entered promiscuous mode [ 618.573491][ T1021] syzkaller0: entered allmulticast mode [ 618.613592][ T1003] tipc: Resetting bearer [ 618.664401][ T1003] tipc: Disabling bearer [ 618.887350][ T1038] syzkaller0: entered promiscuous mode [ 618.894790][ T1038] syzkaller0: entered allmulticast mode [ 618.920646][ T1038] tipc: Enabled bearer , priority 0 [ 618.938722][ T1037] tipc: Enabled bearer , priority 0 [ 618.952874][ T1038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 619.001190][ T1045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'. [ 619.017671][ T1037] syzkaller0: entered promiscuous mode [ 619.023178][ T1037] syzkaller0: entered allmulticast mode [ 619.051770][ T1052] tipc: Resetting bearer [ 619.083234][ T1037] tipc: Resetting bearer [ 619.105045][ T1036] tipc: Resetting bearer [ 619.156372][ T1036] tipc: Disabling bearer [ 619.180072][ T1058] netlink: 'syz.4.12372': attribute type 10 has an invalid length. [ 619.209574][ T1034] tipc: Resetting bearer [ 619.247751][ T1060] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001 [ 619.272020][ T1034] tipc: Disabling bearer [ 619.419402][ T1058] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 619.521711][ T1048] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 619.544184][ T1076] tipc: Enabled bearer , priority 0 [ 619.558241][ T1076] syzkaller0: entered promiscuous mode [ 619.563970][ T1076] syzkaller0: entered allmulticast mode [ 619.695253][ T1076] tipc: Resetting bearer [ 619.717154][ T1075] tipc: Resetting bearer [ 619.761938][ T1075] tipc: Disabling bearer [ 619.806804][ T1092] tipc: Enabled bearer , priority 0 [ 619.817509][ T1092] syzkaller0: entered promiscuous mode [ 619.823015][ T1092] syzkaller0: entered allmulticast mode [ 619.972959][ T1092] tipc: Resetting bearer [ 620.006408][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.014990][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.093391][ T1106] netlink: 'syz.3.12387': attribute type 10 has an invalid length. [ 620.118432][ T1090] tipc: Resetting bearer [ 620.232504][ T1090] tipc: Disabling bearer [ 620.267645][ T1106] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 620.289945][ T1110] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 620.598610][ T1126] tipc: Enabled bearer , priority 0 [ 620.638111][ T1126] syzkaller0: entered promiscuous mode [ 620.643708][ T1126] syzkaller0: entered allmulticast mode [ 620.729977][ T1126] tipc: Resetting bearer [ 620.767653][ T1125] tipc: Resetting bearer [ 620.822857][ T1125] tipc: Disabling bearer [ 620.867568][ T1140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12395'. [ 621.222807][ T1133] lo speed is unknown, defaulting to 1000 [ 621.273913][ T1157] tipc: Enabled bearer , priority 0 [ 621.337156][ T1158] syzkaller0: entered promiscuous mode [ 621.342668][ T1158] syzkaller0: entered allmulticast mode [ 621.502714][ T1157] tipc: Resetting bearer [ 621.549086][ T1156] tipc: Resetting bearer [ 621.662631][ T1156] tipc: Disabling bearer [ 621.871726][ T1179] netlink: 'syz.2.12406': attribute type 1 has an invalid length. [ 621.937432][ T1182] tipc: Enabled bearer , priority 0 [ 621.966729][ T1182] syzkaller0: entered promiscuous mode [ 621.975696][ T1182] syzkaller0: entered allmulticast mode [ 622.036407][ T1182] tipc: Resetting bearer [ 622.114152][ T1181] tipc: Resetting bearer [ 622.159570][ T1181] tipc: Disabling bearer [ 622.270973][ T1190] tipc: Enabled bearer , priority 0 [ 622.289657][ T1198] syzkaller0: entered promiscuous mode [ 622.332966][ T1198] syzkaller0: entered allmulticast mode [ 622.403890][ T1190] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12410'. [ 622.454473][ T1190] tipc: Resetting bearer [ 622.520864][ T1189] tipc: Resetting bearer [ 622.599615][ T1189] tipc: Disabling bearer [ 622.965677][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 622.973740][ C0] lec:lec_tx_timeout: lec0 [ 622.980171][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 623.033691][ T1236] syz.0.12423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 623.058896][ T1236] CPU: 0 UID: 0 PID: 1236 Comm: syz.0.12423 Not tainted syzkaller #0 PREEMPT(full) [ 623.058926][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.058937][ T1236] Call Trace: [ 623.058945][ T1236] [ 623.058954][ T1236] dump_stack_lvl+0x189/0x250 [ 623.058986][ T1236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.059007][ T1236] ? __pfx__printk+0x10/0x10 [ 623.059031][ T1236] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 623.059053][ T1236] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 623.059076][ T1236] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 623.059099][ T1236] warn_alloc+0x214/0x310 [ 623.059126][ T1236] ? stack_depot_save_flags+0x40/0x860 [ 623.059153][ T1236] ? __pfx_warn_alloc+0x10/0x10 [ 623.059180][ T1236] ? kasan_save_track+0x4f/0x80 [ 623.059203][ T1236] ? xskq_create+0x56/0x170 [ 623.059219][ T1236] ? xsk_init_queue+0xb0/0x110 [ 623.059233][ T1236] ? xsk_setsockopt+0x4dc/0x8d0 [ 623.059255][ T1236] ? do_sock_setsockopt+0x17c/0x1b0 [ 623.059274][ T1236] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 623.059292][ T1236] ? do_syscall_64+0xfa/0x3b0 [ 623.059310][ T1236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.059338][ T1236] __vmalloc_node_range_noprof+0x125/0x12f0 [ 623.059395][ T1236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 623.059430][ T1236] ? __kmalloc_cache_noprof+0x30a/0x3d0 [ 623.059456][ T1236] ? __kasan_kmalloc+0x93/0xb0 [ 623.059483][ T1236] vmalloc_user_noprof+0xad/0xf0 [ 623.059507][ T1236] ? xskq_create+0xbf/0x170 [ 623.059526][ T1236] xskq_create+0xbf/0x170 [ 623.059547][ T1236] xsk_init_queue+0xb0/0x110 [ 623.059568][ T1236] xsk_setsockopt+0x4dc/0x8d0 [ 623.059595][ T1236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 623.059619][ T1236] ? __pfx_aa_sk_perm+0x10/0x10 [ 623.059647][ T1236] ? aa_sock_opt_perm+0xff/0x1b0 [ 623.059668][ T1236] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 623.059686][ T1236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 623.059713][ T1236] do_sock_setsockopt+0x17c/0x1b0 [ 623.059739][ T1236] __x64_sys_setsockopt+0x13f/0x1b0 [ 623.059767][ T1236] do_syscall_64+0xfa/0x3b0 [ 623.059785][ T1236] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.059804][ T1236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.059821][ T1236] ? clear_bhb_loop+0x60/0xb0 [ 623.059842][ T1236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.059859][ T1236] RIP: 0033:0x7f1d5958eec9 [ 623.059878][ T1236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.059893][ T1236] RSP: 002b:00007f1d5a359038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.059913][ T1236] RAX: ffffffffffffffda RBX: 00007f1d597e5fa0 RCX: 00007f1d5958eec9 [ 623.059926][ T1236] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 623.059937][ T1236] RBP: 00007f1d59611f91 R08: 0000000000000004 R09: 0000000000000000 [ 623.059948][ T1236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.059960][ T1236] R13: 00007f1d597e6038 R14: 00007f1d597e5fa0 R15: 00007fffd650ec88 [ 623.059991][ T1236] [ 623.060012][ T1236] Mem-Info: [ 623.335354][ T1241] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12423'. [ 623.385967][ T1236] active_anon:6294 inactive_anon:0 isolated_anon:0 [ 623.385967][ T1236] active_file:3078 inactive_file:40095 isolated_file:0 [ 623.385967][ T1236] unevictable:768 dirty:354 writeback:0 [ 623.385967][ T1236] slab_reclaimable:12195 slab_unreclaimable:116363 [ 623.385967][ T1236] mapped:29358 shmem:1361 pagetables:1370 [ 623.385967][ T1236] sec_pagetables:0 bounce:0 [ 623.385967][ T1236] kernel_misc_reclaimable:0 [ 623.385967][ T1236] free:1303161 free_pcp:12494 free_cma:0 [ 623.553450][ T1236] Node 0 active_anon:25076kB inactive_anon:0kB active_file:12312kB inactive_file:160180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121532kB dirty:1412kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13348kB pagetables:4952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 623.682793][ T1236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 623.721326][ T1236] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.758328][ T1261] netlink: 'syz.4.12432': attribute type 3 has an invalid length. [ 623.791465][ T1261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12432'. [ 623.820183][ T1236] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 623.853790][ T1236] Node 0 DMA32 free:1303768kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24932kB inactive_anon:0kB active_file:12312kB inactive_file:158600kB unevictable:1536kB writepending:1412kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:40488kB local_pcp:18444kB free_cma:0kB [ 623.895798][ T1236] lowmem_reserve[]: 0 0 1 1 1 [ 623.910788][ T1236] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 623.979100][ T1236] lowmem_reserve[]: 0 0 0 0 0 [ 623.987255][ T1236] Node 1 Normal free:3893656kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10528kB local_pcp:4928kB free_cma:0kB [ 624.042169][ T1236] lowmem_reserve[]: 0 0 0 0 0 [ 624.063149][ T1236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 624.081157][ T1236] Node 0 DMA32: 731*4kB (UM) 345*8kB (UME) 223*16kB (UME) 114*32kB (UME) 88*64kB (UME) 230*128kB (UME) 90*256kB (UM) 14*512kB (UME) 2*1024kB (M) 10*2048kB (UME) 294*4096kB (UM) = 1304932kB [ 624.107241][ T1236] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 624.123117][ T1236] Node 1 Normal: 188*4kB (UM) 47*8kB (UME) 41*16kB (UME) 205*32kB (UME) 68*64kB (UME) 20*128kB (UME) 4*256kB (ME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3893656kB [ 624.167216][ T1236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.181738][ T1236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.200766][ T1236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.210777][ T1236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 624.249065][ T1236] 44530 total pagecache pages [ 624.254533][ T1236] 0 pages in swap cache [ 624.268997][ T1236] Free swap = 124996kB [ 624.289736][ T1236] Total swap = 124996kB [ 624.299933][ T1236] 2097051 pages RAM [ 624.308520][ T1236] 0 pages HighMem/MovableOnly [ 624.313292][ T1236] 425672 pages reserved [ 624.320687][ T1236] 0 pages cma reserved [ 624.344205][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.359353][ T1304] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 624.551121][ T1307] syzkaller0: entered promiscuous mode [ 624.557041][ T1307] syzkaller0: entered allmulticast mode [ 624.565643][ T1307] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 624.728794][ T1311] netlink: 'syz.2.12451': attribute type 8 has an invalid length. [ 624.976496][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 240 seconds [ 624.988458][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 240 seconds [ 624.999683][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 240 seconds [ 625.011333][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 240 seconds [ 625.508356][ T1339] tipc: Enabled bearer , priority 0 [ 625.529135][ T1339] syzkaller0: entered promiscuous mode [ 625.534653][ T1339] syzkaller0: entered allmulticast mode [ 625.561131][ T1339] tipc: Resetting bearer [ 625.596211][ T1336] tipc: Resetting bearer [ 625.641450][ T1336] tipc: Disabling bearer [ 626.001479][ T1365] tipc: Enabled bearer , priority 0 [ 626.057363][ T1371] syzkaller0: entered promiscuous mode [ 626.062872][ T1371] syzkaller0: entered allmulticast mode [ 626.090648][ T1365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 626.213378][ T1371] tipc: Resetting bearer [ 626.272780][ T1364] tipc: Resetting bearer [ 626.306961][ T1364] tipc: Disabling bearer [ 626.425211][ T5886] Bluetooth: hci4: command 0x0405 tx timeout [ 626.878492][ T5886] Bluetooth: hci4: link tx timeout [ 626.880370][ T1411] tipc: Enabled bearer , priority 0 [ 626.883650][ T5886] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 626.927519][ T1411] syzkaller0: entered promiscuous mode [ 626.943020][ T1411] syzkaller0: entered allmulticast mode [ 626.990726][ T1411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 627.048457][ T1417] tipc: Resetting bearer [ 627.085214][ T1410] tipc: Resetting bearer [ 627.111340][ T1410] tipc: Disabling bearer [ 627.995582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 628.003665][ C0] lec:lec_tx_timeout: lec0 [ 628.008771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 628.895947][ T5886] Bluetooth: hci4: command 0x0405 tx timeout [ 629.464191][ T1538] netlink: 332 bytes leftover after parsing attributes in process `syz.0.12541'. [ 630.594412][ T1581] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 630.712828][ T1581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.724574][ T1581] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.754190][ T1581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.837168][ T121] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.056102][ T121] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.176321][T32447] tipc: Subscription rejected, illegal request [ 631.537427][ T9728] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.753102][ T1603] lec:lec_atm_close: lec0: Shut down! [ 632.065190][ T1626] tipc: Enabled bearer , priority 0 [ 632.100540][ T1626] syzkaller0: entered promiscuous mode [ 632.106398][ T1626] syzkaller0: entered allmulticast mode [ 632.118379][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12574'. [ 632.131340][ T1626] tipc: Resetting bearer [ 632.138904][ T1622] tipc: Resetting bearer [ 632.166049][ T1629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12574'. [ 632.284802][ T1622] tipc: Disabling bearer [ 632.577715][ T1039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 632.613666][ T1039] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 632.656756][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 270 seconds [ 632.668076][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 270 seconds [ 632.679892][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 270 seconds [ 632.691712][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 270 seconds [ 632.832214][ T1650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12584'. [ 632.966599][T25645] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 633.419812][ T1679] tipc: Enabled bearer , priority 0 [ 633.444517][ T1679] syzkaller0: entered promiscuous mode [ 633.462921][ T1679] syzkaller0: entered allmulticast mode [ 633.529035][ T1679] tipc: Resetting bearer [ 633.541365][ T1678] tipc: Resetting bearer [ 633.651972][ T1678] tipc: Disabling bearer [ 634.167276][ T1461] Set syz1 is full, maxelem 65536 reached [ 634.580183][ T1745] tipc: Enabled bearer , priority 0 [ 634.588545][ T1745] syzkaller0: entered promiscuous mode [ 634.594201][ T1745] syzkaller0: entered allmulticast mode [ 634.609152][ T1745] tipc: Resetting bearer [ 634.618521][ T1744] tipc: Resetting bearer [ 634.664645][ T1744] tipc: Disabling bearer [ 635.053552][ T1765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12623'. [ 635.232586][ T1774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12625'. [ 635.394937][ T1779] tipc: Enabled bearer , priority 0 [ 635.404020][ T1779] syzkaller0: entered promiscuous mode [ 635.422539][ T1779] syzkaller0: entered allmulticast mode [ 635.432508][ T1779] tipc: Resetting bearer [ 635.479052][ T1785] netlink: 'syz.0.12631': attribute type 3 has an invalid length. [ 635.491626][ T1784] netlink: 'syz.1.12630': attribute type 3 has an invalid length. [ 635.499854][ T1784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12630'. [ 635.585119][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12632'. [ 635.926174][ T1776] tipc: Resetting bearer [ 635.954149][ T1776] tipc: Disabling bearer [ 636.416935][ T1823] bond0: Caught tx_queue_len zero misconfig [ 636.595181][ T1832] netlink: 'syz.4.12646': attribute type 3 has an invalid length. [ 636.604487][ T1832] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12646'. [ 636.806593][ T1846] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12647'. [ 636.895638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 636.903706][ C0] lec:lec_tx_timeout: lec0 [ 636.908426][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 636.975905][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 637.328344][ T1869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.351515][ T1881] netlink: 'syz.2.12662': attribute type 3 has an invalid length. [ 637.353720][ T1869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.374535][ T1881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12662'. [ 637.491312][ T1869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.502136][ T1869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.523889][ T1869] veth1_macvtap: left promiscuous mode [ 637.549099][ T1869] veth1_macvtap: entered promiscuous mode [ 637.591667][ T1869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.647987][ T1869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 637.672115][ T1869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.679376][ T1898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12668'. [ 637.715498][ T1869] gretap0: entered promiscuous mode [ 637.858822][ T1869] erspan0: entered promiscuous mode [ 638.000609][ T3501] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.021326][ T3501] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.107762][ T3501] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.196630][ T3501] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.451380][ T1923] syzkaller1: entered promiscuous mode [ 638.486096][ T1923] syzkaller1: entered allmulticast mode [ 638.951382][ T1956] tipc: Enabled bearer , priority 0 [ 638.966722][ T1956] syzkaller0: entered promiscuous mode [ 638.984228][ T1956] syzkaller0: entered allmulticast mode [ 639.024093][ T1956] tipc: Resetting bearer [ 639.061789][ T1953] tipc: Resetting bearer [ 639.114668][ T1953] tipc: Disabling bearer [ 639.599211][ T2004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12703'. [ 639.612367][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12704'. [ 639.721103][ T2010] 0ªî{X¹¦: renamed from gretap0 [ 639.744413][ T2010] 0ªî{X¹¦: entered allmulticast mode [ 639.762483][ T2010] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 639.881434][ T2015] tipc: Enabled bearer , priority 0 [ 639.891381][ T2015] syzkaller0: entered promiscuous mode [ 639.899381][ T2015] syzkaller0: entered allmulticast mode [ 639.922209][ T2012] tipc: Resetting bearer [ 639.961187][ T2012] tipc: Disabling bearer [ 640.671729][ T2054] __nla_validate_parse: 2 callbacks suppressed [ 640.671751][ T2054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12721'. [ 640.753888][ T2054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.770702][ T2058] vlan2: entered allmulticast mode [ 640.776069][ T2058] bond5: entered allmulticast mode [ 640.817212][ T2059] netlink: 'syz.0.12723': attribute type 29 has an invalid length. [ 640.821093][ T2064] sctp: [Deprecated]: syz.1.12725 (pid 2064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.821093][ T2064] Use struct sctp_sack_info instead [ 640.831331][ T2062] netlink: 'syz.0.12723': attribute type 29 has an invalid length. [ 640.875002][ T2059] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12723'. [ 641.017473][ T2076] tipc: Enabled bearer , priority 0 [ 641.025169][ T2076] syzkaller0: entered promiscuous mode [ 641.030932][ T2076] syzkaller0: entered allmulticast mode [ 641.080882][ T2072] tipc: Resetting bearer [ 641.121969][ T2072] tipc: Disabling bearer [ 641.202349][ T2086] netlink: 'syz.2.12731': attribute type 12 has an invalid length. [ 641.225876][ T2086] netlink: 'syz.2.12731': attribute type 29 has an invalid length. [ 641.233972][ T2086] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12731'. [ 641.259185][ T2086] netlink: 'syz.2.12731': attribute type 1 has an invalid length. [ 641.601221][ T2112] bond0: Caught tx_queue_len zero misconfig [ 641.624478][ T2110] tipc: Enabled bearer , priority 0 [ 641.632915][ T2110] syzkaller0: entered promiscuous mode [ 641.641715][ T2110] syzkaller0: entered allmulticast mode [ 641.701927][ T2109] tipc: Resetting bearer [ 641.734889][ T2109] tipc: Disabling bearer [ 641.743750][ T2116] lo: entered allmulticast mode [ 641.915596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 641.923654][ C0] lec:lec_tx_timeout: lec0 [ 641.928716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 641.982586][ T2130] tipc: Enabled bearer , priority 0 [ 641.995266][ T2130] syzkaller0: entered promiscuous mode [ 642.003861][ T2130] syzkaller0: entered allmulticast mode [ 642.038178][ T2129] tipc: Resetting bearer [ 642.054372][ T2135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12752'. [ 642.139006][ T2129] tipc: Disabling bearer [ 642.299005][ T2148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12757'. [ 642.380383][ T2152] tipc: Enabled bearer , priority 0 [ 642.391161][ T2152] syzkaller0: entered promiscuous mode [ 642.399234][ T2152] syzkaller0: entered allmulticast mode [ 642.443528][ T2154] tipc: Enabled bearer , priority 0 [ 642.454131][ T2151] tipc: Resetting bearer [ 642.484771][ T2151] tipc: Disabling bearer [ 642.499995][ T2154] syzkaller0: entered promiscuous mode [ 642.512927][ T2154] syzkaller0: entered allmulticast mode [ 642.558712][ T2153] tipc: Resetting bearer [ 642.627446][ T2153] tipc: Disabling bearer [ 642.678445][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.690468][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.700230][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.711330][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.719790][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.754837][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.769681][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.778226][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.790227][ T2166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.834371][ T2174] tipc: Enabled bearer , priority 0 [ 642.858448][ T2174] syzkaller0: entered promiscuous mode [ 642.863955][ T2174] syzkaller0: entered allmulticast mode [ 643.017008][ T2172] tipc: Resetting bearer [ 643.125508][ T2172] tipc: Disabling bearer [ 643.432087][ T2209] syzkaller1: entered promiscuous mode [ 643.440055][ T2209] syzkaller1: entered allmulticast mode [ 643.613213][ T2215] tipc: Enabled bearer , priority 0 [ 643.631486][ T2215] tipc: Resetting bearer [ 643.667794][ T2214] tipc: Disabling bearer [ 644.059158][ T2248] tipc: Enabled bearer , priority 0 [ 644.069453][ T2248] tipc: Resetting bearer [ 644.089242][ T2246] tipc: Disabling bearer [ 644.226196][ T2257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12801'. [ 644.281925][ T2260] tipc: Enabled bearer , priority 0 [ 644.289883][ T2260] syzkaller0: entered promiscuous mode [ 644.295392][ T2260] syzkaller0: entered allmulticast mode [ 644.306820][ T2260] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 644.325036][ T2259] tipc: Resetting bearer [ 644.354074][ T2259] tipc: Disabling bearer [ 645.191942][ T2306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12820'. [ 645.209304][ T2306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12820'. [ 645.222300][ T2305] net_ratelimit: 1014 callbacks suppressed [ 645.222320][ T2305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.533027][ T2318] tipc: Enabled bearer , priority 0 [ 645.670453][ T2327] tipc: Resetting bearer [ 645.749103][ T2316] tipc: Disabling bearer [ 645.819324][ T2332] tipc: Enabled bearer , priority 0 [ 645.846990][ T2332] syzkaller0: entered promiscuous mode [ 645.852496][ T2332] syzkaller0: entered allmulticast mode [ 645.879558][ T2332] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 645.963966][ T2331] tipc: Resetting bearer [ 646.001461][ T2331] tipc: Disabling bearer [ 646.023192][ T2347] syzkaller1: entered promiscuous mode [ 646.038414][ T2347] syzkaller1: entered allmulticast mode [ 646.057064][ T2346] tipc: Enabled bearer , priority 0 [ 646.073750][ T2346] tipc: Resetting bearer [ 646.095782][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.124185][ T2343] tipc: Disabling bearer [ 646.160734][ T2350] tipc: Enabled bearer , priority 0 [ 646.176822][ T2350] syzkaller0: entered promiscuous mode [ 646.182335][ T2350] syzkaller0: entered allmulticast mode [ 646.241471][ T2349] tipc: Resetting bearer [ 646.353104][ T2349] tipc: Disabling bearer [ 646.482681][ T2337] lec:lec_atm_close: lec0: Shut down! [ 646.586652][ T2372] tipc: Enabled bearer , priority 0 [ 646.620691][ T2372] tipc: Resetting bearer [ 646.658168][ T2370] tipc: Disabling bearer [ 646.873552][ T2388] tipc: Enabled bearer , priority 0 [ 646.890601][ T2388] tipc: Resetting bearer [ 646.921867][ T2386] tipc: Disabling bearer [ 647.321386][ T2389] lo speed is unknown, defaulting to 1000 [ 647.947660][ T2432] tipc: Enabled bearer , priority 0 [ 647.979465][ T2432] tipc: Resetting bearer [ 647.999884][ T2406] lec:lec_atm_close: lec0: Shut down! [ 648.030117][ T2431] tipc: Disabling bearer [ 648.069300][ T2440] tls_set_device_offload: netdev not found [ 648.523004][ T2465] syzkaller0: entered promiscuous mode [ 648.541363][ T2465] syzkaller0: entered allmulticast mode [ 648.812206][ T2480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12882'. [ 648.863680][ T2482] netlink: 'syz.3.12883': attribute type 9 has an invalid length. [ 648.872354][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12883'. [ 648.901741][ T2482] netlink: 'syz.3.12883': attribute type 9 has an invalid length. [ 648.920067][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12883'. [ 648.971687][ T2484] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 649.310645][ T2504] netlink: 'syz.0.12892': attribute type 3 has an invalid length. [ 649.334734][ T2504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12892'. [ 649.351384][ T2506] netlink: 'syz.4.12893': attribute type 19 has an invalid length. [ 649.361314][ T2506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12893'. [ 649.478322][ T2506] netlink: 'syz.4.12893': attribute type 19 has an invalid length. [ 649.494920][ T2506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12893'. [ 649.813659][ T2532] syzkaller0: entered promiscuous mode [ 649.839347][ T2532] syzkaller0: entered allmulticast mode [ 650.049079][ T2547] team0: Caught tx_queue_len zero misconfig [ 650.172329][ T9728] nci: nci_rx_work: unknown MT 0x1 [ 650.242096][ T2548] syzkaller1: left promiscuous mode [ 650.247679][ T2548] syzkaller1: left allmulticast mode [ 650.459273][ T2580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12913'. [ 650.469270][ T2580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12913'. [ 650.802792][ T2583] lo speed is unknown, defaulting to 1000 [ 651.495322][ T9728] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 651.591324][ T9728] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 652.418633][ T2682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.822848][ T3501] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 653.016315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 653.024431][ C0] lec:lec_tx_timeout: lec0 [ 653.029519][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 653.545849][ T2739] syzkaller0: entered promiscuous mode [ 653.551484][ T2739] syzkaller0: entered allmulticast mode [ 653.799165][ T2746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12957'. [ 654.074186][ T2778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12965'. [ 654.197368][ T2780] ip6gre3: entered allmulticast mode [ 654.573222][ T2805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12977'. [ 654.769428][ T2824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12982'. [ 654.855860][ T2829] syzkaller0: entered promiscuous mode [ 654.868122][ T2829] syzkaller0: entered allmulticast mode [ 655.033567][ T2845] syzkaller0: entered promiscuous mode [ 655.043877][ T2845] syzkaller0: entered allmulticast mode [ 655.056497][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 270 seconds [ 655.067648][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 270 seconds [ 655.079404][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 270 seconds [ 655.090797][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 270 seconds [ 655.192784][ T2857] netlink: 'syz.4.12992': attribute type 29 has an invalid length. [ 655.221833][ T2857] netlink: 'syz.4.12992': attribute type 29 has an invalid length. [ 655.257704][ T2857] netlink: 500 bytes leftover after parsing attributes in process `syz.4.12992'. [ 655.274554][ T2862] netlink: 'syz.2.12993': attribute type 1 has an invalid length. [ 655.283655][ T2862] netlink: 'syz.2.12993': attribute type 2 has an invalid length. [ 655.651283][ T2886] syzkaller0: entered promiscuous mode [ 655.664780][ T2886] syzkaller0: entered allmulticast mode [ 655.800527][ T2892] syzkaller0: entered promiscuous mode [ 655.807713][ T2892] syzkaller0: entered allmulticast mode [ 656.055161][ T2900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 656.110459][ T2909] IPVS: sed: FWM 3 0x00000003 - no destination available [ 656.302408][ T2922] syzkaller0: entered promiscuous mode [ 656.309570][ T2922] syzkaller0: entered allmulticast mode [ 656.513599][ T2935] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 656.707286][ T2949] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 656.804137][ T2952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13026'. [ 656.813428][ T2952] dummy0: left allmulticast mode [ 656.849281][ T2952] bridge0: port 3(dummy0) entered disabled state [ 656.960265][ T2952] bridge_slave_1: left allmulticast mode [ 656.971716][ T2952] bridge_slave_1: left promiscuous mode [ 656.989062][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.018393][ T2952] bridge_slave_0: left allmulticast mode [ 657.036468][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.323454][ T2961] macvtap0: entered promiscuous mode [ 657.347192][ T2961] vlan0: entered promiscuous mode [ 657.352933][ T2961] macvtap0: entered allmulticast mode [ 657.363116][ T2961] vlan0: entered allmulticast mode [ 657.385725][ T2961] veth0_vlan: entered allmulticast mode [ 657.465849][ T2964] macvtap1: entered promiscuous mode [ 657.477447][ T2964] macvtap1: entered allmulticast mode [ 657.766293][ T2991] tipc: Enabled bearer , priority 0 [ 657.783656][ T2989] tipc: Enabled bearer , priority 0 [ 657.828407][ T2991] tipc: Resetting bearer [ 657.839692][ T2989] syzkaller0: entered promiscuous mode [ 657.845695][ T2989] syzkaller0: entered allmulticast mode [ 657.857850][ T2990] tipc: Disabling bearer [ 657.913415][ T2989] tipc: Resetting bearer [ 657.942932][ T2988] tipc: Resetting bearer [ 658.045591][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 658.053635][ C0] lec:lec_tx_timeout: lec0 [ 658.059409][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 658.086862][ T2988] tipc: Disabling bearer [ 658.351432][ T3019] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 658.463087][ T3010] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 658.504806][ T3021] tipc: Enabling of bearer rejected, failed to enable media [ 658.621421][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13055'. [ 659.043088][ T3052] tipc: Enabled bearer , priority 0 [ 659.066571][ T3054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.081928][ T3052] syzkaller0: entered promiscuous mode [ 659.094894][ T3052] syzkaller0: entered allmulticast mode [ 659.212562][ T3060] tipc: Resetting bearer [ 659.229180][ T3051] tipc: Resetting bearer [ 659.299528][ T3051] tipc: Disabling bearer [ 659.653521][ T3076] pim6reg1: entered promiscuous mode [ 659.671420][ T3076] pim6reg1: entered allmulticast mode [ 659.764088][ T3085] syzkaller1: entered promiscuous mode [ 659.776304][ T3085] syzkaller1: entered allmulticast mode [ 660.090047][ T3096] tipc: Enabled bearer , priority 0 [ 660.137013][ T3096] tipc: Resetting bearer [ 660.207701][ T3095] tipc: Disabling bearer [ 660.540039][ T3119] tipc: Enabled bearer , priority 0 [ 660.569033][ T3119] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 660.600586][ T3119] tipc: Resetting bearer [ 660.636545][ T3118] tipc: Disabling bearer [ 660.838481][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13089'. [ 660.994128][ T3112] lec:lec_atm_close: lec0: Shut down! [ 662.741671][ T55] block nbd1: Possible stuck request ffff888025235080: control (read@0,1024B). Runtime 300 seconds [ 662.752574][ T55] block nbd1: Possible stuck request ffff888025235240: control (read@1024,1024B). Runtime 300 seconds [ 662.763993][ T55] block nbd1: Possible stuck request ffff888025235400: control (read@2048,1024B). Runtime 300 seconds [ 662.775217][ T55] block nbd1: Possible stuck request ffff8880252355c0: control (read@3072,1024B). Runtime 300 seconds [ 663.277126][ T3187] syzkaller0: entered promiscuous mode [ 663.287218][ T3187] syzkaller0: entered allmulticast mode [ 663.628566][ T3194] netlink: 'syz.4.13109': attribute type 29 has an invalid length. [ 663.808628][ T3194] netlink: 'syz.4.13109': attribute type 29 has an invalid length. [ 663.974367][ T3182] lec:lec_atm_close: lec0: Shut down! [ 664.015974][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 664.399123][ T3231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13121'. [ 664.947970][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13128'. [ 665.161521][ T3262] tipc: Enabled bearer , priority 0 [ 665.167566][ T3264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13131'. [ 665.264229][ T3262] syzkaller0: entered promiscuous mode [ 665.279390][ T3262] syzkaller0: entered allmulticast mode [ 665.291747][ T3237] lo speed is unknown, defaulting to 1000 [ 665.350810][ T3260] tipc: Resetting bearer [ 665.425009][ T3260] tipc: Disabling bearer [ 665.444555][ T3249] lec:lec_atm_close: lec0: Shut down! [ 665.679116][ T3276] netlink: 'syz.3.13134': attribute type 1 has an invalid length. [ 665.724300][ T3280] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 665.785401][ T3276] 8021q: adding VLAN 0 to HW filter on device bond12 [ 665.813371][ T3281] veth19: entered promiscuous mode [ 665.823964][ T3281] bond12: (slave veth19): Enslaving as an active interface with an up link [ 665.834470][ T3284] tipc: Enabled bearer , priority 0 [ 665.888918][ T3279] syzkaller0: entered promiscuous mode [ 665.894432][ T3279] syzkaller0: entered allmulticast mode [ 665.900802][ T3279] tipc: Resetting bearer [ 665.963531][ T3278] tipc: Resetting bearer [ 667.421038][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13145'. [ 668.026812][ T3278] tipc: Disabling bearer [ 668.175200][ T3317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13146'. [ 668.518228][ T3339] tipc: Enabling of bearer rejected, failed to enable media [ 668.559341][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13152'. [ 669.219801][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13159'. [ 669.230269][ T3369] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 669.248712][ T3369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.412375][ T3383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13161'. [ 669.763978][ T3405] tipc: Enabling of bearer rejected, failed to enable media [ 669.850787][ T3418] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 670.449078][ T981] lo speed is unknown, defaulting to 1000 [ 670.455020][ T981] syz0: Port: 1 Link DOWN [ 670.459918][ T24] lo speed is unknown, defaulting to 1000 [ 670.470630][ T3501] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.495046][ T3501] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.527112][ T3501] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.547874][ T3501] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.773157][ T3451] tipc: Enabled bearer , priority 0 [ 670.787321][ T3451] syzkaller0: entered promiscuous mode [ 670.797789][ T3451] syzkaller0: entered allmulticast mode [ 670.814396][ T3451] tipc: Resetting bearer [ 670.833028][ T3450] tipc: Resetting bearer [ 670.872002][ T3450] tipc: Disabling bearer [ 670.895937][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 670.904050][ C0] lec:lec_tx_timeout: lec0 [ 670.909834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 671.108400][ T3475] tipc: Enabling of bearer rejected, failed to enable media [ 671.450138][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13189'. [ 671.467071][ T3494] netlink: 'syz.2.13189': attribute type 7 has an invalid length. [ 671.475249][ T3494] netlink: 'syz.2.13189': attribute type 8 has an invalid length. [ 671.488635][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13189'. [ 671.496470][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13190'. [ 671.848027][ T3510] tipc: Enabled bearer , priority 0 [ 671.858324][ T3510] syzkaller0: entered promiscuous mode [ 671.863815][ T3510] syzkaller0: entered allmulticast mode [ 671.948481][ T3510] tipc: Resetting bearer [ 671.957575][ T3521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13197'. [ 671.967741][ T3509] tipc: Resetting bearer [ 672.002667][ T3509] tipc: Disabling bearer [ 672.068140][ T3520] tipc: Enabling of bearer rejected, failed to enable media [ 672.090948][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13197'. [ 672.591329][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13205'. [ 672.906089][T19625] IPVS: ip_vs_send_async error -101 [ 672.929992][ T3577] tipc: Enabling of bearer rejected, failed to enable media [ 673.278283][ T3598] netlink: 'syz.0.13218': attribute type 1 has an invalid length. [ 673.403463][ T3599] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 673.416317][ T3599] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 673.510224][ T3598] vlan2: entered allmulticast mode [ 673.517447][ T3598] bridge0: entered allmulticast mode [ 673.523764][ T3598] bridge0: entered promiscuous mode [ 673.541558][ T3598] bridge0: left promiscuous mode [ 673.554385][ T3598] bond8: (slave vlan2): making interface the new active one [ 673.567003][ T3598] bridge0: entered promiscuous mode [ 673.575341][ T3598] bond8: (slave vlan2): Enslaving as an active interface with an up link [ 673.600705][ T3609] tipc: Enabled bearer , priority 0 [ 673.624196][ T3609] syzkaller0: entered promiscuous mode [ 673.643972][ T3609] syzkaller0: entered allmulticast mode [ 673.726816][ T3609] tipc: Resetting bearer [ 673.740566][ T3608] tipc: Resetting bearer [ 673.797563][ T3608] tipc: Disabling bearer [ 673.838104][ T3623] tipc: Enabled bearer , priority 0 [ 673.846236][ T3623] syzkaller0: entered promiscuous mode [ 673.852200][ T3623] syzkaller0: entered allmulticast mode [ 673.863298][ T3626] tipc: Enabled bearer , priority 0 [ 673.882368][ T3626] syzkaller0: entered promiscuous mode [ 673.897986][ T3626] syzkaller0: entered allmulticast mode [ 673.957062][ T3623] tipc: Resetting bearer [ 674.030557][ T3622] tipc: Resetting bearer [ 674.058102][ T3622] tipc: Disabling bearer [ 674.072857][ T3633] tipc: Resetting bearer [ 674.091992][ T3624] tipc: Resetting bearer [ 674.151603][ T3624] tipc: Disabling bearer [ 674.182015][ T3636] tipc: Enabling of bearer rejected, failed to enable media [ 674.664791][ T3667] tipc: Enabled bearer , priority 0 [ 674.674819][ T3667] syzkaller0: entered promiscuous mode [ 674.683040][ T3667] syzkaller0: entered allmulticast mode [ 674.731914][ T3667] tipc: Resetting bearer [ 674.742179][ T3664] tipc: Resetting bearer [ 674.788269][ T3664] tipc: Disabling bearer [ 674.817003][ T3670] tipc: Enabled bearer , priority 0 [ 674.823948][ T3673] syzkaller0: entered promiscuous mode [ 674.832664][ T3673] syzkaller0: entered allmulticast mode [ 674.884395][ T3670] tipc: Resetting bearer [ 674.909779][ T3669] tipc: Resetting bearer [ 674.948291][ T3669] tipc: Disabling bearer [ 674.982595][ T3679] tipc: Enabled bearer , priority 0 [ 675.124697][ T3682] syzkaller0: entered promiscuous mode [ 675.132335][ T3682] syzkaller0: entered allmulticast mode [ 675.142794][ T3679] syzkaller0: entered promiscuous mode [ 675.151591][ T3679] syzkaller0: entered allmulticast mode [ 675.175520][ T3679] tipc: Resetting bearer [ 675.234248][ T3678] tipc: Resetting bearer [ 675.266780][ T3678] tipc: Disabling bearer [ 675.278876][ T3685] tipc: Enabled bearer , priority 0 [ 675.294533][ T3691] syzkaller0: entered promiscuous mode [ 675.301734][ T3691] syzkaller0: entered allmulticast mode [ 675.536487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.926206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 675.934362][ C0] lec:lec_tx_timeout: lec0 [ 675.938931][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 677.193401][ T3691] tipc: Resetting bearer [ 677.252410][ T3691] tipc: Disabling bearer [ 677.280056][ T3707] tipc: Enabling of bearer rejected, failed to enable media [ 677.411022][ T3725] veth0: entered promiscuous mode [ 677.531172][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13252'. [ 677.679726][ T3742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13255'. [ 677.764467][ T3692] lo speed is unknown, defaulting to 1000 [ 677.782195][ T3724] veth0: left promiscuous mode [ 678.033277][ T3754] team0: Caught tx_queue_len zero misconfig [ 678.210771][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13261'. [ 678.446129][ T3752] lo speed is unknown, defaulting to 1000 [ 678.695189][ T3771] tipc: Enabled bearer , priority 0 [ 678.739828][ T3771] syzkaller0: entered promiscuous mode [ 678.748359][ T3771] syzkaller0: entered allmulticast mode [ 678.788924][ T3771] tipc: Resetting bearer [ 678.804149][ T3769] tipc: Resetting bearer [ 678.842067][ T3769] tipc: Disabling bearer [ 679.585003][ T3790] tipc: Enabled bearer , priority 0 [ 679.597712][ T3790] syzkaller0: entered promiscuous mode [ 679.611054][ T3790] syzkaller0: entered allmulticast mode [ 679.697897][ T3790] tipc: Resetting bearer [ 679.753091][ T3785] tipc: Resetting bearer [ 679.819279][ T3785] tipc: Disabling bearer [ 679.876277][ T3799] tipc: Enabled bearer , priority 0 [ 679.888777][ T3799] syzkaller0: entered promiscuous mode [ 679.894271][ T3799] syzkaller0: entered allmulticast mode [ 679.895164][ T3805] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13279'. [ 679.953561][ T3807] pimreg: entered allmulticast mode [ 679.975121][ T3799] tipc: Resetting bearer [ 680.006477][ T3798] tipc: Resetting bearer [ 680.064311][ T3798] tipc: Disabling bearer [ 680.626609][ T3855] netlink: 'syz.0.13303': attribute type 6 has an invalid length. [ 680.945660][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 680.953728][ C0] lec:lec_tx_timeout: lec0 [ 680.975754][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 681.139326][ T3883] tipc: Enabling of bearer rejected, failed to enable media [ 681.603652][ T3917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13324'. [ 681.634237][ T3917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13324'. [ 681.647399][ T3917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13324'. [ 681.658821][ T3917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13324'. [ 682.000665][ T3946] lo: Caught tx_queue_len zero misconfig [ 682.267623][ T3939] lec:lec_atm_close: lec0: Shut down! [ 682.399321][ T3958] tipc: Enabled bearer , priority 0 [ 682.417539][ T3958] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 682.428032][ T3958] tipc: Resetting bearer [ 682.452412][ T3957] tipc: Disabling bearer [ 683.050045][ T4001] tipc: Enabled bearer , priority 0 [ 683.074850][ T4001] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 683.091004][ T4001] tipc: Resetting bearer [ 683.132160][ T4000] tipc: Disabling bearer [ 683.189515][ T4005] netlink: 360 bytes leftover after parsing attributes in process `syz.3.13354'. [ 683.434020][ T4017] pimreg: left allmulticast mode [ 683.696936][ T4033] tunl0: left allmulticast mode [ 683.708084][ T4033] gre0: left allmulticast mode [ 683.725035][ T4033] gretap0: left allmulticast mode [ 683.739263][ T4033] erspan0: left allmulticast mode [ 683.760031][ T4033] ip_vti0: left allmulticast mode [ 683.765500][ T4033] ip6_vti0: left allmulticast mode [ 683.784904][ T4033] sit0: left allmulticast mode [ 683.822735][ T4033] ip6tnl0: left allmulticast mode [ 683.830572][ T4033] ip6gre0: left allmulticast mode [ 683.838191][ T4033] ip6gretap0: left allmulticast mode [ 683.844009][ T4033] vcan0: left allmulticast mode [ 683.852505][ T4033] bond0: left allmulticast mode [ 683.859563][ T4033] team0: left allmulticast mode [ 683.865197][ T4033] dummy0: left allmulticast mode [ 683.875194][ T4033] nlmon0: left allmulticast mode [ 683.883126][ T4033] caif0: left allmulticast mode [ 683.892243][ T4033] vxcan0: left allmulticast mode [ 683.899604][ T4033] vxcan1: left allmulticast mode [ 683.904913][ T4033] veth0: left allmulticast mode [ 683.912845][ T4033] veth1: left allmulticast mode [ 683.918221][ T4033] wg1: left allmulticast mode [ 683.923189][ T4033] veth0_to_bridge: left allmulticast mode [ 683.943602][ T4033] bridge_slave_0: left allmulticast mode [ 683.954404][ T4033] veth1_to_bridge: left allmulticast mode [ 683.961576][ T4033] bond_slave_0: left allmulticast mode [ 683.970425][ T4033] veth1_to_bond: left allmulticast mode [ 683.976492][ T4033] bond_slave_1: left allmulticast mode [ 683.982640][ T4033] veth0_to_team: left allmulticast mode [ 683.989512][ T4033] C: left allmulticast mode [ 683.994474][ T4033] veth1_to_team: left allmulticast mode [ 684.001572][ T4033] team_slave_1: left allmulticast mode [ 684.007600][ T4033] veth0_to_batadv: left allmulticast mode [ 684.013661][ T4033] batadv_slave_0: left allmulticast mode [ 684.026585][ T4033] xfrm0: left allmulticast mode [ 684.031910][ T4033] veth0_to_hsr: left allmulticast mode [ 684.038177][ T4033] veth1_to_hsr: left allmulticast mode [ 684.044145][ T4033] hsr0: left allmulticast mode [ 684.049251][ T4033] hsr_slave_0: left allmulticast mode [ 684.054807][ T4033] hsr_slave_1: left allmulticast mode [ 684.062232][ T4033] veth1_virt_wifi: left allmulticast mode [ 684.068546][ T4033] veth0_virt_wifi: left allmulticast mode [ 684.074940][ T4033] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 684.082475][ T4033] veth0_macvtap: left allmulticast mode [ 684.089003][ T4033] geneve0: left allmulticast mode [ 684.094227][ T4033] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 684.101795][ T4033] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 684.109390][ T4033] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 684.117357][ T4033] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 684.124811][ T4033] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 684.132047][ T4033] ip6tnl1: left allmulticast mode [ 684.141113][ T4033] ip6gre1: left allmulticast mode [ 684.146655][ T4033] ip6tnl3: left allmulticast mode [ 684.151935][ T4033] bridge1: left allmulticast mode [ 684.157757][ T4033] veth2: left allmulticast mode [ 684.162929][ T4033] veth3: left allmulticast mode [ 684.168462][ T4033] bridge2: left allmulticast mode [ 684.173753][ T4033] vxlan0: left allmulticast mode [ 684.180023][ T4033] bridge3: left allmulticast mode [ 684.185396][ T4033] veth4: left allmulticast mode [ 684.191076][ T4033] veth5: left allmulticast mode [ 684.196504][ T4033] bond1: left allmulticast mode [ 684.201829][ T4033] ip6tnl4: left allmulticast mode [ 684.207259][ T4033] macvtap0.4094: left allmulticast mode [ 684.213316][ T4033] macvtap0: left allmulticast mode [ 684.218848][ T4033] vxlan1: left allmulticast mode [ 684.224301][ T4033] vlan2: left allmulticast mode [ 684.229385][ T4033] geneve1: left allmulticast mode [ 684.234542][ T4033] mac80211_hwsim hwsim8 pim6reg0: left allmulticast mode [ 684.243392][ T4033] syztnl0: left allmulticast mode [ 684.251380][ T4033] gtp0: left allmulticast mode [ 684.262892][ T4033] ip6gre3: left allmulticast mode [ 684.274925][ T4041] tipc: Enabled bearer , priority 0 [ 684.300109][ T4051] tipc: Resetting bearer [ 684.336023][ T4034] tipc: Disabling bearer [ 684.798498][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13381'. [ 685.136461][ T55] block nbd2: Possible stuck request ffff888025250000: control (read@0,1024B). Runtime 300 seconds [ 685.141502][ T4088] lo speed is unknown, defaulting to 1000 [ 685.147549][ T55] block nbd2: Possible stuck request ffff8880252501c0: control (read@1024,1024B). Runtime 300 seconds [ 685.147608][ T55] block nbd2: Possible stuck request ffff888025250380: control (read@2048,1024B). Runtime 300 seconds [ 685.147631][ T55] block nbd2: Possible stuck request ffff888025250540: control (read@3072,1024B). Runtime 300 seconds [ 685.480020][ T4121] tipc: Enabled bearer , priority 0 [ 685.494725][ T4121] tipc: Resetting bearer [ 685.520467][ T4120] tipc: Disabling bearer [ 685.630747][ T4127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13396'. [ 685.786709][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 687.010339][ T4191] tipc: Enabled bearer , priority 0 [ 687.024601][ T4191] syzkaller0: entered promiscuous mode [ 687.031401][ T4191] syzkaller0: entered allmulticast mode [ 687.061667][ T4191] tipc: Resetting bearer [ 687.081245][ T4189] tipc: Resetting bearer [ 687.106029][ T4189] tipc: Disabling bearer [ 687.231758][ T4202] tipc: Enabled bearer , priority 0 [ 687.249649][ T4202] tipc: Resetting bearer [ 687.287075][ T4201] tipc: Disabling bearer [ 687.415169][ T4208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.441834][ T4215] syzkaller0: entered promiscuous mode [ 687.453939][ T4215] syzkaller0: entered allmulticast mode [ 687.462656][ T4215] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 687.483639][ T4208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.550870][ T4208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.563716][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13428'. [ 687.855594][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 687.863684][ C0] lec:lec_tx_timeout: lec0 [ 687.868982][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 688.343469][ T4261] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 688.351400][ T31] INFO: task udevd:21769 blocked for more than 143 seconds. [ 688.361775][ T31] Not tainted syzkaller #0 [ 688.371498][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.394328][ T31] task:udevd state:D stack:22568 pid:21769 tgid:21769 ppid:5236 task_flags:0x400140 flags:0x00004006 [ 688.420846][ T31] Call Trace: [ 688.424362][ T31] [ 688.429825][ T31] __schedule+0x1798/0x4cc0 [ 688.435643][ T31] ? __pfx___schedule+0x10/0x10 [ 688.440757][ T31] ? schedule+0x91/0x360 [ 688.445228][ T31] schedule+0x165/0x360 [ 688.451975][ T31] io_schedule+0x80/0xd0 [ 688.456759][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 688.462403][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 688.471486][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 688.479106][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 688.484645][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 688.492395][ T31] do_read_cache_folio+0x1aa/0x590 [ 688.500359][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 688.506215][ T31] read_part_sector+0xb6/0x2b0 [ 688.511142][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 688.518865][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 688.524460][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 688.531107][ T31] bdev_disk_changed+0x75f/0x14b0 [ 688.536270][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 688.541746][ T31] ? wait_on_inode+0xc0/0x230 [ 688.546476][ T31] blkdev_get_whole+0x380/0x510 [ 688.551435][ T31] bdev_open+0x31e/0xd30 [ 688.556071][ T31] blkdev_open+0x457/0x600 [ 688.560523][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 688.565456][ T31] do_dentry_open+0x950/0x13f0 [ 688.570323][ T31] vfs_open+0x3b/0x340 [ 688.574433][ T31] ? path_openat+0x2ecd/0x3830 [ 688.579515][ T31] path_openat+0x2ee5/0x3830 [ 688.584215][ T31] ? arch_stack_walk+0xfc/0x150 [ 688.590950][ T31] ? stack_depot_save_flags+0x40/0x860 [ 688.598480][ T31] ? __pfx_path_openat+0x10/0x10 [ 688.603454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.611827][ T31] do_filp_open+0x1fa/0x410 [ 688.617150][ T31] ? __lock_acquire+0xab9/0xd20 [ 688.622022][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 688.627182][ T31] ? _raw_spin_unlock+0x28/0x50 [ 688.632059][ T31] ? alloc_fd+0x64c/0x6c0 [ 688.636573][ T31] do_sys_openat2+0x121/0x1c0 [ 688.641270][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 688.647029][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.652257][ T31] ? rcu_is_watching+0x15/0xb0 [ 688.657112][ T31] __x64_sys_openat+0x138/0x170 [ 688.661977][ T31] do_syscall_64+0xfa/0x3b0 [ 688.666637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.671874][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.678415][ T31] ? clear_bhb_loop+0x60/0xb0 [ 688.683115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.689047][ T31] RIP: 0033:0x7f0436ea7407 [ 688.693457][ T31] RSP: 002b:00007ffd518ba380 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 688.702082][ T31] RAX: ffffffffffffffda RBX: 00007f0437609880 RCX: 00007f0436ea7407 [ 688.710467][ T31] RDX: 00000000000a0800 RSI: 0000563015f72280 RDI: ffffffffffffff9c [ 688.718767][ T31] RBP: 0000563015f63910 R08: 0000000000000000 R09: 0000000000000000 [ 688.727427][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563015f80f10 [ 688.735858][ T31] R13: 0000563015f71190 R14: 0000000000000000 R15: 0000563015f80f10 [ 688.743959][ T31] [ 688.747519][ T31] [ 688.747519][ T31] Showing all locks held in the system: [ 688.755268][ T31] 1 lock held by khungtaskd/31: [ 688.761981][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 688.773769][ T31] 2 locks held by getty/5631: [ 688.778543][ T31] #0: ffff88814de000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 688.788451][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 688.798934][ T31] 1 lock held by udevd/21769: [ 688.803618][ T31] #0: ffff888142f8f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 688.812877][ T31] 1 lock held by udevd/22254: [ 688.817874][ T31] #0: ffff8880251b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 688.827613][ T31] 3 locks held by syz.2.13448/4268: [ 688.832848][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x29/0x550 [ 688.842735][ T31] #1: ffffffff8f53d308 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 688.854162][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 688.865779][ T31] [ 688.868114][ T31] ============================================= [ 688.868114][ T31] [ 688.890196][ T31] NMI backtrace for cpu 1 [ 688.890217][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 688.890237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.890247][ T31] Call Trace: [ 688.890254][ T31] [ 688.890262][ T31] dump_stack_lvl+0x189/0x250 [ 688.890289][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.890309][ T31] ? __pfx__printk+0x10/0x10 [ 688.890344][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 688.890370][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 688.890394][ T31] ? __pfx__printk+0x10/0x10 [ 688.890419][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 688.890445][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 688.890470][ T31] watchdog+0xf93/0xfe0 [ 688.890496][ T31] ? watchdog+0x1de/0xfe0 [ 688.890523][ T31] kthread+0x70e/0x8a0 [ 688.890546][ T31] ? __pfx_watchdog+0x10/0x10 [ 688.890566][ T31] ? __pfx_kthread+0x10/0x10 [ 688.890587][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 688.890604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.890620][ T31] ? __pfx_kthread+0x10/0x10 [ 688.890641][ T31] ret_from_fork+0x439/0x7d0 [ 688.890661][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 688.890684][ T31] ? __switch_to_asm+0x39/0x70 [ 688.890703][ T31] ? __switch_to_asm+0x33/0x70 [ 688.890721][ T31] ? __pfx_kthread+0x10/0x10 [ 688.890741][ T31] ret_from_fork_asm+0x1a/0x30 [ 688.890776][ T31] [ 688.890783][ T31] Sending NMI from CPU 1 to CPUs 0: [ 689.038533][ C0] NMI backtrace for cpu 0 [ 689.038551][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 689.038567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.038577][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 689.038598][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 689.038611][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 689.038625][ C0] RAX: 3d85e46f121b1300 RBX: ffffffff819683f8 RCX: 3d85e46f121b1300 [ 689.038636][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba39a RDI: ffffffff8be33f00 [ 689.038647][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 689.038659][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630 [ 689.038670][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 689.038681][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 689.038693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.038704][ C0] CR2: 00005555892585c8 CR3: 0000000027d66000 CR4: 00000000003526f0 [ 689.038724][ C0] Call Trace: [ 689.038731][ C0] [ 689.038736][ C0] default_idle+0x13/0x20 [ 689.038753][ C0] default_idle_call+0x74/0xb0 [ 689.038770][ C0] do_idle+0x1e8/0x510 [ 689.038788][ C0] ? __pfx_do_idle+0x10/0x10 [ 689.038810][ C0] cpu_startup_entry+0x44/0x60 [ 689.038825][ C0] rest_init+0x2de/0x300 [ 689.038843][ C0] start_kernel+0x3a9/0x410 [ 689.038861][ C0] x86_64_start_reservations+0x24/0x30 [ 689.038880][ C0] x86_64_start_kernel+0x143/0x1c0 [ 689.038899][ C0] common_startup_64+0x13e/0x147 [ 689.038925][ C0] [ 689.039744][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 689.220592][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 689.229776][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.239818][ T31] Call Trace: [ 689.243176][ T31] [ 689.246095][ T31] dump_stack_lvl+0x99/0x250 [ 689.250703][ T31] ? __asan_memcpy+0x40/0x70 [ 689.255295][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.260485][ T31] ? __pfx__printk+0x10/0x10 [ 689.265073][ T31] vpanic+0x281/0x750 [ 689.269041][ T31] ? __pfx_vpanic+0x10/0x10 [ 689.273528][ T31] ? preempt_schedule+0xae/0xc0 [ 689.278365][ T31] ? preempt_schedule_common+0x83/0xd0 [ 689.283815][ T31] panic+0xb9/0xc0 [ 689.287526][ T31] ? __pfx_panic+0x10/0x10 [ 689.291932][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 689.297302][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 689.303453][ T31] watchdog+0xfd2/0xfe0 [ 689.307610][ T31] ? watchdog+0x1de/0xfe0 [ 689.311938][ T31] kthread+0x70e/0x8a0 [ 689.316005][ T31] ? __pfx_watchdog+0x10/0x10 [ 689.320671][ T31] ? __pfx_kthread+0x10/0x10 [ 689.325254][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 689.330436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.335625][ T31] ? __pfx_kthread+0x10/0x10 [ 689.340212][ T31] ret_from_fork+0x439/0x7d0 [ 689.344817][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 689.349922][ T31] ? __switch_to_asm+0x39/0x70 [ 689.354767][ T31] ? __switch_to_asm+0x33/0x70 [ 689.359517][ T31] ? __pfx_kthread+0x10/0x10 [ 689.364095][ T31] ret_from_fork_asm+0x1a/0x30 [ 689.368859][ T31] [ 689.372155][ T31] Kernel Offset: disabled [ 689.376552][ T31] Rebooting in 86400 seconds..