last executing test programs: 5.075516744s ago: executing program 4 (id=16718): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 4.583979751s ago: executing program 3 (id=16728): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x10, 0x80800, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='c ', @ANYRES32=r0], 0xa) 4.488419581s ago: executing program 3 (id=16729): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8143, 0x0) 4.396589421s ago: executing program 3 (id=16730): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) pwrite64(r1, &(0x7f0000000380), 0x0, 0xc) 4.30584381s ago: executing program 1 (id=16731): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 4.305038431s ago: executing program 3 (id=16732): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r0, &(0x7f00000003c0)=""/123, 0x7b) sendmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) close(0x3) 3.60007379s ago: executing program 4 (id=16733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 3.418674947s ago: executing program 1 (id=16735): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x8) accept(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) 3.279566847s ago: executing program 4 (id=16738): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 3.265881005s ago: executing program 3 (id=16739): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 3.254978881s ago: executing program 0 (id=16740): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.095414319s ago: executing program 3 (id=16741): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0x81, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) 3.094164635s ago: executing program 4 (id=16742): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0xffffffffffffff68}, {0x0, 0x0, 0x0, 0x2}, 0x10}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000008001800f7ab0f000400"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 3.072234299s ago: executing program 1 (id=16743): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.102755362s ago: executing program 1 (id=16745): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}], 0x1, 0x4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 2.030500615s ago: executing program 2 (id=16746): r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000600)="3b010400000000420000000000000000b66a443625ffd5b6", 0x18}], 0x1, 0x4) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffffffb}, 0x50) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x24040805) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 1.953851842s ago: executing program 4 (id=16747): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r1) 1.903627555s ago: executing program 0 (id=16748): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="80000080e7c6de1b8f94bec96eed77f92494", 0x12, 0x40, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @random="165f3c7358fe"}, 0x14) 1.899035458s ago: executing program 2 (id=16749): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c010000130000"], 0x18c}, 0x1, 0x0, 0x0, 0xc1}, 0x24000000) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8", 0x18, 0x880, 0x0, 0x0) 1.818947173s ago: executing program 4 (id=16750): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 1.755006979s ago: executing program 0 (id=16751): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) 1.74092805s ago: executing program 1 (id=16752): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.694850629s ago: executing program 2 (id=16753): socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000080000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd2fc8b818373de960228fc4268da300"/119], 0x68) 1.554560207s ago: executing program 1 (id=16754): r0 = socket(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f00000010c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket(0x27, 0x80001, 0x0) 1.553859759s ago: executing program 0 (id=16755): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) accept$netrom(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 1.031287952s ago: executing program 2 (id=16756): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x9) unshare(0x26020480) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) shutdown(0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x400c000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 973.871371ms ago: executing program 2 (id=16757): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000280)=0x3, 0x1) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 907.422568ms ago: executing program 0 (id=16758): socket(0x15, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b3", 0x3}, {0x0}], 0x2}}], 0x1, 0x40) close(r2) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xffffffffffffff29, 0x9, 0x7fffffffffffffff, 0x1, 0x1, 0xfffffffffffffffe, 0xfff}, &(0x7f0000000100)={0x7ff, 0x1ff, 0xfffffffffffffe01, 0xb, 0xffffffffffffffff, 0x10001, 0x4dee, 0x38}, 0x0, 0x0, 0x0) 808.397853ms ago: executing program 0 (id=16759): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 0s ago: executing program 2 (id=16760): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) kernel console output (not intermixed with test programs): mode [ 534.139332][ T631] veth1_to_hsr: left allmulticast mode [ 534.146041][ T631] veth1_to_hsr: left promiscuous mode [ 534.154663][ T631] macvtap1: left promiscuous mode [ 534.159893][ T631] macvtap1: left allmulticast mode [ 534.167307][ T631] macsec0: left allmulticast mode [ 534.172818][ T631] macsec2: left allmulticast mode [ 534.179891][ T631] gtp0: left promiscuous mode [ 534.185627][ T631] gtp0: left allmulticast mode [ 534.195785][ T631] bond7: left promiscuous mode [ 534.200897][ T631] bond8: left promiscuous mode [ 534.209119][ T638] batadv_slave_0: entered promiscuous mode [ 534.219083][ T637] batadv_slave_0: left promiscuous mode [ 534.829600][ T668] netlink: 'syz.2.12847': attribute type 8 has an invalid length. [ 534.870452][ T668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12847'. [ 535.108468][ T684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12856'. [ 535.555997][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12866'. [ 535.876014][ T720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12871'. [ 535.887160][ T720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12871'. [ 535.963584][ T722] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.12872'. [ 536.195504][ T717] virt_wifi0 speed is unknown, defaulting to 1000 [ 536.659581][ T752] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.12884'. [ 536.682934][ T752] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.12884'. [ 536.699715][ T752] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12884'. [ 536.710538][ T752] tc_dump_action: action bad kind [ 538.438247][ T867] __nla_validate_parse: 1 callbacks suppressed [ 538.438265][ T867] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12935'. [ 538.913465][ T890] IPVS: Scheduler module ip_vs_sip not found [ 539.136022][ T910] syzkaller1: entered promiscuous mode [ 539.142564][ T910] syzkaller1: entered allmulticast mode [ 539.407236][ T939] netlink: 'syz.3.12964': attribute type 5 has an invalid length. [ 539.462775][ T945] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12965'. [ 539.824378][ T975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12977'. [ 539.840798][ T975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12977'. [ 540.203147][ T1004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12986'. [ 540.412160][ T1020] syzkaller1: entered promiscuous mode [ 540.422491][ T1020] syzkaller1: entered allmulticast mode [ 540.568809][ T1027] geneve6: entered promiscuous mode [ 540.574337][ T1027] geneve6: entered allmulticast mode [ 540.848637][ T1049] vlan1: entered allmulticast mode [ 540.862144][ T1049] dummy0: entered allmulticast mode [ 540.871463][ T1049] bridge0: port 3(vlan1) entered blocking state [ 540.879507][ T1049] bridge0: port 3(vlan1) entered disabled state [ 540.888698][ T1049] vlan1: entered promiscuous mode [ 540.894370][ T1049] dummy0: entered promiscuous mode [ 540.951337][ T1064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.194533][ T1082] netlink: 'syz.0.13012': attribute type 13 has an invalid length. [ 541.216984][ T1082] netlink: 'syz.0.13012': attribute type 17 has an invalid length. [ 541.301926][ T1082] erspan0: entered promiscuous mode [ 541.328603][ T1082] sit0: left promiscuous mode [ 541.393667][ T1082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.451137][ T1082] team0: left promiscuous mode [ 541.466052][ T1082] team_slave_0: left promiscuous mode [ 541.472387][ T1082] team_slave_1: left promiscuous mode [ 541.478238][ T1082] team0: left allmulticast mode [ 541.484820][ T1082] team_slave_0: left allmulticast mode [ 541.491188][ T1082] team_slave_1: left allmulticast mode [ 541.516965][ T1082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.559354][ T1110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13022'. [ 541.583209][ T1107] netlink: 'syz.3.13022': attribute type 29 has an invalid length. [ 541.626129][ T1109] netlink: 'syz.3.13022': attribute type 29 has an invalid length. [ 541.645784][ T1116] netlink: 'syz.4.13024': attribute type 11 has an invalid length. [ 541.861213][ T1129] xt_CT: No such helper "snmp_trap" [ 541.971946][ T1137] netlink: 'syz.3.13034': attribute type 2 has an invalid length. [ 542.901202][ T1203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13064'. [ 542.945621][ T1207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13066'. [ 543.306346][ T1231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13077'. [ 544.086646][ T1283] syzkaller1: entered promiscuous mode [ 544.092583][ T1283] syzkaller1: entered allmulticast mode [ 544.270449][ T1257] virt_wifi0 speed is unknown, defaulting to 1000 [ 544.316129][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13102'. [ 544.343883][ T1293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13102'. [ 544.729792][ T1313] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13109'. [ 545.011799][ T1323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13114'. [ 545.092070][ T1331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13115'. [ 545.138908][ T1329] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13115'. [ 545.273130][ T1343] netlink: 'syz.2.13122': attribute type 2 has an invalid length. [ 545.295598][ T1343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13122'. [ 545.433164][ T1353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13127'. [ 545.625543][ T1355] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 545.757378][ T1373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13135'. [ 545.769654][ T1373] netlink: 'syz.3.13135': attribute type 1 has an invalid length. [ 545.777878][ T1373] netlink: 'syz.3.13135': attribute type 2 has an invalid length. [ 546.149643][ T1394] netlink: 'syz.0.13144': attribute type 2 has an invalid length. [ 546.161427][ T1394] netlink: 15 bytes leftover after parsing attributes in process `syz.0.13144'. [ 546.758270][ T1439] syzkaller1: entered promiscuous mode [ 546.765008][ T1439] syzkaller1: entered allmulticast mode [ 547.166482][ T1466] syzkaller1: entered promiscuous mode [ 547.172495][ T1466] syzkaller1: entered allmulticast mode [ 549.261170][ T1599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.938901][ T1641] __nla_validate_parse: 4 callbacks suppressed [ 549.938917][ T1641] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13255'. [ 551.072886][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13280'. [ 551.120965][ T1699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13280'. [ 551.171331][ T1699] geneve3: entered promiscuous mode [ 551.176668][ T1699] geneve3: entered allmulticast mode [ 551.201543][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.221269][ T1705] netlink: 'syz.4.13283': attribute type 13 has an invalid length. [ 551.229273][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.239413][ T1705] netlink: 'syz.4.13283': attribute type 17 has an invalid length. [ 551.247921][ T730] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.272608][ T1707] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13284'. [ 551.283414][ T730] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.314355][ T1705] erspan0: left promiscuous mode [ 551.336663][ T1714] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.13286'. [ 551.433052][ T1705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.746762][ T1741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13298'. [ 551.917112][ T1753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.044934][ T1764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13306'. [ 552.235205][ T1775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13310'. [ 552.279625][ T1775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.340284][ T1782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13313'. [ 552.619973][ T1800] sctp: [Deprecated]: syz.3.13322 (pid 1800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.619973][ T1800] Use struct sctp_sack_info instead [ 552.639284][ T1800] sctp: [Deprecated]: syz.3.13322 (pid 1800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.639284][ T1800] Use struct sctp_sack_info instead [ 553.279997][ T1847] netlink: 'syz.0.13343': attribute type 3 has an invalid length. [ 553.290612][ T1847] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13343'. [ 553.677561][ T1880] netlink: 'syz.2.13356': attribute type 13 has an invalid length. [ 553.687827][ T1880] netlink: 'syz.2.13356': attribute type 17 has an invalid length. [ 553.774600][ T1880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.784463][ T1880] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.797475][ T1880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.947816][ T1894] netlink: 'syz.1.13363': attribute type 83 has an invalid length. [ 554.357255][ T1909] syzkaller1: entered promiscuous mode [ 554.362974][ T1909] syzkaller1: entered allmulticast mode [ 555.166614][ T1951] netlink: 'syz.1.13386': attribute type 13 has an invalid length. [ 555.195314][ T1951] netlink: 'syz.1.13386': attribute type 17 has an invalid length. [ 555.383762][ T1951] bridge0: entered promiscuous mode [ 555.402484][ T1951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.419507][ T1951] bridge0: port 3(vlan1) entered blocking state [ 555.426120][ T1951] bridge0: port 3(vlan1) entered forwarding state [ 555.447385][ T1951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.485000][ T1958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13392'. [ 555.613778][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13396'. [ 555.640536][ T1969] netlink: 'syz.2.13396': attribute type 5 has an invalid length. [ 555.654181][ T1969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13396'. [ 555.688213][ T1969] geneve2: entered promiscuous mode [ 555.705642][ T1969] geneve2: entered allmulticast mode [ 555.724113][ T730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 555.742442][ T730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 555.762324][ T730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 555.780461][ T730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 555.908319][ T1984] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13402'. [ 556.034579][ T1990] netlink: 'syz.0.13405': attribute type 1 has an invalid length. [ 557.140027][ T2057] validate_nla: 1 callbacks suppressed [ 557.140045][ T2057] netlink: 'syz.1.13434': attribute type 29 has an invalid length. [ 557.190956][ T2057] netlink: 'syz.1.13434': attribute type 29 has an invalid length. [ 557.266841][ T2063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.461750][ T2069] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.13438'. [ 557.904167][ T2097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13448'. [ 558.824460][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13469'. [ 559.254037][ T2179] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13484'. [ 559.701632][ T2208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13496'. [ 560.003306][ T2228] syzkaller1: entered promiscuous mode [ 560.019012][ T2228] syzkaller1: entered allmulticast mode [ 560.237653][ T2244] netlink: 'syz.0.13509': attribute type 11 has an invalid length. [ 560.250183][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13509'. [ 560.897665][ T2276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13518'. [ 561.269869][ T2298] netlink: 'syz.0.13529': attribute type 4 has an invalid length. [ 561.342550][ T2302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13527'. [ 561.422073][ T2309] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.440597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.449522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.487144][ T2309] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.539700][ T2316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13534'. [ 561.577697][ T2309] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.598429][ T2318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13534'. [ 561.617779][ T2318] nbd: device at index 64 is going down [ 561.659694][ T2309] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 561.796929][ T730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 561.805261][ T730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 561.828501][ T730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 561.871150][ T730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 562.646875][ T2348] veth0: entered promiscuous mode [ 562.653585][ T2347] veth0: left promiscuous mode [ 562.720710][ T2351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13550'. [ 562.730005][ T2351] netlink: 'syz.1.13550': attribute type 7 has an invalid length. [ 562.738683][ T2351] netlink: 'syz.1.13550': attribute type 8 has an invalid length. [ 562.747358][ T2351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13550'. [ 562.798895][ T2351] erspan0: entered promiscuous mode [ 562.807552][ T2351] erspan0: left promiscuous mode [ 562.868511][ T2360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13555'. [ 563.124092][ T2380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13562'. [ 563.149985][ T2380] bond0: ARP target 170.170.170.170 is already present [ 563.158039][ T2380] bond0: option arp_ip_target: invalid value (2863311530) [ 563.265791][ T2389] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13566'. [ 563.316316][ T2392] netlink: 'syz.4.13567': attribute type 2 has an invalid length. [ 563.349179][ T2392] netlink: 'syz.4.13567': attribute type 2 has an invalid length. [ 563.497843][ T2408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13573'. [ 563.556959][ T2408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.615665][ T2419] syzkaller1: entered promiscuous mode [ 563.621469][ T2419] syzkaller1: entered allmulticast mode [ 564.871395][ T2507] netlink: 'syz.4.13609': attribute type 3 has an invalid length. [ 565.215336][ T2534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.240555][ T2534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.248888][ T2534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.266501][ T2535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.275088][ T2535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.286915][ T2533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.296593][ T2533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.741323][T31306] Bluetooth: hci4: command 0x0406 tx timeout [ 565.918583][ T2591] __nla_validate_parse: 8 callbacks suppressed [ 565.918602][ T2591] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13640'. [ 566.001481][ T2595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13641'. [ 566.030269][ T2595] vlan2: entered promiscuous mode [ 566.037239][ T2595] bond0: entered promiscuous mode [ 566.045347][ T2595] : entered promiscuous mode [ 566.050918][ T2595] bond_slave_1: entered promiscuous mode [ 566.080292][ T2595] tipc: Resetting bearer [ 566.236247][ T2613] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13647'. [ 566.663238][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13660'. [ 566.767291][ T2656] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.13665'. [ 567.144257][ T2691] netlink: 63 bytes leftover after parsing attributes in process `syz.0.13676'. [ 567.929234][ T2760] syzkaller1: entered promiscuous mode [ 567.947596][ T2760] syzkaller1: entered allmulticast mode [ 568.095294][ T2777] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13711'. [ 568.442975][ T2802] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13721'. [ 568.468148][ T2805] net_ratelimit: 1 callbacks suppressed [ 568.468160][ T2805] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 568.684392][ T2824] netlink: 83 bytes leftover after parsing attributes in process `syz.3.13729'. [ 570.423654][ T2941] Bluetooth: MGMT ver 1.23 [ 570.431398][ T2941] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 570.472231][ T2944] tls_set_device_offload_rx: netdev not found [ 570.528023][ T2947] netlink: 83 bytes leftover after parsing attributes in process `syz.3.13776'. [ 570.731576][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.749853][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.780809][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.789084][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.819115][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.854294][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.865614][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.875999][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.887978][ T2973] pim6reg1: entered promiscuous mode [ 570.898820][ T2973] pim6reg1: entered allmulticast mode [ 570.910674][ T2959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.964818][ T2975] tun0: tun_chr_ioctl cmd 1074025675 [ 570.970945][ T2975] tun0: persist enabled [ 570.976093][ T2975] tun0: tun_chr_ioctl cmd 1074025675 [ 570.982132][ T2975] tun0: persist enabled [ 570.987310][ T2975] tun0: tun_chr_ioctl cmd 1074025673 [ 571.254234][ T2988] __nla_validate_parse: 1 callbacks suppressed [ 571.254253][ T2988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13795'. [ 571.559789][ T3007] netlink: 165 bytes leftover after parsing attributes in process `syz.2.13804'. [ 571.701292][ T3019] netlink: 'syz.4.13808': attribute type 9 has an invalid length. [ 571.709336][ T3019] netlink: 'syz.4.13808': attribute type 11 has an invalid length. [ 571.758967][ T3019] netlink: 'syz.4.13808': attribute type 12 has an invalid length. [ 571.774583][ T3019] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.13808'. [ 571.788284][ T3019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13808'. [ 571.860496][ T3028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13813'. [ 572.223168][ T3044] netlink: 'syz.3.13820': attribute type 1 has an invalid length. [ 572.241056][ T3044] netlink: 'syz.3.13820': attribute type 4 has an invalid length. [ 572.265877][ T3044] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13820'. [ 572.638232][ T3060] netlink: 'syz.3.13828': attribute type 10 has an invalid length. [ 572.676914][ T3060] dummy0: left allmulticast mode [ 572.682993][ T3060] dummy0: left promiscuous mode [ 572.698374][ T3060] bridge0: port 1(dummy0) entered disabled state [ 572.737104][ T3064] netlink: 'syz.3.13828': attribute type 10 has an invalid length. [ 572.792895][ T3060] `: Port device dummy0 added [ 572.816941][ T3064] `: Port device dummy0 removed [ 572.827196][ T3064] .`: (slave dummy0): Enslaving as an active interface with an up link [ 573.073332][ T3073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13832'. [ 573.104334][ T3073] .`: (slave dummy0): Releasing backup interface [ 573.133008][ T3076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13832'. [ 573.188057][ T3079] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13835'. [ 573.189281][ T3080] xt_hashlimit: size too large, truncated to 1048576 [ 573.891844][ T3100] netlink: 'syz.2.13844': attribute type 11 has an invalid length. [ 574.144702][ T3097] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 574.212557][ T3097] bond3: (slave lo): Enslaving as an active interface with an up link [ 574.251091][ T3097] net_ratelimit: 1022 callbacks suppressed [ 574.251109][ T3097] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 574.406847][ T3104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13846'. [ 574.602247][ T29] audit: type=1800 audit(1772666150.627:11): pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13852" name="e" dev="tmpfs" ino=14002 res=0 errno=0 [ 575.146984][ T3161] netlink: 'syz.4.13873': attribute type 30 has an invalid length. [ 575.165574][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.165808][ T3161] netlink: 'syz.4.13873': attribute type 30 has an invalid length. [ 575.180751][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.210517][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.228067][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.413981][ T3175] sctp: [Deprecated]: syz.4.13880 (pid 3175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.413981][ T3175] Use struct sctp_sack_info instead [ 575.766682][ T3204] netlink: 'syz.1.13890': attribute type 13 has an invalid length. [ 576.360836][ T3227] ip6tnl0: Caught tx_queue_len zero misconfig [ 576.708906][ T3258] __nla_validate_parse: 10 callbacks suppressed [ 576.708924][ T3258] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13912'. [ 577.253647][ T3285] validate_nla: 5 callbacks suppressed [ 577.253667][ T3285] netlink: 'syz.1.13924': attribute type 18 has an invalid length. [ 577.282986][ T3285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13924'. [ 577.332100][ T3285] netlink: 'syz.1.13924': attribute type 18 has an invalid length. [ 577.342812][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13926'. [ 577.359307][ T3292] netlink: 'syz.3.13926': attribute type 8 has an invalid length. [ 577.368553][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13926'. [ 577.420525][ T3285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13924'. [ 577.529418][ T3292] geneve4: entered promiscuous mode [ 577.560479][ T3292] geneve4: entered allmulticast mode [ 577.570552][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.618569][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.637517][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.680181][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.011911][ T3309] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13935'. [ 578.399194][ T3327] syzkaller1: entered promiscuous mode [ 578.430831][ T3327] syzkaller1: entered allmulticast mode [ 578.576081][ T3338] netlink: 'syz.4.13947': attribute type 7 has an invalid length. [ 578.597276][ T3338] netlink: 'syz.4.13947': attribute type 8 has an invalid length. [ 578.636432][ T3338] netlink: 'syz.4.13947': attribute type 8 has an invalid length. [ 578.665990][ T3338] netlink: 'syz.4.13947': attribute type 4 has an invalid length. [ 578.713748][ T3338] netlink: 'syz.4.13947': attribute type 7 has an invalid length. [ 578.736790][ T3338] netlink: 207236 bytes leftover after parsing attributes in process `syz.4.13947'. [ 578.744809][ T3346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13950'. [ 579.289181][ T3385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13965'. [ 579.579982][ T3415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13974'. [ 579.622817][ T3414] netlink: 'syz.0.13973': attribute type 21 has an invalid length. [ 579.655866][ T3414] netlink: 'syz.0.13973': attribute type 22 has an invalid length. [ 579.954162][ T3445] bridge5: entered promiscuous mode [ 579.982650][ T3445] bridge5: entered allmulticast mode [ 579.999029][ T3445] team0: Port device bridge5 added [ 580.016406][ T3451] bridge0: port 4(team0) entered blocking state [ 580.025172][ T3451] bridge0: port 4(team0) entered disabled state [ 580.038436][ T3451] team0: entered allmulticast mode [ 580.047918][ T3451] team_slave_0: entered allmulticast mode [ 580.067796][ T3451] : entered allmulticast mode [ 580.082454][ T3451] bond2: entered allmulticast mode [ 580.092607][ T3451] team0: entered promiscuous mode [ 580.104901][ T3451] team_slave_0: entered promiscuous mode [ 580.112734][ T3451] : entered promiscuous mode [ 580.119639][ T3451] bond2: entered promiscuous mode [ 580.785955][ T3506] trusted_key: syz.1.14011 sent an empty control message without MSG_MORE. [ 581.693771][ T3579] syzkaller1: entered promiscuous mode [ 581.699320][ T3579] syzkaller1: entered allmulticast mode [ 582.040767][ T3605] __nla_validate_parse: 4 callbacks suppressed [ 582.040784][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14054'. [ 582.218321][ T3615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.457186][ T3629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.466215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.480432][ T3629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.488916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.873484][ T3662] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14082'. [ 583.468171][ T3670] validate_nla: 7 callbacks suppressed [ 583.468184][ T3670] netlink: 'syz.0.14085': attribute type 9 has an invalid length. [ 583.483098][ T3670] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.14085'. [ 583.592978][ T3678] netlink: 27 bytes leftover after parsing attributes in process `syz.4.14089'. [ 583.997810][ T3707] netlink: 'syz.2.14101': attribute type 21 has an invalid length. [ 584.024675][ T3707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14101'. [ 584.303337][ T3729] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14111'. [ 584.393753][ T3738] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.14116'. [ 584.597370][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14122'. [ 584.657036][ T3758] netlink: 'syz.4.14124': attribute type 1 has an invalid length. [ 584.693595][ T3758] bond4: entered promiscuous mode [ 584.699103][ T3758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.758293][ T3758] bond4: (slave veth5): making interface the new active one [ 584.770770][ T3758] veth5: entered promiscuous mode [ 584.777983][ T3758] bond4: (slave veth5): Enslaving as an active interface with an up link [ 585.102839][ T3784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14136'. [ 585.126462][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14136'. [ 586.419607][ T3862] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 586.469391][ T3862] bond5 (unregistering): Released all slaves [ 587.843459][ T3908] pim6reg1: entered promiscuous mode [ 587.848798][ T3908] pim6reg1: entered allmulticast mode [ 588.482132][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14203'. [ 588.500435][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14203'. [ 588.509976][ T3932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.518499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.777923][ T3942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.801051][ T3942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.809416][ T3942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.861281][ T3942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.869574][ T3942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.898637][ T3939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.039131][ T3952] lo: Caught tx_queue_len zero misconfig [ 589.198829][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14216'. [ 589.629457][ T3988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14228'. [ 589.646471][ T3988] ipvlan0: entered promiscuous mode [ 589.655271][ T3988] ipvlan0: left promiscuous mode [ 589.691614][ T3993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14228'. [ 589.723032][ T3993] ipvlan0: entered promiscuous mode [ 589.736288][ T3993] ipvlan0: left promiscuous mode [ 590.709774][ T4031] syzkaller1: entered promiscuous mode [ 590.721348][ T4031] syzkaller1: entered allmulticast mode [ 591.002707][ T4043] syzkaller1: entered promiscuous mode [ 591.030757][ T4043] syzkaller1: entered allmulticast mode [ 591.372603][ T4062] netlink: 'syz.4.14259': attribute type 1 has an invalid length. [ 591.442121][ T4062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.465846][ T4069] bond5: (slave gretap1): making interface the new active one [ 591.476201][ T4069] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 592.075474][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14278'. [ 592.097958][ T4104] netlink: 23 bytes leftover after parsing attributes in process `syz.0.14278'. [ 592.527320][ T4126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 593.190158][ T4152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 593.993455][ T4204] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 594.013555][ T4204] bond10: (slave lo): Enslaving as an active interface with an up link [ 594.025097][ T4204] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 594.097544][ T4210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14322'. [ 594.110006][ T4210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14322'. [ 595.208122][ T4276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.433764][ T4273] virt_wifi0 speed is unknown, defaulting to 1000 [ 595.621535][ T4300] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.14360'. [ 596.924564][ T4379] IPVS: length: 132 != 8 [ 596.945975][ T4379] pimreg: entered allmulticast mode [ 597.065788][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14394'. [ 597.076829][ T4386] netlink: 'syz.0.14394': attribute type 9 has an invalid length. [ 597.476598][ T4409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.649939][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14408'. [ 597.679803][ T4416] bond0: (slave bond_slave_0): Releasing backup interface [ 597.786516][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14412'. [ 597.924314][ T4433] syzkaller1: entered promiscuous mode [ 597.929816][ T4433] syzkaller1: entered allmulticast mode [ 599.997816][ T4519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14449'. [ 600.211036][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14456'. [ 600.227935][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14456'. [ 600.431822][ T4547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14463'. [ 601.071566][ T4580] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.474974][ T4620] netlink: 'syz.4.14496': attribute type 4 has an invalid length. [ 601.524750][ T4620] netlink: 'syz.4.14496': attribute type 4 has an invalid length. [ 601.675213][ T4627] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 601.980282][ T4649] netlink: 120 bytes leftover after parsing attributes in process `syz.2.14509'. [ 601.992763][ T4649] netlink: 'syz.2.14509': attribute type 1 has an invalid length. [ 602.004076][ T4649] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14509'. [ 602.355466][ T4676] netlink: 'syz.3.14522': attribute type 4 has an invalid length. [ 602.384409][ T4676] netlink: 'syz.3.14522': attribute type 4 has an invalid length. [ 602.576633][ T4685] "syz.1.14526" (4685) uses obsolete ecb(arc4) skcipher [ 603.197221][ T4710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.205293][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14556'. [ 604.625077][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14569'. [ 604.833157][ T4801] pim6reg1: entered promiscuous mode [ 604.844069][ T4801] pim6reg1: entered allmulticast mode [ 605.882750][ T4851] atomic_op ffff88807d051998 conn xmit_atomic 0000000000000000 [ 605.922686][ T4855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.713885][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14607'. [ 606.737143][ T4886] netlink: 'syz.0.14607': attribute type 2 has an invalid length. [ 606.759993][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14607'. [ 606.951371][ T4893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.960272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.379146][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14639'. [ 608.397975][ T4962] gtp2: entered promiscuous mode [ 608.422269][ T4968] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.14642'. [ 608.432127][ T4968] netlink: Unknown conntrack attr (0) [ 608.451089][ T4962] gtp2: entered allmulticast mode [ 608.711379][ T4982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.719783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.111667][ T4999] netlink: 'syz.0.14655': attribute type 7 has an invalid length. [ 609.148695][ T4999] netlink: 'syz.0.14655': attribute type 7 has an invalid length. [ 609.470649][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14660'. [ 609.497206][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14660'. [ 609.532712][ T5015] netlink: 'syz.0.14660': attribute type 12 has an invalid length. [ 609.554713][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14660'. [ 609.583199][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14660'. [ 609.626855][ T5015] netlink: 'syz.0.14660': attribute type 12 has an invalid length. [ 609.824301][ T5022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14663'. [ 610.353673][ T5046] netlink: 'syz.2.14670': attribute type 1 has an invalid length. [ 610.371618][ T5049] IPv6: NLM_F_CREATE should be specified when creating new route [ 610.377319][ T5046] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.14670'. [ 610.497922][ T5052] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 610.868990][ T5076] netlink: 'syz.3.14687': attribute type 22 has an invalid length. [ 610.922984][ T5076] netlink: 'syz.3.14687': attribute type 22 has an invalid length. [ 611.374243][ T5110] netlink: 'syz.3.14699': attribute type 8 has an invalid length. [ 611.444838][ T5110] bond0: entered promiscuous mode [ 611.475520][ T5110] bond0: left promiscuous mode [ 611.664605][ T5126] openvswitch: netlink: Key type 270 is out of range max 32 [ 611.798223][ T5141] delete_channel: no stack [ 613.220010][ T5247] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 613.226063][ T5247] syzkaller1: Linktype set failed because interface is up [ 613.259474][ T5249] sit2: entered promiscuous mode [ 613.313820][ T5253] __nla_validate_parse: 4 callbacks suppressed [ 613.313840][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14754'. [ 613.604683][ T5265] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14759'. [ 613.650980][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.947869][ T5288] netlink: 'syz.2.14770': attribute type 1 has an invalid length. [ 614.000842][ T5288] 8021q: adding VLAN 0 to HW filter on device bond11 [ 614.046597][ T5294] bond11: (slave geneve3): making interface the new active one [ 614.072612][ T5294] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 614.084146][ T730] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 614.094755][ T730] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 614.198562][ T730] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 614.220234][ T730] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 614.323196][ T5311] netlink: 'syz.2.14779': attribute type 15 has an invalid length. [ 614.346996][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14779'. [ 614.399940][ T730] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 614.399965][ T5311] netlink: 'syz.2.14779': attribute type 15 has an invalid length. [ 614.408632][ T730] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 614.434035][ T730] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 614.444584][ T730] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 614.470494][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14779'. [ 614.608383][ T5324] IPVS: Scheduler module ip_vs_sip not found [ 614.800689][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.527895][ T5388] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14811'. [ 615.530725][ T5385] Bluetooth: hci1: too big key_count value 29096 [ 615.910566][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.011102][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.161082][ T730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.748237][ T5482] netlink: 220 bytes leftover after parsing attributes in process `syz.2.14844'. [ 618.761079][ T5482] netlink: 220 bytes leftover after parsing attributes in process `syz.2.14844'. [ 618.771232][ T5482] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14844'. [ 618.886748][ T5498] bridge_slave_0: left allmulticast mode [ 618.893634][ T5498] bridge_slave_0: left promiscuous mode [ 618.899410][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.932148][ T5498] bridge_slave_1: left allmulticast mode [ 618.937823][ T5498] bridge_slave_1: left promiscuous mode [ 618.964562][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.000723][ T5498] bond0: (slave c5): Releasing backup interface [ 619.028245][ T5498] : left promiscuous mode [ 619.069316][ T5498] bond0: (slave bond_slave_1): Releasing backup interface [ 619.260676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.390891][ T730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.900713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.500559][ T730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.600605][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.071051][ T5498] tipc: Resetting bearer [ 622.079435][ T5498] bond_slave_1: left promiscuous mode [ 622.087499][ T5498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.102550][ T5498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 622.153853][ T58] tipc: Resetting bearer [ 622.274655][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14863'. [ 622.320811][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14863'. [ 622.346942][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14863'. [ 622.413570][ T5551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14868'. [ 622.593153][ T5562] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 622.679107][ T5564] syzkaller1: entered promiscuous mode [ 622.688034][ T5566] IPVS: dh: FWM 3 0x00000003 - no destination available [ 622.691845][ T5564] syzkaller1: entered allmulticast mode [ 622.701700][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.760033][ T5569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14875'. [ 622.776966][ T5569] netlink: 'syz.4.14875': attribute type 2 has an invalid length. [ 622.994676][ T5591] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 623.215250][ T5608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14889'. [ 623.729724][ T5645] netlink: 'syz.0.14900': attribute type 12 has an invalid length. [ 623.810851][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.003292][ T5664] netlink: 'syz.4.14906': attribute type 1 has an invalid length. [ 624.133276][ T5671] bond6: (slave geneve0): making interface the new active one [ 624.175164][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.196974][ T5671] bond6: (slave geneve0): Enslaving as an active interface with an up link [ 624.236998][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 624.255748][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 624.290769][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 624.319359][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 624.361831][ T5685] netlink: 'syz.0.14912': attribute type 1 has an invalid length. [ 624.398424][ T5688] tipc: Failed to remove unknown binding: 66,1,1/4269801492:3506190583/3506190585 [ 624.418340][ T5688] tipc: Failed to remove unknown binding: 66,1,1/4269801492:3506190583/3506190585 [ 624.426130][ T5685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 624.747676][ T5707] netlink: 'syz.2.14921': attribute type 29 has an invalid length. [ 624.768086][ T5707] netlink: 'syz.2.14921': attribute type 29 has an invalid length. [ 624.930622][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.997383][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14927'. [ 625.006454][ T5721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.107522][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14927'. [ 625.120782][ T5722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 625.149001][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.158226][ T5729] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 625.270848][ T5732] bond5 (unregistering): (slave batadv0): Releasing backup interface [ 625.293962][ T5732] bond5 (unregistering): Released all slaves [ 625.426509][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14936'. [ 625.682869][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14943'. [ 625.711208][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14943'. [ 626.045108][ T163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.323106][ T5774] netlink: 'syz.0.14949': attribute type 1 has an invalid length. [ 626.420244][ T5774] bond5: (slave bridge0): making interface the new active one [ 626.434466][ T5774] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 626.831197][ T5805] pim6reg1: entered promiscuous mode [ 626.847478][ T5805] pim6reg1: entered allmulticast mode [ 627.150727][ T730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.260940][ T5833] netlink: 7920 bytes leftover after parsing attributes in process `syz.4.14967'. [ 627.404940][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14971'. [ 627.472244][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14973'. [ 627.769570][ T5904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14977'. [ 628.825351][ T5966] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.15005'. [ 629.024009][ T5982] syzkaller1: entered promiscuous mode [ 629.029596][ T5982] syzkaller1: entered allmulticast mode [ 629.187289][ T5992] syzkaller1: entered promiscuous mode [ 629.194707][ T5992] syzkaller1: entered allmulticast mode [ 629.501638][ T6011] syzkaller1: entered promiscuous mode [ 629.507205][ T6011] syzkaller1: entered allmulticast mode [ 630.161992][ T6048] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15040'. [ 630.191156][ T6048] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15040'. [ 630.880034][ T6078] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15053'. [ 631.526307][ T6114] netlink: 'syz.0.15069': attribute type 13 has an invalid length. [ 631.881377][ T6126] lo: Caught tx_queue_len zero misconfig [ 632.102197][ T6131] netlink: 'syz.3.15074': attribute type 11 has an invalid length. [ 632.302214][ T6137] syzkaller1: entered promiscuous mode [ 632.307810][ T6137] syzkaller1: entered allmulticast mode [ 632.633077][ T6154] bridge0: entered allmulticast mode [ 632.642724][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15083'. [ 632.671153][ T6154] team0: left allmulticast mode [ 632.676279][ T6154] team_slave_0: left allmulticast mode [ 632.682246][ T6154] : left allmulticast mode [ 632.686923][ T6154] bond2: left allmulticast mode [ 632.692095][ T6154] team0: left promiscuous mode [ 632.697039][ T6154] team_slave_0: left promiscuous mode [ 632.705170][ T6154] : left promiscuous mode [ 632.711862][ T6154] bond2: left promiscuous mode [ 632.717307][ T6154] bridge0: port 4(team0) entered disabled state [ 632.732510][ T6154] gretap0: left allmulticast mode [ 632.737851][ T6154] gretap0: left promiscuous mode [ 632.744975][ T6154] bridge0: port 3(gretap0) entered disabled state [ 632.754852][ T6154] bridge_slave_1: left allmulticast mode [ 632.760928][ T6154] bridge_slave_1: left promiscuous mode [ 632.766685][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.777383][ T6154] x9: left allmulticast mode [ 632.782481][ T6154] x9: left promiscuous mode [ 632.787344][ T6154] bridge0: port 1(1x9) entered disabled state [ 632.806683][ T6154] bridge0 (unregistering): left allmulticast mode [ 632.808439][ T6163] netlink: 'syz.1.15085': attribute type 4 has an invalid length. [ 633.162942][ T6158] virt_wifi0 speed is unknown, defaulting to 1000 [ 633.218476][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15091'. [ 633.285472][ T6178] team1: entered promiscuous mode [ 633.298714][ T6178] team1: entered allmulticast mode [ 633.313492][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15091'. [ 633.314363][ T6178] 8021q: adding VLAN 0 to HW filter on device team1 [ 633.378826][ T6182] team2: entered promiscuous mode [ 633.385123][ T6182] team2: entered allmulticast mode [ 633.391073][ T6182] 8021q: adding VLAN 0 to HW filter on device team2 [ 633.461409][ T6189] veth0: entered promiscuous mode [ 633.467911][ T6184] veth0: left promiscuous mode [ 633.551251][ T6191] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 633.562554][ T6190] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 633.747079][ T6199] sock: sock_set_timeout: `syz.4.15100' (pid 6199) tries to set negative timeout [ 634.108914][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15108'. [ 634.128816][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15108'. [ 634.165489][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15108'. [ 634.180413][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15108'. [ 635.168717][ T6210] virt_wifi0 speed is unknown, defaulting to 1000 [ 635.687512][ T6265] netlink: 'syz.1.15127': attribute type 1 has an invalid length. [ 635.876449][ T6271] bond5: (slave bridge11): making interface the new active one [ 635.896378][ T6271] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 636.418355][ T6279] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.969686][ T6319] netlink: 'syz.3.15148': attribute type 1 has an invalid length. [ 637.118657][ T6322] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 637.157357][ T6322] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 637.214599][ T6322] bond2: (slave ip6gre1): making interface the new active one [ 637.241922][ T6322] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 637.299772][ T6325] netlink: 'syz.4.15150': attribute type 1 has an invalid length. [ 637.311387][ T6325] netlink: 264 bytes leftover after parsing attributes in process `syz.4.15150'. [ 637.343353][ T6325] netlink: 'syz.4.15150': attribute type 1 has an invalid length. [ 637.351325][ T6325] netlink: 264 bytes leftover after parsing attributes in process `syz.4.15150'. [ 637.623747][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15163'. [ 638.030207][ T6369] vlan2: entered allmulticast mode [ 638.042728][ T6369] bridge0: port 1(vlan2) entered blocking state [ 638.051655][ T6369] bridge0: port 1(vlan2) entered disabled state [ 638.062986][ T6356] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.813398][ T6407] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15181'. [ 638.904266][ T6410] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 639.294019][ T6431] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 639.791706][ T6470] netlink: 192 bytes leftover after parsing attributes in process `syz.3.15196'. [ 640.532895][ T6464] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.046800][ T6468] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.006016][ T6530] "syz.0.15217" (6530) uses obsolete ecb(arc4) skcipher [ 643.154909][ T6586] netlink: 277 bytes leftover after parsing attributes in process `syz.2.15237'. [ 643.272279][ T6591] block nbd0: not configured, cannot reconfigure [ 643.289050][ T6591] block nbd0: not configured, cannot reconfigure [ 643.361663][ T6595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.417660][ T6598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.424948][ T6598] IPv6: NLM_F_CREATE should be set when creating new route [ 644.477858][ T6619] virt_wifi0 speed is unknown, defaulting to 1000 [ 644.634183][ T6636] netlink: 'syz.3.15258': attribute type 13 has an invalid length. [ 644.652196][ T6636] netlink: 'syz.3.15258': attribute type 17 has an invalid length. [ 644.759126][ T6636] bridge0: left allmulticast mode [ 644.793763][ T6636] 8021q: adding VLAN 0 to HW filter on device .` [ 644.812844][ T6636] 8021q: adding VLAN 0 to HW filter on device ` [ 644.835983][ T6636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.956133][ T6649] netlink: 'syz.1.15264': attribute type 1 has an invalid length. [ 645.059158][ T6649] bond6: entered promiscuous mode [ 645.067880][ T6649] bond6: entered allmulticast mode [ 645.076375][ T6649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.155054][ T6660] netlink: 'syz.4.15265': attribute type 83 has an invalid length. [ 645.163601][ T6654] erspan1: entered allmulticast mode [ 645.195354][ T6654] bond6: (slave erspan1): making interface the new active one [ 645.220790][ T6654] erspan1: entered promiscuous mode [ 645.245162][ T6654] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 645.756403][ T163] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 645.772792][ T163] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 645.781370][ T163] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 645.789922][ T163] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 645.806074][ T163] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 645.815957][ T163] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 645.824920][ T163] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 645.834266][ T163] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 645.843285][ T163] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 645.914890][ T163] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 645.936828][ T163] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 645.952086][ T163] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 646.380257][ T6712] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15281'. [ 648.087049][ T6726] virt_wifi0 speed is unknown, defaulting to 1000 [ 648.853131][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15309'. [ 650.734053][ T6838] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.148638][ T6844] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.462449][ T6868] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15345'. [ 651.553119][ T6869] delete_channel: no stack [ 651.659494][ T6874] x9: renamed from bridge_slave_0 [ 651.979217][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15352'. [ 652.364637][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15356'. [ 652.401974][ T6894] netlink: 'syz.0.15355': attribute type 13 has an invalid length. [ 652.413453][ T6894] netlink: 'syz.0.15355': attribute type 17 has an invalid length. [ 652.549445][ T6894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.588038][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15361'. [ 652.952838][ T6926] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15368'. [ 653.043418][ T6928] netlink: 'syz.1.15371': attribute type 11 has an invalid length. [ 653.051614][ T6928] netlink: 'syz.1.15371': attribute type 4 has an invalid length. [ 653.061713][ T6928] netlink: 'syz.1.15371': attribute type 5 has an invalid length. [ 653.082674][ T6928] netlink: 'syz.1.15371': attribute type 6 has an invalid length. [ 653.092088][ T6928] netlink: 199748 bytes leftover after parsing attributes in process `syz.1.15371'. [ 653.152672][ T6936] netlink: 'syz.4.15373': attribute type 1 has an invalid length. [ 653.227977][ T6940] gretap2: entered allmulticast mode [ 653.236540][ T6940] bond7: (slave gretap2): making interface the new active one [ 653.246856][ T6940] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 653.518963][ T6953] netlink: 'syz.0.15381': attribute type 3 has an invalid length. [ 655.052452][ T7017] syzkaller1: entered promiscuous mode [ 655.058176][ T7017] syzkaller1: entered allmulticast mode [ 655.537453][ T7033] netlink: 208 bytes leftover after parsing attributes in process `syz.4.15412'. [ 655.546737][ T7033] netlink: 208 bytes leftover after parsing attributes in process `syz.4.15412'. [ 656.692588][ T7080] syzkaller0: entered promiscuous mode [ 656.698019][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15428'. [ 656.932593][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15429'. [ 657.733919][ T7113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.916135][ T7123] netlink: 'syz.2.15446': attribute type 1 has an invalid length. [ 657.945600][ T7123] 8021q: adding VLAN 0 to HW filter on device bond13 [ 659.095458][ T7157] sctp: [Deprecated]: syz.3.15458 (pid 7157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.095458][ T7157] Use struct sctp_sack_info instead [ 659.215546][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15461'. [ 659.295328][ T7166] syzkaller1: entered promiscuous mode [ 659.312024][ T7166] syzkaller1: entered allmulticast mode [ 659.831129][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15473'. [ 659.861347][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15473'. [ 659.902299][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15474'. [ 660.439605][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15485'. [ 660.476870][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15486'. [ 660.855528][ T7229] syzkaller1: entered promiscuous mode [ 660.870484][ T7229] syzkaller1: entered allmulticast mode [ 661.107247][ T7211] virt_wifi0 speed is unknown, defaulting to 1000 [ 661.345457][ T7241] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 661.380444][ T7241] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 661.422402][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15495'. [ 661.543833][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15497'. [ 661.754574][ T7254] netlink: 'syz.1.15497': attribute type 1 has an invalid length. [ 661.764629][ T7254] netlink: 92 bytes leftover after parsing attributes in process `syz.1.15497'. [ 662.977641][ T7285] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.15511'. [ 663.298752][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15518'. [ 663.440854][ T7296] .`: (slave `): Releasing backup interface [ 663.447672][ T7296] .`: (slave `): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 663.475223][ T7296] .`: (slave batadv0): Releasing backup interface [ 663.522634][ T7296] bridge_slave_0: left allmulticast mode [ 663.528487][ T7296] bridge_slave_0: left promiscuous mode [ 663.534971][ T7296] bridge0: port 2(bridge_slave_0) entered disabled state [ 663.547928][ T7296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 663.601118][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15518'. [ 664.092363][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15526'. [ 664.115802][ T7307] virt_wifi0 speed is unknown, defaulting to 1000 [ 664.213035][ T7341] netlink: 'syz.2.15529': attribute type 1 has an invalid length. [ 664.276229][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15529'. [ 664.286762][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15529'. [ 664.474355][ T7341] bond14: entered promiscuous mode [ 664.479959][ T7341] 8021q: adding VLAN 0 to HW filter on device bond14 [ 664.546963][ T7344] bond14: (slave bridge7): making interface the new active one [ 664.554917][ T7344] bridge7: entered promiscuous mode [ 664.562657][ T7344] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 664.638735][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15530'. [ 664.739558][ T7353] bridge9: entered allmulticast mode [ 664.899793][ T7366] xt_hashlimit: size too large, truncated to 1048576 [ 665.184797][ T7370] syzkaller1: entered promiscuous mode [ 665.207796][ T7370] syzkaller1: entered allmulticast mode [ 667.256646][ T7442] __nla_validate_parse: 1 callbacks suppressed [ 667.256665][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15555'. [ 668.407532][ T7452] netlink: 'syz.3.15559': attribute type 1 has an invalid length. [ 668.498346][ T7452] bond3: entered promiscuous mode [ 668.513335][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15560'. [ 668.538419][ T7452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 668.649084][ T7452] bond3: (slave bridge10): making interface the new active one [ 668.656880][ T7452] bridge10: entered promiscuous mode [ 668.673769][ T7452] bridge10: left promiscuous mode [ 669.081003][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15570'. [ 669.115144][ T7483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 669.126938][ T7483] bond4: option ad_select: unable to set because the bond device is up [ 669.183458][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15571'. [ 669.248978][ T7476] virt_wifi0 speed is unknown, defaulting to 1000 [ 669.568024][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15579'. [ 669.647929][ T7508] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 669.886508][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15586'. [ 669.972117][ T7525] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 669.981928][ T7525] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 669.990738][ T7524] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 670.001672][ T7524] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 670.100799][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15591'. [ 670.186048][ T7536] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.15592'. [ 670.453867][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15597'. [ 670.569835][ T7553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15599'. [ 670.590162][ T7553] netlink: 'syz.1.15599': attribute type 7 has an invalid length. [ 670.603800][ T7553] netlink: 'syz.1.15599': attribute type 8 has an invalid length. [ 670.747534][ T7542] virt_wifi0 speed is unknown, defaulting to 1000 [ 670.825236][ T7561] syzkaller1: entered promiscuous mode [ 670.831243][ T7561] syzkaller1: entered allmulticast mode [ 670.866033][ T7563] bond6: entered promiscuous mode [ 670.871543][ T7563] bond6: entered allmulticast mode [ 670.877909][ T7563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.200242][ T7568] bridge0: port 3(vlan1) entered disabled state [ 671.200642][ T7576] block nbd0: server does not support multiple connections per device. [ 671.232830][ T7576] block nbd0: shutting down sockets [ 671.377771][ T7568] wg1: left promiscuous mode [ 671.382681][ T7568] wg1: left allmulticast mode [ 671.399973][ T7568] ip6erspan0: left allmulticast mode [ 671.406757][ T7568] vti0: left promiscuous mode [ 671.412611][ T7568] veth3: left promiscuous mode [ 671.419390][ T7568] bond3: left promiscuous mode [ 671.424732][ T7568] bond3: left allmulticast mode [ 671.472648][ T7568] tipc: Resetting bearer [ 671.508678][ T7568] geneve3: left promiscuous mode [ 671.518457][ T7568] geneve3: left allmulticast mode [ 671.528773][ T7568] vlan2: left promiscuous mode [ 671.534767][ T7568] bond0: left promiscuous mode [ 671.619050][ T7568] bond6: left promiscuous mode [ 671.627584][ T7568] erspan1: left promiscuous mode [ 671.633474][ T7568] bond6: left allmulticast mode [ 671.643600][ T7568] erspan1: left allmulticast mode [ 671.706166][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.715185][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.835556][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.882953][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.936709][ T7646] __nla_validate_parse: 4 callbacks suppressed [ 672.936728][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15626'. [ 673.078975][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15626'. [ 673.705428][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15640'. [ 673.804591][ T7689] syzkaller1: entered promiscuous mode [ 673.810242][ T7689] syzkaller1: entered allmulticast mode [ 674.727202][ T7709] virt_wifi0 speed is unknown, defaulting to 1000 [ 674.812968][ T7739] netlink: 'syz.4.15661': attribute type 1 has an invalid length. [ 674.866111][ T7739] netlink: 'syz.4.15661': attribute type 4 has an invalid length. [ 674.874096][ T7739] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15661'. [ 674.885626][ T7739] netlink: 'syz.4.15661': attribute type 1 has an invalid length. [ 674.895868][ T7739] netlink: 'syz.4.15661': attribute type 4 has an invalid length. [ 674.904618][ T7739] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15661'. [ 674.927957][ T7738] syzkaller1: entered promiscuous mode [ 674.939348][ T7738] syzkaller1: entered allmulticast mode [ 675.221398][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15670'. [ 675.439115][ T7767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.471129][ T7767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.942945][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15686'. [ 675.953567][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15685'. [ 676.064413][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15683'. [ 677.257481][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15701'. [ 678.024684][ T7859] __nla_validate_parse: 1 callbacks suppressed [ 678.024702][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15702'. [ 678.089505][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15704'. [ 678.121746][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15706'. [ 678.131445][ T7859] team0: Port device team_slave_0 removed [ 678.174889][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15706'. [ 678.316100][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15708'. [ 678.471260][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15712'. [ 678.480250][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15712'. [ 678.598196][ T7863] virt_wifi0 speed is unknown, defaulting to 1000 [ 679.037040][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15722'. [ 679.081131][ T7915] gretap0: entered promiscuous mode [ 679.279664][ T7907] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.141424][ T7949] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15737'. [ 680.260632][ T7949] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15737'. [ 680.635413][ T7957] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.980929][ T7975] syzkaller1: entered promiscuous mode [ 680.996638][ T7975] syzkaller1: entered allmulticast mode [ 683.669042][ T8037] lec:lec_atm_close: lec0: Shut down! [ 683.813309][ T8055] __nla_validate_parse: 9 callbacks suppressed [ 683.813326][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15775'. [ 683.889542][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15775'. [ 683.929827][ T8055] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 683.991725][ T8055] iwpm_mapping_info_cb: Unable to parse nlmsg [ 684.251010][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15780'. [ 684.262187][ T8059] virt_wifi0 speed is unknown, defaulting to 1000 [ 684.366857][ T8076] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 684.401410][ T8076] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 684.470065][ T8081] netlink: 'syz.0.15781': attribute type 1 has an invalid length. [ 684.626033][ T8083] bridge0: Device is already in use. [ 684.743172][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15783'. [ 684.772946][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15783'. [ 684.876387][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15786'. [ 684.965117][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15784'. [ 684.971725][ T8102] netlink: 92 bytes leftover after parsing attributes in process `syz.4.15786'. [ 685.110589][ T846] lec:lec_start_xmit: lec0:No lecd attached [ 685.191008][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15789'. [ 685.471259][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15793'. [ 686.362911][ T8140] virt_wifi0 speed is unknown, defaulting to 1000 [ 686.835159][ T8188] netlink: 'syz.0.15808': attribute type 1 has an invalid length. [ 686.961394][ T8188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 687.043340][ T8191] bond8: (slave veth9): Enslaving as an active interface with a down link [ 687.085501][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 687.092789][ T8194] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 687.123228][ T8201] tipc: Enabling of bearer rejected, failed to enable media [ 688.193222][ T8255] netlink: 'syz.0.15832': attribute type 1 has an invalid length. [ 688.260854][ T8255] netlink: 'syz.0.15832': attribute type 4 has an invalid length. [ 688.304995][ T8247] virt_wifi0 speed is unknown, defaulting to 1000 [ 689.148394][ T8289] __nla_validate_parse: 3 callbacks suppressed [ 689.148414][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15844'. [ 689.592216][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15851'. [ 689.924160][ T8318] netlink: 'syz.2.15855': attribute type 1 has an invalid length. [ 689.932370][ T8318] netlink: 240 bytes leftover after parsing attributes in process `syz.2.15855'. [ 690.300422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 690.308993][ C0] lec:lec_tx_timeout: lec0 [ 690.314037][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 690.526862][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.541652][ T8344] netlink: 'syz.4.15866': attribute type 4 has an invalid length. [ 690.543452][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.574079][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.577104][ T8344] netlink: 'syz.4.15866': attribute type 4 has an invalid length. [ 690.589399][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.606116][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.626334][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.640840][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.680135][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.690153][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.698356][ T8342] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.762188][ T8344] hsr0: left allmulticast mode [ 690.790553][ T8344] hsr_slave_0: left allmulticast mode [ 690.795984][ T8344] hsr_slave_1: left allmulticast mode [ 691.041220][ T163] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.049852][ T163] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 691.077612][ T163] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.092039][ T163] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 691.107818][ T8353] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 691.142566][ T163] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.166654][ T163] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 691.191975][ T163] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.210423][ T163] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 691.300732][ T8357] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2389149725/2389149726 [ 691.367914][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15870'. [ 691.463904][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15871'. [ 691.552808][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15872'. [ 691.613675][ T8347] virt_wifi0 speed is unknown, defaulting to 1000 [ 691.998716][ T8373] syzkaller1: entered promiscuous mode [ 692.014813][ T8373] syzkaller1: entered allmulticast mode [ 692.479827][ T8383] vlan4: entered allmulticast mode [ 692.489064][ T8383] bond0: entered allmulticast mode [ 692.529989][ T8387] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15880'. [ 692.665025][ T8383] bond_slave_0: entered allmulticast mode [ 692.702829][ T8383] bond_slave_1: entered allmulticast mode [ 692.783423][ T8387] bond0 (unregistering): left promiscuous mode [ 692.808254][ T8387] bond_slave_0: left promiscuous mode [ 692.824266][ T8387] bond_slave_1: left promiscuous mode [ 692.832352][ T8387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.871709][ T8387] bond_slave_0: left allmulticast mode [ 692.891038][ T8387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.910765][ T8387] bond_slave_1: left allmulticast mode [ 692.916730][ T8387] bond0 (unregistering): Released all slaves [ 692.953604][ T8381] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.269551][ T8403] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 693.366474][ T8410] bond9: entered promiscuous mode [ 693.544708][ T8415] macvlan5: entered promiscuous mode [ 693.546726][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15891'. [ 693.568970][ T8415] macvlan5: entered allmulticast mode [ 693.578743][ T8415] bond9: (slave macvlan5): Opening slave failed [ 693.711558][ T8428] netlink: 'syz.4.15893': attribute type 1 has an invalid length. [ 693.942966][ T8428] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.991198][ T8432] bond9: (slave veth15): Enslaving as an active interface with a down link [ 694.004035][ T8434] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 694.043310][ T8437] bond9: (slave dummy0): making interface the new active one [ 694.062060][ T8437] dummy0: entered promiscuous mode [ 694.067709][ T8437] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 694.161177][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15897'. [ 694.346758][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15902'. [ 695.514168][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15914'. [ 695.543725][ T8492] netlink: 'syz.1.15915': attribute type 1 has an invalid length. [ 695.555770][ T8484] virt_wifi0 speed is unknown, defaulting to 1000 [ 695.610528][ T8492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.760967][ T8492] veth13: entered promiscuous mode [ 695.778752][ T8492] bond7: (slave veth13): Enslaving as an active interface with an up link [ 695.828138][ T8501] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15918'. [ 695.990944][ T8507] tipc: Enabled bearer , priority 0 [ 696.060344][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 696.068411][ C0] lec:lec_tx_timeout: lec0 [ 696.073948][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 696.336887][ T8507] syzkaller0: entered promiscuous mode [ 696.349140][ T8507] syzkaller0: entered allmulticast mode [ 696.365281][ T8507] tipc: Resetting bearer [ 696.494836][ T58] tipc: Resetting bearer [ 696.657574][ T8506] tipc: Resetting bearer [ 698.052967][ T8506] tipc: Disabling bearer [ 698.075279][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15938'. [ 698.115945][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15938'. [ 698.267806][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15942'. [ 698.273267][ T8558] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15941'. [ 698.301830][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15942'. [ 698.411898][ T8568] syzkaller1: entered promiscuous mode [ 698.475931][ T8568] syzkaller1: entered allmulticast mode [ 698.709641][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15947'. [ 699.615939][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 699.642849][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 699.661934][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 699.722194][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 699.742450][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 699.753890][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15955'. [ 700.048600][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15959'. [ 700.284398][ T8649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15964'. [ 700.343144][ T8659] syzkaller1: entered promiscuous mode [ 700.385690][ T8659] syzkaller1: entered allmulticast mode [ 700.613184][ T8640] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.813389][ T8673] xt_hashlimit: size too large, truncated to 1048576 [ 700.969555][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15970'. [ 701.080403][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 701.088430][ C0] lec:lec_tx_timeout: lec0 [ 701.093195][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 701.489367][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15974'. [ 701.553533][ T8708] tipc: Failed to remove unknown binding: 66,1,1/1618099073:2290451734/2290451736 [ 701.587276][ T8708] tipc: Failed to remove unknown binding: 66,1,1/1618099073:2290451734/2290451736 [ 701.631700][ T8708] tipc: Failed to remove unknown binding: 66,1,1/1618099073:2290451734/2290451736 [ 703.023838][ T8746] netlink: 'syz.3.15994': attribute type 13 has an invalid length. [ 703.655095][ T8761] virt_wifi0 speed is unknown, defaulting to 1000 [ 704.287585][ T8786] tipc: Enabled bearer , priority 0 [ 704.296464][ T8787] syzkaller0: entered promiscuous mode [ 704.304228][ T8787] syzkaller0: entered allmulticast mode [ 704.435419][ T8777] tipc: Resetting bearer [ 704.501309][ T8777] tipc: Disabling bearer [ 704.520252][ T8792] : entered promiscuous mode [ 704.882427][ T8811] __nla_validate_parse: 4 callbacks suppressed [ 704.882445][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16013'. [ 705.231335][ T163] dummy0: left promiscuous mode [ 705.258715][ T8829] netlink: 'syz.3.16020': attribute type 4 has an invalid length. [ 705.425611][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16024'. [ 705.581463][ T8851] netlink: 'syz.0.16028': attribute type 1 has an invalid length. [ 705.831390][ T8851] bond10: entered promiscuous mode [ 705.846212][ T8851] 8021q: adding VLAN 0 to HW filter on device bond10 [ 705.905341][ T8855] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 705.923207][ T8855] bond5 (unregistering): Released all slaves [ 706.100369][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 706.108397][ C0] lec:lec_tx_timeout: lec0 [ 706.120418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 706.196286][ T8861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 706.222434][ T8861] bond10: (slave vti1): The slave device specified does not support setting the MAC address [ 706.234774][ T8861] bond10: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 706.255159][ T8861] bond10: (slave vti1): making interface the new active one [ 706.265509][ T8861] vti1: entered promiscuous mode [ 706.291097][ T8861] bond10: (slave vti1): Enslaving as an active interface with an up link [ 707.138901][ T8897] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 707.424701][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16046'. [ 707.813879][ T8900] virt_wifi0 speed is unknown, defaulting to 1000 [ 708.054591][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16052'. [ 708.083381][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16052'. [ 709.100973][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 709.396189][ T8941] virt_wifi0 speed is unknown, defaulting to 1000 [ 709.692884][ T8969] tipc: Enabled bearer , priority 0 [ 709.828644][ T8969] syzkaller0: entered promiscuous mode [ 709.846212][ T8969] syzkaller0: entered allmulticast mode [ 709.862163][ T8969] tipc: Resetting bearer [ 709.944809][ T8968] tipc: Resetting bearer [ 710.991569][ T9001] netlink: 'syz.3.16075': attribute type 4 has an invalid length. [ 711.056340][ T9002] netlink: 'syz.3.16075': attribute type 4 has an invalid length. [ 711.666525][ T8968] tipc: Disabling bearer [ 711.824693][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16079'. [ 711.900345][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 711.908365][ C0] lec:lec_tx_timeout: lec0 [ 711.913030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 712.203182][ T9010] 8021q: adding VLAN 0 to HW filter on device bond15 [ 712.349394][ T9015] macsec4: entered promiscuous mode [ 712.359917][ T9015] bond15: entered promiscuous mode [ 712.368087][ T9015] bond15: left promiscuous mode [ 712.392826][ T58] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.401458][ T58] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.411023][ T58] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.419535][ T58] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.445883][ T58] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.464261][ T58] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.488103][ T58] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.511578][ T58] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.608482][ T9037] bond5: entered promiscuous mode [ 712.658282][ T9044] vcan2: entered promiscuous mode [ 712.671987][ T9044] vcan2: entered allmulticast mode [ 712.687084][ T9044] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 712.698401][ T9044] bond5: (slave vcan2): Error -95 calling set_mac_address [ 713.167798][ T9060] netlink: 'syz.0.16093': attribute type 1 has an invalid length. [ 713.460695][ T9065] macvlan5: entered promiscuous mode [ 713.467086][ T9065] macvlan5: entered allmulticast mode [ 713.504691][ T9065] bond11: entered promiscuous mode [ 713.517353][ T9065] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 713.578474][ T9065] bond11: left promiscuous mode [ 713.612357][ T9042] virt_wifi0 speed is unknown, defaulting to 1000 [ 713.735125][ T9075] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16099'. [ 713.905927][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16101'. [ 714.118379][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16105'. [ 714.164892][ T9093] geneve4: entered promiscuous mode [ 714.192223][ T9089] vlan3: entered promiscuous mode [ 714.197348][ T9089] bridge0: entered promiscuous mode [ 714.230403][ T9089] vlan2: entered promiscuous mode [ 714.235474][ T9089] x9: entered promiscuous mode [ 714.264903][ T163] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.301364][ T163] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.317617][ T163] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.333029][ T163] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.082580][ T9120] tipc: Enabled bearer , priority 0 [ 715.140174][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16118'. [ 715.153971][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16118'. [ 715.475880][ T9128] virt_wifi0 speed is unknown, defaulting to 1000 [ 715.824255][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16122'. [ 715.850521][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16122'. [ 716.940432][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 716.948510][ C0] lec:lec_tx_timeout: lec0 [ 716.953653][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 717.352309][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16141'. [ 718.133369][ T9219] tipc: Enabled bearer , priority 0 [ 718.245434][ T9219] syzkaller0: entered promiscuous mode [ 718.260473][ T9219] syzkaller0: entered allmulticast mode [ 718.268839][ T9219] tipc: Resetting bearer [ 718.343237][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16153'. [ 718.381755][ T9218] tipc: Resetting bearer [ 718.974030][ T9232] netlink: 'syz.0.16156': attribute type 11 has an invalid length. [ 720.378809][ T9218] tipc: Disabling bearer [ 720.389034][ T9213] virt_wifi0 speed is unknown, defaulting to 1000 [ 720.471388][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16157'. [ 720.549889][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16157'. [ 720.703026][ T9249] netlink: 41 bytes leftover after parsing attributes in process `syz.1.16160'. [ 720.736060][ T9215] virt_wifi0 speed is unknown, defaulting to 1000 [ 720.751334][ T9249] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16160'. [ 721.340992][ T9250] virt_wifi0 speed is unknown, defaulting to 1000 [ 721.846232][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16166'. [ 721.960342][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 721.968391][ C0] lec:lec_tx_timeout: lec0 [ 721.973258][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 722.381607][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16169'. [ 723.135073][ T9316] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.16183'. [ 723.350230][ T9327] netlink: 'syz.2.16189': attribute type 1 has an invalid length. [ 723.360726][ T9327] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16189'. [ 723.493754][ T9312] virt_wifi0 speed is unknown, defaulting to 1000 [ 723.528042][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16193'. [ 723.624551][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16195'. [ 723.737872][ T9348] veth13: left promiscuous mode [ 723.801484][ T9348] geneve4: left promiscuous mode [ 723.824281][ T163] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.848677][ T163] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.863333][ T163] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.994509][ T163] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.119801][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16203'. [ 724.677260][ T9377] nbd0: detected capacity change from 0 to 63 [ 724.693340][ T9380] block nbd0: NBD_DISCONNECT [ 724.702460][ T9380] block nbd0: Disconnected due to user request. [ 724.712359][ T9370] virt_wifi0 speed is unknown, defaulting to 1000 [ 724.731840][ T9380] block nbd0: shutting down sockets [ 724.743210][ C0] blk_print_req_error: 138 callbacks suppressed [ 724.743240][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.759007][ C0] buffer_io_error: 138 callbacks suppressed [ 724.759024][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 724.772738][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.782254][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 724.790036][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.799553][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 724.807386][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.816896][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 724.833818][ T8085] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.883893][ T8085] Buffer I/O error on dev nbd0, logical block 0, async page read [ 724.926877][ T8085] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.937077][ T8085] Buffer I/O error on dev nbd0, logical block 1, async page read [ 724.945431][ T8085] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.956395][ T8085] Buffer I/O error on dev nbd0, logical block 2, async page read [ 724.964472][ T8085] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.974352][ T8085] Buffer I/O error on dev nbd0, logical block 3, async page read [ 724.982397][ T8085] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 724.992251][ T8085] Buffer I/O error on dev nbd0, logical block 0, async page read [ 725.001174][ T8085] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.011029][ T8085] Buffer I/O error on dev nbd0, logical block 1, async page read [ 725.020015][ T8085] ldm_validate_partition_table(): Disk read failed. [ 725.027976][ T8085] Dev nbd0: unable to read RDB block 0 [ 725.034247][ T8085] nbd0: unable to read partition table [ 725.043970][ T8085] ldm_validate_partition_table(): Disk read failed. [ 725.051114][ T8085] Dev nbd0: unable to read RDB block 0 [ 725.057096][ T8085] nbd0: unable to read partition table [ 725.111594][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16215'. [ 725.290934][ T9396] nbd: socks must be embedded in a SOCK_ITEM attr [ 725.306381][ T8085] block nbd64: NBD_DISCONNECT [ 725.308056][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16215'. [ 725.370474][ T9402] nbd: device at index 64 is going down [ 725.607230][ T8085] udevd[8085]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 725.620183][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16221'. [ 725.690937][ T9414] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 725.717291][ T9414] team0 (unregistering): Port device team_slave_0 removed [ 725.732760][ T9414] team0 (unregistering): Failed to send options change via netlink (err -105) [ 725.751387][ T9414] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 725.777332][ T9414] team0 (unregistering): Port device team_slave_1 removed [ 725.998747][ T9401] virt_wifi0 speed is unknown, defaulting to 1000 [ 726.339692][ T9442] net_ratelimit: 762 callbacks suppressed [ 726.339713][ T9442] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 726.576076][ T9462] netlink: 'syz.3.16234': attribute type 11 has an invalid length. [ 726.867545][ T9454] virt_wifi0 speed is unknown, defaulting to 1000 [ 726.980343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 726.988387][ C0] lec:lec_tx_timeout: lec0 [ 726.993142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 727.231641][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16244'. [ 727.646116][ T9480] virt_wifi0 speed is unknown, defaulting to 1000 [ 728.154560][ T9512] bond10: entered promiscuous mode [ 728.183253][ T9521] vlan3: entered promiscuous mode [ 728.188318][ T9521] syz_tun: entered promiscuous mode [ 728.765573][ T9538] vlan6: entered promiscuous mode [ 728.771494][ T9538] vlan6: entered allmulticast mode [ 728.776746][ T9538] hsr_slave_1: entered allmulticast mode [ 730.432491][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16271'. [ 730.616681][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16272'. [ 730.771265][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16273'. [ 731.093963][ T9572] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.782036][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16283'. [ 731.827758][ T9607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16286'. [ 731.862457][ T9607] syzkaller1: entered promiscuous mode [ 731.868002][ T9607] syzkaller1: entered allmulticast mode [ 732.000359][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 732.008377][ C0] lec:lec_tx_timeout: lec0 [ 732.012994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 732.467010][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16293'. [ 732.945398][ T9627] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 732.970751][ T9627] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 733.060997][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16294'. [ 733.229340][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16295'. [ 733.331533][ T9644] wg1: entered promiscuous mode [ 733.336430][ T9644] wg1: entered allmulticast mode [ 733.816264][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16308'. [ 734.637581][ T9704] netlink: 'syz.1.16317': attribute type 1 has an invalid length. [ 734.654955][ T9704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16317'. [ 735.319904][ T9756] netlink: 'syz.0.16338': attribute type 12 has an invalid length. [ 735.403374][ T9761] netlink: 'syz.0.16340': attribute type 10 has an invalid length. [ 735.506249][ T9766] __nla_validate_parse: 2 callbacks suppressed [ 735.506265][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16342'. [ 735.544115][ T9766] 8021q: adding VLAN 0 to HW filter on device bond16 [ 735.593457][ T9772] netlink: 'syz.1.16344': attribute type 4 has an invalid length. [ 735.610645][ T9772] netlink: 'syz.1.16344': attribute type 4 has an invalid length. [ 735.914761][ T9785] tipc: Resetting bearer [ 735.929426][ T9785] tipc: Resetting bearer [ 736.185095][ T9802] netlink: 'syz.0.16354': attribute type 1 has an invalid length. [ 736.197387][ T9802] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16354'. [ 736.500741][ T9787] virt_wifi0 speed is unknown, defaulting to 1000 [ 736.595243][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16362'. [ 736.676775][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16362'. [ 736.877094][ T9832] netlink: 'syz.4.16363': attribute type 4 has an invalid length. [ 736.885463][ T9833] netlink: 'syz.1.16364': attribute type 46 has an invalid length. [ 736.915055][ T9832] netlink: 'syz.4.16363': attribute type 4 has an invalid length. [ 737.020820][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 737.028850][ C0] lec:lec_tx_timeout: lec0 [ 737.034034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 737.066139][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16366'. [ 737.431569][ T9854] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16371'. [ 737.487192][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16372'. [ 737.493537][ T9858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16371'. [ 737.580267][ T9862] netlink: 'syz.4.16373': attribute type 13 has an invalid length. [ 737.597244][ T9858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16371'. [ 737.748591][ T9866] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 737.760581][ T9866] pim6reg1: entered promiscuous mode [ 737.773515][ T9866] pim6reg1: entered allmulticast mode [ 737.901397][ T9872] tipc: Enabling of bearer rejected, already enabled [ 738.022669][ T9872] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 738.040541][ T9872] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 738.060876][ T9851] virt_wifi0 speed is unknown, defaulting to 1000 [ 738.137620][ T9875] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 738.477212][ T9890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16383'. [ 738.574447][ T9893] bond3: (slave lo): Releasing backup interface [ 738.582289][ T9893] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 738.596284][ T9893] bond9: (slave dummy0): Releasing active interface [ 738.626128][ T9893] bond0: (slave bond_slave_1): Releasing backup interface [ 738.639396][ T9893] team0: Port device 76 removed [ 738.645477][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.653702][ T9893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 738.710676][ T9895] syzkaller0: entered promiscuous mode [ 738.716266][ T9895] syzkaller0: entered allmulticast mode [ 738.722888][ T9897] team0: No ports can be present during mode change [ 738.732323][ T9884] virt_wifi0 speed is unknown, defaulting to 1000 [ 740.829816][ T9906] virt_wifi0 speed is unknown, defaulting to 1000 [ 741.838052][ T9933] virt_wifi0 speed is unknown, defaulting to 1000 [ 741.868612][ T9926] virt_wifi0 speed is unknown, defaulting to 1000 [ 741.958993][ T9924] virt_wifi0 speed is unknown, defaulting to 1000 [ 742.040339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 742.048401][ C0] lec:lec_tx_timeout: lec0 [ 742.053015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.612960][ T9971] netlink: 'syz.1.16404': attribute type 1 has an invalid length. [ 742.737917][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16404'. [ 742.778335][ T9969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.889007][ T9976] bond8: (slave geneve5): making interface the new active one [ 742.905929][ T9983] netlink: 'syz.4.16405': attribute type 39 has an invalid length. [ 742.915849][ T9976] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 742.948163][ T9979] bond8 (unregistering): (slave geneve5): Releasing active interface [ 743.026829][ T9979] bond8 (unregistering): Released all slaves [ 743.199607][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16406'. [ 743.458470][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16411'. [ 743.471085][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16411'. [ 743.607641][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16414'. [ 744.444925][T10031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16419'. [ 744.551431][T10031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.591648][T10031] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 744.668820][T10031] bond0 (unregistering): Released all slaves [ 744.722099][T10024] syzkaller0: entered promiscuous mode [ 744.727685][T10024] syzkaller0: entered allmulticast mode [ 744.827863][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16425'. [ 746.407530][T10066] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 746.420543][T10066] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 746.458241][T10067] tipc: Enabled bearer , priority 0 [ 746.611868][T10084] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 746.619115][T10084] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 746.689818][T10082] syzkaller0: entered promiscuous mode [ 746.691164][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16436'. [ 746.699984][T10082] syzkaller0: entered allmulticast mode [ 747.066252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 747.074327][ C0] lec:lec_tx_timeout: lec0 [ 747.079213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.088625][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16441'. [ 747.246543][T10096] lec:lec_atm_close: lec0: Shut down! [ 748.301484][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16448'. [ 748.310781][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16448'. [ 748.760736][T12198] tipc: Node number set to 4278255617 [ 748.780563][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16448'. [ 748.807682][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16448'. [ 750.336507][T10112] virt_wifi0 speed is unknown, defaulting to 1000 [ 750.343527][T10142] tipc: Enabling of bearer rejected, already enabled [ 750.525792][T10154] netlink: 'syz.0.16456': attribute type 1 has an invalid length. [ 750.639368][T10157] bond0: (slave veth15): Enslaving as an active interface with a down link [ 750.648967][T10106] virt_wifi0 speed is unknown, defaulting to 1000 [ 750.652779][T10154] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16456'. [ 751.090186][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16462'. [ 751.116074][T10133] virt_wifi0 speed is unknown, defaulting to 1000 [ 751.347448][T10183] netlink: 200 bytes leftover after parsing attributes in process `syz.3.16464'. [ 751.371400][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16464'. [ 751.676934][T10185] bond6: (slave ip6gretap2): making interface the new active one [ 751.686132][T10185] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 751.873403][T10179] virt_wifi0 speed is unknown, defaulting to 1000 [ 752.350099][T10211] tipc: Enabling of bearer rejected, already enabled [ 752.942268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 752.950352][ C0] lec:lec_tx_timeout: lec0 [ 752.954938][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 753.772424][T10250] netlink: 'syz.0.16486': attribute type 4 has an invalid length. [ 753.974857][T10246] syzkaller0: entered promiscuous mode [ 753.993792][T10246] syzkaller0: entered allmulticast mode [ 755.613160][T10286] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 755.644384][T10290] netlink: 'syz.0.16499': attribute type 1 has an invalid length. [ 755.765877][T10290] 8021q: adding VLAN 0 to HW filter on device bond12 [ 755.774986][T10300] veth0: entered promiscuous mode [ 755.808055][T10290] bond12: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 755.814965][T10300] netlink: 'syz.2.16502': attribute type 39 has an invalid length. [ 755.832797][T10290] bond12: (slave ip6gretap3): Enslaving as an active interface with an up link [ 755.930590][ T7437] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 755.967786][T10299] veth0: left promiscuous mode [ 756.050564][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.059833][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 756.170746][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.197613][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 756.295182][T10309] netlink: 'syz.2.16505': attribute type 1 has an invalid length. [ 756.331213][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.361406][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.372649][ T7437] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 756.389514][T10309] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address [ 756.420488][T10309] bond17: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 756.442610][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16505'. [ 756.455276][T10309] bond17: (slave vxcan1): making interface the new active one [ 756.473879][T10309] bond17: (slave vxcan1): Enslaving as an active interface with an up link [ 756.491057][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.512672][T10311] bond17 (unregistering): (slave vxcan1): Releasing backup interface [ 756.521096][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 756.614224][T10311] bond17 (unregistering): Released all slaves [ 756.617858][T10313] netlink: 'syz.4.16506': attribute type 2 has an invalid length. [ 756.651526][T10313] !9: entered promiscuous mode [ 756.677508][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16506'. [ 756.936565][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16510'. [ 757.158349][T10314] lec:lec_atm_close: lec0: Shut down! [ 757.301427][T10330] netlink: 'syz.0.16511': attribute type 13 has an invalid length. [ 758.055021][T10345] virt_wifi0 speed is unknown, defaulting to 1000 [ 758.169225][T10364] netlink: 'syz.0.16521': attribute type 13 has an invalid length. [ 758.185837][T10361] tap0: tun_chr_ioctl cmd 2148553947 [ 758.319902][T10364] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 758.377661][T10368] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 758.400451][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16521'. [ 758.806172][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16530'. [ 758.828017][T10383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.865022][T10383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.056662][T10383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.074297][T10383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.103447][T10399] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 759.110999][T10399] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 759.993452][T10383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.014962][T10383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.030146][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16533'. [ 760.104260][T10383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 760.130565][T10383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.322497][ T730] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.339493][ T730] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.417106][ T730] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.434620][ T730] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.480495][ T730] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.482017][T10425] netlink: 'syz.2.16540': attribute type 1 has an invalid length. [ 760.496042][ T730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.542710][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16541'. [ 760.579835][T10425] 8021q: adding VLAN 0 to HW filter on device bond17 [ 760.590567][ T730] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.598942][ T730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.628745][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16541'. [ 760.735704][T10429] team0: entered promiscuous mode [ 760.752781][T10429] team0: entered allmulticast mode [ 760.758221][T10429] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.810986][T10425] bond17: (slave ip6gretap2): making interface the new active one [ 760.835505][T10425] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link [ 760.862842][T10435] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 760.949533][ T6450] net_ratelimit: 164 callbacks suppressed [ 760.949551][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.953331][T10435] team1: entered promiscuous mode [ 760.978761][T10435] team1: entered allmulticast mode [ 760.982649][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 760.989373][T10435] 8021q: adding VLAN 0 to HW filter on device team1 [ 761.020858][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.022744][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16546'. [ 761.028704][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 761.160640][ T58] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.183461][T10448] netlink: 'syz.3.16546': attribute type 5 has an invalid length. [ 761.194189][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.220431][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16546'. [ 761.230954][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.252379][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 761.303702][T10459] syzkaller0: entered promiscuous mode [ 761.319720][T10459] syzkaller0: entered allmulticast mode [ 761.380669][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 761.399136][ T7437] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 761.510091][T10469] bond7: (slave vcan2): refused to change device type [ 761.681418][T10452] virt_wifi0 speed is unknown, defaulting to 1000 [ 761.872529][T10489] __nla_validate_parse: 1 callbacks suppressed [ 761.872548][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16555'. [ 762.002294][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16556'. [ 762.070913][T10495] syzkaller0: entered promiscuous mode [ 762.076532][T10495] syzkaller0: entered allmulticast mode [ 762.941861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 762.949941][ C0] lec:lec_tx_timeout: lec0 [ 762.954627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 763.686120][T10498] syzkaller0: entered promiscuous mode [ 763.691729][T10498] syzkaller0: entered allmulticast mode [ 763.698149][T10456] virt_wifi0 speed is unknown, defaulting to 1000 [ 763.786660][T10508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 763.803276][T10508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 763.814082][T10508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 764.282759][T10526] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.720061][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16571'. [ 764.814429][T10543] syzkaller0: entered promiscuous mode [ 764.819934][T10543] syzkaller0: entered allmulticast mode [ 764.842089][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16571'. [ 764.963060][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16573'. [ 764.984456][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16573'. [ 765.334323][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16579'. [ 765.919750][T10600] syzkaller0: entered promiscuous mode [ 765.931836][T10600] syzkaller0: entered allmulticast mode [ 765.952029][ T6450] net_ratelimit: 156 callbacks suppressed [ 765.952045][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.000591][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.020464][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.028394][ T6450] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 766.089399][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16592'. [ 766.140598][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.160858][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.171131][T10605] bond8: entered promiscuous mode [ 766.187906][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.196297][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 766.234773][T10614] syzkaller0: entered promiscuous mode [ 766.243476][T10614] syzkaller0: entered allmulticast mode [ 766.330475][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.349831][T10613] lo: Caught tx_queue_len zero misconfig [ 766.369198][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 766.420722][T10616] tipc: Enabling of bearer rejected, already enabled [ 766.555916][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16602'. [ 766.667648][T10640] netlink: 'syz.3.16605': attribute type 1 has an invalid length. [ 766.745804][T10640] bond8: entered promiscuous mode [ 766.751256][T10640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.790782][T10643] bond8: (slave bridge15): making interface the new active one [ 766.806050][T10643] bridge15: entered promiscuous mode [ 766.815692][T10643] bond8: (slave bridge15): Enslaving as an active interface with an up link [ 766.824729][T10610] virt_wifi0 speed is unknown, defaulting to 1000 [ 766.865343][T10640] bond8: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 766.877816][T10640] bond8: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 767.114214][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16610'. [ 767.209288][T10656] hsr_slave_0: left promiscuous mode [ 767.241390][T10656] hsr_slave_1: left promiscuous mode [ 767.256830][T10656] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 767.324729][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16614'. [ 767.696352][T10684] netlink: 67 bytes leftover after parsing attributes in process `syz.0.16619'. [ 767.715015][T10684] bond0: Caught tx_queue_len zero misconfig [ 767.737756][T10659] virt_wifi0 speed is unknown, defaulting to 1000 [ 767.998493][T10675] virt_wifi0 speed is unknown, defaulting to 1000 [ 768.022273][T10687] siw: device registration error -23 [ 768.359505][T10677] lec:lec_atm_close: lec0: Shut down! [ 768.572661][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16624'. [ 768.696210][T10702] netlink: 'syz.1.16625': attribute type 1 has an invalid length. [ 769.033985][T10714] tipc: Enabling of bearer rejected, already enabled [ 769.195421][T10725] syzkaller0: entered promiscuous mode [ 769.217655][T10725] syzkaller0: entered allmulticast mode [ 769.273933][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.420916][ T29] audit: type=1800 audit(1772666345.437:12): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16630" name="memory.events" dev="tmpfs" ino=16690 res=0 errno=0 [ 769.757070][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16638'. [ 770.136336][T10753] team0: No ports can be present during mode change [ 770.161483][T10755] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 770.168904][T10755] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 770.195644][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16644'. [ 770.201985][T10755] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 770.260796][T10737] lec:lec_atm_close: lec0: Shut down! [ 770.288243][T10741] lec:lec_atm_close: lec0: Shut down! [ 770.456931][T10769] syzkaller0: entered promiscuous mode [ 770.462856][T10769] syzkaller0: entered allmulticast mode [ 770.600158][T10777] syzkaller0: entered promiscuous mode [ 770.612374][T10777] syzkaller0: entered allmulticast mode [ 771.020410][ T13] net_ratelimit: 135 callbacks suppressed [ 771.020429][ T13] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.060397][ T13] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 771.164579][T10803] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16655'. [ 771.180453][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.231035][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.257010][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.300417][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.325680][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 771.355949][T10794] virt_wifi0 speed is unknown, defaulting to 1000 [ 771.460592][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.468447][ T7437] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 771.581383][T10785] mpoa:mpoad_close: () going down [ 771.631745][ T13] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 771.643297][T10809] siw: device registration error -23 [ 772.038824][T10830] netlink: 'syz.1.16663': attribute type 83 has an invalid length. [ 772.325074][T10817] virt_wifi0 speed is unknown, defaulting to 1000 [ 772.812936][T10831] virt_wifi0 speed is unknown, defaulting to 1000 [ 773.603823][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16673'. [ 773.633766][T10861] 8021q: adding VLAN 0 to HW filter on device bond13 [ 773.689601][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16673'. [ 773.707692][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16673'. [ 773.722789][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.733724][T10861] bond13: (slave bond0): Enslaving as an active interface with a down link [ 773.746076][T10861] netlink: 'syz.0.16673': attribute type 4 has an invalid length. [ 773.755741][T10861] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16673'. [ 773.768323][T10867] netlink: 'syz.1.16675': attribute type 83 has an invalid length. [ 774.100736][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16685'. [ 774.425404][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16688'. [ 774.435112][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16688'. [ 774.619289][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16691'. [ 774.692137][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16693'. [ 774.811007][ T29] audit: type=1800 audit(1772666350.837:13): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16692" name="memory.events" dev="tmpfs" ino=16675 res=0 errno=0 [ 774.888973][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.249671][T10918] virt_wifi0 speed is unknown, defaulting to 1000 [ 775.508552][T10932] syzkaller0: entered promiscuous mode [ 775.537394][T10932] syzkaller0: entered allmulticast mode [ 775.549204][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16699'. [ 775.583234][T10932] tipc: Enabled bearer , priority 0 [ 775.616269][T10931] tipc: Resetting bearer [ 775.649239][T10931] tipc: Disabling bearer [ 775.900459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 775.908521][ C0] lec:lec_tx_timeout: lec0 [ 775.914244][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 776.051967][ T730] net_ratelimit: 98 callbacks suppressed [ 776.051987][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.131959][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.180893][ T7437] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 776.293875][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.352278][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.360148][ T6450] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 776.427228][ T163] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.480443][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.511117][ T7437] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.519054][ T163] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.539215][ T163] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.551305][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.590441][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 776.617859][ T163] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.989450][T11008] syzkaller0: entered promiscuous mode [ 777.000490][T11008] syzkaller0: entered allmulticast mode [ 777.570971][T10989] lec:lec_atm_close: lec0: Shut down! [ 778.031421][T11033] syzkaller0: entered promiscuous mode [ 778.036939][T11033] syzkaller0: entered allmulticast mode [ 778.237545][T11040] vlan7: entered allmulticast mode [ 778.259326][T11040] bridge12: entered allmulticast mode [ 779.337406][T11068] lec:lec_atm_close: lec0: Shut down! [ 779.561995][T11072] virt_wifi0 speed is unknown, defaulting to 1000 [ 779.578861][T11091] tipc: Enabling of bearer rejected, already enabled [ 779.839132][T11106] __nla_validate_parse: 5 callbacks suppressed [ 779.839151][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16749'. [ 780.268329][T11124] netlink: 'syz.1.16754': attribute type 16 has an invalid length. [ 780.295266][T11124] netlink: 'syz.1.16754': attribute type 17 has an invalid length. [ 781.070425][ T730] net_ratelimit: 125 callbacks suppressed [ 781.070446][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.111566][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.140432][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.160506][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.180709][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.210530][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.234668][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.272298][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.305506][ T6450] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.343251][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 781.714867][T11144] netlink: 550 bytes leftover after parsing attributes in process `syz.2.16760'. [ 782.416429][T11124] bridge0: left promiscuous mode [ 782.421912][T11124] vlan1: left promiscuous mode [ 782.426669][T11124] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 782.435981][T11124] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11124, name: syz.1.16754 [ 782.445213][T11124] preempt_count: 201, expected: 0 [ 782.450216][T11124] RCU nest depth: 0, expected: 0 [ 782.455186][T11124] 2 locks held by syz.1.16754/11124: [ 782.460573][T11124] #0: ffffffff8fbc5e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 782.469696][T11124] #1: ffff888034afc370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 782.480436][T11124] Preemption disabled at: [ 782.480448][T11124] [] dev_set_rx_mode+0x54/0x2d0 [ 782.491226][T11124] CPU: 1 UID: 0 PID: 11124 Comm: syz.1.16754 Not tainted syzkaller #0 PREEMPT(full) [ 782.491242][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.491252][T11124] Call Trace: [ 782.491311][T11124] [ 782.491341][T11124] dump_stack_lvl+0xe8/0x150 [ 782.491442][T11124] __might_resched+0x378/0x4d0 [ 782.491477][T11124] ? dev_set_rx_mode+0x54/0x2d0 [ 782.491521][T11124] __mutex_lock+0x119/0x1300 [ 782.491585][T11124] ? __pfx__printk+0x10/0x10 [ 782.491602][T11124] ? dev_set_promiscuity+0x10e/0x260 [ 782.491642][T11124] ? __netdev_printk+0x36f/0x480 [ 782.491654][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 782.491671][T11124] ? netdev_info+0x11e/0x180 [ 782.491685][T11124] ? __pfx_netdev_info+0x10/0x10 [ 782.491701][T11124] dev_set_promiscuity+0x10e/0x260 [ 782.491718][T11124] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 782.491777][T11124] __dev_set_promiscuity+0x515/0x710 [ 782.491797][T11124] netif_set_promiscuity+0x50/0xe0 [ 782.491815][T11124] dev_set_promiscuity+0x126/0x260 [ 782.491832][T11124] br_manage_promisc+0x4db/0x560 [ 782.491900][T11124] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 782.491917][T11124] __dev_set_promiscuity+0x515/0x710 [ 782.491948][T11124] dev_set_rx_mode+0x1c9/0x2d0 [ 782.491977][T11124] __dev_open+0x672/0x830 [ 782.492005][T11124] ? __pfx___dev_open+0x10/0x10 [ 782.492024][T11124] ? __dev_change_flags+0x1b0/0x690 [ 782.492042][T11124] ? __local_bh_enable_ip+0xd0/0x130 [ 782.492071][T11124] __dev_change_flags+0x1f7/0x690 [ 782.492090][T11124] ? __pfx___dev_change_flags+0x10/0x10 [ 782.492105][T11124] ? netif_state_change+0x297/0x3a0 [ 782.492120][T11124] ? __pfx_netif_state_change+0x10/0x10 [ 782.492135][T11124] netif_change_flags+0x88/0x1a0 [ 782.492153][T11124] do_setlink+0xf82/0x4590 [ 782.492197][T11124] ? trace_sched_exit_tp+0x3a/0x150 [ 782.492215][T11124] ? __pfx_do_setlink+0x10/0x10 [ 782.492229][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492259][T11124] ? do_raw_spin_lock+0x12b/0x2f0 [ 782.492273][T11124] ? do_raw_spin_lock+0x12b/0x2f0 [ 782.492289][T11124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 782.492326][T11124] ? lockdep_hardirqs_on+0x7a/0x110 [ 782.492342][T11124] ? __mutex_lock+0xd09/0x1300 [ 782.492360][T11124] ? __mutex_lock+0x5ac/0x1300 [ 782.492378][T11124] ? rtnl_newlink+0x8a1/0x1be0 [ 782.492393][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 782.492421][T11124] ? ns_capable+0x89/0xe0 [ 782.492439][T11124] rtnl_newlink+0x147a/0x1be0 [ 782.492459][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.492478][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492495][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492509][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492528][T11124] ? unwind_next_frame+0xa5/0x23c0 [ 782.492561][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492575][T11124] ? is_bpf_text_address+0x26/0x2b0 [ 782.492599][T11124] ? kernel_text_address+0xa5/0xe0 [ 782.492625][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.492637][T11124] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 782.492653][T11124] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 782.492666][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.492681][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 782.492699][T11124] netlink_rcv_skb+0x232/0x4b0 [ 782.492736][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.492751][T11124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.492770][T11124] ? netlink_deliver_tap+0x2e/0x1b0 [ 782.492788][T11124] netlink_unicast+0x80f/0x9b0 [ 782.492805][T11124] ? __pfx_netlink_unicast+0x10/0x10 [ 782.492817][T11124] ? netlink_sendmsg+0x650/0xb40 [ 782.492830][T11124] ? skb_put+0x11b/0x210 [ 782.492887][T11124] netlink_sendmsg+0x813/0xb40 [ 782.492909][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.492924][T11124] ? __se_sys_ioctl+0x47/0x170 [ 782.492953][T11124] ? do_syscall_64+0x14d/0xf80 [ 782.492967][T11124] ? aa_sock_msg_perm+0xf1/0x1b0 [ 782.493026][T11124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 782.493054][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.493078][T11124] ____sys_sendmsg+0xa68/0xad0 [ 782.493143][T11124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.493165][T11124] ? import_iovec+0x73/0xa0 [ 782.493238][T11124] ___sys_sendmsg+0x2a5/0x360 [ 782.493257][T11124] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.493278][T11124] ? tomoyo_path_number_perm+0x219/0x630 [ 782.493353][T11124] ? __fget_files+0x2a/0x420 [ 782.493393][T11124] ? __fget_files+0x3a0/0x420 [ 782.493437][T11124] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.493470][T11124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.493495][T11124] ? rcu_is_watching+0x15/0xb0 [ 782.493516][T11124] ? __pfx_kcov_ioctl+0x10/0x10 [ 782.493544][T11124] do_syscall_64+0x14d/0xf80 [ 782.493560][T11124] ? trace_irq_disable+0x3b/0x150 [ 782.493575][T11124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.493599][T11124] ? clear_bhb_loop+0x40/0x90 [ 782.493612][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.493626][T11124] RIP: 0033:0x7f795379c799 [ 782.493667][T11124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.493677][T11124] RSP: 002b:00007f79546fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.493689][T11124] RAX: ffffffffffffffda RBX: 00007f7953a16090 RCX: 00007f795379c799 [ 782.493697][T11124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 782.493704][T11124] RBP: 00007f7953832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 782.493711][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.493718][T11124] R13: 00007f7953a16128 R14: 00007f7953a16090 R15: 00007fffdee65228 [ 782.493735][T11124] [ 782.493745][T11124] [ 783.030589][T11124] ============================= [ 783.035417][T11124] [ BUG: Invalid wait context ] [ 783.040379][T11124] syzkaller #0 Tainted: G W [ 783.046390][T11124] ----------------------------- [ 783.051287][T11124] syz.1.16754/11124 is trying to lock: [ 783.056727][T11124] ffff8880354ced40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 783.067087][T11124] other info that might help us debug this: [ 783.072958][T11124] context-{5:5} [ 783.076399][T11124] 2 locks held by syz.1.16754/11124: [ 783.081665][T11124] #0: ffffffff8fbc5e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 783.090707][T11124] #1: ffff888034afc370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 783.101321][T11124] stack backtrace: [ 783.105024][T11124] CPU: 1 UID: 0 PID: 11124 Comm: syz.1.16754 Tainted: G W syzkaller #0 PREEMPT(full) [ 783.105045][T11124] Tainted: [W]=WARN [ 783.105050][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.105059][T11124] Call Trace: [ 783.105066][T11124] [ 783.105073][T11124] dump_stack_lvl+0xe8/0x150 [ 783.105096][T11124] __lock_acquire+0xec1/0x2cf0 [ 783.105117][T11124] ? __show_trace_log_lvl+0x478/0x550 [ 783.105143][T11124] lock_acquire+0xf0/0x2e0 [ 783.105161][T11124] ? dev_set_promiscuity+0x10e/0x260 [ 783.105183][T11124] ? __might_resched+0x378/0x4d0 [ 783.105205][T11124] __mutex_lock+0x19f/0x1300 [ 783.105227][T11124] ? dev_set_promiscuity+0x10e/0x260 [ 783.105249][T11124] ? __pfx__printk+0x10/0x10 [ 783.105263][T11124] ? dev_set_promiscuity+0x10e/0x260 [ 783.105283][T11124] ? __netdev_printk+0x36f/0x480 [ 783.105299][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 783.105320][T11124] ? netdev_info+0x11e/0x180 [ 783.105337][T11124] ? __pfx_netdev_info+0x10/0x10 [ 783.105353][T11124] dev_set_promiscuity+0x10e/0x260 [ 783.105376][T11124] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 783.105397][T11124] __dev_set_promiscuity+0x515/0x710 [ 783.105422][T11124] netif_set_promiscuity+0x50/0xe0 [ 783.105443][T11124] dev_set_promiscuity+0x126/0x260 [ 783.105465][T11124] br_manage_promisc+0x4db/0x560 [ 783.105491][T11124] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 783.105509][T11124] __dev_set_promiscuity+0x515/0x710 [ 783.105532][T11124] dev_set_rx_mode+0x1c9/0x2d0 [ 783.105553][T11124] __dev_open+0x672/0x830 [ 783.105572][T11124] ? __pfx___dev_open+0x10/0x10 [ 783.105588][T11124] ? __dev_change_flags+0x1b0/0x690 [ 783.105609][T11124] ? __local_bh_enable_ip+0xd0/0x130 [ 783.105630][T11124] __dev_change_flags+0x1f7/0x690 [ 783.105653][T11124] ? __pfx___dev_change_flags+0x10/0x10 [ 783.105673][T11124] ? netif_state_change+0x297/0x3a0 [ 783.105690][T11124] ? __pfx_netif_state_change+0x10/0x10 [ 783.105709][T11124] netif_change_flags+0x88/0x1a0 [ 783.105731][T11124] do_setlink+0xf82/0x4590 [ 783.105754][T11124] ? trace_sched_exit_tp+0x3a/0x150 [ 783.105774][T11124] ? __pfx_do_setlink+0x10/0x10 [ 783.105793][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.105816][T11124] ? do_raw_spin_lock+0x12b/0x2f0 [ 783.105832][T11124] ? do_raw_spin_lock+0x12b/0x2f0 [ 783.105850][T11124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 783.105869][T11124] ? lockdep_hardirqs_on+0x7a/0x110 [ 783.105889][T11124] ? __mutex_lock+0xd09/0x1300 [ 783.105911][T11124] ? __mutex_lock+0x5ac/0x1300 [ 783.105938][T11124] ? rtnl_newlink+0x8a1/0x1be0 [ 783.105958][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 783.105982][T11124] ? ns_capable+0x89/0xe0 [ 783.106003][T11124] rtnl_newlink+0x147a/0x1be0 [ 783.106026][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 783.106047][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.106069][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.106088][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.106109][T11124] ? unwind_next_frame+0xa5/0x23c0 [ 783.106139][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.106158][T11124] ? is_bpf_text_address+0x26/0x2b0 [ 783.106174][T11124] ? kernel_text_address+0xa5/0xe0 [ 783.106200][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 783.106218][T11124] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 783.106237][T11124] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 783.106255][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.106274][T11124] ? __lock_acquire+0x6b5/0x2cf0 [ 783.106296][T11124] netlink_rcv_skb+0x232/0x4b0 [ 783.106316][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.106335][T11124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.106356][T11124] ? netlink_deliver_tap+0x2e/0x1b0 [ 783.106377][T11124] netlink_unicast+0x80f/0x9b0 [ 783.106395][T11124] ? __pfx_netlink_unicast+0x10/0x10 [ 783.106412][T11124] ? netlink_sendmsg+0x650/0xb40 [ 783.106430][T11124] ? skb_put+0x11b/0x210 [ 783.106451][T11124] netlink_sendmsg+0x813/0xb40 [ 783.106473][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.106492][T11124] ? __se_sys_ioctl+0x47/0x170 [ 783.106507][T11124] ? do_syscall_64+0x14d/0xf80 [ 783.106527][T11124] ? aa_sock_msg_perm+0xf1/0x1b0 [ 783.106545][T11124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 783.106562][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.106580][T11124] ____sys_sendmsg+0xa68/0xad0 [ 783.106605][T11124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.106629][T11124] ? import_iovec+0x73/0xa0 [ 783.106652][T11124] ___sys_sendmsg+0x2a5/0x360 [ 783.106675][T11124] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.106699][T11124] ? tomoyo_path_number_perm+0x219/0x630 [ 783.106724][T11124] ? __fget_files+0x2a/0x420 [ 783.106744][T11124] ? __fget_files+0x3a0/0x420 [ 783.106768][T11124] __x64_sys_sendmsg+0x1bd/0x2a0 [ 783.106791][T11124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 783.106812][T11124] ? rcu_is_watching+0x15/0xb0 [ 783.106836][T11124] ? __pfx_kcov_ioctl+0x10/0x10 [ 783.106861][T11124] do_syscall_64+0x14d/0xf80 [ 783.106881][T11124] ? trace_irq_disable+0x3b/0x150 [ 783.106902][T11124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.106934][T11124] ? clear_bhb_loop+0x40/0x90 [ 783.106951][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.106965][T11124] RIP: 0033:0x7f795379c799 [ 783.106980][T11124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.106994][T11124] RSP: 002b:00007f79546fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.107009][T11124] RAX: ffffffffffffffda RBX: 00007f7953a16090 RCX: 00007f795379c799 [ 783.107020][T11124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 783.107030][T11124] RBP: 00007f7953832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 783.107039][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.107048][T11124] R13: 00007f7953a16128 R14: 00007f7953a16090 R15: 00007fffdee65228 [ 783.107066][T11124] [ 783.667165][T11124] dummy0: left promiscuous mode [ 783.694368][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.702844][T11124] dummy0: entered promiscuous mode [ 783.709636][T11124] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 783.718483][T11124] caif:caif_disconnect_client(): nothing to disconnect [ 783.726879][T11124] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 783.735538][T11124] chnl_net:chnl_net_open(): state disconnected [ 783.745086][ T163] tipc: Resetting bearer [ 783.756090][ T163] tipc: Resetting bearer [ 783.762482][ T163] bridge0: port 3(vlan1) entered blocking state [ 783.768745][ T163] bridge0: port 3(vlan1) entered forwarding state [ 784.950385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 784.958421][ C0] lec:lec_tx_timeout: lec0 [ 784.963014][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 786.150468][ T730] net_ratelimit: 103 callbacks suppressed [ 786.150488][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 786.164077][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 786.280406][ T49] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 786.288337][ T49] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 786.400431][ T49] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 786.408270][ T49] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 786.520426][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 786.528265][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 786.640425][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 786.648322][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 789.970361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 789.978368][ C0] lec:lec_tx_timeout: lec0 [ 789.982896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 791.240462][ T730] net_ratelimit: 80 callbacks suppressed [ 791.240484][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 791.254323][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 791.370438][ T730] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 791.378280][ T730] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 791.490443][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 791.498282][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 791.610465][ T163] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 791.618285][ T163] bond12: (slave ip6gretap3): failed to get link speed/duplex [ 791.730423][ T49] bond12: (slave ip6gretap3): link status up, enabling it in 0 ms [ 791.738322][ T49] bond12: (slave ip6gretap3): failed to get link speed/duplex