last executing test programs: 26.774547941s ago: executing program 0 (id=14274): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x1000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4102}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, 0x0, 0x4008000) 26.324368823s ago: executing program 4 (id=14280): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3c, &(0x7f0000001680)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x6, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "abf5dd51d434"}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x50}}, 0x0) socket(0x2d, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r3, 0x0, 0x0) 26.177580118s ago: executing program 0 (id=14282): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 26.083679954s ago: executing program 4 (id=14285): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) 25.904525503s ago: executing program 0 (id=14287): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000480)=0x29, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 25.763344941s ago: executing program 0 (id=14289): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0xf45f2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 25.737069202s ago: executing program 4 (id=14290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000980)="a4", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 25.502605214s ago: executing program 4 (id=14295): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x40}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 25.325049965s ago: executing program 4 (id=14299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 25.114585092s ago: executing program 4 (id=14301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 24.829265555s ago: executing program 0 (id=14306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 24.677251477s ago: executing program 0 (id=14309): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f_listen={0x2, 0x2, 0x6, 0x82, 0x8, 0x7, 0x3, {0x31, "a5b999f45a71a21030030d87f170fefdabd86527dfd0890aa67a8bc254f4d5b1206db27fc9d1edb0d9ccc35c910abfcbb6"}, 0x3, 0x8, 0x76, 0x8, 0x20, "d69025b4da0cd94d51bdb6c53b70df2b9892cbf8ed2662535b9c70951d7d976b"}}, 0x61) 16.622957132s ago: executing program 1 (id=14393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010002"]) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.349190891s ago: executing program 3 (id=14396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.304476023s ago: executing program 2 (id=14397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x4000040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 16.294919222s ago: executing program 1 (id=14398): socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.188673493s ago: executing program 1 (id=14399): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 16.154197711s ago: executing program 2 (id=14400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 16.087650901s ago: executing program 3 (id=14401): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 16.048368714s ago: executing program 1 (id=14402): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x3ff, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) 15.936572713s ago: executing program 3 (id=14403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x0, 0x7d, 0x3, 0xffffffff, 0xffff, 0x5, 0x27, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.855763098s ago: executing program 2 (id=14404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x4, 0xd}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.816640605s ago: executing program 1 (id=14405): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 15.749915144s ago: executing program 2 (id=14406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.738194146s ago: executing program 3 (id=14407): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) listen(r0, 0x0) 15.629454019s ago: executing program 2 (id=14408): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20b82, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 15.6289136s ago: executing program 3 (id=14409): socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.551737598s ago: executing program 1 (id=14410): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 15.509607553s ago: executing program 2 (id=14411): pipe(0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e70d01", @ANYRES8=r5], 0x4) 15.472067676s ago: executing program 3 (id=14412): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0xa, 0xfffffffffffffffd, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) 9.600452721s ago: executing program 32 (id=14309): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f_listen={0x2, 0x2, 0x6, 0x82, 0x8, 0x7, 0x3, {0x31, "a5b999f45a71a21030030d87f170fefdabd86527dfd0890aa67a8bc254f4d5b1206db27fc9d1edb0d9ccc35c910abfcbb6"}, 0x3, 0x8, 0x76, 0x8, 0x20, "d69025b4da0cd94d51bdb6c53b70df2b9892cbf8ed2662535b9c70951d7d976b"}}, 0x61) 9.558581971s ago: executing program 33 (id=14301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 88.873433ms ago: executing program 34 (id=14410): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 51.665451ms ago: executing program 35 (id=14411): pipe(0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e70d01", @ANYRES8=r5], 0x4) 0s ago: executing program 36 (id=14412): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0xa, 0xfffffffffffffffd, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) kernel console output (not intermixed with test programs): tch(7, /dev/nbd64, 10) failed: No such file or directory [ 560.450786][T29811] udevd[29811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 560.749381][T29830] pim6reg1: entered promiscuous mode [ 560.762564][T29830] pim6reg1: entered allmulticast mode [ 561.012569][T29838] netlink: 'syz.0.11144': attribute type 19 has an invalid length. [ 561.100388][T29838] netlink: 'syz.0.11144': attribute type 19 has an invalid length. [ 561.100393][ T3484] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.101216][ T3484] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.136786][ T3484] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.152780][ T3484] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.423772][T29856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 561.457851][T29854] syzkaller1: entered promiscuous mode [ 561.464248][T29854] syzkaller1: entered allmulticast mode [ 561.640468][T29860] netlink: 'syz.2.11153': attribute type 21 has an invalid length. [ 561.650053][T29860] netlink: 'syz.2.11153': attribute type 21 has an invalid length. [ 561.700401][T23029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.735355][T23029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.768647][T23029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.793002][T23029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.743137][T29987] __nla_validate_parse: 8 callbacks suppressed [ 563.743163][T29987] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11205'. [ 563.807654][T29989] netlink: 'syz.4.11206': attribute type 1 has an invalid length. [ 563.875888][T29989] bond1: (slave ip6gretap1): making interface the new active one [ 563.885538][T29989] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 564.155351][T30006] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11214'. [ 564.472430][T30023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11221'. [ 564.538686][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.603541][T30026] bond4: entered allmulticast mode [ 564.623637][T30026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.633001][T30026] bridge0: port 1(bond4) entered blocking state [ 564.639791][T30026] bridge0: port 1(bond4) entered disabled state [ 564.653415][T30026] bond4: entered promiscuous mode [ 564.894130][T30043] bond0: entered promiscuous mode [ 564.900608][T30043] bridge_slave_1: entered promiscuous mode [ 564.909855][T30043] batadv0: entered promiscuous mode [ 564.917701][T30043] debugfs: 'hsr0' already exists in 'hsr' [ 564.924507][T30043] Cannot create hsr debugfs directory [ 564.932437][T30043] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 565.207827][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11237'. [ 565.846097][T30093] xt_hashlimit: size too large, truncated to 1048576 [ 565.915412][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11252'. [ 567.053143][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11272'. [ 567.203609][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11274'. [ 567.289894][T30144] hsr_slave_0 (unregistering): left promiscuous mode [ 567.408865][T30158] xt_hashlimit: size too large, truncated to 1048576 [ 568.201810][T30190] pim6reg1: entered promiscuous mode [ 568.216684][T30190] pim6reg1: entered allmulticast mode [ 568.321426][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11298'. [ 568.384099][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.609847][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11305'. [ 569.532484][T30261] "syz.3.11323" (30261) uses obsolete ecb(arc4) skcipher [ 569.766174][T30292] netlink: 'syz.4.11334': attribute type 13 has an invalid length. [ 569.802825][T30292] netlink: 'syz.4.11334': attribute type 17 has an invalid length. [ 569.816351][T30292] lo: left promiscuous mode [ 569.854584][T30292] gre0: left promiscuous mode [ 569.869806][T30292] gre0: left allmulticast mode [ 569.928081][T30292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.323181][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11342'. [ 570.334441][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11342'. [ 570.362602][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11342'. [ 570.643381][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11349'. [ 570.665032][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11349'. [ 570.700432][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11349'. [ 570.740177][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11349'. [ 570.833801][T30352] team0: No ports can be present during mode change [ 571.333577][T30374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11362'. [ 571.334501][T30375] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 572.031399][T30414] netlink: 'syz.3.11379': attribute type 1 has an invalid length. [ 572.066180][T30414] bond4: entered promiscuous mode [ 572.072437][T30414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.103953][T30414] bond4: (slave bridge3): making interface the new active one [ 572.111810][T30414] bridge3: entered promiscuous mode [ 572.119666][T30414] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 572.162499][T30419] syzkaller1: entered promiscuous mode [ 572.172697][T30419] syzkaller1: entered allmulticast mode [ 573.396335][ T30] audit: type=1800 audit(1763376295.477:4): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11408" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11259 res=0 errno=0 [ 573.582726][T30496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11414'. [ 573.890595][T30513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11422'. [ 573.926577][T30513] netlink: 'syz.1.11422': attribute type 22 has an invalid length. [ 573.957636][T30519] netlink: 'syz.4.11425': attribute type 6 has an invalid length. [ 573.991122][T30513] netlink: 'syz.1.11422': attribute type 22 has an invalid length. [ 574.012267][T30519] netlink: 'syz.4.11425': attribute type 6 has an invalid length. [ 574.068350][T30523] netlink: 'syz.2.11427': attribute type 15 has an invalid length. [ 574.101674][T30523] netlink: 'syz.2.11427': attribute type 15 has an invalid length. [ 574.110344][ T3549] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 574.131117][ T3549] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 574.163781][ T3549] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 574.198968][ T3549] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 575.312875][T30590] syzkaller1: entered promiscuous mode [ 575.320151][T30590] syzkaller1: entered allmulticast mode [ 575.440625][T30594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 575.691822][T30610] __nla_validate_parse: 9 callbacks suppressed [ 575.691843][T30610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11461'. [ 576.133128][T30633] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 576.143448][T30633] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 578.620514][T30682] netlink: 'syz.1.11488': attribute type 16 has an invalid length. [ 578.651188][T30682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11488'. [ 578.805172][T30694] netlink: 'syz.2.11494': attribute type 9 has an invalid length. [ 578.827418][T30694] netlink: 'syz.2.11494': attribute type 11 has an invalid length. [ 578.836618][T30694] netlink: 'syz.2.11494': attribute type 12 has an invalid length. [ 578.845814][T30694] netlink: 210060 bytes leftover after parsing attributes in process `syz.2.11494'. [ 578.871076][T30694] openvswitch: netlink: Message has 4 unknown bytes. [ 578.925854][T30700] netlink: 'syz.1.11497': attribute type 12 has an invalid length. [ 578.943096][T30700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11497'. [ 578.961460][T30700] netlink: 'syz.1.11497': attribute type 12 has an invalid length. [ 578.970738][T30700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11497'. [ 579.010381][T30705] dvmrp0: left allmulticast mode [ 579.191017][T30712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11503'. [ 579.238879][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11503'. [ 579.272162][T30712] netlink: 'syz.3.11503': attribute type 20 has an invalid length. [ 579.310082][T30712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11503'. [ 579.356250][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11503'. [ 579.368625][T30722] xt_bpf: check failed: parse error [ 579.405453][T30712] netlink: 'syz.3.11503': attribute type 20 has an invalid length. [ 579.820751][T30746] netlink: 'syz.0.11520': attribute type 1 has an invalid length. [ 579.898964][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.513667][T30784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11539'. [ 580.656048][T30786] syzkaller1: entered promiscuous mode [ 580.669567][T30786] syzkaller1: entered allmulticast mode [ 581.269416][T30816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11553'. [ 581.390387][T30824] netlink: 'syz.3.11558': attribute type 1 has an invalid length. [ 581.472611][T30824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 581.554589][T30830] bond5: (slave geneve3): making interface the new active one [ 581.564417][T30830] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 581.575904][T30834] batadv_slave_1: entered promiscuous mode [ 581.602195][T30833] batadv_slave_1: left promiscuous mode [ 581.734357][T30842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11566'. [ 581.795208][T30847] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11568'. [ 582.311146][T30874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 582.499738][T30887] siw: device registration error -23 [ 582.876989][T30905] bond5: (slave bridge2): making interface the new active one [ 582.885706][T30905] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 583.340632][T30916] bond2: (slave ip6gretap2): making interface the new active one [ 583.355124][T30916] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 583.364653][T30916] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 583.373196][T30916] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 583.990520][T30937] validate_nla: 7 callbacks suppressed [ 583.990544][T30937] netlink: 'syz.4.11606': attribute type 4 has an invalid length. [ 585.127130][T30994] netlink: 'syz.0.11630': attribute type 1 has an invalid length. [ 585.206289][T30994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.229809][T30998] bond6: (slave gretap4): making interface the new active one [ 585.239513][T30998] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 585.355992][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11636'. [ 585.368837][T31008] netlink: 'syz.2.11636': attribute type 20 has an invalid length. [ 585.377301][T31008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11636'. [ 585.383680][T31010] netlink: 'syz.0.11635': attribute type 15 has an invalid length. [ 585.394872][T31008] netlink: 'syz.2.11636': attribute type 20 has an invalid length. [ 585.884015][T31035] lo speed is unknown, defaulting to 1000 [ 585.929319][T31041] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11644'. [ 586.040557][T31046] netlink: 240 bytes leftover after parsing attributes in process `syz.4.11649'. [ 586.213244][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11663'. [ 586.789573][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11662'. [ 586.887955][T31079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11664'. [ 586.962391][T31079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11664'. [ 587.873151][T31126] netlink: 'syz.0.11686': attribute type 3 has an invalid length. [ 588.182781][T31137] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11691'. [ 588.844295][T31162] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 588.876543][T31167] lo speed is unknown, defaulting to 1000 [ 589.359235][T31194] netlink: 'syz.3.11717': attribute type 26 has an invalid length. [ 589.375933][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11717'. [ 589.406861][T31194] netlink: 'syz.3.11717': attribute type 26 has an invalid length. [ 589.428207][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11717'. [ 590.875881][T31272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.883325][T31272] IPv6: NLM_F_CREATE should be set when creating new route [ 591.634759][T31295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.776826][T31356] netlink: 'syz.1.11784': attribute type 10 has an invalid length. [ 592.787891][T31356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11784'. [ 592.846892][T31356] team0: Port device geneve0 added [ 592.975979][T31366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11788'. [ 593.042856][T31366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11788'. [ 593.449909][T31387] nbd3: detected capacity change from 0 to 63 [ 593.462336][T31390] block nbd3: NBD_DISCONNECT [ 593.473280][T31390] block nbd3: Disconnected due to user request. [ 593.518940][T31390] block nbd3: shutting down sockets [ 593.538642][ C1] blk_print_req_error: 11 callbacks suppressed [ 593.538667][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.554278][ C1] buffer_io_error: 11 callbacks suppressed [ 593.554300][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 593.589658][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.598848][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 593.606715][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.616511][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 593.624445][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.633669][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 593.645209][T30302] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.691430][T30302] Buffer I/O error on dev nbd3, logical block 0, async page read [ 593.712264][T30302] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.731814][T30302] Buffer I/O error on dev nbd3, logical block 1, async page read [ 593.750299][T30302] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.772118][T30302] Buffer I/O error on dev nbd3, logical block 2, async page read [ 593.788085][T30302] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.808398][T30302] Buffer I/O error on dev nbd3, logical block 3, async page read [ 593.837470][T30302] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.867940][T30302] Buffer I/O error on dev nbd3, logical block 0, async page read [ 593.905768][T30302] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 593.935462][T30302] Buffer I/O error on dev nbd3, logical block 1, async page read [ 593.963399][T30302] ldm_validate_partition_table(): Disk read failed. [ 594.004749][T30302] Dev nbd3: unable to read RDB block 0 [ 594.025150][T30302] nbd3: unable to read partition table [ 594.077851][T30302] ldm_validate_partition_table(): Disk read failed. [ 594.095178][T30302] Dev nbd3: unable to read RDB block 0 [ 594.109842][T30302] nbd3: unable to read partition table [ 594.392393][T31423] bridge0: entered allmulticast mode [ 594.529116][T31425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11814'. [ 594.538148][T31425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11814'. [ 594.546580][T31433] netlink: 'syz.2.11818': attribute type 1 has an invalid length. [ 594.626743][T31433] bond2: (slave bridge0): making interface the new active one [ 594.635493][T31433] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 594.937980][T31454] dvmrp0: entered allmulticast mode [ 595.060886][T31462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11831'. [ 595.127979][T31464] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 595.165004][T31464] bond6: (slave lo): Enslaving as a backup interface with an up link [ 595.202227][T31464] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 595.554841][T31491] sctp: [Deprecated]: syz.4.11841 (pid 31491) Use of int in maxseg socket option. [ 595.554841][T31491] Use struct sctp_assoc_value instead [ 595.804811][T31506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11849'. [ 595.999351][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11854'. [ 596.025255][T31516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11854'. [ 596.423415][T31539] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 596.506591][T31543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11867'. [ 596.763801][ T13] tipc: Resetting bearer [ 596.917590][T31563] netlink: 'syz.3.11875': attribute type 1 has an invalid length. [ 597.031980][T31567] bond6: (slave geneve4): making interface the new active one [ 597.041515][T31567] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 597.091474][ T3549] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.120394][ T3549] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.165081][ T3549] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.187357][ T3549] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 597.486982][T31587] netlink: 'syz.2.11884': attribute type 13 has an invalid length. [ 598.015809][T31612] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 598.109939][T31618] lo speed is unknown, defaulting to 1000 [ 598.243949][T31623] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 598.394297][T31630] lo speed is unknown, defaulting to 1000 [ 598.535746][T31633] netlink: 'syz.3.11902': attribute type 5 has an invalid length. [ 599.338249][T31656] __nla_validate_parse: 3 callbacks suppressed [ 599.338271][T31656] netlink: 91 bytes leftover after parsing attributes in process `syz.0.11912'. [ 599.419212][T31658] lo: Caught tx_queue_len zero misconfig [ 600.212145][T31676] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11921'. [ 600.229773][T31676] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11921'. [ 600.536290][T31683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11924'. [ 600.877014][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11933'. [ 601.097495][T31715] netlink: 'syz.1.11938': attribute type 2 has an invalid length. [ 601.118803][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11938'. [ 601.132317][T31715] netlink: 'syz.1.11938': attribute type 2 has an invalid length. [ 601.141841][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11938'. [ 601.239481][T31721] netlink: 'syz.2.11940': attribute type 1 has an invalid length. [ 601.299494][T31728] x_tables: duplicate underflow at hook 4 [ 601.406678][T31732] bond3: (slave gretap1): making interface the new active one [ 601.450417][T31732] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 601.640205][T31747] netlink: 'syz.2.11949': attribute type 1 has an invalid length. [ 601.719822][T31754] syzkaller1: entered promiscuous mode [ 601.725468][T31754] syzkaller1: entered allmulticast mode [ 601.911868][T31760] syzkaller1: entered promiscuous mode [ 601.930766][T31760] syzkaller1: entered allmulticast mode [ 602.043494][T31767] netlink: 'syz.2.11958': attribute type 1 has an invalid length. [ 602.315370][T31786] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 602.329742][T31786] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 602.507968][T31798] netlink: 'syz.1.11972': attribute type 1 has an invalid length. [ 602.516416][T31798] netlink: 'syz.1.11972': attribute type 4 has an invalid length. [ 602.526685][T31798] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.11972'. [ 602.699508][T31806] netlink: 'syz.2.11975': attribute type 29 has an invalid length. [ 602.731736][T31806] netlink: 'syz.2.11975': attribute type 29 has an invalid length. [ 602.762011][T31806] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11975'. [ 602.883328][T31814] lo speed is unknown, defaulting to 1000 [ 603.452223][T31843] syzkaller1: entered promiscuous mode [ 603.465895][T31843] syzkaller1: entered allmulticast mode [ 604.472143][T31854] geneve3: entered promiscuous mode [ 604.477610][T31854] geneve3: entered allmulticast mode [ 604.491694][ T3484] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.511146][ T3484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 604.532834][ T3484] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.563192][ T3484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 604.661525][ T3484] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.682691][ T3484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 604.770322][ T3484] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.793686][ T3484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 605.109263][T31898] netlink: 208 bytes leftover after parsing attributes in process `syz.2.12007'. [ 605.760094][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12019'. [ 605.775939][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12019'. [ 606.231240][T31949] syzkaller1: entered promiscuous mode [ 606.241387][T31951] netlink: 'syz.1.12032': attribute type 1 has an invalid length. [ 606.249663][T31949] syzkaller1: entered allmulticast mode [ 606.257119][T31951] netlink: 'syz.1.12032': attribute type 4 has an invalid length. [ 606.267496][T31951] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.12032'. [ 606.355369][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12034'. [ 606.873006][T31977] netlink: 'syz.2.12044': attribute type 4 has an invalid length. [ 607.310313][T31993] lo speed is unknown, defaulting to 1000 [ 607.471563][T32012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12058'. [ 607.475386][T32005] syzkaller0: entered promiscuous mode [ 607.486760][T32005] syzkaller0: entered allmulticast mode [ 609.867111][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12070'. [ 610.279609][T32071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12079'. [ 610.455971][T32077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12081'. [ 610.887091][T32094] policy can only be matched on NF_INET_PRE_ROUTING [ 610.887117][T32094] unable to load match [ 611.131888][T32109] macvlan0: entered promiscuous mode [ 611.150786][T32109] macvlan0: entered allmulticast mode [ 611.163143][T32109] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 611.367551][T32121] syzkaller0: entered promiscuous mode [ 611.400575][T32121] syzkaller0: entered allmulticast mode [ 611.898709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.197463][T32169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12123'. [ 612.256064][T32173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12123'. [ 612.448140][T32177] lo speed is unknown, defaulting to 1000 [ 612.571464][T32186] netlink: 'syz.2.12129': attribute type 1 has an invalid length. [ 612.592948][T32179] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 612.628039][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12130'. [ 612.672154][T32186] netlink: 'syz.2.12129': attribute type 1 has an invalid length. [ 612.719504][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12130'. [ 612.980523][T32202] vlan3: entered promiscuous mode [ 612.985654][T32202] bridge0: entered promiscuous mode [ 613.250507][T32215] tipc: New replicast peer: 255.255.255.255 [ 613.292745][T32215] tipc: Enabled bearer , priority 10 [ 613.899789][T32240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12151'. [ 614.400103][T32258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12158'. [ 614.449760][T32258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12158'. [ 614.524892][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12163'. [ 615.283910][T32307] xt_hashlimit: size too large, truncated to 1048576 [ 615.300166][T32305] netem: change failed [ 615.988013][T32319] only policy match revision 0 supported [ 615.988038][T32319] unable to load match [ 616.560145][T32349] __nla_validate_parse: 3 callbacks suppressed [ 616.560167][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12201'. [ 616.591282][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12201'. [ 616.987124][T32371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12210'. [ 617.244569][T32387] netlink: 'syz.1.12215': attribute type 22 has an invalid length. [ 617.253464][T32387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12215'. [ 617.276563][T32387] netlink: 'syz.1.12215': attribute type 22 has an invalid length. [ 617.298528][T32387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12215'. [ 617.612095][T32407] block nbd3: Unsupported socket: should be TCP or UNIX. [ 618.450482][T32454] netlink: 'syz.2.12244': attribute type 1 has an invalid length. [ 618.505330][T32454] bond5: (slave gretap2): making interface the new active one [ 618.514429][T32454] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 618.641947][T32462] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 618.650011][T32462] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 619.485227][T32496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12263'. [ 619.792693][T32513] netlink: 'syz.1.12270': attribute type 21 has an invalid length. [ 619.821568][T32513] netlink: 'syz.1.12270': attribute type 22 has an invalid length. [ 619.840708][T32508] netlink: 'syz.3.12268': attribute type 13 has an invalid length. [ 619.848850][T32513] netlink: 'syz.1.12270': attribute type 23 has an invalid length. [ 619.848880][T32513] netlink: 'syz.1.12270': attribute type 25 has an invalid length. [ 619.848897][T32513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12270'. [ 619.996176][T32524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12275'. [ 620.019557][T32524] netlink: 'syz.1.12275': attribute type 7 has an invalid length. [ 620.036290][T32524] netlink: 'syz.1.12275': attribute type 8 has an invalid length. [ 620.069253][T32524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12275'. [ 620.094259][T32529] netlink: 'syz.0.12277': attribute type 1 has an invalid length. [ 620.095644][T32508] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 620.102573][T32529] netlink: 'syz.0.12277': attribute type 4 has an invalid length. [ 620.126956][T32529] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.12277'. [ 620.511034][T32549] xt_hashlimit: size too large, truncated to 1048576 [ 621.703706][T32609] __nla_validate_parse: 3 callbacks suppressed [ 621.703726][T32609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12307'. [ 621.720939][T32609] Unsupported xt match [ 621.720961][T32609] unable to load match [ 621.876178][T32615] bond7: (slave gretap5): making interface the new active one [ 621.899985][T32615] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 621.921870][T32621] "syz.2.12312" (32621) uses obsolete ecb(arc4) skcipher [ 621.995985][T32622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12311'. [ 622.131695][T32631] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.12316'. [ 622.253100][T32637] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 622.718869][T32649] bond7: (slave bridge5): making interface the new active one [ 622.759194][T32649] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 622.974413][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12331'. [ 623.075107][T32670] team0: entered promiscuous mode [ 623.080675][T32670] team0: entered allmulticast mode [ 623.155498][T32676] tipc: Failed to remove unknown binding: 66,1,1/2886997007:477903375/477903377 [ 623.166137][T32676] tipc: Failed to remove unknown binding: 66,1,1/2886997007:477903375/477903377 [ 624.454532][T32729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12359'. [ 624.687553][T32745] validate_nla: 4 callbacks suppressed [ 624.687587][T32745] netlink: 'syz.2.12366': attribute type 1 has an invalid length. [ 624.777554][T32745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 624.827328][T32749] bond6: (slave veth5): Enslaving as an active interface with a down link [ 624.863668][T32745] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 624.963533][T32757] syzkaller1: entered promiscuous mode [ 624.969885][T32757] syzkaller1: entered allmulticast mode [ 626.098380][ T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.191588][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12397'. [ 626.364114][ T362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 626.391931][ T362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 626.485645][ T367] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12403'. [ 626.678356][ T378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12407'. [ 626.967425][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12411'. [ 627.534597][ T417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12421'. [ 627.572841][ T419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12422'. [ 627.634269][ T421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12423'. [ 628.053275][ T441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12429'. [ 628.685043][ T462] netlink: 'syz.2.12438': attribute type 5 has an invalid length. [ 628.799585][ T472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12442'. [ 628.845434][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12443'. [ 628.863763][ T472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12442'. [ 628.867341][ T475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12443'. [ 629.108060][ T487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12448'. [ 629.507061][ T505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.826030][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.867070][ T518] netlink: 'syz.2.12461': attribute type 1 has an invalid length. [ 629.969976][ T518] bond7: entered promiscuous mode [ 629.987699][ T518] bond7: entered allmulticast mode [ 630.012115][ T518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.850255][ T560] lo speed is unknown, defaulting to 1000 [ 631.238330][ T578] syzkaller1: entered promiscuous mode [ 631.262055][ T578] syzkaller1: entered allmulticast mode [ 631.705904][ T591] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.097840][ T617] __nla_validate_parse: 6 callbacks suppressed [ 632.097862][ T617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12492'. [ 632.483232][ T625] lo speed is unknown, defaulting to 1000 [ 632.574377][ T631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12497'. [ 633.202629][ T655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12506'. [ 633.379164][ T663] gre4: entered promiscuous mode [ 633.390194][ T663] gre4: entered allmulticast mode [ 634.514148][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12520'. [ 634.524611][ T698] netlink: 'syz.2.12520': attribute type 11 has an invalid length. [ 634.546448][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12520'. [ 634.575797][ T698] netlink: 'syz.2.12520': attribute type 11 has an invalid length. [ 634.707018][ T704] vlan3: entered promiscuous mode [ 634.720255][ T704] vlan3: entered allmulticast mode [ 634.731347][ T704] hsr_slave_1: entered allmulticast mode [ 634.896017][ T708] syzkaller1: entered promiscuous mode [ 634.902098][ T708] syzkaller1: entered allmulticast mode [ 634.948858][ T715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12526'. [ 635.154299][ T722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12529'. [ 635.423281][ T734] xt_hashlimit: size too large, truncated to 1048576 [ 635.463730][ T740] netlink: 'syz.1.12535': attribute type 1 has an invalid length. [ 635.498346][ T740] bond7: entered promiscuous mode [ 635.506569][ T740] bond7: entered allmulticast mode [ 635.515349][ T740] 8021q: adding VLAN 0 to HW filter on device bond7 [ 635.608870][ T740] macvlan2: entered promiscuous mode [ 635.639995][ T740] macvlan2: entered allmulticast mode [ 635.661725][ T740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.251210][ T758] xt_hashlimit: size too large, truncated to 1048576 [ 636.622236][ T752] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.12539'. [ 636.658822][ T753] syzkaller1: entered promiscuous mode [ 636.664406][ T753] syzkaller1: entered allmulticast mode [ 636.865503][ T770] wg2: entered promiscuous mode [ 636.884807][ T770] wg2: entered allmulticast mode [ 636.904728][ T774] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.12545'. [ 637.660604][ T809] syzkaller1: entered promiscuous mode [ 637.666737][ T809] syzkaller1: entered allmulticast mode [ 637.783962][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12559'. [ 638.265957][ T836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12570'. [ 638.864529][ T862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12580'. [ 639.071024][ T870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12582'. [ 639.350989][ T883] lec:lec_atm_send: lec0: Unknown message type -1 [ 639.460821][ T888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12587'. [ 639.488643][ T888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12587'. [ 639.509127][ T888] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 639.583347][ T851] lec:lec_atm_close: lec0: Shut down! [ 640.392422][ T932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12599'. [ 640.775462][ T940] syzkaller0: entered promiscuous mode [ 640.807665][ T940] syzkaller0: entered allmulticast mode [ 641.045426][T23028] lec:lec_start_xmit: lec0:No lecd attached [ 641.186315][ T964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12607'. [ 642.037787][ T984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12612'. [ 643.190659][ T971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12607'. [ 643.443861][ T997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12615'. [ 644.184391][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12627'. [ 644.456439][ T1053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12631'. [ 644.525041][ T1053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12631'. [ 645.511714][ T1073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12636'. [ 645.555615][ T1073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12636'. [ 646.453476][ T1110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12648'. [ 646.468459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 646.477097][ C0] lec:lec_tx_timeout: lec0 [ 646.483959][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 646.792604][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12656'. [ 646.792784][ T1126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12655'. [ 647.274529][ T1154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.314869][ T1154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.315973][ T1156] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 647.343369][ T1156] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 648.055914][ T1188] lo speed is unknown, defaulting to 1000 [ 648.548944][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.781290][ T1224] netlink: 'syz.4.12690': attribute type 16 has an invalid length. [ 648.837809][ T1218] tipc: Resetting bearer [ 648.839873][ T1224] netlink: 'syz.4.12690': attribute type 17 has an invalid length. [ 649.124935][ T1224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.731804][ T1271] tipc: Enabled bearer , priority 0 [ 649.799056][ T1271] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 649.810003][ T1271] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 649.880089][ T1274] __nla_validate_parse: 7 callbacks suppressed [ 649.880112][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12707'. [ 650.147908][ T1298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12714'. [ 650.288025][ T1298] macsec3: entered promiscuous mode [ 650.294482][ T1298] macsec3: entered allmulticast mode [ 650.303830][ T1298] bond8: (slave macsec3): Error -34 calling dev_set_mtu [ 650.527298][ T1314] : entered promiscuous mode [ 650.541608][ T1318] syz_tun: entered allmulticast mode [ 650.554318][ T1318] syz_tun: left allmulticast mode [ 650.562768][ T1317] tipc: Enabled bearer , priority 0 [ 650.681070][ T1328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12724'. [ 650.706287][ T1317] syzkaller0: entered promiscuous mode [ 650.716327][ T1317] syzkaller0: entered allmulticast mode [ 650.736717][ T1317] tipc: Resetting bearer [ 650.781712][ T1316] tipc: Resetting bearer [ 652.222844][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 652.231018][ C0] lec:lec_tx_timeout: lec0 [ 652.235830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 652.814478][ T1316] tipc: Disabling bearer [ 653.188636][ T1351] lo speed is unknown, defaulting to 1000 [ 653.674657][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12736'. [ 653.902188][ T1387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12739'. [ 654.833865][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12750'. [ 655.566896][ T1447] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12758'. [ 655.988165][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12764'. [ 656.132604][ T1467] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12764'. [ 656.713180][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12771'. [ 656.723940][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12771'. [ 656.814682][ T1502] netlink: 'syz.3.12772': attribute type 4 has an invalid length. [ 657.107563][ T1516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12779'. [ 657.220898][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12784'. [ 657.258446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 657.266581][ C0] lec:lec_tx_timeout: lec0 [ 657.272126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.392065][ T1528] syzkaller1: entered promiscuous mode [ 657.406529][ T1528] syzkaller1: entered allmulticast mode [ 657.674349][ T1545] sctp: [Deprecated]: syz.1.12793 (pid 1545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 657.674349][ T1545] Use struct sctp_sack_info instead [ 657.976183][ T1563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12801'. [ 659.983263][ T1568] lo speed is unknown, defaulting to 1000 [ 660.397343][ T1593] netlink: 'syz.2.12810': attribute type 1 has an invalid length. [ 660.435280][ T1593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.612163][ T1593] veth7: entered promiscuous mode [ 660.627337][ T1593] bond8: (slave veth7): Enslaving as an active interface with an up link [ 660.646847][ T1599] netlink: 22 bytes leftover after parsing attributes in process `syz.0.12813'. [ 660.879558][ T1610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12816'. [ 661.865720][ T1651] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12827'. [ 662.278447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 662.286577][ C0] lec:lec_tx_timeout: lec0 [ 662.291744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 662.325709][ T1673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12837'. [ 662.493124][ T1676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12837'. [ 662.886808][ T1691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12843'. [ 663.271227][ T1710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12851'. [ 663.289706][ T1710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12851'. [ 663.306506][ T1710] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 663.790210][ T1737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12861'. [ 665.217898][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12879'. [ 665.392748][ T1800] tipc: Started in network mode [ 665.403363][ T1800] tipc: Node identity , cluster identity 4711 [ 665.430109][ T1800] tipc: Failed to obtain node identity [ 665.440988][ T1800] tipc: Enabling of bearer rejected, failed to enable media [ 665.481231][ T1802] syzkaller0: entered promiscuous mode [ 665.486764][ T1802] syzkaller0: entered allmulticast mode [ 665.639903][ T1813] bridge: RTM_NEWNEIGH with invalid ether address [ 665.667926][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12890'. [ 665.883231][ T1832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12893'. [ 665.913317][ T1833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12894'. [ 666.343563][ T1859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12904'. [ 666.439078][ T1863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12907'. [ 666.618049][ T1873] netlink: 'syz.2.12912': attribute type 1 has an invalid length. [ 666.660667][ T1873] 8021q: adding VLAN 0 to HW filter on device bond9 [ 666.668327][ T1869] pim6reg1: entered promiscuous mode [ 666.675180][ T1869] pim6reg1: entered allmulticast mode [ 666.714752][ T1877] bond9: (slave veth9): Enslaving as an active interface with a down link [ 666.800837][ T1873] bond6: (slave veth0_to_bond): Releasing active interface [ 666.841786][ T1873] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 666.928342][ T1877] bond9: (slave veth11): Enslaving as an active interface with a down link [ 667.102951][T23026] page_pool_release_retry() stalled pool shutdown: id 82, 1 inflight 60 sec [ 667.308447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 667.316559][ C0] lec:lec_tx_timeout: lec0 [ 667.321533][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 667.347108][ T1902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.419614][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12925'. [ 667.600164][ T1915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12928'. [ 667.683731][ T1919] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 667.693169][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.719155][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.728069][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.737088][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.862345][ T1923] syzkaller0: entered promiscuous mode [ 667.868168][ T1923] syzkaller0: entered allmulticast mode [ 668.712101][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12936'. [ 668.729674][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12936'. [ 670.209289][T23029] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.223427][T23029] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.238124][T23029] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 670.334611][ T1959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 670.361321][ T1963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12943'. [ 670.445409][ T1959] team0: Mode changed to "loadbalance" [ 670.574631][ T1971] netlink: 'syz.0.12945': attribute type 1 has an invalid length. [ 670.626412][ T1971] bond8: (slave gretap6): making interface the new active one [ 670.640028][ T1971] bond8: (slave gretap6): Enslaving as an active interface with an up link [ 670.889890][ T1987] __nla_validate_parse: 1 callbacks suppressed [ 670.889912][ T1987] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12952'. [ 671.540823][ T1994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.570409][ T1994] bond0: (slave rose0): Enslaving as an active interface with an up link [ 671.703699][ T2008] syzkaller1: entered promiscuous mode [ 671.719223][ T2008] syzkaller1: entered allmulticast mode [ 672.328505][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 672.336576][ C0] lec:lec_tx_timeout: lec0 [ 672.341197][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 672.376049][ T2040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12962'. [ 673.089555][ T2064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12968'. [ 673.293568][ T2076] netlink: 'syz.2.12973': attribute type 1 has an invalid length. [ 673.306032][ T2077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12972'. [ 673.329817][ T2072] lo speed is unknown, defaulting to 1000 [ 673.572507][ T2076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 673.583087][ T2089] netlink: 'syz.3.12975': attribute type 4 has an invalid length. [ 673.651367][ T2096] netlink: 'syz.3.12975': attribute type 4 has an invalid length. [ 673.677453][ T2080] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 673.741748][ T2087] bond10: (slave ip6gretap1): making interface the new active one [ 673.751553][ T2087] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 673.762149][ T2086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12972'. [ 674.017912][T23016] lo speed is unknown, defaulting to 1000 [ 674.042575][T23016] syz2: Port: 1 Link ACTIVE [ 674.069382][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12976'. [ 674.111911][ T2095] syzkaller0: entered promiscuous mode [ 674.117670][ T2095] syzkaller0: entered allmulticast mode [ 674.145099][ T2113] netlink: 'syz.3.12978': attribute type 63 has an invalid length. [ 674.328062][T23026] lo speed is unknown, defaulting to 1000 [ 674.374745][ T2113] syz_tun: entered allmulticast mode [ 674.400478][ T2112] syz_tun: left allmulticast mode [ 674.408503][T23026] syz2: Port: 1 Link DOWN [ 675.908700][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 677.348493][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 677.356690][ C0] lec:lec_tx_timeout: lec0 [ 677.362300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 678.090829][ T2209] syzkaller0: entered promiscuous mode [ 678.111286][ T2209] syzkaller0: entered allmulticast mode [ 678.991409][ T2250] syz_tun: entered allmulticast mode [ 679.031006][ T2249] syz_tun: left allmulticast mode [ 680.099355][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 680.125760][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 680.168471][ T2288] syzkaller0: entered allmulticast mode [ 680.264112][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 680.280021][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 680.368051][ T2298] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.516623][ T2306] netlink: 576 bytes leftover after parsing attributes in process `syz.4.13032'. [ 680.623128][ T2311] batman_adv: batadv0: Removing interface: dummy0 [ 680.665041][ T2313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13035'. [ 681.773073][ T2352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13045'. [ 682.213382][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13050'. [ 682.330336][ T2374] bridge7: port 1(veth13) entered blocking state [ 682.343322][ T2374] bridge7: port 1(veth13) entered disabled state [ 682.368972][ T2374] veth13: entered allmulticast mode [ 682.376301][ T2374] veth13: entered promiscuous mode [ 682.388479][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 682.396602][ C0] lec:lec_tx_timeout: lec0 [ 682.401386][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 682.495372][ T2369] bridge7: port 2(veth15) entered blocking state [ 682.523275][ T2369] bridge7: port 2(veth15) entered disabled state [ 682.551385][ T2369] veth15: entered allmulticast mode [ 682.572009][ T2369] veth15: entered promiscuous mode [ 682.592077][ T2384] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 682.685674][ T2385] lo speed is unknown, defaulting to 1000 [ 683.057805][ T2395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13057'. [ 683.168525][ T2395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.210583][ T2395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.221514][ T2395] batman_adv: batadv0: Removing interface: netdevsim0 [ 683.392610][ T2395] batadv0 (unregistering): left promiscuous mode [ 683.498067][ T2406] syzkaller0: entered promiscuous mode [ 683.514781][ T2406] syzkaller0: entered allmulticast mode [ 683.973135][ T2424] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 684.019860][ T2424] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 684.053796][ T2425] lo speed is unknown, defaulting to 1000 [ 684.194931][ T2440] netlink: 'syz.0.13066': attribute type 27 has an invalid length. [ 684.209978][ T2440] netlink: 'syz.0.13066': attribute type 4 has an invalid length. [ 684.220179][ T2440] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13066'. [ 684.359085][ T2448] tipc: Resetting bearer [ 684.376360][ T2448] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 684.462541][ T2450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13069'. [ 684.502569][ T2452] netlink: 'syz.0.13070': attribute type 33 has an invalid length. [ 684.510675][ T2452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13070'. [ 684.621974][ T2454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13070'. [ 684.921459][ T2466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13073'. [ 685.096864][ T2466] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 685.150648][ T2466] team0: entered promiscuous mode [ 685.155967][ T2466] team0: entered allmulticast mode [ 685.196760][ T2225] Set syz1 is full, maxelem 65536 reached [ 685.654998][ T2497] bridge11: entered allmulticast mode [ 686.000187][ T2518] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 686.067213][ T2519] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 686.538272][ T2538] svc: failed to register nfsdv3 RPC service (errno 111). [ 686.555967][ T2538] svc: failed to register nfsaclv3 RPC service (errno 111). [ 686.697753][ T2559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 686.822438][ T2561] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.012666][ T2569] netlink: 'syz.4.13099': attribute type 1 has an invalid length. [ 687.075918][ T2569] gretap1: entered promiscuous mode [ 687.086105][ T2569] bond4: (slave gretap1): making interface the new active one [ 687.094990][ T2569] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 687.121286][ T2569] bond4: entered promiscuous mode [ 687.126989][ T2569] macvlan2: entered promiscuous mode [ 687.132608][ T2569] macvlan2: entered allmulticast mode [ 687.138119][ T2569] bond4: entered allmulticast mode [ 687.143864][ T2569] gretap1: entered allmulticast mode [ 687.150831][ T2569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 687.160096][ T2569] bond4: left promiscuous mode [ 687.252634][ T2581] netlink: 'syz.3.13102': attribute type 1 has an invalid length. [ 687.350189][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13102'. [ 687.352685][ T2581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.375647][ T2581] bond8: (slave bond9): making interface the new active one [ 687.385024][ T2581] bond8: (slave bond9): Enslaving as an active interface with an up link [ 687.397088][ T2586] 8021q: adding VLAN 0 to HW filter on device bond8 [ 687.408472][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 687.416604][ C0] lec:lec_tx_timeout: lec0 [ 687.421343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.557918][ T2596] syzkaller1: entered promiscuous mode [ 687.577370][ T2596] syzkaller1: entered allmulticast mode [ 687.627456][ T2600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13105'. [ 688.148303][ T2607] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.170933][ T2607] bond0: (slave bond9): Enslaving as an active interface with an up link [ 688.271463][ T2614] team0: Caught tx_queue_len zero misconfig [ 688.456073][ T2618] syzkaller0: entered promiscuous mode [ 688.462616][ T2618] syzkaller0: entered allmulticast mode [ 688.644146][ T2634] GUP no longer grows the stack in syz.2.13112 (2634): 200000003000-20000000a000 (200000001000) [ 688.661061][ T2628] syzkaller0: entered promiscuous mode [ 688.667306][ T2628] syzkaller0: entered allmulticast mode [ 688.681392][ T2634] CPU: 0 UID: 0 PID: 2634 Comm: syz.2.13112 Not tainted syzkaller #0 PREEMPT(full) [ 688.681424][ T2634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.681447][ T2634] Call Trace: [ 688.681456][ T2634] [ 688.681466][ T2634] dump_stack_lvl+0x189/0x250 [ 688.681507][ T2634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.681538][ T2634] ? __pfx__printk+0x10/0x10 [ 688.681557][ T2634] ? find_vma+0xe7/0x160 [ 688.681602][ T2634] __get_user_pages+0x2470/0x2a00 [ 688.681636][ T2634] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 688.681690][ T2634] ? rcu_is_watching+0x15/0xb0 [ 688.681721][ T2634] __gup_longterm_locked+0xde4/0x1660 [ 688.681757][ T2634] ? try_grab_folio_fast+0x1bf/0x6a0 [ 688.681800][ T2634] ? gup_fast_fallback+0x1b86/0x22d0 [ 688.681843][ T2634] gup_fast_fallback+0x1d65/0x22d0 [ 688.681917][ T2634] ? __pfx_gup_fast_fallback+0x10/0x10 [ 688.681943][ T2634] ? __mutex_lock+0x335/0x1350 [ 688.681987][ T2634] ? is_valid_gup_args+0x11f/0x200 [ 688.682017][ T2634] ? get_user_pages_fast+0x4d/0xb0 [ 688.682048][ T2634] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 688.682084][ T2634] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 688.682106][ T2634] ? wait_for_space+0x248/0x2d0 [ 688.682129][ T2634] iov_iter_get_pages2+0x5e/0xa0 [ 688.682161][ T2634] __se_sys_vmsplice+0x548/0x10d0 [ 688.682209][ T2634] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 688.682230][ T2634] ? __pfx_futex_wait+0x10/0x10 [ 688.682267][ T2634] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 688.682370][ T2634] ? do_syscall_64+0xbe/0xfa0 [ 688.682406][ T2634] do_syscall_64+0xfa/0xfa0 [ 688.682433][ T2634] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.682460][ T2634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.682481][ T2634] ? clear_bhb_loop+0x60/0xb0 [ 688.682506][ T2634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.682533][ T2634] RIP: 0033:0x7fe028b8f6c9 [ 688.682554][ T2634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.682574][ T2634] RSP: 002b:00007fe029a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 688.682606][ T2634] RAX: ffffffffffffffda RBX: 00007fe028de5fa0 RCX: 00007fe028b8f6c9 [ 688.682621][ T2634] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 688.682635][ T2634] RBP: 00007fe028c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.682647][ T2634] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 688.682659][ T2634] R13: 00007fe028de6038 R14: 00007fe028de5fa0 R15: 00007fff1e7f80d8 [ 688.682722][ T2634] [ 689.240110][ T2657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13118'. [ 689.383755][ T2665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13122'. [ 689.750027][ T2683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13127'. [ 689.874165][ T2691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13127'. [ 690.241519][ T2710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13133'. [ 690.343996][ T2715] vetè0_virt_wifi: renamed from dummy0 (while UP) [ 690.612802][ T2729] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.765038][ T2738] tipc: Started in network mode [ 690.770295][ T2738] tipc: Node identity 7ecfea49168d, cluster identity 4711 [ 690.777830][ T2738] tipc: Enabled bearer , priority 0 [ 690.863068][ T2744] ipt_REJECT: TCP_RESET invalid for non-tcp [ 691.005616][ T2743] syzkaller0: entered promiscuous mode [ 691.012910][ T2743] syzkaller0: entered allmulticast mode [ 691.020668][ T2743] tipc: Resetting bearer [ 691.060511][ T2737] tipc: Resetting bearer [ 691.273166][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.438548][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 692.447210][ C0] lec:lec_tx_timeout: lec0 [ 692.451939][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 693.736768][ T2737] tipc: Disabling bearer [ 693.839282][ T2768] tipc: Enabling of bearer rejected, failed to enable media [ 693.848177][T23016] tipc: Node number set to 1749215817 [ 693.980732][ T2785] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 694.116268][ T2798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13154'. [ 694.211827][ T2785] vlan0: left allmulticast mode [ 694.216894][ T2785] geneve1: left allmulticast mode [ 694.229409][ T2785] vlan0: left promiscuous mode [ 694.250249][ T2785] geneve1: left promiscuous mode [ 694.324532][ T2807] netlink: 'syz.0.13155': attribute type 1 has an invalid length. [ 694.601285][ T2807] 8021q: adding VLAN 0 to HW filter on device bond9 [ 694.649775][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.698630][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.758026][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.794093][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.803214][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.812356][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 694.880221][ T2814] veth7: entered promiscuous mode [ 694.891774][ T2814] bond9: (slave veth7): Enslaving as an active interface with a down link [ 694.986571][ T2818] veth9: entered promiscuous mode [ 695.015349][ T2818] bond9: (slave veth9): Enslaving as an active interface with a down link [ 695.042665][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.062796][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.086359][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 695.577562][ T2887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13165'. [ 695.970323][ T2900] syzkaller0: entered promiscuous mode [ 695.977413][ T2900] syzkaller0: entered allmulticast mode [ 696.040163][ T2900] tipc: Enabled bearer , priority 0 [ 696.061075][ T2899] tipc: Resetting bearer [ 696.090531][ T2911] netlink: 'syz.0.13173': attribute type 1 has an invalid length. [ 696.104998][ T2899] tipc: Disabling bearer [ 696.167450][ T2911] 8021q: adding VLAN 0 to HW filter on device bond10 [ 696.193850][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13173'. [ 696.243380][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13175'. [ 696.254737][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13175'. [ 696.267594][ T2926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13176'. [ 696.307763][ T2926] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 696.355281][ T2929] syzkaller0: entered promiscuous mode [ 696.362047][ T2929] syzkaller0: entered allmulticast mode [ 696.427326][ T2932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13178'. [ 696.546143][ T2936] syzkaller0: entered promiscuous mode [ 696.552296][ T2936] syzkaller0: entered allmulticast mode [ 696.643975][ T2940] netlink: 'syz.0.13182': attribute type 3 has an invalid length. [ 696.653111][ T2940] netlink: 'syz.0.13182': attribute type 3 has an invalid length. [ 697.097804][ T2955] syzkaller0: entered promiscuous mode [ 697.118307][ T2955] syzkaller0: entered allmulticast mode [ 697.136893][ T2956] netlink: 'syz.4.13189': attribute type 9 has an invalid length. [ 697.312393][ T2966] netlink: 'syz.1.13194': attribute type 1 has an invalid length. [ 697.418072][ T2966] 8021q: adding VLAN 0 to HW filter on device bond11 [ 697.429819][ T2971] netlink: 'syz.3.13195': attribute type 83 has an invalid length. [ 697.455269][ T2969] macvlan2: entered promiscuous mode [ 697.461296][ T2969] macvlan2: entered allmulticast mode [ 697.467180][ T2969] bond11: entered allmulticast mode [ 697.472505][ T2969] bond11: entered promiscuous mode [ 697.480258][ T2969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 697.489873][ T2969] team0: Port device macvlan2 added [ 697.532535][ T2974] syzkaller0: entered promiscuous mode [ 697.538079][ T2974] syzkaller0: entered allmulticast mode [ 697.616218][ T2977] netlink: 'syz.2.13197': attribute type 1 has an invalid length. [ 697.774136][ T2977] bond11 (unregistering): Released all slaves [ 697.870363][ T2991] sch_fq: defrate 0 ignored. [ 697.888125][ T2986] tipc: Enabled bearer , priority 0 [ 697.919407][ T2986] syzkaller0: entered promiscuous mode [ 697.924971][ T2986] syzkaller0: entered allmulticast mode [ 697.956754][ T2986] tipc: Resetting bearer [ 697.968158][ T2986] syzkaller0: tun_net_xmit 134 [ 697.974282][ T2986] syzkaller0: tun_net_xmit 134 [ 697.992472][ T2985] tipc: Resetting bearer [ 698.046820][ T2985] tipc: Disabling bearer [ 698.119248][ T3004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13206'. [ 698.298410][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5850 ms [ 698.306629][ C0] lec:lec_tx_timeout: lec0 [ 698.311961][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 698.535003][ T3024] netlink: 'syz.2.13213': attribute type 1 has an invalid length. [ 698.579541][ T3024] 8021q: adding VLAN 0 to HW filter on device bond11 [ 698.624356][ T3024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13213'. [ 698.633870][ T3024] bond11: entered promiscuous mode [ 698.640052][ T3024] bond11: entered allmulticast mode [ 698.662753][ T3024] bond11: (slave dummy0): making interface the new active one [ 698.681177][ T3024] dummy0: entered promiscuous mode [ 698.689885][ T3024] dummy0: entered allmulticast mode [ 698.697302][ T3024] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 698.718464][ T3029] syzkaller1: entered promiscuous mode [ 698.724003][ T3029] syzkaller1: entered allmulticast mode [ 698.878633][ T3024] bond11 (unregistering): (slave dummy0): Releasing active interface [ 698.887107][ T3024] dummy0: left promiscuous mode [ 698.892575][ T3024] dummy0: left allmulticast mode [ 698.906857][ T3024] bond11 (unregistering): Released all slaves [ 699.287103][ T3044] tipc: Enabled bearer , priority 0 [ 699.503446][ T3053] netlink: 'syz.3.13226': attribute type 1 has an invalid length. [ 699.590203][ T3053] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 699.699387][ T3053] veth15: entered promiscuous mode [ 699.708259][ T3053] bond10: (slave veth15): Enslaving as a backup interface with a down link [ 699.951654][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 699.989499][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.017381][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.064805][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.089604][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.098111][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.152349][ T3067] netlink: 'syz.4.13232': attribute type 29 has an invalid length. [ 700.334406][ T3082] tipc: Enabled bearer , priority 0 [ 700.344045][ T3082] syzkaller0: entered promiscuous mode [ 700.350592][ T3082] syzkaller0: entered allmulticast mode [ 700.378535][ T3082] tipc: Resetting bearer [ 700.418677][ T3081] tipc: Resetting bearer [ 700.445318][ T3081] tipc: Disabling bearer [ 700.745246][ T3100] syzkaller0: entered promiscuous mode [ 700.751931][ T3100] syzkaller0: entered allmulticast mode [ 700.764049][ T3100] 0: reclassify loop, rule prio 0, protocol 800 [ 701.224261][ T3113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.254836][ T3115] tipc: Enabling of bearer rejected, already enabled [ 701.295583][ T3115] netem: change failed [ 701.310899][ T3115] tipc: Resetting bearer [ 701.394326][ T3121] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 701.401873][ T3121] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 701.499558][ T3127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13251'. [ 701.572416][T23613] block nbd3: Receive control failed (result -1) [ 701.620918][ T3130] tipc: Enabled bearer , priority 0 [ 701.632024][ T3130] syzkaller0: entered promiscuous mode [ 701.658024][ T3130] syzkaller0: entered allmulticast mode [ 701.744446][ T3130] tipc: Resetting bearer [ 701.799215][ T3129] tipc: Resetting bearer [ 701.843195][ T3129] tipc: Disabling bearer [ 701.851329][ T3138] netlink: 'syz.2.13257': attribute type 1 has an invalid length. [ 701.925479][ T3138] 8021q: adding VLAN 0 to HW filter on device bond11 [ 702.030149][ T3142] bond11: (slave veth15): Enslaving as an active interface with a down link [ 702.105990][ T3138] veth17: entered promiscuous mode [ 702.130131][ T3138] bond11: (slave veth17): Enslaving as an active interface with a down link [ 702.163816][ T3143] vlan0: entered allmulticast mode [ 702.180866][ T3143] bond11: entered allmulticast mode [ 702.203196][ T3143] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 702.800958][ T3175] tipc: Enabling of bearer rejected, already enabled [ 702.814062][ T3176] netlink: 'syz.1.13271': attribute type 1 has an invalid length. [ 702.951036][ T3185] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 702.963916][ T3185] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 703.056949][ T3186] macvlan3: entered promiscuous mode [ 703.092491][ T3186] macvlan3: entered allmulticast mode [ 703.109822][ T3186] bond12: entered promiscuous mode [ 703.122939][ T3186] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 703.141476][ T3186] bond12: left promiscuous mode [ 703.197196][ T3191] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 703.205843][ T3191] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 703.299136][ T3198] syzkaller0: entered promiscuous mode [ 703.304922][ T3198] syzkaller0: entered allmulticast mode [ 703.318484][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 703.326857][ C0] lec:lec_tx_timeout: lec0 [ 703.331619][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 703.431427][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13281'. [ 705.415790][ T3214] validate_nla: 1 callbacks suppressed [ 705.415810][ T3214] netlink: 'syz.1.13282': attribute type 12 has an invalid length. [ 705.440173][ T3218] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 705.887252][ T3252] netlink: 'syz.2.13291': attribute type 1 has an invalid length. [ 705.976340][ T3252] 8021q: adding VLAN 0 to HW filter on device bond12 [ 706.037861][ T3258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 706.069137][ T3258] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 706.099900][ T3258] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 706.125239][ T3265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13291'. [ 706.189788][ T3252] veth19: entered promiscuous mode [ 706.206866][ T3252] bond12: (slave veth19): Enslaving as an active interface with a down link [ 706.217464][ T3265] 8021q: adding VLAN 0 to HW filter on device bond12 [ 706.244180][ T3267] tipc: Enabled bearer , priority 0 [ 706.263594][ T3267] syzkaller0: entered promiscuous mode [ 706.271343][ T3267] syzkaller0: entered allmulticast mode [ 706.289018][ T3270] tipc: Enabled bearer , priority 0 [ 706.296802][ T3270] syzkaller0: entered promiscuous mode [ 706.304952][ T3270] syzkaller0: entered allmulticast mode [ 706.324845][ T3272] syzkaller0: entered promiscuous mode [ 706.332015][ T3272] syzkaller0: entered allmulticast mode [ 706.342725][ T3267] tipc: Resetting bearer [ 706.361663][ T3266] tipc: Resetting bearer [ 706.383154][ T3266] tipc: Disabling bearer [ 706.412246][ T3270] tipc: Resetting bearer [ 706.467665][ T3269] tipc: Resetting bearer [ 706.515855][ T3269] tipc: Disabling bearer [ 706.605369][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13303'. [ 706.661246][ T3280] syzkaller0: entered promiscuous mode [ 706.667019][ T3280] syzkaller0: entered allmulticast mode [ 706.750654][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13303'. [ 706.761579][ T3280] tipc: Enabled bearer , priority 0 [ 706.913681][ T3278] tipc: Resetting bearer [ 706.971681][ T3278] tipc: Disabling bearer [ 707.007941][ T3291] tipc: Enabled bearer , priority 0 [ 707.061821][ T3293] syzkaller0: entered promiscuous mode [ 707.067626][ T3293] syzkaller0: entered allmulticast mode [ 707.183382][ T3293] tipc: Resetting bearer [ 707.224718][ T3287] tipc: Resetting bearer [ 707.287389][ T3287] tipc: Disabling bearer [ 707.346327][ T3300] tipc: Enabling of bearer rejected, already enabled [ 707.357764][ T3296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13306'. [ 707.553956][ T3311] tipc: Enabling of bearer rejected, already enabled [ 707.630766][ T3315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.676428][ T3315] team0: Unable to change to the same mode the team is in [ 707.867957][ T3325] syzkaller0: entered promiscuous mode [ 707.881276][ T3325] syzkaller0: entered allmulticast mode [ 708.192035][ T3338] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 708.211616][ T3338] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 708.264027][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13323'. [ 708.281931][ T3345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13325'. [ 708.334793][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13323'. [ 708.348687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 708.356886][ C0] lec:lec_tx_timeout: lec0 [ 708.361932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 708.400661][ T3348] syzkaller0: entered promiscuous mode [ 708.409631][ T3348] syzkaller0: entered allmulticast mode [ 708.602045][ T3359] tipc: Enabling of bearer rejected, already enabled [ 708.637382][ T3354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13330'. [ 708.648172][ T3359] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 708.655938][ T3359] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 708.664717][ T3354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.786419][ T3354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.987673][ T3379] tipc: Enabling of bearer rejected, already enabled [ 709.116099][ T3377] syzkaller0: entered allmulticast mode [ 709.133684][ T3392] netlink: 'syz.4.13339': attribute type 39 has an invalid length. [ 711.548293][ T3418] tipc: Enabling of bearer rejected, already enabled [ 711.813638][ T3452] tipc: Enabling of bearer rejected, already enabled [ 711.841435][ T3451] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 711.856312][ T3451] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 711.954686][ T3454] tipc: Enabled bearer , priority 0 [ 711.977431][ T3454] syzkaller0: entered promiscuous mode [ 711.997724][ T3454] syzkaller0: entered allmulticast mode [ 712.085264][ T3454] tipc: Resetting bearer [ 712.103966][ T3462] tipc: Enabling of bearer rejected, already enabled [ 712.125080][ T3453] tipc: Resetting bearer [ 712.141450][ T3467] netlink: 'syz.3.13355': attribute type 4 has an invalid length. [ 712.161959][ T3453] tipc: Disabling bearer [ 712.180337][ T3464] tipc: Enabling of bearer rejected, already enabled [ 712.200560][ T3464] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 712.208049][ T3464] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 712.522524][ T3494] tipc: Enabled bearer , priority 0 [ 712.550804][ T3494] syzkaller0: entered promiscuous mode [ 712.573495][ T3494] syzkaller0: entered allmulticast mode [ 712.621914][ T3494] tipc: Resetting bearer [ 712.644872][ T3492] tipc: Resetting bearer [ 712.685706][ T3492] tipc: Disabling bearer [ 712.922160][ T3508] syzkaller0: entered promiscuous mode [ 712.929543][ T3508] syzkaller0: entered allmulticast mode [ 713.006716][ T3516] netlink: 'syz.2.13368': attribute type 29 has an invalid length. [ 713.027327][ T3516] netlink: 'syz.2.13368': attribute type 29 has an invalid length. [ 713.362808][ T3537] tipc: Enabling of bearer rejected, already enabled [ 713.371220][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 713.371301][ C0] lec:lec_tx_timeout: lec0 [ 713.380660][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 713.411108][ T3541] syzkaller0: entered promiscuous mode [ 713.416651][ T3541] syzkaller0: entered allmulticast mode [ 713.437665][ T3540] syzkaller0: entered promiscuous mode [ 713.447049][ T3540] syzkaller0: entered allmulticast mode [ 713.800670][ T3557] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 713.814515][ T3557] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 713.839589][ T3563] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:5 [ 714.063388][ T3572] syzkaller0: entered promiscuous mode [ 714.076639][ T3572] syzkaller0: entered allmulticast mode [ 714.088181][ T3573] tipc: Enabled bearer , priority 0 [ 714.096856][ T3573] syzkaller0: entered promiscuous mode [ 714.105223][ T3573] syzkaller0: entered allmulticast mode [ 714.215500][ T3579] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13380'. [ 714.277176][ T3573] tipc: Resetting bearer [ 714.343301][ T3568] tipc: Resetting bearer [ 714.402891][ T3568] tipc: Disabling bearer [ 714.465542][ T3588] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 714.481603][ T3588] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 714.508741][ T3585] tipc: Enabled bearer , priority 0 [ 714.531869][ T3585] syzkaller0: entered promiscuous mode [ 714.568470][ T3585] syzkaller0: entered allmulticast mode [ 714.650033][ T3585] tipc: Resetting bearer [ 714.736271][ T3584] tipc: Resetting bearer [ 714.768312][ T3584] tipc: Disabling bearer [ 715.159399][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13394'. [ 715.220742][ T3620] macvtap1: entered promiscuous mode [ 715.243561][ T3620] macvtap1: entered allmulticast mode [ 715.273047][ T3620] `: entered allmulticast mode [ 715.293088][ T3620] bond_slave_0: entered allmulticast mode [ 715.309749][ T3620] bond_slave_1: entered allmulticast mode [ 715.331900][ T3620] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 715.358442][ T3622] `: left allmulticast mode [ 715.363904][ T3622] bond_slave_0: left allmulticast mode [ 715.370774][ T3622] bond_slave_1: left allmulticast mode [ 715.413260][ T3626] tipc: Enabling of bearer rejected, already enabled [ 715.430051][ T3624] tipc: Enabled bearer , priority 0 [ 715.440642][ T3624] syzkaller0: entered promiscuous mode [ 715.446294][ T3624] syzkaller0: entered allmulticast mode [ 715.488053][ T3624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 715.549225][ T3624] tipc: Resetting bearer [ 715.557605][ T3632] syzkaller0: entered promiscuous mode [ 715.564858][ T3632] syzkaller0: entered allmulticast mode [ 715.580474][ T3623] tipc: Resetting bearer [ 715.612308][ T3623] tipc: Disabling bearer [ 715.839091][ T3645] syzkaller0: entered promiscuous mode [ 715.844641][ T3645] syzkaller0: entered allmulticast mode [ 716.000582][ T3649] lo speed is unknown, defaulting to 1000 [ 716.002742][ T3653] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 716.017785][ T3653] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 716.033431][ T3656] syzkaller0: entered promiscuous mode [ 716.060258][ T3656] syzkaller0: entered allmulticast mode [ 716.124546][ T3656] tipc: Enabled bearer , priority 0 [ 716.153682][ T3655] tipc: Resetting bearer [ 716.268743][ T3655] tipc: Disabling bearer [ 716.311172][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13410'. [ 716.601187][ T3676] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 716.646884][ T3676] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 717.181691][ T3710] netlink: 'syz.2.13419': attribute type 1 has an invalid length. [ 717.365442][ T3714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13419'. [ 717.565332][ T3712] veth21: entered promiscuous mode [ 717.610806][ T3712] bond13: (slave veth21): Enslaving as a backup interface with a down link [ 717.647433][ T3714] 8021q: adding VLAN 0 to HW filter on device bond13 [ 718.398496][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 718.406713][ C0] lec:lec_tx_timeout: lec0 [ 718.419848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 720.045092][ T3745] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 720.052701][ T3745] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 720.061901][ T3751] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 720.080959][ T3751] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 720.411459][ T3780] tipc: Enabling of bearer rejected, already enabled [ 720.503375][ T3776] syzkaller0: entered promiscuous mode [ 720.533133][ T3776] syzkaller0: entered allmulticast mode [ 720.585310][ T3785] tipc: Enabling of bearer rejected, already enabled [ 720.663663][ T3790] tipc: Enabling of bearer rejected, already enabled [ 720.790270][ T3794] syz_tun: entered allmulticast mode [ 720.803527][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13435'. [ 720.828206][ T3803] sock: sock_set_timeout: `syz.2.13434' (pid 3803) tries to set negative timeout [ 721.198943][ T3822] tipc: Enabling of bearer rejected, already enabled [ 721.297233][ T3825] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 721.314045][ T3825] syzkaller0: entered promiscuous mode [ 721.331021][ T3825] syzkaller0: entered allmulticast mode [ 721.382663][ T3786] syz_tun: left allmulticast mode [ 721.499866][ T3827] syzkaller0: entered promiscuous mode [ 721.505722][ T3827] syzkaller0: entered allmulticast mode [ 721.561642][ T3835] tipc: Enabling of bearer rejected, already enabled [ 721.796082][ T3853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13451'. [ 722.067591][ T3860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13456'. [ 722.077268][ T3860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13456'. [ 722.098638][ T3860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13456'. [ 722.133869][ T3860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13456'. [ 722.923346][ T3903] tipc: Enabled bearer , priority 0 [ 722.942701][ T3903] syzkaller0: entered promiscuous mode [ 722.948267][ T3903] syzkaller0: entered allmulticast mode [ 723.046670][ T3903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 723.119156][ T3911] tipc: Enabled bearer , priority 0 [ 723.141030][ T3903] tipc: Resetting bearer [ 723.164929][ T3902] tipc: Resetting bearer [ 723.205667][ T3902] tipc: Disabling bearer [ 723.231719][ T3911] syzkaller0: entered promiscuous mode [ 723.247730][ T3911] syzkaller0: entered allmulticast mode [ 723.428445][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 723.436573][ C0] lec:lec_tx_timeout: lec0 [ 723.441369][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 723.564288][ T3913] tipc: Resetting bearer [ 723.611098][ T3937] tipc: Enabling of bearer rejected, already enabled [ 723.640970][ T3910] tipc: Resetting bearer [ 723.682947][ T3910] tipc: Disabling bearer [ 723.753236][ T3938] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 723.888340][ T3937] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13473'. [ 724.020031][ T3961] netlink: 'syz.0.13480': attribute type 4 has an invalid length. [ 724.100380][ T3963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13481'. [ 724.119657][ T3963] netlink: 'syz.4.13481': attribute type 7 has an invalid length. [ 724.128600][ T3965] netlink: 'syz.1.13482': attribute type 10 has an invalid length. [ 724.136948][ T3963] netlink: 'syz.4.13481': attribute type 8 has an invalid length. [ 724.145227][ T3965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13482'. [ 724.156967][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13481'. [ 724.167313][ T3964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.329994][ T3974] netlink: 'syz.1.13485': attribute type 30 has an invalid length. [ 725.116529][ T4001] netlink: 'syz.2.13486': attribute type 13 has an invalid length. [ 726.521699][ T3981] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 726.522005][ T3974] netlink: 'syz.1.13485': attribute type 30 has an invalid length. [ 726.529457][ T3981] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 726.568448][ T3974] __nla_validate_parse: 1 callbacks suppressed [ 726.568471][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13485'. [ 726.728776][ T4007] tipc: Enabling of bearer rejected, already enabled [ 726.776008][ T4006] netlink: 'syz.3.13487': attribute type 4 has an invalid length. [ 726.827701][ T4015] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 726.857675][ T4015] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 726.882149][ T4006] netlink: 'syz.3.13487': attribute type 11 has an invalid length. [ 726.890434][ T4006] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13487'. [ 727.414095][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13502'. [ 727.462624][ T4053] netlink: 'syz.2.13503': attribute type 1 has an invalid length. [ 727.471796][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13502'. [ 727.482284][ T4053] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13503'. [ 727.489213][ T4049] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.628114][ T4068] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13508'. [ 728.207029][ T4097] Cannot find add_set index 0 as target [ 728.227862][ T4097] lo: entered allmulticast mode [ 728.256333][ T4097] lo: left allmulticast mode [ 728.569712][ T4114] netlink: 'syz.2.13525': attribute type 10 has an invalid length. [ 728.600640][ T4114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13525'. [ 729.545618][ T4172] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13541'. [ 729.617206][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13542'. [ 729.887436][ T5495] eql: remember to turn off Van-Jacobson compression on your slave devices [ 729.998619][ T4190] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 730.010227][ T4190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 730.408436][ T4217] tipc: Enabled bearer , priority 0 [ 730.463800][ T4217] syzkaller0: entered promiscuous mode [ 730.473044][ T4217] syzkaller0: entered allmulticast mode [ 730.515335][ T4217] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 730.587120][ T4217] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13556'. [ 730.624225][ T4217] tipc: Resetting bearer [ 730.633649][ T4215] tipc: Resetting bearer [ 730.663930][ T4215] tipc: Disabling bearer [ 731.105965][ T4253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 731.312720][ T4262] tipc: Enabled bearer , priority 0 [ 731.320635][ T4262] syzkaller0: entered promiscuous mode [ 731.326452][ T4262] syzkaller0: entered allmulticast mode [ 731.335491][ T4262] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 731.393920][ T4262] tipc: Resetting bearer [ 731.449416][ T4261] tipc: Resetting bearer [ 731.498964][ T4261] tipc: Disabling bearer [ 732.134226][ T4310] tipc: Enabling of bearer rejected, already enabled [ 732.218397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 732.226491][ C1] lec:lec_tx_timeout: lec0 [ 732.231817][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 732.752342][ T4346] lo speed is unknown, defaulting to 1000 [ 732.764349][ T4349] tipc: Enabled bearer , priority 0 [ 732.773154][ T4349] syzkaller0: entered promiscuous mode [ 732.780131][ T4349] syzkaller0: entered allmulticast mode [ 732.806093][ T4349] tipc: Resetting bearer [ 732.824087][ T4345] tipc: Resetting bearer [ 733.023345][ T4345] tipc: Disabling bearer [ 733.548784][ T4377] bond0: Caught tx_queue_len zero misconfig [ 733.781701][ T4390] tipc: Enabling of bearer rejected, already enabled [ 733.880289][ T4392] syzkaller0: entered promiscuous mode [ 733.885982][ T4392] syzkaller0: entered allmulticast mode [ 734.062938][ T4392] tipc: Enabled bearer , priority 0 [ 734.100907][ T4391] tipc: Resetting bearer [ 734.167350][ T4391] tipc: Disabling bearer [ 734.285219][ T4415] __nla_validate_parse: 4 callbacks suppressed [ 734.285243][ T4415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13639'. [ 734.430826][ T4424] tipc: Enabling of bearer rejected, already enabled [ 734.651741][ T4439] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 734.681598][ T4439] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 734.699363][ T4441] tipc: Enabling of bearer rejected, already enabled [ 735.072191][ T4464] sctp: Trying to GSO but underlying device doesn't support it. [ 735.190888][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13662'. [ 735.342822][ T4481] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 735.353387][ T4481] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 735.426655][ T4483] tipc: Enabled bearer , priority 0 [ 735.474394][ T4483] syzkaller0: entered promiscuous mode [ 735.494193][ T4483] syzkaller0: entered allmulticast mode [ 735.587726][ T4483] tipc: Resetting bearer [ 735.652403][ T4482] tipc: Resetting bearer [ 735.741406][ T4482] tipc: Disabling bearer [ 735.790972][ T4508] netem: change failed [ 737.238431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 737.246510][ C1] lec:lec_tx_timeout: lec0 [ 737.251347][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 738.425256][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13688'. [ 738.754525][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13695'. [ 738.918083][ T4567] bond0: (slave bridge_slave_1): Releasing backup interface [ 738.940136][ T4567] bridge_slave_1 (unregistering): left promiscuous mode [ 738.976511][ T4581] tipc: Enabling of bearer rejected, already enabled [ 739.003056][ T4573] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 739.014534][ T4573] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 739.454750][ T4602] tap0: tun_chr_ioctl cmd 1074025678 [ 739.474732][ T4602] tap0: group set to 0 [ 740.526552][ T4663] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13731'. [ 741.089896][ T4686] SET target dimension over the limit! [ 741.748960][ T4711] tipc: Enabled bearer , priority 0 [ 741.771693][ T4711] syzkaller0: entered promiscuous mode [ 741.801157][ T4711] syzkaller0: entered allmulticast mode [ 741.918722][ T4709] tipc: Resetting bearer [ 742.003871][ T4709] tipc: Disabling bearer [ 742.258417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 742.266547][ C1] lec:lec_tx_timeout: lec0 [ 742.271726][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 742.362982][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13753'. [ 742.873916][ T4754] tipc: Enabled bearer , priority 0 [ 742.883917][ T4754] syzkaller0: entered promiscuous mode [ 742.889701][ T4754] syzkaller0: entered allmulticast mode [ 743.024737][ T4753] tipc: Resetting bearer [ 743.115384][ T4753] tipc: Disabling bearer [ 743.421296][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13768'. [ 743.562761][ T4777] tipc: New replicast peer: 255.255.255.255 [ 743.592416][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13773'. [ 743.647669][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13773'. [ 743.656955][ T4779] openvswitch: netlink: Flow actions attr not present in new flow. [ 743.778849][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13773'. [ 743.828962][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13773'. [ 744.494039][ T4814] lo speed is unknown, defaulting to 1000 [ 744.697139][ T4819] syzkaller1: entered promiscuous mode [ 744.703008][ T4819] syzkaller1: entered allmulticast mode [ 745.224959][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13795'. [ 746.921716][ T4638] Set syz1 is full, maxelem 65536 reached [ 747.278465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 747.286569][ C1] lec:lec_tx_timeout: lec0 [ 747.292126][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 747.457959][ T4922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13831'. [ 747.506069][ T4922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13831'. [ 747.548804][ T4927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13833'. [ 747.784989][ T4941] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 747.792982][ T4941] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 747.800978][ T4939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13837'. [ 748.102584][ T4961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13844'. [ 748.136066][ T4960] syzkaller0: entered promiscuous mode [ 748.141772][ T4960] syzkaller0: entered allmulticast mode [ 748.144156][ T4961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13844'. [ 748.286363][ T4966] validate_nla: 1 callbacks suppressed [ 748.286384][ T4966] netlink: 'syz.2.13849': attribute type 1 has an invalid length. [ 748.338199][ T4966] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13849'. [ 748.364888][ T4971] syzkaller0: entered promiscuous mode [ 748.378657][ T4971] syzkaller0: entered allmulticast mode [ 748.406588][ T4971] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 748.710459][ T4992] netlink: 'syz.3.13857': attribute type 10 has an invalid length. [ 748.721254][ T4992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13857'. [ 748.733747][ T4992] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 749.257959][ T5025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13869'. [ 750.142649][ T5080] geneve5: entered promiscuous mode [ 750.148085][ T5080] geneve5: entered allmulticast mode [ 750.171313][T23029] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 750.186833][T23029] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 750.282316][ T5086] netlink: 'syz.2.13888': attribute type 4 has an invalid length. [ 750.373410][ T5080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.385708][ T5080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.397204][ T5080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.421618][T23029] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 750.631939][ T5099] lo speed is unknown, defaulting to 1000 [ 750.761555][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13896'. [ 751.291857][ T5128] netlink: 'syz.0.13904': attribute type 10 has an invalid length. [ 751.923377][ T5080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.955728][ T5080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.966411][ T5080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.977245][ T5080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 752.005826][ T5159] bridge9: entered promiscuous mode [ 752.011482][ T5159] bridge9: entered allmulticast mode [ 752.019394][ T5159] team0: Port device bridge9 added [ 752.027565][ T5166] bridge0: port 2(team0) entered blocking state [ 752.047102][ T5166] bridge0: port 2(team0) entered disabled state [ 752.055789][ T5166] team0: entered allmulticast mode [ 752.061305][ T5166] team_slave_0: entered allmulticast mode [ 752.067268][ T5166] team_slave_1: entered allmulticast mode [ 752.074841][ T5166] geneve0: entered allmulticast mode [ 752.110530][ T5166] team0: entered promiscuous mode [ 752.115790][ T5166] team_slave_0: entered promiscuous mode [ 752.122137][ T5166] team_slave_1: entered promiscuous mode [ 752.138305][ T5166] veth0_virt_wifi: entered promiscuous mode [ 752.153824][ T5166] geneve0: entered promiscuous mode [ 752.232361][ T5080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.267779][ T5080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.281551][ T5080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.294614][ T5080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 752.308450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 752.316574][ C1] lec:lec_tx_timeout: lec0 [ 752.322181][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 752.554327][ T5080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.576437][ T5080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.612738][ T5080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.661576][ T5080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 752.967446][T23017] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.988624][T23017] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.003506][T23017] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.016599][T23017] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 753.041682][ T5215] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 753.110122][ T3484] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.119756][ T3484] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.128079][ T3484] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.137830][ T3484] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 753.214608][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.243599][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.263961][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.281845][ T13] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 753.328045][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.341402][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.365735][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.419388][ T13] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 753.557651][ T5242] __nla_validate_parse: 1 callbacks suppressed [ 753.557674][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13942'. [ 753.631981][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13942'. [ 753.641789][ T5242] openvswitch: netlink: Flow actions attr not present in new flow. [ 753.689072][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13942'. [ 754.678524][ T5262] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 755.834591][ T5279] netlink: 'syz.3.13953': attribute type 1 has an invalid length. [ 755.870346][ T5279] 8021q: adding VLAN 0 to HW filter on device bond11 [ 755.972197][ T5287] netlink: 'syz.0.13954': attribute type 1 has an invalid length. [ 756.009126][ T5287] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13954'. [ 756.035747][ T5288] lo speed is unknown, defaulting to 1000 [ 756.102103][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13958'. [ 756.205191][ T5298] tipc: Enabled bearer , priority 0 [ 756.235427][ T5298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 756.300298][ T5298] tipc: Resetting bearer [ 756.386307][ T5296] tipc: Disabling bearer [ 757.338524][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 757.346752][ C1] lec:lec_tx_timeout: lec0 [ 757.351715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 758.622003][ T5320] netlink: 'syz.0.13970': attribute type 1 has an invalid length. [ 758.639739][ T5320] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13970'. [ 758.966481][ T5336] tipc: Enabled bearer , priority 0 [ 759.011147][ T5333] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 759.086780][ T5333] tipc: Resetting bearer [ 759.140718][ T5345] tls_set_device_offload: netdev not found [ 759.170990][ T5331] tipc: Disabling bearer [ 759.385513][ T5352] netlink: 'syz.3.13985': attribute type 1 has an invalid length. [ 759.397029][ T5352] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13985'. [ 759.742587][ T5374] netlink: 'syz.2.13992': attribute type 4 has an invalid length. [ 759.796991][ T5380] netlink: 'syz.2.13992': attribute type 4 has an invalid length. [ 759.890976][ T5382] tipc: Enabled bearer , priority 0 [ 759.910646][ T5382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 759.968089][ T5382] tipc: Resetting bearer [ 760.017518][ T5381] tipc: Disabling bearer [ 760.026351][ T5391] netlink: 'syz.2.13999': attribute type 1 has an invalid length. [ 760.042416][ T5391] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13999'. [ 760.252743][ T5400] lo speed is unknown, defaulting to 1000 [ 760.654096][ T5422] netlink: 'syz.1.14012': attribute type 1 has an invalid length. [ 760.674876][ T5422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14012'. [ 760.695712][ T5423] tipc: Enabling of bearer rejected, already enabled [ 761.523997][ T5459] netlink: 'syz.2.14025': attribute type 1 has an invalid length. [ 761.563416][ T5459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14025'. [ 761.609196][ T5462] tipc: Enabling of bearer rejected, already enabled [ 761.698035][ T5463] syzkaller0: entered promiscuous mode [ 761.705257][ T5463] syzkaller0: entered allmulticast mode [ 761.720231][ T5463] tipc: Enabled bearer , priority 0 [ 761.766989][ T5460] tipc: Resetting bearer [ 761.853150][ T5460] tipc: Disabling bearer [ 761.990308][ T5477] lo speed is unknown, defaulting to 1000 [ 762.101470][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14033'. [ 762.160364][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14033'. [ 762.169847][ T5490] openvswitch: netlink: Flow actions attr not present in new flow. [ 762.185486][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14033'. [ 762.358378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 762.366527][ C1] lec:lec_tx_timeout: lec0 [ 762.373076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 762.590146][ T5511] tipc: Enabled bearer , priority 0 [ 762.659027][ T5511] tipc: Resetting bearer [ 762.733103][ T5510] tipc: Disabling bearer [ 762.967491][ T5517] tipc: Enabling of bearer rejected, already enabled [ 763.044709][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14048'. [ 763.068576][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14048'. [ 763.081451][ T5530] openvswitch: netlink: Flow actions attr not present in new flow. [ 763.489286][ T5552] lo speed is unknown, defaulting to 1000 [ 763.644429][ T5559] tipc: Enabled bearer , priority 0 [ 763.747096][ T5567] netlink: 'syz.4.14063': attribute type 10 has an invalid length. [ 763.822684][ T5569] netlink: 'syz.4.14063': attribute type 10 has an invalid length. [ 763.849473][ T5563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.870480][ T5565] tipc: Resetting bearer [ 763.893017][ T5567] team0: Device vetè0_virt_wifi failed to register rx_handler [ 763.976783][ T5558] tipc: Disabling bearer [ 764.479256][ T5598] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 764.978726][ T5622] tipc: Enabling of bearer rejected, already enabled [ 766.060046][ T5677] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 766.067257][ T5677] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 766.288256][ T5685] __nla_validate_parse: 2 callbacks suppressed [ 766.288277][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14098'. [ 766.486126][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14101'. [ 766.495556][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14101'. [ 766.598275][ T5700] tipc: Enabling of bearer rejected, already enabled [ 766.664911][ T5700] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 766.672654][ T5700] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 767.389864][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 767.398016][ C1] lec:lec_tx_timeout: lec0 [ 768.901594][ T5710] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 768.909025][ T5710] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 769.057884][ T5722] netlink: 'syz.4.14113': attribute type 1 has an invalid length. [ 770.889425][ T5722] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 770.997346][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14114'. [ 771.069122][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14114'. [ 771.085779][ T5726] openvswitch: netlink: Flow actions attr not present in new flow. [ 771.114935][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14114'. [ 771.255885][ T5739] tipc: Enabling of bearer rejected, already enabled [ 771.276947][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14120'. [ 771.287095][ T5739] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 771.297868][ T5739] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 772.614011][ T993] lec:lec_start_xmit: lec0:No lecd attached [ 773.726287][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14131'. [ 773.811446][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14131'. [ 773.835236][ T5778] openvswitch: netlink: Flow actions attr not present in new flow. [ 773.865126][ T5783] tipc: Enabled bearer , priority 0 [ 773.884266][ T5778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14131'. [ 773.930337][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14135'. [ 773.961601][ T5782] tipc: Disabling bearer [ 773.991716][ T5793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14135'. [ 774.395427][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14147'. [ 774.447147][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14147'. [ 774.457473][ T5821] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.490124][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14147'. [ 774.493079][ T5824] netlink: 'syz.0.14149': attribute type 4 has an invalid length. [ 774.526880][ T5824] netlink: 'syz.0.14149': attribute type 4 has an invalid length. [ 775.087700][ T5844] netlink: 'syz.3.14152': attribute type 10 has an invalid length. [ 775.401267][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.411680][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.449689][ T5844] syz_tun: entered promiscuous mode [ 775.465317][ T5844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 775.489586][ T5842] tipc: Enabled bearer , priority 0 [ 775.526223][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.538267][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.573235][ T5837] tipc: Disabling bearer [ 775.684091][ T5866] lo speed is unknown, defaulting to 1000 [ 776.182947][ T5890] tipc: Enabling of bearer rejected, already enabled [ 777.461058][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14172'. [ 777.576598][ T5972] tipc: Enabling of bearer rejected, already enabled [ 777.724084][ T5983] netlink: 'syz.2.14177': attribute type 1 has an invalid length. [ 777.733560][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14177'. [ 778.218388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 778.226637][ C1] lec:lec_tx_timeout: lec0 [ 778.596669][ T6026] netlink: 'syz.4.14189': attribute type 1 has an invalid length. [ 778.675386][ T6026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.734099][ T6029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.750661][ T6029] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 778.757134][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14191'. [ 778.764743][ T6029] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 778.796886][ T6026] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 778.806158][ T6026] bond5: (slave wlan0): Opening slave failed [ 778.983650][ T6038] tipc: Enabling of bearer rejected, failed to enable media [ 780.177202][ T6088] lo speed is unknown, defaulting to 1000 [ 780.249263][ T6093] tipc: Enabling of bearer rejected, already enabled [ 782.748143][ T6108] tipc: Enabling of bearer rejected, already enabled [ 783.497485][ T6158] tipc: Enabled bearer , priority 0 [ 783.524211][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14227'. [ 783.636136][ T6158] syzkaller0: entered promiscuous mode [ 783.641977][ T6158] syzkaller0: entered allmulticast mode [ 783.649268][ T6158] tipc: Resetting bearer [ 783.682877][ T6167] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 783.695080][ T6167] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 783.703656][ T6156] tipc: Resetting bearer [ 785.972019][ T6156] tipc: Disabling bearer [ 785.982887][ T6170] tipc: Enabling of bearer rejected, failed to enable media [ 786.229110][ T6197] tipc: Enabling of bearer rejected, already enabled [ 786.441561][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14239'. [ 786.749525][ T6226] lo speed is unknown, defaulting to 1000 [ 786.827711][ T6231] tipc: Enabling of bearer rejected, failed to enable media [ 786.857761][ T6233] netlink: 'syz.2.14247': attribute type 1 has an invalid length. [ 786.881153][ T6233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14247'. [ 786.998906][ T6247] tipc: Enabling of bearer rejected, failed to enable media [ 787.582682][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14253'. [ 787.619159][ T6261] syzkaller0: entered promiscuous mode [ 787.625171][ T6261] syzkaller0: entered allmulticast mode [ 788.217202][ T6275] lec:lec_atm_close: lec0: Shut down! [ 788.265415][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14260'. [ 790.306979][ T6295] tipc: Enabling of bearer rejected, failed to enable media [ 790.694821][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14267'. [ 790.723883][ T6320] syzkaller0: entered promiscuous mode [ 790.733251][ T6320] syzkaller0: entered allmulticast mode [ 791.005142][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14271'. [ 791.029010][ T6337] team0: left allmulticast mode [ 791.034130][ T6337] team0: left promiscuous mode [ 791.041721][ T6337] bridge0: port 1(team0) entered disabled state [ 791.157772][ T6337] bridge0 (unregistering): left allmulticast mode [ 791.242153][ T6347] bridge_slave_0: left allmulticast mode [ 791.257841][ T6347] bridge_slave_0: left promiscuous mode [ 791.267285][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.293328][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.321925][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.331074][ T6347] gretap2: left promiscuous mode [ 791.346413][ T6347] bond3: (slave bond4): Releasing backup interface [ 791.400840][ T6347] bond6: (slave gretap4): Releasing active interface [ 791.424725][ T6347] bond7: (slave gretap5): Releasing active interface [ 791.446726][ T6347] gre4: left promiscuous mode [ 791.465455][ T6347] bond8: (slave gretap6): Releasing active interface [ 791.477469][ T6347] team0: left promiscuous mode [ 791.483625][ T6347] veth7: left promiscuous mode [ 791.494455][ T6347] bond9: (slave veth7): Releasing active interface [ 791.504370][ T6347] bond9: (slave veth7): the permanent HWaddr of slave - 46:ee:4a:82:dd:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 791.522826][ T6347] veth9: left promiscuous mode [ 791.532359][ T6347] bond9: (slave veth9): Releasing active interface [ 791.777009][ T6376] pim6reg1: entered promiscuous mode [ 791.786010][ T6376] pim6reg1: entered allmulticast mode [ 792.427077][ T6403] dvmrp8: entered allmulticast mode [ 792.892861][ T6434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14302'. [ 792.905394][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14302'. [ 793.218381][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 793.226587][ C1] lec:lec_tx_timeout: lec0 [ 793.252345][ T6455] syzkaller1: entered promiscuous mode [ 793.257910][ T6455] syzkaller1: entered allmulticast mode [ 793.345063][T23017] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 794.567760][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14318'. [ 794.662326][ T6491] netlink: 'syz.3.14318': attribute type 5 has an invalid length. [ 794.689149][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14318'. [ 794.718126][ T6497] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 794.725676][ T6497] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 794.952668][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 795.292350][ T6522] tipc: Enabling of bearer rejected, failed to enable media [ 795.393083][ T6529] 8021q: adding VLAN 0 to HW filter on device bond12 [ 795.417749][ T6529] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 795.428877][ T6529] bond12: (slave macvlan0): Enslaving as a backup interface with an up link [ 795.728083][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14335'. [ 795.870148][ T6548] syzkaller1: entered promiscuous mode [ 795.875865][ T6548] syzkaller1: entered allmulticast mode [ 796.034997][ T6550] tipc: Enabling of bearer rejected, failed to enable media [ 796.129726][ T6559] syzkaller0: entered promiscuous mode [ 796.135270][ T6559] syzkaller0: entered allmulticast mode [ 796.367744][ T6569] syzkaller0: entered promiscuous mode [ 796.377051][ T6569] syzkaller0: entered allmulticast mode [ 796.517556][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14349'. [ 796.568965][ T6580] netlink: 'syz.3.14351': attribute type 1 has an invalid length. [ 796.663446][ T6584] 8021q: adding VLAN 0 to HW filter on device bond14 [ 796.674484][ T6584] bond13: (slave bond14): making interface the new active one [ 796.685672][ T6584] bond13: (slave bond14): Enslaving as an active interface with an up link [ 796.711470][ T6580] bond13: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 796.725031][ T6580] bond13: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 796.741302][ T6586] syzkaller0: entered promiscuous mode [ 796.747483][ T6586] syzkaller0: entered allmulticast mode [ 796.824231][ T6590] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 796.831953][ T6590] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 796.862223][ T6590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 796.988216][ T6601] tipc: Enabling of bearer rejected, failed to enable media [ 797.499835][ T6623] syzkaller0: entered promiscuous mode [ 797.505382][ T6623] syzkaller0: entered allmulticast mode [ 797.687968][ T6631] netlink: 'syz.3.14364': attribute type 1 has an invalid length. [ 797.713482][ T6631] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14364'. [ 797.875962][ T6642] syzkaller0: entered promiscuous mode [ 797.888601][ T6642] syzkaller0: entered allmulticast mode [ 797.907248][ T6642] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 798.065587][ T6649] dvmrp8: entered allmulticast mode [ 798.199722][ T6656] syzkaller1: entered promiscuous mode [ 798.205400][ T6656] syzkaller1: entered allmulticast mode [ 798.290656][ T6657] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 798.298018][ T6657] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 798.619482][ T6676] lo speed is unknown, defaulting to 1000 [ 798.762306][ T6680] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 798.798710][ T6680] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 800.467466][ T6721] netlink: 'syz.1.14384': attribute type 13 has an invalid length. [ 800.696657][ T6725] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 800.705465][ T6725] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 800.864618][ T6742] syzkaller0: entered promiscuous mode [ 800.870739][ T6742] syzkaller0: entered allmulticast mode [ 800.899902][ T6744] netlink: 'syz.2.14389': attribute type 4 has an invalid length. [ 800.951729][ T6744] netlink: 'syz.2.14389': attribute type 4 has an invalid length. [ 801.116563][ T6753] netlink: 'syz.2.14391': attribute type 1 has an invalid length. [ 801.170019][ T6753] 8021q: adding VLAN 0 to HW filter on device bond14 [ 801.266932][ T6753] veth25: entered promiscuous mode [ 801.277995][ T6753] bond14: (slave veth25): Enslaving as an active interface with a down link [ 801.312190][ T6753] veth27: entered promiscuous mode [ 801.322417][ T6753] bond14: (slave veth27): Enslaving as an active interface with a down link [ 801.333684][ T6761] syzkaller0: entered promiscuous mode [ 801.341481][ T6761] syzkaller0: entered allmulticast mode [ 801.349135][ T6763] tipc: Enabled bearer , priority 0 [ 801.370509][ T6763] syzkaller0: entered promiscuous mode [ 801.376066][ T6763] syzkaller0: entered allmulticast mode [ 801.397499][ T6763] tipc: Resetting bearer [ 801.433591][ T6762] tipc: Resetting bearer [ 801.454758][ T6762] tipc: Disabling bearer [ 801.556987][ T6767] tipc: Enabled bearer , priority 0 [ 801.568803][ T6767] syzkaller0: entered promiscuous mode [ 801.574366][ T6767] syzkaller0: entered allmulticast mode [ 801.584142][ T6769] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 801.595043][ T6769] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 801.613269][ T6767] tipc: Resetting bearer [ 801.622756][ T6766] tipc: Resetting bearer [ 801.651143][ T6766] tipc: Disabling bearer [ 801.732588][ T6775] netlink: 'syz.2.14400': attribute type 1 has an invalid length. [ 801.830147][ T6775] 8021q: adding VLAN 0 to HW filter on device bond16 [ 801.839397][ T6775] bond15: (slave bond16): making interface the new active one [ 801.848221][ T6775] bond15: (slave bond16): Enslaving as an active interface with an up link [ 801.890148][ T6782] netlink: 'syz.1.14402': attribute type 1 has an invalid length. [ 801.913707][ T6775] bond15: (slave gretap3): Enslaving as a backup interface with an up link [ 801.928950][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14400'. [ 801.945842][ T6775] 8021q: adding VLAN 0 to HW filter on device bond15 [ 801.953856][ T6784] syzkaller0: entered promiscuous mode [ 801.959563][ T6784] syzkaller0: entered allmulticast mode [ 802.128113][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14405'. [ 803.899348][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.144163][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 819.178440][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 819.186552][ C1] lec:lec_tx_timeout: lec0 [ 837.163654][ T993] lec:lec_start_xmit: lec0:No lecd attached [ 842.218565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 842.226737][ C1] lec:lec_tx_timeout: lec0 [ 875.584213][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 881.188427][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 881.196491][ C1] lec:lec_tx_timeout: lec0 [ 900.612203][ T993] lec:lec_start_xmit: lec0:No lecd attached [ 906.218462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 906.226516][ C1] lec:lec_tx_timeout: lec0 [ 937.023548][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 942.218379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 942.226452][ C1] lec:lec_tx_timeout: lec0 [ 944.058921][ T31] INFO: task kworker/1:3:23023 blocked for more than 143 seconds. [ 944.066883][ T31] Not tainted syzkaller #0 [ 944.072068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.080854][ T31] task:kworker/1:3 state:D stack:26696 pid:23023 tgid:23023 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 944.093236][ T31] Workqueue: events rfkill_sync_work [ 944.098710][ T31] Call Trace: [ 944.102032][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 944.105073][ T31] __schedule+0x1798/0x4cc0 [ 944.109646][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 944.115196][ T31] ? __pfx___schedule+0x10/0x10 [ 944.120890][ T31] ? schedule+0x91/0x360 [ 944.125207][ T31] schedule+0x165/0x360 [ 944.129617][ T31] schedule_preempt_disabled+0x13/0x30 [ 944.158413][ T31] __mutex_lock+0x7e6/0x1350 [ 944.163125][ T31] ? __mutex_lock+0x5bb/0x1350 [ 944.167946][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 944.192136][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 944.197474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.202972][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 944.209035][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.215448][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 944.221729][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 944.227144][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 944.232972][ T31] rfkill_set_block+0x1d2/0x440 [ 944.238097][ T31] rfkill_sync_work+0x114/0x200 [ 944.243259][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.249159][ T31] process_scheduled_works+0xae1/0x17b0 [ 944.254764][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.261097][ T31] worker_thread+0x8a0/0xda0 [ 944.265715][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.272363][ T31] ? __kthread_parkme+0x7b/0x200 [ 944.277321][ T31] kthread+0x711/0x8a0 [ 944.281807][ T31] ? __pfx_worker_thread+0x10/0x10 [ 944.286970][ T31] ? __pfx_kthread+0x10/0x10 [ 944.291826][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.297076][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.302800][ T31] ? __pfx_kthread+0x10/0x10 [ 944.307528][ T31] ret_from_fork+0x4bc/0x870 [ 944.312246][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 944.317387][ T31] ? __switch_to_asm+0x39/0x70 [ 944.322231][ T31] ? __switch_to_asm+0x33/0x70 [ 944.327017][ T31] ? __pfx_kthread+0x10/0x10 [ 944.331813][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.336739][ T31] [ 944.339924][ T31] INFO: task kworker/1:11:23028 blocked for more than 143 seconds. [ 944.347945][ T31] Not tainted syzkaller #0 [ 944.353429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.362275][ T31] task:kworker/1:11 state:D stack:23376 pid:23028 tgid:23028 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 944.374577][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 944.381376][ T31] Call Trace: [ 944.384670][ T31] [ 944.387616][ T31] __schedule+0x1798/0x4cc0 [ 944.392336][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.398961][ T31] ? __pfx___schedule+0x10/0x10 [ 944.403900][ T31] ? schedule+0x91/0x360 [ 944.408154][ T31] schedule+0x165/0x360 [ 944.412526][ T31] schedule_preempt_disabled+0x13/0x30 [ 944.418486][ T31] __mutex_lock+0x7e6/0x1350 [ 944.423152][ T31] ? __mutex_lock+0x5bb/0x1350 [ 944.427961][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 944.434432][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 944.439558][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.445329][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.451235][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 944.457435][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.463602][ T31] process_scheduled_works+0xae1/0x17b0 [ 944.469315][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.475431][ T31] worker_thread+0x8a0/0xda0 [ 944.480128][ T31] ? __kthread_parkme+0x7b/0x200 [ 944.485089][ T31] kthread+0x711/0x8a0 [ 944.489303][ T31] ? __pfx_worker_thread+0x10/0x10 [ 944.494426][ T31] ? __pfx_kthread+0x10/0x10 [ 944.499171][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.504383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.509821][ T31] ? __pfx_kthread+0x10/0x10 [ 944.514454][ T31] ret_from_fork+0x4bc/0x870 [ 944.519142][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 944.524280][ T31] ? __switch_to_asm+0x39/0x70 [ 944.529255][ T31] ? __switch_to_asm+0x33/0x70 [ 944.534044][ T31] ? __pfx_kthread+0x10/0x10 [ 944.542534][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.547370][ T31] [ 944.550596][ T31] INFO: task syz.4.14301:6427 blocked for more than 143 seconds. [ 944.558590][ T31] Not tainted syzkaller #0 [ 944.563550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.572497][ T31] task:syz.4.14301 state:D stack:25832 pid:6427 tgid:6426 ppid:5872 task_flags:0x400140 flags:0x00080003 [ 944.584506][ T31] Call Trace: [ 944.587821][ T31] [ 944.590889][ T31] __schedule+0x1798/0x4cc0 [ 944.595419][ T31] ? __lock_acquire+0xab9/0xd20 [ 944.600368][ T31] ? __lock_acquire+0xab9/0xd20 [ 944.605249][ T31] ? __pfx___schedule+0x10/0x10 [ 944.610479][ T31] ? schedule+0x91/0x360 [ 944.614796][ T31] schedule+0x165/0x360 [ 944.619227][ T31] schedule_preempt_disabled+0x13/0x30 [ 944.624735][ T31] __mutex_lock+0x7e6/0x1350 [ 944.629626][ T31] ? __mutex_lock+0x5bb/0x1350 [ 944.634447][ T31] ? rfkill_unregister+0xc8/0x220 [ 944.639575][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 944.644678][ T31] ? __pfx_device_del+0x10/0x10 [ 944.649719][ T31] rfkill_unregister+0xc8/0x220 [ 944.654625][ T31] nfc_unregister_device+0x96/0x2a0 [ 944.659894][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 944.665665][ T31] virtual_ncidev_close+0x56/0x90 [ 944.670880][ T31] __fput+0x44c/0xa70 [ 944.674983][ T31] task_work_run+0x1d4/0x260 [ 944.679658][ T31] ? __pfx_task_work_run+0x10/0x10 [ 944.684808][ T31] get_signal+0x11ec/0x1340 [ 944.689513][ T31] ? task_work_add+0x377/0x420 [ 944.694322][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 944.699974][ T31] ? __pfx___fput_deferred+0x10/0x10 [ 944.705365][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 944.711694][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 944.717176][ T31] exit_to_user_mode_loop+0x72/0x130 [ 944.722604][ T31] do_syscall_64+0x2bd/0xfa0 [ 944.727320][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.732881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.739131][ T31] ? clear_bhb_loop+0x60/0xb0 [ 944.743843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.749892][ T31] RIP: 0033:0x7f234018f6c9 [ 944.754331][ T31] RSP: 002b:00007f2340ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 944.762839][ T31] RAX: fffffffffffffff2 RBX: 00007f23403e5fa0 RCX: 00007f234018f6c9 [ 944.771097][ T31] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 944.779351][ T31] RBP: 00007f2340211f91 R08: 00000000fffffff8 R09: 0000000000000000 [ 944.787376][ T31] R10: 000000005b3d2934 R11: 0000000000000246 R12: 0000000000000000 [ 944.795582][ T31] R13: 00007f23403e6038 R14: 00007f23403e5fa0 R15: 00007fffcb2878c8 [ 944.803678][ T31] [ 944.806734][ T31] INFO: task syz.0.14309:6454 blocked for more than 144 seconds. [ 944.818579][ T31] Not tainted syzkaller #0 [ 944.823584][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.832340][ T31] task:syz.0.14309 state:D stack:25960 pid:6454 tgid:6454 ppid:5863 task_flags:0x400040 flags:0x00080002 [ 944.844409][ T31] Call Trace: [ 944.847712][ T31] [ 944.851218][ T31] __schedule+0x1798/0x4cc0 [ 944.855878][ T31] ? validate_chain+0x897/0x2140 [ 944.861051][ T31] ? __lock_acquire+0xab9/0xd20 [ 944.865944][ T31] ? __pfx___schedule+0x10/0x10 [ 944.871053][ T31] ? schedule+0x91/0x360 [ 944.875338][ T31] schedule+0x165/0x360 [ 944.879632][ T31] schedule_timeout+0x9a/0x270 [ 944.884417][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 944.889907][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.895223][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.901176][ T31] ? wait_for_completion+0x267/0x5d0 [ 944.906477][ T31] wait_for_completion+0x2bf/0x5d0 [ 944.911670][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 944.917334][ T31] ? __flush_work+0xd2/0xbc0 [ 944.922063][ T31] ? __flush_work+0xd2/0xbc0 [ 944.926667][ T31] __flush_work+0x9b9/0xbc0 [ 944.931255][ T31] ? __flush_work+0xd2/0xbc0 [ 944.935869][ T31] ? __pfx___flush_work+0x10/0x10 [ 944.941067][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 944.946375][ T31] ? __pfx___cancel_work+0x10/0x10 [ 944.951673][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 944.957328][ T31] __cancel_work_sync+0xbe/0x110 [ 944.962538][ T31] rfkill_unregister+0x92/0x220 [ 944.967423][ T31] nfc_unregister_device+0x96/0x2a0 [ 944.972698][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 944.978567][ T31] virtual_ncidev_close+0x56/0x90 [ 944.983717][ T31] __fput+0x44c/0xa70 [ 944.987743][ T31] task_work_run+0x1d4/0x260 [ 944.992460][ T31] ? __pfx_task_work_run+0x10/0x10 [ 944.997601][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 945.003242][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 945.008616][ T31] do_syscall_64+0x2bd/0xfa0 [ 945.013238][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.020069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.026213][ T31] ? clear_bhb_loop+0x60/0xb0 [ 945.031041][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.036961][ T31] RIP: 0033:0x7f48f658f6c9 [ 945.041628][ T31] RSP: 002b:00007ffd48dbeb68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 945.050469][ T31] RAX: 0000000000000000 RBX: 00007f48f67e7da0 RCX: 00007f48f658f6c9 [ 945.058756][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 945.066805][ T31] RBP: 00007f48f67e7da0 R08: 00000000000000e4 R09: 0000000b48dbee5f [ 945.074963][ T31] R10: 00007f48f67e7cb0 R11: 0000000000000246 R12: 00000000000c1d88 [ 945.083087][ T31] R13: 00007f48f67e6090 R14: ffffffffffffffff R15: 00007ffd48dbec80 [ 945.091169][ T31] [ 945.094251][ T31] [ 945.094251][ T31] Showing all locks held in the system: [ 945.102302][ T31] 1 lock held by khungtaskd/31: [ 945.107190][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 945.117196][ T31] 2 locks held by getty/5588: [ 945.122061][ T31] #0: ffff88814d8350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 945.131987][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 945.142439][ T31] 4 locks held by kworker/1:3/23023: [ 945.147730][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 945.159745][ T31] #1: ffffc9000cba7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 945.172480][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 945.182781][ T31] #3: ffff888028e06100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 945.192539][ T31] 3 locks held by kworker/1:11/23028: [ 945.197958][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 945.209162][ T31] #1: ffffc9000cb07ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 945.222744][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 945.234404][ T31] 2 locks held by syz.4.14301/6427: [ 945.239672][ T31] #0: ffff888077edc100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 945.249563][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 945.259796][ T31] 1 lock held by syz.0.14309/6454: [ 945.264911][ T31] #0: ffff888028e06100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 945.275031][ T31] 1 lock held by syz.1.14410/6799: [ 945.280311][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.289000][ T31] 3 locks held by syz.2.14411/6801: [ 945.294204][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.302936][ T31] #1: ffff88807540e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 945.312666][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 945.322703][ T31] 1 lock held by syz.3.14412/6806: [ 945.327931][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.336867][ T31] 1 lock held by syz-executor/6817: [ 945.342779][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.351470][ T31] 1 lock held by syz-executor/6818: [ 945.356671][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.365305][ T31] 1 lock held by syz-executor/6822: [ 945.370679][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.379419][ T31] 1 lock held by syz-executor/6823: [ 945.384652][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.393409][ T31] 1 lock held by syz-executor/6824: [ 945.399027][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.407583][ T31] 1 lock held by syz-executor/6831: [ 945.412958][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.421532][ T31] 1 lock held by syz-executor/6833: [ 945.426760][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.435385][ T31] 1 lock held by syz-executor/6836: [ 945.440675][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.449308][ T31] 1 lock held by syz-executor/6837: [ 945.454599][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.463158][ T31] 1 lock held by syz-executor/6839: [ 945.468508][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.477097][ T31] 1 lock held by syz-executor/6846: [ 945.482524][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.491231][ T31] 1 lock held by syz-executor/6848: [ 945.496487][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.505409][ T31] 1 lock held by syz-executor/6852: [ 945.510843][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.519408][ T31] 1 lock held by syz-executor/6853: [ 945.524656][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.533280][ T31] 1 lock held by syz-executor/6854: [ 945.538545][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 945.547046][ T31] [ 945.549765][ T31] ============================================= [ 945.549765][ T31] [ 945.558401][ T31] NMI backtrace for cpu 1 [ 945.558423][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 945.558448][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.558462][ T31] Call Trace: [ 945.558472][ T31] [ 945.558483][ T31] dump_stack_lvl+0x189/0x250 [ 945.558526][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.558552][ T31] ? __pfx__printk+0x10/0x10 [ 945.558580][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 945.558602][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 945.558622][ T31] ? __pfx__printk+0x10/0x10 [ 945.558652][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 945.558681][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 945.558703][ T31] watchdog+0xf60/0xfa0 [ 945.558725][ T31] ? watchdog+0x1e2/0xfa0 [ 945.558746][ T31] kthread+0x711/0x8a0 [ 945.558771][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.558787][ T31] ? __pfx_kthread+0x10/0x10 [ 945.558811][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.558832][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.558854][ T31] ? __pfx_kthread+0x10/0x10 [ 945.558877][ T31] ret_from_fork+0x4bc/0x870 [ 945.558896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 945.558920][ T31] ? __switch_to_asm+0x39/0x70 [ 945.558932][ T31] ? __switch_to_asm+0x33/0x70 [ 945.558944][ T31] ? __pfx_kthread+0x10/0x10 [ 945.558967][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.558996][ T31] [ 945.559002][ T31] Sending NMI from CPU 1 to CPUs 0: [ 945.706735][ C0] NMI backtrace for cpu 0 [ 945.706766][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 945.706785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.706797][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 945.706827][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 945.706842][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 945.706858][ C0] RAX: f97a721ae8428b00 RBX: ffffffff81967b47 RCX: f97a721ae8428b00 [ 945.706871][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 945.706883][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 945.706896][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 945.706909][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 945.706920][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 945.706934][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.706947][ C0] CR2: 0000564a37912000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 945.706962][ C0] Call Trace: [ 945.706970][ C0] [ 945.706976][ C0] default_idle+0x13/0x20 [ 945.706993][ C0] default_idle_call+0x73/0xb0 [ 945.707010][ C0] do_idle+0x1e7/0x510 [ 945.707032][ C0] ? __pfx_do_idle+0x10/0x10 [ 945.707060][ C0] cpu_startup_entry+0x44/0x60 [ 945.707078][ C0] rest_init+0x2de/0x300 [ 945.707097][ C0] start_kernel+0x3ae/0x410 [ 945.707117][ C0] x86_64_start_reservations+0x24/0x30 [ 945.707142][ C0] x86_64_start_kernel+0x143/0x1c0 [ 945.707166][ C0] common_startup_64+0x13e/0x147 [ 945.707201][ C0]