last executing test programs: 16.630883503s ago: executing program 2 (id=9666): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 16.56254404s ago: executing program 1 (id=9667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09048f009000200000000001700", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 13.549213409s ago: executing program 2 (id=9674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x1200, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 12.789034573s ago: executing program 0 (id=9675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)="c9709aa7127c6dac28f1ed60a09d18", 0xf}}, 0x8080) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x0, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 12.351325504s ago: executing program 0 (id=9677): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 12.218314413s ago: executing program 0 (id=9679): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40020d0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 12.152965145s ago: executing program 1 (id=9680): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11.822032595s ago: executing program 1 (id=9681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 11.776957454s ago: executing program 2 (id=9682): socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@mcast2, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x80, "210466d38547aa140db9a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000201010300000000000000000a0000040c0019800800020001000000300002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 10.849376101s ago: executing program 0 (id=9684): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0x20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x18}}}}}, 0x36) 9.029492516s ago: executing program 4 (id=9687): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000300)="fd", 0x1, 0x40008c4, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14) 6.439503323s ago: executing program 2 (id=9688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.008947082s ago: executing program 1 (id=9689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 2.838869506s ago: executing program 0 (id=9690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09048f009000200000000001700", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xd6) 2.805045329s ago: executing program 4 (id=9691): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x8004, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x88, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 2.727398039s ago: executing program 2 (id=9692): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 2.699306594s ago: executing program 3 (id=9693): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fbefffff0000"}}}}}}}, 0x0) 2.346985943s ago: executing program 3 (id=9694): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140009050000000000000000020100ff", @ANYBLOB], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 2.340776148s ago: executing program 2 (id=9695): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x2, {0x0, 0x4}}, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) 2.178530451s ago: executing program 4 (id=9696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.892355115s ago: executing program 0 (id=9697): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.715081852s ago: executing program 3 (id=9698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x123202, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.564627985s ago: executing program 1 (id=9699): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x8, 0x3, 0x3) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004340)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x0, 0x9}, {0x7, 0xb}}}, 0x24}}, 0x0) 988.851901ms ago: executing program 4 (id=9700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x4202, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="5e243f7f2d451690bf07e8b4c19c490dc80713cef5923f6de811aef49708d43f508bb8dd", 0x24, 0x4c804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 803.33366ms ago: executing program 4 (id=9701): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 636.873467ms ago: executing program 3 (id=9702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000002300)=""/4103, 0x1007, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendto(r0, &(0x7f0000000440)="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", 0x161, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 324.746132ms ago: executing program 3 (id=9703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r0, 0x5ac1a000) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0) 41.096306ms ago: executing program 1 (id=9704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 22.936273ms ago: executing program 3 (id=9705): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) 0s ago: executing program 4 (id=9706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="e009bc297d2688e0261e5109", 0xc}], 0x1}}], 0x1, 0x41) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) kernel console output (not intermixed with test programs): [ 280.147375][T16498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5175'. [ 281.169331][T16567] : entered promiscuous mode [ 281.499954][T16589] wireguard0: entered promiscuous mode [ 281.527693][T16589] wireguard0: entered allmulticast mode [ 281.730280][T16605] xt_hashlimit: size too large, truncated to 1048576 [ 283.123069][T16689] __nla_validate_parse: 3 callbacks suppressed [ 283.123089][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5265'. [ 283.310647][T16698] Bluetooth: MGMT ver 1.23 [ 283.478279][T16707] netlink: 'syz.0.5273': attribute type 2 has an invalid length. [ 283.597738][T16710] xt_l2tp: v2 sid > 0xffff: 1114112 [ 284.174921][T16742] tipc: Failed to obtain node identity [ 284.197554][T16742] tipc: Enabling of bearer rejected, failed to enable media [ 284.836255][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5312'. [ 285.158049][T16807] netlink: 'syz.3.5323': attribute type 1 has an invalid length. [ 286.082955][T16861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5348'. [ 286.171466][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5350'. [ 286.232088][T16867] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5351'. [ 286.504343][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5361'. [ 286.904202][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5373'. [ 287.024652][T16914] vlan3: entered allmulticast mode [ 287.048885][T16920] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.212805][T16928] netlink: 'syz.2.5381': attribute type 1 has an invalid length. [ 287.223852][T16930] tipc: Enabling of bearer rejected, failed to enable media [ 287.968473][T16981] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.987501][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'. [ 288.245647][T16996] netlink: 'syz.4.5413': attribute type 3 has an invalid length. [ 289.664373][T17076] vlan0: entered promiscuous mode [ 289.675169][T17076] bridge0: entered promiscuous mode [ 291.236668][T17159] netlink: 'syz.2.5490': attribute type 25 has an invalid length. [ 292.053103][T17207] tipc: Started in network mode [ 292.071605][T17207] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 292.090656][T17207] tipc: Enabled bearer , priority 14 [ 292.243972][T17215] Bluetooth: MGMT ver 1.23 [ 292.650366][T17242] netlink: 'syz.1.5531': attribute type 1 has an invalid length. [ 292.844277][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 293.206077][ T5785] tipc: Node number set to 10463914 [ 293.267558][T17277] netlink: 'syz.3.5549': attribute type 83 has an invalid length. [ 293.799710][T17305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5560'. [ 293.831818][T17305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.925463][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5565'. [ 294.184464][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5570'. [ 294.390280][T17332] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5574'. [ 295.066121][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5594'. [ 295.087236][T17372] netlink: 'syz.2.5591': attribute type 178 has an invalid length. [ 295.259984][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5598'. [ 295.455499][T17394] netlink: 'syz.0.5605': attribute type 3 has an invalid length. [ 295.716326][T17410] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5613'. [ 295.743697][T17410] netlink: 'syz.4.5613': attribute type 2 has an invalid length. [ 296.192935][T17442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5630'. [ 296.272554][T17448] netlink: 'syz.0.5632': attribute type 1 has an invalid length. [ 296.538881][T17458] bridge0: port 3(gretap0) entered disabled state [ 296.652986][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.660782][T17458] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.719872][T17458] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 296.990128][T17480] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5647'. [ 297.179351][T17490] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5651'. [ 297.190959][T17492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.391943][ T5843] IPVS: starting estimator thread 0... [ 297.486050][T17503] IPVS: using max 33 ests per chain, 79200 per kthread [ 297.556304][T17510] netlink: zone id is out of range [ 297.576519][T17510] netlink: zone id is out of range [ 297.581756][T17510] netlink: zone id is out of range [ 297.595939][T17510] netlink: zone id is out of range [ 297.604047][T17510] netlink: zone id is out of range [ 297.626351][T17510] netlink: zone id is out of range [ 297.857366][T17531] xt_limit: Overflow, try lower: 271964/0 [ 299.545545][T17620] __nla_validate_parse: 1 callbacks suppressed [ 299.545595][T17620] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5714'. [ 300.001896][T17647] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5727'. [ 300.294321][T17667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5736'. [ 300.398357][T17674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5740'. [ 300.462200][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.508762][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.508784][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.538557][T17677] pim6reg: entered allmulticast mode [ 300.546336][T17681] netlink: 'syz.0.5743': attribute type 11 has an invalid length. [ 300.556027][T17679] pim6reg: left allmulticast mode [ 300.574734][T17681] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.5743'. [ 300.876265][ T5843] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.896610][T17702] netlink: 'syz.3.5752': attribute type 1 has an invalid length. [ 300.902889][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5753'. [ 301.086268][ T807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.095371][T17717] sctp: [Deprecated]: syz.3.5758 (pid 17717) Use of int in max_burst socket option. [ 301.095371][T17717] Use struct sctp_assoc_value instead [ 301.103851][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5759'. [ 301.269000][T17722] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5763'. [ 301.296031][T17722] netlink: 'syz.2.5763': attribute type 2 has an invalid length. [ 301.312386][T17722] netlink: 'syz.2.5763': attribute type 1 has an invalid length. [ 301.541846][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 301.547994][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 302.409314][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 302.575740][T17795] netlink: 'syz.1.5798': attribute type 33 has an invalid length. [ 303.536633][T17856] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5828'. [ 303.852951][T17875] netlink: 'syz.3.5837': attribute type 3 has an invalid length. [ 304.405994][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.933010][T17947] vlan2: entered promiscuous mode [ 304.944687][T17947] bridge0: entered promiscuous mode [ 305.179679][T17956] vlan3: entered allmulticast mode [ 305.184934][T17956] bond0: entered allmulticast mode [ 305.190588][T17956] bond_slave_0: entered allmulticast mode [ 305.199324][T17956] bond_slave_1: entered allmulticast mode [ 305.447159][T17968] netlink: 'syz.2.5882': attribute type 29 has an invalid length. [ 306.982836][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5919'. [ 307.002950][T18060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5920'. [ 307.007532][T18055] ipvlan2: entered promiscuous mode [ 307.016316][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 307.201891][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5924'. [ 307.813646][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5940'. [ 307.973343][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5943'. [ 308.051923][T18122] xt_HMARK: spi-set and port-set can't be combined [ 308.350929][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5953'. [ 308.377944][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'. [ 308.552433][T18155] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 309.016638][T18179] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5967'. [ 309.050052][T18180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5968'. [ 309.054101][T18179] netlink: 'syz.2.5967': attribute type 9 has an invalid length. [ 309.236989][T18189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.103866][T18291] net_ratelimit: 137 callbacks suppressed [ 311.103885][T18291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.609638][T18320] tipc: Enabling of bearer rejected, failed to enable media [ 312.646013][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.669894][T18378] __nla_validate_parse: 5 callbacks suppressed [ 312.669915][T18378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6047'. [ 312.735637][T18378] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6047'. [ 312.755767][T18378] netlink: 'syz.4.6047': attribute type 5 has an invalid length. [ 312.764850][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6049'. [ 312.792693][T18378] netlink: 'syz.4.6047': attribute type 6 has an invalid length. [ 312.814922][T18378] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6047'. [ 313.154423][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6056'. [ 314.048111][T18451] Bluetooth: MGMT ver 1.23 [ 314.288530][T18460] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6080'. [ 314.307949][T18460] nbd: illegal input index -8454144 [ 315.081333][T18511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6105'. [ 316.343183][T18580] netlink: 'syz.1.6137': attribute type 13 has an invalid length. [ 316.366381][T18580] veth1_macvtap: left promiscuous mode [ 316.380279][T18580] macsec0: entered allmulticast mode [ 316.784519][T18604] netlink: 'syz.0.6147': attribute type 1 has an invalid length. [ 316.836274][T18604] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6147'. [ 316.862180][T18604] netlink: 'syz.0.6147': attribute type 1 has an invalid length. [ 316.886485][T18604] netlink: 'syz.0.6147': attribute type 8 has an invalid length. [ 316.904694][T18604] netlink: 606 bytes leftover after parsing attributes in process `syz.0.6147'. [ 316.916605][T18604] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6147'. [ 317.138281][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.924141][T18670] bond3: (slave bond_slave_1): Device is not our slave [ 317.931289][T18670] bond3: option active_slave: invalid value (bond_slave_1) [ 317.940535][T18670] bond3 (unregistering): Released all slaves [ 318.188997][T18687] __nla_validate_parse: 4 callbacks suppressed [ 318.189018][T18687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6185'. [ 318.229188][T18682] netlink: 'syz.1.6183': attribute type 2 has an invalid length. [ 318.375563][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6189'. [ 318.491970][T18701] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6192'. [ 318.990032][T18724] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6203'. [ 319.007777][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 319.063413][T18729] netlink: 'syz.3.6205': attribute type 10 has an invalid length. [ 319.537692][T18754] netlink: 'syz.3.6217': attribute type 83 has an invalid length. [ 319.734652][T18768] netlink: 'syz.2.6225': attribute type 4 has an invalid length. [ 320.014165][T18787] netlink: 38 bytes leftover after parsing attributes in process `syz.0.6231'. [ 320.580716][T18820] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6249'. [ 320.626462][T18820] netlink: 'syz.2.6249': attribute type 1 has an invalid length. [ 321.642529][T18864] tipc: Started in network mode [ 321.649158][T18864] tipc: Node identity ac14140f, cluster identity 4711 [ 321.656914][T18864] tipc: New replicast peer: 255.255.255.255 [ 321.673731][T18864] tipc: Enabled bearer , priority 10 [ 321.938702][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6278'. [ 322.543651][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'. [ 322.553549][T18914] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6294'. [ 322.771684][T18920] sctp: [Deprecated]: syz.1.6296 (pid 18920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.771684][T18920] Use struct sctp_sack_info instead [ 322.804028][ T5785] tipc: Node number set to 2886997007 [ 322.951084][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 322.964226][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 322.993253][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 323.016807][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 323.028803][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 323.049615][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 323.061605][T18931] netlink: 'syz.2.6302': attribute type 29 has an invalid length. [ 323.217806][T18942] __nla_validate_parse: 2 callbacks suppressed [ 323.217825][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6308'. [ 323.335033][T18946] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6309'. [ 323.743135][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078718800: rx timeout, send abort [ 323.809508][T18969] smbdirect: ib_dev[syz1] renamed to [syz2] [ 324.129243][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6330'. [ 324.154279][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6330'. [ 324.253391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078718800: abort rx timeout. Force session deactivation [ 324.467776][T19011] netlink: 'syz.1.6340': attribute type 11 has an invalid length. [ 324.554090][T19015] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6343'. [ 324.583912][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6342'. [ 324.616246][T19020] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6345'. [ 324.628655][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6342'. [ 325.161572][T19048] netem: change failed [ 325.223000][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6359'. [ 325.407727][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6364'. [ 325.454061][T19062] xfrm1: entered promiscuous mode [ 325.469132][T19062] xfrm1: entered allmulticast mode [ 325.650645][T19076] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 326.160573][T19108] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 327.296341][T19178] netlink: 'syz.1.6418': attribute type 83 has an invalid length. [ 327.503669][T19188] erspan0: entered promiscuous mode [ 328.294047][T19231] __nla_validate_parse: 9 callbacks suppressed [ 328.294071][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6444'. [ 328.646033][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.047951][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6463'. [ 329.323657][T19287] validate_nla: 1 callbacks suppressed [ 329.323675][T19287] netlink: 'syz.2.6470': attribute type 83 has an invalid length. [ 330.031394][T19331] netem: change failed [ 330.599139][T19365] netlink: 'syz.0.6507': attribute type 21 has an invalid length. [ 330.638779][T19365] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6507'. [ 330.655624][T19370] netlink: 'syz.0.6507': attribute type 21 has an invalid length. [ 330.673210][T19365] netlink: 'syz.0.6507': attribute type 4 has an invalid length. [ 330.705164][T19365] netlink: 'syz.0.6507': attribute type 5 has an invalid length. [ 330.709191][T19370] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6507'. [ 330.728441][T19365] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6507'. [ 330.778438][T19370] netlink: 'syz.0.6507': attribute type 4 has an invalid length. [ 330.801907][T19370] netlink: 'syz.0.6507': attribute type 5 has an invalid length. [ 330.838587][T19370] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6507'. [ 331.283020][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6523'. [ 332.129220][T19452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6545'. [ 332.165699][T19452] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.175852][T19452] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.495654][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6574'. [ 333.565294][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6575'. [ 333.602675][T19513] bond0: entered promiscuous mode [ 333.613229][T19513] bond_slave_0: entered promiscuous mode [ 333.627775][T19513] bond_slave_1: entered promiscuous mode [ 333.664222][T19513] bond0: left promiscuous mode [ 333.670338][T19513] bond_slave_0: left promiscuous mode [ 333.680264][T19513] bond_slave_1: left promiscuous mode [ 333.764797][T19521] netlink: 'syz.1.6579': attribute type 6 has an invalid length. [ 335.466898][T19584] bond3 (unregistering): Released all slaves [ 336.594734][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6632'. [ 336.624355][T19634] gretap0: left allmulticast mode [ 336.639511][T19634] gretap0: left promiscuous mode [ 336.655632][T19634] bridge0: port 3(gretap0) entered disabled state [ 336.697463][T19634] bridge_slave_1: left allmulticast mode [ 336.715131][T19634] bridge_slave_1: left promiscuous mode [ 336.748548][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.791945][T19634] bridge_slave_0: left allmulticast mode [ 336.809002][T19634] bridge_slave_0: left promiscuous mode [ 336.831529][T19634] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.837322][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 338.140660][T19695] netem: change failed [ 338.242317][T19701] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.6664'. [ 338.694632][T19718] tap0: tun_chr_ioctl cmd 1074025678 [ 338.713151][T19718] tap0: group set to 0 [ 338.994221][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6680'. [ 339.017718][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6682'. [ 339.469081][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6695'. [ 339.669941][T19784] netlink: 'syz.3.6702': attribute type 1 has an invalid length. [ 339.687479][T19784] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6702'. [ 339.708551][T19784] netlink: 'syz.3.6702': attribute type 1 has an invalid length. [ 339.727809][T19784] netlink: 'syz.3.6702': attribute type 8 has an invalid length. [ 339.740015][T19784] netlink: 582 bytes leftover after parsing attributes in process `syz.3.6702'. [ 339.755623][T19784] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6702'. [ 339.988281][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6708'. [ 340.254057][T19813] netlink: zone id is out of range [ 340.278402][T19813] netlink: zone id is out of range [ 340.284101][T19807] netlink: set zone limit has 4 unknown bytes [ 341.034524][T19859] netlink: 'syz.0.6735': attribute type 30 has an invalid length. [ 341.110461][T19861] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6736'. [ 342.207422][T19925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6767'. [ 342.236883][T19927] xt_hashlimit: size too large, truncated to 1048576 [ 342.329351][T19934] veth0: entered promiscuous mode [ 342.352376][T19934] veth0: left promiscuous mode [ 342.698777][T19951] netlink: 'syz.3.6778': attribute type 83 has an invalid length. [ 343.102947][T19977] veth0: entered promiscuous mode [ 343.143294][T19977] veth0: left promiscuous mode [ 343.384057][T19993] : renamed from bond0 (while UP) [ 343.855533][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6809'. [ 346.028277][T20131] __nla_validate_parse: 2 callbacks suppressed [ 346.028295][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6851'. [ 346.289330][T20141] IPVS: persistence engine module ip_vs_pe_À not found [ 346.658362][T20167] netlink: 'syz.1.6864': attribute type 8 has an invalid length. [ 346.854635][T20179] netlink: 'syz.1.6869': attribute type 1 has an invalid length. [ 346.892960][T20179] netlink: 'syz.1.6869': attribute type 2 has an invalid length. [ 346.908354][T20179] netlink: 'syz.1.6869': attribute type 1 has an invalid length. [ 346.970035][T20182] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6870'. [ 346.981387][T20179] netlink: 'syz.1.6869': attribute type 3 has an invalid length. [ 347.012208][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 347.260829][T20203] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6876'. [ 347.504198][T20216] erspan0: entered promiscuous mode [ 347.965399][T20239] netlink: 'syz.3.6892': attribute type 9 has an invalid length. [ 348.790984][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6916'. [ 349.291011][T20317] netem: change failed [ 349.422082][T20324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6932'. [ 349.572057][T20334] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6936'. [ 349.608642][T20335] netlink: 'syz.0.6937': attribute type 83 has an invalid length. [ 349.934697][T20361] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 350.159225][ T5785] IPVS: starting estimator thread 0... [ 350.255989][T20375] IPVS: using max 38 ests per chain, 91200 per kthread [ 351.113267][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6971'. [ 351.124268][T20420] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6971'. [ 351.870562][T20458] netlink: 'syz.1.6989': attribute type 8 has an invalid length. [ 351.895870][T20458] sch_fq: defrate 0 ignored. [ 352.056482][T20468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6993'. [ 352.363555][T20485] netlink: 'syz.1.7002': attribute type 28 has an invalid length. [ 352.385076][T20485] netlink: 'syz.1.7002': attribute type 3 has an invalid length. [ 352.400970][T20485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7002'. [ 352.780526][T20513] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7016'. [ 352.805561][T20513] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7016'. [ 353.101771][ T35] tipc: Subscription rejected, illegal request [ 353.662374][T20557] block nbd1: Unsupported socket: should be TCP or UNIX. [ 354.013596][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7041'. [ 354.063944][T20577] netlink: 'syz.0.7042': attribute type 1 has an invalid length. [ 354.090710][T20577] netlink: 'syz.0.7042': attribute type 7 has an invalid length. [ 354.129919][T20577] netlink: 'syz.0.7042': attribute type 8 has an invalid length. [ 354.156508][T20577] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7042'. [ 354.178607][T20577] NCSI netlink: No device for ifindex 65584 [ 354.511197][T20598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7051'. [ 354.539300][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7051'. [ 354.806133][T20611] veth1_to_bridge: entered allmulticast mode [ 356.143273][T20683] __nla_validate_parse: 10 callbacks suppressed [ 356.143292][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7092'. [ 356.173785][T20688] sctp: [Deprecated]: syz.0.7093 (pid 20688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.173785][T20688] Use struct sctp_sack_info instead [ 356.309964][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7099'. [ 356.504866][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7104'. [ 357.237373][T20756] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7126'. [ 357.475157][T20769] h: entered promiscuous mode [ 357.620608][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7137'. [ 357.747396][T20789] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7139'. [ 357.783247][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7140'. [ 357.987833][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7147'. [ 358.113153][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7150'. [ 358.130807][T20811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7150'. [ 358.277318][T20822] vlan2: entered allmulticast mode [ 358.282676][T20822] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 358.929546][T20857] netlink: 'syz.0.7170': attribute type 4 has an invalid length. [ 359.925369][T20910] vcan0: tx address claim with dlc 0 [ 361.285985][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.424579][T21003] netlink: 'syz.0.7235': attribute type 12 has an invalid length. [ 361.465449][T21003] __nla_validate_parse: 9 callbacks suppressed [ 361.465466][T21003] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7235'. [ 361.971569][T21030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7247'. [ 362.010406][T21034] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.7249'. [ 362.065368][T21038] netlink: 'syz.4.7251': attribute type 4 has an invalid length. [ 362.165128][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7254'. [ 362.194435][T21044] bridge_slave_1: left allmulticast mode [ 362.215071][T21044] bridge_slave_1: left promiscuous mode [ 362.233797][T21044] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.279372][T21044] bridge_slave_0: left allmulticast mode [ 362.296003][T21044] bridge_slave_0: left promiscuous mode [ 362.314228][T21044] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.431999][T21059] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7262'. [ 363.168477][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7278'. [ 363.228572][T21107] netlink: 272 bytes leftover after parsing attributes in process `syz.2.7280'. [ 363.500529][T21122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7289'. [ 363.814606][T21139] bridge_slave_0: default FDB implementation only supports local addresses [ 364.113935][T21154] xt_hashlimit: size too large, truncated to 1048576 [ 364.279851][T21168] netlink: 'syz.4.7310': attribute type 17 has an invalid length. [ 364.288061][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7310'. [ 364.299847][T21168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7310'. [ 364.330488][T21168] gretap0: entered promiscuous mode [ 364.353989][T21168] gretap0: left promiscuous mode [ 364.368052][T21171] netlink: 'syz.0.7311': attribute type 11 has an invalid length. [ 365.155135][ T5634] Bluetooth: hci4: link tx timeout [ 365.161685][ T5634] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.527885][T21229] syzkaller1: entered promiscuous mode [ 365.556064][T21229] syzkaller1: entered allmulticast mode [ 365.754918][T21233] team0: Port device gretap2 added [ 366.584852][T21266] syzkaller1: entered promiscuous mode [ 366.598989][T21266] syzkaller1: entered allmulticast mode [ 366.919974][T21296] __nla_validate_parse: 4 callbacks suppressed [ 366.919994][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7367'. [ 366.938807][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7365'. [ 367.206270][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 367.360351][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7379'. [ 367.449967][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7382'. [ 367.694852][T21342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 368.509810][T21384] syzkaller1: entered promiscuous mode [ 368.535351][T21384] syzkaller1: entered allmulticast mode [ 368.855556][T21397] syzkaller1: entered promiscuous mode [ 368.888194][T21397] syzkaller1: entered allmulticast mode [ 369.138482][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7420'. [ 369.147869][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7420'. [ 369.983692][T21463] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7436'. [ 370.021186][T21467] netlink: 'syz.3.7440': attribute type 9 has an invalid length. [ 370.049894][T21467] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7440'. [ 370.127170][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7443'. [ 370.215080][T21475] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.855380][ T83] wlan1: Trigger new scan to find an IBSS to join [ 371.995474][T21582] macvlan1: entered promiscuous mode [ 372.004612][T21582] macvlan1: entered allmulticast mode [ 372.011114][T21582] team0: Device macvlan1 is already an upper device of the team interface [ 372.064680][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7488'. [ 372.084628][T21586] netlink: 'syz.0.7488': attribute type 1 has an invalid length. [ 372.094938][T21586] netlink: 'syz.0.7488': attribute type 2 has an invalid length. [ 372.200040][T21592] xt_hashlimit: size too large, truncated to 1048576 [ 372.578873][T21613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7500'. [ 372.603539][T21613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7500'. [ 372.614782][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7500'. [ 372.895423][T21632] sock: sock_set_timeout: `syz.2.7508' (pid 21632) tries to set negative timeout [ 373.040811][T21639] macvlan0: entered promiscuous mode [ 373.057073][T21642] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.7513'. [ 373.325480][T21640] nbd1: detected capacity change from 0 to 63 [ 373.351138][T21656] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7520'. [ 373.369483][ T5639] block nbd1: Receive control failed (result -32) [ 373.369501][ T5634] block nbd1: Receive control failed (result -32) [ 373.392693][ T5640] block nbd1: Dead connection, failed to find a fallback [ 373.443221][ T5640] block nbd1: shutting down sockets [ 373.506511][ T5640] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.552208][ T5640] Buffer I/O error on dev nbd1, logical block 0, async page read [ 373.584048][ T5640] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.626055][ T5640] Buffer I/O error on dev nbd1, logical block 1, async page read [ 373.648004][ T5640] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.679710][ T5640] Buffer I/O error on dev nbd1, logical block 2, async page read [ 373.712987][ T5640] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.742765][ T5640] Buffer I/O error on dev nbd1, logical block 3, async page read [ 373.780997][ T5640] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.793266][ T5640] Buffer I/O error on dev nbd1, logical block 0, async page read [ 373.804414][ T5640] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.828226][ T5640] Buffer I/O error on dev nbd1, logical block 1, async page read [ 373.845357][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7531'. [ 373.854781][ T5640] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.877332][ T5640] Buffer I/O error on dev nbd1, logical block 2, async page read [ 373.895592][ T5640] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.938788][ T5640] Buffer I/O error on dev nbd1, logical block 3, async page read [ 373.962423][ T5640] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 373.984481][ T5640] Buffer I/O error on dev nbd1, logical block 0, async page read [ 374.001560][ T5640] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.036393][ T5640] Buffer I/O error on dev nbd1, logical block 1, async page read [ 374.100872][ T5640] ldm_validate_partition_table(): Disk read failed. [ 374.115236][T21686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7535'. [ 374.129436][ T5640] Dev nbd1: unable to read RDB block 0 [ 374.161588][T21694] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7538'. [ 374.172682][ T5640] nbd1: unable to read partition table [ 374.173320][T21686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7535'. [ 374.248773][ T5640] ldm_validate_partition_table(): Disk read failed. [ 374.288108][ T5640] Dev nbd1: unable to read RDB block 0 [ 374.319232][ T5640] nbd1: unable to read partition table [ 374.533407][T21715] netlink: 'syz.2.7547': attribute type 11 has an invalid length. [ 374.818803][ T13] wlan1: Trigger new scan to find an IBSS to join [ 375.731178][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.374259][T21882] __nla_validate_parse: 5 callbacks suppressed [ 377.374279][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7623'. [ 377.413160][T21882] netlink: 'syz.0.7623': attribute type 7 has an invalid length. [ 377.437164][T21882] netlink: 'syz.0.7623': attribute type 8 has an invalid length. [ 377.462426][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7623'. [ 377.492265][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7625'. [ 377.640233][T21892] syzkaller1: entered promiscuous mode [ 377.648757][T21892] syzkaller1: entered allmulticast mode [ 377.658619][T21892] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 378.008887][T21915] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7638'. [ 378.343118][T21936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7644'. [ 378.959791][T21967] netlink: 'syz.3.7660': attribute type 10 has an invalid length. [ 378.973553][T21967] syz_tun: entered promiscuous mode [ 379.021229][T21967] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 379.498071][T22001] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7676'. [ 379.616162][T21997] syz_tun: left promiscuous mode [ 379.668418][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880756fa400: rx timeout, send abort [ 379.677223][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880756fa400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.810694][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7680'. [ 379.832212][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7680'. [ 379.861621][T21997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.878718][T21997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.992296][T21997] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 380.072094][T21997] gtp0: left promiscuous mode [ 380.187897][ T1014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.242081][ T1014] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.354415][ T1014] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.381977][ T1014] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.754013][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7693'. [ 381.497530][T22113] block nbd2: server does not support multiple connections per device. [ 381.535061][T22113] block nbd2: shutting down sockets [ 381.555109][T22117] netlink: 'syz.4.7713': attribute type 1 has an invalid length. [ 382.079902][T22135] sctp: [Deprecated]: syz.2.7723 (pid 22135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.079902][T22135] Use struct sctp_sack_info instead [ 382.922662][T22188] netlink: 'syz.2.7744': attribute type 63 has an invalid length. [ 382.941932][T22188] netlink: 'syz.2.7744': attribute type 63 has an invalid length. [ 383.147715][T22201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7748'. [ 383.349377][T22211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.549513][T22224] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7758'. [ 383.643673][T22226] pim6reg1: entered promiscuous mode [ 383.662589][T22226] pim6reg1: entered allmulticast mode [ 383.702754][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'. [ 385.041916][T22277] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.7780'. [ 385.203141][T22284] netlink: 'syz.4.7783': attribute type 1 has an invalid length. [ 385.364868][T22292] nbd: couldn't find a device at index 0 [ 386.672001][T22364] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 387.470846][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 387.480115][T22408] netlink: 'syz.4.7838': attribute type 30 has an invalid length. [ 387.512422][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.525389][T22410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7840'. [ 387.531498][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.546074][T22410] netlink: 'syz.3.7840': attribute type 7 has an invalid length. [ 387.547339][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 387.554243][T22410] netlink: 'syz.3.7840': attribute type 8 has an invalid length. [ 387.577771][ T58] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.587705][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.598122][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7840'. [ 387.609021][T22408] netlink: 'syz.4.7838': attribute type 30 has an invalid length. [ 387.650418][T22412] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7841'. [ 387.805100][T22417] syzkaller1: entered promiscuous mode [ 387.814736][T22417] syzkaller1: entered allmulticast mode [ 388.594440][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7863'. [ 389.186815][T22498] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 389.527961][T22508] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.759858][T22547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7900'. [ 390.785505][T22547] netlink: 320 bytes leftover after parsing attributes in process `syz.0.7900'. [ 391.324450][T22569] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 391.438691][ T83] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 391.621899][T22587] netlink: 'syz.4.7913': attribute type 4 has an invalid length. [ 391.633622][T22585] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 392.323106][T22619] netlink: 'syz.1.7921': attribute type 12 has an invalid length. [ 392.347578][T22619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7921'. [ 392.361539][T22621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.410500][T22619] netlink: 'syz.1.7921': attribute type 12 has an invalid length. [ 392.410620][T14567] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.426080][T22619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7921'. [ 392.456160][T14567] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.501630][T14567] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.529499][T14567] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.743926][T22636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7928'. [ 392.899093][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7930'. [ 392.931256][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.940664][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7930'. [ 392.950534][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.975932][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.996515][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.275105][T22657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7933'. [ 393.530660][T22673] netlink: 512 bytes leftover after parsing attributes in process `syz.2.7946'. [ 393.602198][T22679] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7949'. [ 393.626140][T22679] netlink: Unknown conntrack attr (0) [ 393.753320][T22686] syzkaller1: entered promiscuous mode [ 393.759836][T22686] syzkaller1: entered allmulticast mode [ 393.799990][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7953'. [ 394.554639][T22726] netlink: 'syz.1.7972': attribute type 1 has an invalid length. [ 394.602523][T22726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.082694][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7983'. [ 395.170997][T22764] team0: No ports can be present during mode change [ 395.293337][T22772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7989'. [ 395.313402][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7991'. [ 395.322864][T22772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7989'. [ 395.323406][T22775] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7990'. [ 395.332206][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7991'. [ 395.333089][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7991'. [ 395.400570][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7991'. [ 395.420835][T22778] netlink: 'syz.4.7992': attribute type 22 has an invalid length. [ 395.526857][T22778] netlink: 'syz.4.7992': attribute type 22 has an invalid length. [ 395.861455][T22791] ip6erspan0: entered promiscuous mode [ 396.219881][T22805] netlink: 'syz.4.8004': attribute type 16 has an invalid length. [ 396.400066][T22813] bridge_slave_0: invalid flags given to default FDB implementation [ 396.865736][T22840] netlink: 'syz.4.8018': attribute type 19 has an invalid length. [ 396.968640][T22840] netlink: 'syz.4.8018': attribute type 19 has an invalid length. [ 397.290881][T22864] netlink: 'syz.4.8030': attribute type 4 has an invalid length. [ 397.298606][T22855] nbd2: detected capacity change from 0 to 63 [ 397.309773][T22862] block nbd1: NBD_DISCONNECT [ 397.334235][T22862] block nbd1: Send disconnect failed -32 [ 397.348895][T22864] netlink: 'syz.4.8030': attribute type 4 has an invalid length. [ 397.357261][T22862] block nbd1: Send disconnect failed -32 [ 397.395263][ T5634] block nbd2: Receive control failed (result -104) [ 397.961761][T22903] netlink: 'syz.4.8048': attribute type 1 has an invalid length. [ 398.070643][T22910] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 398.081344][T22910] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 398.093994][T22910] bond3: (slave ip6gre3): making interface the new active one [ 398.106731][T22910] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 398.601695][T22937] netlink: 'syz.4.8061': attribute type 13 has an invalid length. [ 398.610196][T22937] __nla_validate_parse: 10 callbacks suppressed [ 398.610216][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8061'. [ 398.701993][T22937] netlink: 'syz.4.8061': attribute type 13 has an invalid length. [ 398.714530][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8061'. [ 398.792392][T22945] netlink: 'syz.2.8064': attribute type 1 has an invalid length. [ 398.834373][T22945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 398.971543][T22945] bond4: (slave geneve2): making interface the new active one [ 399.001721][T22945] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 399.583778][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8080'. [ 399.605914][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8080'. [ 399.672756][T14567] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.682160][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8080'. [ 399.700840][T14567] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.711984][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8080'. [ 399.723130][T14567] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.750590][T14567] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.478890][T23021] netlink: 'syz.3.8096': attribute type 21 has an invalid length. [ 400.491222][T23021] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8096'. [ 400.503540][T23021] netlink: 'syz.3.8096': attribute type 5 has an invalid length. [ 400.519815][T23021] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8096'. [ 401.158315][T23038] netlink: 33 bytes leftover after parsing attributes in process `syz.4.8104'. [ 401.184294][T23038] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8104'. [ 401.472960][T23049] bridge_slave_0: left promiscuous mode [ 401.484168][T23049] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.504046][T23050] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.535188][T23049] bridge_slave_1: left allmulticast mode [ 401.549798][T23049] bridge_slave_1: left promiscuous mode [ 401.558576][T23049] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.573803][T23049] bond0: (slave bond_slave_0): Releasing backup interface [ 401.584370][T23049] bond_slave_0: left allmulticast mode [ 401.621386][T23049] bond0: (slave bond_slave_1): Releasing backup interface [ 401.644902][T23049] bond_slave_1: left allmulticast mode [ 401.689895][T23049] team0: Port device team_slave_0 removed [ 401.737221][T23049] team0: Port device 26±ÿ removed [ 401.750227][T23049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.765506][T23049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.777710][T23049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.785256][T23049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.794884][T23049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 402.425347][T23085] netlink: Unknown conntrack attr (type=2304, max=9) [ 403.212771][T23112] validate_nla: 3 callbacks suppressed [ 403.212790][T23112] netlink: 'syz.3.8131': attribute type 20 has an invalid length. [ 403.258239][T23112] netlink: 'syz.3.8131': attribute type 20 has an invalid length. [ 403.357859][T23117] netlink: 'syz.1.8133': attribute type 15 has an invalid length. [ 403.403495][T23117] netlink: 'syz.1.8133': attribute type 15 has an invalid length. [ 403.634827][T23125] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.735206][T23125] bond4: (slave lo): Enslaving as an active interface with an up link [ 403.767382][T23125] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 404.783056][T23171] netlink: 'syz.1.8158': attribute type 1 has an invalid length. [ 404.800867][T23171] __nla_validate_parse: 10 callbacks suppressed [ 404.800885][T23171] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.8158'. [ 405.379494][T14565] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 405.599946][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8172'. [ 405.751311][T23214] pim6reg1: entered promiscuous mode [ 405.763361][T23214] pim6reg1: entered allmulticast mode [ 406.233262][T23240] vlan4: entered allmulticast mode [ 406.247009][T23239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8180'. [ 406.262582][T23240] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8182'. [ 406.340898][T23240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.371676][T23240] bond_slave_0: left allmulticast mode [ 406.385593][T23240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.401182][T23240] bond_slave_1: left allmulticast mode [ 406.411094][T23240] bond0 (unregistering): Released all slaves [ 406.426080][T23246] netlink: 'syz.4.8186': attribute type 15 has an invalid length. [ 406.434267][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8186'. [ 406.455300][ T13] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 406.455426][T23246] netlink: 'syz.4.8186': attribute type 15 has an invalid length. [ 406.472452][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8186'. [ 406.476053][ T13] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 406.512195][ T13] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 406.554861][ T13] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 406.633786][T23253] trusted_key: syz.2.8189 sent an empty control message without MSG_MORE. [ 406.876173][T23265] syzkaller1: entered promiscuous mode [ 406.883160][T23265] syzkaller1: entered allmulticast mode [ 407.280351][T23283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8203'. [ 407.417290][T23289] netlink: 'syz.0.8206': attribute type 1 has an invalid length. [ 407.456691][T23289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.464387][T23294] bond4: option mode: unable to set because the bond device has slaves [ 407.531892][T23289] bond0: (slave geneve2): making interface the new active one [ 407.548690][T23289] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 407.573315][T23294] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 407.622161][T14565] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 407.658598][ T58] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 407.675816][ T58] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 407.694164][ T58] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 407.763010][T23303] ip6tnl2: entered promiscuous mode [ 407.825132][T23309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8215'. [ 407.848067][T23309] netlink: 'syz.0.8215': attribute type 7 has an invalid length. [ 407.864556][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8215'. [ 407.900331][T23309] gretap0: entered promiscuous mode [ 407.916804][T23309] gretap0: left promiscuous mode [ 407.923993][ T29] audit: type=1800 audit(1777617974.462:2): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8218" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=8310 res=0 errno=0 [ 408.006384][T14565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.149317][T23323] atomic_op ffff888034bb6998 conn xmit_atomic 0000000000000000 [ 408.244713][T23329] netlink: 'syz.0.8224': attribute type 21 has an invalid length. [ 408.268251][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8224'. [ 408.440564][T23343] netlink: 'syz.1.8228': attribute type 21 has an invalid length. [ 408.451167][T23343] netlink: 'syz.1.8228': attribute type 22 has an invalid length. [ 408.459583][T23343] netlink: 'syz.1.8228': attribute type 23 has an invalid length. [ 408.468028][T23343] netlink: 'syz.1.8228': attribute type 25 has an invalid length. [ 408.476297][T23343] netlink: 'syz.1.8228': attribute type 26 has an invalid length. [ 408.602958][T23329] netlink: 'syz.0.8224': attribute type 21 has an invalid length. [ 408.780768][T23349] netlink: 'syz.0.8231': attribute type 1 has an invalid length. [ 408.961065][T23354] netlink: 'syz.2.8234': attribute type 14 has an invalid length. [ 408.994854][T23354] netlink: 'syz.2.8234': attribute type 14 has an invalid length. [ 412.121675][T23492] __nla_validate_parse: 16 callbacks suppressed [ 412.121694][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8284'. [ 412.180956][T23492] bond5: entered promiscuous mode [ 412.707718][T23478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 412.750709][T23478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 413.681923][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8305'. [ 414.031045][T23561] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.8312'. [ 414.140528][T23563] syzkaller1: entered promiscuous mode [ 414.149589][T23563] syzkaller1: entered allmulticast mode [ 414.247396][T23568] validate_nla: 3 callbacks suppressed [ 414.247415][T23568] netlink: 'syz.3.8315': attribute type 18 has an invalid length. [ 414.256867][T23566] syzkaller1: entered promiscuous mode [ 414.267470][T23566] syzkaller1: entered allmulticast mode [ 414.275546][T23568] netlink: 'syz.3.8315': attribute type 18 has an invalid length. [ 414.474680][T23574] netlink: 'syz.0.8319': attribute type 1 has an invalid length. [ 414.482668][T23574] netlink: 'syz.0.8319': attribute type 4 has an invalid length. [ 414.491934][T23574] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8319'. [ 414.834343][T23589] policy can only be matched on NF_INET_PRE_ROUTING [ 414.834368][T23589] unable to load match [ 415.841325][T23528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.100160][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8338'. [ 416.133294][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8338'. [ 416.557342][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8348'. [ 416.586176][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8348'. [ 417.348054][T23715] netlink: 'syz.1.8362': attribute type 21 has an invalid length. [ 417.356763][T23715] netlink: 'syz.1.8362': attribute type 22 has an invalid length. [ 417.364699][T23715] netlink: 'syz.1.8362': attribute type 23 has an invalid length. [ 417.373224][T23715] netlink: 'syz.1.8362': attribute type 25 has an invalid length. [ 417.387829][T23715] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8362'. [ 418.565975][T23754] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 418.818853][T23763] xt_hashlimit: size too large, truncated to 1048576 [ 418.958862][T23772] netlink: 'syz.3.8386': attribute type 1 has an invalid length. [ 419.048041][T23772] bond2: (slave gretap2): making interface the new active one [ 419.058867][T23772] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 419.544922][T23796] syzkaller1: entered promiscuous mode [ 419.551722][T23796] syzkaller1: entered allmulticast mode [ 420.024646][T23812] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.200317][T23824] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.8408'. [ 420.260507][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8409'. [ 420.287673][T23827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.294947][T23827] IPv6: NLM_F_CREATE should be set when creating new route [ 420.341133][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8409'. [ 420.669815][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8418'. [ 420.782555][T23845] team1: entered promiscuous mode [ 420.783214][T23849] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8419'. [ 420.795560][T23845] team1: entered allmulticast mode [ 420.885193][T23851] syzkaller1: entered promiscuous mode [ 420.919297][T23851] syzkaller1: entered allmulticast mode [ 420.962364][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8422'. [ 421.308449][T23872] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8428'. [ 421.535220][T23882] netlink: 'syz.2.8433': attribute type 1 has an invalid length. [ 421.599302][T23882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.629529][T23882] ip_vti0: entered promiscuous mode [ 421.992444][T23901] netlink: 'syz.2.8442': attribute type 1 has an invalid length. [ 422.103125][T23901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 422.450342][T23921] only policy match revision 0 supported [ 422.450363][T23921] unable to load match [ 422.647624][T23938] veth1_to_bond: entered allmulticast mode [ 422.663893][T23938] veth1_to_bond: left allmulticast mode [ 422.911064][T23947] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.8460'. [ 422.978536][T23949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8462'. [ 423.723538][T23984] syzkaller0: entered promiscuous mode [ 423.730802][T23984] syzkaller0: entered allmulticast mode [ 427.130581][T24037] netlink: 'syz.4.8496': attribute type 1 has an invalid length. [ 427.173053][T24040] netlink: 'syz.2.8497': attribute type 1 has an invalid length. [ 427.221713][T24045] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8499'. [ 427.358231][T24052] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 427.384617][T24055] netlink: 'syz.1.8503': attribute type 1 has an invalid length. [ 427.423999][T24043] bond6: (slave geneve3): making interface the new active one [ 427.434785][T24043] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 427.537261][T24055] bond0: entered promiscuous mode [ 427.542977][T24055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.551634][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.562714][T24059] team0: Mode changed to "broadcast" [ 427.607656][T24060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.641890][T24060] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 427.644982][T24067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8507'. [ 427.695621][T24060] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 427.764520][T24060] bond0: (slave ip6gre2): making interface the new active one [ 427.789404][T24060] ip6gre2: entered promiscuous mode [ 427.800373][T24060] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 427.818774][T14569] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.849122][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 30 seconds [ 427.864742][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 30 seconds [ 427.876656][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 30 seconds [ 427.888120][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 30 seconds [ 427.969365][T24063] syzkaller1: entered promiscuous mode [ 427.985831][T24063] syzkaller1: entered allmulticast mode [ 428.003731][ T58] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 428.062105][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'. [ 428.063013][ T58] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 428.231288][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'. [ 428.518582][T24105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8518'. [ 429.114761][T24129] veth0: entered promiscuous mode [ 429.171833][T24129] veth0: left promiscuous mode [ 429.324201][T24137] sock: sock_set_timeout: `syz.3.8525' (pid 24137) tries to set negative timeout [ 429.766027][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.850495][T24167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8535'. [ 430.250133][T24139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.261780][T24189] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8543'. [ 430.484134][T24197] netlink: 'syz.0.8547': attribute type 8 has an invalid length. [ 430.500266][T24197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8547'. [ 430.548687][T24197] bond0: entered promiscuous mode [ 430.569013][T24200] netlink: 'syz.0.8547': attribute type 8 has an invalid length. [ 430.587853][T24197] geneve2: entered promiscuous mode [ 430.605702][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8547'. [ 430.621642][T24197] gretap0: entered promiscuous mode [ 430.629830][T24197] veth1_virt_wifi: entered promiscuous mode [ 430.638551][T24197] veth1_virt_wifi: left promiscuous mode [ 430.645215][T24197] bond0: left promiscuous mode [ 430.651072][T24197] geneve2: left promiscuous mode [ 430.687379][T24197] gretap0: left promiscuous mode [ 430.757517][T24200] bond0: entered promiscuous mode [ 430.778265][T24200] geneve2: entered promiscuous mode [ 430.799071][T24200] gretap0: entered promiscuous mode [ 430.813111][T24200] veth1_virt_wifi: entered promiscuous mode [ 430.829055][T24200] veth1_virt_wifi: left promiscuous mode [ 430.835610][T24200] bond0: left promiscuous mode [ 430.840711][T24200] geneve2: left promiscuous mode [ 430.864688][T24200] gretap0: left promiscuous mode [ 431.170588][T24225] netlink: 'syz.2.8558': attribute type 1 has an invalid length. [ 431.237535][T24225] bond8: entered promiscuous mode [ 431.243313][T24225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 431.261966][T24225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8558'. [ 431.271533][T24225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8558'. [ 431.319229][T24225] bond8: (slave bridge4): making interface the new active one [ 431.327050][T24225] bridge4: entered promiscuous mode [ 431.334395][T24225] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 431.393013][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8560'. [ 431.483862][T24240] syz_tun: entered allmulticast mode [ 431.527731][T24238] syz_tun: left allmulticast mode [ 431.804071][T24252] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.180470][T24258] netlink: 'syz.1.8569': attribute type 15 has an invalid length. [ 432.369200][T24268] netlink: 'syz.1.8574': attribute type 1 has an invalid length. [ 432.380180][T24268] netlink: 'syz.1.8574': attribute type 4 has an invalid length. [ 433.562609][T24310] __nla_validate_parse: 1 callbacks suppressed [ 433.562628][T24310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8592'. [ 433.583103][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8591'. [ 433.645277][T24309] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 433.745669][T24317] netlink: 'syz.0.8596': attribute type 1 has an invalid length. [ 434.011370][T24322] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 434.060916][T24322] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 434.117767][T24322] bond3: (slave ip6gre2): making interface the new active one [ 434.136405][T24322] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 434.418577][T24347] netlink: 'syz.1.8607': attribute type 1 has an invalid length. [ 434.526463][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8610'. [ 434.587923][T24347] bond6: entered promiscuous mode [ 434.620111][T24347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.723907][T24360] bond6: (slave bridge4): making interface the new active one [ 434.734777][T24360] bridge4: entered promiscuous mode [ 434.764092][T24360] bridge4: left promiscuous mode [ 434.845379][T24372] netlink: 'syz.2.8610': attribute type 1 has an invalid length. [ 434.856197][T24356] syzkaller1: entered promiscuous mode [ 434.861895][T24356] syzkaller1: entered allmulticast mode [ 434.950250][T24377] sctp: [Deprecated]: syz.2.8613 (pid 24377) Use of int in maxseg socket option. [ 434.950250][T24377] Use struct sctp_assoc_value instead [ 435.162587][T24385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8617'. [ 435.197221][T24388] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.8618'. [ 435.354003][T24396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8622'. [ 435.444523][T24396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8622'. [ 435.668662][T24411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8629'. [ 435.938159][T24426] netdevsim netdevsim3 : renamed from netdevsim0 [ 435.938924][T24424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8634'. [ 435.967842][T24425] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.547608][T24431] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 436.597922][T24439] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 436.870111][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8638'. [ 438.831065][T24417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.025006][T24511] netlink: 'syz.3.8665': attribute type 1 has an invalid length. [ 439.109533][T24511] bond3: entered promiscuous mode [ 439.115396][T24511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.220184][T24511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.234075][T24511] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 439.265290][T24520] __nla_validate_parse: 5 callbacks suppressed [ 439.265309][T24520] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.8669'. [ 439.270662][T24511] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 439.348712][T24511] bond3: (slave ip6gre1): making interface the new active one [ 439.379133][T14567] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.429541][T24511] ip6gre1: entered promiscuous mode [ 439.497401][T24511] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 439.723547][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 439.911923][T24553] batman_adv: batadv0: Adding interface: dummy0 [ 439.921885][T24553] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.985562][T24553] batman_adv: batadv0: Interface activated: dummy0 [ 440.042083][T24554] batadv0: mtu less than device minimum [ 440.060132][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.074365][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.088193][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.100021][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.111776][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.123581][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.135274][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.147058][T24554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.343575][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8682'. [ 440.357568][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8682'. [ 440.959367][T24593] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8689'. [ 441.677219][T24606] syzkaller0: entered promiscuous mode [ 441.682884][T24606] syzkaller0: entered allmulticast mode [ 442.588853][T24540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.887729][T24635] syz_tun: entered allmulticast mode [ 445.024139][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8704'. [ 445.063049][T24639] vlan0: entered allmulticast mode [ 445.071929][T24639] veth1_virt_wifi: entered allmulticast mode [ 445.288477][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8712'. [ 445.435951][T24657] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.592063][T24665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.626643][T24665] bond7: (slave ipip1): The slave device specified does not support setting the MAC address [ 445.684998][T24665] bond7: (slave ipip1): Error -95 calling set_mac_address [ 445.749690][T24662] ipvlan2: entered allmulticast mode [ 445.770551][T24662] bond7: entered allmulticast mode [ 445.790926][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8716'. [ 445.878457][T24677] veth1_macvtap: left promiscuous mode [ 446.045610][T24686] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8720'. [ 446.267050][T24697] net_ratelimit: 11 callbacks suppressed [ 446.267070][T24697] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 446.381570][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8725'. [ 446.400370][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8725'. [ 446.606038][T24708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8728'. [ 447.154349][T24731] ip6erspan0: entered allmulticast mode [ 447.180116][T24733] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.8739'. [ 447.388885][T24746] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 448.608051][T24667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.729032][T24792] netlink: 'syz.0.8759': attribute type 4 has an invalid length. [ 449.764225][T24792] netlink: 'syz.0.8759': attribute type 4 has an invalid length. [ 449.980754][T24800] tipc: Enabled bearer , priority 0 [ 449.989956][T24800] syzkaller0: mtu less than device minimum [ 450.188965][T24808] netlink: 'syz.2.8764': attribute type 1 has an invalid length. [ 450.307696][T24813] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.318390][T24813] bond9: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 450.387994][T24813] bond9: (slave vxcan3): making interface the new active one [ 450.426305][T24813] bond9: (slave vxcan3): Enslaving as an active interface with an up link [ 450.554110][T24808] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 450.593954][T24808] bond9: (slave vxcan5): Enslaving as a backup interface with an up link [ 450.621455][T24826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8772'. [ 450.987829][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8775'. [ 451.003185][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8775'. [ 451.023257][T24834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8776'. [ 451.439213][T24850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8782'. [ 452.105403][T24877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8789'. [ 452.119973][T24877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8789'. [ 452.154556][T24878] tipc: Enabled bearer , priority 0 [ 452.265055][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'. [ 452.290338][T24878] syzkaller0: entered promiscuous mode [ 452.318069][T24878] syzkaller0: entered allmulticast mode [ 452.350102][T24878] tipc: Resetting bearer [ 452.554958][ T894] tipc: Resetting bearer [ 452.577870][T24875] tipc: Resetting bearer [ 454.996674][T24875] tipc: Disabling bearer [ 455.005684][T24889] syzkaller1: entered promiscuous mode [ 455.011490][T24889] syzkaller1: entered allmulticast mode [ 455.183327][T14565] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.238345][T14565] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.271118][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8802'. [ 455.289886][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.345672][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.367692][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8812'. [ 456.832941][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8819'. [ 456.843346][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8819'. [ 457.031435][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8821'. [ 457.041393][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8821'. [ 457.932424][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 60 seconds [ 457.943268][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 60 seconds [ 457.955841][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 60 seconds [ 457.967277][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 60 seconds [ 458.173196][T24997] syzkaller0: entered promiscuous mode [ 458.179238][T24997] syzkaller0: entered allmulticast mode [ 458.716887][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8831'. [ 459.164958][T25009] dvmrp0: entered allmulticast mode [ 459.965886][T24969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.284765][T25021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8838'. [ 460.587706][T25021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8838'. [ 461.256089][T25061] syzkaller0: entered promiscuous mode [ 461.261644][T25061] syzkaller0: entered allmulticast mode [ 461.288178][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8850'. [ 461.896944][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8860'. [ 462.527337][T25117] netlink: 576 bytes leftover after parsing attributes in process `syz.0.8872'. [ 462.559643][T25118] netlink: 'syz.3.8871': attribute type 1 has an invalid length. [ 462.589810][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8874'. [ 462.652717][T25118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.710913][T25135] netlink: 688 bytes leftover after parsing attributes in process `syz.0.8875'. [ 462.723084][T25128] bond4: (slave bridge0): making interface the new active one [ 462.758461][T25128] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 463.053660][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8879'. [ 463.290716][T25154] tipc: Failed to remove unknown binding: 66,0,0/1:2813820502/2813820504 [ 463.301259][T25154] tipc: Failed to remove unknown binding: 66,0,0/1:2813820502/2813820503 [ 463.312631][T25154] tipc: Failed to remove unknown binding: 66,0,0/1:2813820502/2813820504 [ 463.323632][T25154] tipc: Failed to remove unknown binding: 66,0,0/1:2813820502/2813820503 [ 463.364792][T25156] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 463.373107][T25156] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 463.428072][T25158] tipc: Resetting bearer [ 463.435572][T25158] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 463.896670][T25173] netlink: 'syz.2.8890': attribute type 4 has an invalid length. [ 463.932581][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8891'. [ 463.973732][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8892'. [ 464.368196][T25195] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 465.519807][T25214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8907'. [ 465.572986][T25122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.790115][T25221] netlink: 'syz.3.8911': attribute type 1 has an invalid length. [ 465.812978][T25219] netlink: 'syz.4.8909': attribute type 39 has an invalid length. [ 465.911022][T25219] syz_tun (unregistering): left allmulticast mode [ 466.404739][T25249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.422332][T25249] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.538956][T25249] veth1_macvtap: entered promiscuous mode [ 466.683562][T25249] geneve2: left promiscuous mode [ 466.700804][T25249] gretap1: left promiscuous mode [ 466.716742][T25249] bridge1: left promiscuous mode [ 466.728839][T25249] bond1: left promiscuous mode [ 466.781938][T25249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.905575][T25249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.928794][T25249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.942757][T25249] bond5: left promiscuous mode [ 466.951882][T25249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.981902][T25249] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.080260][T22033] hsr0 speed is unknown, defaulting to 1000 [ 467.172050][ T36] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 468.347564][T25321] syzkaller0: entered promiscuous mode [ 468.365892][T25321] syzkaller0: entered allmulticast mode [ 468.550624][T25325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8938'. [ 468.610366][T25325] bond4: entered promiscuous mode [ 468.618070][T25325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.687274][T25325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.707534][T25331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8940'. [ 468.731490][T25325] bond4: (slave sit2): The slave device specified does not support setting the MAC address [ 468.756918][T25325] bond4: (slave sit2): Error -95 calling set_mac_address [ 468.926617][T25338] syzkaller0: entered promiscuous mode [ 468.932370][T25338] syzkaller0: entered allmulticast mode [ 469.422041][T25364] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8949'. [ 469.482610][T25352] infiniband syz0: set active [ 469.488340][T25352] infiniband syz0: added veth0_vlan [ 469.510958][T25352] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 469.529172][T25352] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 469.547741][T25352] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 469.581819][T25352] RDS/IB: syz0: added [ 469.587020][T25352] smc: adding ib device syz0 with port count 1 [ 469.595335][T25352] smc: ib device syz0 port 1 has no pnetid [ 470.017829][T25272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.257099][T25369] tipc: Failed to remove unknown binding: 66,0,0/10463914:418325225/418325226 [ 470.303197][T25369] tipc: Failed to remove unknown binding: 66,0,0/10463914:418325225/418325226 [ 471.091194][T25408] tipc: Enabled bearer , priority 0 [ 471.122447][T25408] syzkaller0: entered promiscuous mode [ 471.165455][T25408] syzkaller0: entered allmulticast mode [ 471.206052][T25411] tipc: Resetting bearer [ 471.266004][T25407] tipc: Resetting bearer [ 471.345026][T25407] tipc: Disabling bearer [ 471.349686][T25414] netlink: 'syz.3.8960': attribute type 10 has an invalid length. [ 471.367785][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.374003][T25414] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8960'. [ 471.553799][T25420] syzkaller0: entered allmulticast mode [ 472.081184][T25432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8966'. [ 474.922236][T25432] team2: entered promiscuous mode [ 474.935872][T25432] team2: entered allmulticast mode [ 474.946709][T25435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8967'. [ 475.124069][T25473] syzkaller0: entered promiscuous mode [ 475.139527][T25473] syzkaller0: entered allmulticast mode [ 475.166810][T25475] syzkaller0: entered promiscuous mode [ 475.181415][T25475] syzkaller0: entered allmulticast mode [ 475.274662][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x524 [ 475.402210][T25494] syzkaller0: entered promiscuous mode [ 475.408132][T25494] syzkaller0: entered allmulticast mode [ 476.799808][T25518] syzkaller1: entered promiscuous mode [ 476.805389][T25518] syzkaller1: entered allmulticast mode [ 476.960764][T25520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8987'. [ 478.196787][T25479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.102814][T25569] batadv_slave_0: entered promiscuous mode [ 479.697143][T25585] syzkaller0: entered promiscuous mode [ 479.702800][T25585] syzkaller0: entered allmulticast mode [ 479.982759][T25592] syzkaller0: entered promiscuous mode [ 479.988961][T25592] syzkaller0: entered allmulticast mode [ 481.402009][T25531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.627925][T25621] syzkaller0: entered promiscuous mode [ 481.633609][T25621] syzkaller0: entered allmulticast mode [ 481.885435][T25630] netlink: 'syz.1.9021': attribute type 1 has an invalid length. [ 481.921583][T25630] bond8: (slave bridge6): making interface the new active one [ 481.930588][T25630] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 481.949938][T25630] macvlan2: entered promiscuous mode [ 481.955407][T25630] macvlan2: entered allmulticast mode [ 481.961735][T25630] bond8: entered promiscuous mode [ 481.966919][T25630] bridge6: entered promiscuous mode [ 481.974940][T25630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.983056][T25630] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 481.999483][T25630] bond8: left promiscuous mode [ 482.004310][T25630] bridge6: left promiscuous mode [ 482.038653][T25563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.264330][T25637] netlink: 'syz.4.9024': attribute type 1 has an invalid length. [ 482.336974][T25642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9027'. [ 482.363166][T25633] syzkaller0: entered promiscuous mode [ 482.370290][T25633] syzkaller0: entered allmulticast mode [ 482.458178][T25643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 482.479161][T25651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9024'. [ 482.496528][T25643] bond7: (slave bond8): making interface the new active one [ 482.541188][T25643] bond7: (slave bond8): Enslaving as an active interface with an up link [ 482.645459][T25637] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 482.675238][T25651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.827458][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9031'. [ 482.844653][T25657] ip6_vti0: entered promiscuous mode [ 482.912327][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9028'. [ 483.114186][T25665] syzkaller0: entered promiscuous mode [ 483.153279][T25665] syzkaller0: entered allmulticast mode [ 483.336147][T25691] gretap0: entered promiscuous mode [ 483.709113][T25712] netlink: 'syz.1.9043': attribute type 1 has an invalid length. [ 483.752905][T25712] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.772541][T25712] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 483.857577][T25719] bond9: (slave bridge7): Enslaving as an active interface with a down link [ 483.877725][T25712] macvlan2: entered promiscuous mode [ 483.883059][T25712] macvlan2: entered allmulticast mode [ 483.889980][T25712] bond9: entered promiscuous mode [ 483.898740][T25712] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.907061][T25712] bond9: left promiscuous mode [ 484.176737][T25732] syzkaller0: entered promiscuous mode [ 484.182393][T25732] syzkaller0: entered allmulticast mode [ 485.506419][T25747] IPVS: sh: FWM 3 0x00000003 - no destination available [ 485.585537][T25752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.592828][T25752] IPv6: NLM_F_CREATE should be set when creating new route [ 485.602724][T25752] lo: left promiscuous mode [ 485.607676][T25752] lo: entered allmulticast mode [ 485.614870][T25752] tunl0: entered allmulticast mode [ 485.623732][T25752] gre0: entered allmulticast mode [ 485.635047][T25752] gretap0: entered allmulticast mode [ 485.644040][T25752] erspan0: entered allmulticast mode [ 485.653600][T25752] ip_vti0: entered allmulticast mode [ 485.660488][T25752] ip6_vti0: entered allmulticast mode [ 485.667978][T25752] sit0: entered allmulticast mode [ 485.678916][T25752] ip6tnl0: entered allmulticast mode [ 485.687683][T25752] ip6gre0: entered allmulticast mode [ 485.696840][T25752] ip6gretap0: entered allmulticast mode [ 485.704390][T25752] bridge0: entered allmulticast mode [ 485.711641][T25752] : entered allmulticast mode [ 485.723348][T25752] team0: entered allmulticast mode [ 485.730371][T25752] batman_adv: batadv0: Interface deactivated: dummy0 [ 485.742512][T25752] dummy0: entered allmulticast mode [ 485.748753][T25752] nlmon0: entered allmulticast mode [ 485.755223][T25752] batadv0: entered allmulticast mode [ 485.763106][T25752] veth0: entered allmulticast mode [ 485.771213][T25752] veth1: entered allmulticast mode [ 485.781904][T25752] wg0: entered allmulticast mode [ 485.789000][T25752] wg1: entered allmulticast mode [ 485.795524][T25752] wg2: entered allmulticast mode [ 485.802550][T25752] veth0_to_bridge: entered allmulticast mode [ 485.811059][T25752] bridge_slave_0: entered allmulticast mode [ 485.819151][T25752] veth1_to_bridge: entered allmulticast mode [ 485.827301][T25752] bridge_slave_1: entered allmulticast mode [ 485.836823][T25752] veth0_to_bond: entered allmulticast mode [ 485.844225][T25752] bond_slave_0: entered allmulticast mode [ 485.859072][T25752] veth1_to_bond: entered allmulticast mode [ 485.870892][T25752] bond_slave_1: entered allmulticast mode [ 485.877177][T25752] veth0_to_team: entered allmulticast mode [ 485.884672][T25752] team_slave_0: entered allmulticast mode [ 485.891084][T25752] veth1_to_team: entered allmulticast mode [ 485.899011][T25752] team_slave_1: entered allmulticast mode [ 485.905010][T25752] veth0_to_batadv: entered allmulticast mode [ 485.912995][T25752] batadv_slave_0: entered allmulticast mode [ 485.921689][T25752] veth1_to_batadv: entered allmulticast mode [ 485.930488][T25752] batadv_slave_1: entered allmulticast mode [ 485.939851][T25752] xfrm0: entered allmulticast mode [ 485.946901][T25752] veth0_to_hsr: entered allmulticast mode [ 485.955288][T25752] hsr_slave_0: entered allmulticast mode [ 485.963343][T25752] veth1_to_hsr: entered allmulticast mode [ 485.971951][T25752] hsr_slave_1: entered allmulticast mode [ 485.979583][T25752] hsr0: entered allmulticast mode [ 485.986766][T25752] veth1_virt_wifi: entered allmulticast mode [ 485.994387][T25752] veth0_virt_wifi: entered allmulticast mode [ 486.002456][T25752] virt_wifi0: entered allmulticast mode [ 486.009119][T25752] veth1_vlan: entered allmulticast mode [ 486.017650][T25752] veth0_vlan: entered allmulticast mode [ 486.028166][T25752] vlan0: entered allmulticast mode [ 486.034929][T25752] vlan1: entered allmulticast mode [ 486.040756][T25752] macvlan0: entered allmulticast mode [ 486.046459][T25752] tipc: Resetting bearer [ 486.052185][T25752] macvlan1: entered allmulticast mode [ 486.060011][T25752] ipvlan0: entered allmulticast mode [ 486.065637][T25752] ipvlan1: entered allmulticast mode [ 486.072180][T25752] veth1_macvtap: entered allmulticast mode [ 486.083679][T25752] veth0_macvtap: entered allmulticast mode [ 486.094636][T25752] macvtap0: entered allmulticast mode [ 486.103195][T25752] geneve0: entered allmulticast mode [ 486.110703][T25752] geneve1: entered allmulticast mode [ 486.121302][T25752] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 486.133914][T25752] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 486.143496][T25752] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 486.152736][T25752] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 486.162167][T25752] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 486.169304][T25752] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 486.177466][T25752] bridge1: entered allmulticast mode [ 486.184073][T25752] bond1: left promiscuous mode [ 486.189836][T25752] gre1: entered allmulticast mode [ 486.195817][T25752] wireguard0: entered allmulticast mode [ 486.201890][T25752] syztnl2: entered allmulticast mode [ 486.207513][T25752] ipip0: entered allmulticast mode [ 486.212733][T25752] bridge2: entered allmulticast mode [ 486.218366][T25752] ip6tnl1: entered allmulticast mode [ 486.223798][T25752] bridge3: entered allmulticast mode [ 486.229285][T25752] mac80211_hwsim hwsim17 wlan2: entered allmulticast mode [ 486.236891][T25752] ip6tnl2: entered allmulticast mode [ 486.242311][T25752] bond2: entered allmulticast mode [ 486.247707][T25752] ip6tnl3: entered allmulticast mode [ 486.253404][T25752] ipvlan2: left promiscuous mode [ 486.258461][T25752] ipvlan2: entered allmulticast mode [ 486.265402][T25752] vxcan0: entered allmulticast mode [ 486.271037][T25752] vxcan1: entered allmulticast mode [ 486.276475][T25752] xfrm1: left promiscuous mode [ 486.281599][T25752] macsec1: entered allmulticast mode [ 486.290467][T25752] nicvf0: entered allmulticast mode [ 486.295894][T25752] h: left promiscuous mode [ 486.300331][T25752] h: entered allmulticast mode [ 486.306069][T25752] mac80211_hwsim hwsim4 t: entered allmulticast mode [ 486.312950][T25752] gretap1: entered allmulticast mode [ 486.318595][T25752] sit1: entered allmulticast mode [ 486.335626][T25752] ipip1: entered allmulticast mode [ 486.341181][T25752] mac80211_hwsim hwsim20 wlan3: entered allmulticast mode [ 486.349283][T25752] vxlan0: entered allmulticast mode [ 486.356328][T25752] bond0: entered allmulticast mode [ 486.361520][T25752] geneve2: entered allmulticast mode [ 486.372001][T25752] veth2: entered allmulticast mode [ 486.377602][T25752] veth3: entered allmulticast mode [ 486.383299][T25752] bond3: entered allmulticast mode [ 486.388867][T25752] ip6gre2: entered allmulticast mode [ 486.394820][T25752] veth4: entered allmulticast mode [ 486.400189][T25752] veth5: entered allmulticast mode [ 486.405460][T25752] veth6: entered allmulticast mode [ 486.412252][T25752] veth7: entered allmulticast mode [ 486.418828][T25752] bridge4: entered allmulticast mode [ 486.426816][T25752] bridge5: entered allmulticast mode [ 486.434885][T25752] gre2: entered allmulticast mode [ 486.440617][T25752] xfrm2: entered allmulticast mode [ 486.447325][T25752] bridge6: entered allmulticast mode [ 486.454880][T25752] bond4: entered allmulticast mode [ 486.462971][T14567] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.473673][T14567] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.483698][T14567] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.493222][T14567] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.502703][T14567] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.511777][T14567] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.522612][T14567] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.531646][T14567] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.540769][T14567] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.549881][T14567] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.558986][T14567] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.567933][T14567] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 486.584984][T25754] syzkaller0: entered promiscuous mode [ 486.591104][T25754] syzkaller0: entered allmulticast mode [ 486.640053][T25706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.788404][T25756] netlink: 'syz.1.9058': attribute type 1 has an invalid length. [ 486.911040][T25756] 8021q: adding VLAN 0 to HW filter on device bond10 [ 486.998690][T25764] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 487.098389][T25761] syzkaller0: entered promiscuous mode [ 487.103884][T25761] syzkaller0: entered allmulticast mode [ 487.138443][T25756] 8021q: adding VLAN 0 to HW filter on device bond11 [ 487.151744][T25756] bond10: (slave bond11): Enslaving as an active interface with a down link [ 487.164880][T25769] syzkaller0: entered promiscuous mode [ 487.170516][T25769] syzkaller0: entered allmulticast mode [ 487.534466][T25780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9065'. [ 488.006456][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 90 seconds [ 488.017563][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 90 seconds [ 488.029858][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 90 seconds [ 488.042758][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 90 seconds [ 489.950085][ T4994] udevd[4994]: worker [5640] /devices/virtual/block/nbd2 is taking a long time [ 491.019657][T25822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9074'. [ 491.042731][T25822] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9074'. [ 491.065881][T25822] bridge0: left allmulticast mode [ 491.072569][T25822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9074'. [ 491.511370][T25839] syzkaller0: entered promiscuous mode [ 491.518401][T25839] syzkaller0: entered allmulticast mode [ 491.864615][ T894] smc: removing ib device syz0 [ 491.899958][T25851] veth: renamed from veth0_vlan [ 491.953476][T22010] syz0: Port: 1 Link DOWN [ 491.991228][T25858] netlink: 'syz.3.9087': attribute type 13 has an invalid length. [ 492.180078][ T894] smbdirect: ib_dev[syz0] removed [ 492.292514][T25860] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 492.328861][T25860] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 492.847070][T25874] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 492.871477][T25874] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 493.048706][T25886] syzkaller0: entered promiscuous mode [ 493.098108][T25886] syzkaller0: entered allmulticast mode [ 493.388935][T25888] syzkaller0: entered promiscuous mode [ 493.399309][T25888] syzkaller0: entered allmulticast mode [ 493.789798][ T29] audit: type=1804 audit(1777618060.322:3): pid=25927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9104" name="/newroot/1844/cgroup.controllers" dev="tmpfs" ino=9289 res=1 errno=0 [ 493.904772][ T29] audit: type=1800 audit(1777618060.332:4): pid=25927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9104" name="cgroup.controllers" dev="tmpfs" ino=9289 res=0 errno=0 [ 494.091993][ T5289] veth: left promiscuous mode [ 494.129898][ T5289] veth: entered promiscuous mode [ 494.284080][T25942] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9107'. [ 494.295513][T25951] syzkaller0: entered promiscuous mode [ 494.301827][T25951] syzkaller0: entered allmulticast mode [ 494.419849][T25947] syzkaller1: entered promiscuous mode [ 494.437615][T25947] syzkaller1: entered allmulticast mode [ 494.755319][T25958] syzkaller0: entered promiscuous mode [ 494.796931][T25958] syzkaller0: entered allmulticast mode [ 494.903374][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9113'. [ 495.108493][T25980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9114'. [ 495.220766][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9113'. [ 495.391448][T25969] syzkaller0: entered promiscuous mode [ 495.408213][T25969] syzkaller0: entered allmulticast mode [ 495.484311][T25980] team0 (unregistering): Port device gretap2 removed [ 498.690742][T25973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.457825][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.592480][T26036] syzkaller0: entered promiscuous mode [ 501.611876][T26036] syzkaller0: entered allmulticast mode [ 501.992326][T26055] syzkaller0: entered promiscuous mode [ 502.013365][T26055] syzkaller0: entered allmulticast mode [ 502.221701][T26064] netlink: 'syz.3.9129': attribute type 1 has an invalid length. [ 502.593541][T26070] tipc: Resetting bearer [ 503.044632][T26086] bond3: entered allmulticast mode [ 503.065003][T26086] ip6gre1: entered allmulticast mode [ 503.369918][ T1111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.172364][T26081] bond3: left allmulticast mode [ 506.186016][T26081] ip6gre1: left allmulticast mode [ 506.421189][T26137] block nbd3: not configured, cannot reconfigure [ 506.674391][T26148] syzkaller0: entered promiscuous mode [ 506.698152][T26154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.705447][T26154] IPv6: NLM_F_CREATE should be set when creating new route [ 506.712766][T26154] IPv6: NLM_F_CREATE should be set when creating new route [ 506.736855][T26148] syzkaller0: entered allmulticast mode [ 506.929170][T26167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9152'. [ 507.488236][T26178] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 507.496999][T26178] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 507.507866][T26183] syzkaller0: entered promiscuous mode [ 507.513887][T26183] syzkaller0: entered allmulticast mode [ 509.918515][T26187] tipc: Enabled bearer , priority 0 [ 509.927474][T26202] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9162'. [ 509.944979][T26209] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 509.956939][T26209] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 509.998460][T26181] tipc: Resetting bearer [ 510.062378][T26181] tipc: Disabling bearer [ 510.564034][T26260] tipc: Cannot configure node identity twice [ 510.707813][T26269] syzkaller0: entered promiscuous mode [ 510.722116][T26269] syzkaller0: entered allmulticast mode [ 510.908265][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9185'. [ 510.953089][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9185'. [ 511.057872][T26293] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9189'. [ 511.070317][T26294] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 511.423865][T26315] bond3: entered allmulticast mode [ 511.429251][T26315] ip6gre1: entered allmulticast mode [ 511.437834][T26315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9197'. [ 511.463868][T26315] bond0: (slave syz_tun): Releasing backup interface [ 512.246040][T26314] bond3: left allmulticast mode [ 512.259109][T26314] ip6gre1: left allmulticast mode [ 514.108728][T26296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.444300][T26369] netlink: 38 bytes leftover after parsing attributes in process `syz.4.9203'. [ 514.455498][T26368] tipc: Enabling of bearer rejected, failed to enable media [ 514.962102][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9217'. [ 515.344112][T26425] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 515.665980][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9234'. [ 515.701039][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9234'. [ 515.784469][T26449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9237'. [ 515.793885][T26449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9237'. [ 515.976196][T26458] syzkaller0: entered promiscuous mode [ 515.982277][T26458] syzkaller0: entered allmulticast mode [ 516.509031][T26491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9254'. [ 516.533442][T26491] syzkaller0: entered promiscuous mode [ 516.543914][T26491] syzkaller0: entered allmulticast mode [ 516.814322][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9259'. [ 516.944799][T26479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.141844][T26526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9266'. [ 517.178667][T26526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9266'. [ 517.238503][T26533] netlink: 'syz.1.9268': attribute type 14 has an invalid length. [ 517.271735][T26533] netem: change failed [ 517.384402][T26538] syzkaller0: entered promiscuous mode [ 517.397038][T26538] syzkaller0: entered allmulticast mode [ 517.836645][T26564] syzkaller0: entered promiscuous mode [ 517.858213][T26564] syzkaller0: entered allmulticast mode [ 518.086307][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 120 seconds [ 518.097295][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 120 seconds [ 518.108497][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 120 seconds [ 518.119778][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 120 seconds [ 518.285572][T26570] syzkaller0: entered promiscuous mode [ 518.305521][T26570] syzkaller0: entered allmulticast mode [ 520.684829][T26586] __nla_validate_parse: 9 callbacks suppressed [ 520.684847][T26586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9285'. [ 521.467829][T26653] syzkaller0: entered promiscuous mode [ 521.473442][T26653] syzkaller0: entered allmulticast mode [ 521.911115][T26668] netlink: 'syz.1.9318': attribute type 29 has an invalid length. [ 521.942454][T26668] netlink: 'syz.1.9318': attribute type 29 has an invalid length. [ 521.960420][T26668] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9318'. [ 521.973632][T26668] unsupported nla_type 58 [ 522.278397][T26686] syzkaller0: entered promiscuous mode [ 522.289391][T26686] syzkaller0: entered allmulticast mode [ 523.370134][T26736] bridge0: Caught tx_queue_len zero misconfig [ 523.416715][T26738] syzkaller0: entered promiscuous mode [ 523.422228][T26738] syzkaller0: entered allmulticast mode [ 523.483055][T26711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.930936][T26755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9350'. [ 523.934907][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9349'. [ 524.018996][T26753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9349'. [ 524.218257][T26765] syzkaller0: entered promiscuous mode [ 524.243327][T26765] syzkaller0: entered allmulticast mode [ 524.507234][T26781] syzkaller0: entered promiscuous mode [ 524.514579][T26781] syzkaller0: entered allmulticast mode [ 525.088278][T26809] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9368'. [ 527.562077][T26845] bond9: entered allmulticast mode [ 527.584032][T26845] bond9 (unregistering): Released all slaves [ 527.608269][T26848] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 527.828676][T26857] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9385'. [ 527.914290][T26861] syzkaller0: entered promiscuous mode [ 527.950192][T26861] syzkaller0: entered allmulticast mode [ 527.978888][T26864] lo: Caught tx_queue_len zero misconfig [ 528.191483][T26875] bond6: entered allmulticast mode [ 528.223476][T26880] bond6 (unregistering): Released all slaves [ 529.327556][T26940] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 529.512225][T26950] syzkaller1: entered promiscuous mode [ 529.519632][T26950] syzkaller1: entered allmulticast mode [ 529.715230][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9430'. [ 529.782344][T26953] bond5: entered allmulticast mode [ 529.900809][T26958] veth9: entered allmulticast mode [ 529.934975][T26958] bond5: (slave veth9): Enslaving as an active interface with an up link [ 531.412990][T27020] bond6: entered allmulticast mode [ 531.645418][T27026] veth11: entered allmulticast mode [ 531.693312][T27026] bond6: (slave veth11): Enslaving as an active interface with an up link [ 532.168590][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9454'. [ 532.310217][T27048] syzkaller0: entered promiscuous mode [ 532.390546][T27048] syzkaller0: entered allmulticast mode [ 532.460081][T27039] syzkaller0: entered promiscuous mode [ 532.483686][T27039] syzkaller0: entered allmulticast mode [ 532.657868][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9457'. [ 533.156973][T27064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9461'. [ 533.168675][T27064] nbd: couldn't find a device at index 0 [ 533.762639][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9466'. [ 535.369176][ T1111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.370349][T27056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9457'. [ 536.543800][T27083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9469'. [ 537.104990][T27097] xt_hashlimit: size too large, truncated to 1048576 [ 538.415530][T27118] syzkaller0: entered promiscuous mode [ 538.483585][T27118] syzkaller0: entered allmulticast mode [ 539.823660][T27155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9495'. [ 539.898074][T27155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9495'. [ 540.542000][T27169] netlink: 'syz.0.9500': attribute type 1 has an invalid length. [ 540.771329][T27169] 8021q: adding VLAN 0 to HW filter on device bond7 [ 541.019506][T27174] bond7: (slave geneve3): making interface the new active one [ 541.122864][T27174] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 541.264868][T27190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9506'. [ 541.339339][T27171] syzkaller0: entered promiscuous mode [ 541.364359][T27171] syzkaller0: entered allmulticast mode [ 541.379222][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.513330][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.749811][T14569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.107533][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f325400: rx timeout, send abort [ 542.117120][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f325000: rx timeout, send abort [ 542.617371][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f325400: abort rx timeout. Force session deactivation [ 542.631008][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f325000: abort rx timeout. Force session deactivation [ 542.896303][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.030094][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.154206][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.247125][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.265894][ T894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.054699][ C1] sched: DL replenish lagged too much [ 547.378068][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.784537][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.803610][T27204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9509'. [ 547.815280][T27207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9510'. [ 547.833910][T27207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9510'. [ 547.873843][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.176319][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 150 seconds [ 548.187185][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 150 seconds [ 548.198668][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 150 seconds [ 548.210054][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 150 seconds [ 548.465033][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9513'. [ 548.566823][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.578936][T27233] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9518'. [ 548.682693][T27220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9513'. [ 548.756861][T27229] netlink: 'syz.2.9518': attribute type 29 has an invalid length. [ 548.893248][T27231] netlink: 'syz.2.9518': attribute type 29 has an invalid length. [ 549.031462][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9519'. [ 549.801895][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.058564][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.999530][T27303] netlink: 'syz.3.9532': attribute type 1 has an invalid length. [ 552.008600][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.206018][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.282194][T27303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.583971][T27311] IPVS: Scheduler module ip_vs_sip not found [ 552.957491][T27305] bond6: (slave geneve2): making interface the new active one [ 552.982221][T27305] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 553.089301][T27315] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 553.215111][ T1111] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 553.344568][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.357727][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.453050][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.530017][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.727234][T27333] netlink: 'syz.4.9540': attribute type 1 has an invalid length. [ 553.821471][T27333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9540'. [ 554.057349][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9543'. [ 554.547965][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.851528][T27346] ip6tnl3: entered promiscuous mode [ 554.894138][T27346] ip6tnl3: entered allmulticast mode [ 555.008304][T27367] netlink: 320 bytes leftover after parsing attributes in process `syz.1.9549'. [ 555.707337][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.132752][T27389] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9559'. [ 556.234667][T27390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9559'. [ 556.340633][T27394] "syz.2.9561" (27394) uses obsolete ecb(arc4) skcipher [ 556.868131][T14567] bond4: (slave bridge0): link status definitely down, disabling slave [ 556.896129][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.919720][T14567] bond4: now running without any active interface! [ 557.459317][T27401] xt_hashlimit: size too large, truncated to 1048576 [ 557.767482][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.767555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.127092][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.251507][T27417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9568'. [ 559.287758][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.924367][T27419] syzkaller1: entered promiscuous mode [ 559.931416][T27419] syzkaller1: entered allmulticast mode [ 560.342142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.353712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.382901][T27443] netlink: 'syz.1.9577': attribute type 1 has an invalid length. [ 560.426012][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.444992][T27443] netlink: 'syz.1.9577': attribute type 1 has an invalid length. [ 561.607353][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.625523][T27493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9594'. [ 562.746110][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.949505][T27497] netlink: 'syz.1.9595': attribute type 1 has an invalid length. [ 563.190375][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 563.526973][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.901121][T27498] bond12: (slave gretap2): making interface the new active one [ 563.916061][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.956941][T27498] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 564.628282][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9602'. [ 565.088054][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.053112][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9602'. [ 566.070333][T27529] syzkaller1: entered promiscuous mode [ 566.076515][T27529] syzkaller1: entered allmulticast mode [ 566.227669][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.314646][T27536] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9606'. [ 567.337323][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.371830][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.506018][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.286603][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.438030][T27584] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 569.673915][T27594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9624'. [ 569.690875][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.637663][ C1] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 570.870725][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.319079][T27622] syzkaller0: entered promiscuous mode [ 571.385092][T27622] syzkaller0: entered allmulticast mode [ 572.046394][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.195993][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.336001][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.070568][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.464900][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.598004][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.727737][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.249499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.276235][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 180 seconds [ 578.287899][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 180 seconds [ 578.299497][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 180 seconds [ 578.310741][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 180 seconds [ 578.328203][ T4994] udevd[4994]: worker [5640] /devices/virtual/block/nbd2 timeout; kill it [ 578.359497][ T4994] udevd[4994]: seq 18983 '/devices/virtual/block/nbd2' killed [ 578.887758][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.049977][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.176901][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.527220][T27695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.979822][T27707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9658'. [ 581.109308][T27707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9658'. [ 581.216275][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.378326][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.040181][T27697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.518276][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.906015][T27746] netlink: 'syz.0.9668': attribute type 1 has an invalid length. [ 584.058766][T27746] bond8: entered promiscuous mode [ 584.080698][T27746] bond8: entered allmulticast mode [ 584.099002][T27746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.211184][T27748] macvlan2: entered promiscuous mode [ 584.238937][T27748] macvlan2: entered allmulticast mode [ 584.283858][T27748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.676042][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.713338][T27762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9672'. [ 585.806982][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.939739][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.187775][T27740] bridge0: entered promiscuous mode [ 586.204018][T27740] bridge0: entered allmulticast mode [ 586.905961][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.401359][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9675'. [ 588.026624][T14565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.098120][T27756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.505585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.183900][T27805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9682'. [ 589.226117][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.881159][T27800] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.9683:27800 [ 590.367456][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.496061][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.688984][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.596043][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.695991][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.815979][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.915952][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.016008][T22235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.306287][T27828] syzkaller1: entered promiscuous mode [ 597.354546][T27828] syzkaller1: entered allmulticast mode [ 597.447121][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.129683][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.306102][T14567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.366036][T14569] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 600.491131][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fb4a400: rx timeout, send abort [ 600.935518][T27846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.993958][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fb49c00: rx timeout, send abort [ 601.013708][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fb4a400: abort rx timeout. Force session deactivation [ 601.520594][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801fb49c00: abort rx timeout. Force session deactivation [ 608.968244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.977612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.960994][ T49] block nbd2: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 210 seconds [ 610.986404][ T49] block nbd2: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 210 seconds [ 611.010974][ T49] block nbd2: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 210 seconds [ 611.083654][ T49] block nbd2: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 210 seconds [ 629.472090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.180170][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.883506][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 633.640601][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.176026][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.066536][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.886342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.101645][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 698.077874][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.260635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.269950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.170695][T24042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.370732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.975639][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 715.982632][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27889/1:b..l [ 715.991150][ C0] rcu: (detected by 0, t=10502 jiffies, g=124833, q=705 ncpus=2) [ 715.998973][ C0] task:syz.1.9704 state:R running task stack:26752 pid:27889 tgid:27878 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 716.013625][ C0] Call Trace: [ 716.016924][ C0] [ 716.019877][ C0] __schedule+0x17b4/0x5680 [ 716.024415][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 716.029631][ C0] ? __pfx___schedule+0x10/0x10 [ 716.034487][ C0] ? nlmon_xmit+0xb0/0x100 [ 716.038928][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 716.044315][ C0] preempt_schedule_common+0x82/0xd0 [ 716.049611][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 716.054746][ C0] preempt_schedule_thunk+0x16/0x30 [ 716.059972][ C0] __local_bh_enable_ip+0xe1/0x130 [ 716.065095][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 716.070224][ C0] __dev_queue_xmit+0x1fe5/0x3950 [ 716.075256][ C0] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 716.080383][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 716.085523][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 716.090914][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 716.095973][ C0] ? skb_clone+0x246/0x3a0 [ 716.100410][ C0] __netlink_deliver_tap+0x5ad/0x850 [ 716.105717][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.110928][ C0] netlink_deliver_tap+0x19c/0x1b0 [ 716.116047][ C0] netlink_unicast+0x730/0x8e0 [ 716.120830][ C0] netlink_sendmsg+0x813/0xb40 [ 716.125619][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.130922][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 716.135875][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.141172][ C0] ____sys_sendmsg+0x972/0x9f0 [ 716.145946][ C0] ? __might_fault+0xaf/0x130 [ 716.150640][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.155944][ C0] ? import_iovec+0x73/0xa0 [ 716.160465][ C0] ___sys_sendmsg+0x2a5/0x360 [ 716.165155][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 716.170107][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.175320][ C0] ? futex_wait+0x2a2/0x390 [ 716.179863][ C0] ? __fget_files+0x2a/0x420 [ 716.184456][ C0] ? __fget_files+0x3a0/0x420 [ 716.189148][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 716.194099][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.199579][ C0] ? rcu_is_watching+0x15/0xb0 [ 716.204364][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.210453][ C0] do_syscall_64+0x15f/0xf80 [ 716.215053][ C0] ? trace_irq_disable+0x3b/0x140 [ 716.220090][ C0] ? clear_bhb_loop+0x40/0x90 [ 716.224778][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.230675][ C0] RIP: 0033:0x7fd28a39cdd9 [ 716.235093][ C0] RSP: 002b:00007fd2885f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.243516][ C0] RAX: ffffffffffffffda RBX: 00007fd28a616180 RCX: 00007fd28a39cdd9 [ 716.251496][ C0] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000006 [ 716.259479][ C0] RBP: 00007fd28a432d69 R08: 0000000000000000 R09: 0000000000000000 [ 716.267457][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.275435][ C0] R13: 00007fd28a616218 R14: 00007fd28a616180 R15: 00007fff94630a78 [ 716.283448][ C0] [ 716.286472][ C0] rcu: rcu_preempt kthread starved for 389 jiffies! g124833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 716.297584][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 716.307558][ C0] rcu: RCU grace-period kthread stack dump: [ 716.313450][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 716.326951][ C0] Call Trace: [ 716.330231][ C0] [ 716.333172][ C0] __schedule+0x17b4/0x5680 [ 716.337680][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 716.342655][ C0] ? __pfx___schedule+0x10/0x10 [ 716.347521][ C0] ? schedule+0x90/0x360 [ 716.351768][ C0] schedule+0x164/0x360 [ 716.355932][ C0] schedule_timeout+0x158/0x2c0 [ 716.360798][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 716.366182][ C0] ? __pfx_process_timeout+0x10/0x10 [ 716.371480][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 716.377296][ C0] ? prepare_to_swait_event+0x340/0x370 [ 716.382861][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 716.387722][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 716.392927][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 716.397695][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 716.403857][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 716.409142][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 716.414350][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 716.420165][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 716.424763][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 716.429962][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 716.435775][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 716.440728][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 716.445766][ C0] kthread+0x388/0x470 [ 716.449849][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 716.455048][ C0] ? __pfx_kthread+0x10/0x10 [ 716.459649][ C0] ret_from_fork+0x514/0xb70 [ 716.464245][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 716.469358][ C0] ? __switch_to+0xc79/0x1410 [ 716.474050][ C0] ? __pfx_kthread+0x10/0x10 [ 716.478649][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.483430][ C0] [ 716.486451][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 716.492780][ C0] Sending NMI from CPU 0 to CPUs 1: [ 716.497987][ C1] NMI backtrace for cpu 1 [ 716.498015][ C1] CPU: 1 UID: 0 PID: 22730 Comm: kworker/R-bond4 Not tainted syzkaller #0 PREEMPT(full) [ 716.498048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 716.498066][ C1] Workqueue: 0x0 (bond4) [ 716.498102][ C1] RIP: 0010:lock_release+0x111/0x3c0 [ 716.498135][ C1] Code: 24 83 f8 32 0f 83 2a 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 a4 49 06 0a 44 89 64 24 14 <45> 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d [ 716.498161][ C1] RSP: 0018:ffffc90000a08308 EFLAGS: 00000046 [ 716.498184][ C1] RAX: 0000000000000001 RBX: 0000000000000014 RCX: 0000000080010101 [ 716.498204][ C1] RDX: 0000000000000001 RSI: ffff8880b8728298 RDI: ffff888056ce8c30 [ 716.498225][ C1] RBP: ffff888056ce8c30 R08: ffff888056ce8007 R09: 1ffff1100ad9d000 [ 716.498247][ C1] R10: dffffc0000000000 R11: ffffed100ad9d001 R12: 0000000000000004 [ 716.498268][ C1] R13: 0000000000000004 R14: ffff8880b8728298 R15: ffff888056ce8000 [ 716.498289][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 716.498314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.498335][ C1] CR2: 00007feac0ae6ff8 CR3: 000000007f1e8000 CR4: 00000000003526f0 [ 716.498358][ C1] Call Trace: [ 716.498364][ C1] [ 716.498370][ C1] ? __sysvec_apic_timer_interrupt+0x102/0x430 [ 716.498392][ C1] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 716.498410][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 716.498429][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 716.498445][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.498460][ C1] RIP: 0010:unwind_next_frame+0x1c6/0x2550 [ 716.498479][ C1] Code: 24 10 74 08 4c 89 ff e8 d8 03 ba 00 4d 8b 27 48 83 f3 01 48 c7 c2 20 a5 c9 8b 49 29 dc 0f 84 b2 02 00 00 49 81 fc 00 00 00 81 <0f> 92 c0 49 81 fc e8 eb ab 8b 0f 93 c1 08 c1 0f 85 05 01 00 00 48 [ 716.498490][ C1] RSP: 0018:ffffc90000a08478 EFLAGS: 00000202 [ 716.498502][ C1] RAX: 1ffff920001410be RBX: 0000000000000001 RCX: 0000000080000101 [ 716.498512][ C1] RDX: ffffffff8bc9a520 RSI: ffffffff8c28abc0 RDI: ffffffff8c28ab80 [ 716.498523][ C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 716.498533][ C1] R10: ffffc90000a085a8 R11: fffff520001410c1 R12: ffffffff81770cd6 [ 716.498544][ C1] R13: 1ffff920001410b5 R14: ffffc90000a085a8 R15: ffffc90000a085f0 [ 716.498555][ C1] ? __unwind_start+0xf6/0x760 [ 716.498573][ C1] ? unwind_next_frame+0xa6/0x2550 [ 716.498599][ C1] ? unwind_next_frame+0xd5/0x2550 [ 716.498618][ C1] ? unwind_next_frame+0xa6/0x2550 [ 716.498634][ C1] ? get_stack_info_noinstr+0x45/0x130 [ 716.498655][ C1] ? __unwind_start+0xf7/0x760 [ 716.498673][ C1] __unwind_start+0x5b8/0x760 [ 716.498692][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 716.498714][ C1] arch_stack_walk+0xe3/0x150 [ 716.498733][ C1] ? __unwind_start+0xf7/0x760 [ 716.498751][ C1] stack_trace_save+0xa9/0x100 [ 716.498771][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 716.498792][ C1] ? stack_depot_save_flags+0x33/0x810 [ 716.498810][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 716.498828][ C1] kasan_save_track+0x3e/0x80 [ 716.498868][ C1] __kasan_slab_alloc+0x6c/0x80 [ 716.498889][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 716.498909][ C1] ? __alloc_skb+0x27d/0x7d0 [ 716.498924][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 716.498945][ C1] __alloc_skb+0x27d/0x7d0 [ 716.498962][ C1] skb_copy+0x188/0x800 [ 716.498986][ C1] can_can_gw_rcv+0x46d/0xf70 [ 716.499004][ C1] ? lock_acquire+0x106/0x350 [ 716.499019][ C1] ? can_receive+0x16c/0x440 [ 716.499035][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 716.499053][ C1] can_rcv_filter+0x126/0x7a0 [ 716.499067][ C1] ? can_receive+0x16c/0x440 [ 716.499081][ C1] can_receive+0x2c6/0x440 [ 716.499096][ C1] can_rcv+0x1f9/0x330 [ 716.499109][ C1] ? __pfx_can_rcv+0x10/0x10 [ 716.499122][ C1] ? process_backlog+0x3eb/0x1950 [ 716.499138][ C1] process_backlog+0xc66/0x1950 [ 716.499161][ C1] __napi_poll+0xae/0x340 [ 716.499174][ C1] ? skb_defer_free_flush+0x233/0x260 [ 716.499190][ C1] net_rx_action+0x627/0xf70 [ 716.499211][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 716.499225][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 716.499249][ C1] ? net_tx_action+0x5b6/0xc30 [ 716.499265][ C1] ? net_tx_action+0xbfb/0xc30 [ 716.499282][ C1] handle_softirqs+0x22a/0x840 [ 716.499299][ C1] ? __irq_exit_rcu+0xca/0x220 [ 716.499316][ C1] __irq_exit_rcu+0xca/0x220 [ 716.499330][ C1] irq_exit_rcu+0x9/0x30 [ 716.499344][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 716.499360][ C1] [ 716.499365][ C1] [ 716.499370][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.499385][ C1] RIP: 0010:worker_attach_to_pool+0x18f/0x3a0 [ 716.499402][ C1] Code: bd 00 00 00 00 00 fc ff df 80 3c 28 00 74 08 4c 89 e7 e8 24 da a1 00 49 8b 04 24 4c 8d 60 18 4c 89 e1 48 c1 e9 03 0f b6 0c 29 <84> c9 0f 85 e5 01 00 00 41 80 3c 24 00 74 11 48 89 c3 e8 fa 9e 36 [ 716.499414][ C1] RSP: 0018:ffffc9000d08fc88 EFLAGS: 00000a06 [ 716.499426][ C1] RAX: ffff88813fe7ad00 RBX: 0000000000000006 RCX: 0000000000000000 [ 716.499435][ C1] RDX: ffff888056ce8000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 716.499445][ C1] RBP: dffffc0000000000 R08: ffffffff9030a2f7 R09: 1ffffffff206145e [ 716.499456][ C1] R10: dffffc0000000000 R11: fffffbfff206145f R12: ffff88813fe7ad18 [ 716.499466][ C1] R13: ffff88801aea3000 R14: ffff88808cb66a00 R15: ffff888056ce8000 [ 716.499484][ C1] ? worker_attach_to_pool+0x137/0x3a0 [ 716.499501][ C1] rescuer_thread+0x35c/0x1130 [ 716.499521][ C1] ? rescuer_thread+0xbb/0x1130 [ 716.499545][ C1] kthread+0x388/0x470 [ 716.499562][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 716.499577][ C1] ? __pfx_kthread+0x10/0x10 [ 716.499599][ C1] ret_from_fork+0x514/0xb70 [ 716.499615][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 716.499630][ C1] ? __switch_to+0xc79/0x1410 [ 716.499651][ C1] ? __pfx_kthread+0x10/0x10 [ 716.499669][ C1] ret_from_fork_asm+0x1a/0x30 [ 716.499693][ C1]