last executing test programs: 7.001426853s ago: executing program 0 (id=20765): unshare(0x8040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 6.770295335s ago: executing program 0 (id=20769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000024c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x1, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6.507445893s ago: executing program 4 (id=20770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x2, 0x80805, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 6.499839676s ago: executing program 0 (id=20771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) close(0x3) 6.252819054s ago: executing program 0 (id=20774): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541fa1ab280102000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6.041672762s ago: executing program 4 (id=20775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) 5.977935305s ago: executing program 0 (id=20777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000062) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 5.657416541s ago: executing program 2 (id=20780): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x38, 0x0, 0x4, 0x6, 0x20, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x836e2dfbbd4e98a3, 0x80, 0x80000001, 0x9}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbc6", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x71}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) 4.855256136s ago: executing program 0 (id=20785): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="af694008a73f28", 0x7}], 0x1}, 0x4) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0x9, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) 2.970024305s ago: executing program 2 (id=20788): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 2.94853355s ago: executing program 4 (id=20789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) 2.761324182s ago: executing program 2 (id=20792): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 2.478065611s ago: executing program 3 (id=20794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d107000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.3614882s ago: executing program 3 (id=20796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2800009, 0x31, r0, 0x9cd40000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0xd8a, 0x10000}) 2.261507827s ago: executing program 3 (id=20797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="bad3300200000000000000ea0756a85d86dde4318d226dbb4117e56b5c1adb6cecc2", 0x22, 0x840, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0xdc, 0x6, @broadcast}, 0x14) 2.101891094s ago: executing program 4 (id=20798): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 2.088504285s ago: executing program 2 (id=20799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350602877", 0x1a}], 0x4) 1.943349568s ago: executing program 4 (id=20800): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x800) r1 = socket$inet(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) 1.771053632s ago: executing program 3 (id=20802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x3}, 0x2000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32, @ANYBLOB="040008"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 1.302304079s ago: executing program 1 (id=20803): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r3) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) 1.214788702s ago: executing program 2 (id=20804): setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x6, 0x4a3, 0xdb4, 0x4, 0xffff0001]}, &(0x7f0000000240)=0x54) 1.178185581s ago: executing program 3 (id=20805): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xf9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x30}], 0x1}, 0x894) 1.15804774s ago: executing program 1 (id=20806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.015316374s ago: executing program 1 (id=20807): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x10) close(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 678.696625ms ago: executing program 1 (id=20808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000d4e97f49b5b754baebaea54b76", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x3fd, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 667.287981ms ago: executing program 4 (id=20809): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) epoll_create(0x1ff) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 612.223049ms ago: executing program 3 (id=20810): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 401.220929ms ago: executing program 2 (id=20811): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) unshare(0x40000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 299.718894ms ago: executing program 1 (id=20812): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 0s ago: executing program 1 (id=20813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffdfdf8, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0xe3f0, 0x6, 0x3, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) kernel console output (not intermixed with test programs): as an active interface with an up link [ 823.888810][T12179] dummy0: Caught tx_queue_len zero misconfig [ 824.039658][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.077164][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.089129][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.100833][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.112220][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.123525][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.135769][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.149736][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.161000][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.173390][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.184901][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.206226][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.226647][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.239819][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.251856][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.263238][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.275188][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.286406][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.298284][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.334187][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.350278][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.361524][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.372887][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.384219][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.395893][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.407032][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.418148][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.429567][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.440695][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.452305][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.510651][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.537447][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.612420][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.650136][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.683544][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.717395][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.728515][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.758713][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.770777][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.786434][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.799051][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.842695][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.899566][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.003540][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17923'. [ 825.399359][T12111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.947124][T12264] lo speed is unknown, defaulting to 1000 [ 826.041244][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17946'. [ 826.064734][T26043] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.079599][T26043] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.097829][T26043] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.117694][T26043] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.386087][T12264] wg1 speed is unknown, defaulting to 1000 [ 826.934754][T12304] netlink: 'syz.2.17957': attribute type 2 has an invalid length. [ 826.942882][T12304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17957'. [ 827.552743][T12324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 827.681952][T12331] netlink: 'syz.4.17968': attribute type 1 has an invalid length. [ 827.814748][T12331] 8021q: adding VLAN 0 to HW filter on device bond9 [ 828.029308][T12335] bond9: (slave geneve4): making interface the new active one [ 828.047218][T12335] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 828.061112][ T150] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.109209][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17975'. [ 828.136208][ T150] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.160051][ T150] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.216985][ T150] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 828.256433][T12351] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17976'. [ 828.269855][T12351] netlink: Unknown conntrack attr (0) [ 829.077823][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17990'. [ 829.099403][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17990'. [ 829.128412][T12387] netlink: 'syz.2.17990': attribute type 6 has an invalid length. [ 829.152097][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17990'. [ 829.162226][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17990'. [ 829.193400][T12387] netlink: 'syz.2.17990': attribute type 6 has an invalid length. [ 829.311671][T12392] netlink: 'syz.4.17987': attribute type 1 has an invalid length. [ 829.797944][T12428] netlink: 'syz.2.18009': attribute type 1 has an invalid length. [ 829.839024][T12428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.883576][T12428] bond0: (slave geneve5): making interface the new active one [ 829.892879][T12428] bond0: (slave geneve5): Enslaving as an active interface with an up link [ 829.917385][ T150] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 829.944774][ T150] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 829.975191][ T150] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 829.997475][ T150] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 830.140449][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18017'. [ 830.150057][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18017'. [ 830.209876][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18016'. [ 830.242245][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18016'. [ 830.400989][T12460] netlink: 'syz.1.18023': attribute type 1 has an invalid length. [ 830.441733][T12460] 8021q: adding VLAN 0 to HW filter on device bond13 [ 830.988085][T12493] netlink: 'syz.4.18039': attribute type 11 has an invalid length. [ 831.005610][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18039'. [ 831.036704][T12493] netlink: 'syz.4.18039': attribute type 11 has an invalid length. [ 831.065913][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18039'. [ 831.436355][T12512] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18047'. [ 831.951654][T12532] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.18054'. [ 831.989416][T12528] lo speed is unknown, defaulting to 1000 [ 832.349831][T12528] wg1 speed is unknown, defaulting to 1000 [ 832.826931][T12561] netlink: 7 bytes leftover after parsing attributes in process `syz.4.18065'. [ 833.067437][T12573] netlink: 'syz.4.18072': attribute type 39 has an invalid length. [ 833.092319][T12574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18071'. [ 833.867291][T12603] sit2: entered promiscuous mode [ 834.251264][T12621] syzkaller1: entered promiscuous mode [ 834.257234][T12621] syzkaller1: entered allmulticast mode [ 835.224768][T12652] netlink: 'syz.2.18106': attribute type 9 has an invalid length. [ 835.232656][T12652] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.18106'. [ 835.723037][T12682] netlink: 'syz.3.18117': attribute type 1 has an invalid length. [ 835.732359][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18117'. [ 835.932405][T12685] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 835.940855][T12685] syzkaller1: linktype set to 260 [ 836.533594][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18130'. [ 838.569022][T12774] pim6reg1: entered promiscuous mode [ 838.583308][T12774] pim6reg1: entered allmulticast mode [ 838.910703][T12792] nbd: couldn't find a device at index 0 [ 838.993898][T12794] lo speed is unknown, defaulting to 1000 [ 839.042992][T12796] netlink: 'syz.3.18158': attribute type 30 has an invalid length. [ 839.377185][T12794] wg1 speed is unknown, defaulting to 1000 [ 839.975297][T12818] syzkaller1: entered promiscuous mode [ 839.981206][T12818] syzkaller1: entered allmulticast mode [ 840.031835][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.060950][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.076210][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.099403][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.119052][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.146131][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.180596][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18170'. [ 840.840974][T12839] syzkaller1: entered promiscuous mode [ 840.850427][T12839] syzkaller1: entered allmulticast mode [ 841.416102][T12874] syzkaller1: entered promiscuous mode [ 841.421877][T12874] syzkaller1: entered allmulticast mode [ 841.451031][T12874] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 842.050634][T12908] __nla_validate_parse: 8 callbacks suppressed [ 842.050665][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18203'. [ 842.432939][T12932] netlink: 'syz.2.18213': attribute type 7 has an invalid length. [ 842.456876][T12932] netlink: 'syz.2.18213': attribute type 7 has an invalid length. [ 842.500303][T12936] netlink: 'syz.3.18215': attribute type 6 has an invalid length. [ 842.529274][T12936] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.18215'. [ 842.814647][T12953] netlink: 'syz.1.18224': attribute type 1 has an invalid length. [ 842.851836][T12953] 8021q: adding VLAN 0 to HW filter on device bond14 [ 842.869444][T12956] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.18223'. [ 843.518020][T12990] atomic_op ffff88807f28d998 conn xmit_atomic 0000000000000000 [ 844.105294][T13019] netlink: 'syz.1.18254': attribute type 9 has an invalid length. [ 844.113499][T13019] netlink: 'syz.1.18254': attribute type 11 has an invalid length. [ 844.133495][T13019] netlink: 'syz.1.18254': attribute type 12 has an invalid length. [ 844.161295][T13019] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.18254'. [ 844.179775][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18254'. [ 844.769983][T13053] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.18268'. [ 845.114868][T13071] netlink: 'syz.0.18277': attribute type 2 has an invalid length. [ 845.145411][T13071] netlink: 'syz.0.18277': attribute type 2 has an invalid length. [ 846.231703][T13131] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.18304'. [ 846.273528][T13131] netlink: Unknown conntrack attr (type=2304, max=9) [ 846.836285][T13163] netlink: 176 bytes leftover after parsing attributes in process `syz.3.18314'. [ 847.988276][T13202] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 848.004640][T13202] bond9: (slave lo): Enslaving as an active interface with an up link [ 848.013861][T13202] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 849.372662][T13136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.591910][T13230] "syz.1.18345" (13230) uses obsolete ecb(arc4) skcipher [ 850.655089][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18363'. [ 850.668420][T13274] netlink: 'syz.4.18363': attribute type 30 has an invalid length. [ 850.786071][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18363'. [ 850.810472][T13274] netlink: 'syz.4.18363': attribute type 30 has an invalid length. [ 851.071483][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18372'. [ 851.823607][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18377'. [ 851.843408][T13312] netlink: 121 bytes leftover after parsing attributes in process `syz.2.18377'. [ 852.051012][T13318] syzkaller1: entered promiscuous mode [ 852.065251][T13318] syzkaller1: entered allmulticast mode [ 852.082869][T13320] syzkaller1: entered promiscuous mode [ 852.089288][T13320] syzkaller1: entered allmulticast mode [ 852.316672][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18385'. [ 852.340046][T13331] veth0: entered promiscuous mode [ 852.354994][T13331] bond0: entered promiscuous mode [ 852.360099][T13331] geneve5: entered promiscuous mode [ 852.380834][T13330] bond0: left promiscuous mode [ 852.391555][T13330] geneve5: left promiscuous mode [ 852.397284][T13330] veth0: left promiscuous mode [ 852.834412][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18398'. [ 853.237784][T13390] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.18408'. [ 853.260176][T13390] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 853.301683][T13394] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 853.312417][T13394] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 853.623743][T13410] syzkaller1: entered promiscuous mode [ 853.629300][T13410] syzkaller1: entered allmulticast mode [ 853.979502][T13428] syzkaller1: entered promiscuous mode [ 853.993505][T13428] syzkaller1: entered allmulticast mode [ 854.239734][T13440] netlink: 'syz.2.18430': attribute type 10 has an invalid length. [ 854.263412][T13440] netlink: 'syz.2.18430': attribute type 10 has an invalid length. [ 854.299299][T13444] lo: Caught tx_queue_len zero misconfig [ 854.625961][T13458] lo speed is unknown, defaulting to 1000 [ 854.926368][T13471] syzkaller1: entered promiscuous mode [ 854.932198][T13471] syzkaller1: entered allmulticast mode [ 855.023415][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18444'. [ 855.149272][T13458] wg1 speed is unknown, defaulting to 1000 [ 855.848198][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18459'. [ 855.888347][T13504] gtp3: entered promiscuous mode [ 855.943410][T13504] gtp3: entered allmulticast mode [ 856.406878][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18464'. [ 856.419339][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18464'. [ 856.785578][T13530] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.18470'. [ 857.228201][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18475'. [ 857.313039][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18475'. [ 857.574761][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18480'. [ 857.817299][T13565] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.18483'. [ 857.955618][T13569] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.18486'. [ 859.580738][T13577] netlink: 'syz.0.18488': attribute type 1 has an invalid length. [ 859.589733][T13577] netlink: 352 bytes leftover after parsing attributes in process `syz.0.18488'. [ 859.613578][T13577] netlink: 'syz.0.18488': attribute type 1 has an invalid length. [ 859.778024][T13595] macsec0: entered allmulticast mode [ 859.784207][T13595] dummy0: entered allmulticast mode [ 859.794128][T13595] dummy0: left allmulticast mode [ 863.244221][T13747] netlink: 'syz.1.18552': attribute type 1 has an invalid length. [ 863.514780][T13750] bond15: (slave bridge6): making interface the new active one [ 863.549013][T13750] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 864.741841][T13791] __nla_validate_parse: 2 callbacks suppressed [ 864.741864][T13791] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.18569'. [ 865.125616][T13797] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.155156][T13797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.198974][T13797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 865.315738][T13797] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.356415][T13797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.388151][T13797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 865.600604][T13797] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.640653][T13797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.675484][T13797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 865.800730][T13797] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.823309][T13797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.833437][T13797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 866.011408][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.043940][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 866.052280][ T37] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 866.170217][T11606] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.185175][T13814] lo speed is unknown, defaulting to 1000 [ 866.191156][T11606] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 866.209536][T11606] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 866.245504][ T995] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.259608][ T995] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 866.280760][ T995] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 866.360171][T12245] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.374619][T12245] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 866.394241][T12245] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 866.853803][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18586'. [ 866.937466][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18587'. [ 867.017203][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18587'. [ 867.026908][T13814] wg1 speed is unknown, defaulting to 1000 [ 867.034830][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18587'. [ 867.037294][T13821] lo speed is unknown, defaulting to 1000 [ 867.232650][T13839] syzkaller1: entered promiscuous mode [ 867.242510][T13839] syzkaller1: entered allmulticast mode [ 867.256961][T13841] GUP no longer grows the stack in syz.1.18590 (13841): 200000003000-20000000a000 (200000001000) [ 867.313897][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.1.18590 Not tainted syzkaller #0 PREEMPT(full) [ 867.313932][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.313947][T13841] Call Trace: [ 867.313956][T13841] [ 867.313966][T13841] dump_stack_lvl+0xe8/0x150 [ 867.314006][T13841] __get_user_pages+0x2453/0x29d0 [ 867.314044][T13841] ? __lock_acquire+0x6b5/0x2cf0 [ 867.314144][T13841] ? __gup_longterm_locked+0xc4e/0x1630 [ 867.314179][T13841] ? down_read_killable+0x1bb/0x340 [ 867.314228][T13841] __gup_longterm_locked+0xdcf/0x1630 [ 867.314292][T13841] gup_fast_fallback+0x1d82/0x22e0 [ 867.314360][T13841] ? __pfx_gup_fast_fallback+0x10/0x10 [ 867.314393][T13841] ? futex_unqueue+0x22/0x240 [ 867.314432][T13841] ? futex_unqueue+0x22/0x240 [ 867.314457][T13841] ? is_valid_gup_args+0x11f/0x200 [ 867.314492][T13841] ? get_user_pages_fast+0x4d/0xb0 [ 867.314528][T13841] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 867.314641][T13841] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 867.314682][T13841] iov_iter_get_pages2+0x5e/0xa0 [ 867.314710][T13841] __se_sys_vmsplice+0x7b3/0x1490 [ 867.314768][T13841] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 867.314802][T13841] ? __pfx_futex_wait+0x10/0x10 [ 867.314849][T13841] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.314969][T13841] do_syscall_64+0x14d/0xf80 [ 867.314994][T13841] ? trace_irq_disable+0x3b/0x150 [ 867.315027][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.315051][T13841] ? clear_bhb_loop+0x40/0x90 [ 867.315079][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.315101][T13841] RIP: 0033:0x7fa7d759c799 [ 867.315123][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.315142][T13841] RSP: 002b:00007fa7d8502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 867.315167][T13841] RAX: ffffffffffffffda RBX: 00007fa7d7815fa0 RCX: 00007fa7d759c799 [ 867.315190][T13841] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 867.315204][T13841] RBP: 00007fa7d7632c99 R08: 0000000000000000 R09: 0000000000000000 [ 867.315218][T13841] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 867.315231][T13841] R13: 00007fa7d7816038 R14: 00007fa7d7815fa0 R15: 00007ffdbfca8df8 [ 867.315269][T13841] [ 867.946767][T13821] wg1 speed is unknown, defaulting to 1000 [ 868.969402][T13865] netlink: 7 bytes leftover after parsing attributes in process `syz.1.18599'. [ 870.384824][T13909] netlink: 'syz.4.18615': attribute type 4 has an invalid length. [ 870.394473][T13906] lo speed is unknown, defaulting to 1000 [ 870.413671][T13909] netlink: 'syz.4.18615': attribute type 1 has an invalid length. [ 870.421561][T13909] netlink: 15506 bytes leftover after parsing attributes in process `syz.4.18615'. [ 870.857809][T13906] wg1 speed is unknown, defaulting to 1000 [ 871.011262][T13897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 871.049093][T13924] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.333971][T13924] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.420734][T13924] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.522861][T13924] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.653070][ T995] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.774848][ T995] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.834193][T11606] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.961247][T12245] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.162595][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18629'. [ 872.206233][T13946] netlink: 'syz.0.18631': attribute type 12 has an invalid length. [ 872.261892][T13948] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 873.297445][T13979] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18643'. [ 873.351370][T13981] netlink: 'syz.1.18644': attribute type 21 has an invalid length. [ 873.360413][T13981] netlink: 'syz.1.18644': attribute type 22 has an invalid length. [ 873.369127][T13981] netlink: 'syz.1.18644': attribute type 23 has an invalid length. [ 873.383786][T13981] netlink: 136 bytes leftover after parsing attributes in process `syz.1.18644'. [ 873.631617][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18648'. [ 873.778732][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18649'. [ 873.878176][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18649'. [ 873.922644][T14007] netlink: 'syz.3.18654': attribute type 1 has an invalid length. [ 874.052881][T14007] bond10: (slave bridge10): making interface the new active one [ 874.084369][T14007] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 874.142322][T14012] lo speed is unknown, defaulting to 1000 [ 874.646955][T14038] nlmon0: Caught tx_queue_len zero misconfig [ 874.662719][T14012] wg1 speed is unknown, defaulting to 1000 [ 877.066975][T14015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.550786][T14130] lo speed is unknown, defaulting to 1000 [ 877.845718][T14151] netlink: 240 bytes leftover after parsing attributes in process `syz.4.18686'. [ 878.266995][T14130] wg1 speed is unknown, defaulting to 1000 [ 878.422239][T14165] lo speed is unknown, defaulting to 1000 [ 878.534959][T14169] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 879.041495][T14165] wg1 speed is unknown, defaulting to 1000 [ 879.198442][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18708'. [ 879.464250][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18711'. [ 879.507720][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18711'. [ 880.130977][T14220] syzkaller1: entered promiscuous mode [ 880.136805][T14220] syzkaller1: entered allmulticast mode [ 880.478290][T14231] syzkaller1: entered promiscuous mode [ 880.506273][T14231] syzkaller1: entered allmulticast mode [ 881.701849][T14273] lo speed is unknown, defaulting to 1000 [ 882.059783][T14195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.280745][T14273] wg1 speed is unknown, defaulting to 1000 [ 882.364738][T14287] lo speed is unknown, defaulting to 1000 [ 882.886516][T14310] netlink: 'syz.1.18752': attribute type 2 has an invalid length. [ 882.983705][T14287] wg1 speed is unknown, defaulting to 1000 [ 883.046813][T14314] lo speed is unknown, defaulting to 1000 [ 883.110306][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18755'. [ 883.137622][T14318] netlink: 'syz.1.18755': attribute type 1 has an invalid length. [ 883.156735][T14318] netlink: 'syz.1.18755': attribute type 2 has an invalid length. [ 883.305180][T14324] netlink: 'syz.1.18757': attribute type 13 has an invalid length. [ 883.664119][T14314] wg1 speed is unknown, defaulting to 1000 [ 883.811476][T14334] syzkaller1: entered promiscuous mode [ 883.817266][T14334] syzkaller1: entered allmulticast mode [ 885.442911][T14374] ip6gre2: entered promiscuous mode [ 885.449299][T14374] ip6gre2: entered allmulticast mode [ 885.932105][T14397] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.18782'. [ 886.033627][T14403] openvswitch: : Dropping previously announced user features [ 886.099917][T14403] openvswitch: : Dropping previously announced user features [ 886.564643][T14420] syzkaller1: entered promiscuous mode [ 886.585884][T14420] syzkaller1: entered allmulticast mode [ 887.754900][T14466] pim6reg1: entered promiscuous mode [ 887.770650][T14466] pim6reg1: entered allmulticast mode [ 887.828167][T14470] batadv_slave_1: entered promiscuous mode [ 887.845862][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18810'. [ 887.871715][T14470] batadv_slave_1 (unregistering): left promiscuous mode [ 888.462413][T14499] lo speed is unknown, defaulting to 1000 [ 888.490028][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18822'. [ 888.503275][T14500] netlink: 'syz.2.18823': attribute type 1 has an invalid length. [ 888.561632][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18822'. [ 888.592035][T14500] netlink: 'syz.2.18823': attribute type 1 has an invalid length. [ 888.612154][T14496] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 888.906414][T14499] wg1 speed is unknown, defaulting to 1000 [ 889.429090][T14534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18839'. [ 889.440594][T14538] netlink: 'syz.0.18840': attribute type 11 has an invalid length. [ 891.106077][T14615] netlink: 'syz.0.18873': attribute type 1 has an invalid length. [ 891.133824][T14615] netlink: 'syz.0.18873': attribute type 4 has an invalid length. [ 891.157368][T14615] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.18873'. [ 891.536638][T14636] netlink: 220 bytes leftover after parsing attributes in process `syz.0.18881'. [ 891.548075][T14636] netlink: 220 bytes leftover after parsing attributes in process `syz.0.18881'. [ 891.558730][T14636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18881'. [ 891.769474][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18885'. [ 891.815945][T14645] A link change request failed with some changes committed already. Interface gre5 may have been left with an inconsistent configuration, please check. [ 892.128074][T14658] netlink: 'syz.0.18892': attribute type 2 has an invalid length. [ 892.157338][T14658] !©9: entered promiscuous mode [ 892.197717][T14658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18892'. [ 892.537522][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18898'. [ 892.564671][T14671] netlink: 'syz.0.18897': attribute type 1 has an invalid length. [ 892.582398][T14669] team1: entered promiscuous mode [ 892.587853][T14669] team1: entered allmulticast mode [ 892.596411][T14669] 8021q: adding VLAN 0 to HW filter on device team1 [ 892.678091][T14672] team2: entered promiscuous mode [ 892.711411][T14672] team2: entered allmulticast mode [ 892.725692][T14672] 8021q: adding VLAN 0 to HW filter on device team2 [ 893.024054][T14693] nbd: must specify an index to disconnect [ 893.458007][T14720] batman_adv: batadv0: Interface deactivated: vlan0 [ 893.500680][T14721] netlink: 'syz.0.18912': attribute type 13 has an invalid length. [ 893.521362][T14721] netlink: 'syz.0.18912': attribute type 17 has an invalid length. [ 893.604052][T14715] lo speed is unknown, defaulting to 1000 [ 893.632557][T14721] batman_adv: batadv0: Interface activated: vlan0 [ 893.718300][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.755618][T14721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.780185][T12245] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.789556][T12245] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.806957][T12245] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.838710][T12245] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.086785][T14715] wg1 speed is unknown, defaulting to 1000 [ 894.617549][T14754] __nla_validate_parse: 1 callbacks suppressed [ 894.617570][T14754] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18926'. [ 894.680223][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18928'. [ 895.546418][T14790] batman_adv: batadv0: Interface deactivated: gretap0 [ 895.600400][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.624517][ T37] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 895.653795][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.662593][ T37] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 895.672814][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.682121][ T37] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 895.723262][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.731854][ T37] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 895.868327][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18949'. [ 895.893458][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18949'. [ 896.066724][T14818] netlink: 'syz.1.18952': attribute type 1 has an invalid length. [ 897.018986][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18958'. [ 897.046378][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18958'. [ 897.212632][T14836] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18957'. [ 897.759359][T14854] syzkaller1: entered promiscuous mode [ 897.774322][T14854] syzkaller1: entered allmulticast mode [ 897.979547][T14863] netlink: 'syz.3.18970': attribute type 26 has an invalid length. [ 898.532734][T14881] PKCS7: Unknown OID: [4] (bad) [ 898.543915][T14881] PKCS7: Only support pkcs7_signedData type [ 898.888059][T14901] syzkaller1: entered promiscuous mode [ 898.913656][T14901] syzkaller1: entered allmulticast mode [ 899.654844][T14940] syzkaller1: entered promiscuous mode [ 899.663860][T14940] syzkaller1: entered allmulticast mode [ 900.281343][T14963] clip:clip_setentry: non-CLIP VCC [ 900.354252][T14969] lo speed is unknown, defaulting to 1000 [ 900.485493][T14981] netlink: 'syz.3.19016': attribute type 83 has an invalid length. [ 900.505088][T14980] netlink: 'syz.2.19018': attribute type 21 has an invalid length. [ 900.513098][T14980] netlink: 'syz.2.19018': attribute type 22 has an invalid length. [ 900.525173][T14980] netlink: 'syz.2.19018': attribute type 23 has an invalid length. [ 900.534360][T14980] netlink: 'syz.2.19018': attribute type 25 has an invalid length. [ 900.542614][T14980] netlink: 96 bytes leftover after parsing attributes in process `syz.2.19018'. [ 900.614763][T14985] sctp: [Deprecated]: syz.1.19019 (pid 14985) Use of int in maxseg socket option. [ 900.614763][T14985] Use struct sctp_assoc_value instead [ 901.023415][T14978] lo speed is unknown, defaulting to 1000 [ 901.042317][T14969] wg1 speed is unknown, defaulting to 1000 [ 901.675495][T14978] wg1 speed is unknown, defaulting to 1000 [ 902.813836][T15042] netlink: 1311 bytes leftover after parsing attributes in process `syz.1.19039'. [ 904.511453][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19056'. [ 904.563412][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19056'. [ 904.572884][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19056'. [ 904.686278][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19056'. [ 904.701921][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19056'. [ 904.714370][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19056'. [ 905.451868][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19068'. [ 905.499531][T15122] bridge7: entered promiscuous mode [ 905.507806][T15122] bridge7: left promiscuous mode [ 905.839247][T15101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.118172][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.125566][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.132849][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.140208][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.147520][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.154910][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.162541][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.169960][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.177286][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.184770][T15134] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 906.445561][T15139] lo speed is unknown, defaulting to 1000 [ 907.065721][T15167] delete_channel: no stack [ 907.266181][T15139] wg1 speed is unknown, defaulting to 1000 [ 908.552529][T15207] lo speed is unknown, defaulting to 1000 [ 909.367200][T15207] wg1 speed is unknown, defaulting to 1000 [ 910.301610][T15245] sctp: [Deprecated]: syz.0.19101 (pid 15245) Use of int in maxseg socket option. [ 910.301610][T15245] Use struct sctp_assoc_value instead [ 912.792407][T15284] pim6reg1: entered promiscuous mode [ 912.802153][T15284] pim6reg1: entered allmulticast mode [ 913.271067][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19123'. [ 913.292143][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19123'. [ 913.717546][ T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 50036 - 0 [ 913.741146][ T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 50036 - 0 [ 915.416642][ T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 50036 - 0 [ 915.674793][ T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 50036 - 0 [ 916.129156][T12245] nci: nci_ntf_packet: unknown ntf opcode 0x20b [ 916.854086][T15373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.987364][T15408] lo speed is unknown, defaulting to 1000 [ 917.097961][T15410] net_ratelimit: 3255 callbacks suppressed [ 917.097986][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.113521][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.121439][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.130092][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.137957][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.146241][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.154429][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.163218][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.171750][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.179518][T15410] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 917.872534][T15413] lo speed is unknown, defaulting to 1000 [ 917.901990][T15408] wg1 speed is unknown, defaulting to 1000 [ 918.021936][T15427] 8021q: adding VLAN 0 to HW filter on device .` [ 918.046093][T15427] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.352972][T15417] lo speed is unknown, defaulting to 1000 [ 918.399833][T15413] wg1 speed is unknown, defaulting to 1000 [ 918.570149][T15435] bridge0: port 1(vlan4) entered blocking state [ 918.633608][T15435] bridge0: port 1(vlan4) entered disabled state [ 918.654199][T15435] vlan4: entered allmulticast mode [ 918.673927][T15435] geneve0: entered allmulticast mode [ 918.690607][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19171'. [ 918.707994][T15435] vlan4: entered promiscuous mode [ 918.735307][T15435] geneve0: entered promiscuous mode [ 919.683145][T15446] lo speed is unknown, defaulting to 1000 [ 920.202419][T15417] wg1 speed is unknown, defaulting to 1000 [ 920.791357][T15446] wg1 speed is unknown, defaulting to 1000 [ 923.225422][T15517] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 923.735076][T15535] syzkaller1: entered promiscuous mode [ 923.747591][T15535] syzkaller1: entered allmulticast mode [ 924.069145][T15544] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.19208'. [ 924.170959][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19210'. [ 924.197577][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19210'. [ 924.478375][T15558] pim6reg1: entered promiscuous mode [ 924.484165][T15558] pim6reg1: entered allmulticast mode [ 924.991672][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19225'. [ 925.008655][T11606] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 925.022572][T11606] bond0: now running without any active interface! [ 925.251468][T15565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.388296][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19251'. [ 927.403719][T15673] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 927.409174][T15670] netlink: 'syz.2.19251': attribute type 7 has an invalid length. [ 927.446585][T15670] netlink: 'syz.2.19251': attribute type 8 has an invalid length. [ 927.476402][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19251'. [ 929.406047][T15736] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19276'. [ 929.587695][T15742] netlink: 220 bytes leftover after parsing attributes in process `syz.1.19279'. [ 929.604198][T15742] netlink: 220 bytes leftover after parsing attributes in process `syz.1.19279'. [ 930.508304][T15775] netlink: 'syz.2.19294': attribute type 2 has an invalid length. [ 931.189296][T15796] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19302'. [ 931.199202][T15796] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19302'. [ 931.220864][T11606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.232835][T11606] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.272371][T11606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.305890][T11606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.602425][T15813] netlink: 'syz.2.19308': attribute type 11 has an invalid length. [ 931.615562][T15813] netlink: 'syz.2.19308': attribute type 4 has an invalid length. [ 931.624438][T15813] netlink: 'syz.2.19308': attribute type 5 has an invalid length. [ 931.635136][T15813] netlink: 'syz.2.19308': attribute type 6 has an invalid length. [ 931.649871][T15813] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.19308'. [ 931.774369][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19311'. [ 932.014089][T15826] lo speed is unknown, defaulting to 1000 [ 932.379936][T15826] wg1 speed is unknown, defaulting to 1000 [ 932.706082][T15851] netlink: 7 bytes leftover after parsing attributes in process `syz.0.19325'. [ 932.747228][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19326'. [ 932.764911][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19326'. [ 934.572397][ T37] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.597885][ T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.643861][ T37] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.725345][ T37] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.741905][ T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.751918][ T37] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.760836][ T37] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.770996][ T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.781792][ T37] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.824060][T15897] __nla_validate_parse: 1 callbacks suppressed [ 934.824080][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19339'. [ 934.845280][ T37] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.859725][ T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.881448][ T37] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.959061][T15896] lo speed is unknown, defaulting to 1000 [ 935.116329][T15909] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.19345'. [ 935.357194][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19348'. [ 935.376288][T15896] wg1 speed is unknown, defaulting to 1000 [ 935.722434][T15929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19355'. [ 936.169279][T15943] lo speed is unknown, defaulting to 1000 [ 936.781540][T15943] wg1 speed is unknown, defaulting to 1000 [ 937.226152][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19375'. [ 937.276971][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19375'. [ 937.424140][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19377'. [ 938.120758][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19382'. [ 938.230399][T16001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19383'. [ 938.352465][T16001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19383'. [ 938.380698][T16002] lo speed is unknown, defaulting to 1000 [ 939.019201][T16002] wg1 speed is unknown, defaulting to 1000 [ 939.426687][T16029] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 939.437752][T16029] iwpm_mapping_info_cb: Unable to parse nlmsg [ 939.458137][T16032] lo speed is unknown, defaulting to 1000 [ 939.891413][T16047] __nla_validate_parse: 5 callbacks suppressed [ 939.891436][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19400'. [ 939.927429][T16032] wg1 speed is unknown, defaulting to 1000 [ 940.527626][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19407'. [ 940.588209][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19407'. [ 940.612339][T16067] bond8: (slave lo): Releasing backup interface [ 940.621301][T16067] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 940.690138][T16067] bond0: (slave syz_tun): Releasing backup interface [ 940.774626][T16067] bond0: (slave dummy0): Releasing backup interface [ 940.816649][T16067] bond0: (slave bond_slave_0): Releasing backup interface [ 940.836385][T16067] bond0: (slave bond_slave_1): Releasing backup interface [ 940.858297][T16067] team_slave_0: left allmulticast mode [ 940.884278][T16067] team0: Port device team_slave_0 removed [ 940.891215][T16067] žÿ: left allmulticast mode [ 940.921316][T16067] team0: Port device 76žÿ removed [ 940.927513][T16067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.937122][T16067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.949141][T16067] net_ratelimit: 3256 callbacks suppressed [ 940.949162][T16067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 940.972800][T16070] team0: No ports can be present during mode change [ 941.231075][T16090] syz_tun: entered allmulticast mode [ 941.251737][T16088] syz_tun: left allmulticast mode [ 941.434149][T16095] syzkaller1: entered promiscuous mode [ 941.453131][T16095] syzkaller1: entered allmulticast mode [ 941.476086][T16092] netlink: 'syz.1.19416': attribute type 29 has an invalid length. [ 941.486400][T16092] netlink: 'syz.1.19416': attribute type 29 has an invalid length. [ 941.796476][T16096] lo speed is unknown, defaulting to 1000 [ 941.944959][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19420'. [ 942.144800][T16107] netlink: 'syz.0.19422': attribute type 10 has an invalid length. [ 942.160493][T16107] bond0: (slave wlan1): Opening slave failed [ 942.238347][T16096] wg1 speed is unknown, defaulting to 1000 [ 942.361029][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19425'. [ 942.868570][T16124] netlink: 'syz.2.19428': attribute type 1 has an invalid length. [ 942.929806][T16124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 943.094423][T16128] bond7: (slave gretap2): making interface the new active one [ 943.105665][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19428'. [ 943.167700][T16128] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 943.302443][T16124] bond7 (unregistering): (slave gretap2): Releasing active interface [ 943.354479][T16124] bond7 (unregistering): Released all slaves [ 943.817694][T16145] sctp: [Deprecated]: syz.4.19436 (pid 16145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.817694][T16145] Use struct sctp_sack_info instead [ 944.757418][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19444'. [ 944.954746][T16168] geneve3: entered promiscuous mode [ 945.043351][ T995] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.051737][ T995] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.132783][ T995] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.153815][ T995] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.587942][T16191] netlink: 'syz.0.19455': attribute type 4 has an invalid length. [ 945.607662][T16191] netlink: 'syz.0.19455': attribute type 4 has an invalid length. [ 945.673953][T16191] batman_adv: batadv0: Interface deactivated: vlan0 [ 945.931103][T16198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19458'. [ 947.812734][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19468'. [ 948.612388][T16216] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 948.857128][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19472'. [ 949.003595][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 949.123908][T16252] lo speed is unknown, defaulting to 1000 [ 949.228941][T16256] batman_adv: batadv0: Adding interface: macvtap1 [ 949.236829][T16256] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 949.351443][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19478'. [ 949.381389][T16259] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19478'. [ 949.439951][T16252] wg1 speed is unknown, defaulting to 1000 [ 949.519469][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19479'. [ 949.721103][T16268] netlink: 'syz.1.19481': attribute type 10 has an invalid length. [ 949.736177][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19481'. [ 949.739260][T16266] syzkaller1: entered promiscuous mode [ 949.761654][T16266] syzkaller1: entered allmulticast mode [ 950.355128][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19489'. [ 950.486765][T16291] netlink: 'syz.1.19490': attribute type 4 has an invalid length. [ 950.537070][T16291] netlink: 'syz.1.19490': attribute type 4 has an invalid length. [ 950.714284][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19492'. [ 950.851303][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19495'. [ 950.865418][T16305] netlink: 'syz.4.19495': attribute type 7 has an invalid length. [ 950.874502][T16305] netlink: 'syz.4.19495': attribute type 8 has an invalid length. [ 950.963881][T16307] syzkaller1: entered promiscuous mode [ 950.978412][T16307] syzkaller1: entered allmulticast mode [ 952.445103][T16342] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 952.464486][T16342] bond11 (unregistering): Released all slaves [ 952.755177][T16356] netlink: 'syz.2.19511': attribute type 4 has an invalid length. [ 952.789416][T16356] netlink: 'syz.2.19511': attribute type 4 has an invalid length. [ 952.802405][T16350] __nla_validate_parse: 1 callbacks suppressed [ 952.802428][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19510'. [ 952.826505][ T5903] lo speed is unknown, defaulting to 1000 [ 952.832499][ T5903] sqz0: Port: 1 Link ACTIVE [ 952.837624][T10973] lo speed is unknown, defaulting to 1000 [ 952.875586][ T5903] lo speed is unknown, defaulting to 1000 [ 952.881479][T11606] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.893552][T11606] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.904993][ T5903] sqz0: Port: 1 Link DOWN [ 952.922472][ T5903] lo speed is unknown, defaulting to 1000 [ 952.930268][T16361] xt_hashlimit: size too large, truncated to 1048576 [ 952.937589][T11606] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.953811][T11606] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.990402][T16362] syzkaller1: entered promiscuous mode [ 953.022178][T16362] syzkaller1: entered allmulticast mode [ 953.213453][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19517'. [ 953.394607][T16380] netlink: 'syz.3.19520': attribute type 1 has an invalid length. [ 953.422468][T16380] netlink: 'syz.3.19520': attribute type 22 has an invalid length. [ 953.518757][T16382] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 953.538307][T16381] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 953.840503][T16364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.507194][T16416] syzkaller1: entered promiscuous mode [ 954.518597][T16416] syzkaller1: entered allmulticast mode [ 954.660782][T16422] vcan0: tx address claim with different name [ 954.696141][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19539'. [ 954.718695][T16424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19539'. [ 954.745017][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19539'. [ 954.758175][T16424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19539'. [ 954.914083][T16436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19543'. [ 955.732132][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19552'. [ 956.836187][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19552'. [ 957.695347][T16502] syzkaller1: entered promiscuous mode [ 957.703498][T16502] syzkaller1: entered allmulticast mode [ 958.461495][T16515] bridge_slave_1: Caught tx_queue_len zero misconfig [ 958.663979][T16517] syzkaller1: entered promiscuous mode [ 958.669639][T16517] syzkaller1: entered allmulticast mode [ 960.182840][T16542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.325034][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19581'. [ 961.281972][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19582'. [ 961.511117][T16528] lo speed is unknown, defaulting to 1000 [ 963.174577][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19583'. [ 963.184437][T16528] wg1 speed is unknown, defaulting to 1000 [ 963.204802][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19583'. [ 963.301269][T16562] dummy0: entered promiscuous mode [ 963.306885][T16562] dummy0: entered allmulticast mode [ 963.477200][T16570] lo speed is unknown, defaulting to 1000 [ 963.502619][T16564] netlink: 'syz.4.19585': attribute type 1 has an invalid length. [ 964.090979][T16570] wg1 speed is unknown, defaulting to 1000 [ 964.225409][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19595'. [ 964.327729][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19598'. [ 964.409916][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19600'. [ 964.474832][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19600'. [ 966.298164][T16605] lo speed is unknown, defaulting to 1000 [ 966.309413][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19602'. [ 966.483851][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19604'. [ 966.591435][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19606'. [ 966.743798][T16605] wg1 speed is unknown, defaulting to 1000 [ 966.757027][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19609'. [ 966.981292][T16636] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19612'. [ 967.524004][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19615'. [ 967.683662][T16647] batadv0 (unregistering): left promiscuous mode [ 968.551903][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19624'. [ 968.833954][T16685] netlink: 'syz.1.19625': attribute type 1 has an invalid length. [ 968.981501][T16681] lo speed is unknown, defaulting to 1000 [ 969.095447][T16685] bond17: entered promiscuous mode [ 969.135080][T16685] 8021q: adding VLAN 0 to HW filter on device bond17 [ 969.339097][T16692] bond17: (slave bridge10): making interface the new active one [ 969.351707][T16692] bridge10: entered promiscuous mode [ 969.360814][T16692] bridge10: left promiscuous mode [ 969.659135][T16681] wg1 speed is unknown, defaulting to 1000 [ 970.187309][T16724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19639'. [ 970.287794][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19641'. [ 970.345883][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19643'. [ 971.146129][T11606] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 972.545700][T16795] __nla_validate_parse: 2 callbacks suppressed [ 972.545724][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19663'. [ 973.286413][T16759] lo speed is unknown, defaulting to 1000 [ 973.794237][T16759] wg1 speed is unknown, defaulting to 1000 [ 973.853871][T16813] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19670'. [ 974.222144][T16825] lec:lec_atm_send: lec0: Unknown message type 24113 [ 974.271032][T16821] netlink: 192 bytes leftover after parsing attributes in process `syz.1.19672'. [ 974.347237][T16805] lec:lec_atm_close: lec0: Shut down! [ 974.485611][T16824] lo speed is unknown, defaulting to 1000 [ 974.983652][T16845] netlink: 'syz.0.19676': attribute type 1 has an invalid length. [ 974.995337][T16847] netlink: 'syz.3.19677': attribute type 1 has an invalid length. [ 975.056125][T16845] 8021q: adding VLAN 0 to HW filter on device bond8 [ 975.091157][T16847] 8021q: adding VLAN 0 to HW filter on device bond11 [ 975.116426][T16852] dummy0: left promiscuous mode [ 975.123037][T16852] dummy0: left allmulticast mode [ 975.150348][T16852] bond11: (slave dummy0): making interface the new active one [ 975.206730][T16852] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 975.232175][T16824] wg1 speed is unknown, defaulting to 1000 [ 975.330320][T16855] bond11 (unregistering): (slave dummy0): Releasing active interface [ 975.363392][T16855] bond11 (unregistering): Released all slaves [ 975.391867][T16864] sctp: [Deprecated]: syz.0.19681 (pid 16864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 975.391867][T16864] Use struct sctp_sack_info instead [ 976.515240][T16903] syzkaller0: entered promiscuous mode [ 976.538497][T16903] syzkaller0: entered allmulticast mode [ 976.558511][T16903] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 976.889956][T16912] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.19694'. [ 976.901816][T16893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.021041][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 977.140857][T16916] netlink: 'syz.4.19696': attribute type 4 has an invalid length. [ 977.205357][T16916] netlink: 'syz.4.19696': attribute type 4 has an invalid length. [ 977.803424][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 977.828579][T16934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19702'. [ 978.472423][T16966] gre0: left promiscuous mode [ 978.502790][T16966] gre0: left allmulticast mode [ 978.514098][T16966] syz_tun: left promiscuous mode [ 978.531389][T16966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 978.945792][T16986] netlink: 'syz.3.19725': attribute type 1 has an invalid length. [ 979.021655][T16986] 8021q: adding VLAN 0 to HW filter on device bond11 [ 979.091319][T16988] bond11: (slave gretap4): making interface the new active one [ 979.122973][T16988] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 979.236576][T16993] lo speed is unknown, defaulting to 1000 [ 979.813756][T16993] wg1 speed is unknown, defaulting to 1000 [ 980.296863][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19734'. [ 980.468328][T17017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19737'. [ 980.871178][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19741'. [ 981.244223][T17031] syzkaller1: entered promiscuous mode [ 981.251010][T17031] syzkaller1: entered allmulticast mode [ 981.923563][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19749'. [ 982.043211][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 982.051952][ C0] lec:lec_tx_timeout: lec0 [ 982.056889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 982.312604][T17067] netlink: 'syz.3.19755': attribute type 29 has an invalid length. [ 982.343880][T17069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19756'. [ 982.356407][T17067] netlink: 'syz.3.19755': attribute type 29 has an invalid length. [ 982.376898][T17067] netlink: 'syz.3.19755': attribute type 32 has an invalid length. [ 982.427611][T17065] lo speed is unknown, defaulting to 1000 [ 982.470216][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19758'. [ 982.795650][T17086] syzkaller1: entered promiscuous mode [ 982.827744][T17086] syzkaller1: entered allmulticast mode [ 983.020252][T17065] wg1 speed is unknown, defaulting to 1000 [ 983.642051][T17118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19774'. [ 983.742201][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19774'. [ 984.093281][T17123] syz.3.19776: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 984.128521][T17123] CPU: 1 UID: 0 PID: 17123 Comm: syz.3.19776 Not tainted syzkaller #0 PREEMPT(full) [ 984.128552][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 984.128567][T17123] Call Trace: [ 984.128576][T17123] [ 984.128588][T17123] dump_stack_lvl+0xe8/0x150 [ 984.128629][T17123] warn_alloc+0x249/0x340 [ 984.128658][T17123] ? stack_trace_save+0xa9/0x100 [ 984.128722][T17123] ? __pfx_warn_alloc+0x10/0x10 [ 984.128756][T17123] ? kasan_save_track+0x4f/0x80 [ 984.128778][T17123] ? kasan_save_track+0x3e/0x80 [ 984.128800][T17123] ? __kasan_kmalloc+0x93/0xb0 [ 984.128823][T17123] ? __kmalloc_cache_noprof+0x31c/0x660 [ 984.128846][T17123] ? xskq_create+0x56/0x170 [ 984.128886][T17123] ? xsk_setsockopt+0x54c/0x990 [ 984.128914][T17123] ? do_sock_setsockopt+0x17c/0x1b0 [ 984.128939][T17123] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 984.128961][T17123] ? do_syscall_64+0x14d/0xf80 [ 984.128988][T17123] __vmalloc_node_range_noprof+0x132/0x1730 [ 984.129050][T17123] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.129083][T17123] ? __kasan_kmalloc+0x93/0xb0 [ 984.129115][T17123] vmalloc_user_noprof+0xad/0xe0 [ 984.129140][T17123] ? xskq_create+0xbf/0x170 [ 984.129174][T17123] xskq_create+0xbf/0x170 [ 984.129212][T17123] xsk_init_queue+0x8a/0xe0 [ 984.129247][T17123] xsk_setsockopt+0x54c/0x990 [ 984.129282][T17123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 984.129322][T17123] ? __pfx_aa_sk_perm+0x10/0x10 [ 984.129359][T17123] ? aa_sock_opt_perm+0xff/0x1a0 [ 984.129396][T17123] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 984.129422][T17123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 984.129456][T17123] do_sock_setsockopt+0x17c/0x1b0 [ 984.129486][T17123] __x64_sys_setsockopt+0x13d/0x1b0 [ 984.129518][T17123] do_syscall_64+0x14d/0xf80 [ 984.129541][T17123] ? trace_irq_disable+0x3b/0x150 [ 984.129573][T17123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.129596][T17123] ? clear_bhb_loop+0x40/0x90 [ 984.129624][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.129647][T17123] RIP: 0033:0x7f9fa8b9c799 [ 984.129668][T17123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.129687][T17123] RSP: 002b:00007f9fa9ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 984.129710][T17123] RAX: ffffffffffffffda RBX: 00007f9fa8e15fa0 RCX: 00007f9fa8b9c799 [ 984.129727][T17123] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 984.129741][T17123] RBP: 00007f9fa8c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 984.129755][T17123] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.129769][T17123] R13: 00007f9fa8e16038 R14: 00007f9fa8e15fa0 R15: 00007ffe7c8672c8 [ 984.129806][T17123] [ 984.130945][T17123] Mem-Info: [ 984.380348][T17108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.474355][T17123] active_anon:9490 inactive_anon:11 isolated_anon:0 [ 984.474355][T17123] active_file:2312 inactive_file:40941 isolated_file:0 [ 984.474355][T17123] unevictable:768 dirty:295 writeback:0 [ 984.474355][T17123] slab_reclaimable:13891 slab_unreclaimable:143587 [ 984.474355][T17123] mapped:29287 shmem:1502 pagetables:3542 [ 984.474355][T17123] sec_pagetables:0 bounce:0 [ 984.474355][T17123] kernel_misc_reclaimable:0 [ 984.474355][T17123] free:1247852 free_pcp:23726 free_cma:0 [ 984.524579][T17123] Node 0 active_anon:37960kB inactive_anon:44kB active_file:9248kB inactive_file:163564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117148kB dirty:1180kB writeback:0kB shmem:4472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14144kB pagetables:14036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 984.588959][T17123] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 984.664467][T17123] Node 0 DMA free:15292kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:40kB free_cma:0kB [ 984.730808][T17123] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 984.747758][T17123] Node 0 DMA32 free:1161252kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38160kB inactive_anon:44kB active_file:9248kB inactive_file:163564kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:45316kB local_pcp:21280kB free_cma:0kB [ 984.825186][T17123] lowmem_reserve[]: 0 0 0 0 0 [ 984.843319][T17123] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 984.876849][T17123] lowmem_reserve[]: 0 0 0 0 0 [ 984.883065][T17123] Node 1 Normal free:3815540kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:49284kB local_pcp:23236kB free_cma:0kB [ 984.917801][T17123] lowmem_reserve[]: 0 0 0 0 0 [ 984.925668][T17123] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15292kB [ 984.952167][T17123] Node 0 DMA32: 5521*4kB (UME) 5788*8kB (UME) 3548*16kB (UME) 431*32kB (UME) 754*64kB (UME) 935*128kB (UM) 678*256kB (UME) 492*512kB (UM) 289*1024kB (UME) 65*2048kB (UM) 0*4096kB = 1161412kB [ 984.988098][T17123] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 985.000748][T17123] Node 1 Normal: 10*4kB (UM) 14*8kB (UM) 17*16kB (UM) 8*32kB (UM) 14*64kB (UM) 13*128kB (UM) 14*256kB (UM) 13*512kB (UM) 11*1024kB (UM) 9*2048kB (U) 921*4096kB (UM) = 3815592kB [ 985.023022][T17123] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.061215][T17123] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.071043][T17123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.082187][T17123] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 985.107276][T17123] 44751 total pagecache pages [ 985.112018][T17123] 0 pages in swap cache [ 985.117176][T17123] Free swap = 124996kB [ 985.131340][T17123] Total swap = 124996kB [ 985.153817][T17123] 2097051 pages RAM [ 985.157698][T17123] 0 pages HighMem/MovableOnly [ 985.162410][T17123] 427089 pages reserved [ 985.166454][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19783'. [ 985.178272][T17123] 0 pages cma reserved [ 985.322893][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19786'. [ 985.387190][T17147] lo speed is unknown, defaulting to 1000 [ 985.503611][T17154] block nbd3: server does not support multiple connections per device. [ 985.523434][T17154] block nbd3: shutting down sockets [ 985.569951][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19789'. [ 985.663937][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19790'. [ 985.747938][T17147] wg1 speed is unknown, defaulting to 1000 [ 985.825526][T17165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19792'. [ 986.018400][T17170] lo speed is unknown, defaulting to 1000 [ 986.494646][T17170] wg1 speed is unknown, defaulting to 1000 [ 987.083319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 987.091427][ C0] lec:lec_tx_timeout: lec0 [ 987.096316][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 988.536685][T17215] netlink: 'syz.0.19807': attribute type 13 has an invalid length. [ 988.834760][T17222] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 989.142021][T17232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19812'. [ 989.237747][T17236] syzkaller1: entered promiscuous mode [ 989.261583][T17236] syzkaller1: entered allmulticast mode [ 989.288540][T17238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19815'. [ 989.830951][T17265] lo speed is unknown, defaulting to 1000 [ 990.058347][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19823'. [ 990.524106][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19827'. [ 992.106312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 992.114515][ C0] lec:lec_tx_timeout: lec0 [ 992.119551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 992.225854][T17289] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 992.226556][T17265] wg1 speed is unknown, defaulting to 1000 [ 993.011479][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19842'. [ 993.211934][T17338] atomic_op ffff88803486e998 conn xmit_atomic 0000000000000000 [ 993.454859][T17345] vlan2: entered promiscuous mode [ 993.473353][T17345] syz_tun: entered promiscuous mode [ 993.926461][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19852'. [ 994.089166][T17361] vlan2: entered allmulticast mode [ 994.099960][T17361] bond9: entered allmulticast mode [ 994.129443][T17365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19854'. [ 994.141183][T17367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.212000][T17367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.300801][T17367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.382475][T17367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.565490][T12245] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.627975][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19863'. [ 994.639030][T26043] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.675884][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19863'. [ 994.711610][T26043] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.763787][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.998564][T17399] tipc: Failed to remove unknown binding: 66,1,1/1:3353410556/3353410558 [ 995.040849][T17399] tipc: Failed to remove unknown binding: 66,1,1/1:3353410556/3353410558 [ 995.071951][T17401] netlink: 'syz.4.19869': attribute type 1 has an invalid length. [ 995.086238][T17399] tipc: Failed to remove unknown binding: 66,1,1/1:3353410556/3353410558 [ 995.255349][T17401] macvlan5: entered promiscuous mode [ 995.261027][T17401] macvlan5: entered allmulticast mode [ 995.281266][T17401] bond10: entered promiscuous mode [ 995.302877][T17401] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 995.451050][T17401] bond10: left promiscuous mode [ 995.997380][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19884'. [ 996.072988][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19884'. [ 996.316771][T17465] netlink: 168 bytes leftover after parsing attributes in process `syz.2.19894'. [ 996.554431][T17471] lo speed is unknown, defaulting to 1000 [ 996.652170][T17480] tipc: Enabled bearer , priority 0 [ 996.772622][T17480] syzkaller0: entered promiscuous mode [ 996.789925][T17480] syzkaller0: entered allmulticast mode [ 996.798327][T17480] tipc: Resetting bearer [ 996.813909][T17479] tipc: Resetting bearer [ 997.133250][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.141980][ C0] lec:lec_tx_timeout: lec0 [ 997.149870][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 998.963544][T17479] tipc: Disabling bearer [ 998.974450][T17471] wg1 speed is unknown, defaulting to 1000 [ 998.998172][T17485] lo speed is unknown, defaulting to 1000 [ 999.701332][T17505] lo speed is unknown, defaulting to 1000 [ 999.711770][T17485] wg1 speed is unknown, defaulting to 1000 [ 1000.224174][T17505] wg1 speed is unknown, defaulting to 1000 [ 1001.299503][T17536] batadv0: left promiscuous mode [ 1001.365007][T17536] veth0: left promiscuous mode [ 1001.381692][T17536] wg1: left promiscuous mode [ 1001.393385][T17536] xfrm0: left promiscuous mode [ 1001.398374][T17536] xfrm0: left allmulticast mode [ 1001.404629][T17536] .70·: left allmulticast mode [ 1001.409497][T17536] hsr_slave_0: left allmulticast mode [ 1001.420055][T17536] hsr_slave_1: left allmulticast mode [ 1001.438783][T17536] vti1: left promiscuous mode [ 1001.451742][T17536] vti2: left promiscuous mode [ 1001.476958][T17536] vti2: left allmulticast mode [ 1001.484776][T17536] ip6gre2: left promiscuous mode [ 1001.490422][T17536] geneve3: left promiscuous mode [ 1001.496024][T17536] geneve3: left allmulticast mode [ 1001.502393][T17536] vlan2: left promiscuous mode [ 1001.508119][T17536] geneve1: left promiscuous mode [ 1001.513837][T17536] vlan2: left allmulticast mode [ 1001.519026][T17536] geneve1: left allmulticast mode [ 1001.525318][T17536] ip6gre4: left promiscuous mode [ 1001.530650][T17536] ip6gre4: left allmulticast mode [ 1001.537503][T17536] ip6tnl2: left allmulticast mode [ 1001.544308][T17536] bond6: left promiscuous mode [ 1001.549240][T17536] bond7: left promiscuous mode [ 1001.588653][T17536] bond17: left promiscuous mode [ 1002.163188][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1002.171398][ C0] lec:lec_tx_timeout: lec0 [ 1002.176650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1002.973947][T17577] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19932'. [ 1003.127454][T17583] macsec2: entered allmulticast mode [ 1003.132988][T17583] ..0ªî{X¹¦: entered allmulticast mode [ 1003.203917][T17583] ..0ªî{X¹¦: left allmulticast mode [ 1003.523374][T17602] netlink: 'syz.1.19942': attribute type 1 has an invalid length. [ 1003.555609][T17602] bond18: entered promiscuous mode [ 1003.561220][T17602] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1003.608104][T17602] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1003.615840][T17602] bond18: (slave vti4): The slave device specified does not support setting the MAC address [ 1003.627074][T17602] bond18: (slave vti4): Setting fail_over_mac to active for active-backup mode [ 1003.639756][T17602] bond18: (slave vti4): making interface the new active one [ 1003.647396][T17602] vti4: entered promiscuous mode [ 1003.655655][T17602] bond18: (slave vti4): Enslaving as an active interface with an up link [ 1003.665180][T17604] syzkaller1: entered promiscuous mode [ 1003.670750][T17604] syzkaller1: entered allmulticast mode [ 1003.708203][T17607] lo speed is unknown, defaulting to 1000 [ 1003.790620][T17613] bond18: left promiscuous mode [ 1003.796976][T17613] vti4: left promiscuous mode [ 1004.055089][T17607] wg1 speed is unknown, defaulting to 1000 [ 1004.168173][T17625] xt_hashlimit: size too large, truncated to 1048576 [ 1004.678244][T17636] lo speed is unknown, defaulting to 1000 [ 1004.799855][T17644] bond7: entered allmulticast mode [ 1004.818201][T17644] macvlan1: entered promiscuous mode [ 1004.823921][T17644] macvlan1: entered allmulticast mode [ 1004.830633][T17644] bond7: (slave macvlan1): Opening slave failed [ 1004.945460][T17636] wg1 speed is unknown, defaulting to 1000 [ 1005.750254][T17662] lo speed is unknown, defaulting to 1000 [ 1005.963418][T17662] wg1 speed is unknown, defaulting to 1000 [ 1005.964592][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19964'. [ 1006.476552][T17597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1007.183195][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1007.191278][ C0] lec:lec_tx_timeout: lec0 [ 1007.192275][T17694] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1007.199413][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1007.350525][T17702] bond10: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 1007.433751][T11606] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1007.586712][T26043] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1007.802413][T17725] netlink: 264 bytes leftover after parsing attributes in process `syz.2.19978'. [ 1007.844071][T17725] netlink: 264 bytes leftover after parsing attributes in process `syz.2.19978'. [ 1008.207139][T17731] netlink: 'syz.2.19979': attribute type 1 has an invalid length. [ 1008.370238][T17733] lo speed is unknown, defaulting to 1000 [ 1008.405625][T17713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.999808][T17733] wg1 speed is unknown, defaulting to 1000 [ 1010.035108][T17785] lo speed is unknown, defaulting to 1000 [ 1010.481750][T17792] bond0: entered promiscuous mode [ 1010.486977][T17792] rose0: entered promiscuous mode [ 1010.492811][T17792] bond0: entered allmulticast mode [ 1010.498175][T17792] rose0: entered allmulticast mode [ 1010.518781][T17792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.591153][T17785] wg1 speed is unknown, defaulting to 1000 [ 1010.602076][T17798] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.20002'. [ 1011.457218][T17822] syzkaller0: entered promiscuous mode [ 1011.462775][T17822] syzkaller0: entered allmulticast mode [ 1011.517293][T17827] lo speed is unknown, defaulting to 1000 [ 1011.922727][T17827] wg1 speed is unknown, defaulting to 1000 [ 1012.213219][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1012.221555][ C0] lec:lec_tx_timeout: lec0 [ 1012.226387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1013.592844][T17802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.645997][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1013.732770][T17835] netlink: 'syz.0.20013': attribute type 1 has an invalid length. [ 1013.756940][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20015'. [ 1013.768752][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20015'. [ 1013.983055][T17839] bond11: (slave ip6gre6): The slave device specified does not support setting the MAC address [ 1013.994887][T17839] bond11: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode [ 1014.018604][T17839] bond11: (slave ip6gre6): making interface the new active one [ 1014.027862][T17839] bond11: (slave ip6gre6): Enslaving as an active interface with an up link [ 1014.383513][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20021'. [ 1014.395720][T17857] lo speed is unknown, defaulting to 1000 [ 1015.059384][T17857] wg1 speed is unknown, defaulting to 1000 [ 1015.677002][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20031'. [ 1015.708370][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20031'. [ 1015.775181][T17901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20034'. [ 1016.081472][T17914] syzkaller0: entered promiscuous mode [ 1016.088035][T17914] syzkaller0: entered allmulticast mode [ 1016.457780][T17924] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1016.467178][T17924] team0 (unregistering): Failed to send port change of device C via netlink (err -105) [ 1016.479444][T17924] team0 (unregistering): Port device C removed [ 1016.486895][T17924] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1016.497907][T17924] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1016.510750][T17924] team0 (unregistering): Port device team_slave_1 removed [ 1017.243547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1017.251681][ C0] lec:lec_tx_timeout: lec0 [ 1017.256549][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1018.340558][T17884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1018.623850][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20047'. [ 1018.959294][T17967] netlink: 'syz.1.20053': attribute type 39 has an invalid length. [ 1018.970434][T17968] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1019.045561][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1019.055365][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1019.076076][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1019.087103][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1020.250161][T18019] lo speed is unknown, defaulting to 1000 [ 1020.663529][T18027] sit0: entered allmulticast mode [ 1021.351836][T18019] wg1 speed is unknown, defaulting to 1000 [ 1022.090450][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20083'. [ 1022.827921][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20088'. [ 1022.915768][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20088'. [ 1022.998343][T18080] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1023.083152][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1023.091320][ C0] lec:lec_tx_timeout: lec0 [ 1023.096793][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1023.173649][T18083] macsec3: entered promiscuous mode [ 1023.179504][T18083] bond12: entered promiscuous mode [ 1023.185169][T18083] macsec3: entered allmulticast mode [ 1023.190999][T18083] bond12: entered allmulticast mode [ 1023.207158][T18083] bond12: left allmulticast mode [ 1023.219186][T18083] bond12: left promiscuous mode [ 1023.691095][T18106] bridge8: entered allmulticast mode [ 1024.380348][T18126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20105'. [ 1024.569736][T18136] lo speed is unknown, defaulting to 1000 [ 1024.587186][T18139] netlink: 'syz.2.20110': attribute type 1 has an invalid length. [ 1024.675457][T18139] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1024.826103][T18147] veth21: entered promiscuous mode [ 1024.839110][T18147] bond8: (slave veth21): Enslaving as an active interface with an up link [ 1024.869783][T18155] tipc: Enabled bearer , priority 0 [ 1024.931222][T18136] wg1 speed is unknown, defaulting to 1000 [ 1025.567182][T18178] tipc: Enabled bearer , priority 0 [ 1025.575532][T18178] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1025.582989][T18178] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1027.062312][T18180] lec:lec_atm_close: lec0: Shut down! [ 1027.797475][T18233] lo speed is unknown, defaulting to 1000 [ 1027.918960][T18229] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 1028.210538][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20145'. [ 1028.308184][T18233] wg1 speed is unknown, defaulting to 1000 [ 1028.480444][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20150'. [ 1028.837278][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20158'. [ 1028.847295][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20158'. [ 1028.857587][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20158'. [ 1028.867077][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20158'. [ 1029.797639][T18292] lo speed is unknown, defaulting to 1000 [ 1029.806877][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20166'. [ 1029.954416][T18300] bridge11: entered promiscuous mode [ 1029.965105][T18300] bridge11: port 1(macvtap2) entered blocking state [ 1029.972224][T18300] bridge11: port 1(macvtap2) entered disabled state [ 1029.994334][T18300] macvtap2: entered allmulticast mode [ 1029.999783][T18300] bridge11: entered allmulticast mode [ 1030.036595][T18300] macvtap2: left allmulticast mode [ 1030.041798][T18300] bridge11: left allmulticast mode [ 1030.096456][T18300] bridge11: left promiscuous mode [ 1030.184677][T18294] veth1_to_team: Caught tx_queue_len zero misconfig [ 1030.342581][T18292] wg1 speed is unknown, defaulting to 1000 [ 1030.352177][T18311] lo speed is unknown, defaulting to 1000 [ 1030.983283][T18311] wg1 speed is unknown, defaulting to 1000 [ 1031.236576][T18340] lo speed is unknown, defaulting to 1000 [ 1031.384977][T18339] syzkaller0: entered promiscuous mode [ 1031.397454][T18339] syzkaller0: entered allmulticast mode [ 1031.426577][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20183'. [ 1032.068225][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1032.076340][ C0] lec:lec_tx_timeout: lec0 [ 1032.081205][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1033.410610][T18340] wg1 speed is unknown, defaulting to 1000 [ 1033.433079][T18353] lo speed is unknown, defaulting to 1000 [ 1034.485678][T18353] wg1 speed is unknown, defaulting to 1000 [ 1034.506296][T18351] lo speed is unknown, defaulting to 1000 [ 1035.378002][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20194'. [ 1035.560716][T18351] wg1 speed is unknown, defaulting to 1000 [ 1035.741885][T18399] pimreg: entered allmulticast mode [ 1035.800228][T18401] syzkaller0: entered promiscuous mode [ 1035.805954][T18401] syzkaller0: entered allmulticast mode [ 1036.514011][T18407] netlink: 'syz.1.20203': attribute type 13 has an invalid length. [ 1037.094988][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1037.103059][ C0] lec:lec_tx_timeout: lec0 [ 1037.108147][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1038.226338][T18408] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 1038.430675][T18414] lo speed is unknown, defaulting to 1000 [ 1038.518927][T18421] tipc: Resetting bearer [ 1038.537426][T18421] tipc: Resetting bearer [ 1038.603969][T11213] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1038.623547][T11213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1038.654307][T11213] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1038.831821][T18426] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1038.861224][T11213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1039.253914][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20214'. [ 1039.330612][T18414] wg1 speed is unknown, defaulting to 1000 [ 1039.996960][T18459] bond12: entered promiscuous mode [ 1040.012126][T18464] vcan1: entered promiscuous mode [ 1040.017806][T18464] vcan1: entered allmulticast mode [ 1040.038572][T18464] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 1040.066769][T18464] bond12: (slave vcan1): Error -95 calling set_mac_address [ 1040.827320][T18492] lo speed is unknown, defaulting to 1000 [ 1041.333704][ T9089] IPVS: ip_vs_send_async error -101 [ 1041.529760][T18507] lo speed is unknown, defaulting to 1000 [ 1041.539732][T18492] wg1 speed is unknown, defaulting to 1000 [ 1041.796234][T18519] bridge0: port 1(batadv0) entered blocking state [ 1041.808224][T18519] bridge0: port 1(batadv0) entered disabled state [ 1041.819710][T18519] batadv0: entered allmulticast mode [ 1041.834227][T18519] batadv0: entered promiscuous mode [ 1041.947416][T18521] ipvlan0: entered promiscuous mode [ 1041.952715][T18521] ipvlan0: entered allmulticast mode [ 1041.967739][T18521] gretap0: entered allmulticast mode [ 1041.976601][T18521] team0: Device ipvlan0 failed to register rx_handler [ 1042.098116][T18507] wg1 speed is unknown, defaulting to 1000 [ 1042.123290][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1042.131439][ C0] lec:lec_tx_timeout: lec0 [ 1042.136925][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1042.183342][T18525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1042.209666][T18525] netlink: 35 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1042.212853][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20240'. [ 1042.236654][T18525] netlink: 'syz.0.20239': attribute type 5 has an invalid length. [ 1042.252389][T18525] netlink: 'syz.0.20239': attribute type 6 has an invalid length. [ 1042.265149][T18525] netlink: 35 bytes leftover after parsing attributes in process `syz.0.20239'. [ 1042.293290][ T36] batman_adv: batadv0: IGMP Querier appeared [ 1042.299882][ T36] batman_adv: batadv0: MLD Querier appeared [ 1042.779006][T18543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20244'. [ 1043.921846][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20247'. [ 1044.349542][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20251'. [ 1044.392353][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20251'. [ 1044.643871][T18571] bond18: entered allmulticast mode [ 1044.649289][T18571] vti4: entered allmulticast mode [ 1044.740381][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20254'. [ 1044.901865][T18579] lo speed is unknown, defaulting to 1000 [ 1045.258991][T18585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.290794][T18585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.309597][T18585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1045.368126][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20261'. [ 1045.474540][T18585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.492835][T18585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.510665][T18585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1045.532075][T18579] wg1 speed is unknown, defaulting to 1000 [ 1045.655227][T18585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.678249][T18585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.705809][T18585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1045.834716][T18585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.871067][T18585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.907411][T18585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1046.235959][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.244650][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.252968][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1046.362859][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.372211][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.381250][ T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1046.455863][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.470983][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.491524][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1046.514158][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.528905][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1046.538531][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1047.143162][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1047.151375][ C0] lec:lec_tx_timeout: lec0 [ 1047.156126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1047.899837][T18667] __nla_validate_parse: 3 callbacks suppressed [ 1047.899860][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20282'. [ 1049.592231][T18730] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20304'. [ 1049.638696][T18730] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20304'. [ 1050.596374][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20315'. [ 1050.836985][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20319'. [ 1050.900213][T18767] lo speed is unknown, defaulting to 1000 [ 1050.966617][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20319'. [ 1051.298488][T18767] wg1 speed is unknown, defaulting to 1000 [ 1051.298693][T18779] lo speed is unknown, defaulting to 1000 [ 1051.435415][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20324'. [ 1052.163199][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1052.171428][ C0] lec:lec_tx_timeout: lec0 [ 1052.176459][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1052.389725][T18802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20328'. [ 1052.460666][T18792] veth1_vlan: left allmulticast mode [ 1053.360759][T18779] wg1 speed is unknown, defaulting to 1000 [ 1053.393439][T11606] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.401878][T11606] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1053.420322][T11606] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1053.449373][T11606] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.476533][T11606] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1053.493435][T11606] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1053.501988][T11606] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.539299][T11606] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1053.570184][T11606] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1053.631948][T11606] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.641668][T11606] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1053.654607][T11606] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1053.937177][T18820] netlink: 'syz.4.20333': attribute type 1 has an invalid length. [ 1054.117143][T18827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20333'. [ 1054.257398][T18822] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1054.271017][T18822] bond11: (slave bond12): making interface the new active one [ 1054.280534][T18822] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1054.363731][T18826] bond11: (slave gretap5): Enslaving as a backup interface with an up link [ 1054.412371][T18827] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1054.533605][T18824] lo speed is unknown, defaulting to 1000 [ 1054.608439][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1055.560981][T18824] wg1 speed is unknown, defaulting to 1000 [ 1055.577579][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20340'. [ 1056.542579][T18880] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1056.647859][T18882] bond13: entered promiscuous mode [ 1057.031592][ T30] audit: type=1800 audit(1774032593.452:16): pid=18886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.20349" name="memory.events" dev="tmpfs" ino=20679 res=0 errno=0 [ 1057.183179][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1057.192022][ C0] lec:lec_tx_timeout: lec0 [ 1057.196717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1057.607244][T18890] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.20350'. [ 1058.458759][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20353'. [ 1058.830731][T18857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.114704][T18917] netlink: 'syz.1.20360': attribute type 1 has an invalid length. [ 1059.127806][T18917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20360'. [ 1059.340885][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20365'. [ 1059.505095][T18939] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.20367'. [ 1060.179952][T18964] netlink: 'syz.2.20378': attribute type 1 has an invalid length. [ 1060.252291][T18964] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1060.261363][T18969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1060.419573][T18969] nbd: socks must be embedded in a SOCK_ITEM attr [ 1060.495401][T18830] block nbd64: NBD_DISCONNECT [ 1060.500896][T18973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20380'. [ 1060.535266][T18973] nbd: device at index 64 is going down [ 1060.764933][T18838] udevd[18838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1061.349430][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20386'. [ 1061.687340][T19010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20388'. [ 1062.024738][T19026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20396'. [ 1062.203262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1062.211379][ C0] lec:lec_tx_timeout: lec0 [ 1062.216119][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1062.805851][T19047] tipc: Enabling of bearer rejected, already enabled [ 1062.889734][T19049] lo speed is unknown, defaulting to 1000 [ 1063.258746][T19071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20411'. [ 1063.810774][T19049] wg1 speed is unknown, defaulting to 1000 [ 1064.408405][T19099] netlink: 'syz.3.20418': attribute type 13 has an invalid length. [ 1064.537166][T19104] netlink: 'syz.4.20419': attribute type 27 has an invalid length. [ 1064.628043][T19104] veth1: left promiscuous mode [ 1064.634735][T19104] veth1: left allmulticast mode [ 1064.648097][T19104] erspan1: left promiscuous mode [ 1064.654260][T19104] erspan1: left allmulticast mode [ 1064.659779][T19104] ip6tnl1: left allmulticast mode [ 1064.666124][T19104] ip6erspan0: left promiscuous mode [ 1064.671813][T19104] xfrm1: left allmulticast mode [ 1064.677384][T19104] bridge1: left allmulticast mode [ 1064.684288][T19104] geneve2: left allmulticast mode [ 1064.691705][T19104] geneve3: left promiscuous mode [ 1064.698472][T19104] ip6tnl5: left promiscuous mode [ 1064.704241][T19104] ip6tnl5: left allmulticast mode [ 1064.710881][T19104] vlan2: left promiscuous mode [ 1064.717599][T19104] geneve1: left promiscuous mode [ 1064.723531][T19104] vlan2: left allmulticast mode [ 1064.728788][T19104] geneve1: left allmulticast mode [ 1064.735600][T19104] sit1: left promiscuous mode [ 1064.741294][T19104] gtp0: left promiscuous mode [ 1064.747233][T19104] gtp0: left allmulticast mode [ 1064.754288][T19104] bridge8: left promiscuous mode [ 1064.759977][T19104] ip6gre1: left promiscuous mode [ 1064.775153][T19104] ip6gre1: left allmulticast mode [ 1064.781096][T19104] macvtap1: left promiscuous mode [ 1064.787140][T19104] macvtap1: left allmulticast mode [ 1064.793703][T19104] bond7: left promiscuous mode [ 1064.814322][T19104] sit2: left promiscuous mode [ 1064.819589][T19104] gtp3: left promiscuous mode [ 1064.825087][T19104] gtp3: left allmulticast mode [ 1064.831017][T19104] ip6gre2: left promiscuous mode [ 1064.838350][T19104] ip6gre2: left allmulticast mode [ 1064.845398][T19104] team1: left promiscuous mode [ 1064.850354][T19104] team1: left allmulticast mode [ 1064.859174][T19104] team2: left promiscuous mode [ 1064.864328][T19104] team2: left allmulticast mode [ 1064.925905][T19107] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1064.934364][T19107] pim6reg1: entered promiscuous mode [ 1064.939808][T19107] pim6reg1: entered allmulticast mode [ 1065.078771][T19101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.097307][T19101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.117336][T19101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1065.290355][T19116] syzkaller0: entered promiscuous mode [ 1065.309111][T19116] syzkaller0: entered allmulticast mode [ 1065.323066][T19123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20425'. [ 1065.718552][T19134] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1065.811032][T19134] bond10: (slave ip6gretap1): making interface the new active one [ 1065.830737][T19134] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1065.851616][T19137] tipc: Enabled bearer , priority 0 [ 1065.969274][T19137] syzkaller0: entered promiscuous mode [ 1065.975616][T19137] syzkaller0: entered allmulticast mode [ 1065.982116][T19137] tipc: Resetting bearer [ 1065.996841][T19147] tipc: Enabling of bearer rejected, failed to enable media [ 1066.063872][T19135] tipc: Resetting bearer [ 1066.361886][T19155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20437'. [ 1067.233272][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1067.241642][ C0] lec:lec_tx_timeout: lec0 [ 1067.246578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1067.922453][T19135] tipc: Disabling bearer [ 1067.967303][T19147] syzkaller0: entered promiscuous mode [ 1067.973306][T19147] syzkaller0: entered allmulticast mode [ 1070.008071][T19163] lo speed is unknown, defaulting to 1000 [ 1070.166924][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20441'. [ 1070.319929][T19175] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20442'. [ 1070.362903][T19175] netlink: 76 bytes leftover after parsing attributes in process `syz.3.20442'. [ 1070.400092][T19175] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20442'. [ 1070.531128][T19170] lo speed is unknown, defaulting to 1000 [ 1070.532524][T19163] wg1 speed is unknown, defaulting to 1000 [ 1071.081955][T19170] wg1 speed is unknown, defaulting to 1000 [ 1071.089523][T19179] lo speed is unknown, defaulting to 1000 [ 1071.440226][T19188] lo speed is unknown, defaulting to 1000 [ 1071.698363][T19194] lo speed is unknown, defaulting to 1000 [ 1071.861462][T19179] wg1 speed is unknown, defaulting to 1000 [ 1072.180754][T19188] wg1 speed is unknown, defaulting to 1000 [ 1072.253170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1072.261425][ C0] lec:lec_tx_timeout: lec0 [ 1072.266308][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1072.514597][T19194] wg1 speed is unknown, defaulting to 1000 [ 1074.542998][T19224] netlink: 2 bytes leftover after parsing attributes in process `syz.4.20454'. [ 1075.028844][T19228] ip6tnl0: Caught tx_queue_len zero misconfig [ 1075.251516][T19245] nbd3: detected capacity change from 0 to 63 [ 1075.268263][T19248] block nbd3: NBD_DISCONNECT [ 1075.315678][T19248] block nbd3: Disconnected due to user request. [ 1075.340380][T19248] block nbd3: shutting down sockets [ 1075.379315][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20465'. [ 1075.396164][ C0] blk_print_req_error: 138 callbacks suppressed [ 1075.396191][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.412202][ C0] buffer_io_error: 138 callbacks suppressed [ 1075.412232][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.437850][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.447531][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.456014][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.466056][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1075.474508][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.484435][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1075.493579][T19171] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.503680][T19171] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.514050][T19171] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.524366][T19171] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.532205][T19171] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.543351][T19171] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1075.551421][T19171] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.561601][T19171] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1075.579295][T19171] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.591145][T19171] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.610176][T19171] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.620755][T19171] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.647549][T19171] ldm_validate_partition_table(): Disk read failed. [ 1075.655025][T19171] Dev nbd3: unable to read RDB block 0 [ 1075.665889][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20466'. [ 1075.677656][T19171] nbd3: unable to read partition table [ 1075.708662][T19171] ldm_validate_partition_table(): Disk read failed. [ 1075.716792][T19171] Dev nbd3: unable to read RDB block 0 [ 1075.735451][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20466'. [ 1075.740137][T19171] nbd3: unable to read partition table [ 1077.299214][T19259] team1: entered promiscuous mode [ 1077.318666][T19259] team1: entered allmulticast mode [ 1077.326122][T19259] 8021q: adding VLAN 0 to HW filter on device team1 [ 1077.376304][T19260] team2: entered promiscuous mode [ 1077.381513][T19260] team2: entered allmulticast mode [ 1077.387518][T19260] 8021q: adding VLAN 0 to HW filter on device team2 [ 1077.433856][T19271] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1077.464853][T19271] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1077.931467][T19292] nbd: nbd1 already in use [ 1077.937414][T19292] block nbd1: NBD_DISCONNECT [ 1077.942186][T19292] block nbd1: Send disconnect failed -32 [ 1078.283132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms [ 1078.291280][ C0] lec:lec_tx_timeout: lec0 [ 1078.296910][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1078.577716][T19321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20486'. [ 1078.860177][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20488'. [ 1079.978340][T19375] netlink: 'syz.3.20502': attribute type 4 has an invalid length. [ 1080.031081][T19380] netlink: 'syz.3.20502': attribute type 4 has an invalid length. [ 1080.044551][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1080.496517][T19389] syzkaller0: entered promiscuous mode [ 1080.507211][T19389] syzkaller0: entered allmulticast mode [ 1081.034324][T19411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20508'. [ 1081.786819][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20511'. [ 1083.192470][T19415] tunl0: Caught tx_queue_len zero misconfig [ 1083.211799][T19421] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1083.467247][T19444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20516'. [ 1083.487259][T19441] lo speed is unknown, defaulting to 1000 [ 1083.498062][T19445] Cannot find del_set index 49151 as target [ 1083.519148][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20516'. [ 1083.907045][T19441] wg1 speed is unknown, defaulting to 1000 [ 1084.043128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1084.051279][ C0] lec:lec_tx_timeout: lec0 [ 1084.056470][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1084.063636][T11606] wlan1: Trigger new scan to find an IBSS to join [ 1084.973626][T26043] wlan1: Creating new IBSS network, BSSID d6:7c:eb:f3:62:29 [ 1086.382395][T19518] lo speed is unknown, defaulting to 1000 [ 1086.629215][T19526] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.20543'. [ 1086.856528][T19518] wg1 speed is unknown, defaulting to 1000 [ 1087.268484][T19533] lo speed is unknown, defaulting to 1000 [ 1087.454641][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20547'. [ 1087.572397][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20547'. [ 1087.725248][T19533] wg1 speed is unknown, defaulting to 1000 [ 1087.916095][T19481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1087.925503][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20533'. [ 1089.083316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1089.091383][ C0] lec:lec_tx_timeout: lec0 [ 1089.096417][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1089.470320][T19593] netlink: 156 bytes leftover after parsing attributes in process `syz.0.20559'. [ 1089.531529][T19589] syzkaller1: entered promiscuous mode [ 1089.539693][T19589] syzkaller1: entered allmulticast mode [ 1090.334746][T19622] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20568'. [ 1091.077351][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20590'. [ 1091.111092][T19649] bond20: entered promiscuous mode [ 1091.116972][T19649] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1091.489961][T19666] lo speed is unknown, defaulting to 1000 [ 1091.626895][T19669] tipc: Enabled bearer , priority 0 [ 1091.733653][T19669] syzkaller0: entered promiscuous mode [ 1091.739510][T19669] syzkaller0: entered allmulticast mode [ 1091.746090][T19669] tipc: Resetting bearer [ 1091.788249][T19667] tipc: Resetting bearer [ 1093.846025][T19667] tipc: Disabling bearer [ 1093.861827][T19666] wg1 speed is unknown, defaulting to 1000 [ 1094.103132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1094.111212][ C0] lec:lec_tx_timeout: lec0 [ 1094.117241][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1094.428391][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20598'. [ 1094.543692][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20598'. [ 1094.926134][T19722] lo speed is unknown, defaulting to 1000 [ 1095.486144][T19722] wg1 speed is unknown, defaulting to 1000 [ 1095.917994][T19731] lo speed is unknown, defaulting to 1000 [ 1096.162004][T19752] netlink: 'syz.1.20611': attribute type 11 has an invalid length. [ 1096.170615][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20610'. [ 1096.541411][T12245] nci: nci_rx_work: unknown MT 0x7 [ 1096.785553][T19731] wg1 speed is unknown, defaulting to 1000 [ 1097.935192][T19787] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1099.133189][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1099.141497][ C0] lec:lec_tx_timeout: lec0 [ 1099.146499][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1099.336481][T19759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1099.534160][T19805] syzkaller0: entered promiscuous mode [ 1099.539712][T19805] syzkaller0: entered allmulticast mode [ 1101.760796][T19856] ip6erspan1: left allmulticast mode [ 1101.767499][T19856] ip6tnl6: left allmulticast mode [ 1101.772677][T19856] macsec1: left promiscuous mode [ 1101.794300][T19856] macvlan0: left promiscuous mode [ 1101.799844][T19856] macvlan0: left allmulticast mode [ 1101.806734][T19856] hsr1: left allmulticast mode [ 1101.811533][T19856] bond0: left allmulticast mode [ 1101.817207][T19856] batadv_slave_0: left allmulticast mode [ 1101.824269][T19856] geneve2: left promiscuous mode [ 1101.831441][T19856] geneve3: left promiscuous mode [ 1102.206130][T19856] team1: left promiscuous mode [ 1102.210993][T19856] team1: left allmulticast mode [ 1102.238718][T19856] team2: left promiscuous mode [ 1102.249744][T19856] team2: left allmulticast mode [ 1102.277062][T12245] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.288768][T12245] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.302488][T12245] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.311939][T12245] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.101667][T19888] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1103.111748][T19831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1103.290682][T19894] lo speed is unknown, defaulting to 1000 [ 1103.311587][T19896] tipc: Invalid UDP bearer configuration [ 1103.311646][T19896] tipc: Enabling of bearer rejected, failed to enable media [ 1103.565017][T19894] wg1 speed is unknown, defaulting to 1000 [ 1103.762630][T19910] tipc: Resetting bearer [ 1103.984266][T19915] syzkaller0: entered promiscuous mode [ 1103.989791][T19915] syzkaller0: entered allmulticast mode [ 1104.062714][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20666'. [ 1104.153165][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1104.161305][ C0] lec:lec_tx_timeout: lec0 [ 1104.167490][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1104.570039][T19940] netlink: 'syz.4.20672': attribute type 1 has an invalid length. [ 1104.586297][T19940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20672'. [ 1104.777960][T12245] tipc: Resetting bearer [ 1104.932187][T19946] syzkaller0: entered promiscuous mode [ 1104.941722][T19946] syzkaller0: entered allmulticast mode [ 1104.967662][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20674'. [ 1105.529140][T19969] syzkaller0: entered promiscuous mode [ 1105.545632][T19969] syzkaller0: entered allmulticast mode [ 1106.042628][T19989] syzkaller0: entered promiscuous mode [ 1106.048831][T19989] syzkaller0: entered allmulticast mode [ 1106.063685][T19986] lo speed is unknown, defaulting to 1000 [ 1106.257172][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20694'. [ 1106.319932][T19996] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1106.470491][T20008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20697'. [ 1106.555893][T19986] wg1 speed is unknown, defaulting to 1000 [ 1106.561853][T20012] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1106.570261][T20012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1107.149106][T20030] ip6tnl0: Caught tx_queue_len zero misconfig [ 1107.156883][T20033] xt_hashlimit: size too large, truncated to 1048576 [ 1107.259558][T20042] ¾x9ÿ: renamed from bridge_slave_0 [ 1107.437300][T20046] netlink: 'syz.4.20708': attribute type 27 has an invalid length. [ 1107.862517][T20051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.965742][T20051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.004487][T20051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1108.043338][T20061] tap0: tun_chr_ioctl cmd 2148553947 [ 1108.284155][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20715'. [ 1108.489937][T20060] lec:lec_atm_close: lec0: Shut down! [ 1108.825999][T20093] syzkaller0: entered promiscuous mode [ 1108.835124][T20093] syzkaller0: entered allmulticast mode [ 1108.960657][T20100] syzkaller0: create flow: hash 2948601243 index 1 [ 1108.994220][ T13] syzkaller0: tun_net_xmit 76 [ 1109.001946][ T13] syzkaller0: tun_net_xmit 48 [ 1109.023450][ T5946] syzkaller0: tun_net_xmit 76 [ 1109.059846][T20106] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1109.184554][T20099] syzkaller0: delete flow: hash 2948601243 index 1 [ 1110.363765][ T9089] IPVS: ip_vs_send_async error -101 [ 1111.318135][T20129] netlink: 'syz.4.20732': attribute type 1 has an invalid length. [ 1111.410823][T20129] bond13: entered promiscuous mode [ 1111.419990][T20129] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1111.455402][T20133] bond13: (slave bridge13): making interface the new active one [ 1111.463720][T20133] bridge13: entered promiscuous mode [ 1111.470447][T20133] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 1111.541846][T20129] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1111.639612][T20129] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1111.811599][T20142] syzkaller0: entered promiscuous mode [ 1111.861439][T20142] syzkaller0: entered allmulticast mode [ 1111.947975][T20164] netlink: 'syz.2.20738': attribute type 15 has an invalid length. [ 1112.067273][T20168] rdma_rxe: rxe_newlink: failed to add lo [ 1112.155008][T20172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20743'. [ 1112.170558][T20174] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1112.187665][T20172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20743'. [ 1112.381162][T20182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20748'. [ 1112.486790][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20748'. [ 1112.496166][T20187] smc: removing ib device sqz0 [ 1112.620482][T20190] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1112.833297][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20754'. [ 1112.863717][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20754'. [ 1113.167267][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20757'. [ 1113.214462][ T5827] block nbd1: Receive control failed (result -1) [ 1114.299696][T20223] lec:lec_atm_close: lec0: Shut down! [ 1114.557409][T20247] syzkaller0: entered promiscuous mode [ 1114.586343][T20247] syzkaller0: entered allmulticast mode [ 1114.821744][T20254] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1114.862561][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20774'. [ 1115.019468][T20263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20776'. [ 1115.152679][T20267] syzkaller0: entered promiscuous mode [ 1115.159388][T20267] syzkaller0: entered allmulticast mode [ 1115.387414][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20781'. [ 1116.057518][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1117.324985][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1117.952416][T20311] __nla_validate_parse: 1 callbacks suppressed [ 1117.952437][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20787'. [ 1118.291908][T20324] netlink: 'syz.2.20792': attribute type 1 has an invalid length. [ 1118.403638][T20330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20792'. [ 1118.453042][T20324] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1118.738700][T20330] bond12: entered promiscuous mode [ 1118.745112][T20330] bond12: entered allmulticast mode [ 1118.819497][T20343] syzkaller0: entered promiscuous mode [ 1118.833257][T20343] syzkaller0: entered allmulticast mode [ 1119.084693][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20799'. [ 1119.153598][T20357] bond11: option mode: unable to set because the bond device has slaves [ 1119.654153][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20802'. [ 1119.686393][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20802'. [ 1119.880882][T20375] syzkaller0: entered promiscuous mode [ 1119.886554][T20375] syzkaller0: entered allmulticast mode [ 1120.043113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1120.051213][ C0] lec:lec_tx_timeout: lec0 [ 1120.057623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1120.769632][T20399] netlink: 'syz.2.20811': attribute type 4 has an invalid length. [ 1120.771069][T20396] wg1 speed is unknown, defaulting to 1000 [ 1121.107499][T20402] netlink: 'syz.1.20813': attribute type 1 has an invalid length. [ 1121.189238][T20385] ------------[ cut here ]------------ [ 1121.196025][T20385] ODEBUG: init active (active state 0) object: ffff88803e198ef8 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 1121.209621][T20385] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.4.20809/20385 [ 1121.220401][T20385] Modules linked in: [ 1121.225398][T20385] CPU: 1 UID: 0 PID: 20385 Comm: syz.4.20809 Not tainted syzkaller #0 PREEMPT(full) [ 1121.235163][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.245692][T20385] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1121.251662][T20385] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 93 58 0b 83 fd 03 75 3f 4c 8b [ 1121.273240][T20385] RSP: 0018:ffffc9000568f8f8 EFLAGS: 00010246 [ 1121.279853][T20385] RAX: 1ffffffff179e7b8 RBX: ffff88803e198ef8 RCX: 0000000000000000 [ 1121.288025][T20385] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0a10 [ 1121.296830][T20385] RBP: 0000000000000003 R08: ffff88803e198ef8 R09: ffffffff8bcf50e0 [ 1121.305032][T20385] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 1121.313275][T20385] R13: ffffffff8bcf3dc0 R14: ffffffff901c0a10 R15: dffffc0000000000 [ 1121.321431][T20385] FS: 00007f437f0646c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1121.330805][T20385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.337505][T20385] CR2: 00007fce60b74e9c CR3: 00000000771aa000 CR4: 00000000003526f0 [ 1121.345657][T20385] Call Trace: [ 1121.349074][T20385] [ 1121.352050][T20385] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1121.358411][T20385] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1121.364287][T20385] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.370247][T20385] timer_init_key+0x41/0x2f0 [ 1121.374990][T20385] lane_ioctl+0x1579/0x2220 [ 1121.379611][T20385] ? __pfx_clip_ioctl+0x10/0x10 [ 1121.385841][T20385] ? br2684_ioctl+0x110/0x6b0 [ 1121.390585][T20385] ? __pfx_lane_ioctl+0x10/0x10 [ 1121.395587][T20385] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1121.400426][T20385] do_vcc_ioctl+0x36d/0x9d0 [ 1121.405080][T20385] svc_ioctl+0x1f6/0x7d0 [ 1121.409388][T20385] ? kasan_quarantine_put+0xbb/0x1f0 [ 1121.415302][T20385] ? __pfx_svc_ioctl+0x10/0x10 [ 1121.420250][T20385] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.426125][T20385] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.431840][T20385] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1121.437396][T20385] sock_do_ioctl+0x101/0x320 [ 1121.442244][T20385] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1121.447876][T20385] ? do_futex+0x333/0x420 [ 1121.452296][T20385] sock_ioctl+0x5c6/0x7f0 [ 1121.456865][T20385] ? __pfx_sock_ioctl+0x10/0x10 [ 1121.462041][T20385] ? __fget_files+0x2a/0x420 [ 1121.466784][T20385] ? __fget_files+0x3a0/0x420 [ 1121.471565][T20385] ? __fget_files+0x2a/0x420 [ 1121.476559][T20385] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1121.481552][T20385] ? __pfx_sock_ioctl+0x10/0x10 [ 1121.487375][T20385] __se_sys_ioctl+0xfc/0x170 [ 1121.492035][T20385] do_syscall_64+0x14d/0xf80 [ 1121.496798][T20385] ? trace_irq_disable+0x3b/0x150 [ 1121.502066][T20385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.508609][T20385] ? clear_bhb_loop+0x40/0x90 [ 1121.513427][T20385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.519458][T20385] RIP: 0033:0x7f437e19c799 [ 1121.524216][T20385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.544307][T20385] RSP: 002b:00007f437f064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.552782][T20385] RAX: ffffffffffffffda RBX: 00007f437e415fa0 RCX: 00007f437e19c799 [ 1121.561074][T20385] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1121.569526][T20385] RBP: 00007f437e232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1121.578086][T20385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.586770][T20385] R13: 00007f437e416038 R14: 00007f437e415fa0 R15: 00007ffedbc7df48 [ 1121.594892][T20385] [ 1121.597980][T20385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1121.605306][T20385] CPU: 1 UID: 0 PID: 20385 Comm: syz.4.20809 Not tainted syzkaller #0 PREEMPT(full) [ 1121.615025][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1121.626001][T20385] Call Trace: [ 1121.629331][T20385] [ 1121.632549][T20385] vpanic+0x56c/0xa60 [ 1121.636631][T20385] ? __pfx__printk+0x10/0x10 [ 1121.641312][T20385] ? __pfx_vpanic+0x10/0x10 [ 1121.645850][T20385] ? is_bpf_text_address+0x292/0x2b0 [ 1121.651358][T20385] ? is_bpf_text_address+0x26/0x2b0 [ 1121.656594][T20385] panic+0xc5/0xd0 [ 1121.660345][T20385] ? __pfx_panic+0x10/0x10 [ 1121.664892][T20385] __warn+0x315/0x4f0 [ 1121.668904][T20385] ? __debug_object_init+0x2b1/0x4e0 [ 1121.674230][T20385] ? __debug_object_init+0x2b1/0x4e0 [ 1121.679606][T20385] __report_bug+0x29a/0x540 [ 1121.684286][T20385] ? __debug_object_init+0x2b1/0x4e0 [ 1121.689702][T20385] ? __pfx___report_bug+0x10/0x10 [ 1121.694869][T20385] ? __lock_acquire+0x6b5/0x2cf0 [ 1121.700158][T20385] report_bug_entry+0x19a/0x290 [ 1121.705056][T20385] ? __debug_object_init+0x30f/0x4e0 [ 1121.710472][T20385] ? __debug_object_init+0x314/0x4e0 [ 1121.715786][T20385] handle_bug+0xce/0x200 [ 1121.720066][T20385] exc_invalid_op+0x1a/0x50 [ 1121.724599][T20385] asm_exc_invalid_op+0x1a/0x20 [ 1121.729738][T20385] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 1121.735664][T20385] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 93 58 0b 83 fd 03 75 3f 4c 8b [ 1121.755344][T20385] RSP: 0018:ffffc9000568f8f8 EFLAGS: 00010246 [ 1121.761556][T20385] RAX: 1ffffffff179e7b8 RBX: ffff88803e198ef8 RCX: 0000000000000000 [ 1121.769674][T20385] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0a10 [ 1121.777687][T20385] RBP: 0000000000000003 R08: ffff88803e198ef8 R09: ffffffff8bcf50e0 [ 1121.785693][T20385] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 1121.794112][T20385] R13: ffffffff8bcf3dc0 R14: ffffffff901c0a10 R15: dffffc0000000000 [ 1121.802254][T20385] ? __pfx_timer_debug_hint+0x10/0x10 [ 1121.807788][T20385] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1121.813549][T20385] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1121.819340][T20385] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1121.825404][T20385] timer_init_key+0x41/0x2f0 [ 1121.830053][T20385] lane_ioctl+0x1579/0x2220 [ 1121.834787][T20385] ? __pfx_clip_ioctl+0x10/0x10 [ 1121.839767][T20385] ? br2684_ioctl+0x110/0x6b0 [ 1121.844511][T20385] ? __pfx_lane_ioctl+0x10/0x10 [ 1121.849511][T20385] ? atmtcp_ioctl+0x1ce/0xdf0 [ 1121.854247][T20385] do_vcc_ioctl+0x36d/0x9d0 [ 1121.858808][T20385] svc_ioctl+0x1f6/0x7d0 [ 1121.863091][T20385] ? kasan_quarantine_put+0xbb/0x1f0 [ 1121.868414][T20385] ? __pfx_svc_ioctl+0x10/0x10 [ 1121.873227][T20385] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.878932][T20385] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.884655][T20385] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1121.889814][T20385] sock_do_ioctl+0x101/0x320 [ 1121.894452][T20385] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1121.899611][T20385] ? do_futex+0x333/0x420 [ 1121.904011][T20385] sock_ioctl+0x5c6/0x7f0 [ 1121.908428][T20385] ? __pfx_sock_ioctl+0x10/0x10 [ 1121.913340][T20385] ? __fget_files+0x2a/0x420 [ 1121.917990][T20385] ? __fget_files+0x3a0/0x420 [ 1121.922720][T20385] ? __fget_files+0x2a/0x420 [ 1121.927360][T20385] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1121.932352][T20385] ? __pfx_sock_ioctl+0x10/0x10 [ 1121.937711][T20385] __se_sys_ioctl+0xfc/0x170 [ 1121.942349][T20385] do_syscall_64+0x14d/0xf80 [ 1121.947170][T20385] ? trace_irq_disable+0x3b/0x150 [ 1121.952237][T20385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.958333][T20385] ? clear_bhb_loop+0x40/0x90 [ 1121.963094][T20385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.969111][T20385] RIP: 0033:0x7f437e19c799 [ 1121.973605][T20385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.993874][T20385] RSP: 002b:00007f437f064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.002335][T20385] RAX: ffffffffffffffda RBX: 00007f437e415fa0 RCX: 00007f437e19c799 [ 1122.010811][T20385] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1122.018820][T20385] RBP: 00007f437e232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1122.027091][T20385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.035275][T20385] R13: 00007f437e416038 R14: 00007f437e415fa0 R15: 00007ffedbc7df48 [ 1122.043389][T20385] [ 1122.047086][T20385] Kernel Offset: disabled [ 1122.051503][T20385] Rebooting in 86400 seconds..