last executing test programs: 1.772263998s ago: executing program 3 (id=2692): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910"], 0x0) 1.674209049s ago: executing program 3 (id=2693): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0xf, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) 1.661778368s ago: executing program 3 (id=2694): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.574193289s ago: executing program 3 (id=2695): r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000200)=0xfffffffc, 0x4) 1.177589106s ago: executing program 2 (id=2704): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) 1.153759837s ago: executing program 2 (id=2706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 1.050055191s ago: executing program 2 (id=2709): unshare(0x22020400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 1.018699182s ago: executing program 2 (id=2710): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 810.16368ms ago: executing program 4 (id=2716): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0xf, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 789.611376ms ago: executing program 4 (id=2719): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1100000052000100fcffffff0000000002"], 0x1c}}, 0x0) 706.021968ms ago: executing program 4 (id=2721): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffff8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x40) 643.941348ms ago: executing program 3 (id=2724): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 586.192605ms ago: executing program 4 (id=2725): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 569.127396ms ago: executing program 4 (id=2727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 532.186509ms ago: executing program 3 (id=2728): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) 398.272622ms ago: executing program 1 (id=2730): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240), 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/130, 0x82}], 0x1, &(0x7f0000000280)=""/83, 0xffffffa8}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x4002}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='I', 0x1}], 0x1}, 0x4800) 398.142316ms ago: executing program 0 (id=2731): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf251b00000004001900080015000200000008000100", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 392.516425ms ago: executing program 4 (id=2732): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe6, &(0x7f0000002240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xc4, 0x0, @wg=@data={0x4, 0x8, 0x4, "f7b9aa3f9606d32f2d244712593e655e189e64f114be88c85290b6e10e1ca6068680f332d169f5da49814c1b6f8911e2a3d47626bb6923b125ce6307126479cf56d6dc5dff64c72f107b0237e546caa662409346aa0d4fb5ae90f8a15032185f64a096dece906ff7b1220334c224753274d580b2c4374ac7b2d8237c795790f79a673fd61f3125f2403aefa47bd6c796c84bcd00e94a83a20091f0505294a337dc9edf01779b1f8e6a269be5"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/199, 0xc7}], 0x3) 314.503729ms ago: executing program 0 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x11, 0xa, 0x301, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x8}, [@generic='\v']}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) 254.224967ms ago: executing program 1 (id=2734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x94}}, 0x0) 244.141268ms ago: executing program 0 (id=2735): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000440)=0x1, 0x4) 237.771683ms ago: executing program 1 (id=2736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1}, 0x4004000) 146.074889ms ago: executing program 0 (id=2737): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x61, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr=0x64010100}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x7}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 145.919833ms ago: executing program 1 (id=2738): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 134.699932ms ago: executing program 2 (id=2739): unshare(0x28000600) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) 128.642245ms ago: executing program 0 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001280)={'gre0\x00', &(0x7f0000001240)={'gretap0\x00', 0x0, 0x10, 0x7, 0x4, 0x6, {{0x5, 0x4, 0x3, 0x3d, 0x14, 0x4, 0x0, 0x7, 0x29, 0x0, @multicast2, @local}}}}) 62.170748ms ago: executing program 1 (id=2741): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 60.515653ms ago: executing program 2 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 42.975858ms ago: executing program 0 (id=2743): syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) 0s ago: executing program 1 (id=2744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) kernel console output (not intermixed with test programs): [ 207.370185][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 207.370197][T11482] Call Trace: [ 207.370205][T11482] [ 207.370213][T11482] dump_stack_lvl+0xe8/0x150 [ 207.370241][T11482] should_fail_ex+0x412/0x560 [ 207.370268][T11482] _copy_from_user+0x2d/0xb0 [ 207.370295][T11482] ___sys_sendmsg+0x1c6/0x360 [ 207.370318][T11482] ? __lock_acquire+0x6b5/0x2cf0 [ 207.370343][T11482] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.370396][T11482] ? __fget_files+0x2a/0x420 [ 207.370415][T11482] ? __fget_files+0x3a0/0x420 [ 207.370444][T11482] __x64_sys_sendmsg+0x1bd/0x2a0 [ 207.370471][T11482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.370504][T11482] ? __pfx_ksys_write+0x10/0x10 [ 207.370547][T11482] do_syscall_64+0xe2/0xf80 [ 207.370569][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.370586][T11482] ? trace_irq_disable+0x37/0x100 [ 207.370604][T11482] ? clear_bhb_loop+0x60/0xb0 [ 207.370625][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.370643][T11482] RIP: 0033:0x7f8644f9acb9 [ 207.370659][T11482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.370676][T11482] RSP: 002b:00007f86431d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.370695][T11482] RAX: ffffffffffffffda RBX: 00007f8645216090 RCX: 00007f8644f9acb9 [ 207.370708][T11482] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000006 [ 207.370719][T11482] RBP: 00007f86431d5090 R08: 0000000000000000 R09: 0000000000000000 [ 207.370730][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.370740][T11482] R13: 00007f8645216128 R14: 00007f8645216090 R15: 00007fffbc72b2b8 [ 207.370766][T11482] [ 207.392035][T11486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1426'. [ 207.445843][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 207.461552][T11476] wg1 speed is unknown, defaulting to 1000 [ 207.509219][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 207.545429][T11488] ip6gretap1: entered promiscuous mode [ 207.613722][T11488] ip6gretap1: entered allmulticast mode [ 207.651568][T11481] wg1 speed is unknown, defaulting to 1000 [ 207.668866][T11490] syzkaller0: entered promiscuous mode [ 207.676017][T11490] syzkaller0: entered allmulticast mode [ 207.806129][T11497] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.1430'. [ 208.013640][T11501] tipc: Enabled bearer , priority 0 [ 208.121863][T11508] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1434'. [ 208.176061][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.255115][T11501] tipc: Disabling bearer [ 208.549795][T11523] x_tables: unsorted entry at hook 2 [ 208.566474][ T7341] bond1: (slave bridge1): failed to get link speed/duplex [ 208.600041][T11524] geneve3: entered promiscuous mode [ 208.629679][T11527] geneve2: entered promiscuous mode [ 208.665547][ T3457] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.690196][ T3457] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.717987][ T3457] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.728837][T11523] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.745570][ T7341] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 208.762323][ T3457] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 208.785454][ T3486] bond1: (slave bridge1): failed to get link speed/duplex [ 208.943086][T11541] geneve4: entered promiscuous mode [ 208.971076][T11541] geneve4: entered allmulticast mode [ 209.010737][T11543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1443'. [ 209.035841][ T3457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.054486][T11549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1446'. [ 209.063527][ T3457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.063624][ T3457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.063751][ T3457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 209.141791][T11549] bridge5: entered allmulticast mode [ 209.190174][ T3486] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 209.546423][T11580] FAULT_INJECTION: forcing a failure. [ 209.546423][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 209.568664][T11580] CPU: 1 UID: 0 PID: 11580 Comm: syz.4.1456 Not tainted syzkaller #0 PREEMPT(full) [ 209.568690][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 209.568699][T11580] Call Trace: [ 209.568707][T11580] [ 209.568714][T11580] dump_stack_lvl+0xe8/0x150 [ 209.568740][T11580] should_fail_ex+0x412/0x560 [ 209.568765][T11580] should_failslab+0xa8/0x100 [ 209.568787][T11580] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 209.568811][T11580] ? __alloc_skb+0x186/0x7d0 [ 209.568829][T11580] ? __alloc_skb+0x1d0/0x7d0 [ 209.568845][T11580] ? __local_bh_enable_ip+0xd0/0x130 [ 209.568866][T11580] __alloc_skb+0x1d0/0x7d0 [ 209.568890][T11580] netlink_sendmsg+0x5d4/0xb40 [ 209.568920][T11580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.568943][T11580] ? aa_sock_msg_perm+0xf1/0x1b0 [ 209.568964][T11580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.568985][T11580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.569004][T11580] ____sys_sendmsg+0xa68/0xad0 [ 209.569027][T11580] ? __might_fault+0xaf/0x130 [ 209.569055][T11580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.569095][T11580] ? import_iovec+0x73/0xa0 [ 209.569122][T11580] ___sys_sendmsg+0x2a5/0x360 [ 209.569144][T11580] ? __lock_acquire+0x6b5/0x2cf0 [ 209.569171][T11580] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.569224][T11580] ? __fget_files+0x2a/0x420 [ 209.569243][T11580] ? __fget_files+0x3a0/0x420 [ 209.569269][T11580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 209.569296][T11580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.569333][T11580] ? __pfx_ksys_write+0x10/0x10 [ 209.569365][T11580] do_syscall_64+0xe2/0xf80 [ 209.569386][T11580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.569401][T11580] ? trace_irq_disable+0x37/0x100 [ 209.569417][T11580] ? clear_bhb_loop+0x60/0xb0 [ 209.569437][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.569454][T11580] RIP: 0033:0x7f415679acb9 [ 209.569470][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.569485][T11580] RSP: 002b:00007f415771f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.569505][T11580] RAX: ffffffffffffffda RBX: 00007f4156a16090 RCX: 00007f415679acb9 [ 209.569518][T11580] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000006 [ 209.569530][T11580] RBP: 00007f415771f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.569542][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.569551][T11580] R13: 00007f4156a16128 R14: 00007f4156a16090 R15: 00007ffc48e39358 [ 209.569578][T11580] [ 209.863881][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 209.917677][T11578] wg1 speed is unknown, defaulting to 1000 [ 210.707989][T11612] IPVS: Scheduler module ip_vs_sip not found [ 210.715626][T11619] xt_socket: unknown flags 0x50 [ 210.779530][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 210.786835][T11623] wg1 speed is unknown, defaulting to 1000 [ 210.803076][T11624] IPVS: Error connecting to the multicast addr [ 210.879451][ T30] audit: type=1800 audit(1769396455.231:7): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1467" name="memory.events" dev="tmpfs" ino=1538 res=0 errno=0 [ 211.021233][T11634] tipc: Can't bind to reserved service type 1 [ 211.057901][T11631] wg1 speed is unknown, defaulting to 1000 [ 211.599842][T11651] wg1 speed is unknown, defaulting to 1000 [ 211.716517][T11659] gretap2: entered promiscuous mode [ 211.884579][T11662] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 211.941287][T11660] wg1 speed is unknown, defaulting to 1000 [ 211.947716][ T60] net_ratelimit: 15 callbacks suppressed [ 211.947734][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 212.226289][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 212.267643][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.274757][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.281733][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.288677][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.295591][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.302480][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.309797][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.316734][T11669] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 212.594625][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 212.627289][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 213.287124][T11686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1483'. [ 213.370068][T11695] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1485'. [ 213.400442][T11688] xt_hashlimit: size too large, truncated to 1048576 [ 213.428611][T11688] xt_hashlimit: max too large, truncated to 1048576 [ 213.610408][T11688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.842054][T11710] veth1_macvtap: left promiscuous mode [ 213.847685][T11710] macsec0: entered allmulticast mode [ 213.848475][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 213.856359][T11710] veth1_macvtap: entered promiscuous mode [ 213.902257][T11710] veth1_macvtap: entered allmulticast mode [ 213.929013][T11717] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 213.946028][T11710] macsec0: left allmulticast mode [ 213.951140][T11710] veth1_macvtap: left allmulticast mode [ 213.961157][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1493'. [ 214.167410][T11723] dvmrp0: entered allmulticast mode [ 214.196196][T11726] validate_nla: 2 callbacks suppressed [ 214.196214][T11726] netlink: 'syz.3.1495': attribute type 21 has an invalid length. [ 214.314614][T11726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1495'. [ 214.350244][T11728] wg1 speed is unknown, defaulting to 1000 [ 214.461881][T11726] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 214.569671][T11747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 214.629086][T11748] syzkaller1: entered promiscuous mode [ 214.634865][T11748] syzkaller1: entered allmulticast mode [ 214.648047][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1499'. [ 214.708205][ C1] ip6_tunnel: H xmit: Local address not yet configured! [ 214.729624][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1499'. [ 215.003763][T11763] Cannot find del_set index 4 as target [ 215.039239][T11769] Cannot find del_set index 4 as target [ 215.641027][T11784] wg1 speed is unknown, defaulting to 1000 [ 215.646936][ T30] audit: type=1107 audit(1769396459.991:8): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.648955][ T30] audit: type=1107 audit(1769396460.001:9): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.685295][T11797] wg1 speed is unknown, defaulting to 1000 [ 215.850178][ T30] audit: type=1107 audit(1769396460.191:10): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 215.947284][ T30] audit: type=1107 audit(1769396460.191:11): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.080465][ T30] audit: type=1107 audit(1769396460.191:12): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.191002][ T30] audit: type=1107 audit(1769396460.191:13): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.251980][ T30] audit: type=1107 audit(1769396460.191:14): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.286326][ T30] audit: type=1107 audit(1769396460.191:15): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.318693][ T30] audit: type=1107 audit(1769396460.191:16): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.355900][ T30] audit: type=1107 audit(1769396460.191:17): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.390587][ T30] audit: type=1107 audit(1769396460.191:18): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.495602][ T30] audit: type=1107 audit(1769396460.191:19): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.579698][ T30] audit: type=1107 audit(1769396460.191:20): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaip6gre0' [ 216.793311][T11822] wg1 speed is unknown, defaulting to 1000 [ 216.912589][T11828] wg1 speed is unknown, defaulting to 1000 [ 216.958619][T11833] netlink: 'syz.4.1524': attribute type 4 has an invalid length. [ 217.012158][T11832] netlink: 'syz.4.1524': attribute type 4 has an invalid length. [ 217.235389][ T9694] net_ratelimit: 2637 callbacks suppressed [ 217.235408][ T9694] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 217.533859][T11856] veth1_macvtap: left allmulticast mode [ 217.585858][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.619880][ T3019] bond1: (slave bridge1): failed to get link speed/duplex [ 217.687912][T11861] __nla_validate_parse: 131 callbacks suppressed [ 217.687930][T11861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1530'. [ 217.733202][T10083] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 217.742118][T11861] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 217.747672][T11868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1531'. [ 217.805751][T11868] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 217.831273][T11867] wg1 speed is unknown, defaulting to 1000 [ 217.881683][T11861] geneve2: left promiscuous mode [ 217.915344][T11861] ip6gretap1: left promiscuous mode [ 217.951972][T11861] geneve4: left promiscuous mode [ 217.964567][T11866] wg1 speed is unknown, defaulting to 1000 [ 217.992284][T11881] FAULT_INJECTION: forcing a failure. [ 217.992284][T11881] name failslab, interval 1, probability 0, space 0, times 0 [ 218.031433][T11868] macvlan1: left promiscuous mode [ 218.040939][T11868] bridge1: left promiscuous mode [ 218.046538][T11868] bond1: left promiscuous mode [ 218.046674][T11881] CPU: 1 UID: 0 PID: 11881 Comm: syz.3.1535 Not tainted syzkaller #0 PREEMPT(full) [ 218.046700][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 218.046711][T11881] Call Trace: [ 218.046718][T11881] [ 218.046726][T11881] dump_stack_lvl+0xe8/0x150 [ 218.046752][T11881] should_fail_ex+0x412/0x560 [ 218.046779][T11881] should_failslab+0xa8/0x100 [ 218.046800][T11881] kmem_cache_alloc_noprof+0x87/0x6e0 [ 218.046824][T11881] ? __netlink_lookup+0xc6/0x8b0 [ 218.046847][T11881] ? skb_clone+0x212/0x3a0 [ 218.046875][T11881] skb_clone+0x212/0x3a0 [ 218.046901][T11881] __netlink_deliver_tap+0x404/0x850 [ 218.046932][T11881] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.046953][T11881] netlink_deliver_tap+0x19c/0x1b0 [ 218.046974][T11881] netlink_unicast+0x7e3/0x9b0 [ 218.046999][T11881] ? __pfx_netlink_unicast+0x10/0x10 [ 218.047019][T11881] ? netlink_sendmsg+0x650/0xb40 [ 218.047037][T11881] ? skb_put+0x11b/0x210 [ 218.047061][T11881] netlink_sendmsg+0x813/0xb40 [ 218.047090][T11881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.047113][T11881] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.047136][T11881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.047156][T11881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.047175][T11881] ____sys_sendmsg+0xa68/0xad0 [ 218.047199][T11881] ? __might_fault+0xaf/0x130 [ 218.047229][T11881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.047261][T11881] ? import_iovec+0x73/0xa0 [ 218.047289][T11881] ___sys_sendmsg+0x2a5/0x360 [ 218.047310][T11881] ? __lock_acquire+0x6b5/0x2cf0 [ 218.047338][T11881] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.047393][T11881] ? __fget_files+0x2a/0x420 [ 218.047411][T11881] ? __fget_files+0x3a0/0x420 [ 218.047438][T11881] __x64_sys_sendmsg+0x1bd/0x2a0 [ 218.047463][T11881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.047505][T11881] ? __pfx_ksys_write+0x10/0x10 [ 218.047545][T11881] do_syscall_64+0xe2/0xf80 [ 218.047564][T11881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.047581][T11881] ? trace_irq_disable+0x37/0x100 [ 218.047598][T11881] ? clear_bhb_loop+0x60/0xb0 [ 218.047619][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.047636][T11881] RIP: 0033:0x7f337ff9acb9 [ 218.047652][T11881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.047667][T11881] RSP: 002b:00007f3380ef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.047686][T11881] RAX: ffffffffffffffda RBX: 00007f3380216090 RCX: 00007f337ff9acb9 [ 218.047700][T11881] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000006 [ 218.047711][T11881] RBP: 00007f3380ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.047723][T11881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.047732][T11881] R13: 00007f3380216128 R14: 00007f3380216090 R15: 00007ffd5e20e718 [ 218.047761][T11881] [ 218.151006][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 218.160764][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.166954][T11868] bridge2: left promiscuous mode [ 218.171284][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.184963][T11868] bond2: left promiscuous mode [ 218.407300][T11868] macvtap1: left promiscuous mode [ 218.414939][T11868] gretap1: left promiscuous mode [ 218.426563][ T3019] bond4: (slave ip6gretap1): link status up again after 0 ms [ 218.445562][T11868] bond5: left promiscuous mode [ 218.451195][T11868] geneve3: left promiscuous mode [ 218.466712][ T3019] bond4: (slave ip6gretap1): link status up again after 0 ms [ 218.486150][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.505267][ T1009] bond4: (slave ip6gretap1): link status up again after 0 ms [ 218.541680][T11890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1538'. [ 218.640891][T11880] wg1 speed is unknown, defaulting to 1000 [ 218.660695][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 219.232247][T11907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1544'. [ 219.276689][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 219.341685][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 220.047937][T11958] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.1559'. [ 220.281960][T11973] wg1 speed is unknown, defaulting to 1000 [ 221.002474][T11998] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 221.011663][T11998] bridge6: entered allmulticast mode [ 221.083062][T11998] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 221.738650][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 222.365626][ T44] net_ratelimit: 24 callbacks suppressed [ 222.365647][ T44] bond1: (slave bridge1): failed to get link speed/duplex [ 222.446398][ T3486] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 222.466213][T12074] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.492419][T12074] Cannot find set identified by id 3 to match [ 222.746742][T12086] Cannot find add_set index 2 as target [ 222.786264][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.108704][T12090] veth1_macvtap: left promiscuous mode [ 223.116580][T12090] macsec0: entered allmulticast mode [ 223.128034][T12091] veth1_macvtap: entered promiscuous mode [ 223.142368][T12091] veth1_macvtap: entered allmulticast mode [ 223.157593][T12091] macsec0: left allmulticast mode [ 223.168386][T12091] veth1_macvtap: left allmulticast mode [ 223.242973][T12094] __nla_validate_parse: 5 callbacks suppressed [ 223.242993][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 223.285657][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 223.340816][ T1009] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.345903][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 223.353961][ T1009] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.405280][ T1009] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.415430][ T1009] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.463079][T12096] wg1 speed is unknown, defaulting to 1000 [ 223.572595][T12102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.596414][ T3486] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 223.667269][ T1009] bond1: (slave bridge1): failed to get link speed/duplex [ 223.848096][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.092586][T12112] netlink: 'syz.0.1596': attribute type 3 has an invalid length. [ 224.121042][T12116] wg1 speed is unknown, defaulting to 1000 [ 224.128188][T12112] macsec0: left allmulticast mode [ 224.136923][ T3019] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 224.175638][ T3019] bond1: (slave bridge1): failed to get link speed/duplex [ 224.265341][ T3523] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 224.358607][T12130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1601'. [ 224.368347][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 224.514511][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.671450][T12134] xt_CONNSECMARK: invalid mode: 0 [ 224.918654][T12146] wg1 speed is unknown, defaulting to 1000 [ 225.093912][T12148] wg1 speed is unknown, defaulting to 1000 [ 225.429434][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 225.571269][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'. [ 225.621599][T12174] veth0_to_team: entered promiscuous mode [ 225.624788][T12179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'. [ 225.660979][T12181] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 225.677118][T12174] veth0_to_team: left promiscuous mode [ 225.721627][T12179] veth0_to_team: entered promiscuous mode [ 225.732665][T12179] veth0_to_team: left promiscuous mode [ 225.873826][T12185] can: request_module (can-proto-3) failed. [ 225.966937][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'. [ 225.998578][T12187] wg1 speed is unknown, defaulting to 1000 [ 226.108106][T12197] xt_l2tp: invalid flags combination: 8 [ 226.150906][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 226.832999][T12222] C: renamed from team_slave_0 [ 227.161897][T12244] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.268328][T12246] wg1 speed is unknown, defaulting to 1000 [ 227.436309][T12278] net_ratelimit: 22 callbacks suppressed [ 227.436327][T12278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 227.495828][T12282] netlink: 'syz.0.1636': attribute type 41 has an invalid length. [ 227.612632][T12287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.989494][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.004926][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.126423][T12311] syzkaller0: entered promiscuous mode [ 228.152910][T12311] syzkaller0: entered allmulticast mode [ 228.175478][ T9694] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 228.548738][T12326] netlink: zone id is out of range [ 228.555325][ T9694] bond1: (slave bridge1): failed to get link speed/duplex [ 228.567012][T12325] __nla_validate_parse: 7 callbacks suppressed [ 228.567031][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 228.576171][T12326] netlink: zone id is out of range [ 228.646705][T12326] netlink: zone id is out of range [ 228.654417][T12326] netlink: zone id is out of range [ 228.883672][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 228.912809][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 229.019979][T12349] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1655'. [ 229.313636][T12361] tipc: Enabled bearer , priority 0 [ 229.356245][T12361] syzkaller0: entered promiscuous mode [ 229.369929][T12369] FAULT_INJECTION: forcing a failure. [ 229.369929][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 229.385644][T12361] syzkaller0: entered allmulticast mode [ 229.416131][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.1.1658 Not tainted syzkaller #0 PREEMPT(full) [ 229.416159][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 229.416170][T12369] Call Trace: [ 229.416177][T12369] [ 229.416185][T12369] dump_stack_lvl+0xe8/0x150 [ 229.416213][T12369] should_fail_ex+0x412/0x560 [ 229.416239][T12369] should_failslab+0xa8/0x100 [ 229.416262][T12369] __kmalloc_cache_noprof+0x83/0x6e0 [ 229.416281][T12369] ? trace_kmalloc+0x1f/0xb0 [ 229.416295][T12369] ? call_usermodehelper_setup+0x8e/0x270 [ 229.416318][T12369] ? __kasan_kmalloc+0x93/0xb0 [ 229.416338][T12369] call_usermodehelper_setup+0x8e/0x270 [ 229.416360][T12369] ? __pfx_free_modprobe_argv+0x10/0x10 [ 229.416380][T12369] __request_module+0x3ba/0x610 [ 229.416402][T12369] ? __pfx___request_module+0x10/0x10 [ 229.416416][T12369] ? lockdep_hardirqs_on+0x7a/0x110 [ 229.416449][T12369] ? security_capable+0x7e/0x2c0 [ 229.416472][T12369] ? dev_load+0x21/0x1f0 [ 229.416490][T12369] dev_load+0x190/0x1f0 [ 229.416512][T12369] dev_ioctl+0x384/0x1150 [ 229.416535][T12369] sock_do_ioctl+0x23e/0x320 [ 229.416554][T12369] ? __pfx_sock_do_ioctl+0x10/0x10 [ 229.416569][T12369] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 229.416604][T12369] sock_ioctl+0x5c6/0x7f0 [ 229.416622][T12369] ? __pfx_sock_ioctl+0x10/0x10 [ 229.416637][T12369] ? __fget_files+0x2a/0x420 [ 229.416654][T12369] ? __fget_files+0x3a0/0x420 [ 229.416670][T12369] ? __fget_files+0x2a/0x420 [ 229.416689][T12369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 229.416709][T12369] ? __pfx_sock_ioctl+0x10/0x10 [ 229.416725][T12369] __se_sys_ioctl+0xfc/0x170 [ 229.416751][T12369] do_syscall_64+0xe2/0xf80 [ 229.416770][T12369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.416788][T12369] ? trace_irq_disable+0x37/0x100 [ 229.416805][T12369] ? clear_bhb_loop+0x60/0xb0 [ 229.416833][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.416851][T12369] RIP: 0033:0x7f5f60f9acb9 [ 229.416868][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.416884][T12369] RSP: 002b:00007f5f61e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.416905][T12369] RAX: ffffffffffffffda RBX: 00007f5f61216090 RCX: 00007f5f60f9acb9 [ 229.416919][T12369] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000004 [ 229.416930][T12369] RBP: 00007f5f61e8b090 R08: 0000000000000000 R09: 0000000000000000 [ 229.416941][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.416952][T12369] R13: 00007f5f61216128 R14: 00007f5f61216090 R15: 00007ffc9a1282b8 [ 229.416981][T12369] [ 229.956296][T12359] tipc: Resetting bearer [ 229.974859][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'. [ 230.006109][T12387] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1666'. [ 230.018393][T12359] tipc: Disabling bearer [ 230.095926][T12397] netlink: 'syz.1.1667': attribute type 13 has an invalid length. [ 230.141839][T12399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1668'. [ 230.459989][T12397] batman_adv: batadv0: Interface deactivated: dummy0 [ 230.478098][T12397] tipc: Resetting bearer [ 230.605696][T12397] veth1_vlan: left allmulticast mode [ 230.748840][T12400] veth8: entered allmulticast mode [ 230.764524][T12402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1669'. [ 230.774121][T12402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1669'. [ 230.805375][T12411] netlink: 'syz.0.1671': attribute type 11 has an invalid length. [ 230.813229][T12411] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1671'. [ 230.927568][T12260] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.981983][T12260] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.029200][T12260] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.075484][T12260] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.083909][T12260] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.105306][T12260] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.140254][T12260] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.173858][T12260] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.295700][T12436] FAULT_INJECTION: forcing a failure. [ 231.295700][T12436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.345353][T12436] CPU: 1 UID: 0 PID: 12436 Comm: syz.0.1677 Not tainted syzkaller #0 PREEMPT(full) [ 231.345379][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 231.345390][T12436] Call Trace: [ 231.345397][T12436] [ 231.345406][T12436] dump_stack_lvl+0xe8/0x150 [ 231.345434][T12436] should_fail_ex+0x412/0x560 [ 231.345461][T12436] _copy_from_user+0x2d/0xb0 [ 231.345488][T12436] ethtool_set_features+0x10b/0x300 [ 231.345511][T12436] ? __pfx_ethtool_set_features+0x10/0x10 [ 231.345527][T12436] ? apparmor_capable+0x137/0x1a0 [ 231.345556][T12436] ? security_capable+0x7e/0x2c0 [ 231.345583][T12436] dev_ethtool+0xfa5/0x1ae0 [ 231.345619][T12436] ? __pfx_dev_ethtool+0x10/0x10 [ 231.345641][T12436] ? dev_load+0x21/0x1f0 [ 231.345675][T12436] ? dev_load+0x21/0x1f0 [ 231.345691][T12436] dev_ioctl+0x392/0x1150 [ 231.345711][T12436] sock_do_ioctl+0x23e/0x320 [ 231.345728][T12436] ? __pfx_sock_do_ioctl+0x10/0x10 [ 231.345743][T12436] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 231.345782][T12436] sock_ioctl+0x5c6/0x7f0 [ 231.345801][T12436] ? __pfx_sock_ioctl+0x10/0x10 [ 231.345819][T12436] ? __fget_files+0x2a/0x420 [ 231.345838][T12436] ? __fget_files+0x3a0/0x420 [ 231.345857][T12436] ? __fget_files+0x2a/0x420 [ 231.345879][T12436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.345901][T12436] ? __pfx_sock_ioctl+0x10/0x10 [ 231.345918][T12436] __se_sys_ioctl+0xfc/0x170 [ 231.345953][T12436] do_syscall_64+0xe2/0xf80 [ 231.345973][T12436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.345991][T12436] ? trace_irq_disable+0x37/0x100 [ 231.346008][T12436] ? clear_bhb_loop+0x60/0xb0 [ 231.346028][T12436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.346045][T12436] RIP: 0033:0x7f8644f9acb9 [ 231.346062][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.346077][T12436] RSP: 002b:00007f86431f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.346097][T12436] RAX: ffffffffffffffda RBX: 00007f8645215fa0 RCX: 00007f8644f9acb9 [ 231.346111][T12436] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000004 [ 231.346123][T12436] RBP: 00007f86431f6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.346135][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.346146][T12436] R13: 00007f8645216038 R14: 00007f8645215fa0 R15: 00007fffbc72b2b8 [ 231.346177][T12436] [ 231.741315][T12446] tipc: Enabled bearer , priority 0 [ 231.770923][T12446] syzkaller0: entered promiscuous mode [ 231.806918][T12446] syzkaller0: entered allmulticast mode [ 231.961730][T12445] tipc: Resetting bearer [ 232.025979][T12445] tipc: Disabling bearer [ 232.234322][T12472] netlink: 'syz.2.1690': attribute type 5 has an invalid length. [ 232.255014][T12478] tipc: Enabled bearer , priority 0 [ 232.312035][T12478] syzkaller0: entered promiscuous mode [ 232.325372][T12478] syzkaller0: entered allmulticast mode [ 232.367861][T12478] tipc: Resetting bearer [ 232.407646][T12469] tipc: Resetting bearer [ 232.448365][T12494] net_ratelimit: 70 callbacks suppressed [ 232.448384][T12494] openvswitch: netlink: Unknown key attributes 2 [ 232.461274][T12469] tipc: Disabling bearer [ 232.484067][T12495] syzkaller0: entered promiscuous mode [ 232.503327][T12495] syzkaller0: entered allmulticast mode [ 232.587116][T12498] FAULT_INJECTION: forcing a failure. [ 232.587116][T12498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.590817][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 232.625486][T12498] CPU: 1 UID: 0 PID: 12498 Comm: syz.2.1695 Not tainted syzkaller #0 PREEMPT(full) [ 232.625512][T12498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 232.625523][T12498] Call Trace: [ 232.625530][T12498] [ 232.625538][T12498] dump_stack_lvl+0xe8/0x150 [ 232.625565][T12498] should_fail_ex+0x412/0x560 [ 232.625592][T12498] _copy_to_user+0x31/0xb0 [ 232.625620][T12498] simple_read_from_buffer+0xe1/0x170 [ 232.625642][T12498] proc_fail_nth_read+0x1bb/0x230 [ 232.625671][T12498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.625697][T12498] ? rw_verify_area+0x2a6/0x4d0 [ 232.625716][T12498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.625735][T12498] vfs_read+0x20c/0xa70 [ 232.625751][T12498] ? fdget_pos+0x246/0x320 [ 232.625769][T12498] ? __pfx___mutex_lock+0x10/0x10 [ 232.625785][T12498] ? __pfx_vfs_read+0x10/0x10 [ 232.625804][T12498] ? __fget_files+0x2a/0x420 [ 232.625821][T12498] ? __fget_files+0x3a0/0x420 [ 232.625834][T12498] ? __fget_files+0x2a/0x420 [ 232.625854][T12498] ksys_read+0x150/0x270 [ 232.625874][T12498] ? __pfx_ksys_read+0x10/0x10 [ 232.625891][T12498] ? __pfx_sock_ioctl+0x10/0x10 [ 232.625918][T12498] do_syscall_64+0xe2/0xf80 [ 232.625933][T12498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.625947][T12498] ? clear_bhb_loop+0x60/0xb0 [ 232.625963][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.625976][T12498] RIP: 0033:0x7f03f255b58e [ 232.625990][T12498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.626001][T12498] RSP: 002b:00007f03f3467fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.626017][T12498] RAX: ffffffffffffffda RBX: 00007f03f34686c0 RCX: 00007f03f255b58e [ 232.626027][T12498] RDX: 000000000000000f RSI: 00007f03f34680a0 RDI: 000000000000000b [ 232.626036][T12498] RBP: 00007f03f3468090 R08: 0000000000000000 R09: 0000000000000000 [ 232.626045][T12498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.626053][T12498] R13: 00007f03f2816038 R14: 00007f03f2815fa0 R15: 00007ffcba77b6a8 [ 232.626076][T12498] [ 232.842881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.147978][T12508] wg1 speed is unknown, defaulting to 1000 [ 233.155664][T12275] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 233.255495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.295252][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.337634][T12510] nft_compat: unsupported protocol 1 [ 233.355765][T12278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 233.485285][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 233.557437][T12506] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 233.566617][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.901668][T12527] bond7 (unregistering): Released all slaves [ 234.014720][T12531] __nla_validate_parse: 3 callbacks suppressed [ 234.014737][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 234.033543][T12538] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1706'. [ 234.080009][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 234.115100][T12531] netlink: 'syz.2.1705': attribute type 6 has an invalid length. [ 234.133549][T12272] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.133558][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 234.133592][T12272] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.185316][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 234.201603][T12272] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.214573][T12531] netlink: 'syz.2.1705': attribute type 6 has an invalid length. [ 234.222761][T12272] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.241502][T12542] hsr0: entered promiscuous mode [ 234.249557][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 234.268747][T12542] hsr_slave_0: left promiscuous mode [ 234.299588][T12542] hsr_slave_1: left promiscuous mode [ 234.414289][T12542] hsr0 (unregistering): left promiscuous mode [ 234.441202][T12552] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1710'. [ 234.585979][T12561] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 234.650219][T12561] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.665575][T12556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1712'. [ 234.722245][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'. [ 234.731419][T12566] netlink: 'syz.2.1713': attribute type 1 has an invalid length. [ 234.737425][T12564] wg1 speed is unknown, defaulting to 1000 [ 234.775969][T12568] syzkaller0: entered promiscuous mode [ 234.781663][T12568] syzkaller0: entered allmulticast mode [ 234.892495][T12570] vlan4: entered promiscuous mode [ 234.905426][T12570] bridge0: entered promiscuous mode [ 234.965906][T12573] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 235.007836][T12573] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 235.081391][T12577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1720'. [ 235.093422][T12578] netlink: 'syz.1.1719': attribute type 4 has an invalid length. [ 235.145255][T12581] netlink: 'syz.1.1719': attribute type 4 has an invalid length. [ 235.237563][T12580] syz_tun: entered allmulticast mode [ 235.327090][T12583] siw: device registration error -23 [ 235.493333][T12579] syz_tun: left allmulticast mode [ 235.503348][T12589] wg1 speed is unknown, defaulting to 1000 [ 236.178631][T12613] wg1 speed is unknown, defaulting to 1000 [ 236.504875][T12641] geneve4: entered promiscuous mode [ 236.725086][T12658] wg1 speed is unknown, defaulting to 1000 [ 236.817445][T12664] xt_nat: multiple ranges no longer supported [ 236.943371][T12659] bond0: (slave bond_slave_1): Releasing backup interface [ 237.077073][T12662] wg1 speed is unknown, defaulting to 1000 [ 237.116217][T12675] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 237.192167][T12675] bond4: entered promiscuous mode [ 237.224546][T12681] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 237.235276][T12682] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 237.244623][T12675] bond4: entered allmulticast mode [ 237.250724][T12675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.377157][T12678] erspan1: entered allmulticast mode [ 237.386458][T12678] bond4: (slave erspan1): making interface the new active one [ 237.413686][T12678] erspan1: entered promiscuous mode [ 237.447296][T12678] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 237.674926][T12704] netlink: 'syz.2.1749': attribute type 5 has an invalid length. [ 237.718056][T12707] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.745245][ C0] net_ratelimit: 18 callbacks suppressed [ 237.745263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.759294][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.798343][T12716] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 237.831800][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.261338][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.484937][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.507930][T12746] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 238.545521][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 238.579046][T12752] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.595795][T12752] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.795293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.223086][T12764] vlan3: entered promiscuous mode [ 239.341623][T12752] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.351930][T12752] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.469523][T12752] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.508604][T12752] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.519061][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.529386][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.607235][T12752] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.643704][T12793] __nla_validate_parse: 20 callbacks suppressed [ 239.643722][T12793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'. [ 239.665761][T12752] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.719250][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1770'. [ 239.778919][T12802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1772'. [ 239.876472][T12804] nbd: socks must be embedded in a SOCK_ITEM attr [ 239.951729][T12278] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.975207][T12278] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.979608][T12811] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1774'. [ 240.042611][T12257] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.074698][T12806] validate_nla: 2 callbacks suppressed [ 240.074719][T12806] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 240.083629][T12257] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.196902][T12815] macsec0: entered allmulticast mode [ 240.215346][T12275] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.234136][T12275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.300597][T12815] veth1_macvtap: entered allmulticast mode [ 240.315857][T12815] macsec0: left allmulticast mode [ 240.337739][T12815] veth1_macvtap: left allmulticast mode [ 240.360850][T12275] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.385248][T12275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.417576][T12834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1783'. [ 240.594355][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 240.716339][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 240.759933][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 241.004049][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 241.027771][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 241.064221][T12869] macsec1: entered promiscuous mode [ 241.083561][T12869] bridge0: port 2(macsec1) entered blocking state [ 241.104685][T12869] bridge0: port 2(macsec1) entered disabled state [ 241.128355][T12869] macsec1: entered allmulticast mode [ 241.148096][T12869] bridge0: entered allmulticast mode [ 241.174241][T12869] macsec1: left allmulticast mode [ 241.194326][T12869] bridge0: left allmulticast mode [ 241.556872][T12897] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 241.663433][T12897] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 241.751685][T12900] bridge5: entered promiscuous mode [ 241.767552][T12900] bridge5: entered allmulticast mode [ 241.797371][T12900] team0: Port device bridge5 added [ 241.996362][T12912] wg1 speed is unknown, defaulting to 1000 [ 242.050628][T12921] netlink: 'syz.3.1805': attribute type 3 has an invalid length. [ 242.070802][T12904] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 242.141787][T12904] batadv_slave_0: left promiscuous mode [ 242.152431][T12904] team1: left promiscuous mode [ 242.158614][T12904] team2: left promiscuous mode [ 242.164049][T12904] team3: left promiscuous mode [ 242.170742][T12904] macsec1: left promiscuous mode [ 242.339578][T12930] netlink: 'syz.2.1809': attribute type 4 has an invalid length. [ 242.699547][T12936] wg1 speed is unknown, defaulting to 1000 [ 242.810321][T12952] bond0: entered promiscuous mode [ 242.835260][T12952] bond_slave_0: entered promiscuous mode [ 242.841233][T12952] bond_slave_1: entered promiscuous mode [ 242.859347][T12952] dummy0: entered promiscuous mode [ 242.876852][T12952] batadv0: entered promiscuous mode [ 242.883226][T12952] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 243.155348][T12260] net_ratelimit: 20 callbacks suppressed [ 243.155368][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 243.187443][T12964] netlink: 'syz.1.1818': attribute type 2 has an invalid length. [ 243.305083][T12973] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 243.450074][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 243.508561][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.614900][T12986] wg1 speed is unknown, defaulting to 1000 [ 243.644193][T12995] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 243.712192][T12257] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 243.752365][T12997] syzkaller0: entered promiscuous mode [ 243.765641][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.801624][T12997] syzkaller0: entered allmulticast mode [ 243.908558][T13007] gtp1: entered allmulticast mode [ 243.915563][T13007] team0: Device gtp1 is of different type [ 244.275612][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 244.341561][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.422815][T12257] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 244.481202][T13031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 244.545244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.659839][T13043] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 244.813817][T13043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.873075][T13052] geneve2: entered promiscuous mode [ 244.892759][T13052] geneve2: entered allmulticast mode [ 244.920308][ T33] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.941788][ T33] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.976520][ T33] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.002701][ T33] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.087747][T13051] wg1 speed is unknown, defaulting to 1000 [ 246.380955][T13105] __nla_validate_parse: 17 callbacks suppressed [ 246.380973][T13105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 248.251713][T13127] smc: net device wlan0 applied user defined pnetid SYZ0 [ 248.293069][T13134] bond6: option tlb_dynamic_lb: invalid value (5) [ 248.301733][T13134] bond6 (unregistering): Released all slaves [ 248.502782][T13145] veth1_macvtap: left promiscuous mode [ 248.522460][T13145] macsec0: entered allmulticast mode [ 248.548816][T13145] veth1_macvtap: entered promiscuous mode [ 248.554609][T13145] veth1_macvtap: entered allmulticast mode [ 248.565566][ T5958] net_ratelimit: 17 callbacks suppressed [ 248.565585][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.568930][T13150] netlink: 'syz.0.1861': attribute type 4 has an invalid length. [ 248.598179][T13145] macsec0: left allmulticast mode [ 248.603250][T13145] veth1_macvtap: left allmulticast mode [ 248.625334][ C1] ip6_tunnel: H xmit: Local address not yet configured! [ 248.650664][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 248.660402][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'. [ 248.691802][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 248.714032][T13148] tipc: Enabled bearer , priority 0 [ 248.720775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.758578][T13148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.777490][T13154] batman_adv: batadv0: Adding interface: macvtap0 [ 248.789886][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 248.798948][T13154] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.798983][T13154] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 248.836128][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 248.849882][T13148] tipc: Resetting bearer [ 248.871906][T13147] tipc: Disabling bearer [ 248.919418][T13159] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 249.087697][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 249.273417][T13178] netlink: 'syz.2.1869': attribute type 21 has an invalid length. [ 249.495468][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 249.608153][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.665798][ T3019] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 249.924162][T13210] netlink: 'syz.0.1880': attribute type 3 has an invalid length. [ 249.945657][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 249.953261][T13210] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 249.984160][T13210] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1880'. [ 250.256931][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 250.312735][T13226] netlink: 'syz.0.1885': attribute type 11 has an invalid length. [ 250.385528][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.654234][T13238] bond0 (unregistering): Released all slaves [ 250.760419][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 250.777914][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1889'. [ 250.796904][T13246] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 250.804900][T13246] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1889'. [ 251.061757][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 251.061776][ T30] audit: type=1107 audit(1769396495.401:73): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='»'‘Geì€*d*à–¿r*Úm±`Vž ûûklÙe¬9癹ùÿI÷ç )§¥óÛÖzÈg}Ñ@>*aç9ØmÒî«ðK‚€dÈ1J'Áó#¢´D"|P‡ÈŒkÝF]¼HŽß¾Ò’¶SgþD¥”')ˆ=£³ÙaÈH8h½Og¢ú´óÊ1–Å9øNY–þ 4QHÒ i½yö'bÉ> [ 251.061776][ T30] Ì E˜÷iÔé­þA›&ò-lÛ·òðúŽõt(:rú†;9 [ 251.061776][ T30] S6‚¤ÅÑlè„ÐÄ(DuØ‘' [ 251.409959][T13273] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1899'. [ 251.667950][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 251.880291][T13305] sctp: [Deprecated]: syz.3.1908 (pid 13305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.880291][T13305] Use struct sctp_sack_info instead [ 253.483790][T13323] lec:lec_atm_close: lec0: Shut down! [ 253.662296][T13372] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 253.757354][T13372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.765227][ T44] net_ratelimit: 10 callbacks suppressed [ 253.765256][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 253.797986][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.804662][T13380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1925'. [ 254.035708][T13393] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1927'. [ 254.075351][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 254.145244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.227542][T13403] wg1 speed is unknown, defaulting to 1000 [ 254.384918][T13408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1931'. [ 254.501313][T13408] bond7: option resend_igmp: invalid value (2878) [ 254.536861][T13408] bond7: option resend_igmp: allowed values 0 - 255 [ 254.546668][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 254.576329][T13408] bond7 (unregistering): Released all slaves [ 254.656826][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 254.671749][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 254.762869][T13414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.845878][T13413] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 254.872770][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.873359][T13413] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 254.951252][T13423] pimreg: entered allmulticast mode [ 255.051143][T13418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.076978][T13418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.113095][T13418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.185255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.202995][T13434] tipc: Enabled bearer , priority 0 [ 255.228017][T13423] pimreg: left allmulticast mode [ 255.296306][T13438] syzkaller0: entered promiscuous mode [ 255.312272][T13438] syzkaller0: entered allmulticast mode [ 255.360205][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 255.396510][T13438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.446069][T13430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 255.507554][T13434] tipc: Resetting bearer [ 255.524242][T13429] tipc: Resetting bearer [ 255.572586][T13429] tipc: Disabling bearer [ 255.648476][T13418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.671502][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 255.679701][T13418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.691020][T13418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.724372][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'. [ 255.774446][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'. [ 255.867663][T13418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.888751][T13418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.909339][T13418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.960458][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.025340][T12261] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 256.116888][T13418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.144334][T13418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.155661][T13418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 256.472435][T12278] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.489333][T12278] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.505528][T12278] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.514645][T12278] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.524885][T13491] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 256.544535][T12278] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.555250][T12278] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.577887][T13493] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 256.596492][T13491] bond0: (slave dummy0): Releasing backup interface [ 256.614071][T13491] dummy0: left promiscuous mode [ 256.639781][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.665803][T13491] team0: Port device dummy0 added [ 256.688854][T13493] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 256.718765][T13493] team0: Failed to send options change via netlink (err -105) [ 256.728174][T13493] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 256.738116][T13493] team0: Port device dummy0 removed [ 256.757930][T13493] dummy0: entered promiscuous mode [ 256.763848][T13493] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 256.775612][T12263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.787271][T12263] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.797687][T12263] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.938156][T13418] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.960033][T13418] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.988742][T13418] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.996031][T13504] __nla_validate_parse: 1 callbacks suppressed [ 256.996048][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 257.057665][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 257.074037][T13418] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.095566][T13418] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 257.107267][T13418] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.189560][T13418] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.205433][T13418] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 257.220597][T13418] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.362841][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1953'. [ 257.552969][T13529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1956'. [ 257.612570][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1953'. [ 257.691773][T13539] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 257.809686][T13545] bond7: entered promiscuous mode [ 257.840375][T13545] bond7: entered allmulticast mode [ 257.867253][T13545] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.922825][T13552] team0: Device ipip0 is of different type [ 258.014699][T13545] bond8 (unregistering): Released all slaves [ 258.246399][T13560] netlink: 'syz.2.1962': attribute type 89 has an invalid length. [ 258.329644][T13564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1964'. [ 258.525931][T13574] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 258.538238][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 258.539364][T13574] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1966'. [ 258.569048][T13574] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1966'. [ 258.586080][T13574] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 258.604368][T13574] netlink: 'syz.0.1966': attribute type 8 has an invalid length. [ 258.654316][T13574] netlink: 582 bytes leftover after parsing attributes in process `syz.0.1966'. [ 258.785603][T12257] net_ratelimit: 16 callbacks suppressed [ 258.785622][T12257] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 258.817848][T13579] syzkaller1: entered promiscuous mode [ 258.833601][T13579] syzkaller1: entered allmulticast mode [ 259.026497][T12257] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 259.137226][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.181913][T13594] 8021q: VLANs not supported on ip_vti0 [ 259.327198][T13594] syzkaller0: entered promiscuous mode [ 259.337719][T13594] syzkaller0: entered allmulticast mode [ 259.345520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.370621][T13600] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 259.389333][T13600] netlink: 'syz.0.1974': attribute type 2 has an invalid length. [ 259.406257][T13600] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 259.523540][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.155664][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.399669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.486994][T13614] netlink: Unknown conntrack attr (type=2304, max=9) [ 260.765206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 260.773644][ C1] lec:lec_tx_timeout: lec0 [ 260.778385][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.186118][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.331099][T13622] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 261.426257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.238357][T13622] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 262.448550][T13645] netlink: 'syz.3.1983': attribute type 9 has an invalid length. [ 262.507418][T13637] wg1 speed is unknown, defaulting to 1000 [ 262.531279][T13645] __nla_validate_parse: 5 callbacks suppressed [ 262.531294][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 262.591780][T13645] hsr0: entered promiscuous mode [ 262.625707][T13645] macvlan2: entered promiscuous mode [ 262.631232][T13645] macvlan2: entered allmulticast mode [ 262.649681][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 262.655407][T13645] hsr0: entered allmulticast mode [ 262.663948][T13645] hsr_slave_0: entered allmulticast mode [ 262.695336][T13645] hsr_slave_1: entered allmulticast mode [ 263.046772][T13673] netlink: 'syz.2.1988': attribute type 89 has an invalid length. [ 263.175917][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1991'. [ 263.224666][T13684] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.293376][T13688] netlink: 584 bytes leftover after parsing attributes in process `syz.1.1991'. [ 263.530739][T13676] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 264.232910][T13719] netlink: 'syz.0.1996': attribute type 5 has an invalid length. [ 264.315526][T13723] netlink: 'syz.4.1997': attribute type 29 has an invalid length. [ 264.323619][T12257] net_ratelimit: 11 callbacks suppressed [ 264.323736][T12257] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 264.340190][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.465495][T13728] netlink: 'syz.3.1999': attribute type 4 has an invalid length. [ 264.493993][T13728] netlink: 'syz.3.1999': attribute type 8 has an invalid length. [ 264.507500][T13726] syzkaller0: entered promiscuous mode [ 264.513005][T13726] syzkaller0: entered allmulticast mode [ 264.529586][T13728] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1999'. [ 264.545388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.723057][T13741] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 264.786683][T13745] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2003'. [ 264.845794][T12275] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 265.065888][ T30] audit: type=1800 audit(1769396509.411:74): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2001" name="memory.events" dev="tmpfs" ino=2094 res=0 errno=0 [ 265.375330][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.585509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.594267][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.626873][T13784] C: renamed from team_slave_0 [ 265.669216][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 265.701678][T13784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2012'. [ 265.764862][T13784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.825385][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 265.833533][ C1] lec:lec_tx_timeout: lec0 [ 265.838240][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.884093][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 265.935249][T13784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2012'. [ 265.977389][T13784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.017936][T13799] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2015'. [ 266.036858][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 266.051383][T13784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2012'. [ 266.100239][T13784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.169815][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 266.215048][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 266.228048][T13807] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 266.242485][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 266.276385][T13784] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 267.329639][T13841] wg1 speed is unknown, defaulting to 1000 [ 267.806620][T13870] __nla_validate_parse: 34 callbacks suppressed [ 267.806639][T13870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2030'. [ 267.887814][T13873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2030'. [ 268.240797][T13872] syzkaller0: entered promiscuous mode [ 268.246571][T13872] syzkaller0: entered allmulticast mode [ 268.249949][T13885] netlink: 'syz.1.2032': attribute type 11 has an invalid length. [ 269.515834][ T5966] net_ratelimit: 41 callbacks suppressed [ 269.515852][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.565463][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.845201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.853267][ C1] lec:lec_tx_timeout: lec0 [ 270.858213][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.541142][T13886] kthread_run failed with err -4 [ 271.641781][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.665973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.723125][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 271.824141][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 271.897024][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 272.049628][T13913] veth3: entered allmulticast mode [ 272.120089][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 272.191834][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2039'. [ 272.209718][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 272.315859][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.452612][T13939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2041'. [ 272.714711][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.047982][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 273.228546][T13980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2051'. [ 273.355253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.378613][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 273.581629][T14007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2056'. [ 273.736542][T14017] lo speed is unknown, defaulting to 1000 [ 273.760413][T14017] lo speed is unknown, defaulting to 1000 [ 273.797575][T14017] lo speed is unknown, defaulting to 1000 [ 273.873697][T14017] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.929611][T14017] lo speed is unknown, defaulting to 1000 [ 273.946697][T14021] netlink: 163660 bytes leftover after parsing attributes in process `syz.1.2060'. [ 273.956620][T14017] lo speed is unknown, defaulting to 1000 [ 273.964109][T14017] lo speed is unknown, defaulting to 1000 [ 273.973944][T14017] lo speed is unknown, defaulting to 1000 [ 273.984736][T14017] lo speed is unknown, defaulting to 1000 [ 274.273736][T14041] validate_nla: 26 callbacks suppressed [ 274.273753][T14041] netlink: 'syz.3.2066': attribute type 89 has an invalid length. [ 274.645616][ T12] net_ratelimit: 8 callbacks suppressed [ 274.645635][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 274.742887][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.795962][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.876065][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 274.978878][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 275.242627][T14081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.265367][T14083] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 275.274891][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 275.425482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.555292][T12276] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 275.575632][T14095] syzkaller0: entered allmulticast mode [ 275.609546][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 275.779246][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2082'. [ 275.786301][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 275.835275][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.865180][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.873341][ C1] lec:lec_tx_timeout: lec0 [ 275.878107][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.885409][T14103] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2085'. [ 276.057660][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 276.349241][T14117] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 276.385322][T14117] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 276.667608][T14141] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 276.676743][T14141] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 277.033987][T14163] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 277.044364][T14163] batman_adv: batadv0: Removing interface: dummy0 [ 277.086775][T14163] team0: Port device dummy0 added [ 277.109746][T14167] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 277.188242][T14163] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 277.214132][T14163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2100'. [ 277.324837][T14167] team0: Port device dummy0 removed [ 277.356371][T14167] dummy0: entered promiscuous mode [ 277.476888][T14177] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 277.500160][T14178] pim6reg1: entered promiscuous mode [ 277.554348][T14178] pim6reg1: entered allmulticast mode [ 277.709826][T14192] 0ªî{X¹¦: renamed from gretap0 [ 277.767789][T14192] 0ªî{X¹¦: entered allmulticast mode [ 278.453860][T14224] pim6reg1: entered promiscuous mode [ 278.493133][T14224] pim6reg1: entered allmulticast mode [ 278.516978][T14225] __nla_validate_parse: 2 callbacks suppressed [ 278.517000][T14225] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2117'. [ 278.591360][T14225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2117'. [ 278.684983][T14229] lo speed is unknown, defaulting to 1000 [ 278.851832][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 279.071062][T14249] bridge6: entered promiscuous mode [ 279.087942][T14249] bridge6: entered allmulticast mode [ 279.129208][T14247] bridge7: entered promiscuous mode [ 279.134609][T14247] bridge7: entered allmulticast mode [ 279.270379][T14254] xfrm0: left allmulticast mode [ 279.278964][T14254] macvlan0: left allmulticast mode [ 279.290479][T14254] gtp0: left allmulticast mode [ 279.302220][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'. [ 279.318049][T14254] bond1: left allmulticast mode [ 279.322939][T14254] bridge1: left allmulticast mode [ 279.356275][T14254] ip6gre1: left allmulticast mode [ 279.381143][T14254] team1: left promiscuous mode [ 279.389424][T14254] team1: left allmulticast mode [ 279.400487][T14254] gtp1: left promiscuous mode [ 279.406257][T14254] gtp1: left allmulticast mode [ 279.411749][T14254] sit1: left promiscuous mode [ 279.421682][T14254] sit1: left allmulticast mode [ 279.428060][T14254] bridge5: left allmulticast mode [ 279.440818][T14254] bridge6: left allmulticast mode [ 279.463977][T14254] veth8: left allmulticast mode [ 279.478538][T14254] geneve2: left promiscuous mode [ 279.489362][T14254] geneve2: left allmulticast mode [ 279.559304][T14256] geneve3: entered promiscuous mode [ 279.564794][T14256] geneve3: entered allmulticast mode [ 279.575994][ T44] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.584470][ T44] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.931841][ T44] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.941466][ T44] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.952194][ T44] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.974882][ T44] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.996330][ T5958] net_ratelimit: 16 callbacks suppressed [ 279.996350][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.016747][ T44] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.036494][ T44] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 280.245537][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 280.655927][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 280.795437][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.885183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.885296][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 280.893198][ C1] lec:lec_tx_timeout: lec0 [ 280.905498][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.035250][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.085304][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 281.195823][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 281.625386][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 281.905874][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.025475][ C0] net_ratelimit: 14 callbacks suppressed [ 285.025497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.076200][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 285.195300][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.565326][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 285.855316][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 285.915206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.923223][ C1] lec:lec_tx_timeout: lec0 [ 285.927792][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.065306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.146274][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 286.246409][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.765308][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 286.866689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.095632][T12263] net_ratelimit: 23 callbacks suppressed [ 290.095648][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.215620][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.226184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.325359][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.385435][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.435583][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.545309][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.655634][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.765307][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.875607][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 290.935327][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 290.943362][ C1] lec:lec_tx_timeout: lec0 [ 290.947954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.175317][ T33] net_ratelimit: 50 callbacks suppressed [ 295.175339][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.295383][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.405554][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.515287][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.585689][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.625331][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.665261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.735733][T12272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.845282][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.955252][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.955799][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 295.963277][ C1] lec:lec_tx_timeout: lec0 [ 295.975432][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 300.285430][T12273] net_ratelimit: 47 callbacks suppressed [ 300.285452][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.405468][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.515440][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.625742][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.745366][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.787399][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.855472][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.965750][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 300.985219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 300.993250][ C1] lec:lec_tx_timeout: lec0 [ 300.997797][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.085575][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 301.105940][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.385834][ T12] net_ratelimit: 47 callbacks suppressed [ 305.392720][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.505617][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.585634][T12263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.594682][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.603815][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.615275][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.725249][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.835608][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.945391][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 305.986494][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.005248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.013257][ C1] lec:lec_tx_timeout: lec0 [ 306.017956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.201947][T14286] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 310.308301][T14296] bond8: option lacp_active: invalid value (8) [ 310.339383][T14296] bond8 (unregistering): Released all slaves [ 310.402699][T14307] tipc: Enabled bearer , priority 24 [ 310.469410][T14313] netlink: 'syz.2.2140': attribute type 1 has an invalid length. [ 310.482761][T14313] netlink: 'syz.2.2140': attribute type 2 has an invalid length. [ 310.495295][ T33] net_ratelimit: 45 callbacks suppressed [ 310.495313][ T33] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 310.615324][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 310.671643][T14321] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 310.715416][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.723815][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2143'. [ 310.847690][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'. [ 310.895383][T14321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.185839][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.246527][T14329] bond5 (unregistering): Released all slaves [ 311.325414][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 311.436445][T12260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 311.515289][ T5958] tipc: Node number set to 2353251248 [ 311.535951][T14357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.578285][T12263] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 311.613595][T14365] netlink: 'syz.3.2154': attribute type 1 has an invalid length. [ 311.621765][T14365] netlink: 'syz.3.2154': attribute type 4 has an invalid length. [ 311.630481][T14365] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.2154'. [ 311.686924][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.707404][T12273] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 311.803233][T14370] netlink: 'syz.1.2155': attribute type 39 has an invalid length. [ 311.941469][T14386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2159'. [ 311.972487][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 311.988253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 311.996332][ C1] lec:lec_tx_timeout: lec0 [ 312.004821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.019598][T14384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2161'. [ 312.291906][T14387] lo speed is unknown, defaulting to 1000 [ 312.390436][T14410] netlink: 'syz.1.2165': attribute type 89 has an invalid length. [ 312.434932][T14407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2164'. [ 313.096187][T14430] lo speed is unknown, defaulting to 1000 [ 313.467671][T14468] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 313.496429][T14454] lo speed is unknown, defaulting to 1000 [ 313.511557][T14468] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2172'. [ 313.623375][T14449] x_tables: duplicate entry at hook 2 [ 314.182390][T14491] lo speed is unknown, defaulting to 1000 [ 314.193353][T14502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2178'. [ 314.215733][T14502] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 314.243784][T14502] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 314.252428][T14502] bond4: left promiscuous mode [ 314.258904][T14502] erspan1: left promiscuous mode [ 314.936547][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.206785][T14553] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2190'. [ 315.515284][ T60] net_ratelimit: 29 callbacks suppressed [ 315.515305][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 315.653925][T14578] veth1_macvtap: left promiscuous mode [ 315.677399][T14578] macsec0: entered allmulticast mode [ 315.705375][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 315.727570][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 315.742215][T14578] veth1_macvtap: entered promiscuous mode [ 315.757242][T14586] netlink: 'syz.1.2199': attribute type 2 has an invalid length. [ 315.759471][T14578] veth1_macvtap: entered allmulticast mode [ 315.792175][T14578] macsec0: left allmulticast mode [ 315.797883][T14578] veth1_macvtap: left allmulticast mode [ 315.848561][T14596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'. [ 315.860660][T14586] !: entered promiscuous mode [ 315.888891][T14596] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 315.905264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.947019][T14596] netlink: 'syz.1.2199': attribute type 2 has an invalid length. [ 315.954791][T14596] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 315.971167][T14589] lo speed is unknown, defaulting to 1000 [ 315.985293][ T44] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 316.009187][T14581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2196'. [ 316.026214][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 316.035511][T14581] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 316.134136][T14581] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 316.388017][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.529570][T14618] syzkaller0: entered promiscuous mode [ 316.553385][T14627] netlink: zone id is out of range [ 316.564401][T14618] syzkaller0: entered allmulticast mode [ 316.580036][T14631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2207'. [ 316.594617][T14627] netlink: zone id is out of range [ 316.706123][T14627] netlink: get zone limit has 8 unknown bytes [ 316.861920][T14638] bond5: Unable to set down delay as MII monitoring is disabled [ 316.912931][T14638] bond5 (unregistering): Released all slaves [ 316.945701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.969364][T14655] Cannot find add_set index 1 as target [ 317.110139][ C1] ip6_tunnel: H xmit: Local address not yet configured! [ 317.124428][T12284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 317.440299][T14679] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 317.465806][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 317.492160][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 317.825167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 317.833232][ C1] lec:lec_tx_timeout: lec0 [ 317.839099][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.001004][T14714] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2226'. [ 318.043954][T14718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2227'. [ 318.140476][T14710] lo speed is unknown, defaulting to 1000 [ 318.725694][T14744] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 318.892054][T14749] delete_channel: no stack [ 318.906720][T14744] bond8: entered promiscuous mode [ 318.962019][T14744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.062013][T14750] bond8: (slave bridge4): making interface the new active one [ 319.084588][T14750] bridge4: entered promiscuous mode [ 319.129833][T14750] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 319.232331][T14770] netlink: 'syz.3.2236': attribute type 3 has an invalid length. [ 319.390086][T14775] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2238'. [ 319.476620][T14765] bridge_slave_1: left allmulticast mode [ 319.709673][T14765] veth1_vlan: left allmulticast mode [ 319.718597][T14765] macvlan1: left allmulticast mode [ 319.769286][T14765] tipc: Resetting bearer [ 319.842033][T14765] bridge1: left allmulticast mode [ 319.885829][T14765] bond2: left allmulticast mode [ 319.957875][T14795] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 319.994911][T14765] ip6gre1: left allmulticast mode [ 320.090971][T14765] bridge5: left promiscuous mode [ 320.105061][T14765] bridge5: left allmulticast mode [ 320.128081][T14765] bond7: left promiscuous mode [ 320.138964][T14765] bond7: left allmulticast mode [ 320.183508][T14765] bridge6: left promiscuous mode [ 320.196997][T14765] bridge6: left allmulticast mode [ 320.216179][T14765] bridge7: left promiscuous mode [ 320.221344][T14765] bridge7: left allmulticast mode [ 320.237240][ T9] lo speed is unknown, defaulting to 1000 [ 320.270859][ T9] syz2: Port: 1 Link DOWN [ 320.302068][T14795] geneve3: left promiscuous mode [ 320.338456][ T44] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.353579][ T44] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.370961][ T44] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.381255][ T44] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.404421][ T44] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.456142][ T44] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.480482][ T44] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.500276][ T44] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.539972][T14793] lo speed is unknown, defaulting to 1000 [ 320.744853][T14837] __nla_validate_parse: 2 callbacks suppressed [ 320.744880][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 321.040752][T14831] netlink: 'syz.0.2249': attribute type 1 has an invalid length. [ 321.780432][T14886] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2265'. [ 321.832874][T14882] lo speed is unknown, defaulting to 1000 [ 321.911437][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2266'. [ 322.190844][T14913] netlink: 'syz.1.2268': attribute type 29 has an invalid length. [ 322.326958][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 322.388855][T14915] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 322.407839][T14909] lo speed is unknown, defaulting to 1000 [ 322.564231][T14927] lo speed is unknown, defaulting to 1000 [ 322.634568][T14936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2279'. [ 322.698514][T14920] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 322.720801][T14920] netlink: 'syz.2.2275': attribute type 3 has an invalid length. [ 322.744631][T14920] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2275'. [ 322.760664][T14920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2275'. [ 322.774064][T14942] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2281'. [ 322.791397][T14920] netlink: 'syz.2.2275': attribute type 50 has an invalid length. [ 322.799761][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 322.845158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.853249][ C1] lec:lec_tx_timeout: lec0 [ 322.857988][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.598910][T14967] lo speed is unknown, defaulting to 1000 [ 323.706641][T14983] bridge0: port 1(veth0_to_bridge) entered blocking state [ 323.714130][T14983] bridge0: port 1(veth0_to_bridge) entered disabled state [ 323.721720][T14983] veth0_to_bridge: entered allmulticast mode [ 323.737127][T14983] veth0_to_bridge: entered promiscuous mode [ 323.804186][T14983] bridge0: port 1(veth0_to_bridge) entered blocking state [ 323.811642][T14983] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 323.948695][T14995] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2297'. [ 324.006506][T14994] macvtap1: entered promiscuous mode [ 324.018043][T14994] macvtap1: entered allmulticast mode [ 324.030692][T14994] dummy0: entered allmulticast mode [ 324.039169][T14994] dummy0: entered promiscuous mode [ 324.054400][T14994] team0: Device macvtap1 failed to register rx_handler [ 324.064117][T14994] dummy0: left allmulticast mode [ 324.069876][T14994] dummy0: left promiscuous mode [ 324.268433][T15007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 324.469830][T15018] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 324.889940][T15030] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.920638][T15030] bond0: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 324.934824][T15030] bond0: (slave ipvlan7): Error -95 calling set_mac_address [ 325.127349][T15039] netlink: 'syz.2.2310': attribute type 20 has an invalid length. [ 325.637380][ T33] net_ratelimit: 18 callbacks suppressed [ 325.637399][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.816182][T15075] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 325.824516][T15075] __nla_validate_parse: 4 callbacks suppressed [ 325.824534][T15075] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2319'. [ 325.929310][T15075] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 326.031256][T15085] syzkaller0: entered promiscuous mode [ 326.050602][T15085] syzkaller0: entered allmulticast mode [ 326.114714][T15082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2322'. [ 326.310592][T15098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2323'. [ 326.343491][T15098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2323'. [ 326.437562][T15102] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.497298][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2325'. [ 326.516895][T15102] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2325'. [ 326.640856][T15112] syzkaller1: entered promiscuous mode [ 326.654215][T15112] syzkaller1: entered allmulticast mode [ 326.706450][T12273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.715332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.724320][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.733053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.795517][T12273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.102335][T15138] lo speed is unknown, defaulting to 1000 [ 327.299742][T15150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.865168][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.873254][ C1] lec:lec_tx_timeout: lec0 [ 327.878176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.881817][T15174] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 327.995275][T15174] netlink: 'syz.1.2341': attribute type 3 has an invalid length. [ 328.025516][T15173] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2341'. [ 328.044739][T15174] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2341'. [ 328.077453][ T2088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.085837][ T2088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.100307][T15174] NCSI netlink: No device for ifindex 813332851 [ 328.332516][T15177] syzkaller0: entered promiscuous mode [ 328.345342][T15177] syzkaller0: entered allmulticast mode [ 328.402181][T15183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2344'. [ 328.428155][T15186] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2345'. [ 328.605751][T15196] syzkaller0: entered promiscuous mode [ 328.621893][T15196] syzkaller0: entered allmulticast mode [ 328.977486][T15216] xt_hashlimit: size too large, truncated to 1048576 [ 328.984476][T15217] xt_hashlimit: size too large, truncated to 1048576 [ 329.117679][T15227] netlink: 'syz.4.2359': attribute type 13 has an invalid length. [ 329.120196][T15228] tipc: Enabling of bearer rejected, failed to enable media [ 329.332159][T15241] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 329.360783][T15220] lo speed is unknown, defaulting to 1000 [ 329.397030][T15241] veth0_vlan: left promiscuous mode [ 329.407474][T15241] veth0_vlan: entered promiscuous mode [ 329.414397][T15241] team0: Device veth0_vlan failed to register rx_handler [ 330.216471][T15282] xt_l2tp: v2 doesn't support IP mode [ 330.817582][T15290] lo speed is unknown, defaulting to 1000 [ 331.172846][T15296] syzkaller0: entered promiscuous mode [ 331.184566][T15296] syzkaller0: entered allmulticast mode [ 331.190360][ T5901] net_ratelimit: 32 callbacks suppressed [ 331.190374][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.217601][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.260596][T15296] macsec0: entered promiscuous mode [ 331.266825][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.275864][T15296] macsec0: entered allmulticast mode [ 331.295392][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.305587][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.313831][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.346968][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.366591][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.376299][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.414299][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.711036][T15318] lo speed is unknown, defaulting to 1000 [ 331.846397][T15327] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 331.888746][T15329] __nla_validate_parse: 2 callbacks suppressed [ 331.888766][T15329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2383'. [ 331.936189][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 331.972974][T15329] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 331.993737][T15327] 8021q: adding VLAN 0 to HW filter on device bond8 [ 332.072654][T15336] bond8: (slave veth13): Enslaving as an active interface with a down link [ 332.108969][T15327] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.116743][T15327] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 332.172274][T15341] netlink: 'syz.2.2389': attribute type 8 has an invalid length. [ 332.652813][T15359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'. [ 332.842986][T15366] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2398'. [ 332.885173][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.893230][ C1] lec:lec_tx_timeout: lec0 [ 332.898419][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.050282][T15376] netlink: 'syz.2.2402': attribute type 15 has an invalid length. [ 333.060913][T15374] @0Ù: renamed from bond_slave_1 [ 333.143648][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 333.272442][T15388] batadv_slave_1: entered promiscuous mode [ 333.292671][T15387] batadv_slave_1: left promiscuous mode [ 333.469338][T15386] netlink: 'syz.1.2406': attribute type 4 has an invalid length. [ 333.852189][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 333.870600][T15418] vlan3: entered promiscuous mode [ 333.877154][T15418] bond0: entered promiscuous mode [ 333.882271][T15418] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 334.173445][T15426] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2418'. [ 334.287392][T15441] tipc: Enabled bearer , priority 0 [ 334.294818][T15441] syzkaller0: entered promiscuous mode [ 334.314239][T15441] syzkaller0: entered allmulticast mode [ 334.352048][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 334.416870][T15445] bond9: option ad_actor_sys_prio: invalid value (0) [ 334.423644][T15445] bond9: option ad_actor_sys_prio: allowed values 1 - 65535 [ 334.446981][T15445] bond9 (unregistering): Released all slaves [ 334.481775][T15450] tipc: Resetting bearer [ 334.501944][T15434] tipc: Resetting bearer [ 334.524030][T15434] tipc: Disabling bearer [ 334.861532][T15461] lo speed is unknown, defaulting to 1000 [ 335.037431][T15475] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2432'. [ 335.068621][T15475] IPv6: sit1: Disabled Multicast RS [ 335.205951][T15482] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 335.351560][T15484] syzkaller0: entered promiscuous mode [ 335.364073][T15484] syzkaller0: entered allmulticast mode [ 335.635594][T15500] netlink: 'syz.3.2439': attribute type 11 has an invalid length. [ 335.800968][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 335.866422][T15512] tap0: tun_chr_ioctl cmd 1074025677 [ 335.871992][T15512] tap0: linktype set to 1 [ 335.877683][T15508] lo speed is unknown, defaulting to 1000 [ 335.893404][T15511] syzkaller1: entered allmulticast mode [ 335.911799][T15502] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 336.262805][T15537] syzkaller0: entered promiscuous mode [ 336.274132][T15537] syzkaller0: entered allmulticast mode [ 336.376076][T15533] lo speed is unknown, defaulting to 1000 [ 336.472733][T15546] lo speed is unknown, defaulting to 1000 [ 336.636377][T15556] x_tables: duplicate underflow at hook 1 [ 336.763941][T15563] gretap0: left allmulticast mode [ 336.813452][T15563] veth0: left promiscuous mode [ 336.821147][T15563] veth0: left allmulticast mode [ 336.839402][T15563] bridge0: port 1(veth0_to_bridge) entered disabled state [ 336.994139][T15563] gretap1: left allmulticast mode [ 337.007948][T15563] geneve2: left promiscuous mode [ 337.016951][T15563] hsr0: left allmulticast mode [ 337.021754][T15563] hsr_slave_0: left allmulticast mode [ 337.028223][T15563] hsr_slave_1: left allmulticast mode [ 337.034443][T15563] macvlan2: left promiscuous mode [ 337.042777][T15563] macvlan2: left allmulticast mode [ 337.086431][T15566] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 337.112894][T15563] vlan3: left promiscuous mode [ 337.118076][T15563] bond0: left promiscuous mode [ 337.122843][T15563] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 337.133833][T15566] __nla_validate_parse: 2 callbacks suppressed [ 337.133850][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'. [ 337.149553][T15566] netem: change failed [ 337.306092][T15570] IPVS: Error connecting to the multicast addr [ 337.316340][T15570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2462'. [ 337.390668][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'. [ 337.470035][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2462'. [ 337.515726][T15581] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2462'. [ 337.659062][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 337.905659][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.913728][ C1] lec:lec_tx_timeout: lec0 [ 337.918386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.839909][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 339.029133][T15634] IPVS: Scheduler module ip_vs_ not found [ 339.074136][T15634] lo speed is unknown, defaulting to 1000 [ 339.083240][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'. [ 339.439952][T15662] netlink: 'syz.0.2486': attribute type 61 has an invalid length. [ 339.450122][T15662] netlink: 'syz.0.2486': attribute type 62 has an invalid length. [ 339.621408][T15670] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.662946][T15675] macsec0: entered allmulticast mode [ 339.669494][T15675] veth1_macvtap: entered allmulticast mode [ 339.676221][T15675] macsec0: left allmulticast mode [ 339.692981][T15675] veth1_macvtap: left allmulticast mode [ 339.731445][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2491'. [ 340.004711][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2493'. [ 340.530861][T15685] bond5: entered promiscuous mode [ 340.537771][T15685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.548041][T15685] bond5: left promiscuous mode [ 340.609636][T15688] bridge7: entered allmulticast mode [ 340.627329][T15674] lo speed is unknown, defaulting to 1000 [ 340.718371][T15706] geneve1: entered promiscuous mode [ 340.724613][T15703] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 340.777386][T15708] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 340.802109][T15703] bond0: (slave dummy0): Releasing backup interface [ 340.813447][T15703] dummy0: left promiscuous mode [ 340.840428][T15703] team0: Port device dummy0 added [ 340.852934][T15708] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.915393][T15708] team0: Failed to send options change via netlink (err -105) [ 340.923149][T15708] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.944640][T15708] team0: Port device dummy0 removed [ 340.955525][T15708] dummy0: entered promiscuous mode [ 340.961266][T15708] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.113119][T15728] net_ratelimit: 1029 callbacks suppressed [ 341.113139][T15728] openvswitch: netlink: IP tunnel dst address not specified [ 341.197038][T15728] lo speed is unknown, defaulting to 1000 [ 341.222058][T15733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.315800][T15734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.389238][T15745] netlink: 'syz.1.2510': attribute type 2 has an invalid length. [ 341.676743][T15762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.686614][T15762] team0: Port device bond6 added [ 342.045661][T15790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.098545][T15797] netlink: 'syz.0.2524': attribute type 10 has an invalid length. [ 342.127710][T15788] bond0: (slave rose0): Releasing backup interface [ 342.183340][T15797] bond0: entered allmulticast mode [ 342.205528][T15797] bond_slave_0: entered allmulticast mode [ 342.222448][T15797] team0: Port device bond0 added [ 342.567731][ T30] audit: type=1800 audit(1769396586.921:75): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2533" name="memory.events" dev="tmpfs" ino=2505 res=0 errno=0 [ 342.621326][T15834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.653540][T15834] __nla_validate_parse: 8 callbacks suppressed [ 342.653556][T15834] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2535'. [ 342.665556][T15832] sctp: [Deprecated]: syz.0.2533 (pid 15832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.665556][T15832] Use struct sctp_sack_info instead [ 342.671661][T15834] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2535'. [ 342.925133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.933208][ C1] lec:lec_tx_timeout: lec0 [ 342.938195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.562114][T15874] syzkaller0: entered promiscuous mode [ 343.640166][T15874] syzkaller0: entered allmulticast mode [ 343.670050][ T30] audit: type=1804 audit(1769396588.021:76): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2543" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2747 res=1 errno=0 [ 343.751558][ T30] audit: type=1800 audit(1769396588.051:77): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2543" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2747 res=0 errno=0 [ 344.395868][T15893] IPVS: length: 35 != 24 [ 346.933701][T15924] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 346.992831][ T30] audit: type=1804 audit(1769396591.341:78): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2550" name="/newroot/536/memory.events" dev="tmpfs" ino=2758 res=1 errno=0 [ 347.494559][T15954] rdma_rxe: rxe_newlink: failed to add lo [ 347.622336][T15960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2557'. [ 347.811856][T15974] netlink: 'syz.1.2562': attribute type 1 has an invalid length. [ 347.920578][T15974] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.945155][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 347.953215][ C1] lec:lec_tx_timeout: lec0 [ 347.957903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.005537][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'. [ 348.021462][T15985] bond7: (slave gretap3): making interface the new active one [ 348.045999][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'. [ 348.066556][T15985] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 349.024537][T16013] gretap4: entered promiscuous mode [ 349.046165][T16013] batman_adv: batadv0: Adding interface: gretap4 [ 349.072858][T16013] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 349.093963][T16013] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 349.131342][T16019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2573'. [ 349.150254][T16023] macsec0: entered allmulticast mode [ 349.167665][T16023] veth1_macvtap: entered allmulticast mode [ 349.173535][T16023] macsec0: left allmulticast mode [ 349.195293][T16023] veth1_macvtap: left allmulticast mode [ 349.322513][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'. [ 349.444135][T16041] tipc: Enabled bearer , priority 0 [ 349.463532][T16037] lo speed is unknown, defaulting to 1000 [ 349.470919][T16041] syzkaller0: entered promiscuous mode [ 349.476915][T16039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'. [ 349.486203][T16041] syzkaller0: entered allmulticast mode [ 349.497305][T16041] tipc: Resetting bearer [ 349.533205][T16040] tipc: Resetting bearer [ 349.572477][T16040] tipc: Disabling bearer [ 349.722515][T16052] netlink: 'syz.4.2585': attribute type 89 has an invalid length. [ 349.835034][T16056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2584'. [ 350.143790][T16081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2588'. [ 350.201404][T16081] tipc: Enabled bearer , priority 0 [ 350.242225][T16081] syzkaller0: entered promiscuous mode [ 350.261691][T16081] syzkaller0: entered allmulticast mode [ 350.316941][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 350.460515][T16104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2591'. [ 350.490950][T16081] lo speed is unknown, defaulting to 1000 [ 350.901953][T16120] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 350.910545][T16078] tipc: Resetting bearer [ 350.946949][T16078] tipc: Disabling bearer [ 351.093690][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'. [ 351.198727][T16134] syzkaller0: entered promiscuous mode [ 351.204243][T16134] syzkaller0: entered allmulticast mode [ 351.366795][T16143] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 351.415859][T16143] pim6reg0: persist disabled [ 352.118047][T16176] sctp: [Deprecated]: syz.2.2612 (pid 16176) Use of int in max_burst socket option. [ 352.118047][T16176] Use struct sctp_assoc_value instead [ 352.134585][T16172] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.218080][T16172] lo speed is unknown, defaulting to 1000 [ 352.887374][T16204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.903065][ T5156] Bluetooth: hci4: link tx timeout [ 352.910847][ T5156] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 352.966014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 352.974170][ C1] lec:lec_tx_timeout: lec0 [ 352.979239][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 353.109129][T16218] __nla_validate_parse: 5 callbacks suppressed [ 353.109147][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 353.157163][T16218] lo speed is unknown, defaulting to 1000 [ 353.202621][T16220] lo speed is unknown, defaulting to 1000 [ 353.320328][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 353.638526][T16237] IPv6: Can't replace route, no match found [ 353.734402][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'. [ 353.884151][T16254] 8021q: VLANs not supported on caif0 [ 353.892638][T16256] macsec0: entered allmulticast mode [ 353.899916][T16256] veth1_macvtap: entered allmulticast mode [ 353.908390][T16256] macsec0: left allmulticast mode [ 353.913437][T16256] veth1_macvtap: left allmulticast mode [ 353.967764][T16261] netlink: 63831 bytes leftover after parsing attributes in process `syz.4.2642'. [ 353.982255][T16262] wg1 speed is unknown, defaulting to 1000 [ 353.989273][T16262] wg1 speed is unknown, defaulting to 1000 [ 353.996674][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.016810][T16262] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 354.172069][T16267] xt_TCPMSS: Only works on TCP SYN packets [ 354.195971][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.226782][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.241313][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.247909][T16276] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 354.267645][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.285298][T16262] wg1 speed is unknown, defaulting to 1000 [ 354.504952][T16292] syzkaller0: entered promiscuous mode [ 354.518364][T16292] syzkaller0: entered allmulticast mode [ 354.541086][T16292] tipc: Enabling of bearer rejected, failed to enable media [ 354.852406][T16301] siw: device registration error -23 [ 354.895933][T16304] macsec0: entered allmulticast mode [ 354.908817][T16304] veth1_macvtap: entered allmulticast mode [ 354.932999][T16304] macsec0: left allmulticast mode [ 354.945797][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 354.948904][T16304] veth1_macvtap: left allmulticast mode [ 355.098885][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'. [ 355.135767][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2659'. [ 355.247597][T16332] openvswitch: netlink: IPv6 tunnel dst address is zero [ 355.332079][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2667'. [ 355.432226][T16345] lo speed is unknown, defaulting to 1000 [ 355.438624][T16350] xt_bpf: check failed: parse error [ 355.459703][T16345] wg1 speed is unknown, defaulting to 1000 [ 355.754516][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 355.888677][T16374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.921249][T16376] netlink: 'syz.2.2674': attribute type 12 has an invalid length. [ 355.981224][T16381] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 356.123639][T16388] lo speed is unknown, defaulting to 1000 [ 356.152792][T16388] wg1 speed is unknown, defaulting to 1000 [ 356.283368][T16385] lo speed is unknown, defaulting to 1000 [ 356.339049][T16385] wg1 speed is unknown, defaulting to 1000 [ 356.451293][T16400] lo speed is unknown, defaulting to 1000 [ 356.459342][T16400] wg1 speed is unknown, defaulting to 1000 [ 356.843666][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 357.277207][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2699'. [ 357.995132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.003213][ C1] lec:lec_tx_timeout: lec0 [ 358.007975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.379604][T16527] __nla_validate_parse: 2 callbacks suppressed [ 358.379617][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 358.696579][ T12] [ 358.698948][ T12] ============================================ [ 358.705096][ T12] WARNING: possible recursive locking detected [ 358.711253][ T12] syzkaller #0 Not tainted [ 358.715645][ T12] -------------------------------------------- [ 358.721770][ T12] kworker/u8:0/12 is trying to acquire lock: [ 358.727732][ T12] ffff88807c346558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 358.737563][ T12] [ 358.737563][ T12] but task is already holding lock: [ 358.744903][ T12] ffff88804cff7958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 358.754712][ T12] [ 358.754712][ T12] other info that might help us debug this: [ 358.762754][ T12] Possible unsafe locking scenario: [ 358.762754][ T12] [ 358.770183][ T12] CPU0 [ 358.773448][ T12] ---- [ 358.776719][ T12] lock(&qdisc_xmit_lock_key#4); [ 358.781732][ T12] lock(&qdisc_xmit_lock_key#4); [ 358.786741][ T12] [ 358.786741][ T12] *** DEADLOCK *** [ 358.786741][ T12] [ 358.794862][ T12] May be due to missing lock nesting notation [ 358.794862][ T12] [ 358.803162][ T12] 11 locks held by kworker/u8:0/12: [ 358.808349][ T12] #0: ffff88802a8dd948 ((wq_completion)bond4#3){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 358.819387][ T12] #1: ffffc90000117bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 358.832242][ T12] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 358.841807][ T12] #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 358.851722][ T12] #4: ffff88802ec77228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 358.864511][ T12] #5: ffff88804cff7958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 358.874796][ T12] #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 358.883680][ T12] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0xff0 [ 358.893345][ T12] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 358.902143][ T12] #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 358.912058][ T12] #10: ffff8880565b6228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 358.924758][ T12] [ 358.924758][ T12] stack backtrace: [ 358.930632][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 358.930649][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 358.930660][ T12] Workqueue: bond4 bond_alb_monitor [ 358.930692][ T12] Call Trace: [ 358.930699][ T12] [ 358.930706][ T12] dump_stack_lvl+0xe8/0x150 [ 358.930725][ T12] print_deadlock_bug+0x279/0x290 [ 358.930740][ T12] __lock_acquire+0x253f/0x2cf0 [ 358.930761][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 358.930776][ T12] ? __pfx_netif_skb_features+0x10/0x10 [ 358.930799][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 358.930813][ T12] lock_acquire+0x106/0x330 [ 358.930830][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 358.930848][ T12] _raw_spin_lock+0x2e/0x40 [ 358.930862][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 358.930875][ T12] sch_direct_xmit+0x15f/0x4c0 [ 358.930891][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 358.930903][ T12] ? kasan_save_track+0x4f/0x80 [ 358.930916][ T12] ? kmem_cache_alloc_node_noprof+0x420/0x6f0 [ 358.930937][ T12] ? __alloc_skb+0x27d/0x7d0 [ 358.930955][ T12] __dev_queue_xmit+0x1538/0x3850 [ 358.930978][ T12] ? __dev_queue_xmit+0x274/0x3850 [ 358.930999][ T12] ? arpt_do_table+0x261/0x1ec0 [ 358.931017][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.931039][ T12] ? __pfx_arpt_do_table+0x10/0x10 [ 358.931062][ T12] ? NF_HOOK+0xa2/0x3c0 [ 358.931081][ T12] NF_HOOK+0x33a/0x3c0 [ 358.931100][ T12] ? __pfx_arp_xmit_finish+0x10/0x10 [ 358.931118][ T12] ? NF_HOOK+0xa2/0x3c0 [ 358.931135][ T12] ? __pfx_NF_HOOK+0x10/0x10 [ 358.931152][ T12] ? lock_acquire+0x106/0x330 [ 358.931169][ T12] ? __pfx_arp_xmit_finish+0x10/0x10 [ 358.931188][ T12] ? inet_addr_type_dev_table+0x25/0x190 [ 358.931209][ T12] arp_xmit+0x16c/0x270 [ 358.931226][ T12] ? arp_xmit+0x23/0x270 [ 358.931244][ T12] arp_solicit+0xbe0/0xe40 [ 358.931265][ T12] ? arp_solicit+0x119/0xe40 [ 358.931283][ T12] ? __pfx_arp_solicit+0x10/0x10 [ 358.931304][ T12] ? __neigh_event_send+0xe9d/0x14a0 [ 358.931320][ T12] ? __pfx_arp_solicit+0x10/0x10 [ 358.931348][ T12] __neigh_event_send+0xf05/0x14a0 [ 358.931367][ T12] neigh_resolve_output+0x198/0x750 [ 358.931384][ T12] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 358.931406][ T12] ip_finish_output2+0xbb6/0xff0 [ 358.931425][ T12] ? ip_skb_dst_mtu+0x80b/0xa50 [ 358.931441][ T12] ? ip_skb_dst_mtu+0x109/0xa50 [ 358.931458][ T12] ? ip_finish_output2+0x3d0/0xff0 [ 358.931475][ T12] ? ip_finish_output+0x33a/0x3f0 [ 358.931493][ T12] ip_output+0x29f/0x450 [ 358.931509][ T12] ? ip_output+0x5b/0x450 [ 358.931526][ T12] iptunnel_xmit+0x59f/0xa00 [ 358.931544][ T12] ip_tunnel_xmit+0x1f74/0x2730 [ 358.931571][ T12] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 358.931588][ T12] ? gre_build_header+0x31f/0xa40 [ 358.931609][ T12] ? __pfx_gre_build_header+0x10/0x10 [ 358.931627][ T12] ? kmem_cache_free+0x195/0x610 [ 358.931640][ T12] ? pskb_expand_head+0x4bb/0x12e0 [ 358.931661][ T12] __gre_xmit+0x19e/0x240 [ 358.931678][ T12] ? __pfx___gre_xmit+0x10/0x10 [ 358.931697][ T12] erspan_xmit+0xa81/0x1670 [ 358.931715][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 358.931737][ T12] ? __pfx_erspan_xmit+0x10/0x10 [ 358.931758][ T12] dev_hard_start_xmit+0x2cd/0x7f0 [ 358.931782][ T12] sch_direct_xmit+0x251/0x4c0 [ 358.931797][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 358.931810][ T12] ? alb_send_lp_vid+0x122/0x550 [ 358.931827][ T12] ? process_scheduled_works+0xad0/0x17a0 [ 358.931846][ T12] ? worker_thread+0xda6/0x1360 [ 358.931867][ T12] __dev_queue_xmit+0x1538/0x3850 [ 358.931890][ T12] ? __dev_queue_xmit+0x274/0x3850 [ 358.931912][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.931933][ T12] ? rcu_is_watching+0x15/0xb0 [ 358.931947][ T12] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 358.931965][ T12] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 358.931991][ T12] ? alb_send_lp_vid+0x14e/0x550 [ 358.932009][ T12] alb_send_lp_vid+0x348/0x550 [ 358.932029][ T12] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 358.932048][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 358.932068][ T12] alb_send_learning_packets+0x12c/0x300 [ 358.932086][ T12] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 358.932103][ T12] ? bond_alb_monitor+0xf8/0x17e0 [ 358.932122][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 358.932140][ T12] bond_alb_monitor+0x3d5/0x17e0 [ 358.932159][ T12] ? bond_alb_monitor+0xf8/0x17e0 [ 358.932176][ T12] ? __pfx_bond_alb_monitor+0x10/0x10 [ 358.932193][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 358.932212][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 358.932231][ T12] process_scheduled_works+0xaec/0x17a0 [ 358.932259][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.932277][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.932293][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.932307][ T12] ? schedule+0x90/0x360 [ 358.932323][ T12] worker_thread+0xda6/0x1360 [ 358.932355][ T12] kthread+0x726/0x8b0 [ 358.932371][ T12] ? __pfx_worker_thread+0x10/0x10 [ 358.932390][ T12] ? __pfx_kthread+0x10/0x10 [ 358.932405][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.932419][ T12] ? __pfx_kthread+0x10/0x10 [ 358.932433][ T12] ret_from_fork+0x51b/0xa40 [ 358.932454][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 358.932473][ T12] ? __switch_to+0xc82/0x1410 [ 358.932492][ T12] ? __pfx_kthread+0x10/0x10 [ 358.932506][ T12] ret_from_fork_asm+0x1a/0x30 [ 358.932529][ T12] [ 359.725244][ T44] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.733629][ T44] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.742354][ T44] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.755217][ T44] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.770952][ T44] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.786177][ T44] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 359.794917][ T44] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.805060][ T44] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 363.825130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 363.833220][ C1] lec:lec_tx_timeout: lec0 [ 363.838044][ C1] lec:lec_start_xmit: lec0:No lecd attached