last executing test programs: 5.968598621s ago: executing program 2 (id=10307): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8091) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000406010200000000000000400500000a05000100070000000900020673797a36100000000c05ff4dccd9ac8a9bf461a6d79f99ad1660868ae47135201a09794879510a"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 5.371276564s ago: executing program 2 (id=10312): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 5.196828244s ago: executing program 2 (id=10317): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 5.003851823s ago: executing program 2 (id=10320): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x9, 0xc, 0x800, 0x5, 0x5, 0x0, 0x9, 0xb2, 0x6, 0x910d, 0x8, 0x7, 0x0, 0x0, 0x6, [0x2, 0x6]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 4.169999366s ago: executing program 4 (id=10326): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x8040) 3.767598812s ago: executing program 4 (id=10331): recvmsg(0xffffffffffffffff, 0x0, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0) 3.589497366s ago: executing program 4 (id=10332): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 3.239274316s ago: executing program 0 (id=10336): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0xa, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 3.140137672s ago: executing program 3 (id=10338): r0 = socket(0x10, 0x803, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r2, 0x25, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r3, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 2.804653375s ago: executing program 3 (id=10339): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) 2.739978214s ago: executing program 1 (id=10340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.62218471s ago: executing program 1 (id=10341): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r0, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r1, 0x61d8, 0x0) 2.467090405s ago: executing program 3 (id=10342): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004086) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) 2.222434335s ago: executing program 4 (id=10343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.892611035s ago: executing program 4 (id=10344): socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.883672827s ago: executing program 0 (id=10345): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r0, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 1.139815425s ago: executing program 1 (id=10346): ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20044000) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.084196829s ago: executing program 3 (id=10347): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0xd) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x62, 0x0, 0xb, 0x6, 0x0, @loopback, @rand_addr=0x64010102}}}, 0x22) 965.267706ms ago: executing program 1 (id=10348): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x0, r2, 0x6}, 0x10) 957.003393ms ago: executing program 0 (id=10349): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) 860.839782ms ago: executing program 4 (id=10350): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r1 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x61d0, &(0x7f0000001940)={{r0, 0x0, 0x14100, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) 682.484398ms ago: executing program 0 (id=10351): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 468.063973ms ago: executing program 1 (id=10352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 382.122749ms ago: executing program 0 (id=10353): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) close(r2) 220.055091ms ago: executing program 3 (id=10354): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 216.058123ms ago: executing program 2 (id=10355): socket$kcm(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) close(0x4) 77.218433ms ago: executing program 0 (id=10356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) 35.238766ms ago: executing program 3 (id=10357): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xcb, r3}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x104}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.768983ms ago: executing program 2 (id=10358): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x14, 0x2, 0x4) r1 = socket(0x8, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x618e, 0x0) 0s ago: executing program 1 (id=10359): pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="99f87a", 0x3}], 0x1}}], 0x1, 0x81) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) kernel console output (not intermixed with test programs): ype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 293.077879][T14714] netlink: 'syz.0.4223': attribute type 4 has an invalid length. [ 293.130357][T14714] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4223'. [ 293.186359][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 293.517981][T14734] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4234'. [ 293.557445][T14734] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4234'. [ 294.597651][T14783] netlink: 'syz.1.4258': attribute type 1 has an invalid length. [ 294.636442][T14783] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4258'. [ 294.882844][T14794] netlink: 'syz.2.4264': attribute type 21 has an invalid length. [ 294.922651][T14794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4264'. [ 295.086394][T14806] netlink: 'syz.3.4270': attribute type 3 has an invalid length. [ 295.701688][T14837] netlink: 408 bytes leftover after parsing attributes in process `syz.4.4285'. [ 295.824540][T14841] netlink: 'syz.3.4287': attribute type 64 has an invalid length. [ 296.168929][T14856] netlink: 'syz.0.4294': attribute type 1 has an invalid length. [ 296.265777][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4297'. [ 296.399381][T14867] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 296.745386][T14883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.800571][T14885] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4309'. [ 297.409880][T14913] netlink: 'syz.3.4322': attribute type 21 has an invalid length. [ 298.171464][T14942] ipt_ECN: cannot use operation on non-tcp rule [ 298.447054][T14959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.906956][T14981] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 299.257304][T14997] netlink: 'syz.0.4364': attribute type 7 has an invalid length. [ 299.286658][T14997] __nla_validate_parse: 2 callbacks suppressed [ 299.286677][T14997] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4364'. [ 300.355205][T15050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.877045][T15072] netlink: 'syz.0.4403': attribute type 2 has an invalid length. [ 300.987291][T15072] 9: entered promiscuous mode [ 301.284567][T15092] openvswitch: netlink: IP tunnel dst address not specified [ 301.294354][T15091] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 302.084337][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4430'. [ 302.136563][T15135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.565405][T15153] netlink: 'syz.0.4442': attribute type 16 has an invalid length. [ 302.566439][T15154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 302.603289][T15153] netlink: 'syz.0.4442': attribute type 3 has an invalid length. [ 302.636190][T15153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4442'. [ 302.847009][T15164] openvswitch: netlink: Invalid VLAN frame [ 303.065068][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4452'. [ 303.319925][T15189] Illegal XDP return value 4294967274 on prog (id 316) dev N/A, expect packet loss! [ 303.716822][T15205] Bluetooth: MGMT ver 1.23 [ 304.050875][T15223] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 304.535466][T15244] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4487'. [ 304.626204][T15249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4491'. [ 304.665349][T15249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4491'. [ 304.704619][T15249] Zero length message leads to an empty skb [ 304.791484][T15256] vlan1: entered allmulticast mode [ 304.808643][T15256] veth0_vlan: entered allmulticast mode [ 305.037978][T15264] gretap0: entered promiscuous mode [ 305.058591][T15264] vlan1: entered promiscuous mode [ 305.524676][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 305.553313][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 306.084118][T15308] syz.4.4518 (15308) used obsolete PPPIOCDETACH ioctl [ 306.346974][T15326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4526'. [ 306.824843][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4535'. [ 307.054665][T15355] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 307.101835][T15354] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 307.204596][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4543'. [ 307.221442][T15364] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.236688][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 307.555755][T15373] veth3: entered allmulticast mode [ 307.832263][ T5937] IPVS: starting estimator thread 0... [ 307.962199][T15391] IPVS: using max 26 ests per chain, 62400 per kthread [ 309.965800][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 310.153744][T15492] netlink: 'syz.0.4604': attribute type 1 has an invalid length. [ 310.183279][T15483] bond2: Invalid ad_actor_system MAC address. [ 310.217262][T15483] bond2: option ad_actor_system: invalid value (1) [ 310.266532][T15483] bond2 (unregistering): Released all slaves [ 310.318759][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4608'. [ 310.350817][T15488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4605'. [ 310.375601][T15488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.595386][T15505] Bluetooth: MGMT ver 1.23 [ 311.312359][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 311.364542][T15541] netlink: 'syz.2.4629': attribute type 11 has an invalid length. [ 311.373930][T15541] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.4629'. [ 311.870618][T15565] Bluetooth: MGMT ver 1.23 [ 311.978027][ T10] IPVS: starting estimator thread 0... [ 311.985044][T15569] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 312.094543][T15570] IPVS: using max 32 ests per chain, 76800 per kthread [ 312.760254][T15607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4660'. [ 313.167717][T15620] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 313.197084][T15620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.215216][T15617] bridge0: port 3(H) entered disabled state [ 313.300162][T15617] A link change request failed with some changes committed already. Interface H may have been left with an inconsistent configuration, please check. [ 313.405453][T15626] tipc: Started in network mode [ 313.426750][T15626] tipc: Node identity 4, cluster identity 4711 [ 313.457189][T15626] tipc: Node number set to 4 [ 313.796288][T15637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4675'. [ 313.879719][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4676'. [ 315.184529][T15696] Bluetooth: MGMT ver 1.23 [ 315.216883][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 315.250056][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4704'. [ 315.309536][T15700] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4706'. [ 315.522836][T15711] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4711'. [ 315.780072][T15721] netlink: 'syz.2.4716': attribute type 1 has an invalid length. [ 315.809229][T15721] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4716'. [ 315.827764][T15726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.045851][T15733] bridge0: port 4(veth0_to_bridge) entered blocking state [ 316.093544][T15733] bridge0: port 4(veth0_to_bridge) entered disabled state [ 316.137208][T15733] veth0_to_bridge: entered allmulticast mode [ 316.170848][T15733] veth0_to_bridge: entered promiscuous mode [ 316.176462][T15742] netlink: 'syz.4.4727': attribute type 10 has an invalid length. [ 316.215463][T15738] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4723'. [ 316.252440][T15743] netlink: 'syz.4.4727': attribute type 10 has an invalid length. [ 316.285774][T15742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.305217][T15743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4727'. [ 316.346633][T15742] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 316.380973][T15743] batadv0: entered promiscuous mode [ 316.406065][T15743] batadv0: entered allmulticast mode [ 316.449474][T15743] bond0: (slave batadv0): Releasing backup interface [ 316.487136][T15743] bridge0: port 3(batadv0) entered blocking state [ 316.522301][T15743] bridge0: port 3(batadv0) entered disabled state [ 316.719293][T15761] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4736'. [ 316.833456][ T1086] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 316.843170][ T1086] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 317.163773][T15775] bond5: (slave bond_slave_1): Device is not our slave [ 317.198166][T15775] bond5: option active_slave: invalid value (bond_slave_1) [ 317.234674][T15775] bond5 (unregistering): Released all slaves [ 317.617607][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.508329][T15883] pimreg3: entered allmulticast mode [ 319.723421][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 319.775220][T15896] netlink: 'syz.2.4797': attribute type 5 has an invalid length. [ 319.813025][T15896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4797'. [ 320.710963][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 320.734671][T15942] netlink: 'syz.1.4819': attribute type 3 has an invalid length. [ 321.102221][T15958] raw_sendmsg: syz.0.4826 forgot to set AF_INET. Fix it! [ 321.551336][T15975] xt_l2tp: v2 tid > 0xffff: 1114244 [ 321.709441][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4836'. [ 321.758058][T15977] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 321.767063][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4836'. [ 321.786346][T15977] bond5 (unregistering): Released all slaves [ 322.397785][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4850'. [ 322.435639][T16007] tipc: Invalid UDP bearer configuration [ 322.435723][T16007] tipc: Enabling of bearer rejected, failed to enable media [ 323.098718][ T30] audit: type=1107 audit(1776396246.315:2): pid=16033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 323.565925][T16051] netlink: 'syz.4.4870': attribute type 1 has an invalid length. [ 323.587351][T16051] nbd: error processing sock list [ 323.611849][T16054] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4871'. [ 323.906186][ T30] audit: type=1800 audit(1776396247.135:3): pid=16062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4875" name="memory.events" dev="tmpfs" ino=4975 res=0 errno=0 [ 323.984979][ T30] audit: type=1804 audit(1776396247.155:4): pid=16062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4875" name="/newroot/990/memory.events" dev="tmpfs" ino=4975 res=1 errno=0 [ 324.473283][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4886'. [ 324.603397][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4888'. [ 325.014755][T16108] vlan2: entered allmulticast mode [ 325.379867][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4905'. [ 325.423914][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4905'. [ 326.437004][T16172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4930'. [ 326.471795][T16172] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4930'. [ 326.500481][T16172] netlink: 'syz.2.4930': attribute type 6 has an invalid length. [ 326.531084][T16172] netlink: 'syz.2.4930': attribute type 5 has an invalid length. [ 326.556346][T16172] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4930'. [ 326.659456][T16181] netlink: 'syz.0.4932': attribute type 1 has an invalid length. [ 327.006929][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4939'. [ 327.027520][T16198] netlink: 'syz.2.4942': attribute type 12 has an invalid length. [ 327.055782][T16198] netlink: 'syz.2.4942': attribute type 29 has an invalid length. [ 327.076573][T16198] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4942'. [ 327.119949][T16198] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4942'. [ 327.230876][T16205] netlink: 'syz.3.4945': attribute type 1 has an invalid length. [ 327.260989][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4945'. [ 327.288710][T16205] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4945'. [ 327.322198][T16205] netlink: 'syz.3.4945': attribute type 1 has an invalid length. [ 327.730992][T16227] netlink: 'syz.2.4956': attribute type 3 has an invalid length. [ 327.753498][T16227] netlink: 'syz.2.4956': attribute type 1 has an invalid length. [ 327.765129][T16227] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4956'. [ 329.109770][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4981'. [ 329.865590][T16311] validate_nla: 1 callbacks suppressed [ 329.865611][T16311] netlink: 'syz.4.4996': attribute type 1 has an invalid length. [ 332.448688][T16415] __nla_validate_parse: 5 callbacks suppressed [ 332.448709][T16415] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.5046'. [ 332.504242][T16415] openvswitch: netlink: Message has 6 unknown bytes. [ 333.294430][T16448] batadv0: entered promiscuous mode [ 333.322893][T16448] macsec1: entered promiscuous mode [ 333.350966][T16448] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 333.378502][T16448] batadv0: left promiscuous mode [ 333.457875][T16452] netlink: 'syz.0.5064': attribute type 3 has an invalid length. [ 333.686525][T16461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.148202][T16478] rdma_op ffff88802bab01f0 conn xmit_rdma 0000000000000000 [ 334.280306][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5078'. [ 334.350213][T16486] xt_l2tp: unknown flags: 10 [ 334.562308][T16494] netlink: 'syz.0.5085': attribute type 29 has an invalid length. [ 334.847785][T16501] IPVS: Scheduler module ip_vs_sip not found [ 334.988131][T16512] netlink: 'syz.1.5093': attribute type 3 has an invalid length. [ 335.072420][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 335.107643][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 335.129997][T16520] netlink: 'syz.3.5097': attribute type 2 has an invalid length. [ 335.753335][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5110'. [ 336.619945][T16588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.628807][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 336.636440][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 336.643911][T16588] IPv6: NLM_F_CREATE should be set when creating new route [ 336.692646][T16591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.044582][T16602] pim6reg: entered allmulticast mode [ 337.071024][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'. [ 337.088583][T16609] pim6reg: left allmulticast mode [ 337.371462][T16621] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5144'. [ 338.139726][T16657] xt_l2tp: missing protocol rule (udp|l2tpip) [ 338.737169][T16684] veth1_macvtap: left promiscuous mode [ 338.743233][T16684] macsec0: entered promiscuous mode [ 338.754404][T16684] macsec0: entered allmulticast mode [ 338.785238][T16684] veth1_macvtap: entered promiscuous mode [ 338.810023][T16684] veth1_macvtap: entered allmulticast mode [ 338.823239][T16684] macsec0: left promiscuous mode [ 338.842266][T16684] macsec0: left allmulticast mode [ 338.858907][T16684] veth1_macvtap: left allmulticast mode [ 338.975537][T16693] netlink: 'syz.0.5178': attribute type 2 has an invalid length. [ 339.372596][T16711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5187'. [ 339.544566][T16718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5190'. [ 339.727785][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5195'. [ 339.886560][T16734] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.739534][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5216'. [ 341.100134][T16789] nbd: socks must be embedded in a SOCK_ITEM attr [ 341.215747][T16794] netlink: 'syz.3.5227': attribute type 1 has an invalid length. [ 341.238228][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5227'. [ 341.249456][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5228'. [ 341.268053][T16794] netlink: 'syz.3.5227': attribute type 1 has an invalid length. [ 341.277848][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5228'. [ 341.928043][T16826] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5242'. [ 341.968358][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5242'. [ 342.003820][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5242'. [ 342.752744][T16863] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 343.918067][T16913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.985112][T16917] macsec1: entered promiscuous mode [ 344.004688][T16917] bridge0: entered promiscuous mode [ 344.026408][T16917] macsec1: entered allmulticast mode [ 344.046153][T16917] bridge0: entered allmulticast mode [ 344.062891][T16917] bridge0: port 3(macsec1) entered blocking state [ 344.074550][T16917] bridge0: port 3(macsec1) entered disabled state [ 344.126586][T16917] bridge0: left allmulticast mode [ 344.149090][T16917] bridge0: left promiscuous mode [ 345.759727][T16998] tipc: Enabled bearer , priority 10 [ 346.311803][T17022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.466936][T17032] __nla_validate_parse: 2 callbacks suppressed [ 346.466956][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5337'. [ 346.547251][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5337'. [ 347.360751][T17075] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5358'. [ 347.726790][T17092] netlink: 'syz.4.5365': attribute type 2 has an invalid length. [ 347.745993][T17096] netlink: 'syz.1.5366': attribute type 1 has an invalid length. [ 347.764271][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.391068][T17127] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5381'. [ 348.415146][T17127] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5381'. [ 350.000989][T17197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5415'. [ 350.149238][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5418'. [ 350.187399][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5419'. [ 350.371867][T17213] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 350.659831][T17229] netlink: 'syz.2.5429': attribute type 11 has an invalid length. [ 350.853895][T17239] tipc: Started in network mode [ 350.865450][T17239] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 350.881300][T17239] tipc: Enabling of bearer rejected, failed to enable media [ 350.954056][T17242] pim6reg: entered allmulticast mode [ 351.054442][T17250] tipc: Enabling of bearer rejected, failed to enable media [ 351.261878][T17263] netlink: 640 bytes leftover after parsing attributes in process `syz.3.5445'. [ 351.274457][T17263] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 352.309997][T17304] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 353.422314][T17360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5491'. [ 353.840147][T17376] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5500'. [ 353.901461][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5502'. [ 354.315473][T17402] sctp: [Deprecated]: syz.1.5512 (pid 17402) Use of int in max_burst socket option deprecated. [ 354.315473][T17402] Use struct sctp_assoc_value instead [ 354.841634][T17427] tipc: Enabling not permitted [ 354.855776][T17427] tipc: Enabling of bearer rejected, failed to enable media [ 355.718359][T17469] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5544'. [ 357.228587][T17542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5581'. [ 357.860816][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5592'. [ 358.104909][T17573] xt_time: unknown flags 0xf4 [ 358.792930][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 359.056890][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5617'. [ 359.277862][T17630] netlink: 'syz.4.5623': attribute type 32 has an invalid length. [ 359.287535][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5623'. [ 359.322299][T17630] bond2: option coupled_control: invalid value (192) [ 359.334222][T17630] bond2 (unregistering): Released all slaves [ 359.430566][T17635] netlink: 'syz.3.5627': attribute type 4 has an invalid length. [ 359.571660][T17643] xt_hashlimit: size too large, truncated to 1048576 [ 359.908887][T17658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.931060][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5637'. [ 360.036691][T17663] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5639'. [ 360.158831][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5641'. [ 360.379289][T17675] netlink: 'syz.3.5645': attribute type 1 has an invalid length. [ 361.619791][T17736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5672'. [ 361.818329][T17745] xt_hashlimit: size too large, truncated to 1048576 [ 361.838507][T17743] : entered promiscuous mode [ 362.465050][T17772] netlink: 'syz.4.5687': attribute type 2 has an invalid length. [ 362.471161][T17773] xt_policy: too many policy elements [ 363.640871][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5715'. [ 363.685226][T17837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 363.837948][T17839] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 363.853946][T17839] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.564527][T17880] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 364.894570][T17896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5745'. [ 365.077711][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5750'. [ 365.108399][T17905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5750'. [ 365.128606][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5751'. [ 365.133111][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5750'. [ 365.546273][T17929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5762'. [ 365.795347][T17942] netlink: 'syz.1.5768': attribute type 4 has an invalid length. [ 365.816972][T17942] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5768'. [ 366.154571][T17959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5774'. [ 366.554257][T17977] netlink: 'syz.2.5783': attribute type 11 has an invalid length. [ 366.582197][T17977] netlink: 'syz.2.5783': attribute type 11 has an invalid length. [ 366.613280][T17977] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5783'. [ 366.872335][T17997] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5791'. [ 367.796560][T18045] lo speed is unknown, defaulting to 1000 [ 367.987872][T18058] aD: renamed from lo [ 368.603502][T18089] vcan0: entered allmulticast mode [ 368.836118][T18099] netlink: 'syz.2.5841': attribute type 11 has an invalid length. [ 369.268234][T18117] tipc: Enabling of bearer rejected, media not registered [ 369.418515][T18123] netlink: 'syz.3.5852': attribute type 3 has an invalid length. [ 370.106980][T18154] __nla_validate_parse: 5 callbacks suppressed [ 370.107002][T18154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5866'. [ 370.495593][T18174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5877'. [ 370.544913][T18177] lo speed is unknown, defaulting to 1000 [ 370.863356][T18193] netlink: 'syz.1.5885': attribute type 58 has an invalid length. [ 370.902153][T18193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5885'. [ 371.098671][T18204] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5891'. [ 371.108535][T18204] netlink: 'syz.2.5891': attribute type 2 has an invalid length. [ 371.117003][T18204] netlink: 'syz.2.5891': attribute type 1 has an invalid length. [ 372.680062][T18281] tipc: Enabling of bearer rejected, failed to enable media [ 372.945669][T18295] netlink: 'syz.3.5935': attribute type 29 has an invalid length. [ 372.989683][T18295] netlink: 'syz.3.5935': attribute type 29 has an invalid length. [ 373.934373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.083792][T18347] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5958'. [ 374.871637][T18386] tipc: Failed to obtain node identity [ 374.891378][T18386] tipc: Enabling of bearer rejected, failed to enable media [ 375.281118][T18409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5988'. [ 375.296264][T18407] delete_channel: no stack [ 376.038773][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'. [ 376.506925][T18467] netlink: zone id is out of range [ 376.529951][T18467] netlink: zone id is out of range [ 376.547832][T18467] netlink: zone id is out of range [ 376.563051][T18467] netlink: zone id is out of range [ 376.582165][T18467] netlink: zone id is out of range [ 376.597079][T18467] netlink: zone id is out of range [ 376.615632][T18467] netlink: zone id is out of range [ 376.626881][T18467] netlink: zone id is out of range [ 376.639803][T18467] netlink: zone id is out of range [ 377.192858][T18493] erspan0: left allmulticast mode [ 377.227661][T18493] sit0: left promiscuous mode [ 377.289479][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.297412][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.038421][T18536] lo: left promiscuous mode [ 378.191036][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.199131][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.318243][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6057'. [ 378.456427][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6061'. [ 378.489085][T18557] netlink: 'syz.3.6062': attribute type 32 has an invalid length. [ 378.521497][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6062'. [ 378.728269][T18557] bond2: Setting coupled_control to off (0) [ 379.036068][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6076'. [ 379.059527][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.111413][T18593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6078'. [ 379.124258][T18593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6078'. [ 379.342799][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'. [ 379.359039][T18604] net_ratelimit: 48 callbacks suppressed [ 379.359059][T18604] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 379.515802][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6086'. [ 380.503178][T18657] __nla_validate_parse: 3 callbacks suppressed [ 380.503198][T18657] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6107'. [ 380.551089][T18657] vlan3: entered allmulticast mode [ 380.572428][T18657] gretap0: entered allmulticast mode [ 380.948566][T18679] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6119'. [ 381.819332][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'. [ 381.922340][T18729] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6141'. [ 383.019776][T18791] netlink: 'syz.2.6168': attribute type 3 has an invalid length. [ 383.171917][T18793] IPVS: Error connecting to the multicast addr [ 384.280145][T18850] netlink: 'syz.3.6196': attribute type 10 has an invalid length. [ 385.234841][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6209'. [ 385.246366][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'. [ 385.256371][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6209'. [ 385.642625][T18900] netlink: 'syz.2.6220': attribute type 1 has an invalid length. [ 385.650630][T18900] netlink: 'syz.2.6220': attribute type 3 has an invalid length. [ 385.661638][T18900] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6220'. [ 385.672692][T18900] NCSI netlink: No device for ifindex 813332851 [ 388.103169][T19016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.728934][T19051] IPVS: length: 8 != 1152 [ 389.715510][T19099] nbd: must specify a device to reconfigure [ 390.086936][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6321'. [ 390.126026][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6322'. [ 390.610754][T19141] Cannot find add_set index 46338 as target [ 390.646525][T19144] netlink: 'syz.2.6334': attribute type 2 has an invalid length. [ 391.176746][T19169] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6347'. [ 391.461850][T19189] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6356'. [ 391.493807][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'. [ 392.160975][T19221] netlink: 'syz.3.6371': attribute type 1 has an invalid length. [ 392.589962][T19244] netlink: 'syz.1.6383': attribute type 1 has an invalid length. [ 392.615188][T19244] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6383'. [ 392.628994][T19244] netlink: 'syz.1.6383': attribute type 1 has an invalid length. [ 392.637948][T19244] netlink: 'syz.1.6383': attribute type 8 has an invalid length. [ 392.686430][T19244] netlink: 606 bytes leftover after parsing attributes in process `syz.1.6383'. [ 392.704040][T19244] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6383'. [ 392.783982][T19250] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6385'. [ 393.229671][T19271] netlink: 'syz.4.6394': attribute type 1 has an invalid length. [ 393.466665][T19284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6399'. [ 393.590518][T19288] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6401'. [ 393.621219][T19288] netlink: 'syz.0.6401': attribute type 1 has an invalid length. [ 393.632271][T19288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6401'. [ 394.582007][T19340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.236293][T19407] __nla_validate_parse: 5 callbacks suppressed [ 396.236315][T19407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6457'. [ 396.310417][T19409] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6458'. [ 396.358515][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6459'. [ 396.394409][T19405] syz.0.6456 (19405) used greatest stack depth: 17560 bytes left [ 396.719158][T19431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6468'. [ 396.760776][T19431] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6468'. [ 396.777295][T19431] netlink: 'syz.2.6468': attribute type 5 has an invalid length. [ 396.787019][T19431] netlink: 'syz.2.6468': attribute type 6 has an invalid length. [ 396.811681][T19431] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6468'. [ 396.888909][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6471'. [ 396.967764][T19441] xt_hashlimit: size too large, truncated to 1048576 [ 397.445871][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6482'. [ 397.707607][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6488'. [ 397.729959][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6488'. [ 398.118949][T19491] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 398.142312][T19491] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 398.230753][T19495] : entered promiscuous mode [ 398.425183][T19503] netlink: 'syz.2.6503': attribute type 2 has an invalid length. [ 399.441130][T19546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.461591][T19546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.597397][T19546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.635525][T19546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.900457][T19546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.931150][T19546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.135386][T19546] bond0: (slave netdevsim0): Releasing backup interface [ 400.161755][T19546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.190029][T19546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.461721][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.492470][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.627900][ T139] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.663728][ T139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.751556][ T139] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.781296][ T139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.874957][ T139] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.913973][ T139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.581889][T19640] veth0_to_bond: entered allmulticast mode [ 401.731246][T19647] __nla_validate_parse: 5 callbacks suppressed [ 401.731268][T19647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6572'. [ 401.880994][T19656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6576'. [ 401.917139][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6577'. [ 402.581245][T19683] xt_socket: unknown flags 0xe4 [ 402.756898][ T1086] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 402.784646][ T1086] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.849302][ T1086] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.893654][ T1086] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.230352][T19746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6610'. [ 405.087267][T19787] netlink: 'syz.2.6626': attribute type 62 has an invalid length. [ 405.633311][T19812] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 405.867463][T19820] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 406.064707][T19828] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6644'. [ 406.085860][T19834] netlink: 'syz.1.6647': attribute type 32 has an invalid length. [ 406.120926][T19834] netlink: 776 bytes leftover after parsing attributes in process `syz.1.6647'. [ 406.554551][T19854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6657'. [ 407.428542][T19901] netlink: 'syz.1.6678': attribute type 8 has an invalid length. [ 407.453714][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 407.499017][T19901] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.508708][T19901] bridge0: port 1(0x9) entered disabled state [ 407.800004][T19920] tipc: New replicast peer: 255.255.255.255 [ 407.809852][T19920] tipc: Enabled bearer , priority 10 [ 408.060762][T19930] IPVS: ip_vs_edit_dest(): server weight less than zero [ 408.082371][ T10] IPVS: starting estimator thread 0... [ 408.120731][T19936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6694'. [ 408.202560][T19932] IPVS: using max 28 ests per chain, 67200 per kthread [ 408.447846][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6701'. [ 408.602626][ T30] audit: type=1804 audit(1776396331.825:5): pid=19960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6706" name="/newroot/1343/cgroup.controllers" dev="tmpfs" ino=6743 res=1 errno=0 [ 408.637706][ T30] audit: type=1800 audit(1776396331.835:6): pid=19960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6706" name="cgroup.controllers" dev="tmpfs" ino=6743 res=0 errno=0 [ 408.804576][ T5937] tipc: Node number set to 1 [ 408.819253][T19970] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 408.952195][T19976] netlink: 'syz.3.6713': attribute type 11 has an invalid length. [ 409.700622][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6730'. [ 409.920080][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6734'. [ 410.193010][T20040] netlink: 'syz.2.6743': attribute type 1 has an invalid length. [ 410.216527][T20040] netlink: 'syz.2.6743': attribute type 2 has an invalid length. [ 410.258481][T20040] netlink: 'syz.2.6743': attribute type 1 has an invalid length. [ 410.284592][T20040] netlink: 'syz.2.6743': attribute type 3 has an invalid length. [ 410.317591][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6743'. [ 410.339314][T20044] netlink: 'syz.0.6745': attribute type 2 has an invalid length. [ 410.574288][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6750'. [ 410.604408][T20060] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6751'. [ 410.621460][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6750'. [ 410.643499][T20058] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6750'. [ 410.797193][T20066] tipc: Started in network mode [ 410.820304][T20066] tipc: Node identity ac14140f, cluster identity 4711 [ 410.845186][T20066] tipc: New replicast peer: 172.20.20.187 [ 410.851792][T20066] tipc: Enabled bearer , priority 10 [ 411.319187][T20094] tap0: tun_chr_ioctl cmd 2148553947 [ 411.622333][T20107] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 411.965013][ T10] tipc: Node number set to 2886997007 [ 413.214973][T20175] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 413.388190][T20183] __nla_validate_parse: 4 callbacks suppressed [ 413.388210][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6808'. [ 413.900637][T20209] block nbd1: Unsupported socket: should be TCP or UNIX. [ 414.401260][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6829'. [ 415.063404][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6841'. [ 415.139680][T20264] ipvlan2: entered allmulticast mode [ 415.167613][T20264] syz_tun: entered allmulticast mode [ 415.543849][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6853'. [ 415.594155][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6853'. [ 415.621073][T20288] xfrm1: entered promiscuous mode [ 415.634137][T20288] xfrm1: entered allmulticast mode [ 416.324725][T20327] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6873'. [ 416.360030][T20327] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6873'. [ 416.523267][T20336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6876'. [ 416.558346][T20336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6876'. [ 416.799902][ T5843] block nbd1: Receive control failed (result -32) [ 417.731364][T20394] netlink: 'syz.4.6902': attribute type 1 has an invalid length. [ 417.766185][T20394] netlink: 'syz.4.6902': attribute type 7 has an invalid length. [ 417.794443][T20394] netlink: 'syz.4.6902': attribute type 8 has an invalid length. [ 417.823621][T20394] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6902'. [ 417.856327][T20394] NCSI netlink: No device for ifindex 65584 [ 419.147829][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6930'. [ 419.247914][T20456] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6932'. [ 419.431291][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6936'. [ 419.504720][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6937'. [ 419.909386][T20483] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6944'. [ 420.827076][T20533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6967'. [ 421.062939][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6970'. [ 421.247034][T20553] netlink: 54 bytes leftover after parsing attributes in process `syz.0.6974'. [ 421.267350][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6974'. [ 421.542363][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6982'. [ 421.881463][T20584] sctp: [Deprecated]: syz.2.6991 (pid 20584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.881463][T20584] Use struct sctp_sack_info instead [ 422.101872][T20595] macvtap0: Device is already in use. [ 423.437345][T20658] netlink: 'syz.4.7022': attribute type 3 has an invalid length. [ 423.473496][T20662] sctp: [Deprecated]: syz.2.7024 (pid 20662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.473496][T20662] Use struct sctp_sack_info instead [ 423.684168][T20670] hsr_slave_0: left promiscuous mode [ 423.708225][T20670] hsr_slave_1: left promiscuous mode [ 424.680721][T20725] __nla_validate_parse: 5 callbacks suppressed [ 424.680743][T20725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7051'. [ 424.780381][T20729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7053'. [ 425.617090][T20765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7069'. [ 426.031286][T20786] bridge0: port 4(syz_tun) entered blocking state [ 426.044518][T20786] bridge0: port 4(syz_tun) entered disabled state [ 426.051445][T20786] syz_tun: entered allmulticast mode [ 426.061857][T20786] syz_tun: entered promiscuous mode [ 426.191100][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7081'. [ 426.230875][T20794] hsr0: entered promiscuous mode [ 426.238548][T20794] macvlan2: entered allmulticast mode [ 426.254356][T20794] hsr0: entered allmulticast mode [ 426.271207][T20794] hsr_slave_0: entered allmulticast mode [ 426.282151][T20794] hsr_slave_1: entered allmulticast mode [ 426.884668][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7096'. [ 426.921573][T20829] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 427.078072][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7101'. [ 427.418905][T20853] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7108'. [ 428.117869][T20882] IPVS: persistence engine module ip_vs_pe_ not found [ 428.487785][T20908] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7132'. [ 428.596516][T20908] erspan0: entered promiscuous mode [ 429.646259][T20961] netlink: 'syz.4.7157': attribute type 2 has an invalid length. [ 429.687325][T20961] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7157'. [ 430.228668][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7172'. [ 430.274214][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7173'. [ 430.578618][T21004] netlink: 'syz.4.7178': attribute type 10 has an invalid length. [ 430.598854][T21004] batadv0: left allmulticast mode [ 430.611906][T21004] batadv0: left promiscuous mode [ 430.618991][T21004] bridge0: port 3(batadv0) entered disabled state [ 430.655660][T21004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.689561][T21004] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 431.107199][T21031] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7190'. [ 431.368918][T21042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7196'. [ 432.670765][T21092] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7216'. [ 433.240050][T21115] netlink: 'syz.2.7227': attribute type 33 has an invalid length. [ 433.287941][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7229'. [ 433.380369][T21115] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 433.396669][T21115] bond2 (unregistering): Released all slaves [ 433.871467][T21139] netem: change failed [ 434.219332][T21157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7247'. [ 434.317746][T21161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7249'. [ 434.659808][T21177] netlink: 81 bytes leftover after parsing attributes in process `syz.1.7256'. [ 434.935244][T21191] TCP: TCP_TX_DELAY enabled [ 435.588170][T21225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7278'. [ 435.941740][T21241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7286'. [ 436.648651][T21279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7303'. [ 436.671124][T21279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7303'. [ 436.889017][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7307'. [ 438.409589][T21358] netlink: set zone limit has 4 unknown bytes [ 438.430824][T21360] netlink: zone id is out of range [ 438.457216][T21360] netlink: zone id is out of range [ 438.743459][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7347'. [ 438.791679][T21371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7347'. [ 439.021843][T21387] gtp0: entered promiscuous mode [ 439.034343][T21390] netlink: 'syz.4.7351': attribute type 4 has an invalid length. [ 439.054495][T21387] gtp0: entered allmulticast mode [ 439.296166][T21397] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7355'. [ 439.827896][T21424] sch_fq: defrate 0 ignored. [ 440.091009][T21440] netlink: 'syz.1.7376': attribute type 1 has an invalid length. [ 440.148976][T21440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7376'. [ 440.168347][T21440] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7376'. [ 440.188721][T21440] netlink: 'syz.1.7376': attribute type 1 has an invalid length. [ 440.208339][T21440] netlink: 'syz.1.7376': attribute type 8 has an invalid length. [ 440.533863][T21460] netlink: 'syz.2.7387': attribute type 30 has an invalid length. [ 440.703452][T21468] xt_hashlimit: size too large, truncated to 1048576 [ 440.898881][T21474] x9 (unregistering): left allmulticast mode [ 440.935700][T21474] x9 (unregistering): left promiscuous mode [ 440.956587][T21474] bridge0: port 1(0x9) entered disabled state [ 441.428401][T21500] __nla_validate_parse: 1 callbacks suppressed [ 441.428423][T21500] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7403'. [ 442.756648][T21562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7434'. [ 443.718836][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7456'. [ 444.391143][T21644] netlink: 'syz.1.7468': attribute type 4 has an invalid length. [ 444.640414][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7474'. [ 444.978103][T21669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7479'. [ 445.078991][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7482'. [ 446.116580][T21719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7501'. [ 446.308671][ T5843] block nbd2: Receive control failed (result -32) [ 446.814847][T21753] netlink: 'syz.1.7516': attribute type 1 has an invalid length. [ 446.854095][T21753] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7516'. [ 446.889774][T21753] netlink: 'syz.1.7516': attribute type 1 has an invalid length. [ 446.900070][T21753] netlink: 'syz.1.7516': attribute type 8 has an invalid length. [ 446.918597][T21753] netlink: 582 bytes leftover after parsing attributes in process `syz.1.7516'. [ 446.935709][T21753] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7516'. [ 447.264278][T21775] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7526'. [ 447.313053][T21780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7527'. [ 447.694999][T21797] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7535'. [ 447.821039][T21802] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.7537'. [ 448.315599][T21824] : renamed from bond0 [ 448.951390][T21859] syz.4.7562: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 449.004130][T21859] CPU: 1 UID: 0 PID: 21859 Comm: syz.4.7562 Not tainted syzkaller #0 PREEMPT(full) [ 449.004163][T21859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 449.004176][T21859] Call Trace: [ 449.004185][T21859] [ 449.004194][T21859] dump_stack_lvl+0xe8/0x150 [ 449.004234][T21859] warn_alloc+0x249/0x340 [ 449.004269][T21859] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.004299][T21859] ? __pfx_warn_alloc+0x10/0x10 [ 449.004341][T21859] ? kasan_save_track+0x4f/0x80 [ 449.004370][T21859] ? kasan_save_track+0x3e/0x80 [ 449.004399][T21859] ? __kasan_kmalloc+0x93/0xb0 [ 449.004416][T21859] ? __kmalloc_cache_noprof+0x31c/0x660 [ 449.004445][T21859] ? xskq_create+0x56/0x170 [ 449.004467][T21859] ? xsk_setsockopt+0x54c/0x990 [ 449.004485][T21859] ? do_sock_setsockopt+0x17c/0x1b0 [ 449.004515][T21859] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 449.004544][T21859] ? do_syscall_64+0x15f/0xf80 [ 449.004574][T21859] __vmalloc_node_range_noprof+0x132/0x1730 [ 449.004644][T21859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 449.004682][T21859] ? __kasan_kmalloc+0x93/0xb0 [ 449.004707][T21859] vmalloc_user_noprof+0xad/0xe0 [ 449.004736][T21859] ? xskq_create+0xbf/0x170 [ 449.004758][T21859] xskq_create+0xbf/0x170 [ 449.004782][T21859] xsk_init_queue+0x8a/0xe0 [ 449.004804][T21859] xsk_setsockopt+0x54c/0x990 [ 449.004826][T21859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 449.004845][T21859] ? __pfx_aa_sk_perm+0x10/0x10 [ 449.004875][T21859] ? aa_sock_opt_perm+0xff/0x1a0 [ 449.004914][T21859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 449.004943][T21859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 449.004964][T21859] do_sock_setsockopt+0x17c/0x1b0 [ 449.004998][T21859] __x64_sys_setsockopt+0x13d/0x1b0 [ 449.005031][T21859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.005053][T21859] do_syscall_64+0x15f/0xf80 [ 449.005076][T21859] ? trace_irq_disable+0x3b/0x140 [ 449.005099][T21859] ? clear_bhb_loop+0x40/0x90 [ 449.005124][T21859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.005144][T21859] RIP: 0033:0x7f0d29b9c819 [ 449.005164][T21859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.005182][T21859] RSP: 002b:00007f0d2a97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 449.005205][T21859] RAX: ffffffffffffffda RBX: 00007f0d29e15fa0 RCX: 00007f0d29b9c819 [ 449.005220][T21859] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 449.005232][T21859] RBP: 00007f0d29c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 449.005244][T21859] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.005256][T21859] R13: 00007f0d29e16038 R14: 00007f0d29e15fa0 R15: 00007ffe6a63a958 [ 449.005296][T21859] [ 449.005756][T21859] Mem-Info: [ 449.356183][T21859] active_anon:5915 inactive_anon:6 isolated_anon:0 [ 449.356183][T21859] active_file:2889 inactive_file:40178 isolated_file:0 [ 449.356183][T21859] unevictable:768 dirty:318 writeback:0 [ 449.356183][T21859] slab_reclaimable:10792 slab_unreclaimable:100567 [ 449.356183][T21859] mapped:29216 shmem:1358 pagetables:1204 [ 449.356183][T21859] sec_pagetables:0 bounce:0 [ 449.356183][T21859] kernel_misc_reclaimable:0 [ 449.356183][T21859] free:1326315 free_pcp:7965 free_cma:0 [ 449.405380][T21859] Node 0 active_anon:23744kB inactive_anon:24kB active_file:11556kB inactive_file:160520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116900kB dirty:1276kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 449.522545][T21859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 449.566173][T21859] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.602766][T21859] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 449.609243][T21859] Node 0 DMA32 free:1350712kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23844kB inactive_anon:24kB active_file:11556kB inactive_file:160520kB unevictable:1536kB writepending:1276kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:31440kB local_pcp:19492kB free_cma:0kB [ 449.686650][T21859] lowmem_reserve[]: 0 0 0 0 0 [ 449.695396][T21859] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 449.727072][T21859] lowmem_reserve[]: 0 0 0 0 0 [ 449.731893][T21859] Node 1 Normal free:3939188kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 449.789271][T21859] lowmem_reserve[]: 0 0 0 0 0 [ 449.795312][T21859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 449.824562][T21859] Node 0 DMA32: 4788*4kB (UM) 3393*8kB (UM) 2120*16kB (UME) 439*32kB (UME) 92*64kB (UME) 522*128kB (UME) 336*256kB (UME) 158*512kB (UME) 79*1024kB (UE) 21*2048kB (UME) 218*4096kB (UM) = 1350712kB [ 449.846325][T21859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 449.858881][T21859] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 5*16kB (UM) 11*32kB (UM) 6*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3939188kB [ 449.905378][T21859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.918338][T21859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 449.928204][T21859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.950136][T21859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 449.960464][T21859] 44421 total pagecache pages [ 449.966009][T21859] 0 pages in swap cache [ 449.970574][T21859] Free swap = 124996kB [ 449.976279][T21859] Total swap = 124996kB [ 449.980789][T21859] 2097051 pages RAM [ 449.990928][T21859] 0 pages HighMem/MovableOnly [ 450.000741][T21859] 427401 pages reserved [ 450.021775][T21893] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7578'. [ 450.033498][T21859] 0 pages cma reserved [ 450.356127][T21906] block nbd3: Unsupported socket: should be TCP or UNIX. [ 450.807296][T21929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7592'. [ 451.141565][T21946] IPv6: Can't replace route, no match found [ 451.173433][T21946] IPv6: Can't replace route, no match found [ 451.986984][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7617'. [ 452.269708][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7623'. [ 452.446481][T22008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7627'. [ 452.716123][T22025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7634'. [ 453.945588][T22083] tap0: tun_chr_ioctl cmd 1074025678 [ 453.964274][T22083] tap0: group set to 0 [ 454.406461][T22106] netlink: 'syz.2.7673': attribute type 83 has an invalid length. [ 456.493979][T22205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7717'. [ 456.545278][T22205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7717'. [ 456.622567][T22209] netlink: 'syz.3.7720': attribute type 4 has an invalid length. [ 456.770869][T22214] netem: change failed [ 457.225196][T22235] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7732'. [ 457.377017][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7735'. [ 457.561672][T22251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7739'. [ 458.445728][T22296] tap0: tun_chr_ioctl cmd 1074025672 [ 458.454228][T22296] tap0: ignored: set checksum disabled [ 458.994579][T22322] ip6erspan0: entered allmulticast mode [ 459.273215][T22339] veth0: entered promiscuous mode [ 459.290155][T22339] veth0: left promiscuous mode [ 459.833795][T22366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7791'. [ 460.517349][T22402] xt_hashlimit: size too large, truncated to 1048576 [ 460.569610][T22407] : renamed from vxcan1 [ 461.144341][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7819'. [ 461.469805][T22445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7826'. [ 461.605130][T22451] tipc: Started in network mode [ 461.619802][T22451] tipc: Node identity ac14140f, cluster identity 4711 [ 461.640244][T22451] tipc: New replicast peer: 172.20.20.187 [ 461.648486][T22451] tipc: Enabled bearer , priority 10 [ 462.012639][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7836'. [ 462.763037][ T10] tipc: Node number set to 2886997007 [ 463.657767][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7872'. [ 464.017015][T22574] netlink: 'syz.4.7884': attribute type 1 has an invalid length. [ 464.043065][T22574] netlink: 'syz.4.7884': attribute type 2 has an invalid length. [ 464.051313][T22574] netlink: 'syz.4.7884': attribute type 1 has an invalid length. [ 465.656433][ T36] tipc: Subscription rejected, illegal request [ 465.660922][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 465.702140][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7921'. [ 465.989818][T22663] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7927'. [ 466.026119][T22663] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7927'. [ 466.098565][T22669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7930'. [ 466.504334][T22687] ipvlan2: entered allmulticast mode [ 466.520220][T22687] batadv_slave_1: entered allmulticast mode [ 466.851321][T22703] veth0: entered promiscuous mode [ 466.866077][T22701] veth0: left promiscuous mode [ 467.194190][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7950'. [ 467.234739][T22716] bond0: entered promiscuous mode [ 467.257724][T22716] bond_slave_0: entered promiscuous mode [ 467.276683][T22716] bond_slave_1: entered promiscuous mode [ 467.308196][T22716] bond0: left promiscuous mode [ 467.323644][T22716] bond_slave_0: left promiscuous mode [ 467.337496][T22716] bond_slave_1: left promiscuous mode [ 467.565222][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7959'. [ 467.579182][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7959'. [ 469.167305][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7983'. [ 469.369445][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7987'. [ 470.024797][T22838] netlink: 'syz.2.7998': attribute type 4 has an invalid length. [ 470.958385][T22881] netlink: 'syz.3.8015': attribute type 4 has an invalid length. [ 471.302788][T22891] h: entered promiscuous mode [ 471.632166][T22908] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.8028'. [ 471.797796][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8032'. [ 471.942637][T22921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8034'. [ 472.029715][T22929] netlink: 'syz.0.8036': attribute type 1 has an invalid length. [ 472.073498][T22929] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8036'. [ 472.093681][T22929] netlink: 'syz.0.8036': attribute type 1 has an invalid length. [ 472.138236][T22929] netlink: 'syz.0.8036': attribute type 8 has an invalid length. [ 472.178646][T22929] netlink: 582 bytes leftover after parsing attributes in process `syz.0.8036'. [ 472.811003][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8054'. [ 472.875381][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8054'. [ 473.099560][T22980] netlink: 'syz.4.8062': attribute type 2 has an invalid length. [ 473.332944][T22988] veth1_macvtap: left promiscuous mode [ 474.400889][T23033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8086'. [ 474.437203][T23033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8086'. [ 474.633033][T23042] netlink: 766 bytes leftover after parsing attributes in process `syz.3.8090'. [ 474.679619][T23045] netlink: 'syz.1.8091': attribute type 83 has an invalid length. [ 474.955803][T23053] sctp: [Deprecated]: syz.1.8094 (pid 23053) Use of int in max_burst socket option deprecated. [ 474.955803][T23053] Use struct sctp_assoc_value instead [ 475.239732][T23071] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.273236][T23071] team0: Cannot enslave team device to itself [ 475.391276][T23081] tipc: Enabling of bearer rejected, already enabled [ 475.403919][T23079] sctp: [Deprecated]: syz.1.8106 (pid 23079) Use of int in maxseg socket option. [ 475.403919][T23079] Use struct sctp_assoc_value instead [ 475.957862][T23104] netlink: 'syz.3.8118': attribute type 2 has an invalid length. [ 476.092463][T23108] netlink: 'syz.1.8120': attribute type 5 has an invalid length. [ 476.216452][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 478.281243][T23207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8165'. [ 478.534496][T23211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8165'. [ 478.551685][T23211] nbd: nbd64 already in use [ 478.798561][T23232] veth0: entered promiscuous mode [ 478.842126][T23230] veth0: left promiscuous mode [ 478.936105][ T5960] udevd[5960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.033813][T23236] team0 (unregistering): Port device team_slave_0 removed [ 479.072733][T23236] team0 (unregistering): Port device team_slave_1 removed [ 479.457997][T23254] sock: sock_set_timeout: `syz.1.8184' (pid 23254) tries to set negative timeout [ 479.583557][T23259] syzkaller1: entered promiscuous mode [ 479.599426][T23259] syzkaller1: entered allmulticast mode [ 480.157359][T23287] nbd: nbd1 already in use [ 480.175491][T23287] block nbd1: NBD_DISCONNECT [ 480.199730][T23287] block nbd1: Send disconnect failed -32 [ 480.237005][T23287] block nbd1: shutting down sockets [ 480.675803][T23310] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8208'. [ 480.976774][T23319] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8212'. [ 481.693891][ T36] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 481.996490][T23350] syzkaller1: entered promiscuous mode [ 482.031107][T23350] syzkaller1: entered allmulticast mode [ 482.383412][T23367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8234'. [ 482.713115][T23382] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8242'. [ 482.897549][T23393] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.8245'. [ 483.921249][T23441] netlink: 'syz.3.8265': attribute type 11 has an invalid length. [ 484.354818][T23463] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8277'. [ 484.483862][T23467] nbd: couldn't find a device at index 0 [ 484.524805][T23470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8280'. [ 484.565365][T23470] netlink: 'syz.0.8280': attribute type 7 has an invalid length. [ 484.585960][T23470] netlink: 'syz.0.8280': attribute type 8 has an invalid length. [ 484.610543][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8280'. [ 485.589596][T23516] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 485.639207][T23516] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 485.662767][T23516] gretap1: entered promiscuous mode [ 485.688029][T23516] gretap1: entered allmulticast mode [ 485.800869][T23526] netlink: 'syz.0.8305': attribute type 2 has an invalid length. [ 485.831568][T23526] netlink: 'syz.0.8305': attribute type 2 has an invalid length. [ 485.904685][T23532] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 486.019922][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 486.074565][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 486.112320][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 486.136426][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8310'. [ 486.518178][T23558] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.797389][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8327'. [ 486.922838][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8329'. [ 486.951423][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8329'. [ 487.674874][T23608] netlink: 'syz.2.8339': attribute type 1 has an invalid length. [ 487.677803][T23609] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.690092][T23609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.695651][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8339'. [ 487.708143][T23609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.160787][T23627] netlink: 'syz.1.8347': attribute type 4 has an invalid length. [ 488.190975][T23631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8349'. [ 488.217500][T23631] netlink: 'syz.0.8349': attribute type 7 has an invalid length. [ 488.238391][T23631] netlink: 'syz.0.8349': attribute type 8 has an invalid length. [ 488.262169][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 489.586004][T23691] "syz.4.8378" (23691) uses obsolete ecb(arc4) skcipher [ 491.092975][T23767] __nla_validate_parse: 4 callbacks suppressed [ 491.094169][T23767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8409'. [ 491.306234][T23780] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8414'. [ 491.325954][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8413'. [ 491.358413][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8413'. [ 492.190632][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8433'. [ 492.223937][T23820] veth0_macvtap: left promiscuous mode [ 492.225571][T23825] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8435'. [ 492.748724][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8443'. [ 492.758063][T23843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.869797][T23843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.006157][T23850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8448'. [ 493.505181][T23869] pim6reg1: entered promiscuous mode [ 493.530658][T23869] pim6reg1: entered allmulticast mode [ 493.566862][T23877] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8461'. [ 493.728578][T23883] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8464'. [ 495.098087][T23940] netlink: 'syz.1.8488': attribute type 30 has an invalid length. [ 495.174571][T23943] netlink: 'syz.1.8488': attribute type 30 has an invalid length. [ 495.365185][T23947] lo speed is unknown, defaulting to 1000 [ 496.165366][T23987] __nla_validate_parse: 3 callbacks suppressed [ 496.165388][T23987] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8507'. [ 496.344957][T23947] dvmrp8: entered allmulticast mode [ 496.398342][ T48] dvmrp8: left allmulticast mode [ 496.895290][T24007] macvtap1: entered promiscuous mode [ 496.901021][T24007] macvtap1: entered allmulticast mode [ 496.902995][T24007] veth1_vlan: entered allmulticast mode [ 496.949334][T24007] macvtap2: entered promiscuous mode [ 496.956446][T24007] macvtap2: entered allmulticast mode [ 497.806205][T24043] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.8535'. [ 498.014931][T24053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.213524][T24060] netlink: 'syz.0.8543': attribute type 1 has an invalid length. [ 498.254731][T24060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8543'. [ 498.560027][T24074] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.8551'. [ 500.835151][ T10] IPVS: starting estimator thread 0... [ 500.932166][T24180] IPVS: using max 27 ests per chain, 64800 per kthread [ 501.605862][T24218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8607'. [ 501.799997][T24223] syzkaller1: entered promiscuous mode [ 501.812193][T24223] syzkaller1: entered allmulticast mode [ 502.130778][T24237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8616'. [ 502.145446][T24237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8616'. [ 502.218415][T24237] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 502.273790][T24237] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 502.295586][T24246] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.8618'. [ 502.496621][T24255] macvlan0: entered promiscuous mode [ 502.546900][T24258] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8625'. [ 502.804822][T24271] netlink: 'syz.3.8631': attribute type 29 has an invalid length. [ 502.840984][T24271] netlink: 'syz.3.8631': attribute type 29 has an invalid length. [ 502.893204][T24271] netlink: 264 bytes leftover after parsing attributes in process `syz.3.8631'. [ 502.939491][T24273] syzkaller1: entered promiscuous mode [ 502.954538][T24273] syzkaller1: entered allmulticast mode [ 503.199564][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8638'. [ 503.279709][T24287] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.8638'. [ 503.885265][T24312] erspan0: entered promiscuous mode [ 503.912497][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8650'. [ 504.343482][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8659'. [ 504.844105][T24361] tipc: Enabling of bearer rejected, failed to enable media [ 506.383316][T24426] syzkaller1: entered promiscuous mode [ 506.404265][T24426] syzkaller1: entered allmulticast mode [ 506.936597][T24452] netlink: 'syz.4.8711': attribute type 1 has an invalid length. [ 506.961411][T24454] netlink: 'syz.2.8712': attribute type 1 has an invalid length. [ 507.341784][T24474] __nla_validate_parse: 1 callbacks suppressed [ 507.341805][T24474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8720'. [ 507.497059][T24480] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8723'. [ 507.870206][T24499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8730'. [ 509.739244][T24598] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 509.748534][T24598] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 510.689625][T24615] siw: device registration error -23 [ 510.789733][T24620] netlink: 'syz.3.8785': attribute type 10 has an invalid length. [ 510.831772][T24620] bridge_slave_1: left allmulticast mode [ 510.850085][T24620] bridge_slave_1: left promiscuous mode [ 510.881626][T24620] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.903349][T24620] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 511.345970][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8792'. [ 511.496711][T24638] team0: Port device team_slave_0 removed [ 512.785732][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8823'. [ 512.918651][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8826'. [ 513.044115][T24720] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.8828'. [ 513.088793][T24724] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8830'. [ 513.214945][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8832'. [ 513.224455][T24728] netlink: 'syz.1.8832': attribute type 7 has an invalid length. [ 513.233319][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8832'. [ 513.887118][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'. [ 513.918764][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8843'. [ 514.103071][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8849'. [ 514.120234][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8849'. [ 514.367486][T24772] ip6erspan1: entered allmulticast mode [ 515.387237][T24822] netlink: Unknown conntrack attr (type=2304, max=9) [ 516.256333][ T10] IPVS: starting estimator thread 0... [ 516.362313][T24853] IPVS: using max 32 ests per chain, 76800 per kthread [ 517.438039][ T5843] block nbd1: Receive control failed (result -107) [ 517.502955][T24896] nbd1: detected capacity change from 0 to 127 [ 517.618831][ T5960] block nbd1: Dead connection, failed to find a fallback [ 517.665468][ T5960] block nbd1: shutting down sockets [ 517.715470][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 517.754466][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 517.784166][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 517.809017][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 517.838027][ T5960] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 517.872659][ T5960] Buffer I/O error on dev nbd1, logical block 2, async page read [ 517.911244][ T5960] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 517.958448][ T5960] Buffer I/O error on dev nbd1, logical block 3, async page read [ 517.994467][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.021390][T24908] __nla_validate_parse: 2 callbacks suppressed [ 518.021411][T24908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8910'. [ 518.036963][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 518.082093][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.108296][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 518.135073][ T5960] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.178460][ T5960] Buffer I/O error on dev nbd1, logical block 2, async page read [ 518.204776][ T5960] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.230296][ T5960] Buffer I/O error on dev nbd1, logical block 3, async page read [ 518.244397][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.254152][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 518.272805][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.297376][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 518.388379][ T5960] ldm_validate_partition_table(): Disk read failed. [ 518.442738][ T5960] Dev nbd1: unable to read RDB block 0 [ 518.518676][ T5960] nbd1: unable to read partition table [ 518.577582][T24931] netlink: 'syz.2.8919': attribute type 1 has an invalid length. [ 518.605897][ T5960] ldm_validate_partition_table(): Disk read failed. [ 518.623587][T24934] trusted_key: syz.3.8922 sent an empty control message without MSG_MORE. [ 518.648842][ T5960] Dev nbd1: unable to read RDB block 0 [ 518.657155][T24924] nbd0: detected capacity change from 0 to 63 [ 518.669560][T24929] block nbd0: NBD_DISCONNECT [ 518.686221][ T5960] nbd1: unable to read partition table [ 518.729810][T24929] block nbd0: Disconnected due to user request. [ 518.768879][T24931] bond2: entered promiscuous mode [ 518.776673][T24929] block nbd0: shutting down sockets [ 518.810156][ T6309] ldm_validate_partition_table(): Disk read failed. [ 518.812467][T24931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.819606][ T6309] Dev nbd0: unable to read RDB block 0 [ 518.831858][ T6309] nbd0: unable to read partition table [ 518.866933][ T6309] ldm_validate_partition_table(): Disk read failed. [ 518.899081][ T6309] Dev nbd0: unable to read RDB block 0 [ 518.919949][ T6309] nbd0: unable to read partition table [ 518.988390][T24939] bond2: (slave bridge4): making interface the new active one [ 519.032560][T24939] bridge4: entered promiscuous mode [ 519.040153][T24939] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 519.168562][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8929'. [ 519.217473][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8929'. [ 519.388466][T24963] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8932'. [ 519.655742][T24975] netlink: 'syz.3.8937': attribute type 1 has an invalid length. [ 519.866285][T24988] netlink: 'syz.4.8944': attribute type 12 has an invalid length. [ 520.100439][T24997] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.148598][T24997] bond2: (slave lo): Enslaving as an active interface with an up link [ 520.158104][T24997] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 520.181118][ T5980] lo speed is unknown, defaulting to 1000 [ 520.185866][ T29] lo speed is unknown, defaulting to 1000 [ 520.195276][ T5980] syz2: Port: 1 Link ACTIVE [ 520.734560][T25027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8958'. [ 521.987842][T25053] gretap2: entered promiscuous mode [ 522.401642][T25068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8975'. [ 522.602045][T25074] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 522.666576][T25074] bond4: (slave lo): Enslaving as an active interface with an up link [ 522.692671][T25074] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 523.619252][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 523.699055][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8984'. [ 523.709403][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8990'. [ 523.726657][T25089] netlink: 'syz.3.8984': attribute type 5 has an invalid length. [ 523.738164][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8984'. [ 523.777190][T25089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8984'. [ 523.830734][T25089] netlink: 'syz.3.8984': attribute type 5 has an invalid length. [ 523.858736][T25089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8984'. [ 523.915057][T25117] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.8994'. [ 524.143218][T25125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8998'. [ 524.327215][T25132] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9001'. [ 524.374728][T25132] netlink: Unknown conntrack attr (0) [ 524.444318][T25135] block nbd0: not configured, cannot reconfigure [ 524.479272][T25136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9003'. [ 525.341392][T25160] vlan1 (unregistering): left allmulticast mode [ 525.347999][T25160] veth0_vlan (unregistering): left allmulticast mode [ 526.393462][T25190] netlink: 'syz.1.9027': attribute type 29 has an invalid length. [ 526.428400][T25191] netlink: 'syz.1.9027': attribute type 29 has an invalid length. [ 527.332255][T25223] pim6reg1: entered promiscuous mode [ 527.338409][T25223] pim6reg1: entered allmulticast mode [ 527.821096][T25239] vlan3: entered allmulticast mode [ 527.937234][T25239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.955085][T25239] bond_slave_0: left allmulticast mode [ 527.977238][T25239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.007517][T25239] bond_slave_1: left allmulticast mode [ 528.026247][T25239] bond0 (unregistering): Released all slaves [ 528.307629][T25249] bridge_slave_0: invalid flags given to default FDB implementation [ 528.667019][T25264] __nla_validate_parse: 9 callbacks suppressed [ 528.667043][T25264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9060'. [ 528.716355][T25264] vcan0 (unregistering): left allmulticast mode [ 529.235852][T25287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9069'. [ 529.493565][T25281] netlink: 'syz.2.9066': attribute type 21 has an invalid length. [ 529.501750][T25283] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 529.514784][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9066'. [ 529.531759][T25283] bond5: (slave lo): Enslaving as an active interface with an up link [ 529.544604][T25283] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 529.589148][ T1086] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.589255][T25281] netlink: 'syz.2.9066': attribute type 21 has an invalid length. [ 529.606878][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9066'. [ 529.616737][ T1086] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.627321][ T1086] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.648135][ T1086] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.716312][T25298] syzkaller1: entered promiscuous mode [ 529.734362][T25298] syzkaller1: entered allmulticast mode [ 529.748076][T25298] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 530.570954][T25321] syzkaller1: entered promiscuous mode [ 530.579292][T25321] syzkaller1: entered allmulticast mode [ 530.786353][T25326] "syz.2.9086" (25326) uses obsolete ecb(arc4) skcipher [ 531.789000][T25367] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9101'. [ 532.247247][T25389] netlink: 'syz.1.9103': attribute type 1 has an invalid length. [ 532.310129][T25393] netlink: 'syz.4.9104': attribute type 1 has an invalid length. [ 532.352697][T25393] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.9104'. [ 532.632650][T25406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9108'. [ 534.016964][T25432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.032872][T25432] bridge0: port 5(bond5) entered blocking state [ 534.047658][T25432] bridge0: port 5(bond5) entered disabled state [ 534.062333][T25432] bond5: entered allmulticast mode [ 534.079773][T25432] bond5: entered promiscuous mode [ 534.742320][T25457] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 535.715947][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9128'. [ 535.754042][T25467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9128'. [ 535.794282][T25467] netlink: 'syz.0.9128': attribute type 15 has an invalid length. [ 535.933150][ T756] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 535.942160][ T756] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 535.951207][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9128'. [ 535.992803][ T756] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 536.023948][T25467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9128'. [ 536.046205][ T756] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 536.071773][T25467] netlink: 'syz.0.9128': attribute type 15 has an invalid length. [ 536.131279][T25471] netlink: 'syz.2.9130': attribute type 25 has an invalid length. [ 536.152172][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9130'. [ 536.202482][T25471] netlink: 'syz.2.9130': attribute type 25 has an invalid length. [ 536.229490][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9130'. [ 536.672697][T25478] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9133'. [ 537.741708][T25506] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.9146'. [ 537.950700][T25489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 537.973230][T25489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 538.223541][T25533] netlink: 'syz.4.9158': attribute type 1 has an invalid length. [ 538.236167][T25535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9156'. [ 538.278331][T25533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.304812][T25537] bond3: (slave geneve2): making interface the new active one [ 538.315037][T25537] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 538.798643][T25548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.819559][T25548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.849015][T25566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.969186][T25568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9170'. [ 539.014551][T25548] hsr0: left allmulticast mode [ 539.019539][T25548] hsr_slave_0: left allmulticast mode [ 539.025795][T25548] hsr_slave_1: left allmulticast mode [ 539.088931][T25568] 8021q: adding VLAN 0 to HW filter on device bond6 [ 539.099570][ T139] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.202284][ T139] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.224944][T25382] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.266049][T25382] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.461046][T25585] syzkaller1: entered promiscuous mode [ 539.467886][T25585] syzkaller1: entered allmulticast mode [ 540.932298][T25640] netlink: 'syz.4.9198': attribute type 1 has an invalid length. [ 540.944943][T25640] __nla_validate_parse: 3 callbacks suppressed [ 540.944965][T25640] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9198'. [ 541.453187][T25662] netem: change failed [ 541.540254][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9209'. [ 541.556917][T25668] netlink: 'syz.0.9210': attribute type 12 has an invalid length. [ 541.567024][T25666] chnl_net:caif_netlink_parms(): no params data found [ 541.575470][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9210'. [ 541.680071][ T756] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.691022][T25668] netlink: 'syz.0.9210': attribute type 12 has an invalid length. [ 541.710598][ T756] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.722107][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9210'. [ 541.741320][ T756] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 541.760350][ T756] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 542.423439][T25698] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 542.575686][T25704] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 543.511776][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9243'. [ 543.584960][T25745] netlink: 'syz.2.9245': attribute type 1 has an invalid length. [ 543.585235][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9244'. [ 543.678312][T25749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9246'. [ 543.738764][T25753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9246'. [ 543.758501][T25745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.849324][T25747] bond0: (slave geneve2): making interface the new active one [ 543.889384][T25747] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 543.920799][T25382] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.937079][T25382] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.956213][T25382] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.976615][T25382] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.197829][T25763] atomic_op ffff888055055998 conn xmit_atomic 0000000000000000 [ 544.393926][T25769] vlan3: entered allmulticast mode [ 544.412841][T25769] bond0: entered allmulticast mode [ 544.428728][T25772] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9255'. [ 544.453379][T25769] bond_slave_0: entered allmulticast mode [ 544.460450][T25769] bond_slave_1: entered allmulticast mode [ 544.468324][T25769] bridge_slave_1: entered allmulticast mode [ 544.566541][T25772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.595006][T25772] bond_slave_0: left allmulticast mode [ 544.633535][T25772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.658399][T25772] bond_slave_1: left allmulticast mode [ 544.690141][T25772] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 544.707998][T25772] bridge_slave_1: left allmulticast mode [ 544.724763][T25772] bond0 (unregistering): Released all slaves [ 544.756909][T25784] netlink: 'syz.2.9259': attribute type 1 has an invalid length. [ 544.842717][T25784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.945082][T25790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9260'. [ 546.126527][T25829] __nla_validate_parse: 3 callbacks suppressed [ 546.126548][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9274'. [ 546.935427][T25863] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9288'. [ 546.985011][T25863] netlink: Conntrack attr has 4 unknown bytes [ 547.209414][T25878] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9292'. [ 547.844134][T25904] netlink: 'syz.4.9304': attribute type 15 has an invalid length. [ 547.852736][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9304'. [ 547.884988][T25904] netlink: 'syz.4.9304': attribute type 15 has an invalid length. [ 547.885164][ T1145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 547.902288][T25904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9304'. [ 547.942121][ T1145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 547.970314][ T1145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 547.979678][ T1145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 547.989873][T25906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'. [ 548.720572][T25936] netlink: 'syz.3.9318': attribute type 1 has an invalid length. [ 548.821659][T25940] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 548.832903][T25940] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 548.860571][T25940] bond0: (slave ip6gre2): making interface the new active one [ 548.874502][T25940] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 548.884492][T25941] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 548.890720][T25941] syzkaller1: Refused to change device type [ 548.928597][T25942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.056132][T25946] veth0: entered promiscuous mode [ 549.063362][T25946] veth0: left promiscuous mode [ 549.232379][T25952] tipc: Enabled bearer , priority 10 [ 549.302487][T25954] syzkaller1: entered promiscuous mode [ 549.320596][T25954] syzkaller1: entered allmulticast mode [ 549.697122][T25971] netlink: 'syz.2.9333': attribute type 1 has an invalid length. [ 549.877748][T25971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.001840][T25974] bond4: (slave geneve3): making interface the new active one [ 550.018652][T25974] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 550.067635][ T756] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.101262][ T756] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.127084][ T756] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.140883][ T756] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 550.267227][T25989] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9339'. [ 550.513635][T26002] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9345'. [ 550.557236][T26003] xt_hashlimit: size too large, truncated to 1048576 [ 550.711094][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9349'. [ 551.155574][T26023] H: left allmulticast mode [ 551.159214][T26022] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.9353'. [ 551.160454][T26023] H: left promiscuous mode [ 551.175308][T26023] bridge0: port 3(H) entered disabled state [ 551.189832][T26023] veth0_to_bridge: left allmulticast mode [ 551.196479][T26023] veth0_to_bridge: left promiscuous mode [ 551.202581][T26023] bridge0: port 4(veth0_to_bridge) entered disabled state [ 551.234937][T26023] x9: left allmulticast mode [ 551.249710][T26023] x9: left promiscuous mode [ 551.255821][T26023] bridge0: port 1(1x9) entered disabled state [ 551.268129][T26023] bridge_slave_1: left allmulticast mode [ 551.274287][T26023] bridge_slave_1: left promiscuous mode [ 551.280249][T26023] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.301628][T26023] bond0: (slave bond_slave_0): Releasing backup interface [ 551.317549][T26023] bond0: (slave bond_slave_1): Releasing backup interface [ 551.357204][T26023] team0: Port device team_slave_1 removed [ 551.365351][T26023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.374243][T26023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.383916][T26023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.517939][T26033] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.741429][T26051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9361'. [ 551.777570][T26033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.820726][T26033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.949970][ T139] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.979001][ T139] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.060529][ T139] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.073652][ T139] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.085353][ T139] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.115280][ T139] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.136363][T26057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9363'. [ 552.160233][ T139] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.179680][ T139] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.380003][T26067] netlink: 'syz.3.9368': attribute type 11 has an invalid length. [ 553.086998][T26105] tls_set_device_offload: netdev not found [ 553.286015][T26118] netlink: 'syz.2.9389': attribute type 8 has an invalid length. [ 553.296179][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9389'. [ 553.315082][T26118] bond0: entered promiscuous mode [ 553.320445][T26118] geneve2: entered promiscuous mode [ 553.331186][T26118] bond0: left promiscuous mode [ 553.336656][T26118] geneve2: left promiscuous mode [ 554.020541][T26149] veth0: entered promiscuous mode [ 554.048141][T26147] veth0: left promiscuous mode [ 554.265570][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9409'. [ 554.296520][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9409'. [ 554.306682][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 554.319960][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9409'. [ 554.329121][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9409'. [ 554.355390][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 559.774410][T26316] __nla_validate_parse: 4 callbacks suppressed [ 559.774435][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9474'. [ 559.802511][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9474'. [ 561.372748][T26370] lo speed is unknown, defaulting to 1000 [ 561.423630][T26359] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 561.695158][T26379] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9496'. [ 562.814989][T26428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.153831][T26471] netlink: 'syz.2.9534': attribute type 12 has an invalid length. [ 564.191590][T26476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9536'. [ 564.230746][T26476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9536'. [ 565.305876][T26515] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9553'. [ 565.522987][T26525] sock: sock_set_timeout: `syz.0.9557' (pid 26525) tries to set negative timeout [ 565.685196][T26532] netlink: 'syz.3.9559': attribute type 10 has an invalid length. [ 565.693503][T26532] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.9559'. [ 565.968324][T26546] PKCS7: Unknown OID: [4] (bad) [ 565.976155][T26546] PKCS7: Only support pkcs7_signedData type [ 566.517533][T26567] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9576'. [ 567.093549][T26588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9586'. [ 567.385991][T26600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9592'. [ 567.402451][T26600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9592'. [ 567.571359][T26603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9593'. [ 567.603055][T26603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9593'. [ 567.682777][T26608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9596'. [ 567.861664][T26617] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9599'. [ 568.008145][T26621] netlink: 'syz.1.9601': attribute type 1 has an invalid length. [ 568.028808][T26621] netlink: 'syz.1.9601': attribute type 4 has an invalid length. [ 568.348600][T26630] netlink: 'syz.2.9606': attribute type 2 has an invalid length. [ 568.597193][T26639] syzkaller1: entered promiscuous mode [ 568.619527][T26639] syzkaller1: entered allmulticast mode [ 568.637469][T26645] GUP no longer grows the stack in syz.2.9613 (26645): 200000003000-20000000a000 (200000001000) [ 568.639359][T26641] only policy match revision 0 supported [ 568.653115][T26645] CPU: 0 UID: 0 PID: 26645 Comm: syz.2.9613 Not tainted syzkaller #0 PREEMPT(full) [ 568.653145][T26645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 568.653158][T26645] Call Trace: [ 568.653166][T26645] [ 568.653175][T26645] dump_stack_lvl+0xe8/0x150 [ 568.653213][T26645] __get_user_pages+0x2453/0x29d0 [ 568.653277][T26645] ? __gup_longterm_locked+0xc4e/0x1630 [ 568.653305][T26645] ? down_read_killable+0x1bb/0x340 [ 568.653340][T26645] ? try_get_folio+0xec/0x650 [ 568.653373][T26645] __gup_longterm_locked+0xdcf/0x1630 [ 568.653432][T26645] gup_fast_fallback+0x1d82/0x22e0 [ 568.653497][T26645] ? __pfx_gup_fast_fallback+0x10/0x10 [ 568.653528][T26645] ? is_valid_gup_args+0x11f/0x200 [ 568.653557][T26645] ? get_user_pages_fast+0x4d/0xb0 [ 568.653587][T26645] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 568.653620][T26645] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 568.653656][T26645] iov_iter_get_pages2+0x5e/0xa0 [ 568.653683][T26645] __se_sys_vmsplice+0x7b3/0x1490 [ 568.653737][T26645] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 568.653767][T26645] ? __pfx_futex_wait+0x10/0x10 [ 568.653803][T26645] ? lockdep_hardirqs_on+0x7a/0x110 [ 568.653893][T26645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.653916][T26645] do_syscall_64+0x15f/0xf80 [ 568.653940][T26645] ? trace_irq_disable+0x3b/0x140 [ 568.653963][T26645] ? clear_bhb_loop+0x40/0x90 [ 568.653990][T26645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.654012][T26645] RIP: 0033:0x7f3a68f9c819 [ 568.654033][T26645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.654052][T26645] RSP: 002b:00007f3a69e39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 568.654075][T26645] RAX: ffffffffffffffda RBX: 00007f3a69215fa0 RCX: 00007f3a68f9c819 [ 568.654091][T26645] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 568.654104][T26645] RBP: 00007f3a69032c91 R08: 0000000000000000 R09: 0000000000000000 [ 568.654118][T26645] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 568.654130][T26645] R13: 00007f3a69216038 R14: 00007f3a69215fa0 R15: 00007ffd5c25da08 [ 568.654168][T26645] [ 568.669406][T26641] unable to load match [ 569.511054][T26584] Set syz1 is full, maxelem 65536 reached [ 570.586131][T26713] veth1_to_bond: entered allmulticast mode [ 570.602475][T26714] veth1_to_bond: left allmulticast mode [ 572.165073][T26762] __nla_validate_parse: 2 callbacks suppressed [ 572.165096][T26762] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9659'. [ 572.235179][T26763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9658'. [ 572.271230][T26768] "syz.1.9661" (26768) uses obsolete ecb(arc4) skcipher [ 572.302340][T26763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9658'. [ 572.768184][T26788] lo speed is unknown, defaulting to 1000 [ 572.836200][T26794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9672'. [ 572.845808][T26794] bridge: RTM_NEWNEIGH with invalid ether address [ 572.873093][T26794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9672'. [ 572.882813][T26794] bridge: RTM_NEWNEIGH with invalid ether address [ 574.438300][T26860] netlink: 'syz.0.9693': attribute type 1 has an invalid length. [ 574.441680][T26861] netlink: 'syz.2.9694': attribute type 1 has an invalid length. [ 574.667355][T26867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9695'. [ 574.741200][T26863] bond6: (slave gretap2): making interface the new active one [ 574.753488][T26863] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 574.811242][T26864] bond5: (slave gretap2): making interface the new active one [ 574.831608][T26864] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 574.940625][T26867] team1: entered promiscuous mode [ 574.955162][T26867] team1: entered allmulticast mode [ 575.824586][T26899] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9704'. [ 576.519902][T26916] sctp: [Deprecated]: syz.4.9713 (pid 26916) Use of int in maxseg socket option. [ 576.519902][T26916] Use struct sctp_assoc_value instead [ 576.546177][T26919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9714'. [ 576.947343][T26935] xt_hashlimit: size too large, truncated to 1048576 [ 576.976429][T26937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9722'. [ 576.994873][T26937] netlink: 'syz.2.9722': attribute type 7 has an invalid length. [ 577.009148][T26937] netlink: 'syz.2.9722': attribute type 8 has an invalid length. [ 577.029929][T26937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9722'. [ 577.708752][T26960] netlink: 'syz.3.9730': attribute type 1 has an invalid length. [ 577.767508][T26959] syzkaller0: entered promiscuous mode [ 577.780061][T26959] syzkaller0: entered allmulticast mode [ 577.922293][T26963] bond5: (slave bridge7): making interface the new active one [ 577.934860][T26963] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 578.171009][T26977] netlink: 'syz.3.9733': attribute type 1 has an invalid length. [ 580.200620][T26977] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 580.833374][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9745'. [ 580.931818][T27009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9746'. [ 581.139452][T27017] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.9750'. [ 581.698685][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9761'. [ 582.084115][T27064] netlink: 'syz.0.9768': attribute type 26 has an invalid length. [ 582.121031][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9768'. [ 582.150138][T27064] netlink: 'syz.0.9768': attribute type 26 has an invalid length. [ 582.180123][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9768'. [ 582.329180][T27074] tipc: Failed to remove unknown binding: 66,1,1/0:3743583120/3743583122 [ 582.379367][T27074] tipc: Failed to remove unknown binding: 66,1,1/0:3743583120/3743583122 [ 582.449502][T27079] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9775'. [ 582.461384][T27080] netlink: 'syz.3.9777': attribute type 1 has an invalid length. [ 582.608748][T27084] bond6: (slave ip6gretap1): making interface the new active one [ 582.617646][T27084] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 582.627547][T27084] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 582.636081][T27084] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 583.126967][T27104] syzkaller0: entered allmulticast mode [ 583.144067][T27107] netlink: 'syz.0.9788': attribute type 1 has an invalid length. [ 583.430862][T27108] bond7: (slave geneve2): making interface the new active one [ 583.471571][T27108] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 583.517929][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.536360][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.587671][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.703813][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.742957][T27129] syzkaller1: entered promiscuous mode [ 583.752355][T27129] syzkaller1: entered allmulticast mode [ 583.960745][T27145] netlink: 'syz.0.9802': attribute type 1 has an invalid length. [ 584.147155][T27145] bond8: entered promiscuous mode [ 584.155601][T27145] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.194356][T27159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.202921][T27159] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 584.214332][T27159] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 584.228099][T27159] bond8: (slave ip6gre2): making interface the new active one [ 584.237116][T27159] ip6gre2: entered promiscuous mode [ 584.244650][T27159] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 585.201099][T27198] netlink: 'syz.4.9817': attribute type 21 has an invalid length. [ 585.222990][T27198] netlink: 'syz.4.9817': attribute type 22 has an invalid length. [ 585.241210][T27198] netlink: 'syz.4.9817': attribute type 23 has an invalid length. [ 585.259428][T27198] netlink: 'syz.4.9817': attribute type 25 has an invalid length. [ 585.280543][T27198] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9817'. [ 585.851872][T27212] netlink: 'syz.4.9823': attribute type 1 has an invalid length. [ 585.872429][T27212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9823'. [ 586.604514][T27231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9831'. [ 586.659175][T27241] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9834'. [ 586.966229][T27255] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9841'. [ 586.977177][T27255] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 587.181843][T27262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9846'. [ 587.527649][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9851'. [ 587.694984][T27286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9855'. [ 587.715834][T27285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9854'. [ 587.769246][T27289] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 588.036332][T27298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9861'. [ 588.555271][T27317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9870'. [ 591.026336][T27423] netlink: 'syz.1.9912': attribute type 1 has an invalid length. [ 591.092753][T27423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.113404][T27426] bond7: (slave gretap2): making interface the new active one [ 591.123559][T27426] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 591.269576][T27433] __nla_validate_parse: 3 callbacks suppressed [ 591.269599][T27433] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9915'. [ 591.416686][T27440] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 591.963536][T27460] netlink: 51 bytes leftover after parsing attributes in process `syz.1.9927'. [ 592.485864][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9935'. [ 592.540221][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9935'. [ 592.834697][T27489] lo speed is unknown, defaulting to 1000 [ 593.285066][T27509] netlink: 'syz.0.9945': attribute type 1 has an invalid length. [ 593.419614][T27519] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9946'. [ 593.436539][T27509] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.611463][T27523] netlink: 'syz.3.9949': attribute type 29 has an invalid length. [ 593.636017][T27527] netlink: 'syz.3.9949': attribute type 29 has an invalid length. [ 593.655395][T27523] netlink: 'syz.3.9949': attribute type 32 has an invalid length. [ 593.755245][T27525] netlink: 320 bytes leftover after parsing attributes in process `syz.2.9950'. [ 594.393138][T27558] netlink: 'syz.4.9963': attribute type 16 has an invalid length. [ 594.412902][T27558] netlink: 'syz.4.9963': attribute type 17 has an invalid length. [ 594.452775][T27558] erspan0: left promiscuous mode [ 594.499447][T27558] bridge0: port 4(syz_tun) entered blocking state [ 594.506100][T27558] bridge0: port 4(syz_tun) entered listening state [ 594.521822][T27558] 8021q: adding VLAN 0 to HW filter on device  [ 594.531272][T27558] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.541461][T27558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.665088][ T139] : (slave bond_slave_0): link status definitely down, disabling slave [ 594.702383][ T139] : (slave bond_slave_1): link status definitely down, disabling slave [ 594.719159][ T139] : (slave batadv0): link status definitely down, disabling slave [ 594.788080][ T139] : now running without any active interface! [ 594.939565][T27571] syzkaller0: entered promiscuous mode [ 594.945516][T27571] syzkaller0: entered allmulticast mode [ 597.664605][T27625] aD: Caught tx_queue_len zero misconfig [ 597.861210][T27631] netlink: 'syz.2.9985': attribute type 1 has an invalid length. [ 597.884517][T27631] netlink: 'syz.2.9985': attribute type 1 has an invalid length. [ 598.994162][T27686] netlink: 'syz.0.10010': attribute type 1 has an invalid length. [ 599.016315][T27686] netlink: 'syz.0.10010': attribute type 4 has an invalid length. [ 599.025105][T27687] bridge0: entered allmulticast mode [ 599.032106][T27686] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.10010'. [ 599.371669][T27701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10017'. [ 599.472452][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10019'. [ 599.499702][T27706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10019'. [ 601.481068][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10047'. [ 602.275164][T27814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10059'. [ 603.001439][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10070'. [ 603.733422][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10080'. [ 603.745839][T27869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10079'. [ 603.783406][T27873] netlink: 'syz.1.10081': attribute type 1 has an invalid length. [ 603.851127][T27873] bond8: entered promiscuous mode [ 603.860636][T27873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 604.023871][T27873] bond8: (slave bridge3): making interface the new active one [ 604.047604][T27873] bridge3: entered promiscuous mode [ 604.063567][T27873] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 604.701119][T27907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10093'. [ 604.953182][T27913] sctp: [Deprecated]: syz.3.10095 (pid 27913) Use of int in maxseg socket option. [ 604.953182][T27913] Use struct sctp_assoc_value instead [ 604.987021][T27916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10096'. [ 605.345841][T27929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10101'. [ 606.427736][T27965] batadv_slave_0: entered promiscuous mode [ 606.605407][T27974] geneve1: entered promiscuous mode [ 606.679412][T27970] lo speed is unknown, defaulting to 1000 [ 606.895055][T27983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10120'. [ 607.591426][T27996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10124'. [ 607.985216][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10128'. [ 608.000011][T28008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10128'. [ 610.074539][T28071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10151'. [ 610.094396][ C0] bridge0: port 4(syz_tun) entered learning state [ 610.391554][T28079] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.10154'. [ 610.431766][T28082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10156'. [ 610.905367][T28096] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10161'. [ 611.114340][T28102] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1293833586/1293833588 [ 611.321315][T28108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10167'. [ 611.391753][T28110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10168'. [ 611.448680][T28110] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10168'. [ 612.275601][T28139] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10182'. [ 612.954145][T28167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10191'. [ 613.518565][T28180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.782786][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10202'. [ 614.201420][T28210] netlink: 'syz.2.10207': attribute type 1 has an invalid length. [ 614.998877][T28212] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.10208:28212 [ 615.484813][T28257] __nla_validate_parse: 1 callbacks suppressed [ 615.484836][T28257] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10222'. [ 616.157279][T28270] netlink: 'syz.4.10228': attribute type 30 has an invalid length. [ 616.192016][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10228'. [ 616.360058][T28278] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10232'. [ 616.824146][T28300] syzkaller1: entered promiscuous mode [ 616.830028][T28300] syzkaller1: entered allmulticast mode [ 616.876115][T28302] netlink: 'syz.0.10243': attribute type 4 has an invalid length. [ 616.993043][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10245'. [ 617.221505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803270f400: rx timeout, send abort [ 617.325466][T28317] syzkaller1: entered promiscuous mode [ 617.331219][T28317] syzkaller1: entered allmulticast mode [ 617.582535][T28327] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.10254'. [ 617.732398][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803270f400: abort rx timeout. Force session deactivation [ 618.076968][T28345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10260'. [ 618.193932][T28350] netlink: 'syz.3.10263': attribute type 1 has an invalid length. [ 618.344513][T28350] 8021q: adding VLAN 0 to HW filter on device bond7 [ 618.369284][T28345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10260'. [ 618.439517][T28353] 8021q: adding VLAN 0 to HW filter on device bond7 [ 618.464602][T28353] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 618.516941][T28353] bond7: (slave vcan1): Error -95 calling set_mac_address [ 619.088971][T28384] netlink: 'syz.3.10274': attribute type 1 has an invalid length. [ 619.111367][T28384] netlink: 'syz.3.10274': attribute type 4 has an invalid length. [ 619.136691][T28384] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10274'. [ 619.488471][T28392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10276'. [ 619.928586][T28397] syzkaller1: entered promiscuous mode [ 619.944133][T28397] syzkaller1: entered allmulticast mode [ 619.969889][T28401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10280'. [ 620.227690][T28406] syzkaller1: entered promiscuous mode [ 620.241606][T28406] syzkaller1: entered allmulticast mode [ 621.065962][T28411] scsi_nl_rcv_msg: discarding partial skb [ 621.095473][T28439] netlink: 'syz.2.10294': attribute type 1 has an invalid length. [ 621.197693][T28439] bond7: entered promiscuous mode [ 621.203393][T28439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.313414][T28442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.315209][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10296'. [ 621.356531][T28442] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 621.382000][T28442] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 621.408070][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10295'. [ 621.424589][T28442] bond7: (slave ip6gre1): making interface the new active one [ 621.449746][T28442] ip6gre1: entered promiscuous mode [ 621.478980][T28442] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 621.795947][T28454] syzkaller1: entered promiscuous mode [ 621.810006][T28454] syzkaller1: entered allmulticast mode [ 622.162520][T28472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10302'. [ 622.611112][T28487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10305'. [ 623.418655][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10314'. [ 623.543706][T28528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10316'. [ 624.599654][T28560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10326'. [ 624.880253][T28570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10328'. [ 625.213077][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10333'. [ 625.452341][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 625.459148][ C0] bridge0: topology change detected, propagating [ 625.984868][T28604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10339'. [ 626.083753][T28604] netlink: 'syz.3.10339': attribute type 1 has an invalid length. [ 627.127899][T28626] lo speed is unknown, defaulting to 1000 [ 627.366346][T28627] mpoa:mpoad_close: () going down [ 628.137762][T28659] lo speed is unknown, defaulting to 1000 [ 628.702892][ T10] ================================================================== [ 628.711034][ T10] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 628.718969][ T10] Read of size 8 at addr ffff8880593a8cc0 by task kworker/0:1/10 [ 628.727134][ T10] [ 628.729492][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 628.729511][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.729523][ T10] Workqueue: mld mld_ifc_work [ 628.729548][ T10] Call Trace: [ 628.729556][ T10] [ 628.729563][ T10] dump_stack_lvl+0xe8/0x150 [ 628.729588][ T10] print_report+0xba/0x230 [ 628.729607][ T10] ? sock_def_readable+0x1cb/0x550 [ 628.729624][ T10] kasan_report+0x117/0x150 [ 628.729642][ T10] ? sock_def_readable+0x1cb/0x550 [ 628.729661][ T10] sock_def_readable+0x1cb/0x550 [ 628.729678][ T10] ? sock_def_readable+0xae/0x550 [ 628.729696][ T10] ? send_to_lecd+0x26d/0x830 [ 628.729715][ T10] send_to_lecd+0x3e7/0x830 [ 628.729736][ T10] lec_start_xmit+0xe52/0x2890 [ 628.729760][ T10] dev_hard_start_xmit+0x2cd/0x830 [ 628.729781][ T10] sch_direct_xmit+0x251/0x4c0 [ 628.729803][ T10] ? __pfx_sch_direct_xmit+0x10/0x10 [ 628.729827][ T10] __dev_queue_xmit+0x180f/0x3950 [ 628.729847][ T10] ? __dev_queue_xmit+0x2b6/0x3950 [ 628.729868][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 628.729884][ T10] ? neigh_resolve_output+0x438/0x750 [ 628.729905][ T10] ? eth_header+0x11b/0x200 [ 628.729918][ T10] ? __asan_memcpy+0x40/0x70 [ 628.729948][ T10] ? ip6_output+0x126/0x550 [ 628.729967][ T10] ip6_output+0x340/0x550 [ 628.729987][ T10] ? __pfx_ip6_output+0x10/0x10 [ 628.730006][ T10] NF_HOOK+0x177/0x4f0 [ 628.730027][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 628.730046][ T10] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 628.730064][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 628.730085][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.730104][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 628.730125][ T10] ? icmp6_dst_alloc+0x3a6/0x440 [ 628.730147][ T10] mld_sendpack+0x8b4/0xe40 [ 628.730174][ T10] ? mld_sendpack+0x213/0xe40 [ 628.730193][ T10] ? __pfx_mld_sendpack+0x10/0x10 [ 628.730220][ T10] mld_ifc_work+0x835/0xe70 [ 628.730241][ T10] ? process_scheduled_works+0xa70/0x1860 [ 628.730262][ T10] process_scheduled_works+0xb5d/0x1860 [ 628.730295][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.730318][ T10] ? assign_work+0x3d5/0x5e0 [ 628.730339][ T10] worker_thread+0xa53/0xfc0 [ 628.730371][ T10] kthread+0x388/0x470 [ 628.730386][ T10] ? __pfx_worker_thread+0x10/0x10 [ 628.730406][ T10] ? __pfx_kthread+0x10/0x10 [ 628.730422][ T10] ret_from_fork+0x514/0xb70 [ 628.730451][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 628.730472][ T10] ? __switch_to+0xc79/0x1410 [ 628.730492][ T10] ? __pfx_kthread+0x10/0x10 [ 628.730507][ T10] ret_from_fork_asm+0x1a/0x30 [ 628.730536][ T10] [ 628.730542][ T10] [ 628.991512][ T10] Allocated by task 28607: [ 628.995939][ T10] kasan_save_track+0x3e/0x80 [ 629.000634][ T10] __kasan_slab_alloc+0x6c/0x80 [ 629.005514][ T10] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 629.011335][ T10] sock_alloc_inode+0x2c/0x190 [ 629.016101][ T10] alloc_inode+0x6a/0x1b0 [ 629.020435][ T10] __sock_create+0x12d/0x9d0 [ 629.025034][ T10] __sys_socket+0xd6/0x1b0 [ 629.029454][ T10] __x64_sys_socket+0x7a/0x90 [ 629.034135][ T10] do_syscall_64+0x15f/0xf80 [ 629.038731][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.044713][ T10] [ 629.047123][ T10] Freed by task 28627: [ 629.051633][ T10] kasan_save_track+0x3e/0x80 [ 629.056353][ T10] kasan_save_free_info+0x46/0x50 [ 629.061388][ T10] __kasan_slab_free+0x5c/0x80 [ 629.066163][ T10] kmem_cache_free+0x180/0x630 [ 629.070936][ T10] rcu_core+0x7cd/0x1070 [ 629.075189][ T10] handle_softirqs+0x22a/0x840 [ 629.079965][ T10] __irq_exit_rcu+0xca/0x220 [ 629.084563][ T10] irq_exit_rcu+0x9/0x30 [ 629.088814][ T10] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.094455][ T10] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.100442][ T10] [ 629.102767][ T10] Last potentially related work creation: [ 629.108568][ T10] kasan_save_stack+0x3e/0x60 [ 629.113253][ T10] kasan_record_aux_stack+0xbd/0xd0 [ 629.118577][ T10] call_rcu+0xee/0x890 [ 629.122675][ T10] evict+0x95b/0xb10 [ 629.126612][ T10] __dentry_kill+0x1a2/0x5e0 [ 629.131220][ T10] finish_dput+0xc9/0x480 [ 629.135589][ T10] __fput+0x691/0xa60 [ 629.139581][ T10] task_work_run+0x1d9/0x270 [ 629.144178][ T10] get_signal+0x11eb/0x1330 [ 629.148779][ T10] arch_do_signal_or_restart+0xbc/0x830 [ 629.154336][ T10] exit_to_user_mode_loop+0x86/0x480 [ 629.159633][ T10] do_syscall_64+0x33e/0xf80 [ 629.164237][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.170134][ T10] [ 629.172466][ T10] The buggy address belongs to the object at ffff8880593a8c00 [ 629.172466][ T10] which belongs to the cache sock_inode_cache of size 1408 [ 629.187380][ T10] The buggy address is located 192 bytes inside of [ 629.187380][ T10] freed 1408-byte region [ffff8880593a8c00, ffff8880593a9180) [ 629.205030][ T10] [ 629.207377][ T10] The buggy address belongs to the physical page: [ 629.220485][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880593aa400 pfn:0x593a8 [ 629.230745][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 629.239346][ T10] memcg:ffff8880593afe01 [ 629.243687][ T10] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 629.253022][ T10] page_type: f5(slab) [ 629.257026][ T10] raw: 00fff00000000240 ffff888140414a00 ffffea0001ddbc10 ffffea0001dd3a10 [ 629.265637][ T10] raw: ffff8880593aa400 000000080015000f 00000000f5000000 ffff8880593afe01 [ 629.274369][ T10] head: 00fff00000000240 ffff888140414a00 ffffea0001ddbc10 ffffea0001dd3a10 [ 629.283161][ T10] head: ffff8880593aa400 000000080015000f 00000000f5000000 ffff8880593afe01 [ 629.291970][ T10] head: 00fff00000000003 ffffea000164ea01 00000000ffffffff 00000000ffffffff [ 629.300882][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 629.309606][ T10] page dumped because: kasan: bad access detected [ 629.316215][ T10] page_owner tracks the page as allocated [ 629.322106][ T10] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (udevd), ts 94535267669, free_ts 30813481384 [ 629.344880][ T10] post_alloc_hook+0x231/0x280 [ 629.349764][ T10] get_page_from_freelist+0x24dc/0x2580 [ 629.355511][ T10] __alloc_frozen_pages_noprof+0x18d/0x380 [ 629.361382][ T10] allocate_slab+0x77/0x660 [ 629.365898][ T10] refill_objects+0x331/0x3c0 [ 629.370597][ T10] __pcs_replace_empty_main+0x2e6/0x730 [ 629.376269][ T10] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 629.382293][ T10] sock_alloc_inode+0x2c/0x190 [ 629.387118][ T10] alloc_inode+0x6a/0x1b0 [ 629.391495][ T10] __sock_create+0x12d/0x9d0 [ 629.396121][ T10] __sys_socket+0xd6/0x1b0 [ 629.400565][ T10] __x64_sys_socket+0x7a/0x90 [ 629.405295][ T10] do_syscall_64+0x15f/0xf80 [ 629.409907][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.416076][ T10] page last free pid 1 tgid 1 stack trace: [ 629.421893][ T10] __free_frozen_pages+0xc2b/0xdb0 [ 629.427018][ T10] free_contig_range+0xbb/0x170 [ 629.431879][ T10] destroy_args+0x4e5/0x570 [ 629.436396][ T10] debug_vm_pgtable+0x3f8/0x410 [ 629.441349][ T10] do_one_initcall+0x250/0x870 [ 629.446225][ T10] do_initcall_level+0x104/0x190 [ 629.451270][ T10] do_initcalls+0x59/0xa0 [ 629.455607][ T10] kernel_init_freeable+0x2a6/0x3e0 [ 629.460859][ T10] kernel_init+0x1d/0x1d0 [ 629.465220][ T10] ret_from_fork+0x514/0xb70 [ 629.469920][ T10] ret_from_fork_asm+0x1a/0x30 [ 629.475234][ T10] [ 629.477563][ T10] Memory state around the buggy address: [ 629.483204][ T10] ffff8880593a8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 629.491275][ T10] ffff8880593a8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.499351][ T10] >ffff8880593a8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.507412][ T10] ^ [ 629.513656][ T10] ffff8880593a8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.521807][ T10] ffff8880593a8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.529865][ T10] ================================================================== [ 629.537926][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 629.545123][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 629.554350][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 629.564421][ T10] Workqueue: mld mld_ifc_work [ 629.569125][ T10] Call Trace: [ 629.572405][ T10] [ 629.575344][ T10] vpanic+0x56c/0xa60 [ 629.579344][ T10] ? __pfx_vpanic+0x10/0x10 [ 629.583867][ T10] panic+0xc5/0xd0 [ 629.587612][ T10] ? __pfx_panic+0x10/0x10 [ 629.592137][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.597255][ T10] ? rcu_is_watching+0x15/0xb0 [ 629.602034][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.607162][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.612278][ T10] check_panic_on_warn+0x89/0xb0 [ 629.617226][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.622368][ T10] end_report+0x73/0x170 [ 629.626624][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.631770][ T10] kasan_report+0x128/0x150 [ 629.636550][ T10] ? sock_def_readable+0x1cb/0x550 [ 629.641681][ T10] sock_def_readable+0x1cb/0x550 [ 629.646804][ T10] ? sock_def_readable+0xae/0x550 [ 629.651834][ T10] ? send_to_lecd+0x26d/0x830 [ 629.656613][ T10] send_to_lecd+0x3e7/0x830 [ 629.661135][ T10] lec_start_xmit+0xe52/0x2890 [ 629.665933][ T10] dev_hard_start_xmit+0x2cd/0x830 [ 629.671056][ T10] sch_direct_xmit+0x251/0x4c0 [ 629.675833][ T10] ? __pfx_sch_direct_xmit+0x10/0x10 [ 629.681131][ T10] __dev_queue_xmit+0x180f/0x3950 [ 629.686164][ T10] ? __dev_queue_xmit+0x2b6/0x3950 [ 629.691334][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 629.696744][ T10] ? neigh_resolve_output+0x438/0x750 [ 629.702140][ T10] ? eth_header+0x11b/0x200 [ 629.706659][ T10] ? __asan_memcpy+0x40/0x70 [ 629.711462][ T10] ? ip6_output+0x126/0x550 [ 629.716070][ T10] ip6_output+0x340/0x550 [ 629.720412][ T10] ? __pfx_ip6_output+0x10/0x10 [ 629.725271][ T10] NF_HOOK+0x177/0x4f0 [ 629.729556][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 629.734162][ T10] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 629.739974][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 629.745280][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 629.750496][ T10] ? __local_bh_enable_ip+0xd0/0x130 [ 629.755800][ T10] ? icmp6_dst_alloc+0x3a6/0x440 [ 629.760849][ T10] mld_sendpack+0x8b4/0xe40 [ 629.765368][ T10] ? mld_sendpack+0x213/0xe40 [ 629.770170][ T10] ? __pfx_mld_sendpack+0x10/0x10 [ 629.775211][ T10] mld_ifc_work+0x835/0xe70 [ 629.779746][ T10] ? process_scheduled_works+0xa70/0x1860 [ 629.785483][ T10] process_scheduled_works+0xb5d/0x1860 [ 629.791052][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.797045][ T10] ? assign_work+0x3d5/0x5e0 [ 629.801646][ T10] worker_thread+0xa53/0xfc0 [ 629.806262][ T10] kthread+0x388/0x470 [ 629.810347][ T10] ? __pfx_worker_thread+0x10/0x10 [ 629.815475][ T10] ? __pfx_kthread+0x10/0x10 [ 629.820071][ T10] ret_from_fork+0x514/0xb70 [ 629.825037][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 629.830163][ T10] ? __switch_to+0xc79/0x1410 [ 629.834854][ T10] ? __pfx_kthread+0x10/0x10 [ 629.839453][ T10] ret_from_fork_asm+0x1a/0x30 [ 629.844242][ T10] [ 629.847809][ T10] Kernel Offset: disabled [ 629.852133][ T10] Rebooting in 86400 seconds..