last executing test programs: 2.40134198s ago: executing program 0 (id=10758): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 2.344850707s ago: executing program 2 (id=10759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 2.17394651s ago: executing program 1 (id=10761): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2.092281743s ago: executing program 0 (id=10763): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 1.921451225s ago: executing program 2 (id=10766): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.794811018s ago: executing program 4 (id=10768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) nanosleep(&(0x7f0000000080)={0x77359400}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20008040) 1.727673108s ago: executing program 3 (id=10769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000580)=""/4065, 0xfe1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 1.629966454s ago: executing program 2 (id=10770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.593715731s ago: executing program 2 (id=10771): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.503739566s ago: executing program 3 (id=10772): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) 1.481565601s ago: executing program 2 (id=10773): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.244176312s ago: executing program 1 (id=10774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.148394264s ago: executing program 0 (id=10775): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) 1.139237951s ago: executing program 1 (id=10776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) close(0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x9, 0x8, 0xfff, 0x2, 0xffffffff, 0x40000b93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x1, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0x6, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x4, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0x8}, {0x1, 0x71, 0x1, 0xcf55, 0x6, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x4, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x7, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0xfff, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae78a, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x5}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x200, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x100, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x20000000, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x82, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x4, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0x9, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffdfc}, {0x7, 0x6, 0x3906, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x40, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf620, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x6, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xe, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0x7fffffff, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x20000004}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x7}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x400008, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7d, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x5d7c}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x9, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.04877877s ago: executing program 0 (id=10777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 976.036455ms ago: executing program 1 (id=10778): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 862.379946ms ago: executing program 4 (id=10779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 757.712046ms ago: executing program 4 (id=10780): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(0x3) 703.158586ms ago: executing program 1 (id=10781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000008) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x240000c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x2400c081) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40000000) 652.725978ms ago: executing program 0 (id=10782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r3, &(0x7f0000000200)=""/196, 0xc4) 606.646469ms ago: executing program 4 (id=10783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 585.134689ms ago: executing program 3 (id=10784): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 555.249841ms ago: executing program 1 (id=10785): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 554.400993ms ago: executing program 2 (id=10786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f0000000740)) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="c62465d7fb8d"}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 460.596413ms ago: executing program 0 (id=10787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 408.953005ms ago: executing program 3 (id=10788): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 316.920171ms ago: executing program 4 (id=10789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 220.706319ms ago: executing program 3 (id=10790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0x20044002) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 2.889245ms ago: executing program 4 (id=10791): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 0s ago: executing program 3 (id=10792): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x1, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200), 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4925'. [ 245.840075][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4924'. [ 245.896747][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 246.069377][T16286] bond_slave_1: Device is already in use. [ 246.172875][T16293] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4935'. [ 246.349384][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4940'. [ 246.530320][T16318] netlink: 'syz.3.4945': attribute type 1 has an invalid length. [ 246.567791][T16318] netlink: 'syz.3.4945': attribute type 3 has an invalid length. [ 246.573163][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4946'. [ 246.586649][T16318] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4945'. [ 246.596491][T16318] NCSI netlink: No device for ifindex 813332851 [ 247.327980][T16371] netlink: 'syz.4.4971': attribute type 1 has an invalid length. [ 247.339625][T16371] netlink: 'syz.4.4971': attribute type 2 has an invalid length. [ 247.355233][T16371] netlink: 'syz.4.4971': attribute type 1 has an invalid length. [ 247.364109][T16371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4971'. [ 248.024672][T16422] netlink: 'syz.3.4994': attribute type 3 has an invalid length. [ 248.344754][T16439] lo: left promiscuous mode [ 248.487145][T16439] bridge0: port 3(gretap0) entered disabled state [ 248.627499][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.635881][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.670599][T16439] bond0: left promiscuous mode [ 248.676480][T16439] bond_slave_0: left promiscuous mode [ 248.682048][T16439] bond_slave_1: left promiscuous mode [ 248.694044][T16439] bond0: left allmulticast mode [ 248.698930][T16439] bond_slave_0: left allmulticast mode [ 248.704973][T16439] bond_slave_1: left allmulticast mode [ 248.836233][T16439] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.003795][T16462] vlan1: entered allmulticast mode [ 249.009286][T16462] veth0_vlan: entered allmulticast mode [ 249.033952][T16465] __nla_validate_parse: 2 callbacks suppressed [ 249.033974][T16465] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5016'. [ 249.287594][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'. [ 249.299799][T16484] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 249.320860][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5026'. [ 249.337871][T16486] netlink: 'syz.2.5026': attribute type 30 has an invalid length. [ 249.384557][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.426184][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.446511][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.460953][T16491] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5028'. [ 249.472750][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.936829][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 249.971989][T16529] tipc: Invalid UDP bearer configuration [ 249.972049][T16529] tipc: Enabling of bearer rejected, failed to enable media [ 250.313271][T16560] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5057'. [ 250.881977][T16602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.069009][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5085'. [ 251.465505][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5097'. [ 251.495630][T16642] netlink: 'syz.1.5098': attribute type 10 has an invalid length. [ 251.520858][T16642] team0: Port device vxcan1 added [ 252.212372][T16689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5120'. [ 252.599529][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5131'. [ 253.115884][T16746] netlink: 'syz.1.5147': attribute type 3 has an invalid length. [ 253.141421][T16746] netlink: 'syz.1.5147': attribute type 1 has an invalid length. [ 253.442470][T16769] sctp: [Deprecated]: syz.0.5160 (pid 16769) Use of int in max_burst socket option. [ 253.442470][T16769] Use struct sctp_assoc_value instead [ 253.650475][T16785] netlink: 'syz.2.5166': attribute type 8 has an invalid length. [ 253.670547][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.937949][T16803] netlink: 'syz.3.5177': attribute type 11 has an invalid length. [ 253.957973][T16803] netlink: 'syz.3.5177': attribute type 11 has an invalid length. [ 254.063522][T16812] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 254.188631][ T29] audit: type=1107 audit(1775865284.173:3): pid=16821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 254.378132][T16836] team0: Device gtp0 is up. Set it down before adding it as a team port [ 254.688679][T10617] IPVS: starting estimator thread 0... [ 254.702067][T16861] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 254.792284][T16864] IPVS: using max 27 ests per chain, 64800 per kthread [ 254.800503][T16870] nbd: must specify a device to reconfigure [ 255.251000][T16900] netlink: 'syz.1.5222': attribute type 3 has an invalid length. [ 255.298605][T16902] : entered promiscuous mode [ 255.318387][T16905] __nla_validate_parse: 7 callbacks suppressed [ 255.318406][T16905] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5224'. [ 255.428355][T16912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5227'. [ 255.817756][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824969][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.109255][T16964] netlink: 'syz.2.5252': attribute type 29 has an invalid length. [ 256.131154][T16964] netlink: 'syz.2.5252': attribute type 29 has an invalid length. [ 256.238304][T16975] netlink: 'syz.2.5258': attribute type 1 has an invalid length. [ 256.639887][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5272'. [ 257.742813][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5315'. [ 257.774866][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'. [ 257.914881][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'. [ 258.349944][T17139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5337'. [ 258.440966][T17141] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 258.552294][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5341'. [ 258.578518][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5343'. [ 259.398544][T17203] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5368'. [ 259.751911][T17230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.947820][T17245] netlink: 'syz.4.5388': attribute type 1 has an invalid length. [ 260.508768][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5408'. [ 261.786809][T17359] netlink: 'syz.2.5439': attribute type 2 has an invalid length. [ 262.712608][T17432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.836825][T17443] netlink: 'syz.4.5480': attribute type 3 has an invalid length. [ 263.080684][T17458] netlink: 'syz.1.5486': attribute type 18 has an invalid length. [ 263.289898][T17473] netlink: 'syz.4.5494': attribute type 142 has an invalid length. [ 263.931989][T17521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5514'. [ 264.066042][T17533] xt_l2tp: missing protocol rule (udp|l2tpip) [ 264.514644][T17568] netlink: 'syz.3.5536': attribute type 1 has an invalid length. [ 264.605710][T17576] pimreg3: entered allmulticast mode [ 264.667378][T17578] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 264.698438][T17578] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5543'. [ 264.728640][T17578] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 264.758740][T17578] netlink: 'syz.4.5543': attribute type 8 has an invalid length. [ 264.782344][T17578] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5543'. [ 264.784304][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'. [ 265.043444][T17603] xt_hashlimit: size too large, truncated to 1048576 [ 265.499195][T17635] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5568'. [ 265.532843][T17635] nbd: illegal input index -8454144 [ 265.691600][T17647] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 266.195155][T17669] Bluetooth: MGMT ver 1.23 [ 266.617251][T17687] netlink: 'syz.4.5590': attribute type 1 has an invalid length. [ 266.694420][T17687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.156924][T17728] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5611'. [ 267.195219][T17728] netlink: 'syz.2.5611': attribute type 2 has an invalid length. [ 267.372512][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5617'. [ 267.400533][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5617'. [ 267.841823][T17781] tipc: Enabling of bearer rejected, media not registered [ 268.206910][T17810] xt_HMARK: spi-set and port-set can't be combined [ 268.240639][T17812] xt_hashlimit: size too large, truncated to 1048576 [ 268.296090][T17816] netlink: 'syz.0.5649': attribute type 32 has an invalid length. [ 268.333637][T17816] netlink: 776 bytes leftover after parsing attributes in process `syz.0.5649'. [ 268.757969][T17846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5662'. [ 268.941810][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5669'. [ 268.968967][T17862] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5670'. [ 268.988229][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5669'. [ 269.009597][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5673'. [ 269.234925][T17878] netlink: 'syz.4.5678': attribute type 10 has an invalid length. [ 270.025375][T17934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.387570][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5751'. [ 271.423334][T18030] vlan2: entered promiscuous mode [ 271.433170][T18030] gretap0: entered promiscuous mode [ 271.795005][T18060] netlink: 'syz.2.5765': attribute type 5 has an invalid length. [ 272.176319][T18089] nbd: couldn't find device at index 65536 [ 272.227169][T18093] pim6reg: entered allmulticast mode [ 272.242000][T18094] __nla_validate_parse: 4 callbacks suppressed [ 272.242024][T18094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5782'. [ 272.433418][T18108] lo: entered allmulticast mode [ 272.450637][T18108] lo: left allmulticast mode [ 272.469698][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5790'. [ 272.523652][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'. [ 272.533742][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'. [ 272.692604][T18126] pim6reg: left allmulticast mode [ 272.976708][T18147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5809'. [ 273.101151][T18157] netlink: 'syz.2.5813': attribute type 10 has an invalid length. [ 273.208735][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5817'. [ 273.394872][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5822'. [ 273.410354][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5822'. [ 273.986641][T18221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5844'. [ 274.099500][T18228] tipc: Enabling not permitted [ 274.111221][T18228] tipc: Enabling of bearer rejected, failed to enable media [ 274.123537][T18232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5848'. [ 274.243556][T18236] netlink: 'syz.2.5850': attribute type 4 has an invalid length. [ 274.409102][T18249] atomic_op ffff8880212f8198 conn xmit_atomic 0000000000000000 [ 274.991242][T18289] block nbd2: not configured, cannot reconfigure [ 276.827068][T18398] netlink: 'syz.0.5921': attribute type 83 has an invalid length. [ 277.035842][ T8322] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.044896][ T8322] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.052452][T18412] netlink: 'syz.1.5928': attribute type 5 has an invalid length. [ 277.073411][ T8322] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.085965][T18412] netlink: 'syz.1.5928': attribute type 6 has an invalid length. [ 277.095058][ T8322] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.327266][T18429] netlink: 'syz.0.5937': attribute type 1 has an invalid length. [ 277.910017][T18477] __nla_validate_parse: 10 callbacks suppressed [ 277.910039][T18477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5959'. [ 278.626517][T18532] netlink: 'syz.4.5987': attribute type 32 has an invalid length. [ 278.636529][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5987'. [ 278.689368][T18532] bond3: Setting coupled_control to off (0) [ 280.033134][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6035'. [ 280.379991][T18658] pimreg: entered allmulticast mode [ 280.507585][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6055'. [ 280.560491][T18674] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 280.584739][T18674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.614965][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'. [ 281.337930][T18735] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6086'. [ 281.344817][T18738] Bluetooth: MGMT ver 1.23 [ 281.658800][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6098'. [ 281.705313][T18761] macsec1: entered promiscuous mode [ 281.710963][T18761] bridge0: entered promiscuous mode [ 281.724221][T18761] macsec1: entered allmulticast mode [ 281.730455][T18761] bridge0: entered allmulticast mode [ 281.740431][T18761] bridge0: port 4(macsec1) entered blocking state [ 281.749584][T18761] bridge0: port 4(macsec1) entered disabled state [ 281.815655][T18761] bridge0: left allmulticast mode [ 281.821232][T18761] bridge0: left promiscuous mode [ 282.127386][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6113'. [ 282.233947][T18800] IPVS: length: 8 != 1152 [ 282.678728][T18837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6136'. [ 282.690631][T18837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6136'. [ 283.219561][T18879] netlink: 'syz.1.6156': attribute type 4 has an invalid length. [ 283.251172][T18879] __nla_validate_parse: 1 callbacks suppressed [ 283.251191][T18879] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6156'. [ 283.450492][T18894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6163'. [ 284.004114][T18932] IPVS: Error connecting to the multicast addr [ 284.146992][T18947] sock: sock_timestamping_bind_phc: sock not bind to device [ 284.618476][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6204'. [ 285.393319][T19027] tipc: Enabling of bearer rejected, failed to enable media [ 285.767410][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.123911][T19082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.171773][T19086] netlink: 'syz.3.6255': attribute type 1 has an invalid length. [ 286.184654][T19086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.303840][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6261'. [ 286.410832][T10647] IPVS: starting estimator thread 0... [ 286.515854][T19106] IPVS: using max 30 ests per chain, 72000 per kthread [ 286.657653][ T5832] Bluetooth: hci4: link tx timeout [ 286.672643][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.233674][T19156] veth3: entered allmulticast mode [ 287.425718][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6297'. [ 287.665744][T19193] netlink: 'syz.1.6307': attribute type 2 has an invalid length. [ 287.691372][T19193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6307'. [ 288.182819][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6322'. [ 288.317199][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6328'. [ 288.356385][T19233] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6328'. [ 288.381584][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'. [ 288.683242][T19260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6338'. [ 288.692743][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 288.715833][T19260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6338'. [ 288.819411][T19270] netlink: 'syz.3.6344': attribute type 2 has an invalid length. [ 288.882775][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6343'. [ 289.106126][T19286] xt_hashlimit: size too large, truncated to 1048576 [ 289.228347][T19293] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.508181][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6361'. [ 290.274035][T19369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6390'. [ 290.571683][T19392] xt_HMARK: proto mask must be zero with L3 mode [ 290.616504][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6404'. [ 290.738554][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6407'. [ 290.826158][T19414] netlink: 'syz.3.6411': attribute type 23 has an invalid length. [ 290.954108][T19423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.572626][T19470] netlink: 'syz.3.6439': attribute type 3 has an invalid length. [ 291.781788][T19483] netlink: 'syz.4.6445': attribute type 62 has an invalid length. [ 292.319259][T19520] netlink: 'syz.1.6463': attribute type 1 has an invalid length. [ 292.415840][T19530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.792896][T19554] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 292.826966][T19559] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 294.033650][T19638] __nla_validate_parse: 9 callbacks suppressed [ 294.033672][T19638] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6522'. [ 294.218515][T19646] sock: sock_set_timeout: `syz.3.6525' (pid 19646) tries to set negative timeout [ 294.569155][T19675] tipc: Enabling of bearer rejected, media not registered [ 294.574908][T19673] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 294.605966][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6542'. [ 294.765677][T19690] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6547'. [ 294.888069][T19700] xt_l2tp: v2 sid > 0xffff: 1114112 [ 294.953028][T19704] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.6554'. [ 294.991365][T19704] openvswitch: netlink: Message has 6 unknown bytes. [ 295.013651][T19708] netlink: 'syz.4.6557': attribute type 2 has an invalid length. [ 295.270076][T19726] tipc: Started in network mode [ 295.293935][T19726] tipc: Node identity b64558da2629, cluster identity 5 [ 295.321925][T19726] tipc: Enabled bearer , priority 11 [ 295.590728][T19752] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6578'. [ 295.893355][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6588'. [ 295.991838][T19781] netlink: 'syz.4.6592': attribute type 11 has an invalid length. [ 296.008474][T19781] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6592'. [ 296.222052][T19801] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 296.263278][T19803] netlink: 'syz.4.6603': attribute type 3 has an invalid length. [ 296.394631][T19814] netlink: 'syz.0.6608': attribute type 5 has an invalid length. [ 296.438808][ T5888] tipc: Node number set to 2423019738 [ 296.621574][T19832] netlink: 'syz.1.6615': attribute type 4 has an invalid length. [ 296.634202][T19832] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6615'. [ 296.764115][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 297.039268][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6631'. [ 297.065612][T19866] bridge0: port 2(veth0_to_bridge) entered blocking state [ 297.073868][T19866] bridge0: port 2(veth0_to_bridge) entered disabled state [ 297.081634][T19866] veth0_to_bridge: entered allmulticast mode [ 297.091513][T19866] veth0_to_bridge: entered promiscuous mode [ 297.256798][T19876] wireguard0: entered promiscuous mode [ 297.276812][T19876] wireguard0: entered allmulticast mode [ 297.289295][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6639'. [ 297.310072][T19876] team0: Device wireguard0 is of different type [ 297.512044][T19894] netlink: 'syz.4.6645': attribute type 1 has an invalid length. [ 297.918624][T10647] hid-generic 0005:0B57:0006.0001: item fetching failed at offset 0/1 [ 297.952972][T10647] hid-generic 0005:0B57:0006.0001: probe with driver hid-generic failed with error -22 [ 298.013010][T19935] netlink: 'syz.0.6663': attribute type 9 has an invalid length. [ 298.385197][T19960] netlink: 'syz.1.6677': attribute type 8 has an invalid length. [ 298.408029][T19960] sch_fq: defrate 0 ignored. [ 298.676844][T19987] netlink: 'syz.1.6690': attribute type 4 has an invalid length. [ 298.846873][T19998] sctp: [Deprecated]: syz.1.6696 (pid 19998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.846873][T19998] Use struct sctp_sack_info instead [ 298.892514][T20003] macvtap1: entered allmulticast mode [ 298.902326][T20003] veth0_macvtap: entered allmulticast mode [ 299.127347][T20020] __nla_validate_parse: 9 callbacks suppressed [ 299.127367][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6706'. [ 299.233933][T20028] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6709'. [ 299.477408][T20046] xt_hashlimit: size too large, truncated to 1048576 [ 299.531687][T20051] : renamed from vxcan1 (while UP) [ 299.714022][T20056] sctp: [Deprecated]: syz.2.6721 (pid 20056) Use of int in maxseg socket option. [ 299.714022][T20056] Use struct sctp_assoc_value instead [ 300.137458][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6732'. [ 300.158880][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6732'. [ 300.509289][T20115] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6750'. [ 300.676348][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6753'. [ 300.760806][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6755'. [ 301.031143][T20152] netem: change failed [ 301.401724][T20176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6779'. [ 301.705050][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6792'. [ 301.798433][T20210] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6796'. [ 302.199597][T20246] netlink: 'syz.2.6811': attribute type 2 has an invalid length. [ 302.477269][T20265] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 303.260838][T20318] netlink: 'syz.3.6845': attribute type 16 has an invalid length. [ 303.276143][T20318] netlink: 'syz.3.6845': attribute type 17 has an invalid length. [ 303.286657][T20318] lo: left promiscuous mode [ 303.294718][T20318] tunl0: left promiscuous mode [ 303.315987][T20318] gre0: left promiscuous mode [ 303.363278][T20318] gretap0: left promiscuous mode [ 303.381138][T20318] erspan0: left allmulticast mode [ 303.414807][T20318] ip_vti0: left promiscuous mode [ 303.441853][T20318] 8021q: adding VLAN 0 to HW filter on device .` [ 303.454876][T20318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.186961][T20372] tipc: New replicast peer: 255.255.255.255 [ 304.206567][T20372] tipc: Enabled bearer , priority 10 [ 304.227689][T20372] __nla_validate_parse: 5 callbacks suppressed [ 304.227710][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6869'. [ 305.932308][T20491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6923'. [ 306.030848][T20493] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 306.148821][T20507] netlink: 'syz.3.6928': attribute type 5 has an invalid length. [ 306.263862][T20513] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.6932'. [ 306.303504][T20517] veth0: entered promiscuous mode [ 306.331095][T20517] veth0: left promiscuous mode [ 307.706176][T20590] erspan0: entered promiscuous mode [ 307.802042][T20594] netlink: 'syz.1.6968': attribute type 4 has an invalid length. [ 308.053032][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6975'. [ 308.066142][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6975'. [ 308.076476][T20611] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6975'. [ 308.087356][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6975'. [ 308.096976][T20611] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6975'. [ 308.255021][T20619] ip6erspan0: entered allmulticast mode [ 308.587216][T20634] bond4 (unregistering): Released all slaves [ 309.204318][T20687] sctp: [Deprecated]: syz.2.7010 (pid 20687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.204318][T20687] Use struct sctp_sack_info instead [ 309.532368][T20709] netlink: 'syz.0.7018': attribute type 1 has an invalid length. [ 309.550986][T20709] netlink: 'syz.0.7018': attribute type 2 has an invalid length. [ 309.559667][T20709] netlink: 'syz.0.7018': attribute type 1 has an invalid length. [ 309.576573][T20709] netlink: 'syz.0.7018': attribute type 3 has an invalid length. [ 309.591896][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7018'. [ 309.990353][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7037'. [ 310.012545][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7037'. [ 310.018313][T20751] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7038'. [ 310.030231][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7037'. [ 310.420663][T20775] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7049'. [ 310.725302][T20789] blkio.reset_stats is deprecated [ 311.200467][T20824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7072'. [ 311.375957][T20836] netlink: 'syz.0.7078': attribute type 3 has an invalid length. [ 311.384264][T20836] netlink: 'syz.0.7078': attribute type 3 has an invalid length. [ 311.399525][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7078'. [ 311.635861][T20854] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7087'. [ 312.015471][T20880] veth0: entered promiscuous mode [ 312.021307][T20880] veth0: left promiscuous mode [ 312.037742][T20883] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.7100'. [ 312.071631][T20883] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 312.154556][T20894] netlink: 'syz.2.7107': attribute type 2 has an invalid length. [ 312.391756][T20910] xt_hashlimit: size too large, truncated to 1048576 [ 312.420250][T20914] netlink: 'syz.0.7116': attribute type 29 has an invalid length. [ 312.464706][T20914] netlink: 'syz.0.7116': attribute type 29 has an invalid length. [ 312.539069][T20917] veth0_to_bridge (unregistering): left allmulticast mode [ 312.556285][T20917] veth0_to_bridge (unregistering): left promiscuous mode [ 312.564648][T20917] bridge0: port 2(veth0_to_bridge) entered disabled state [ 312.581864][T20917] bridge_slave_0 (unregistering): left allmulticast mode [ 312.590418][T20917] bridge_slave_0 (unregistering): left promiscuous mode [ 312.599732][T20917] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.697942][T20922] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 312.745380][T10647] wg1 speed is unknown, defaulting to 1000 [ 312.793655][T20930] netem: incorrect gi model size [ 312.806804][T20930] netem: change failed [ 313.187224][T20955] netlink: set zone limit has 4 unknown bytes [ 313.209552][T20962] netlink: zone id is out of range [ 313.225760][T20962] netlink: zone id is out of range [ 313.819389][T21005] block nbd0: not configured, cannot reconfigure [ 314.084368][T21022] validate_nla: 5 callbacks suppressed [ 314.084388][T21022] netlink: 'syz.2.7169': attribute type 10 has an invalid length. [ 314.461584][T21050] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 314.778655][T21074] tipc: Started in network mode [ 314.786658][T21074] tipc: Node identity ac14140f, cluster identity 4711 [ 314.801004][T21074] tipc: New replicast peer: 255.255.255.255 [ 314.809961][T21074] tipc: Enabled bearer , priority 10 [ 315.150253][T21103] netem: incorrect ge model size [ 315.166643][T21103] netem: change failed [ 315.640832][T21134] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.685833][T21134] team0: Cannot enslave team device to itself [ 315.933990][T10647] tipc: Node number set to 2886997007 [ 316.060172][T21164] __nla_validate_parse: 7 callbacks suppressed [ 316.060193][T21164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7236'. [ 316.834326][T21207] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 316.846061][T21209] h: entered promiscuous mode [ 317.258712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.265843][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.894797][T21290] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 317.904857][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7297'. [ 319.058111][T21380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7334'. [ 319.083193][ T8320] tipc: Subscription rejected, illegal request [ 319.139350][T21385] netlink: 'syz.4.7337': attribute type 1 has an invalid length. [ 319.149414][T21387] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7335'. [ 319.173430][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7336'. [ 319.174285][T21385] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7337'. [ 319.192266][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7336'. [ 319.227316][T21385] netlink: 'syz.4.7337': attribute type 1 has an invalid length. [ 319.236291][T21385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7337'. [ 319.667159][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7353'. [ 319.676587][T21423] bridge_slave_1: left allmulticast mode [ 319.692897][T21423] bridge_slave_1: left promiscuous mode [ 319.698890][T21423] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.721033][T21423] bridge_slave_0: left promiscuous mode [ 319.736132][T21423] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.778097][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7358'. [ 321.083977][T21513] __nla_validate_parse: 1 callbacks suppressed [ 321.083998][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7397'. [ 321.714789][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7412'. [ 322.036008][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7425'. [ 322.204224][T21582] netlink: 'syz.0.7430': attribute type 11 has an invalid length. [ 322.315940][T21592] veth0_to_bridge: entered promiscuous mode [ 322.327715][T21591] veth0_to_bridge: left promiscuous mode [ 322.823605][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7453'. [ 323.286514][T21663] netlink: 'syz.0.7470': attribute type 1 has an invalid length. [ 323.322416][T21663] netlink: 'syz.0.7470': attribute type 2 has an invalid length. [ 323.330753][T21663] netlink: 'syz.0.7470': attribute type 1 has an invalid length. [ 323.915567][T21704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7491'. [ 324.322263][T21731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7500'. [ 324.847881][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7522'. [ 325.124786][T21792] tipc: Started in network mode [ 325.129925][T21792] tipc: Node identity ac14140f, cluster identity 4711 [ 325.140200][T21792] tipc: New replicast peer: 172.20.20.187 [ 325.155520][T21792] tipc: Enabled bearer , priority 10 [ 325.224073][T21798] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.545139][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7543'. [ 325.564734][T21810] syz.3.7537 (21810) used greatest stack depth: 17472 bytes left [ 326.009099][T21849] netlink: 'syz.0.7557': attribute type 30 has an invalid length. [ 326.282274][ T5910] tipc: Node number set to 2886997007 [ 326.830188][T21911] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7587'. [ 326.865659][T21911] netem: invalid attributes len -24 [ 326.877435][T21911] netem: change failed [ 327.088733][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7596'. [ 327.204897][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7601'. [ 327.270749][T21941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7602'. [ 327.865486][T21983] block nbd0: not configured, cannot reconfigure [ 328.188698][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7629'. [ 328.713298][T22045] netlink: 'syz.4.7650': attribute type 83 has an invalid length. [ 328.809630][T22047] netlink: 'syz.1.7654': attribute type 21 has an invalid length. [ 328.818188][T22047] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7654'. [ 328.854815][T22053] block nbd0: not configured, cannot reconfigure [ 329.002051][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7660'. [ 329.015403][T22063] netlink: 'syz.2.7658': attribute type 2 has an invalid length. [ 329.050805][T22066] vlan2: entered allmulticast mode [ 329.068697][T22066] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 329.100424][T22071] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7662'. [ 329.385504][T22090] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7672'. [ 329.819799][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7689'. [ 330.302794][T22161] syz.4.7705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 330.360443][T22161] CPU: 0 UID: 0 PID: 22161 Comm: syz.4.7705 Not tainted syzkaller #0 PREEMPT(full) [ 330.360473][T22161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 330.360496][T22161] Call Trace: [ 330.360505][T22161] [ 330.360515][T22161] dump_stack_lvl+0xe8/0x150 [ 330.360551][T22161] warn_alloc+0x249/0x340 [ 330.360578][T22161] ? stack_trace_save+0xa9/0x100 [ 330.360604][T22161] ? __pfx_warn_alloc+0x10/0x10 [ 330.360636][T22161] ? kasan_save_track+0x4f/0x80 [ 330.360658][T22161] ? kasan_save_track+0x3e/0x80 [ 330.360678][T22161] ? __kasan_kmalloc+0x93/0xb0 [ 330.360700][T22161] ? __kmalloc_cache_noprof+0x31c/0x660 [ 330.360722][T22161] ? xskq_create+0x56/0x170 [ 330.360746][T22161] ? xsk_setsockopt+0x54c/0x990 [ 330.360768][T22161] ? do_sock_setsockopt+0x17c/0x1b0 [ 330.360793][T22161] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 330.360818][T22161] ? do_syscall_64+0x14d/0xf80 [ 330.360851][T22161] __vmalloc_node_range_noprof+0x132/0x1730 [ 330.360908][T22161] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 330.360940][T22161] ? __kasan_kmalloc+0x93/0xb0 [ 330.360971][T22161] vmalloc_user_noprof+0xad/0xe0 [ 330.360994][T22161] ? xskq_create+0xbf/0x170 [ 330.361020][T22161] xskq_create+0xbf/0x170 [ 330.361048][T22161] xsk_init_queue+0x8a/0xe0 [ 330.361076][T22161] xsk_setsockopt+0x54c/0x990 [ 330.361103][T22161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 330.361127][T22161] ? __pfx_aa_sk_perm+0x10/0x10 [ 330.361168][T22161] ? aa_sock_opt_perm+0xff/0x1a0 [ 330.361192][T22161] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 330.361217][T22161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 330.361241][T22161] do_sock_setsockopt+0x17c/0x1b0 [ 330.361267][T22161] __x64_sys_setsockopt+0x13d/0x1b0 [ 330.361297][T22161] do_syscall_64+0x14d/0xf80 [ 330.361323][T22161] ? trace_irq_disable+0x3b/0x150 [ 330.361340][T22161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.361362][T22161] ? clear_bhb_loop+0x40/0x90 [ 330.361387][T22161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.361407][T22161] RIP: 0033:0x7fd273f9c819 [ 330.361426][T22161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.361449][T22161] RSP: 002b:00007fd274ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.361472][T22161] RAX: ffffffffffffffda RBX: 00007fd274215fa0 RCX: 00007fd273f9c819 [ 330.361488][T22161] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 330.361501][T22161] RBP: 00007fd274032c91 R08: 0000000000000004 R09: 0000000000000000 [ 330.361514][T22161] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.361528][T22161] R13: 00007fd274216038 R14: 00007fd274215fa0 R15: 00007ffc2f2b8718 [ 330.361561][T22161] [ 330.361623][T22161] Mem-Info: [ 330.673538][T22161] active_anon:7066 inactive_anon:0 isolated_anon:0 [ 330.673538][T22161] active_file:3204 inactive_file:40034 isolated_file:0 [ 330.673538][T22161] unevictable:768 dirty:238 writeback:0 [ 330.673538][T22161] slab_reclaimable:12304 slab_unreclaimable:100703 [ 330.673538][T22161] mapped:29069 shmem:1362 pagetables:1146 [ 330.673538][T22161] sec_pagetables:0 bounce:0 [ 330.673538][T22161] kernel_misc_reclaimable:0 [ 330.673538][T22161] free:1315132 free_pcp:10605 free_cma:0 [ 330.826675][T22161] Node 0 active_anon:28964kB inactive_anon:0kB active_file:12816kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116376kB dirty:944kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13368kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 330.874622][T22161] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 330.908235][T22161] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.952721][T22161] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 330.998200][T22161] Node 0 DMA32 free:1300024kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30188kB inactive_anon:0kB active_file:12816kB inactive_file:159940kB unevictable:1536kB writepending:900kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:41316kB local_pcp:20256kB free_cma:0kB [ 331.066638][T22161] lowmem_reserve[]: 0 0 0 0 0 [ 331.071855][T22161] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 331.118118][T22161] lowmem_reserve[]: 0 0 0 0 0 [ 331.123195][T22161] Node 1 Normal free:3943156kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 331.202953][T22161] lowmem_reserve[]: 0 0 0 0 0 [ 331.235763][T22161] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.266025][T22161] Node 0 DMA32: 4927*4kB (U) 3280*8kB (UME) 1533*16kB (UM) 33*32kB (UME) 62*64kB (UME) 238*128kB (UM) 230*256kB (UM) 174*512kB (UME) 126*1024kB (UM) 51*2048kB (UME) 198*4096kB (UM) = 1298412kB [ 331.292945][T22161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.315439][T22161] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943156kB [ 331.372819][T22161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.382992][T22161] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.412314][T22161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.450475][T22161] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.482926][T22161] 44596 total pagecache pages [ 331.499946][T22161] 0 pages in swap cache [ 331.510092][T22161] Free swap = 124996kB [ 331.524228][T22161] Total swap = 124996kB [ 331.535965][T22161] 2097051 pages RAM [ 331.551172][T22161] 0 pages HighMem/MovableOnly [ 331.558791][T22201] netlink: 'syz.2.7724': attribute type 21 has an invalid length. [ 331.559322][T22161] 427072 pages reserved [ 331.579027][T22201] netlink: 'syz.2.7724': attribute type 4 has an invalid length. [ 331.602200][T22201] netlink: 'syz.2.7724': attribute type 5 has an invalid length. [ 331.603633][T22161] 0 pages cma reserved [ 331.636201][T22204] netlink: 'syz.2.7724': attribute type 21 has an invalid length. [ 331.644882][T22204] netlink: 'syz.2.7724': attribute type 4 has an invalid length. [ 331.662686][T22204] netlink: 'syz.2.7724': attribute type 5 has an invalid length. [ 332.028686][T22227] __nla_validate_parse: 4 callbacks suppressed [ 332.028709][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7736'. [ 332.101535][T22227] bond0: entered promiscuous mode [ 332.129978][T22227] bond_slave_0: entered promiscuous mode [ 332.156321][T22227] bond_slave_1: entered promiscuous mode [ 332.164358][T22227] bond0: left promiscuous mode [ 332.169816][T22227] bond_slave_0: left promiscuous mode [ 332.180533][T22227] bond_slave_1: left promiscuous mode [ 332.452437][T22248] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 332.470275][T22248] syzkaller1: linktype set to 823 [ 332.619601][T22262] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.7753'. [ 332.625338][T22261] sctp: [Deprecated]: syz.2.7751 (pid 22261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.625338][T22261] Use struct sctp_sack_info instead [ 332.800223][T22273] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.7759'. [ 333.043914][T22295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7769'. [ 333.154606][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7769'. [ 333.695808][T22334] bond0: (slave bridge_slave_1): Releasing backup interface [ 333.715394][T22334] bond0: (slave bond_slave_0): Releasing backup interface [ 333.728072][T22334] bond0: (slave bond_slave_1): Releasing backup interface [ 333.765342][T22334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.777934][T22334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.791708][T22334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.801063][T22334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.811643][T22334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.846591][T22340] bridge0: port 3(syz_tun) entered blocking state [ 333.854350][T22340] bridge0: port 3(syz_tun) entered disabled state [ 333.862689][T22340] syz_tun: entered allmulticast mode [ 333.870354][T22340] syz_tun: entered promiscuous mode [ 333.878554][T22340] bridge0: port 3(syz_tun) entered blocking state [ 333.886113][T22340] bridge0: port 3(syz_tun) entered forwarding state [ 333.996002][T22349] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7791'. [ 334.376373][T22374] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7802'. [ 334.759066][T22401] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7817'. [ 334.998610][T22419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7825'. [ 335.137438][T22426] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7828'. [ 335.259431][T22435] sctp: [Deprecated]: syz.4.7833 (pid 22435) Use of int in max_burst socket option deprecated. [ 335.259431][T22435] Use struct sctp_assoc_value instead [ 335.716321][T22472] gretap0: entered promiscuous mode [ 336.028877][T22493] netlink: 'syz.2.7860': attribute type 19 has an invalid length. [ 336.242097][T22508] netlink: 'syz.2.7866': attribute type 1 has an invalid length. [ 336.251081][T22508] netlink: 'syz.2.7866': attribute type 2 has an invalid length. [ 336.414696][T22520] netlink: 'syz.2.7872': attribute type 1 has an invalid length. [ 336.624369][T22531] block nbd0: Unsupported socket: should be TCP or UNIX. [ 337.569173][T22596] tipc: Enabling of bearer rejected, already enabled [ 337.703261][T22603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 337.709652][T22604] __nla_validate_parse: 2 callbacks suppressed [ 337.709682][T22604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7911'. [ 337.815410][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7912'. [ 337.840195][T22610] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7912'. [ 337.853418][T22610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7912'. [ 338.179771][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7924'. [ 338.267897][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7928'. [ 338.828598][T22680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7946'. [ 340.225876][T22780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7994'. [ 340.478256][T22794] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8001'. [ 340.673717][T22808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8008'. [ 341.133612][T22841] pimreg: left allmulticast mode [ 341.660658][T22882] netlink: 'syz.0.8041': attribute type 51 has an invalid length. [ 342.256558][T22925] xfrm1: entered promiscuous mode [ 342.269933][T22925] xfrm1: entered allmulticast mode [ 342.294780][T22929] sch_fq: defrate 0 ignored. [ 343.112361][T22993] __nla_validate_parse: 8 callbacks suppressed [ 343.112382][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8086'. [ 343.173936][T22993] netlink: 'syz.0.8086': attribute type 1 has an invalid length. [ 343.206886][T22993] netlink: 'syz.0.8086': attribute type 2 has an invalid length. [ 343.344752][ T5491] veth0_macvtap: left promiscuous mode [ 343.810044][T23036] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8101'. [ 343.837658][T23037] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8102'. [ 344.059111][T23048] syzkaller1: entered promiscuous mode [ 344.085623][T23048] syzkaller1: entered allmulticast mode [ 344.130407][T23050] erspan0: entered promiscuous mode [ 344.140448][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8105'. [ 344.467965][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8113'. [ 344.480353][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8113'. [ 344.756244][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8118'. [ 344.802510][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8118'. [ 345.255972][T23113] syzkaller1: entered promiscuous mode [ 345.270554][T23113] syzkaller1: entered allmulticast mode [ 345.408433][T23115] syzkaller1: entered promiscuous mode [ 345.432176][T23115] syzkaller1: entered allmulticast mode [ 345.518454][T23125] syzkaller1: entered promiscuous mode [ 345.534301][T23129] xt_hashlimit: size too large, truncated to 1048576 [ 345.537136][T23125] syzkaller1: entered allmulticast mode [ 345.976370][T23157] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8148'. [ 346.023005][T23154] batadv_slave_1: entered promiscuous mode [ 346.054833][T23153] batadv_slave_1: left promiscuous mode [ 346.782718][T23211] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8173'. [ 346.952577][T23219] syzkaller1: entered promiscuous mode [ 346.972328][T23219] syzkaller1: entered allmulticast mode [ 346.989367][T23221] syzkaller1: entered promiscuous mode [ 347.007632][T23221] syzkaller1: entered allmulticast mode [ 348.143275][T23285] __nla_validate_parse: 1 callbacks suppressed [ 348.143296][T23285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8206'. [ 348.230108][T23287] veth0: entered promiscuous mode [ 348.263493][T23286] veth0: left promiscuous mode [ 348.372732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.381924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.390516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.399240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.457245][T23301] xt_hashlimit: size too large, truncated to 1048576 [ 349.278164][T23343] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.8231'. [ 349.397501][T23351] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.8235'. [ 349.409559][T23355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8237'. [ 349.409775][T23349] syzkaller1: entered promiscuous mode [ 349.421178][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8237'. [ 349.439696][T23349] syzkaller1: entered allmulticast mode [ 349.810114][T23377] syzkaller1: entered promiscuous mode [ 349.825849][T23377] syzkaller1: entered allmulticast mode [ 349.925169][T23381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.998936][T23381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.391466][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8262'. [ 350.518014][T23419] veth0: entered promiscuous mode [ 350.567759][T23418] veth0: left promiscuous mode [ 350.994524][T23454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8286'. [ 351.016516][T23458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8285'. [ 351.377144][T23482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8298'. [ 351.409986][T23482] netlink: 'syz.0.8298': attribute type 7 has an invalid length. [ 351.434768][T23482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8298'. [ 351.473953][T23486] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.492637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.501296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.510346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.519436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.765355][T23508] netlink: 'syz.3.8309': attribute type 1 has an invalid length. [ 351.905372][T23515] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 352.464237][T23552] netlink: 'syz.4.8328': attribute type 2 has an invalid length. [ 352.495774][T23552] netlink: 'syz.4.8328': attribute type 2 has an invalid length. [ 352.510970][T23554] syzkaller1: entered promiscuous mode [ 352.523396][T23554] syzkaller1: entered allmulticast mode [ 352.535976][T23558] syzkaller1: entered promiscuous mode [ 352.543174][T23558] syzkaller1: entered allmulticast mode [ 353.241674][T23604] __nla_validate_parse: 4 callbacks suppressed [ 353.241693][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8352'. [ 353.342343][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8352'. [ 353.575079][ T5910] net_ratelimit: 6 callbacks suppressed [ 353.575099][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.590206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.765858][T23625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.793939][T23625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.813283][T23625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.947895][ T5910] IPVS: starting estimator thread 0... [ 354.065727][T23638] IPVS: using max 33 ests per chain, 79200 per kthread [ 354.105897][T23649] sctp: [Deprecated]: syz.3.8373 (pid 23649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.105897][T23649] Use struct sctp_sack_info instead [ 354.126318][T23652] macvlan0: entered promiscuous mode [ 354.472174][T23673] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 354.530894][T23678] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8386'. [ 354.601775][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8388'. [ 354.612457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.619882][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8388'. [ 354.621237][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.638708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.019361][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.029408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.114873][T23711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8401'. [ 355.205912][T23713] syzkaller1: entered promiscuous mode [ 355.211705][T23713] syzkaller1: entered allmulticast mode [ 355.510882][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8410'. [ 355.543714][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8415'. [ 355.557334][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8410'. [ 355.583402][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8410'. [ 355.599998][T23738] netlink: 'syz.4.8415': attribute type 1 has an invalid length. [ 355.610151][T23738] netlink: 'syz.4.8415': attribute type 2 has an invalid length. [ 355.942299][T23763] syzkaller1: entered promiscuous mode [ 355.948297][T23763] syzkaller1: entered allmulticast mode [ 356.369628][T23792] xt_hashlimit: size too large, truncated to 1048576 [ 358.560044][T23934] netlink: 'syz.3.8490': attribute type 1 has an invalid length. [ 358.582456][T23934] __nla_validate_parse: 5 callbacks suppressed [ 358.582475][T23934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8490'. [ 358.756943][T23949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 358.774089][ T5910] net_ratelimit: 8 callbacks suppressed [ 358.774110][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.788378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.802745][T23949] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 358.812622][T23949] gretap1: entered promiscuous mode [ 358.820330][T23949] gretap1: entered allmulticast mode [ 359.306040][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8516'. [ 359.605475][T24010] netlink: 'syz.0.8526': attribute type 17 has an invalid length. [ 359.625018][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8526'. [ 359.636845][T24010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8526'. [ 359.637797][T24011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.814709][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.823368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.851900][T24024] syzkaller1: entered promiscuous mode [ 359.860313][T24024] syzkaller1: entered allmulticast mode [ 359.866869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.876022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.969156][T24029] syzkaller1: entered promiscuous mode [ 359.979598][T24029] syzkaller1: entered allmulticast mode [ 359.989058][T24038] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 360.083684][T24037] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 360.119363][T24041] netlink: 'syz.1.8540': attribute type 11 has an invalid length. [ 360.318457][T24059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8549'. [ 360.330667][ T29] audit: type=1800 audit(1775865390.323:4): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8546" name="memory.events" dev="tmpfs" ino=8247 res=0 errno=0 [ 360.773011][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.781716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.854295][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.901457][T24090] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.8561'. [ 361.117825][T24103] netlink: 'syz.2.8567': attribute type 11 has an invalid length. [ 361.178855][T24107] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8569'. [ 361.341324][T24115] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8573'. [ 361.553613][T24123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8579'. [ 361.795608][T24143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8587'. [ 362.262915][T24164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.290433][T24164] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.812805][ T5888] net_ratelimit: 7 callbacks suppressed [ 363.812823][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.828032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.052752][T10647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.061677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.238765][T24293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.908614][T24338] __nla_validate_parse: 4 callbacks suppressed [ 364.908635][T24338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8672'. [ 365.433611][T24380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.582644][T24389] Bluetooth: MGMT ver 1.23 [ 365.587137][T24389] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 365.811850][T24404] syzkaller1: entered promiscuous mode [ 365.820090][T24404] syzkaller1: entered allmulticast mode [ 366.349885][T24437] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8716'. [ 366.633315][T24455] syzkaller1: entered promiscuous mode [ 366.639005][T24455] syzkaller1: entered allmulticast mode [ 366.650019][T24457] syzkaller1: entered promiscuous mode [ 366.657883][T24457] syzkaller1: entered allmulticast mode [ 367.311331][T24497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.398462][T24503] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8747'. [ 367.680365][T24522] geneve2: entered promiscuous mode [ 367.703410][ T8320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 35077 - 0 [ 367.733734][ T8320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 35077 - 0 [ 367.749220][ T8320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 35077 - 0 [ 367.778544][ T8320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 35077 - 0 [ 367.939142][T24541] netlink: 67 bytes leftover after parsing attributes in process `syz.0.8764'. [ 368.187717][T24560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8774'. [ 368.204545][T24560] gtp0: entered promiscuous mode [ 368.210268][T24560] gtp0: entered allmulticast mode [ 368.534656][T24583] sctp: [Deprecated]: syz.3.8783 (pid 24583) Use of int in max_burst socket option. [ 368.534656][T24583] Use struct sctp_assoc_value instead [ 368.930708][T24612] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8795'. [ 368.941335][T24612] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8795'. [ 369.122046][T24619] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.381675][T24640] netlink: 'syz.0.8805': attribute type 9 has an invalid length. [ 369.392304][T24640] netlink: 'syz.0.8805': attribute type 11 has an invalid length. [ 369.400838][T24640] netlink: 'syz.0.8805': attribute type 12 has an invalid length. [ 369.409401][T24640] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.8805'. [ 369.419744][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8805'. [ 370.059023][T24684] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8822'. [ 370.133754][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 370.372482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.612479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.621649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.686363][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8839'. [ 370.700647][T24720] netlink: 'syz.4.8839': attribute type 6 has an invalid length. [ 370.708560][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8839'. [ 370.732103][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8839'. [ 370.732643][ T32] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.752937][T24720] netlink: 'syz.4.8839': attribute type 6 has an invalid length. [ 370.764465][T24720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8839'. [ 370.764854][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8840'. [ 370.783571][ T8320] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.800185][ T8320] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.814065][ T8320] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.885087][T24722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.165181][T24749] gretap0: left allmulticast mode [ 371.171648][T24749] gretap0: left promiscuous mode [ 371.178390][T24749] bridge0: port 3(gretap0) entered disabled state [ 371.247554][T24749] bridge_slave_0: left allmulticast mode [ 371.272736][T24749] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.302521][T24749] bridge_slave_1: left allmulticast mode [ 371.308741][T24749] bridge_slave_1: left promiscuous mode [ 371.316119][T24759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8853'. [ 371.336275][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.351566][T24749] bond0: (slave bond_slave_0): Releasing backup interface [ 371.368933][T24749] bond0: (slave bond_slave_1): Releasing backup interface [ 371.397849][T24764] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8854'. [ 371.398432][T24749] team0: Port device team_slave_0 removed [ 371.414346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.439477][T24749] team0: Port device team_slave_1 removed [ 371.453433][T24749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.461349][T24749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.471080][T24749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.489624][T24752] team0: Mode changed to "random" [ 371.692513][T24769] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.717918][T24769] bond3: (slave lo): Enslaving as an active interface with an up link [ 371.730313][T24769] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 371.737535][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8862'. [ 371.765944][T24777] chnl_net:caif_netlink_parms(): no params data found [ 371.811897][T24780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.973073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.984081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.056779][T24800] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8869'. [ 372.616788][T24835] netlink: 'syz.0.8883': attribute type 1 has an invalid length. [ 372.777185][T24847] netlink: 'syz.1.8887': attribute type 1 has an invalid length. [ 372.817660][T24847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.874527][T24847] bond4: (slave ip6erspan1): making interface the new active one [ 372.887545][T24847] bond4: (slave ip6erspan1): Enslaving as an active interface with an up link [ 373.262763][T24877] netlink: 'syz.0.8900': attribute type 1 has an invalid length. [ 373.390358][T24884] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 373.420547][T24884] bond5: (slave lo): Enslaving as an active interface with an up link [ 373.439366][T24888] IPv6: sit2: Disabled Multicast RS [ 373.760143][T24907] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 373.933611][T24917] netlink: 'syz.1.8915': attribute type 1 has an invalid length. [ 374.000145][T24917] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 374.013117][T24917] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 374.027726][T24917] bond5: (slave ip6gre2): making interface the new active one [ 374.040905][T24917] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 374.517299][T24940] netlink: 'syz.1.8925': attribute type 18 has an invalid length. [ 374.527940][T24940] netlink: 'syz.1.8925': attribute type 18 has an invalid length. [ 374.962464][T24961] netlink: 'syz.4.8934': attribute type 12 has an invalid length. [ 375.064003][T24965] __nla_validate_parse: 16 callbacks suppressed [ 375.064025][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8936'. [ 375.086157][T24967] net_ratelimit: 9 callbacks suppressed [ 375.086176][T24967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.435645][T24983] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8945'. [ 375.446345][T24983] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8945'. [ 375.466446][T24983] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8945'. [ 375.572513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.736077][T24999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8951'. [ 375.863654][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 375.901019][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 376.224058][T25025] netlink: 'syz.4.8963': attribute type 11 has an invalid length. [ 376.235313][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8963'. [ 376.247558][T25025] netlink: 'syz.4.8963': attribute type 11 has an invalid length. [ 376.257731][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8963'. [ 376.356369][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058fe1800: rx timeout, send abort [ 376.856569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bae4400: rx timeout, send abort [ 376.866623][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058fe1800: abort rx timeout. Force session deactivation [ 376.909550][T25059] vlan2: entered allmulticast mode [ 376.915150][T25059] bond0: entered allmulticast mode [ 376.927085][T25059] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8977'. [ 376.948493][T25059] bond0 (unregistering): Released all slaves [ 377.344436][T25084] netlink: 'syz.0.8988': attribute type 1 has an invalid length. [ 377.364980][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bae4400: abort rx timeout. Force session deactivation [ 377.599870][T25096] netlink: 'syz.0.8992': attribute type 21 has an invalid length. [ 377.613068][T25096] netlink: 'syz.0.8992': attribute type 22 has an invalid length. [ 377.621255][T25096] netlink: 'syz.0.8992': attribute type 23 has an invalid length. [ 377.630050][T25096] netlink: 'syz.0.8992': attribute type 25 has an invalid length. [ 378.165514][T25129] xt_hashlimit: size too large, truncated to 1048576 [ 378.853189][T25164] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 379.413472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.422565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.340774][T25270] __nla_validate_parse: 12 callbacks suppressed [ 380.340798][T25270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9074'. [ 380.478232][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9079'. [ 380.668279][T25285] "syz.3.9081" (25285) uses obsolete ecb(arc4) skcipher [ 381.068189][T25316] trusted_key: syz.4.9094 sent an empty control message without MSG_MORE. [ 381.262486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.271156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.629303][T25338] validate_nla: 3 callbacks suppressed [ 381.629323][T25338] netlink: 'syz.2.9099': attribute type 22 has an invalid length. [ 381.684532][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9099'. [ 381.705672][T25338] netlink: 'syz.2.9099': attribute type 22 has an invalid length. [ 381.709216][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9102'. [ 381.722276][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9099'. [ 381.732942][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9102'. [ 381.746442][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9101'. [ 381.803066][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9101'. [ 381.869528][T25348] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9105'. [ 381.892381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.901650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.936646][T25350] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9106'. [ 382.189622][T25366] gretap2: entered promiscuous mode [ 382.217519][T25366] batman_adv: batadv0: Adding interface: gretap2 [ 382.248182][T25366] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 382.292345][T25366] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 382.659775][T25389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.845397][T25441] hsr_slave_0 (unregistering): left promiscuous mode [ 383.879271][T25444] ip6tnl2: entered promiscuous mode [ 383.966809][T25446] syzkaller1: entered promiscuous mode [ 383.974149][T25446] syzkaller1: entered allmulticast mode [ 384.697881][T25484] xt_hashlimit: size too large, truncated to 1048576 [ 385.154846][T25497] netlink: 'syz.3.9167': attribute type 1 has an invalid length. [ 385.179109][T25497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.203893][T25497] bond0: (slave geneve2): making interface the new active one [ 385.213239][T25497] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 385.252451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.259102][T25518] __nla_validate_parse: 11 callbacks suppressed [ 386.259127][T25518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9175'. [ 387.087710][T25460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.311460][T25546] netlink: 'syz.3.9187': attribute type 1 has an invalid length. [ 387.323090][T25546] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9187'. [ 387.474408][T25556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9191'. [ 387.486129][T25556] netlink: 'syz.2.9191': attribute type 7 has an invalid length. [ 387.522505][T25556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9191'. [ 387.555419][T25556] gretap0: entered promiscuous mode [ 387.678847][ T29] audit: type=1800 audit(1775865417.663:5): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9196" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9398 res=0 errno=0 [ 387.940016][T25588] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9206'. [ 388.113119][T25598] veth0: entered promiscuous mode [ 388.126049][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9211'. [ 388.150292][T25598] veth0 (unregistering): left promiscuous mode [ 388.436712][T25613] vlan1: left allmulticast mode [ 388.441904][T25613] veth0_vlan: left allmulticast mode [ 388.623250][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9221'. [ 388.823996][T25637] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 389.145727][T25657] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9238'. [ 389.187893][T25656] bridge_slave_0: left promiscuous mode [ 389.435705][T25656] veth3: left promiscuous mode [ 389.443453][T25656] gtp0: left promiscuous mode [ 389.452727][T25656] geneve2: left promiscuous mode [ 389.477727][T25656] gretap1: left promiscuous mode [ 389.554391][ T58] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.563416][ T58] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 389.586464][ T58] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 389.616037][ T58] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.657102][ T58] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 389.677696][ T58] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 389.700256][ T58] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.714287][ T58] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 389.739386][ T58] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 389.749488][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9244'. [ 389.998067][T25700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9247'. [ 390.078703][T25704] "syz.2.9248" (25704) uses obsolete ecb(arc4) skcipher [ 390.239211][ T58] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.265276][ T58] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 390.284679][ T58] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.504414][T25718] veth0: entered promiscuous mode [ 390.532070][T25718] veth0: left promiscuous mode [ 390.542455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.551412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.750296][T25728] bond0: (slave bond_slave_1): Releasing backup interface [ 390.792048][T25732] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 390.801825][T25728] team0: Port device team_slave_0 removed [ 390.836577][T25728] team0: Port device team_slave_1 removed [ 390.843363][T25728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 391.289242][T25753] __nla_validate_parse: 1 callbacks suppressed [ 391.289263][T25753] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9260'. [ 391.335087][T25753] netlink: Conntrack attr has 4 unknown bytes [ 391.780713][T25768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9265'. [ 392.721411][T25788] netem: change failed [ 392.952808][T25799] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 392.995960][T25799] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9275'. [ 393.008183][T25799] netlink: Unknown conntrack attr (0) [ 393.268474][T25816] netlink: 'syz.0.9284': attribute type 9 has an invalid length. [ 393.277746][T25816] netlink: 'syz.0.9284': attribute type 11 has an invalid length. [ 393.289073][T25816] netlink: 'syz.0.9284': attribute type 12 has an invalid length. [ 393.298176][T25816] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.9284'. [ 393.312640][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9284'. [ 393.926214][T25856] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9301'. [ 393.966894][T25809] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 393.986971][T25809] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 394.158966][T25870] netlink: 'syz.4.9306': attribute type 19 has an invalid length. [ 394.187868][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9306'. [ 394.200941][T25870] netlink: 'syz.4.9306': attribute type 19 has an invalid length. [ 394.209768][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9306'. [ 394.273391][T25878] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9311'. [ 394.522848][T25895] netlink: 'syz.4.9319': attribute type 1 has an invalid length. [ 394.530713][T25895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9319'. [ 394.578480][T25899] netlink: 'syz.0.9321': attribute type 7 has an invalid length. [ 394.593596][T25899] netlink: 'syz.0.9321': attribute type 8 has an invalid length. [ 394.762627][T25911] ip6erspan0: entered promiscuous mode [ 394.785294][T25913] netlink: 'syz.4.9328': attribute type 7 has an invalid length. [ 394.865882][T25913] netlink: 'syz.4.9328': attribute type 7 has an invalid length. [ 394.895937][T25920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.310102][ T1153] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 395.336876][ T1153] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 395.347647][ T1153] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 395.377335][ T1153] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 395.981049][T25992] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.002955][T25992] syzkaller1: Linktype set failed because interface is up [ 396.013047][ T9] syzkaller1: tun_net_xmit 90 [ 396.410026][T26012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.416624][T26012] syzkaller1: Refused to change device type [ 396.595522][T26024] __nla_validate_parse: 15 callbacks suppressed [ 396.595544][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'. [ 396.890302][T26043] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9379'. [ 396.912402][T26043] netlink: Conntrack attr has 3 unknown bytes [ 397.095341][T26057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9381'. [ 397.749301][T26036] macvlan0: left promiscuous mode [ 397.878585][T26036] h: left promiscuous mode [ 397.883671][T26036] xfrm1: left promiscuous mode [ 398.116042][ T58] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.128831][ T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.152707][ T58] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.166426][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.187793][ T58] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.198337][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.213639][ T58] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.226399][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.286622][T26090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9390'. [ 399.073826][T26145] validate_nla: 8 callbacks suppressed [ 399.073841][T26145] netlink: 'syz.0.9417': attribute type 1 has an invalid length. [ 399.151623][T26145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.172520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.182105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.219480][T26150] bond0: (slave geneve3): making interface the new active one [ 399.260273][T26150] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 399.305336][ T1144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.326256][ T1144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.362558][ T1144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 399.635985][ T1144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 400.086704][T26195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9433'. [ 400.542339][T26216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9443'. [ 400.856129][T26225] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 401.391506][T26243] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9455'. [ 401.496967][T26247] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9459'. [ 401.721915][T26263] tipc: Failed to remove unknown binding: 66,1,1/2886997007:326758695/326758697 [ 401.733385][T26263] tipc: Failed to remove unknown binding: 66,1,1/2886997007:326758695/326758697 [ 401.783754][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.807554][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.816084][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'. [ 401.826025][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.878094][T26265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.888067][T26265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.904302][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'. [ 402.063968][T26282] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9473'. [ 402.185546][T26291] netlink: 'syz.1.9476': attribute type 4 has an invalid length. [ 402.203718][T26291] netlink: 'syz.1.9476': attribute type 4 has an invalid length. [ 402.388536][T26298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9479'. [ 402.661963][T26313] syzkaller0: entered promiscuous mode [ 402.668058][T26313] syzkaller0: entered allmulticast mode [ 405.022933][T26376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9506'. [ 405.064892][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9506'. [ 405.083957][T26376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9506'. [ 405.118967][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9506'. [ 405.316839][T26393] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9510'. [ 405.357268][T26389] wg1 speed is unknown, defaulting to 1000 [ 405.376865][ T5491] veth0_vlan: left promiscuous mode [ 405.409919][ T5491] veth0_vlan: entered promiscuous mode [ 406.606751][T26423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9521'. [ 407.662366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.672217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.732334][T26365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.905582][T26447] netlink: 'syz.1.9531': attribute type 1 has an invalid length. [ 408.156817][T26453] bond6: (slave geneve2): making interface the new active one [ 408.165422][T26453] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 408.203083][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.230462][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.277495][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.296903][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.318097][T26467] __nla_validate_parse: 3 callbacks suppressed [ 408.318116][T26467] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9536'. [ 409.174635][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9553'. [ 409.601141][T26536] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9563'. [ 409.611515][T26536] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 409.621687][T26535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9562'. [ 409.756607][T26541] veth1_to_bond: entered allmulticast mode [ 409.770458][T26541] veth1_to_bond: left allmulticast mode [ 409.773542][T26544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9567'. [ 409.797064][T26544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9567'. [ 410.194497][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9574'. [ 410.204307][T26562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9574'. [ 411.886941][T26583] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9581'. [ 412.187558][T26596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9586'. [ 412.289092][T26589] bridge0: port 3(syz_tun) entered disabled state [ 412.313943][T26589] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.623643][T26589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.656637][T26589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.061194][T26589] veth0_macvtap: left allmulticast mode [ 413.195759][T10635] wg1 speed is unknown, defaulting to 1000 [ 413.202078][ T138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.215641][T10635] syz2: Port: 1 Link DOWN [ 413.218207][ T138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.253595][ T138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.267838][ T138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.608678][T26633] netlink: 'syz.1.9598': attribute type 29 has an invalid length. [ 413.635177][T26633] netlink: 'syz.1.9598': attribute type 29 has an invalid length. [ 413.657384][T26633] netlink: 'syz.1.9598': attribute type 32 has an invalid length. [ 413.977362][T26653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9608'. [ 414.675901][T26698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9627'. [ 415.058454][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9637'. [ 415.115189][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.125100][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9637'. [ 415.143761][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.157421][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.211616][T26728] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9640'. [ 415.242901][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.401257][T26730] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9642'. [ 416.618577][T26794] wg1 speed is unknown, defaulting to 1000 [ 416.719771][T26801] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9671'. [ 417.605074][T26828] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 418.386409][T26839] syzkaller1: entered promiscuous mode [ 418.399018][T26839] syzkaller1: entered allmulticast mode [ 419.171381][T26888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9703'. [ 419.454836][T26888] hsr_slave_1 (unregistering): left promiscuous mode [ 419.476960][T26893] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9705'. [ 419.599660][T26900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9709'. [ 419.631139][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9708'. [ 419.688961][T26908] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.9710'. [ 419.745625][T26903] macvtap1: entered promiscuous mode [ 419.751592][T26903] erspan0: entered promiscuous mode [ 419.764573][T26903] macvtap1: entered allmulticast mode [ 419.771292][T26903] erspan0: entered allmulticast mode [ 419.974303][T26924] bridge0: port 1(syz_tun) entered blocking state [ 419.995025][T26924] bridge0: port 1(syz_tun) entered disabled state [ 420.022634][T26924] syz_tun: entered allmulticast mode [ 420.048233][T26924] syz_tun: entered promiscuous mode [ 420.150495][T26935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9719'. [ 420.474372][T26953] syzkaller1: entered promiscuous mode [ 420.496081][T26953] syzkaller1: entered allmulticast mode [ 420.815403][T26973] netlink: 'syz.0.9734': attribute type 1 has an invalid length. [ 420.827680][T26975] netlink: 'syz.1.9736': attribute type 1 has an invalid length. [ 420.837036][T26975] netlink: 'syz.1.9736': attribute type 4 has an invalid length. [ 420.846246][T26975] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9736'. [ 420.877508][T26973] bond6: entered promiscuous mode [ 420.883044][T26973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.037329][T26973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.053211][T26973] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 421.066133][T26973] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 421.081606][T26973] bond6: (slave vti0): making interface the new active one [ 421.090194][T26973] vti0: entered promiscuous mode [ 421.101509][T26973] bond6: (slave vti0): Enslaving as an active interface with an up link [ 421.212831][T26990] netlink: 208 bytes leftover after parsing attributes in process `syz.3.9740'. [ 421.275093][T26996] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9744'. [ 422.061296][T27005] wireguard0: entered promiscuous mode [ 422.177562][T27045] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9760'. [ 423.031720][T27100] netlink: 'syz.2.9787': attribute type 11 has an invalid length. [ 423.045512][T27100] netlink: 'syz.2.9787': attribute type 4 has an invalid length. [ 423.072269][T27100] netlink: 'syz.2.9787': attribute type 5 has an invalid length. [ 423.080400][T27100] netlink: 'syz.2.9787': attribute type 6 has an invalid length. [ 424.807644][T27213] __nla_validate_parse: 12 callbacks suppressed [ 424.807668][T27213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9833'. [ 424.992276][T27223] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.9838'. [ 425.703155][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9854'. [ 425.713896][T27264] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9854'. [ 426.242610][T27116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.367996][T27273] syzkaller1: entered promiscuous mode [ 426.381142][T27273] syzkaller1: entered allmulticast mode [ 426.445361][T27276] netlink: 'syz.3.9859': attribute type 10 has an invalid length. [ 426.454254][T27276] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.9859'. [ 426.532069][T27279] syzkaller1: entered promiscuous mode [ 426.538834][T27279] syzkaller1: entered allmulticast mode [ 426.603384][T27287] only policy match revision 0 supported [ 426.603407][T27287] unable to load match [ 427.343741][T27321] netlink: 'syz.0.9877': attribute type 18 has an invalid length. [ 427.454809][ T32] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.463576][ T32] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.478197][T27321] netlink: 'syz.0.9877': attribute type 18 has an invalid length. [ 427.503562][ T32] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.512056][ T32] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.975499][T27345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9888'. [ 428.317222][T27354] netlink: 'syz.3.9892': attribute type 5 has an invalid length. [ 428.533864][T27363] netlink: 'syz.0.9897': attribute type 1 has an invalid length. [ 428.544826][T27363] netlink: 'syz.0.9897': attribute type 1 has an invalid length. [ 428.799397][T27378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9901'. [ 428.867043][T27381] netlink: 'syz.3.9903': attribute type 1 has an invalid length. [ 428.959129][T27384] bond7: (slave gretap1): making interface the new active one [ 428.968427][T27384] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 429.450089][T27401] netlink: 320 bytes leftover after parsing attributes in process `syz.3.9911'. [ 429.487383][T27406] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 429.801231][T27425] netlink: 'syz.1.9921': attribute type 1 has an invalid length. [ 430.025903][T27441] netlink: 'syz.0.9927': attribute type 1 has an invalid length. [ 430.034856][T27441] netlink: 'syz.0.9927': attribute type 4 has an invalid length. [ 430.043365][T27441] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.9927'. [ 430.047334][T27442] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9924'. [ 430.189830][T27450] xt_hashlimit: size too large, truncated to 1048576 [ 430.351057][T27456] sctp: [Deprecated]: syz.0.9932 (pid 27456) Use of int in maxseg socket option. [ 430.351057][T27456] Use struct sctp_assoc_value instead [ 430.465666][T27461] policy can only be matched on NF_INET_PRE_ROUTING [ 430.465689][T27461] unable to load match [ 430.815729][T27483] syzkaller1: entered promiscuous mode [ 430.821510][T27483] syzkaller1: entered allmulticast mode [ 430.835460][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9942'. [ 431.478817][T27507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9950'. [ 432.108239][T27533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9960'. [ 433.647701][T27533] bridge0: entered promiscuous mode [ 433.654846][T27533] macsec1: entered promiscuous mode [ 433.660536][T27533] macsec1: entered allmulticast mode [ 433.667143][T27533] bridge0: entered allmulticast mode [ 433.673754][T27533] bridge0: port 1(macsec1) entered blocking state [ 433.681482][T27533] bridge0: port 1(macsec1) entered disabled state [ 433.697694][T27533] bridge0: left allmulticast mode [ 433.703814][T27533] bridge0: left promiscuous mode [ 433.755801][T27531] wg1 speed is unknown, defaulting to 1000 [ 434.273024][T27576] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9975'. [ 434.844428][T27608] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9985'. [ 435.010018][T27610] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9986'. [ 435.073171][T27611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9986'. [ 435.726138][T27632] syzkaller1: entered promiscuous mode [ 435.733461][T27632] syzkaller1: entered allmulticast mode [ 435.887389][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10001'. [ 435.925535][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10001'. [ 436.041180][T27651] netlink: 'syz.0.10006': attribute type 4 has an invalid length. [ 436.086666][T27651] netlink: 'syz.0.10006': attribute type 4 has an invalid length. [ 436.127001][T27656] syzkaller1: entered promiscuous mode [ 436.134034][T27656] syzkaller1: entered allmulticast mode [ 436.219226][T27658] netlink: 'syz.0.10008': attribute type 4 has an invalid length. [ 436.458592][T27674] sctp: [Deprecated]: syz.0.10014 (pid 27674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.458592][T27674] Use struct sctp_sack_info instead [ 436.591221][T27680] netlink: 'syz.2.10016': attribute type 1 has an invalid length. [ 436.663736][T27680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.718689][T27682] bond4: (slave veth7): Enslaving as an active interface with a down link [ 436.755691][T27680] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 436.775811][T27680] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 437.087397][T27697] syzkaller0: entered promiscuous mode [ 437.099549][T27697] syzkaller0: entered allmulticast mode [ 438.834285][T27726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10032'. [ 439.543974][T27732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10034'. [ 439.579605][T27736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10037'. [ 439.676810][T27736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10037'. [ 439.931129][T27755] netlink: 'syz.3.10043': attribute type 1 has an invalid length. [ 440.057450][T27755] bond8: entered promiscuous mode [ 440.102374][T27755] bond8: entered allmulticast mode [ 440.108447][T27755] 8021q: adding VLAN 0 to HW filter on device bond8 [ 440.140504][T27756] macvlan2: entered promiscuous mode [ 440.147822][T27756] macvlan2: entered allmulticast mode [ 440.156236][T27756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.413470][T27775] netlink: 'syz.3.10049': attribute type 1 has an invalid length. [ 440.543939][T27775] bond9: entered promiscuous mode [ 440.549695][T27775] 8021q: adding VLAN 0 to HW filter on device bond9 [ 440.644670][T27777] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.662274][T27777] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 440.700317][T27777] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 440.784213][T27772] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 440.940482][T27787] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10053'. [ 441.670311][T27834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10071'. [ 441.838151][T27845] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2927055754/2927055756 [ 441.968331][T27852] syzkaller1: entered promiscuous mode [ 441.975179][T27852] syzkaller1: entered allmulticast mode [ 442.198842][T27861] netlink: 'syz.1.10084': attribute type 10 has an invalid length. [ 442.219476][T27814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.529028][T27871] wg1 speed is unknown, defaulting to 1000 [ 442.854638][T27887] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.865310][T27887] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 442.953437][T27887] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.964050][T27887] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 443.114058][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10097'. [ 443.164378][T27887] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.192296][T27887] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 443.208832][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10094'. [ 443.327737][T27887] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.338473][T27887] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 443.361304][T27910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10101'. [ 443.673231][T27929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10109'. [ 443.869318][ T179] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.890595][ T179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.925364][ T179] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.934546][ T179] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 443.986111][ T1153] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.996333][ T1153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 444.019071][ T1153] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.028701][ T1153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 444.155662][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10117'. [ 444.390981][T27962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10120'. [ 444.694214][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10126'. [ 444.719242][T27976] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 444.729657][T27976] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 444.739856][T27976] team0: Failed to send options change via netlink (err -105) [ 444.748326][T27976] team0: Port device batadv1 added [ 444.921695][T27980] wg1 speed is unknown, defaulting to 1000 [ 445.132076][T27994] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.10133'. [ 445.441711][T28009] wg1 speed is unknown, defaulting to 1000 [ 446.107262][T28022] __nla_validate_parse: 1 callbacks suppressed [ 446.107282][T28022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10143'. [ 446.124458][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10143'. [ 446.170209][T28024] sctp: [Deprecated]: syz.2.10144 (pid 28024) Use of int in maxseg socket option. [ 446.170209][T28024] Use struct sctp_assoc_value instead [ 446.786056][T28043] syzkaller0: entered promiscuous mode [ 446.791820][T28043] syzkaller0: entered allmulticast mode [ 446.910584][T28047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10155'. [ 447.063328][T28055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10159'. [ 447.086335][T27945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.384386][T28067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10165'. [ 447.450064][T28073] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.10168'. [ 447.529204][T28080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10171'. [ 448.158159][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10183'. [ 448.260413][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10184'. [ 448.412468][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10187'. [ 448.620832][T28127] wg1 speed is unknown, defaulting to 1000 [ 448.756151][T28134] netlink: 'syz.4.10192': attribute type 1 has an invalid length. [ 448.847692][T28141] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 449.331284][T28169] netlink: 'syz.0.10206': attribute type 39 has an invalid length. [ 450.364982][T28208] dvmrp0: entered allmulticast mode [ 451.554942][T28270] netlink: 'syz.2.10245': attribute type 1 has an invalid length. [ 451.613342][T28274] netlink: 'syz.4.10246': attribute type 1 has an invalid length. [ 451.651171][T28270] bond5: entered promiscuous mode [ 451.657266][T28270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.671400][T28278] __nla_validate_parse: 8 callbacks suppressed [ 451.671419][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10247'. [ 451.712909][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10247'. [ 451.732848][T28274] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.767536][T28279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.775468][T28279] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 451.788812][T28279] bond4: (slave vcan0): Error -95 calling set_mac_address [ 451.859463][T28270] bond5: (slave bridge5): making interface the new active one [ 451.869476][T28288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10250'. [ 451.882827][T28270] bridge5: entered promiscuous mode [ 451.897527][T28270] bridge5: left promiscuous mode [ 452.129757][T28300] syz_tun: entered allmulticast mode [ 452.156965][T28300] syz_tun: left allmulticast mode [ 452.247566][T28303] bond5: (slave lo): Releasing backup interface [ 452.263985][T28303] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 452.294056][T28303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.393482][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10258'. [ 452.462411][T28315] batadv_slave_0: entered promiscuous mode [ 452.510946][T28314] batadv_slave_0: left promiscuous mode [ 452.687309][T28322] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10262'. [ 452.716263][T28322] syzkaller1: entered promiscuous mode [ 452.722899][T28322] syzkaller1: entered allmulticast mode [ 452.969062][T28331] syz_tun: entered allmulticast mode [ 452.985804][T28331] syz_tun: left allmulticast mode [ 453.034543][T28336] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10268'. [ 453.203886][T28342] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 454.490865][T28401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10293'. [ 454.823330][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'. [ 455.670117][T28462] vlan2: entered allmulticast mode [ 455.675771][T28462] hsr0: entered allmulticast mode [ 455.680814][T28462] hsr_slave_0: entered allmulticast mode [ 455.833987][T28471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10324'. [ 456.174309][T28490] tipc: Enabled bearer , priority 0 [ 456.325140][T28490] syzkaller0: entered promiscuous mode [ 456.353733][T28490] syzkaller0: entered allmulticast mode [ 456.374356][T28490] tipc: Resetting bearer [ 456.708982][ T138] tipc: Resetting bearer [ 456.728535][T28489] tipc: Resetting bearer [ 458.357780][T28489] tipc: Disabling bearer [ 458.400027][T28517] tipc: Enabling of bearer rejected, failed to enable media [ 458.473383][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10340'. [ 458.492949][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10340'. [ 459.803429][T28592] syzkaller0: entered promiscuous mode [ 459.809422][T28592] syzkaller0: entered allmulticast mode [ 459.819881][T28557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.335995][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10370'. [ 461.345866][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10370'. [ 461.536592][T28606] tipc: Started in network mode [ 461.541745][T28606] tipc: Node identity f6765eca662c, cluster identity 4711 [ 461.560350][T28606] tipc: Enabled bearer , priority 0 [ 461.665933][T28607] syzkaller0: entered promiscuous mode [ 461.680789][T28607] syzkaller0: entered allmulticast mode [ 461.692040][T28607] tipc: Resetting bearer [ 461.755501][ T58] tipc: Resetting bearer [ 461.779399][T28604] tipc: Resetting bearer [ 461.861300][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10376'. [ 463.287336][T28604] tipc: Disabling bearer [ 463.446357][T10635] tipc: Node number set to 2421841610 [ 463.812392][T28659] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.10386'. [ 463.849974][T28661] syzkaller1: entered promiscuous mode [ 463.856435][T28661] syzkaller1: entered allmulticast mode [ 464.140864][T28680] tipc: Enabled bearer , priority 0 [ 464.216915][T28680] syzkaller0: entered promiscuous mode [ 464.223393][T28680] syzkaller0: entered allmulticast mode [ 464.231248][T28680] tipc: Resetting bearer [ 464.326768][T28679] tipc: Resetting bearer [ 466.067091][T28679] tipc: Disabling bearer [ 466.227017][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10406'. [ 466.351404][T28738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.652675][T28739] wg1 speed is unknown, defaulting to 1000 [ 466.919565][T28758] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 466.997326][T28762] bond0: entered promiscuous mode [ 467.002988][T28762] geneve2: entered promiscuous mode [ 467.009496][T28762] batadv0: entered promiscuous mode [ 467.016235][T28762] debugfs: 'hsr1' already exists in 'hsr' [ 467.022305][T28762] Cannot create hsr debugfs directory [ 467.028273][T28762] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 467.039223][T28762] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 467.050498][T28762] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 467.059478][T28762] bond0: left promiscuous mode [ 467.064817][T28762] geneve2: left promiscuous mode [ 467.070821][T28762] batadv0: left promiscuous mode [ 467.242274][T28759] infiniband sy1: set down [ 467.247032][T28759] infiniband sy1: added bond0 [ 467.297059][T28759] RDS/IB: sy1: added [ 467.301168][T28759] smc: adding ib device sy1 with port count 1 [ 467.310337][T28759] smc: ib device sy1 port 1 has no pnetid [ 467.769197][T28774] netlink: 'syz.4.10422': attribute type 16 has an invalid length. [ 467.777955][T28774] netlink: 'syz.4.10422': attribute type 17 has an invalid length. [ 467.789581][T28774] erspan0: left allmulticast mode [ 467.805407][T28774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.995453][T28781] bond5: entered promiscuous mode [ 468.015021][T28781] macvlan0: entered promiscuous mode [ 468.020357][T28781] macvlan0: entered allmulticast mode [ 468.030765][T28781] bond5: (slave macvlan0): Opening slave failed [ 468.708851][T28798] +: renamed from syzkaller0 [ 469.197777][T28808] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.222601][T28808] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.229790][T28808] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 469.240719][T28808] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 469.258534][T28808] bond11: (slave xfrm1): making interface the new active one [ 469.268179][T28808] bond11: (slave xfrm1): Enslaving as an active interface with an up link [ 469.292533][T28730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.443951][T28815] netlink: 'syz.2.10437': attribute type 1 has an invalid length. [ 469.491844][T28815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.595526][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10440'. [ 471.326912][T28896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10468'. [ 471.345992][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10468'. [ 471.362473][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10468'. [ 471.405200][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10466'. [ 471.459468][T28900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10469'. [ 471.645512][T28907] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 471.673077][T28907] bond8 (unregistering): Released all slaves [ 471.705364][T28912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10473'. [ 471.731793][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10474'. [ 471.748404][T28910] wg1 speed is unknown, defaulting to 1000 [ 471.756883][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10474'. [ 471.978070][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10479'. [ 471.989967][T28924] bond6: entered promiscuous mode [ 472.428117][T28937] wg1 speed is unknown, defaulting to 1000 [ 472.767159][T28946] syzkaller1: entered promiscuous mode [ 472.785406][T28946] syzkaller1: entered allmulticast mode [ 476.209419][T29025] vlan0: entered promiscuous mode [ 476.215426][T29025] vlan0: entered allmulticast mode [ 476.220712][T29025] hsr_slave_1: entered allmulticast mode [ 476.325179][T29054] __nla_validate_parse: 4 callbacks suppressed [ 476.325204][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10526'. [ 476.547284][T29070] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 476.575829][T29070] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 476.916150][T29086] netlink: 'syz.0.10537': attribute type 29 has an invalid length. [ 476.935357][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10537'. [ 476.975167][T29092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10540'. [ 477.303995][T29115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10549'. [ 479.353085][T29130] mpoa:mpoad_close: () going down [ 479.437248][T29148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10558'. [ 479.714784][T29165] netlink: 'syz.4.10561': attribute type 39 has an invalid length. [ 479.746772][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10564'. [ 480.071962][T29183] netlink: 'syz.3.10569': attribute type 8 has an invalid length. [ 480.080366][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10569'. [ 480.096172][T29183] bond0: entered promiscuous mode [ 480.101370][T29183] geneve2: entered promiscuous mode [ 480.108022][T29183] gretap0: entered promiscuous mode [ 480.114505][T29183] ip6gretap0: entered promiscuous mode [ 480.121213][T29183] debugfs: 'hsr1' already exists in 'hsr' [ 480.127531][T29183] Cannot create hsr debugfs directory [ 480.134241][T29183] hsr1: entered promiscuous mode [ 480.266816][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10571'. [ 480.588230][T29201] bond8: entered allmulticast mode [ 480.647273][T29201] bridge6: entered promiscuous mode [ 480.662250][T29201] bridge6: entered allmulticast mode [ 480.686279][T29201] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 481.740323][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10585'. [ 482.077839][T29258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10595'. [ 482.274222][T29269] netlink: 'syz.2.10600': attribute type 1 has an invalid length. [ 482.279561][T29271] netlink: 'syz.3.10601': attribute type 1 has an invalid length. [ 482.343291][T29269] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 482.355791][T29269] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 482.404257][T29277] macvlan2: entered promiscuous mode [ 482.409791][T29277] macvlan2: entered allmulticast mode [ 482.417559][T29277] bond7: entered promiscuous mode [ 482.428548][T29277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 482.436349][T29279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10603'. [ 482.446913][T29277] bond7: left promiscuous mode [ 482.611935][T29286] syzkaller0: entered promiscuous mode [ 482.626015][T29286] syzkaller0: entered allmulticast mode [ 482.741788][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10610'. [ 482.785655][T29294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.833387][T29294] bond7: entered promiscuous mode [ 482.849886][T29294] bond7: entered allmulticast mode [ 482.865182][T29294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.878729][T29294] team0: Port device bond7 added [ 482.883650][T29300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10612'. [ 482.894981][T29298] netlink: 'syz.0.10611': attribute type 4 has an invalid length. [ 482.921840][T29298] netlink: 'syz.0.10611': attribute type 4 has an invalid length. [ 482.929561][T29300] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10612'. [ 482.951609][T29300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10612'. [ 483.048377][T29303] netlink: 'syz.0.10614': attribute type 1 has an invalid length. [ 483.222585][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10617'. [ 483.241108][T29318] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 483.262712][T29318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.775371][T29337] syzkaller0: entered promiscuous mode [ 483.781047][T29337] syzkaller0: entered allmulticast mode [ 483.862517][T29341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10629'. [ 484.289864][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10638'. [ 486.261007][T29433] lec:lec_atm_close: lec0: Shut down! [ 487.242870][T26072] lec:lec_start_xmit: lec0:No lecd attached [ 487.343648][T29513] netlink: 'syz.0.10681': attribute type 1 has an invalid length. [ 487.384817][T29516] __nla_validate_parse: 4 callbacks suppressed [ 487.384837][T29516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10682'. [ 488.525332][T29528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10696'. [ 488.648765][T29536] dvmrp8: entered allmulticast mode [ 488.679289][T29538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10690'. [ 488.740099][T29538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10690'. [ 488.810350][T29547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10692'. [ 489.039892][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10697'. [ 489.050428][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10697'. [ 489.507050][T29467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.861161][T29579] netlink: 'syz.3.10704': attribute type 16 has an invalid length. [ 489.905852][T29579] netlink: 'syz.3.10704': attribute type 17 has an invalid length. [ 489.972078][T29579] eql: remember to turn off Van-Jacobson compression on your slave devices [ 490.104315][T29579] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 490.693747][T29619] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10712'. [ 490.953636][T29637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10716'. [ 490.976111][T29639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.983860][T29639] IPv6: NLM_F_CREATE should be set when creating new route [ 491.002952][T29639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10715'. [ 491.830805][T29668] syzkaller0: entered promiscuous mode [ 491.852994][T29668] syzkaller0: entered allmulticast mode [ 492.377637][T29709] syzkaller0: entered promiscuous mode [ 492.390588][T29709] syzkaller0: entered allmulticast mode [ 493.012351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 493.021378][ C0] lec:lec_tx_timeout: lec0 [ 493.026688][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 493.410349][T29761] __nla_validate_parse: 2 callbacks suppressed [ 493.410371][T29761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10743'. [ 493.610521][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10747'. [ 494.003406][T29786] xt_hashlimit: size too large, truncated to 1048576 [ 494.866223][T29802] syzkaller0: entered promiscuous mode [ 494.892230][T29802] syzkaller0: entered allmulticast mode [ 495.001361][T29804] netlink: 'syz.3.10755': attribute type 4 has an invalid length. [ 495.051145][T29804] netlink: 'syz.3.10755': attribute type 4 has an invalid length. [ 495.148264][T29811] syzkaller0: entered allmulticast mode [ 495.206688][T29813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10758'. [ 495.276306][T29813] netlink: 'syz.0.10758': attribute type 5 has an invalid length. [ 495.306054][T29813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10758'. [ 495.860184][T29856] netlink: 'syz.2.10770': attribute type 3 has an invalid length. [ 495.873524][T29856] netlink: 'syz.2.10770': attribute type 3 has an invalid length. [ 495.940847][T29862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10771'. [ 496.513246][T29892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10777'. [ 496.600831][T29892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 496.654487][T29900] macvlan2: entered promiscuous mode [ 496.670565][T29900] macvlan2: entered allmulticast mode [ 496.678280][T29900] bond8: entered allmulticast mode [ 496.683864][T29900] bond8: entered promiscuous mode [ 496.700075][T29900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 496.712336][T29900] team0: Port device macvlan2 added [ 497.320898][T29940] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 497.362168][T29940] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 497.424450][T29942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10790'. [ 497.826989][T29930] ------------[ cut here ]------------ [ 497.832776][T29930] ODEBUG: init active (active state 0) object: ffff888096768f38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 497.846150][T29930] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.1.10785/29930 [ 497.856900][T29930] Modules linked in: [ 497.861223][T29930] CPU: 1 UID: 0 PID: 29930 Comm: syz.1.10785 Not tainted syzkaller #0 PREEMPT(full) [ 497.870992][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.881542][T29930] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 497.887847][T29930] Code: 3c 38 00 74 08 4c 89 ef e8 5e 7b 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 dd 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 be 7a 58 0b 83 fd 03 75 3f 4c 8b [ 497.909259][T29930] RSP: 0018:ffffc9001ba078f8 EFLAGS: 00010246 [ 497.915602][T29930] RAX: 1ffffffff179e7ec RBX: ffff888096768f38 RCX: 0000000000000000 [ 497.924048][T29930] RDX: ffffffff8c27e140 RSI: ffffffff8c27dd40 RDI: ffffffff901ca370 [ 497.932652][T29930] RBP: 0000000000000003 R08: ffff888096768f38 R09: ffffffff8bcf5280 [ 497.941114][T29930] R10: dffffc0000000000 R11: ffffffff81b20310 R12: ffffffff8c27e140 [ 497.949728][T29930] R13: ffffffff8bcf3f60 R14: ffffffff901ca370 R15: dffffc0000000000 [ 497.957872][T29930] FS: 00007fa0d06386c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 497.967504][T29930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.974552][T29930] CR2: 00007fa0cf7e9f00 CR3: 0000000040802000 CR4: 00000000003526f0 [ 497.983006][T29930] Call Trace: [ 497.986665][T29930] [ 497.989790][T29930] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 497.995852][T29930] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 498.001608][T29930] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 498.007922][T29930] timer_init_key+0x41/0x2f0 [ 498.012632][T29930] lane_ioctl+0x1579/0x2220 [ 498.017183][T29930] ? __pfx_clip_ioctl+0x10/0x10 [ 498.022288][T29930] ? br2684_ioctl+0x110/0x6b0 [ 498.027435][T29930] ? __pfx_lane_ioctl+0x10/0x10 [ 498.032506][T29930] ? atmtcp_ioctl+0x1ce/0xdf0 [ 498.037406][T29930] do_vcc_ioctl+0x36d/0x9d0 [ 498.042490][T29930] svc_ioctl+0x1f6/0x7d0 [ 498.046779][T29930] ? kasan_quarantine_put+0xbb/0x1f0 [ 498.052515][T29930] ? __pfx_svc_ioctl+0x10/0x10 [ 498.057616][T29930] ? tomoyo_path_number_perm+0x219/0x630 [ 498.063632][T29930] ? tomoyo_path_number_perm+0x219/0x630 [ 498.069579][T29930] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 498.075006][T29930] sock_do_ioctl+0x101/0x320 [ 498.080017][T29930] ? __pfx_sock_do_ioctl+0x10/0x10 [ 498.085463][T29930] ? do_futex+0x333/0x420 [ 498.089848][T29930] sock_ioctl+0x5c6/0x7f0 [ 498.094435][T29930] ? __pfx_sock_ioctl+0x10/0x10 [ 498.099421][T29930] ? __fget_files+0x2a/0x420 [ 498.104662][T29930] ? __fget_files+0x3a0/0x420 [ 498.109811][T29930] ? __fget_files+0x2a/0x420 [ 498.114807][T29930] ? bpf_lsm_file_ioctl+0x9/0x20 [ 498.120137][T29930] ? __pfx_sock_ioctl+0x10/0x10 [ 498.125411][T29930] __se_sys_ioctl+0xfc/0x170 [ 498.130425][T29930] do_syscall_64+0x14d/0xf80 [ 498.135336][T29930] ? trace_irq_disable+0x3b/0x150 [ 498.140652][T29930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.147114][T29930] ? clear_bhb_loop+0x40/0x90 [ 498.152037][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.158234][T29930] RIP: 0033:0x7fa0cf79c819 [ 498.162969][T29930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.183803][T29930] RSP: 002b:00007fa0d0638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.193067][T29930] RAX: ffffffffffffffda RBX: 00007fa0cfa15fa0 RCX: 00007fa0cf79c819 [ 498.201522][T29930] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 498.209730][T29930] RBP: 00007fa0cf832c91 R08: 0000000000000000 R09: 0000000000000000 [ 498.218929][T29930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.227116][T29930] R13: 00007fa0cfa16038 R14: 00007fa0cfa15fa0 R15: 00007ffee1a31978 [ 498.235562][T29930] [ 498.238736][T29930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.246551][T29930] CPU: 1 UID: 0 PID: 29930 Comm: syz.1.10785 Not tainted syzkaller #0 PREEMPT(full) [ 498.256386][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 498.267330][T29930] Call Trace: [ 498.270641][T29930] [ 498.273769][T29930] vpanic+0x56c/0xa60 [ 498.277970][T29930] ? __pfx__printk+0x10/0x10 [ 498.283114][T29930] ? __pfx_vpanic+0x10/0x10 [ 498.288006][T29930] ? is_bpf_text_address+0x292/0x2b0 [ 498.293855][T29930] ? is_bpf_text_address+0x26/0x2b0 [ 498.299700][T29930] panic+0xc5/0xd0 [ 498.303559][T29930] ? __pfx_panic+0x10/0x10 [ 498.308378][T29930] __warn+0x315/0x4f0 [ 498.312622][T29930] ? __debug_object_init+0x2b1/0x4e0 [ 498.318044][T29930] ? __debug_object_init+0x2b1/0x4e0 [ 498.324155][T29930] __report_bug+0x29a/0x540 [ 498.328887][T29930] ? __debug_object_init+0x2b1/0x4e0 [ 498.334492][T29930] ? __pfx___report_bug+0x10/0x10 [ 498.339822][T29930] ? __lock_acquire+0x6b5/0x2cf0 [ 498.345417][T29930] report_bug_entry+0x19a/0x290 [ 498.350386][T29930] ? __debug_object_init+0x30f/0x4e0 [ 498.356025][T29930] ? __debug_object_init+0x314/0x4e0 [ 498.361675][T29930] handle_bug+0xce/0x200 [ 498.366285][T29930] exc_invalid_op+0x1a/0x50 [ 498.370878][T29930] asm_exc_invalid_op+0x1a/0x20 [ 498.375982][T29930] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 498.382306][T29930] Code: 3c 38 00 74 08 4c 89 ef e8 5e 7b 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 dd 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 be 7a 58 0b 83 fd 03 75 3f 4c 8b [ 498.402783][T29930] RSP: 0018:ffffc9001ba078f8 EFLAGS: 00010246 [ 498.409031][T29930] RAX: 1ffffffff179e7ec RBX: ffff888096768f38 RCX: 0000000000000000 [ 498.417434][T29930] RDX: ffffffff8c27e140 RSI: ffffffff8c27dd40 RDI: ffffffff901ca370 [ 498.425627][T29930] RBP: 0000000000000003 R08: ffff888096768f38 R09: ffffffff8bcf5280 [ 498.433864][T29930] R10: dffffc0000000000 R11: ffffffff81b20310 R12: ffffffff8c27e140 [ 498.442000][T29930] R13: ffffffff8bcf3f60 R14: ffffffff901ca370 R15: dffffc0000000000 [ 498.450497][T29930] ? __pfx_timer_debug_hint+0x10/0x10 [ 498.456154][T29930] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 498.461885][T29930] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 498.467694][T29930] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 498.473693][T29930] timer_init_key+0x41/0x2f0 [ 498.478580][T29930] lane_ioctl+0x1579/0x2220 [ 498.483258][T29930] ? __pfx_clip_ioctl+0x10/0x10 [ 498.488472][T29930] ? br2684_ioctl+0x110/0x6b0 [ 498.493502][T29930] ? __pfx_lane_ioctl+0x10/0x10 [ 498.498619][T29930] ? atmtcp_ioctl+0x1ce/0xdf0 [ 498.503379][T29930] do_vcc_ioctl+0x36d/0x9d0 [ 498.507884][T29930] svc_ioctl+0x1f6/0x7d0 [ 498.512306][T29930] ? kasan_quarantine_put+0xbb/0x1f0 [ 498.517972][T29930] ? __pfx_svc_ioctl+0x10/0x10 [ 498.522836][T29930] ? tomoyo_path_number_perm+0x219/0x630 [ 498.528639][T29930] ? tomoyo_path_number_perm+0x219/0x630 [ 498.534637][T29930] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 498.539768][T29930] sock_do_ioctl+0x101/0x320 [ 498.544752][T29930] ? __pfx_sock_do_ioctl+0x10/0x10 [ 498.549909][T29930] ? do_futex+0x333/0x420 [ 498.554544][T29930] sock_ioctl+0x5c6/0x7f0 [ 498.558889][T29930] ? __pfx_sock_ioctl+0x10/0x10 [ 498.564310][T29930] ? __fget_files+0x2a/0x420 [ 498.569199][T29930] ? __fget_files+0x3a0/0x420 [ 498.574180][T29930] ? __fget_files+0x2a/0x420 [ 498.578954][T29930] ? bpf_lsm_file_ioctl+0x9/0x20 [ 498.584269][T29930] ? __pfx_sock_ioctl+0x10/0x10 [ 498.589335][T29930] __se_sys_ioctl+0xfc/0x170 [ 498.594250][T29930] do_syscall_64+0x14d/0xf80 [ 498.599143][T29930] ? trace_irq_disable+0x3b/0x150 [ 498.604249][T29930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.610425][T29930] ? clear_bhb_loop+0x40/0x90 [ 498.615383][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.621740][T29930] RIP: 0033:0x7fa0cf79c819 [ 498.626359][T29930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.647328][T29930] RSP: 002b:00007fa0d0638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.656010][T29930] RAX: ffffffffffffffda RBX: 00007fa0cfa15fa0 RCX: 00007fa0cf79c819 [ 498.664567][T29930] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 498.672811][T29930] RBP: 00007fa0cf832c91 R08: 0000000000000000 R09: 0000000000000000 [ 498.681311][T29930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.689798][T29930] R13: 00007fa0cfa16038 R14: 00007fa0cfa15fa0 R15: 00007ffee1a31978 [ 498.698134][T29930] [ 498.702255][T29930] Kernel Offset: disabled [ 498.706749][T29930] Rebooting in 86400 seconds..