last executing test programs: 4.836589572s ago: executing program 2 (id=11062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.724713775s ago: executing program 0 (id=11063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a1a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r1, 0x0, 0xffffffff004) 4.637853322s ago: executing program 2 (id=11065): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 4.434626199s ago: executing program 3 (id=11067): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @random="4c20f47d5bc9"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0xffff}, @void, @void, @void}, 0x35) 3.791921361s ago: executing program 2 (id=11072): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.736951863s ago: executing program 3 (id=11073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x10000000, 0x1000, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.684042109s ago: executing program 1 (id=11074): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x14, 0x10, 0x0, 0xfffffd5a}, 0x48) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000002400)="800000", 0x3, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0x3}, 0x14) 3.54158798s ago: executing program 1 (id=11075): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.518635774s ago: executing program 0 (id=11076): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x10000, 0x4) 3.502907818s ago: executing program 3 (id=11077): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x0, @local}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) 3.324671495s ago: executing program 1 (id=11078): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x884) 3.258145743s ago: executing program 3 (id=11079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df", 0xe}, {&(0x7f0000000500)="ce03be93f6b49fe72c169c8dd78f1000000038ef93c403155b", 0x19}], 0x3) 3.088020164s ago: executing program 1 (id=11081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 2.915676312s ago: executing program 0 (id=11083): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 2.772579562s ago: executing program 2 (id=11084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0xff, 0x1, 0x0, 0xf7, 0x80, 0x4, 0x6, 0x2, 0x3, 0x4, 0x10000, 0x800, 0xf, 0x9, 0x3ff, 0xc, 0x3, 0x5, 0x3, 0x5, 0x9, 0x2400, 0x8, 0x1000062, 0x5, 0x3, 0x17e, 0x3, 0x5, 0x1, 0xfffffffd, 0x999f, 0x7f, 0x80000001, 0xe, 0x5, 0x9, 0x9, 0x2, 0xac6, 0xdab, 0x1000, 0x1, 0xb6, 0x2, 0x1, 0x0, 0x3ff0, 0x1, 0x4c7, 0x851, 0x800, 0xf9a6, 0x280000, 0xfffffff4, 0x8, 0xfffffffb, 0x800, 0x1c, 0xeb26, 0x9, 0xe, 0x3, 0x7, 0x7, 0xfff, 0x9, 0x7ff, 0x2, 0x0, 0xa, 0x3, 0x10000, 0x0, 0xffffffff, 0x3, 0x7, 0x3, 0x1, 0x1, 0x0, 0x80000001, 0x3b5, 0x6, 0x40, 0xffff, 0x4, 0x9, 0x3, 0x8001, 0x8e0d, 0xfffffffa, 0x8, 0x8, 0x4, 0x7, 0x5, 0x5, 0x8, 0x8d, 0xc, 0x5, 0x6, 0x4, 0x8, 0x6a9, 0x2, 0xfffffffd, 0x6, 0x4, 0x7, 0x3, 0x3, 0x6, 0x80000000, 0x6, 0xbf7b, 0x0, 0x1, 0x1, 0x3, 0x1, 0x8, 0x7fff, 0x3, 0xd, 0x6, 0xc5c, 0x4, 0x8, 0x7f, 0x8, 0x0, 0x8, 0x2, 0x5, 0x5, 0x8, 0x3, 0x0, 0x400, 0x89, 0x3, 0x5, 0x3, 0x4, 0xe, 0x942, 0x266, 0x8, 0x9, 0x4, 0x2, 0x5, 0xc, 0x80000001, 0x2, 0x0, 0xa292, 0x1, 0x8000000, 0x3, 0x0, 0x404, 0x12, 0x7ff, 0x4, 0x9, 0x2, 0x6, 0x10000, 0x10, 0xd4, 0x4, 0x8, 0xb, 0x8, 0x9, 0x8, 0x64, 0x80000000, 0x10001, 0x2, 0x1, 0x4, 0x9, 0x29, 0x1, 0x2, 0x9, 0x5, 0x3, 0x7, 0x81, 0x6e9, 0x0, 0x7d, 0x5, 0x80000001, 0x400, 0x10001, 0x9, 0x5, 0x7, 0x9, 0x3, 0x1c, 0x0, 0x7, 0x3ac3, 0x4, 0x5, 0x4, 0x9, 0x7, 0x10000, 0x3, 0x2, 0x5, 0x10000, 0x10e3ad08, 0x8, 0xffffff61, 0xffffffff, 0xaf7, 0x6, 0x4, 0x1000, 0x1, 0xba8d, 0x4, 0x3, 0x4, 0xfffffffa, 0x200, 0x9, 0xc, 0x5, 0x4ecbe04a, 0x5, 0x80000000, 0x3, 0x9, 0xc, 0x0, 0xfffffff9, 0x6, 0x55c, 0x7, 0x3, 0x7fff, 0x6, 0x4, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001c}, 0x0) 2.709529593s ago: executing program 4 (id=11085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 2.377517875s ago: executing program 4 (id=11086): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00'], 0x28}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, 0x0, 0x7) r2 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x0, 0x8001, "939e5d", 0x8, 0xd}) syz_emit_ethernet(0x0, 0x0, 0x0) 2.340996056s ago: executing program 0 (id=11087): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x48, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc881) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 2.313654522s ago: executing program 4 (id=11088): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x2) 2.242435858s ago: executing program 4 (id=11089): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 525.290742ms ago: executing program 2 (id=11090): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 521.889675ms ago: executing program 3 (id=11091): sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 505.772964ms ago: executing program 4 (id=11092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) 443.430812ms ago: executing program 0 (id=11093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000780)="0374b89b6b8dcbb4cb8a1771ee373c60dffd8deb3c9c317508c6817c7a8b0c957750ad1675e9f05170fb6d9b51a1b1fd0a6033a8beb703acf671c64f99de3fe21ad848c5a0ec436caa7d216c481dafdb3304dccb34dce9b83e5a7d49354cdb4c9ecffa4229b5d748b3c0e74f63e994084b658a51110eca0523c7d070b7aefc6a5fc72cc3a55e2e820555b8451abd4c13821a2200ae7f02ec7fee64b38c969cea3134d8a5cb05b098826dd9090af2e68525f5a0a2dd4d334c7b42d871fb9fbf88366165784b3e4f67a9911e6dc832db12ccc9fed1a43a3b08dabfc85e8d8a2a81894e0d308ff4f19d16ec64a141cf97c47b924a63491a49686f81e148cb8be06dfa74ad260736713d3103fc8610cc8b08e3bf2cc6b0b180edb8b6f7891b04ae389fa84eb2fa44d9b6675075d9437e7cad6b03c7a9afae83728fd7a99b39b63a0328a806ef22a104dcc9c2cd21c0560c73bc942d9d2e44a76f29251ddebdd5af5e80cf9c1d5c5adcb0e9f059781da0e307b80610bbb078187b9957dfc476dc37c98e84a57145a374853360ab0bdf4f9ba177b93e95f3990416741321489ceee6f7602ffbd12bad06ee75bcc09ddc0d8d77e7126cbe0e801501db5792d542f8891198638f186827fe9dffb115c195bed8fe04b55e4b1d457330d4379689b5217d0c0e529f63fd69cb9eac8d710bbe82d5de87298d733f0377af77628517595ee7b8f3b90d86f8a4d759c79c35f7dbf4fd1302dda2f03a6b2b1ca6db9cf8b82d4a2e2e661a5c8ba21a4ee7a8844313091fac4d2260e9220c5fac9587780418da5dd949660d9001467d59029b6c8d45f93b2766da45bb53134633bc73dba0dbbdc80fe77530992af9f873f940960b16f9358e5b0dbad8ba8ecfe5776a6cd40429355a57661c85a5a1c9897706f3306628da4129c22c632848506af7faaf44e91e32b579c07ede813705ae93958069664bca19fc3cfb2fad15654549f205f6e9b8592c47e2549674e5c9c9c1c3a7f5bfd600d57623b5a126322d2165d021cd70912837c6307803aa4bc878858c7cb0460134002731534de3ff564a8c1040fda15b6d071260cf5878ef9bfa1c506c8f0a3fe40dad945bebd32cf1529ba00d30979b7d33756855ee2f8ad2d4adc549652a944016f72c37be97c7abf40daf0712cd3d8ba8fa5b53f0de13a97698f928b9d3b09ed96c94ca57ab4aaeeddbe3e437192667369b13014cf2c5517737b8f9eb6c67c6accf143be04aaae7b12af1c9b10fc532d436a9c0b51d94443735ec43b05280d7a05e1e10cc342813596120a22de7a12c03e92fb14e042c25192cc41b709bf591ef4aa65dac2229a62ed4b0743e3f15a94ae8985a578989c54e35a26b2396ccbf1232579d050e8c616320a1881dd2f6a08f591c94fb449ab8618110db011c0b32a0f104c56c9caf613c8ca6d5189f2cf9952f22027ffae9eecc074dad1d0b2fd254197e1eddd98ef07651af25ae8794517c713dacc412d2c9f004b162a2ee709981e8d3b37233a2baa60c434efe86a8a04f6996903428626657817fbac595a21c13d288ce92f356c320d81e118218bb689193791ac2fc82a4768910dbc02c163969133e043bb71ee1f753d4b0b219b695f412e971c78365f8ce59af34ddbb2e717ff69793e2c17c40dabfadf15b8ab05a20076caf1112b18215f5cdade82623c893dd2feb05624b60e28d0764f72d630579647b3f87a61b9da06f6abb8b3874a30458a37115e5596e3db9a277704ccc2716794edd42a6d816d86a14d2ee46ac38ca51867fbc449505af5b3155c41f4fc1ac606fe347a3a25ef4d20d103b646946f5d22a52af94602e37be0d4496d5655b1a366d1592c3a357b239f8a5e585886ac8a027ded2f740f32fc1267ed23417a85fb161d65ebdfb1b3f3388f495ffbba8c880bde473347fadf268c27c5c2102aa2e73a1e147818e50e07045ad1cc2fcc91626ef64eeeeedd43f179641735ba949aed1692c33c58af38ebd9c39db4759cd8d214aa8088e2f59067d60c2021b47d76cda4a8771f66af3d9d4e767c40c288ac6b5d1c35a5cc19e5ef8da05c70f8d5964a7df7bdecab4c3979a87f3d15ff310d48e9f5b8a328dccc791391ccb506a49daae18588eaa2a91a42afc52c9f0246d8535891a116bb93277f90d41b98f72af22fa03d584e969ae327476a2f0bab13e0c53be1c067049d132a5464c4f500db32e8d2c82db395aaf64da2a30db6395778e71d473231f24067854c11677dc2517c4e43422236dafa1753f9c279bde67b7996477cd730e1f38a8e608a193c1f850d7ea833cdf5d224bb44015e0878cf356c3ad927fbbd67205a28f96f335b113793b53d2b377c0b8ded9f179392fe3f52a328185db60d67f30ffd20b9bc084e8a93724b17ed06bf587db85382657a5375aa9f5a9dc7bc7b98bcbf7e66a808074ba1e3fd094bfdd0038276ed49a32dd48f76da3ab1a33fcabac166c4b3a0c88f4e723bd0067dff02a5b2576c617d8fac1ea407141fb190beb0550521b58dd7a4b4574f1e59a2dc3eece2745a6f667dc58058d51e50937cf4a4b3c3ad96ecf54bf2ba3879345c3210dea419d61d284c4f4120bd1fe426735a8976806519a7da78aabf1dc4e1619fc36fd718c26b05c2315ef694a64f166b8735ffca7946147eba013180948be71166c140ab6f74405fd08ee22023d33d03f8c5a0ac284acb5ece80d8d31c225425f2d253e9a347c79bd1bdc196231a5aab7b4e79fff6f4c6d478b54dc9458e4995cf1bf6487c7a09a7c2cb029f40825b35018e7ef9e029447594f66ce4ad7f15d0a1899fb11a5022c7c4a8be00da4be83adb2404fbeaf47f6db26f6c9d6cfdfe0bdef3a69b3a52781665682086d6509f60e4931d98638c8321fd12ec58af9b2f184fec4d938b9df64060511fa46b540f7ef624cc7014b6e05f536bdad6cccc4d3eb93e2e6c32daacdc36494ba43e31e7851eed47b7ab92c22ee0ecec0242a8dec92c74cc164591b8ba11410e17af76082d32eadf67ecddf3fcfd337e96d1fe8dbd067a5d37349841bf82aac67d6264e2fbbe89eb95102479413b0367c4f84196c2beff03535f25f0f4a64767f61a5e6456766a67900b1ab589fd5dfc14e8555135a582a273c270b2bd4ff25b95461ccf2b8949aa66d285b6293cd049bac30e782d69bcd28047e8a213baf131360ca92c7d00fba299205dab440f685deb3c11b7f3c8b8b31c9f7df2aeb0659784eb230b560edef0d744e66ab690f8da6baeb3674eb9525b711ac8f6d6a7a7a236e66757aab0fcabcbfa23960d9c02351cada751df7278aba9c9b7d4b4deda3605887ffc17f97a94e32fe3a33c2ab8751baaac20ea2ac144b42929227e4d84e40011f4498d797179fdcbd3696d6e68901c615242370a256f39d7435bc98d56088cf7657b8251ca3dfade119d8db24cd34fa1ce96f3ca5293b1b23860c8925bc087a91ec4e15c258f686cf70079af65652ce78bee27b64d7329fb00dcf6d8e3e29253feb0d86b955d2bb9d6ef6cbe8182e0113d2e25ecd9f509db12e586a82f006d8e001270e30a68facb1347709493d45d5860df1f5f54e555e0e7e97cf1c10e810586cd333242b8ba1156427b640e2edd1334c8ca71f5276d415e9e2d7193981afdf9e868dd385c3b9a6f3e8bdd048c5fa60c47f93450bdb62c2ceb6aa64a131f6895e22cf3776486ae392597244b67a2f3867bdb1ba015df4597fa08944b3f4b7c3a0d058d4869a830bc4b2f8129dd93ab411c8969c704f58bc213c9be8e0cfb7060c1385bc6a573e0b7a2bf25582cc55944a424b0802670d57afdd3d6fde101719953a5e1021a4f54845751a57e6e033077d7f156184bc50a25b111caad8d14a2efa9211295a55007ff0dda2a578ac490e1abc742c8dc81c40b96720774fef544f428ecafd87f052e4464109a1fe3f8bf14c2c16ff65db820cc07edb7fc89eeabccb74579b6f4e0609671d6cafde5e6d656bc62b5e4b67b2ac403926dbf9374f9d25052041c6bf9f30787dafdcb5e6b2966274225afb8a4243c72f98d0e3a9908d28948f4d6e9ee03c760ead2f4254f211089aad5a6940404a0e7d5fcbbd052d5fedc8aaa0c776ac5a05e9af16eb6ee0ed388b667d8b974713792e2c73360c3faf2fbcd8605830f2921dfafdbf39abaa2c24043b0f7706f3bc56c81996b5db545555c9daf5563565478b7188c5c199bad92737e7725b6336876f2a4e6898e8ff77a055162d01617a863832f8a6ac9fe66f526a35671df7ca363b88b2032d4822a0c740d8180c3aaa3519948cedab4a0b3ebf7e33f338a214d9f0cf66c5aa79d1784061ef6ef5ecabf2145b7531d29616a99f47d92fce0eff14d9d5acabd9039d5972f1808030070421a30c213e0afa4a227f84d2c0916370cd89e3ff9fe38dc6b3be71a5c9eaa83b76bad178d515b92f9d7f1e8adda3ccac5ed4462bbd1752ad5ee43cbed9e60a56a571c5bd42b98e3879ec95e8fc169c8b963ddd03e8989a4e7f74c55eeb40453e3bfb36ff7538306d032fc201e43bbbf2c049c75f9ff03034084ff33bb258e2ea8515c80ccf11e513bb120683db534a8ee5e814b63cb9785d5aaa7f0c6d0ddf6efa39673cec41d29c104036f1877d591e9bc3d31ad87664a6f383d8279fbf5c0244622ddd35d083dc6ce31248db801992591257036afec363a1791d8f54982eea5a4e0a274ca6de814ff756c3742b468e060330064d021cc5113bb0703384cf8deff17c7a24572212b815e71d0e494c48bd89c484712d5e4a8db04a8259b0e448b70e9285fedf6e7e12e0d5700ba46cb5fcf5965140740075fb12d6baf92ca9d6147c41f5091b84b81825109a0a4099b797de98a0b679082b5e7f0dd6aebcb6cc0413edb9b8cf4a31b0f497205a758389056a9407e21ec8be9698be1070821cf869cff6f7a1f3e3413da3fd4da4f2982cf8037494cad53e440183bda64b51ffa594cf982ba1aa9a6695e611fd980554f2e72966da73f88182cccd19964ab86fec3b96c19354842090caf8bee89fa5b318590c7bc4921024d83136be089f10e6611dca9b1cc504b89c8bd96090ebb8ceb559849c73bf35a65521a40e83c4d5a5cdc638fbd6b2ede98c177c70188d2b4f06c977a47fa76d7ac3d9f9ee002a48f382625215b230bc399c090ce33ebafbc4bd398675583077b0e7be74cf4466f74f5ec9576ac823d78ba91442eb0689082bbeb0e928edce0cb9de2a0aa591ca1244ba5aa300d6aab1c42babe351cd68112d8355e7138d9c4595feef2199600a02b1f943d6e26a1d9c4e663db4239cb33d2f7bccaffab40ef4a142267962d634af483e9ebdc0b74d580eb830966cbabde7dd95e271d381c33cf819db5b45fd3edd438fee1e29db13a36685b28fcffdd205ab2f3602f5608384b829e0bd347040818f392d21194bd57724e0ea38ba9a5be99fcc493181d7d63d6113470be5ce9dcb26c9efc1c088b592d2b696579696001ef341909a53d44d1693dd0fefa30fd8e92e9468f754d9502b49e6a6ec42c98043db4c95b95680b0f320da15279c38d6e9e61f0c44aec2fe0ef900de1538436fac855661fa5db8cb409c9ce4c5b31f8b58951aaf2c634d44f11f72f31228b3da175a02431f27710409fc51dbf565ab7d4c5ae492e86c116c0bc4a8dec591a40476b7adeeda2723de1d114a79146e1cc85d1443f70ea503d093adb96737136d16cd66df1d365e763056846d373d6d1a7673b3e1a8cf2a8b500e6da90d727b9f73c16649fa83250bfa", 0xfee}, {&(0x7f0000001780)="0bd962d9ae883ca2b6e42114bc2564a8de05ec", 0x13}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 442.650243ms ago: executing program 1 (id=11094): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) close(0x3) 324.227453ms ago: executing program 1 (id=11095): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 233.166515ms ago: executing program 2 (id=11096): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000540)='@^\x00', 0x10800, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000b00)=[{0x3, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x8}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 231.918393ms ago: executing program 0 (id=11097): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(0x0) r1 = socket(0x14, 0x3, 0x2000004) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) 128.68203ms ago: executing program 4 (id=11098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xa8d}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 3 (id=11099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) close(r2) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) kernel console output (not intermixed with test programs): ng new route [ 215.788202][T14889] __nla_validate_parse: 7 callbacks suppressed [ 215.788219][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'. [ 216.312863][T14927] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4368'. [ 216.430501][T14933] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.4372'. [ 216.815822][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4383'. [ 216.920994][T14968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4385'. [ 216.944085][T14968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4385'. [ 217.216513][T14989] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4396'. [ 217.622911][T15018] xt_socket: unknown flags 0x8 [ 217.669645][T15021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.705675][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 217.789503][T15030] xt_hashlimit: overflow, try lower: 3/0 [ 217.834660][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4417'. [ 217.893210][T15038] netlink: 'syz.0.4420': attribute type 2 has an invalid length. [ 217.930247][T15038] netlink: 'syz.0.4420': attribute type 2 has an invalid length. [ 218.226431][T15058] netlink: 'syz.1.4430': attribute type 23 has an invalid length. [ 218.241046][T15060] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 218.582219][T15083] ipt_rpfilter: unknown options [ 218.584366][T15084] xt_CONNSECMARK: invalid mode: 0 [ 218.613822][T15088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.782799][T15093] bond2: entered promiscuous mode [ 218.788964][T15093] bond2: entered allmulticast mode [ 218.794592][T15093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.388821][T15141] netlink: 'syz.0.4470': attribute type 11 has an invalid length. [ 219.455477][T15149] xt_hashlimit: size too large, truncated to 1048576 [ 219.576872][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 219.614730][T15156] netlink: 'syz.3.4476': attribute type 8 has an invalid length. [ 219.951581][T15182] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 220.157096][T15200] netlink: 'syz.0.4497': attribute type 12 has an invalid length. [ 220.216137][T15203] netlink: 'syz.4.4499': attribute type 1 has an invalid length. [ 220.970403][T15257] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 220.980948][T15255] Cannot find map_set index 135 as target [ 221.277207][T15277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.346892][T15283] netlink: 'syz.2.4536': attribute type 13 has an invalid length. [ 221.364288][T15283] gretap0: refused to change device tx_queue_len [ 221.371518][T15283] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.004911][T15322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.407550][T15344] Cannot find add_set index 2 as target [ 222.763146][T15367] netlink: 'syz.1.4578': attribute type 21 has an invalid length. [ 222.807734][T15367] __nla_validate_parse: 2 callbacks suppressed [ 222.807751][T15367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4578'. [ 222.853498][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4581'. [ 223.611188][T15429] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.976743][T15452] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4620'. [ 223.986841][T15395] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 224.112955][T15458] netlink: 'syz.1.4626': attribute type 1 has an invalid length. [ 224.411045][T15480] netlink: 'syz.2.4634': attribute type 21 has an invalid length. [ 224.443838][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4634'. [ 224.555821][T15489] netlink: 'syz.4.4639': attribute type 61 has an invalid length. [ 224.771751][T15509] netlink: 'syz.0.4648': attribute type 27 has an invalid length. [ 224.799989][T15500] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 224.831987][T15500] bond2: option packets_per_slave: allowed values 0 - 65535 [ 224.842055][T15500] bond2 (unregistering): Released all slaves [ 225.014277][T15522] xt_bpf: check failed: parse error [ 225.129207][T15530] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4658'. [ 225.170194][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4662'. [ 225.247978][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.363148][ T3477] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.385402][T15550] netlink: 'syz.1.4669': attribute type 4 has an invalid length. [ 225.404791][T15550] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4669'. [ 225.406263][ T3477] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.451996][ T3477] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.474542][ T3477] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.582020][T15560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4673'. [ 225.619066][T15560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4673'. [ 226.040591][T15590] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.047653][T15590] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.365493][T15614] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 226.525295][T15627] x_tables: duplicate entry at hook 2 [ 226.705370][T15639] netlink: 'syz.0.4713': attribute type 2 has an invalid length. [ 226.720739][T15639] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4713'. [ 227.340802][T15684] netlink: 'syz.2.4733': attribute type 1 has an invalid length. [ 227.466185][T15686] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 227.539731][T15686] bond2 (unregistering): Released all slaves [ 227.712070][T15708] netlink: 'syz.2.4746': attribute type 1 has an invalid length. [ 227.983245][T15729] Cannot find del_set index 49151 as target [ 228.246542][T15743] openvswitch: netlink: Multiple metadata blocks provided [ 228.589312][T15771] __nla_validate_parse: 4 callbacks suppressed [ 228.589332][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4778'. [ 228.860072][T15790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.867349][T15790] IPv6: NLM_F_CREATE should be set when creating new route [ 228.874631][T15790] IPv6: NLM_F_CREATE should be set when creating new route [ 228.922329][T15796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4790'. [ 229.507112][T15833] bridge6: entered promiscuous mode [ 229.525526][T15833] bridge6: entered allmulticast mode [ 230.081093][T15875] netlink: 'syz.2.4828': attribute type 4 has an invalid length. [ 230.173132][T15879] xfrm1: entered allmulticast mode [ 230.274595][T15887] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 231.283063][T15959] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 231.496278][T15974] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 231.763792][T15990] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 231.914951][T15999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4886'. [ 232.159222][T16016] ipt_REJECT: TCP_RESET invalid for non-tcp [ 232.197173][T16019] x_tables: duplicate underflow at hook 2 [ 232.239713][T16024] ipt_REJECT: TCP_RESET invalid for non-tcp [ 232.575467][T16046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4909'. [ 232.694440][T16054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4911'. [ 232.783820][T16058] netlink: 'syz.4.4915': attribute type 2 has an invalid length. [ 233.258570][T16095] openvswitch: netlink: Message has 1 unknown bytes. [ 233.276334][T16095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.411707][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4938'. [ 233.521769][T16108] openvswitch: netlink: Missing valid actions attribute. [ 233.543206][T16108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.715935][T16126] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.4948'. [ 233.871621][T16130] veth3: entered promiscuous mode [ 233.876778][T16130] veth3: entered allmulticast mode [ 233.892032][T16138] netlink: 'syz.2.4955': attribute type 12 has an invalid length. [ 233.905758][T16138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4955'. [ 234.037632][T16144] netlink: 'syz.2.4959': attribute type 2 has an invalid length. [ 234.180283][T16154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.651045][T16187] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4979'. [ 235.095529][T16223] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 235.841805][T16276] netlink: zone id is out of range [ 235.863499][T16276] netlink: del zone limit has 4 unknown bytes [ 235.877084][T16279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5023'. [ 235.940599][T16284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5026'. [ 235.958302][T16285] netlink: 'syz.1.5025': attribute type 1 has an invalid length. [ 235.991086][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'. [ 236.076966][T16293] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.299348][T16305] openvswitch: netlink: Flow key attr not present in new flow. [ 236.650884][T16333] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 236.673343][T16333] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.709254][T16335] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 237.090248][T16364] netlink: 'syz.1.5065': attribute type 75 has an invalid length. [ 237.441432][T16387] lo: entered allmulticast mode [ 237.466524][T16387] lo: left allmulticast mode [ 237.538748][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 237.650232][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 237.737823][T16405] netlink: 'syz.4.5085': attribute type 21 has an invalid length. [ 237.757101][T16405] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.898860][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5092'. [ 237.944646][T16421] netlink: 'syz.2.5093': attribute type 24 has an invalid length. [ 238.492979][T16459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5111'. [ 239.350238][T16518] net_ratelimit: 1 callbacks suppressed [ 239.350262][T16518] openvswitch: netlink: Missing valid actions attribute. [ 239.399083][T16518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.468317][T16527] tipc: Invalid UDP bearer configuration [ 239.468368][T16527] tipc: Enabling of bearer rejected, failed to enable media [ 239.555737][T16530] netlink: 'syz.2.5147': attribute type 12 has an invalid length. [ 240.308551][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5169'. [ 240.632480][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 240.651199][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5181'. [ 241.197340][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5196'. [ 241.248682][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5196'. [ 241.426510][T16651] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5204'. [ 241.812402][T16677] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5217'. [ 241.888098][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 242.203888][T16700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5228'. [ 242.238141][T16700] Zero length message leads to an empty skb [ 242.281219][T16705] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5232'. [ 242.516385][T16718] netlink: 'syz.2.5237': attribute type 3 has an invalid length. [ 242.880441][T16737] Bluetooth: MGMT ver 1.23 [ 242.923133][ T12] tipc: Subscription rejected, illegal request [ 243.055344][T16751] netlink: 'syz.2.5253': attribute type 58 has an invalid length. [ 243.073829][T16751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5253'. [ 243.567464][T16783] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 243.588513][T16783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.259698][ T47] IPVS: starting estimator thread 0... [ 244.358138][T16833] IPVS: using max 31 ests per chain, 74400 per kthread [ 245.343610][T16905] tipc: Enabling of bearer rejected, failed to enable media [ 246.323480][T16971] __nla_validate_parse: 4 callbacks suppressed [ 246.323498][T16971] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5359'. [ 246.366126][T16971] xt_policy: neither incoming nor outgoing policy selected [ 246.385691][T16978] nftables ruleset with unbound set [ 246.456509][T16984] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 246.834343][T17010] netlink: 'syz.0.5377': attribute type 1 has an invalid length. [ 246.854439][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5377'. [ 246.864285][T17010] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5377'. [ 246.874701][T17010] netlink: 'syz.0.5377': attribute type 1 has an invalid length. [ 246.942449][T17016] tipc: Enabling of bearer rejected, failed to enable media [ 247.552059][ T5893] IPVS: starting estimator thread 0... [ 247.558742][T17052] IPVS: ip_vs_add_dest(): server weight less than zero [ 247.648430][T17053] IPVS: using max 27 ests per chain, 64800 per kthread [ 247.770327][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 248.197252][T17099] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 248.316280][T17110] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 248.369429][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.375531][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 248.394135][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5427'. [ 248.514909][T17122] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5431'. [ 249.125685][T17167] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5452'. [ 249.170908][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5453'. [ 249.323444][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5457'. [ 249.429904][T17180] team0: Port device team_slave_0 removed [ 249.918371][T17219] netlink: 'syz.1.5477': attribute type 1 has an invalid length. [ 250.249645][T17239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5487'. [ 250.728116][T17274] netlink: 'syz.1.5501': attribute type 2 has an invalid length. [ 251.101816][T17294] erspan0: left allmulticast mode [ 251.172867][T17294] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.180598][T17294] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.206350][T17294] bond0: left promiscuous mode [ 251.213691][T17294] bond_slave_0: left promiscuous mode [ 251.220188][T17294] bond_slave_1: left promiscuous mode [ 251.261215][T17305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.326869][T17294] wg1: left promiscuous mode [ 251.340124][T17294] wg1: left allmulticast mode [ 251.379053][T17294] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.595022][T17321] __nla_validate_parse: 1 callbacks suppressed [ 251.595038][T17321] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5524'. [ 251.953805][ T5893] IPVS: starting estimator thread 0... [ 251.963468][T17346] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 252.048224][T17348] IPVS: using max 30 ests per chain, 72000 per kthread [ 252.053569][T17355] netlink: 'syz.0.5540': attribute type 1 has an invalid length. [ 252.082203][T17358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5541'. [ 252.095065][T17358] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5541'. [ 252.108347][T17358] netlink: 'syz.4.5541': attribute type 6 has an invalid length. [ 252.128275][T17358] netlink: 'syz.4.5541': attribute type 5 has an invalid length. [ 252.152445][T17358] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5541'. [ 252.282417][T17366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.342203][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5548'. [ 252.953118][T17414] netlink: 'syz.2.5566': attribute type 178 has an invalid length. [ 254.488720][T17515] Bluetooth: MGMT ver 1.23 [ 255.066287][T17552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5635'. [ 255.320006][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5645'. [ 255.573785][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.580181][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.819514][T17610] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5664'. [ 256.343256][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 256.356063][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5676'. [ 256.582574][T17658] tipc: Started in network mode [ 256.609143][T17658] tipc: Node identity , cluster identity 4711 [ 256.622357][T17658] tipc: Failed to set node id, please configure manually [ 256.629858][T17658] tipc: Enabling of bearer rejected, failed to enable media [ 256.693027][T17666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5686'. [ 256.947582][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5695'. [ 257.191352][T17702] netlink: 'syz.2.5702': attribute type 32 has an invalid length. [ 257.199772][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5702'. [ 257.225701][T17699] veth5: entered allmulticast mode [ 257.277792][T17702] bond6: Setting coupled_control to off (0) [ 257.623337][T17724] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5713'. [ 258.053354][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5730'. [ 258.190300][T17767] nbd: must specify a size in bytes for the device [ 258.463962][T17787] netlink: 'syz.3.5744': attribute type 1 has an invalid length. [ 258.706053][T17798] sock: sock_set_timeout: `syz.3.5749' (pid 17798) tries to set negative timeout [ 259.158618][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 259.230372][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5767'. [ 259.262138][T17836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5769'. [ 259.593704][T17855] netlink: 'syz.0.5777': attribute type 142 has an invalid length. [ 259.924622][T17875] xt_hashlimit: size too large, truncated to 1048576 [ 259.927548][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'. [ 260.173823][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 261.704165][T17979] xt_limit: Overflow, try lower: 271964/0 [ 261.951887][T17994] __nla_validate_parse: 2 callbacks suppressed [ 261.951906][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5843'. [ 262.729099][T18045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5869'. [ 262.751605][T18046] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 262.995196][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 263.149623][T18073] tipc: Enabling of bearer rejected, media not registered [ 263.373576][T18077] syz.4.5884 (18077) used greatest stack depth: 16800 bytes left [ 263.401891][T18085] netlink: 'syz.0.5888': attribute type 7 has an invalid length. [ 263.438524][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5890'. [ 263.691932][T18103] atomic_op ffff888057251998 conn xmit_atomic 0000000000000000 [ 263.893767][T18119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5903'. [ 264.453221][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5920'. [ 264.903161][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5933'. [ 265.305701][T18205] netlink: 'syz.1.5943': attribute type 83 has an invalid length. [ 265.668540][T18234] delete_channel: no stack [ 266.270446][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5969'. [ 266.424198][T18274] netlink: 'syz.0.5973': attribute type 1 has an invalid length. [ 266.443952][T18274] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5973'. [ 266.465409][T18274] netlink: 'syz.0.5973': attribute type 1 has an invalid length. [ 266.476247][T18274] netlink: 'syz.0.5973': attribute type 8 has an invalid length. [ 266.484681][T18274] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5973'. [ 266.922370][T18303] netlink: 'syz.4.5987': attribute type 11 has an invalid length. [ 266.967744][T18307] __nla_validate_parse: 1 callbacks suppressed [ 266.967762][T18307] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5989'. [ 267.652277][T18342] xt_hashlimit: size too large, truncated to 1048576 [ 268.184994][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6022'. [ 268.226537][T18379] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 268.292310][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 268.868295][T18423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 268.899344][T18423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 268.927776][T18423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6045'. [ 269.079610][T18434] netlink: 'syz.3.6050': attribute type 1 has an invalid length. [ 269.171312][T18441] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6054'. [ 269.700550][T18479] netlink: 'syz.0.6073': attribute type 1 has an invalid length. [ 269.715521][T18479] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6073'. [ 269.728884][T18479] netlink: 'syz.0.6073': attribute type 1 has an invalid length. [ 269.762745][T18479] netlink: 'syz.0.6073': attribute type 8 has an invalid length. [ 269.787071][T18479] netlink: 606 bytes leftover after parsing attributes in process `syz.0.6073'. [ 270.854470][T18548] vlan2: entered promiscuous mode [ 270.863043][T18548] bridge0: entered promiscuous mode [ 271.581893][T18593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6128'. [ 272.609809][T18661] tipc: Started in network mode [ 272.619733][T18661] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 272.642137][T18661] tipc: Enabled bearer , priority 14 [ 272.717312][T18669] __nla_validate_parse: 3 callbacks suppressed [ 272.717329][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6163'. [ 272.926831][T18681] netlink: 'syz.1.6170': attribute type 1 has an invalid length. [ 272.966867][T18681] nbd: error processing sock list [ 273.343736][T18709] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 273.452621][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6189'. [ 273.485893][T18717] tipc: Invalid UDP bearer configuration [ 273.485952][T18717] tipc: Enabling of bearer rejected, failed to enable media [ 273.554077][T18724] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 273.576738][T18724] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.760574][ T5893] tipc: Node number set to 10463914 [ 273.797156][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6198'. [ 274.213948][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6211'. [ 274.241690][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6211'. [ 274.561173][T18789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6224'. [ 274.588487][T18789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6224'. [ 275.629210][T18859] tipc: Enabling of bearer rejected, failed to enable media [ 275.967726][T18881] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6267'. [ 276.000727][T18884] netlink: 'syz.1.6269': attribute type 25 has an invalid length. [ 276.133604][T18889] bridge3: entered promiscuous mode [ 276.145383][T18889] bridge3: entered allmulticast mode [ 276.163369][T18889] team0: Port device bridge3 added [ 276.407221][T18905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6280'. [ 276.618305][T18912] netlink: 'syz.1.6283': attribute type 1 has an invalid length. [ 277.764739][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'. [ 277.779631][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6316'. [ 278.175049][T19003] team0: Device vlan2 is already an upper device of the team interface [ 278.554458][T19033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.879735][T19058] netlink: 'syz.1.6353': attribute type 1 has an invalid length. [ 279.013964][T19066] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 279.067357][T19071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.234202][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6364'. [ 279.307609][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.343788][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.353832][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.089406][T19136] tipc: Enabling of bearer rejected, failed to enable media [ 280.208782][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.288242][ T5971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.906446][T19185] sit1: entered promiscuous mode [ 280.918322][T19185] sit1: entered allmulticast mode [ 280.926818][T19188] veth0_to_bond: entered allmulticast mode [ 280.950524][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'. [ 281.026445][T19193] xt_hashlimit: size too large, truncated to 1048576 [ 281.306756][T19211] netlink: 'syz.1.6426': attribute type 10 has an invalid length. [ 281.352763][T19211] team0: Port device dummy0 added [ 281.379668][T19211] netlink: 'syz.1.6426': attribute type 10 has an invalid length. [ 281.423967][T19211] team0: Port device dummy0 removed [ 281.442289][T19211] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.728471][ T67] wlan1: Trigger new scan to find an IBSS to join [ 281.772474][T19238] netlink: 'syz.4.6438': attribute type 3 has an invalid length. [ 281.866690][T19240] netlink: 'syz.1.6440': attribute type 1 has an invalid length. [ 282.573261][T19279] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6457'. [ 282.675897][T19289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6461'. [ 282.687387][T19291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6462'. [ 282.882148][T19300] tipc: Started in network mode [ 282.903236][T19300] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 282.925041][T19300] tipc: Enabling of bearer rejected, failed to enable media [ 283.039649][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 283.072653][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6472'. [ 283.083902][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6474'. [ 283.098409][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.173129][T19320] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6477'. [ 283.190419][T19320] netlink: 'syz.3.6477': attribute type 2 has an invalid length. [ 283.211966][T19320] netlink: 'syz.3.6477': attribute type 1 has an invalid length. [ 283.239396][T19323] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6478'. [ 283.422408][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6483'. [ 283.425556][T19334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.705740][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6489'. [ 283.745823][T19346] netlink: 'syz.2.6489': attribute type 5 has an invalid length. [ 283.760520][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6492'. [ 283.766680][T19350] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6491'. [ 283.784329][T19346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6489'. [ 284.042177][T19367] Bluetooth: MGMT ver 1.23 [ 284.696615][T19403] netlink: 'syz.3.6517': attribute type 29 has an invalid length. [ 284.716572][T19403] netlink: 'syz.3.6517': attribute type 29 has an invalid length. [ 284.760718][T19361] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.772885][ T67] wlan1: Trigger new scan to find an IBSS to join [ 285.249304][T19437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.002689][T19487] netlink: 'syz.0.6559': attribute type 1 has an invalid length. [ 287.094720][T19539] xt_hashlimit: size too large, truncated to 1048576 [ 287.203325][T19546] netlink: 'syz.0.6586': attribute type 11 has an invalid length. [ 287.732600][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 287.744186][ T67] wlan1: Trigger new scan to find an IBSS to join [ 288.345634][T19622] __nla_validate_parse: 9 callbacks suppressed [ 288.345652][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6621'. [ 288.388334][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6621'. [ 288.416649][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6621'. [ 288.435203][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6621'. [ 288.453985][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6621'. [ 288.650560][ T3477] wlan1: Creating new IBSS network, BSSID 2e:28:84:c3:11:86 [ 288.825223][T19652] validate_nla: 2 callbacks suppressed [ 288.825240][T19652] netlink: 'syz.4.6635': attribute type 3 has an invalid length. [ 289.053558][T19668] macvlan0: entered promiscuous mode [ 289.376858][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6654'. [ 289.390755][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6654'. [ 289.598634][T19705] xt_l2tp: v2 sid > 0xffff: 1114112 [ 289.606172][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6659'. [ 289.825085][T19721] bridge0: port 3(ipvlan2) entered blocking state [ 289.833499][T19721] bridge0: port 3(ipvlan2) entered disabled state [ 289.841054][T19721] ipvlan2: entered allmulticast mode [ 289.846635][T19721] bridge0: entered allmulticast mode [ 289.856266][T19721] ipvlan2: left allmulticast mode [ 289.869854][T19721] bridge0: left allmulticast mode [ 290.231730][T19743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6681'. [ 290.272441][T19747] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6682'. [ 290.311351][T19747] netlink: 'syz.0.6682': attribute type 1 has an invalid length. [ 290.332402][ T29] audit: type=1800 audit(1776917597.402:3): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6684" name="memory.events" dev="tmpfs" ino=6881 res=0 errno=0 [ 290.385148][ T29] audit: type=1804 audit(1776917597.412:4): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6684" name="/newroot/1371/memory.events" dev="tmpfs" ino=6881 res=1 errno=0 [ 290.768025][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.364627][T19879] bond7: Invalid ad_actor_system MAC address. [ 292.371384][T19879] bond7: option ad_actor_system: invalid value (1) [ 292.390937][T19879] bond7 (unregistering): Released all slaves [ 293.077660][T19923] netlink: 'syz.2.6764': attribute type 1 has an invalid length. [ 293.222256][T19931] tipc: Started in network mode [ 293.241415][T19931] tipc: Node identity e0000001, cluster identity 4711 [ 293.257832][T19931] tipc: Enabling of bearer rejected, failed to enable media [ 293.267511][T19935] netlink: 'syz.2.6770': attribute type 2 has an invalid length. [ 293.284414][T19939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.398976][T19943] __nla_validate_parse: 6 callbacks suppressed [ 293.398994][T19943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6773'. [ 293.471063][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6777'. [ 293.929747][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6790'. [ 294.159532][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6799'. [ 294.740901][T20038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6819'. [ 295.664464][T20088] netlink: 'syz.2.6843': attribute type 32 has an invalid length. [ 295.688262][T20088] netlink: 776 bytes leftover after parsing attributes in process `syz.2.6843'. [ 295.792706][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6847'. [ 296.057050][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6854'. [ 296.274703][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6859'. [ 296.433554][T20131] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6865'. [ 296.919813][T20162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 297.191431][T20178] pim6reg527: entered allmulticast mode [ 298.301527][T20232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.641436][T20256] __nla_validate_parse: 1 callbacks suppressed [ 298.641455][T20256] netlink: 640 bytes leftover after parsing attributes in process `syz.4.6924'. [ 298.695751][T20256] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 299.901568][T20326] netlink: 'syz.4.6956': attribute type 10 has an invalid length. [ 299.933342][T20326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.970892][T20331] netlink: 'syz.4.6956': attribute type 10 has an invalid length. [ 299.973807][T20326] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 299.990503][T20331] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6956'. [ 300.003554][T20329] netlink: 'syz.0.6958': attribute type 3 has an invalid length. [ 300.013898][T20331] batadv0: entered promiscuous mode [ 300.019854][T20331] batadv0: entered allmulticast mode [ 300.049374][T20331] bond0: (slave batadv0): Releasing backup interface [ 300.129876][T20331] bridge0: port 1(batadv0) entered blocking state [ 300.145947][T20331] bridge0: port 1(batadv0) entered disabled state [ 300.185775][T20340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6963'. [ 300.219641][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 300.229106][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 300.297645][T20345] netlink: 'syz.3.6964': attribute type 1 has an invalid length. [ 300.319271][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6964'. [ 300.332915][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6964'. [ 300.376283][T20345] netlink: 'syz.3.6964': attribute type 2 has an invalid length. [ 300.401414][T20345] netlink: 'syz.3.6964': attribute type 2 has an invalid length. [ 300.422902][T20345] netlink: 'syz.3.6964': attribute type 2 has an invalid length. [ 301.049927][T20396] ipvlan2: entered promiscuous mode [ 301.176359][T20403] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6994'. [ 301.195029][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6994'. [ 301.216528][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6994'. [ 301.239098][T20404] tipc: Enabled bearer , priority 11 [ 301.424350][T20421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7002'. [ 301.554003][T20427] netlink: 'syz.1.7006': attribute type 4 has an invalid length. [ 301.683279][T20434] vlan2: entered promiscuous mode [ 301.695781][T20434] gretap0: entered promiscuous mode [ 302.359230][ T5893] tipc: Node number set to 3758096385 [ 302.460962][T20488] netlink: 'syz.3.7035': attribute type 1 has an invalid length. [ 302.615561][T20499] netlink: 'syz.4.7040': attribute type 3 has an invalid length. [ 302.658572][T20499] netlink: 766 bytes leftover after parsing attributes in process `syz.4.7040'. [ 303.141630][T20531] vlan2: entered allmulticast mode [ 303.157640][T20531] bridge_slave_0: entered allmulticast mode [ 303.298682][T20544] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.397764][T20547] netlink: 'syz.3.7063': attribute type 29 has an invalid length. [ 303.428933][T20547] netlink: 'syz.3.7063': attribute type 29 has an invalid length. [ 303.990818][T20590] __nla_validate_parse: 1 callbacks suppressed [ 303.990835][T20590] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7083'. [ 304.022026][T20590] vlan2: entered allmulticast mode [ 304.033218][T20590] gretap0: entered allmulticast mode [ 304.045831][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7084'. [ 304.143941][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7086'. [ 304.595437][T20624] netlink: 'syz.0.7099': attribute type 1 has an invalid length. [ 304.620688][T20624] netlink: 'syz.0.7099': attribute type 2 has an invalid length. [ 304.640653][T20624] netlink: 'syz.0.7099': attribute type 1 has an invalid length. [ 304.653894][T20624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7099'. [ 304.954147][T20643] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 305.003660][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7111'. [ 305.028638][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7111'. [ 305.047785][T20648] netlink: 'syz.2.7111': attribute type 12 has an invalid length. [ 305.062759][T20648] netlink: 'syz.2.7111': attribute type 11 has an invalid length. [ 305.124590][T20651] vlan3: entered promiscuous mode [ 305.149308][T20651] geneve1: entered promiscuous mode [ 305.172609][T20651] vlan3: entered allmulticast mode [ 305.188678][T20651] geneve1: entered allmulticast mode [ 305.766389][T20691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.924177][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7138'. [ 306.128158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.766362][T20756] tipc: Enabling of bearer rejected, media not registered [ 306.934755][ T5971] IPVS: starting estimator thread 0... [ 306.940898][T20762] IPVS: ip_vs_edit_dest(): server weight less than zero [ 306.989830][T20768] sctp: [Deprecated]: syz.4.7170 (pid 20768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.989830][T20768] Use struct sctp_sack_info instead [ 307.042660][T20772] sctp: [Deprecated]: syz.4.7170 (pid 20772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.042660][T20772] Use struct sctp_sack_info instead [ 307.068856][T20765] IPVS: using max 29 ests per chain, 69600 per kthread [ 307.153150][T20778] xt_socket: unknown flags 0xe4 [ 308.058773][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7198'. [ 308.785536][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7219'. [ 309.280730][T20902] netlink: 'syz.4.7233': attribute type 10 has an invalid length. [ 309.313797][T20902] team0: Refused to change device type [ 310.126845][T20953] netlink: 'syz.0.7256': attribute type 2 has an invalid length. [ 310.166197][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7257'. [ 310.464366][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7268'. [ 310.594450][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7271'. [ 310.641767][T20984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7273'. [ 311.095627][T21008] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 311.739616][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7305'. [ 311.787025][T21053] macsec1: entered promiscuous mode [ 311.801703][T21053] bridge0: entered promiscuous mode [ 311.810122][T21053] macsec1: entered allmulticast mode [ 311.818847][T21053] bridge0: entered allmulticast mode [ 311.825788][T21053] bridge0: port 2(macsec1) entered blocking state [ 311.843410][T21053] bridge0: port 2(macsec1) entered disabled state [ 311.870008][T21053] bridge0: left allmulticast mode [ 311.904257][ T5893] bridge0: left promiscuous mode [ 311.992336][T21068] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.319914][T21090] smc: net device team0 applied user defined pnetid SYZ2 [ 312.700732][T21114] netlink: 'syz.4.7338': attribute type 11 has an invalid length. [ 312.711633][T21114] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.7338'. [ 312.728637][T21119] xt_hashlimit: size too large, truncated to 1048576 [ 312.832267][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7341'. [ 313.045254][T21136] xt_hashlimit: size too large, truncated to 1048576 [ 313.406076][T21158] pimreg3: entered allmulticast mode [ 313.426359][T21160] netlink: 'syz.2.7354': attribute type 3 has an invalid length. [ 313.635568][T21174] Bluetooth: MGMT ver 1.23 [ 313.807788][T21185] netlink: 'syz.3.7368': attribute type 13 has an invalid length. [ 313.846598][T21185] veth0_macvtap: left promiscuous mode [ 313.924822][T21185] macvtap0: entered allmulticast mode [ 313.955108][T21185] macvtap0: refused to change device tx_queue_len [ 314.011865][T21196] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 314.214885][T21208] xt_l2tp: v2 tid > 0xffff: 1114244 [ 315.095430][T21267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7408'. [ 315.132309][T21269] raw_sendmsg: syz.2.7409 forgot to set AF_INET. Fix it! [ 315.453949][T21289] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7419'. [ 315.880923][T21320] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 316.285302][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7447'. [ 316.306611][ T29] audit: type=1804 audit(1776917623.382:5): pid=21348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7448" name="/newroot/1534/cgroup.controllers" dev="tmpfs" ino=7698 res=1 errno=0 [ 316.387545][ T29] audit: type=1800 audit(1776917623.382:6): pid=21348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7448" name="cgroup.controllers" dev="tmpfs" ino=7698 res=0 errno=0 [ 316.609400][T21364] netlink: 'syz.3.7456': attribute type 10 has an invalid length. [ 316.626472][T21366] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 316.635382][T21366] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7457'. [ 316.646683][T21366] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7457'. [ 316.656877][T21366] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 316.658800][T21364] veth0_vlan: left promiscuous mode [ 316.665611][T21366] netlink: 618 bytes leftover after parsing attributes in process `syz.0.7457'. [ 316.686217][T21364] veth0_vlan: entered promiscuous mode [ 316.697437][T21364] team0: Device veth0_vlan failed to register rx_handler [ 317.021500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.029004][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498028][T21406] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7475'. [ 317.534524][T21406] netlink: 'syz.2.7475': attribute type 2 has an invalid length. [ 318.181595][T21445] team0: Cannot enslave team device to itself [ 318.277284][T21452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7497'. [ 318.401761][T21458] sctp: [Deprecated]: syz.0.7500 (pid 21458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.401761][T21458] Use struct sctp_sack_info instead [ 318.604235][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7508'. [ 318.759778][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7512'. [ 318.791241][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7512'. [ 319.202179][ T5823] block nbd0: Receive control failed (result -32) [ 319.302185][T21518] netem: unknown loss type 0 [ 319.312174][T21518] netem: change failed [ 319.612471][T21538] netlink: 'syz.3.7538': attribute type 28 has an invalid length. [ 319.621394][T21538] netlink: 'syz.3.7538': attribute type 3 has an invalid length. [ 320.533919][T21589] __nla_validate_parse: 6 callbacks suppressed [ 320.533938][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7563'. [ 320.850513][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.323660][T21643] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 321.417338][T21646] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7590'. [ 321.483257][T21651] netlink: 'syz.4.7592': attribute type 1 has an invalid length. [ 321.722455][T21669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7602'. [ 321.823999][T21673] tipc: New replicast peer: 172.20.20.187 [ 321.834649][T21673] tipc: Enabled bearer , priority 10 [ 321.848458][T21671] netlink: 'syz.2.7603': attribute type 9 has an invalid length. [ 321.893481][T21677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7604'. [ 322.125166][T21686] netlink: 'syz.2.7610': attribute type 9 has an invalid length. [ 322.362712][T21705] netlink: 'syz.2.7620': attribute type 83 has an invalid length. [ 322.958107][ T5971] tipc: Node number set to 1 [ 323.286610][T21763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7648'. [ 323.336859][T21766] tipc: Started in network mode [ 323.352708][T21766] tipc: Node identity ac14140f, cluster identity 4711 [ 323.370608][T21766] tipc: New replicast peer: 172.20.20.187 [ 323.395777][T21766] tipc: Enabled bearer , priority 10 [ 323.726995][T21793] netlink: 'syz.2.7661': attribute type 4 has an invalid length. [ 324.370968][T21843] netlink: 'syz.3.7683': attribute type 1 has an invalid length. [ 324.383629][T21843] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7683'. [ 324.394756][ T5971] tipc: Node number set to 2886997007 [ 324.407259][T21843] netlink: 'syz.3.7683': attribute type 1 has an invalid length. [ 324.418213][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7683'. [ 324.679186][T21859] netlink: 'syz.3.7691': attribute type 3 has an invalid length. [ 324.786118][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7695'. [ 324.867713][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7697'. [ 325.061958][T21887] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7704'. [ 325.365011][T21903] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 325.545124][T21914] team0: No ports can be present during mode change [ 326.345878][T21976] netem: incorrect ge model size [ 326.357251][T21976] netem: change failed [ 326.592115][T21990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7754'. [ 326.629180][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7756'. [ 326.641013][T21994] netlink: 'syz.3.7756': attribute type 1 has an invalid length. [ 326.660617][T21994] netlink: 'syz.3.7756': attribute type 2 has an invalid length. [ 326.830931][T22006] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.840716][T22006] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.096966][T22027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7771'. [ 327.109867][T22027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7771'. [ 327.206220][T22032] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7772'. [ 327.448276][T22048] netlink: 'syz.3.7781': attribute type 3 has an invalid length. [ 327.467734][T22048] netlink: 'syz.3.7781': attribute type 1 has an invalid length. [ 327.490761][T22048] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7781'. [ 327.522740][T22048] NCSI netlink: No device for ifindex 813332851 [ 327.803142][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7789'. [ 327.841926][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7789'. [ 327.949196][T22072] netlink: 'syz.3.7792': attribute type 1 has an invalid length. [ 327.980330][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7794'. [ 328.014177][T22072] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7792'. [ 328.028525][T22072] netlink: 'syz.3.7792': attribute type 1 has an invalid length. [ 328.061856][T22072] netlink: 'syz.3.7792': attribute type 8 has an invalid length. [ 329.481291][T22164] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 329.489968][T22164] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 329.665896][T22176] xt_hashlimit: size too large, truncated to 1048576 [ 330.753456][T22242] tap0: tun_chr_ioctl cmd 1074025676 [ 330.767566][T22242] tap0: owner set to 0 [ 330.811282][T22246] netlink: 'syz.2.7877': attribute type 19 has an invalid length. [ 330.874878][T22251] netlink: 'syz.1.7879': attribute type 2 has an invalid length. [ 332.251495][T22338] __nla_validate_parse: 11 callbacks suppressed [ 332.251514][T22338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7922'. [ 332.308130][T22338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7922'. [ 332.495402][T22350] ipvlan2: entered allmulticast mode [ 332.509195][T22351] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7928'. [ 332.518409][T22350] batadv_slave_1: entered allmulticast mode [ 332.536495][T22350] batman_adv: batadv0: Adding interface: ipvlan2 [ 332.555493][T22350] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.588115][T22350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.601856][T22350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.613582][T22350] batman_adv: batadv0: Interface activated: ipvlan2 [ 332.772599][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7934'. [ 332.797598][T22367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7934'. [ 333.630998][T22406] IPVS: persistence engine module ip_vs_pe_À not found [ 334.352083][T22466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7982'. [ 334.873795][T22501] netlink: 'syz.0.7999': attribute type 10 has an invalid length. [ 334.898431][T22503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8002'. [ 334.930951][T22501] team0: Port device dummy0 added [ 335.394950][T22528] xt_hashlimit: size too large, truncated to 1048576 [ 335.450445][T22529] –: renamed from vxcan1 [ 335.568062][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.212586][T22576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8035'. [ 336.755964][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8045'. [ 337.020728][T22607] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.8050'. [ 337.046244][T22607] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 337.205759][ T5971] hid (null): global environment stack underflow [ 337.235749][T22617] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 337.287511][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8057'. [ 337.296090][ T5971] hid-generic 0005:15C2:0004.0001: global environment stack underflow [ 337.297774][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8057'. [ 337.355102][ T5971] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed [ 337.365173][ T5971] hid-generic 0005:15C2:0004.0001: probe with driver hid-generic failed with error -22 [ 337.447727][T22630] netlink: 'syz.3.8060': attribute type 21 has an invalid length. [ 337.476076][T22630] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8060'. [ 337.930006][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8073'. [ 338.178184][T22669] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8078'. [ 338.923564][T22717] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 338.931600][T22717] syzkaller1: linktype set to 823 [ 339.061577][T22725] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8105'. [ 339.110658][T22729] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8107'. [ 339.477260][T22752] netlink: 'syz.2.8119': attribute type 4 has an invalid length. [ 339.516826][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8121'. [ 339.636594][T22761] tap0: tun_chr_ioctl cmd 1074025678 [ 339.652864][T22761] tap0: group set to 0 [ 339.832048][T22776] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8129'. [ 339.967596][T22785] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8135'. [ 340.281663][T22807] xt_hashlimit: size too large, truncated to 1048576 [ 340.449155][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.502842][T22812] bridge_slave_0 (unregistering): left allmulticast mode [ 340.510670][T22812] bridge_slave_0 (unregistering): left promiscuous mode [ 340.517949][T22812] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.853870][T22837] bridge0: port 2(bridge_slave_1) entered listening state [ 340.951081][T22842] netlink: 'syz.0.8158': attribute type 23 has an invalid length. [ 341.790438][T22905] veth0: entered promiscuous mode [ 341.800985][T22904] veth0: left promiscuous mode [ 342.285214][T22939] lo: entered allmulticast mode [ 342.873200][T22971] __nla_validate_parse: 2 callbacks suppressed [ 342.873218][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8220'. [ 343.089696][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8224'. [ 343.190029][T22988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8228'. [ 343.409563][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8235'. [ 343.436279][T23003] bridge_slave_1: left allmulticast mode [ 343.457119][T23003] bridge_slave_1: left promiscuous mode [ 343.473481][T23003] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.625480][T23015] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.8240'. [ 343.796516][T23025] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8245'. [ 343.862760][T23030] netlink: 'syz.3.8247': attribute type 83 has an invalid length. [ 344.181875][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8255'. [ 344.194146][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8255'. [ 344.204364][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8255'. [ 344.454829][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8264'. [ 344.656952][T23077] netlink: 'syz.2.8269': attribute type 4 has an invalid length. [ 344.667528][T23078] blkio.reset_stats is deprecated [ 345.094804][T23106] netlink: 'syz.4.8285': attribute type 1 has an invalid length. [ 345.122047][T23106] netlink: 'syz.4.8285': attribute type 7 has an invalid length. [ 345.136131][T23106] netlink: 'syz.4.8285': attribute type 8 has an invalid length. [ 345.319675][T23118] bridge0: port 1(batadv0) entered disabled state [ 345.402698][T23118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.317239][T23182] vlan4: entered promiscuous mode [ 346.329593][T23182] bridge0: entered promiscuous mode [ 346.391490][T23181] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 347.521807][T23261] netlink: 'syz.0.8358': attribute type 3 has an invalid length. [ 347.530270][T23261] netlink: 'syz.0.8358': attribute type 3 has an invalid length. [ 347.961348][T23285] macvlan0: left promiscuous mode [ 348.004901][T23285] netlink: 'syz.3.8370': attribute type 2 has an invalid length. [ 348.577238][T23315] __nla_validate_parse: 14 callbacks suppressed [ 348.577258][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8383'. [ 348.598391][T23315] block nbd1: Unsupported socket: should be TCP or UNIX. [ 348.865907][T23335] netlink: 'syz.2.8393': attribute type 9 has an invalid length. [ 349.343398][T23369] vcan0: tx address claim with dlc 0 [ 349.550812][T23382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8414'. [ 349.568546][T23385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8415'. [ 349.699164][T23392] netlink: 'syz.0.8420': attribute type 4 has an invalid length. [ 349.717218][T23392] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8420'. [ 349.720318][T23393] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8419'. [ 349.743616][T23392] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.8420'. [ 350.097131][T23415] netlink: 'syz.2.8431': attribute type 1 has an invalid length. [ 350.137476][T23415] netlink: 'syz.2.8431': attribute type 2 has an invalid length. [ 350.146511][T23415] netlink: 'syz.2.8431': attribute type 1 has an invalid length. [ 350.152862][T23422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8433'. [ 350.155256][T23415] netlink: 'syz.2.8431': attribute type 3 has an invalid length. [ 350.193514][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8431'. [ 350.324053][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8438'. [ 350.424837][T23432] bond7: entered promiscuous mode [ 350.616460][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8448'. [ 351.815654][T23526] netlink: 'syz.1.8479': attribute type 25 has an invalid length. [ 352.216983][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 352.495854][T23570] erspan0: entered promiscuous mode [ 352.714498][T23578] tun0: tun_chr_ioctl cmd 1074025675 [ 352.745229][T23578] tun0: persist disabled [ 354.077261][T23671] __nla_validate_parse: 5 callbacks suppressed [ 354.077279][T23671] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8547'. [ 354.115896][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8547'. [ 354.259915][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8551'. [ 354.459714][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8557'. [ 354.730449][T23712] ip6gre0: Master is either lo or non-ether device [ 354.876093][T23723] netlink: set zone limit has 4 unknown bytes [ 354.885517][T23723] netlink: zone id is out of range [ 354.885903][T23726] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8573'. [ 354.891147][T23723] netlink: zone id is out of range [ 355.031499][T23732] validate_nla: 1 callbacks suppressed [ 355.031518][T23732] netlink: 'syz.0.8576': attribute type 30 has an invalid length. [ 355.068394][T23735] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8577'. [ 355.078190][T23735] openvswitch: netlink: Message has 5 unknown bytes. [ 355.290863][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8583'. [ 355.307766][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8583'. [ 355.333677][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8585'. [ 355.355900][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8585'. [ 357.209566][T23860] macvlan2: entered allmulticast mode [ 357.227856][T23860] hsr0: entered allmulticast mode [ 357.240232][T23860] hsr_slave_0: entered allmulticast mode [ 357.261249][T23860] hsr_slave_1: entered allmulticast mode [ 357.271382][T23860] hsr0: entered promiscuous mode [ 357.640648][T23886] veth0: entered promiscuous mode [ 357.650067][T23886] veth0: left promiscuous mode [ 357.772017][T23896] netlink: 'syz.0.8654': attribute type 33 has an invalid length. [ 357.812197][T23896] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 357.882198][T23896] bond6 (unregistering): Released all slaves [ 359.539822][T23998] __nla_validate_parse: 8 callbacks suppressed [ 359.539839][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8703'. [ 359.564671][T23998] vlan1: entered allmulticast mode [ 359.576123][T23998] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 359.713654][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8707'. [ 359.794078][T23993] nbd1: detected capacity change from 0 to 63 [ 359.828067][ T5823] block nbd1: Receive control failed (result -104) [ 359.829417][ T5819] block nbd1: Receive control failed (result -32) [ 360.693096][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8735'. [ 361.549284][T24128] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 361.609254][T24131] netlink: 'syz.0.8759': attribute type 8 has an invalid length. [ 361.617386][T24131] sch_fq: defrate 0 ignored. [ 361.796327][T24147] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.8764'. [ 361.935211][T24156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8768'. [ 362.852713][T24216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8795'. [ 363.104603][T24233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8803'. [ 363.613623][T24267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8817'. [ 363.849169][T24287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8827'. [ 363.869897][T24287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8827'. [ 364.261977][T24311] h: entered promiscuous mode [ 365.626239][T24402] __nla_validate_parse: 2 callbacks suppressed [ 365.626258][T24402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8883'. [ 365.649967][T24404] netlink: 'syz.1.8882': attribute type 14 has an invalid length. [ 365.728214][ T3477] wlan1: Trigger new scan to find an IBSS to join [ 366.403616][T24454] tipc: Started in network mode [ 366.418144][T24454] tipc: Node identity bbbbbb01, cluster identity 4711 [ 366.436069][T24454] tipc: Enabled bearer , priority 10 [ 367.485569][T24526] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.553531][ T5892] tipc: Node number set to 3149642497 [ 367.749968][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8948'. [ 367.769790][T24543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8948'. [ 367.788640][T24543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8948'. [ 367.823448][T24545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8949'. [ 368.688982][ T35] wlan1: Trigger new scan to find an IBSS to join [ 368.717534][T24600] erspan0: entered promiscuous mode [ 368.723380][T24604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8977'. [ 368.790882][ T5819] block nbd2: Receive control failed (result -32) [ 368.917408][T24611] netlink: 54 bytes leftover after parsing attributes in process `syz.0.8980'. [ 368.942852][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8980'. [ 369.462357][T24648] gtp1: entered promiscuous mode [ 369.469859][T24648] gtp1: entered allmulticast mode [ 369.739864][T24665] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9006'. [ 369.749491][T24665] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9006'. [ 371.454450][T24768] __nla_validate_parse: 3 callbacks suppressed [ 371.454469][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9054'. [ 371.482234][T24768] bond0: entered promiscuous mode [ 371.487476][T24768] bond_slave_0: entered promiscuous mode [ 371.496358][T24768] bond_slave_1: entered promiscuous mode [ 371.505383][T24768] bond0: left promiscuous mode [ 371.511454][T24768] bond_slave_0: left promiscuous mode [ 371.517208][T24768] bond_slave_1: left promiscuous mode [ 371.681892][T24774] bond0: entered promiscuous mode [ 371.691075][T24774] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 371.702889][T24774] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 371.728199][ T12] wlan1: Trigger new scan to find an IBSS to join [ 371.735274][T24774] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 371.753278][T24774] bond0: left promiscuous mode [ 372.130259][T24792] block nbd3: Unsupported socket: should be TCP or UNIX. [ 372.330106][ T46] tipc: Subscription rejected, illegal request [ 372.613657][T24819] sch_fq: defrate 0 ignored. [ 372.621279][ T46] wlan1: Creating new IBSS network, BSSID a6:67:20:67:a9:ba [ 372.854083][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9084'. [ 373.625407][T24861] sctp: [Deprecated]: syz.1.9099 (pid 24861) Use of int in maxseg socket option. [ 373.625407][T24861] Use struct sctp_assoc_value instead [ 373.945538][T24872] netlink: 'syz.0.9105': attribute type 83 has an invalid length. [ 374.019693][T24878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9107'. [ 374.059798][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9107'. [ 374.118482][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9107'. [ 374.147360][T24882] netlink: 'syz.0.9110': attribute type 1 has an invalid length. [ 374.180549][T24882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9110'. [ 374.228405][T24882] netlink: 'syz.0.9110': attribute type 1 has an invalid length. [ 374.248288][T24882] netlink: 'syz.0.9110': attribute type 8 has an invalid length. [ 374.265692][T24882] netlink: 582 bytes leftover after parsing attributes in process `syz.0.9110'. [ 374.301866][T24889] netlink: 'syz.3.9113': attribute type 1 has an invalid length. [ 374.333984][T24889] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9113'. [ 374.364826][T24889] netlink: 'syz.3.9113': attribute type 1 has an invalid length. [ 374.404444][T24889] netlink: 'syz.3.9113': attribute type 8 has an invalid length. [ 374.437714][T24889] netlink: 582 bytes leftover after parsing attributes in process `syz.3.9113'. [ 374.477246][T24889] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9113'. [ 375.123015][T24925] netlink: 'syz.0.9130': attribute type 6 has an invalid length. [ 375.413595][T24938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.434071][T24938] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 375.460599][T24938] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 375.787589][T24953] veth1_macvtap: left promiscuous mode [ 375.917234][T24957] netlink: 'syz.4.9148': attribute type 1 has an invalid length. [ 376.157462][T24971] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.225738][T24973] sctp: [Deprecated]: syz.1.9154 (pid 24973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.225738][T24973] Use struct sctp_sack_info instead [ 376.664533][T24998] __nla_validate_parse: 2 callbacks suppressed [ 376.664553][T24998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9167'. [ 376.712636][T24998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9167'. [ 376.732833][T24998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9167'. [ 376.769934][T24998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9167'. [ 376.800072][T24998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9167'. [ 376.832809][T24998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9167'. [ 377.876735][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9192'. [ 378.384726][T25064] syzkaller1: entered promiscuous mode [ 378.398586][T25064] syzkaller1: entered allmulticast mode [ 378.455734][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.057261][T25107] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9214'. [ 379.078010][T25107] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9214'. [ 379.185349][T25112] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 379.631865][T25141] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.9230'. [ 379.807572][T25154] netlink: 'syz.4.9235': attribute type 30 has an invalid length. [ 379.846332][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.860235][T25154] netlink: 'syz.4.9235': attribute type 30 has an invalid length. [ 379.872104][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.890822][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.922122][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.940105][ T5819] Bluetooth: hci4: link tx timeout [ 379.947738][ T5819] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 379.963412][ T5823] Bluetooth: hci4: link tx timeout [ 379.968775][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.200692][T25236] veth0: entered promiscuous mode [ 381.210440][T25235] veth0: left promiscuous mode [ 381.411293][T25242] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.792953][T25261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.968099][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 382.031076][T25272] __nla_validate_parse: 10 callbacks suppressed [ 382.031095][T25272] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9289'. [ 382.212608][T25278] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.9293'. [ 382.220052][T25281] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.9295'. [ 382.828901][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9313'. [ 383.409529][T25353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 383.523174][T25361] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9330'. [ 383.609608][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9332'. [ 383.619440][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9332'. [ 383.670211][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9333'. [ 384.045175][T25393] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9345'. [ 384.208670][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.308480][T25405] syzkaller1: entered promiscuous mode [ 384.323713][T25405] syzkaller1: entered allmulticast mode [ 384.356804][T25411] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.9354'. [ 385.305541][T25462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.799981][T25505] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 386.188173][T25531] netlink: 'syz.3.9411': attribute type 4 has an invalid length. [ 386.540483][T25558] netlink: 'syz.1.9422': attribute type 1 has an invalid length. [ 386.715887][ T29] audit: type=1800 audit(1776917693.792:7): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9423" name="memory.events" dev="tmpfs" ino=9527 res=0 errno=0 [ 387.562151][T25611] __nla_validate_parse: 10 callbacks suppressed [ 387.562171][T25611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9445'. [ 387.921248][T25631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9455'. [ 388.505061][T25652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 388.574770][T25652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 388.683630][T25664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.020596][T25677] netlink: 'syz.4.9477': attribute type 39 has an invalid length. [ 389.813356][T25717] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9495'. [ 389.973134][ T2180] block nbd1: Connection timed out, retrying (0/2 alive) [ 389.981683][ T2180] block nbd1: Connection timed out, retrying (0/2 alive) [ 389.991328][ T25] block nbd1: Dead connection, failed to find a fallback [ 390.004963][ T2180] block nbd1: Connection timed out, retrying (0/2 alive) [ 390.012998][ T25] block nbd1: shutting down sockets [ 390.018896][ T2180] block nbd1: Connection timed out, retrying (0/2 alive) [ 390.027736][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.040948][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 390.049162][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.058301][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 390.066933][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.076043][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 390.083970][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.093074][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 390.102439][ T5827] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.112681][ T5827] Buffer I/O error on dev nbd1, logical block 0, async page read [ 390.121080][ T5827] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.131399][ T5827] Buffer I/O error on dev nbd1, logical block 1, async page read [ 390.139658][ T5827] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.149021][ T5827] Buffer I/O error on dev nbd1, logical block 2, async page read [ 390.156893][ T5827] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.166097][ T5827] Buffer I/O error on dev nbd1, logical block 3, async page read [ 390.178024][ T5827] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.187072][ T5827] Buffer I/O error on dev nbd1, logical block 0, async page read [ 390.196568][ T5827] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 390.205741][ T5827] Buffer I/O error on dev nbd1, logical block 1, async page read [ 390.218555][ T5827] ldm_validate_partition_table(): Disk read failed. [ 390.227393][ T5827] Dev nbd1: unable to read RDB block 0 [ 390.235290][ T5827] nbd1: unable to read partition table [ 390.313003][ T5827] ldm_validate_partition_table(): Disk read failed. [ 390.342673][ T5827] Dev nbd1: unable to read RDB block 0 [ 390.363236][ T5827] nbd1: unable to read partition table [ 390.551637][T25746] syzkaller1: entered promiscuous mode [ 390.576798][T25746] syzkaller1: entered allmulticast mode [ 390.663183][T25760] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9513'. [ 390.674541][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9513'. [ 392.172004][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 392.525978][T25873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.564032][T25876] netlink: 'syz.3.9552': attribute type 10 has an invalid length. [ 392.583276][T25876] bridge_slave_1: left allmulticast mode [ 392.590299][T25876] bridge_slave_1: left promiscuous mode [ 392.601823][T25876] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.635304][T25876] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 392.656405][T25878] pim6reg1: entered promiscuous mode [ 392.662325][T25878] pim6reg1: entered allmulticast mode [ 392.823330][T25886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9557'. [ 392.905679][T25886] team0: Port device team_slave_0 removed [ 392.955635][T25893] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9560'. [ 393.486453][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9575'. [ 393.656705][T25934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9581'. [ 393.689510][T25934] netlink: 'syz.3.9581': attribute type 7 has an invalid length. [ 393.730827][T25934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9581'. [ 393.808136][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.901505][T25947] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9587'. [ 393.934208][T25947] netlink: ct family unspecified [ 394.271162][T25965] ip6erspan0: entered allmulticast mode [ 394.382098][T25976] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9601'. [ 394.603648][T25988] sctp: [Deprecated]: syz.4.9607 (pid 25988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.603648][T25988] Use struct sctp_sack_info instead [ 394.677365][T25995] syzkaller1: entered promiscuous mode [ 394.697126][T25995] syzkaller1: entered allmulticast mode [ 394.750498][T25997] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.821915][T26003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 395.235228][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9621'. [ 395.246763][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9621'. [ 395.740388][T26044] netlink: 'syz.4.9633': attribute type 11 has an invalid length. [ 396.196587][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9645'. [ 398.156256][T26194] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 398.206185][T26194] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.227547][T26194] gretap2: entered promiscuous mode [ 398.236466][T26194] gretap2: entered allmulticast mode [ 398.264114][T26199] __nla_validate_parse: 3 callbacks suppressed [ 398.264132][T26199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9702'. [ 398.316749][T26199] netlink: 'syz.4.9702': attribute type 7 has an invalid length. [ 398.344931][T26199] netlink: 'syz.4.9702': attribute type 8 has an invalid length. [ 398.354183][T26199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9702'. [ 398.513544][T26215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9710'. [ 398.524700][T26215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9710'. [ 398.912389][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9721'. [ 398.925109][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9720'. [ 398.969004][T26238] netlink: 'syz.2.9720': attribute type 7 has an invalid length. [ 398.988247][T26238] netlink: 'syz.2.9720': attribute type 8 has an invalid length. [ 399.011058][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9720'. [ 399.389538][T26269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9735'. [ 399.590721][T26274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9735'. [ 399.630172][T26274] nbd: device at index 64 is going down [ 399.949652][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 399.985076][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 400.054611][T26301] macvtap1: entered promiscuous mode [ 400.070191][T26301] macvtap1: entered allmulticast mode [ 400.078526][T26301] veth1_vlan: entered allmulticast mode [ 400.121046][T26301] macvtap2: entered promiscuous mode [ 400.136666][T26301] macvtap2: entered allmulticast mode [ 400.592033][T26332] veth0: entered promiscuous mode [ 400.619204][T26331] veth0: left promiscuous mode [ 400.681392][T26338] netlink: 67 bytes leftover after parsing attributes in process `syz.0.9765'. [ 402.162688][T26427] netlink: 'syz.1.9805': attribute type 1 has an invalid length. [ 402.245654][T26435] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 402.984621][T26479] netlink: 'syz.1.9831': attribute type 4 has an invalid length. [ 403.191556][T26494] vcan0: tx address claim with different name [ 403.372273][T26502] netlink: 'syz.0.9842': attribute type 2 has an invalid length. [ 403.401855][T26502] netlink: 'syz.0.9842': attribute type 2 has an invalid length. [ 403.421416][T26506] __nla_validate_parse: 2 callbacks suppressed [ 403.421432][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9843'. [ 403.590861][T26517] netlink: 'syz.4.9848': attribute type 9 has an invalid length. [ 403.615378][T26517] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9848'. [ 403.686979][T26523] netlink: 'syz.2.9852': attribute type 29 has an invalid length. [ 403.696123][T26524] netlink: 'syz.1.9851': attribute type 9 has an invalid length. [ 403.722589][T26523] netlink: 'syz.2.9852': attribute type 29 has an invalid length. [ 403.756505][T26523] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9852'. [ 403.772217][T26523] unsupported nla_type 58 [ 404.145375][T26544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.340656][T26557] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9866'. [ 404.823437][T26590] netlink: 'syz.3.9879': attribute type 10 has an invalid length. [ 405.316801][T26611] syzkaller1: entered promiscuous mode [ 405.325953][T26611] syzkaller1: entered allmulticast mode [ 405.744670][T26636] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9902'. [ 405.856189][T26642] atomic_op ffff888077011998 conn xmit_atomic 0000000000000000 [ 406.483266][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9921'. [ 407.405944][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9937'. [ 407.431414][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 407.455751][T26717] netlink: 'syz.4.9938': attribute type 1 has an invalid length. [ 407.487771][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 407.506521][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 407.515767][T26717] netlink: 'syz.4.9938': attribute type 1 has an invalid length. [ 407.914765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.256023][T26746] netlink: 'syz.2.9952': attribute type 15 has an invalid length. [ 408.508587][T26758] __nla_validate_parse: 1 callbacks suppressed [ 408.508607][T26758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9957'. [ 409.018884][T26782] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9965'. [ 409.250283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.261454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.270941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.279183][T26792] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.9970'. [ 409.279327][T26792] netlink: Unknown conntrack attr (type=2304, max=9) [ 409.298582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.308154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.317952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.911717][T26823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9984'. [ 409.965544][T26827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9984'. [ 410.272765][T26818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9983'. [ 410.442607][T26837] netlink: 'syz.3.9988': attribute type 1 has an invalid length. [ 410.563467][T26837] bond2: entered promiscuous mode [ 410.570186][T26837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.628129][T26839] bond2: (slave bridge5): making interface the new active one [ 410.691231][T26839] bridge5: entered promiscuous mode [ 410.724292][T26839] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 410.871665][T26848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9993'. [ 410.880801][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880291fb400: rx timeout, send abort [ 411.149322][T26855] netlink: 'syz.0.9995': attribute type 25 has an invalid length. [ 411.168924][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9995'. [ 411.371964][T26855] netlink: 'syz.0.9995': attribute type 25 has an invalid length. [ 411.375913][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.381440][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880291fb400: abort rx timeout. Force session deactivation [ 411.417191][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.441737][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9995'. [ 411.449443][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.481420][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.339610][T26882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10006'. [ 412.608366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.616936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.625475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.086811][T26894] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 413.181897][T26894] bond3: (slave lo): Enslaving as an active interface with an up link [ 413.474861][T26913] netlink: 'syz.2.10018': attribute type 1 has an invalid length. [ 413.694286][T26913] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.740042][T26920] bond9: (slave geneve3): making interface the new active one [ 413.752171][T26920] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 414.141234][T26944] netlink: 'syz.1.10030': attribute type 1 has an invalid length. [ 414.152739][T26945] trusted_key: syz.2.10031 sent an empty control message without MSG_MORE. [ 414.163705][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10030'. [ 414.355335][T26949] netlink: 'syz.3.10033': attribute type 9 has an invalid length. [ 414.383602][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10033'. [ 414.422797][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10034'. [ 414.431647][T26949] netlink: 'syz.3.10033': attribute type 9 has an invalid length. [ 414.442031][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10033'. [ 414.448079][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10034'. [ 414.717163][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10039'. [ 415.691062][T27002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.005314][T27014] nbd: nbd0 already in use [ 416.020237][T27014] block nbd0: NBD_DISCONNECT [ 416.032340][T27014] block nbd0: Send disconnect failed -32 [ 416.039691][T27016] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10062'. [ 416.054724][T27014] block nbd0: shutting down sockets [ 416.185199][T27021] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10065'. [ 416.210351][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.062849][ T3477] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 418.169569][T27078] netlink: 'syz.1.10087': attribute type 10 has an invalid length. [ 418.204932][T27078] bridge_slave_1: left allmulticast mode [ 418.221973][T27078] bridge_slave_1: left promiscuous mode [ 418.236134][T27078] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.307795][T27078] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 418.688323][ C0] net_ratelimit: 2 callbacks suppressed [ 418.688340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.702490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.710993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.777059][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10093'. [ 418.808458][T27084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.820939][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10093'. [ 419.315283][T27084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.543478][T27106] team0: Port device dummy0 removed [ 419.572355][T27107] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.591533][T27106] bond0: (slave bond_slave_0): Releasing backup interface [ 419.625484][T27106] bond0: (slave bond_slave_1): Releasing backup interface [ 419.653270][T27106] team0: Port device team_slave_1 removed [ 419.666725][T27106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.770440][T27084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.926712][T27084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.957738][T27120] netlink: 'syz.0.10103': attribute type 29 has an invalid length. [ 419.983800][T27123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.986260][T27120] netlink: 'syz.0.10103': attribute type 29 has an invalid length. [ 420.229557][ T67] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.253512][T27129] netlink: 51 bytes leftover after parsing attributes in process `syz.0.10108'. [ 420.259393][ T3477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.291626][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.324452][ T1140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.416318][T27133] veth0: entered promiscuous mode [ 420.425582][T27133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10111'. [ 420.452153][T27110] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.463617][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10110'. [ 420.474231][T27110] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 420.551559][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10110'. [ 420.935711][ T29] audit: type=1800 audit(1776917728.012:8): pid=27150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10117" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=10170 res=0 errno=0 [ 421.048447][T27155] veth0: entered promiscuous mode [ 421.075498][T27155] veth0: left promiscuous mode [ 421.370258][T27168] syzkaller1: entered promiscuous mode [ 421.376094][T27168] syzkaller1: entered allmulticast mode [ 422.154451][T27192] netlink: 'syz.2.10135': attribute type 1 has an invalid length. [ 423.144517][T27224] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10144'. [ 423.178279][T27224] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10144'. [ 423.208335][T27224] netlink: 33 bytes leftover after parsing attributes in process `syz.4.10144'. [ 423.621455][T27243] netlink: 'syz.3.10145': attribute type 51 has an invalid length. [ 423.663310][T27243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.688885][T27243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.700949][T27243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.709389][T27243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.448665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.458257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.669194][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10151'. [ 424.701629][T27264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.750101][T27310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.983965][T27325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.820748][T27355] netlink: 'syz.1.10193': attribute type 1 has an invalid length. [ 427.220399][T27378] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10203'. [ 427.301692][T27380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.464716][T27386] syzkaller1: entered promiscuous mode [ 427.486534][T27386] syzkaller1: entered allmulticast mode [ 427.528885][T27391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.733409][T27403] netlink: 'syz.0.10214': attribute type 15 has an invalid length. [ 427.766926][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10214'. [ 427.808286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.816850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.825427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.843107][T27403] netlink: 'syz.0.10214': attribute type 15 has an invalid length. [ 427.863883][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10216'. [ 427.883088][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10214'. [ 429.315583][T27476] netlink: 'syz.2.10243': attribute type 22 has an invalid length. [ 429.352330][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10243'. [ 429.387452][T27476] netlink: 'syz.2.10243': attribute type 22 has an invalid length. [ 429.419081][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10243'. [ 429.738637][T27492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10250'. [ 430.220603][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10259'. [ 430.515631][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 430.570364][T27535] netlink: 'syz.3.10268': attribute type 7 has an invalid length. [ 430.609270][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10267'. [ 430.651084][T27535] netlink: 'syz.3.10268': attribute type 7 has an invalid length. [ 430.851415][T27547] netlink: 'syz.2.10274': attribute type 1 has an invalid length. [ 430.973755][T27552] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 430.998146][T27552] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 431.012622][T27552] bond10: (slave ip6gre2): making interface the new active one [ 431.021954][T27552] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 431.567708][T27591] netlink: 'syz.2.10293': attribute type 15 has an invalid length. [ 431.592649][ T46] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 431.601876][T27591] netlink: 'syz.2.10293': attribute type 15 has an invalid length. [ 431.610784][ T46] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 431.625815][ T46] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 431.643484][ T46] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 431.755092][T27595] netlink: 'syz.3.10295': attribute type 1 has an invalid length. [ 431.840957][T27595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.053522][T27614] netlink: 'syz.1.10303': attribute type 21 has an invalid length. [ 432.332750][T27624] "syz.4.10307" (27624) uses obsolete ecb(arc4) skcipher [ 432.480649][T27614] netlink: 'syz.1.10303': attribute type 5 has an invalid length. [ 432.490278][T27614] __nla_validate_parse: 6 callbacks suppressed [ 432.490295][T27614] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10303'. [ 432.539296][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10309'. [ 432.555268][T27637] chnl_net:caif_netlink_parms(): no params data found [ 432.781974][T27643] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10312'. [ 432.809762][T27643] netlink: Conntrack attr has 3 unknown bytes [ 433.351230][T27661] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10320'. [ 433.490380][T27667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10324'. [ 434.256965][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10338'. [ 434.267733][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10338'. [ 434.486313][T27716] syzkaller1: entered promiscuous mode [ 434.492696][T27716] syzkaller1: entered allmulticast mode [ 434.502441][T27716] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 435.064574][T27725] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10347'. [ 435.371140][T27735] validate_nla: 1 callbacks suppressed [ 435.371160][T27735] netlink: 'syz.4.10352': attribute type 1 has an invalid length. [ 435.404626][T27735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10352'. [ 435.684020][T27751] netlink: 'syz.1.10357': attribute type 12 has an invalid length. [ 435.785869][T27755] netlink: 'syz.4.10358': attribute type 1 has an invalid length. [ 435.839174][T27755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.238191][T27780] syzkaller0: entered allmulticast mode [ 436.281668][T27780] syzkaller0 (unregistering): left allmulticast mode [ 436.376988][T27787] veth0: entered promiscuous mode [ 436.390102][T27786] veth0: left promiscuous mode [ 436.710925][T27806] syzkaller1: entered promiscuous mode [ 436.720979][T27806] syzkaller1: entered allmulticast mode [ 437.269044][T27839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10392'. [ 437.505754][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10397'. [ 437.771483][T27867] netlink: 'syz.2.10404': attribute type 1 has an invalid length. [ 437.807845][T27863] syzkaller0: entered promiscuous mode [ 437.816061][T27863] syzkaller0: entered allmulticast mode [ 439.583225][T27874] bond11: (slave gretap3): making interface the new active one [ 439.600521][T27874] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 439.640662][T27885] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 439.806363][T27902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.900318][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.297690][T27927] netlink: 'syz.4.10425': attribute type 1 has an invalid length. [ 440.323845][T27927] netlink: 'syz.4.10425': attribute type 1 has an invalid length. [ 440.596031][ T1140] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 440.598755][T27949] GUP no longer grows the stack in syz.2.10431 (27949): 200000003000-20000000a000 (200000001000) [ 440.649732][T27949] CPU: 1 UID: 0 PID: 27949 Comm: syz.2.10431 Not tainted syzkaller #0 PREEMPT(full) [ 440.649763][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.649782][T27949] Call Trace: [ 440.649791][T27949] [ 440.649800][T27949] dump_stack_lvl+0xe8/0x150 [ 440.649836][T27949] __get_user_pages+0x2453/0x29d0 [ 440.649886][T27949] ? __gup_longterm_locked+0xc4e/0x1630 [ 440.649922][T27949] ? down_read_killable+0x1bb/0x340 [ 440.649950][T27949] ? try_get_folio+0xec/0x650 [ 440.649981][T27949] __gup_longterm_locked+0xdcf/0x1630 [ 440.650035][T27949] gup_fast_fallback+0x1d82/0x22e0 [ 440.650095][T27949] ? __pfx_gup_fast_fallback+0x10/0x10 [ 440.650129][T27949] ? is_valid_gup_args+0x11f/0x200 [ 440.650158][T27949] ? get_user_pages_fast+0x4d/0xb0 [ 440.650186][T27949] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 440.650214][T27949] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 440.650246][T27949] iov_iter_get_pages2+0x5e/0xa0 [ 440.650269][T27949] __se_sys_vmsplice+0x7b3/0x1490 [ 440.650314][T27949] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 440.650348][T27949] ? __pfx_futex_wake+0x10/0x10 [ 440.650376][T27949] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.650461][T27949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.650484][T27949] do_syscall_64+0x15f/0xf80 [ 440.650511][T27949] ? trace_irq_disable+0x3b/0x140 [ 440.650534][T27949] ? clear_bhb_loop+0x40/0x90 [ 440.650559][T27949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.650585][T27949] RIP: 0033:0x7f1a6a39c819 [ 440.650609][T27949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.650629][T27949] RSP: 002b:00007f1a6b1fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 440.650657][T27949] RAX: ffffffffffffffda RBX: 00007f1a6a615fa0 RCX: 00007f1a6a39c819 [ 440.650672][T27949] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 440.650686][T27949] RBP: 00007f1a6a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 440.650699][T27949] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 440.650712][T27949] R13: 00007f1a6a616038 R14: 00007f1a6a615fa0 R15: 00007fff77f2a948 [ 440.650748][T27949] [ 440.971069][T27958] netlink: 'syz.2.10438': attribute type 26 has an invalid length. [ 441.008125][T27958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10438'. [ 441.020545][T27954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10436'. [ 441.108560][T27958] netlink: 'syz.2.10438': attribute type 26 has an invalid length. [ 441.122029][T27959] syzkaller1: entered promiscuous mode [ 441.127664][T27959] syzkaller1: entered allmulticast mode [ 441.161026][T27966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10440'. [ 441.168878][T27958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10438'. [ 441.213314][T27969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10440'. [ 441.255341][T27968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10441'. [ 441.503054][T27985] bridge0: port 2(vlan2) entered blocking state [ 441.519818][T27985] bridge0: port 2(vlan2) entered disabled state [ 441.526750][T27985] vlan2: entered allmulticast mode [ 441.533022][T27985] geneve0: entered allmulticast mode [ 442.376013][T28037] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 443.323629][T28076] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10487'. [ 443.401576][T28080] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10489'. [ 443.467617][T28084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.664620][T28001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.869293][T28110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10503'. [ 444.878891][T28110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10503'. [ 446.697464][T28207] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10531'. [ 448.213595][ T3477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.428994][T28276] netlink: 'syz.3.10563': attribute type 1 has an invalid length. [ 448.482754][T28279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10564'. [ 448.492659][T28279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10564'. [ 448.573117][T28282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 448.582511][T28276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.805265][T28294] xt_hashlimit: size too large, truncated to 1048576 [ 448.952978][T28304] netlink: 'syz.4.10574': attribute type 1 has an invalid length. [ 449.165936][T28310] bond6: (slave gretap2): making interface the new active one [ 449.175751][T28310] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 449.388579][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10585'. [ 449.415255][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10585'. [ 449.837130][T28346] syzkaller0: entered promiscuous mode [ 449.843381][T28346] syzkaller0: entered allmulticast mode [ 449.976562][T28361] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10597'. [ 452.068803][T28379] veth1_to_bond: entered allmulticast mode [ 452.074717][T28380] veth1_to_bond: left allmulticast mode [ 452.244973][T28396] netlink: 'syz.0.10608': attribute type 1 has an invalid length. [ 452.316513][T28396] bond7: entered promiscuous mode [ 452.322189][T28396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 452.433983][T28396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 452.470195][T28396] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 452.483428][T28396] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 452.504181][T28396] bond7: (slave ip6gre2): making interface the new active one [ 452.512427][T28396] ip6gre2: entered promiscuous mode [ 452.520868][T28396] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 452.561487][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10615'. [ 452.575243][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10615'. [ 452.603924][T28415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10616'. [ 452.631507][T28415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10616'. [ 453.081468][T28444] netlink: 'syz.4.10627': attribute type 1 has an invalid length. [ 453.195256][T28450] bond7: (slave gretap3): making interface the new active one [ 453.204149][T28450] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 453.674620][T28479] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10640'. [ 454.053475][T28496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10647'. [ 454.163550][T28503] syzkaller1: entered promiscuous mode [ 454.170920][T28503] syzkaller1: entered allmulticast mode [ 454.484383][T28474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.430769][T28570] netlink: 'syz.1.10675': attribute type 1 has an invalid length. [ 455.578991][T28575] bond1: (slave bridge4): making interface the new active one [ 455.600188][T28575] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 455.747788][T28584] netlink: 'syz.4.10680': attribute type 1 has an invalid length. [ 455.807142][T28584] bond8: (slave geneve2): making interface the new active one [ 455.816869][T28584] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 455.828881][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 455.846873][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 455.858746][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 455.867578][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 456.102142][T28603] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10687'. [ 456.759249][T28624] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.10694'. [ 457.521451][T28526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.785795][T28638] sock: sock_set_timeout: `syz.1.10698' (pid 28638) tries to set negative timeout [ 458.179081][T28658] syzkaller1: entered promiscuous mode [ 458.188956][T28660] "syz.1.10709" (28660) uses obsolete ecb(arc4) skcipher [ 458.202794][T28658] syzkaller1: entered allmulticast mode [ 458.347529][T28671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10714'. [ 458.920581][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10727'. [ 458.932691][T28698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10727'. [ 459.026251][T28702] tipc: Resetting bearer [ 459.040352][T28702] tipc: Resetting bearer [ 459.049901][T28704] netlink: 'syz.0.10729': attribute type 16 has an invalid length. [ 459.069692][T28704] netlink: 'syz.0.10729': attribute type 17 has an invalid length. [ 459.172417][T28704] sit0: left promiscuous mode [ 459.180769][T28705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10730'. [ 459.241424][T28704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.271503][T28713] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10733'. [ 459.409094][T28724] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10737'. [ 459.554446][T28730] netlink: 320 bytes leftover after parsing attributes in process `syz.0.10740'. [ 459.653445][T28738] 8021q: VLANs not supported on gre0 [ 459.947163][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10750'. [ 460.172029][T28718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.270597][T28759] only policy match revision 0 supported [ 460.270617][T28759] unable to load match [ 461.153078][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10773'. [ 461.853537][T28834] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10776'. [ 461.881015][T28840] netlink: 'syz.1.10780': attribute type 1 has an invalid length. [ 461.893936][T28834] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 461.996269][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10781'. [ 462.011102][T28840] bond2: entered promiscuous mode [ 462.016278][T28840] bond2: entered allmulticast mode [ 462.024060][T28840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.275392][T28844] macvlan2: entered promiscuous mode [ 464.281264][T28844] macvlan2: entered allmulticast mode [ 464.289070][T28844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.316817][T28847] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 464.495198][T28867] __nla_validate_parse: 1 callbacks suppressed [ 464.495220][T28867] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.10787'. [ 464.758270][T28875] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 464.781246][T28875] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 464.983159][T28886] sctp: [Deprecated]: syz.3.10795 (pid 28886) Use of int in maxseg socket option. [ 464.983159][T28886] Use struct sctp_assoc_value instead [ 465.135344][T28892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10798'. [ 466.831501][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10808'. [ 468.031662][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10809'. [ 468.056650][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10809'. [ 468.350658][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10817'. [ 468.547274][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10822'. [ 468.909754][T28967] netlink: 'syz.0.10825': attribute type 1 has an invalid length. [ 469.043343][T28967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.172153][T28970] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 469.201574][T28971] bond8: entered promiscuous mode [ 469.229770][T28971] bond8: entered allmulticast mode [ 469.296584][T28950] lec:lec_atm_close: lec0: Shut down! [ 470.083494][T29008] syzkaller0: entered promiscuous mode [ 470.105421][T29008] syzkaller0: entered allmulticast mode [ 470.254901][T28987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.485596][T29024] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10837'. [ 470.555084][T29028] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.10838'. [ 470.890371][T29042] netlink: 'syz.0.10842': attribute type 4 has an invalid length. [ 470.898558][T29042] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10842'. [ 472.274570][T29042] wlan1: mtu less than device minimum [ 472.501405][ T794] lec:lec_start_xmit: lec0:No lecd attached [ 472.647495][T29052] geneve1: entered promiscuous mode [ 473.261945][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10856'. [ 473.324860][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10856'. [ 474.113991][T29115] xt_hashlimit: size too large, truncated to 1048576 [ 474.628948][T29132] netlink: 'syz.4.10867': attribute type 39 has an invalid length. [ 474.667216][T29135] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 474.722586][T29135] xt_hashlimit: size too large, truncated to 1048576 [ 474.780328][T29143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10868'. [ 474.807274][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10868'. [ 474.993849][T29146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10869'. [ 476.186229][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10879'. [ 476.238874][T29192] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.246447][T29192] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.284506][T29190] netlink: 'syz.1.10879': attribute type 1 has an invalid length. [ 476.337399][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10882'. [ 476.456334][T29204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10884'. [ 476.468098][T29205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10883'. [ 477.727990][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 477.738564][ C1] lec:lec_tx_timeout: lec0 [ 477.743648][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.761370][T29224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.097706][ T3477] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 480.714561][T29331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.728598][T29331] batadv_slave_0: entered promiscuous mode [ 481.559654][T29377] netlink: 'syz.1.10921': attribute type 1 has an invalid length. [ 481.610746][T29377] bond4: entered promiscuous mode [ 481.631390][T29377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.687532][T29381] bond4: (slave bridge6): making interface the new active one [ 481.705414][T29381] bridge6: entered promiscuous mode [ 481.736475][T29381] bridge6: left promiscuous mode [ 481.987486][T29389] netlink: 'syz.0.10924': attribute type 1 has an invalid length. [ 482.015348][T29389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.045309][T29389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.053151][T29389] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 482.064438][T29389] bond9: (slave vcan0): Error -95 calling set_mac_address [ 482.112194][T29395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10926'. [ 482.320078][T29403] netlink: 'syz.0.10929': attribute type 1 has an invalid length. [ 482.329298][T29403] netlink: 'syz.0.10929': attribute type 4 has an invalid length. [ 482.337278][T29403] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10929'. [ 482.349054][T29403] netlink: 'syz.0.10929': attribute type 1 has an invalid length. [ 482.357069][T29403] netlink: 'syz.0.10929': attribute type 4 has an invalid length. [ 482.365056][T29403] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10929'. [ 482.488663][T29405] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.520968][T29405] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.531489][T29405] bond10: (slave xfrm2): The slave device specified does not support setting the MAC address [ 482.546768][T29405] bond10: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 482.561046][T29405] bond10: (slave xfrm2): making interface the new active one [ 482.570678][T29405] bond10: (slave xfrm2): Enslaving as an active interface with an up link [ 482.757915][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 482.766010][ C1] lec:lec_tx_timeout: lec0 [ 482.772492][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 482.875266][T29423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10940'. [ 482.966465][T29428] vlan2: entered allmulticast mode [ 482.971692][T29428] hsr0: entered allmulticast mode [ 482.976731][T29428] hsr_slave_0: entered allmulticast mode [ 482.981246][T29342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.982938][T29428] hsr_slave_1: entered allmulticast mode [ 483.215202][T29439] syzkaller1: entered promiscuous mode [ 483.234426][T29439] syzkaller1: entered allmulticast mode [ 483.813218][T29472] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 483.830693][T29472] bond11 (unregistering): Released all slaves [ 483.846301][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10960'. [ 484.109439][T29487] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 484.920668][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 484.930257][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 484.997746][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10980'. [ 485.028518][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10980'. [ 485.276570][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10985'. [ 485.487390][T29549] macvtap2: entered promiscuous mode [ 485.508907][T29549] macvtap2: entered allmulticast mode [ 485.589150][ T3477] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 485.620611][ T3477] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 485.654337][ T3477] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 485.716483][ T3477] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 485.790661][T29567] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 485.817200][T29567] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 485.846103][T29567] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 485.868782][T29567] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 487.211723][T29626] netlink: 'syz.0.11012': attribute type 6 has an invalid length. [ 487.502569][T29636] netlink: 'syz.3.11018': attribute type 29 has an invalid length. [ 487.546157][T29636] netlink: 'syz.3.11018': attribute type 29 has an invalid length. [ 487.785507][T29662] __nla_validate_parse: 7 callbacks suppressed [ 487.785525][T29662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11027'. [ 487.788096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 487.808823][ C1] lec:lec_tx_timeout: lec0 [ 487.813872][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 487.839102][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11027'. [ 487.972609][T29662] bridge6: port 1(vlan2) entered blocking state [ 487.989407][T29662] bridge6: port 1(vlan2) entered disabled state [ 488.005946][T29662] vlan2: entered allmulticast mode [ 488.023565][T29662] bridge6: entered allmulticast mode [ 488.070741][T29662] vlan2: left allmulticast mode [ 488.099835][T29662] bridge6: left allmulticast mode [ 488.836825][T29706] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11040'. [ 488.910864][T29686] lec:lec_atm_close: lec0: Shut down! [ 489.272049][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11048'. [ 489.289004][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11048'. [ 489.680552][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11053'. [ 489.724014][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11053'. [ 489.856112][T29751] bond11: entered promiscuous mode [ 490.946832][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11064'. [ 491.123817][T29782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.168891][T29781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.630128][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11071'. [ 492.038331][T29805] batadv_slave_0: entered promiscuous mode [ 492.079346][T29804] batadv_slave_0: left promiscuous mode [ 492.223844][T29811] bond5: entered promiscuous mode [ 492.238054][T29811] macvlan2: entered promiscuous mode [ 492.243486][T29811] macvlan2: entered allmulticast mode [ 492.256016][T29811] bond5: (slave macvlan2): Opening slave failed [ 492.311166][T29818] tipc: Enabled bearer , priority 0 [ 492.482575][T29818] syzkaller0: entered promiscuous mode [ 492.488778][T29818] syzkaller0: entered allmulticast mode [ 492.495206][T29818] tipc: Resetting bearer [ 492.630340][ T3477] tipc: Resetting bearer [ 492.739642][T29817] tipc: Resetting bearer [ 493.341900][T29870] netlink: 'syz.4.11089': attribute type 4 has an invalid length. [ 493.392913][T29871] netlink: 'syz.4.11089': attribute type 4 has an invalid length. [ 493.911872][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 493.919931][ C1] lec:lec_tx_timeout: lec0 [ 493.924516][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 494.837361][T29817] tipc: Disabling bearer [ 494.857824][T29855] netlink: 'syz.2.11084': attribute type 2 has an invalid length. [ 495.383523][T29895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.394660][T29895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.405824][T29895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.427243][T29895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.443977][T29895] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 495.464436][T29895] batman_adv: batadv0: Removing interface: ipvlan2 [ 495.674953][T29908] ------------[ cut here ]------------ [ 495.681751][T29908] saved_destroy == sock_map_destroy [ 495.681775][T29908] WARNING: net/core/sock_map.c:1667 at sock_map_destroy+0x66a/0x6e0, CPU#1: syz.3.11099/29908 [ 495.697371][T29908] Modules linked in: [ 495.703207][T29908] CPU: 1 UID: 0 PID: 29908 Comm: syz.3.11099 Not tainted syzkaller #0 PREEMPT(full) [ 495.712777][T29908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.722878][T29908] RIP: 0010:sock_map_destroy+0x66a/0x6e0 [ 495.728571][T29908] Code: 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 2c 37 94 f8 4d 8b 26 49 81 fc a0 ed 9c 89 0f 85 24 ff ff ff e8 e7 69 28 f8 90 <0f> 0b 90 e9 33 ff ff ff e8 d9 69 28 f8 4c 89 e7 31 f6 e8 df db 12 [ 495.748237][T29908] RSP: 0018:ffffc900055cfa40 EFLAGS: 00010293 [ 495.754323][T29908] RAX: ffffffff899cf409 RBX: dffffc0000000000 RCX: ffff88802cdb8000 [ 495.762373][T29908] RDX: 0000000000000000 RSI: ffffffff8e22a5d1 RDI: ffff88802cdb8000 [ 495.770396][T29908] RBP: ffffc900055cfaf0 R08: ffff888057259173 R09: 1ffff1100ae4b22e [ 495.778520][T29908] R10: dffffc0000000000 R11: ffffed100ae4b22f R12: ffffffff899ceda0 [ 495.786509][T29908] R13: ffff8880551a9b00 R14: ffffffff9a9e1258 R15: 0000000000000000 [ 495.794557][T29908] FS: 0000555557d92500(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 495.803543][T29908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.810197][T29908] CR2: 00007f802a7e9f00 CR3: 000000007fb62000 CR4: 00000000003526f0 [ 495.818215][T29908] Call Trace: [ 495.821506][T29908] [ 495.824447][T29908] ? __pfx_sock_map_destroy+0x10/0x10 [ 495.830148][T29908] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.835189][T29908] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.840628][T29908] ? __release_sock+0x351/0x3a0 [ 495.845493][T29908] ? __tcp_close+0x80e/0xfe0 [ 495.850146][T29908] inet_csk_destroy_sock+0x165/0x340 [ 495.855449][T29908] ? __tcp_close+0x80e/0xfe0 [ 495.860114][T29908] __tcp_close+0xd03/0xfe0 [ 495.864552][T29908] ? __local_bh_enable_ip+0xd0/0x130 [ 495.869911][T29908] tcp_close+0x28/0x110 [ 495.874077][T29908] ? __pfx_tcp_close+0x10/0x10 [ 495.878913][T29908] sock_map_close+0x671/0x810 [ 495.883601][T29908] ? __pfx_tcp_close+0x10/0x10 [ 495.888433][T29908] ? sock_map_close+0x90/0x810 [ 495.893223][T29908] ? __pfx_sock_map_close+0x10/0x10 [ 495.898496][T29908] ? down_write+0x16d/0x200 [ 495.903026][T29908] ? __pfx_down_write+0x10/0x10 [ 495.907935][T29908] ? ip_mc_drop_socket+0x25a/0x270 [ 495.913068][T29908] inet_release+0x143/0x190 [ 495.917584][T29908] sock_close+0xc3/0x240 [ 495.921905][T29908] ? __pfx_sock_close+0x10/0x10 [ 495.926773][T29908] __fput+0x44f/0xa60 [ 495.930838][T29908] task_work_run+0x1d9/0x270 [ 495.935441][T29908] ? __pfx_task_work_run+0x10/0x10 [ 495.940627][T29908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.946708][T29908] exit_to_user_mode_loop+0xed/0x480 [ 495.952061][T29908] ? rcu_is_watching+0x15/0xb0 [ 495.956847][T29908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.962990][T29908] do_syscall_64+0x33e/0xf80 [ 495.967602][T29908] ? trace_irq_disable+0x3b/0x140 [ 495.972708][T29908] ? clear_bhb_loop+0x40/0x90 [ 495.977401][T29908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.983363][T29908] RIP: 0033:0x7f802a79c819 [ 495.987790][T29908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.007477][T29908] RSP: 002b:00007fff34f3db08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.015942][T29908] RAX: 0000000000000000 RBX: 00007f802aa17da0 RCX: 00007f802a79c819 [ 496.023976][T29908] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.032003][T29908] RBP: 00007f802aa17da0 R08: 0000000000000006 R09: 0000000000000000 [ 496.040054][T29908] R10: 00000000005f81c0 R11: 0000000000000246 R12: 00000000000792ea [ 496.048074][T29908] R13: 00007f802aa1609c R14: 0000000000079048 R15: 00007f802aa16090 [ 496.056074][T29908] [ 496.059175][T29908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.066459][T29908] CPU: 1 UID: 0 PID: 29908 Comm: syz.3.11099 Not tainted syzkaller #0 PREEMPT(full) [ 496.075903][T29908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.085945][T29908] Call Trace: [ 496.089223][T29908] [ 496.092145][T29908] vpanic+0x56c/0xa60 [ 496.096120][T29908] ? __pfx__printk+0x10/0x10 [ 496.100696][T29908] ? __pfx_vpanic+0x10/0x10 [ 496.105187][T29908] ? is_bpf_text_address+0x292/0x2b0 [ 496.110461][T29908] ? is_bpf_text_address+0x26/0x2b0 [ 496.115653][T29908] panic+0xc5/0xd0 [ 496.119366][T29908] ? __pfx_panic+0x10/0x10 [ 496.123787][T29908] __warn+0x315/0x4c0 [ 496.127758][T29908] ? sock_map_destroy+0x66a/0x6e0 [ 496.132769][T29908] ? sock_map_destroy+0x66a/0x6e0 [ 496.137778][T29908] __report_bug+0x29a/0x540 [ 496.142275][T29908] ? sock_map_destroy+0x66a/0x6e0 [ 496.147295][T29908] ? __pfx___report_bug+0x10/0x10 [ 496.152321][T29908] ? lockdep_hardirqs_on+0x7a/0x110 [ 496.157511][T29908] ? irqentry_exit+0x218/0x730 [ 496.162263][T29908] ? trace_irq_disable+0x3b/0x140 [ 496.167283][T29908] ? sock_map_destroy+0x66c/0x6e0 [ 496.172307][T29908] ? sock_map_destroy+0x66a/0x6e0 [ 496.177325][T29908] report_bug+0x16a/0x220 [ 496.181647][T29908] ? sock_map_destroy+0x66a/0x6e0 [ 496.186667][T29908] ? sock_map_destroy+0x66c/0x6e0 [ 496.191696][T29908] handle_bug+0x9c/0x200 [ 496.195942][T29908] exc_invalid_op+0x1a/0x50 [ 496.200453][T29908] asm_exc_invalid_op+0x1a/0x20 [ 496.205296][T29908] RIP: 0010:sock_map_destroy+0x66a/0x6e0 [ 496.210919][T29908] Code: 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 2c 37 94 f8 4d 8b 26 49 81 fc a0 ed 9c 89 0f 85 24 ff ff ff e8 e7 69 28 f8 90 <0f> 0b 90 e9 33 ff ff ff e8 d9 69 28 f8 4c 89 e7 31 f6 e8 df db 12 [ 496.230522][T29908] RSP: 0018:ffffc900055cfa40 EFLAGS: 00010293 [ 496.236587][T29908] RAX: ffffffff899cf409 RBX: dffffc0000000000 RCX: ffff88802cdb8000 [ 496.244543][T29908] RDX: 0000000000000000 RSI: ffffffff8e22a5d1 RDI: ffff88802cdb8000 [ 496.252497][T29908] RBP: ffffc900055cfaf0 R08: ffff888057259173 R09: 1ffff1100ae4b22e [ 496.260453][T29908] R10: dffffc0000000000 R11: ffffed100ae4b22f R12: ffffffff899ceda0 [ 496.268408][T29908] R13: ffff8880551a9b00 R14: ffffffff9a9e1258 R15: 0000000000000000 [ 496.276384][T29908] ? __pfx_sock_map_destroy+0x10/0x10 [ 496.281763][T29908] ? sock_map_destroy+0x669/0x6e0 [ 496.286793][T29908] ? __pfx_sock_map_destroy+0x10/0x10 [ 496.292156][T29908] ? do_raw_spin_lock+0x12b/0x2f0 [ 496.297174][T29908] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 496.302532][T29908] ? __release_sock+0x351/0x3a0 [ 496.307373][T29908] ? __tcp_close+0x80e/0xfe0 [ 496.311952][T29908] inet_csk_destroy_sock+0x165/0x340 [ 496.317225][T29908] ? __tcp_close+0x80e/0xfe0 [ 496.321802][T29908] __tcp_close+0xd03/0xfe0 [ 496.326212][T29908] ? __local_bh_enable_ip+0xd0/0x130 [ 496.331494][T29908] tcp_close+0x28/0x110 [ 496.335634][T29908] ? __pfx_tcp_close+0x10/0x10 [ 496.340385][T29908] sock_map_close+0x671/0x810 [ 496.345051][T29908] ? __pfx_tcp_close+0x10/0x10 [ 496.349800][T29908] ? sock_map_close+0x90/0x810 [ 496.354549][T29908] ? __pfx_sock_map_close+0x10/0x10 [ 496.359735][T29908] ? down_write+0x16d/0x200 [ 496.364227][T29908] ? __pfx_down_write+0x10/0x10 [ 496.369066][T29908] ? ip_mc_drop_socket+0x25a/0x270 [ 496.374169][T29908] inet_release+0x143/0x190 [ 496.378669][T29908] sock_close+0xc3/0x240 [ 496.382920][T29908] ? __pfx_sock_close+0x10/0x10 [ 496.387758][T29908] __fput+0x44f/0xa60 [ 496.391760][T29908] task_work_run+0x1d9/0x270 [ 496.396346][T29908] ? __pfx_task_work_run+0x10/0x10 [ 496.401455][T29908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.407516][T29908] exit_to_user_mode_loop+0xed/0x480 [ 496.412805][T29908] ? rcu_is_watching+0x15/0xb0 [ 496.417561][T29908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.423614][T29908] do_syscall_64+0x33e/0xf80 [ 496.428373][T29908] ? trace_irq_disable+0x3b/0x140 [ 496.433387][T29908] ? clear_bhb_loop+0x40/0x90 [ 496.438055][T29908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.443931][T29908] RIP: 0033:0x7f802a79c819 [ 496.448333][T29908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.468013][T29908] RSP: 002b:00007fff34f3db08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.476431][T29908] RAX: 0000000000000000 RBX: 00007f802aa17da0 RCX: 00007f802a79c819 [ 496.484391][T29908] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.492345][T29908] RBP: 00007f802aa17da0 R08: 0000000000000006 R09: 0000000000000000 [ 496.500300][T29908] R10: 00000000005f81c0 R11: 0000000000000246 R12: 00000000000792ea [ 496.508256][T29908] R13: 00007f802aa1609c R14: 0000000000079048 R15: 00007f802aa16090 [ 496.516231][T29908] [ 496.519585][T29908] Kernel Offset: disabled [ 496.523921][T29908] Rebooting in 86400 seconds..