last executing test programs: 1m18.580714749s ago: executing program 3 (id=12457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m18.375132341s ago: executing program 3 (id=12459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f00000014c0)=""/4104, 0x1008}, {&(0x7f0000000940)=""/53, 0x35}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 1m11.168421031s ago: executing program 3 (id=12470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) 1m11.168100908s ago: executing program 2 (id=12471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) 1m11.152195219s ago: executing program 4 (id=12472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r4, &(0x7f0000000180)="05031c00ed0b000000000000001c09102c280a95857b03000000000000b0f827214ab2993e1d6c", 0x27, 0x4, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 1m11.109071435s ago: executing program 0 (id=12473): socket(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1m11.005200398s ago: executing program 1 (id=12474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m10.989128477s ago: executing program 2 (id=12475): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) 1m10.901535877s ago: executing program 0 (id=12476): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1m10.834030893s ago: executing program 3 (id=12477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0xfff3, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1m10.703587257s ago: executing program 4 (id=12478): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x80, 0x29, 0x36, {0x3c, 0xc, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0x8, [0x1]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x28, {0x0, 0x8, 0x9, 0x1ff, [0x6, 0xc652, 0xf, 0x5]}}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x88}, @pad1, @generic={0xd, 0x1e, "beaec27e567ad4998d43be8a38c36712be8f8da01dbe63895ad491bc64c2"}]}}}], 0xc8}}], 0x1, 0x4040080) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 1m10.691083877s ago: executing program 0 (id=12479): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 1m10.653345945s ago: executing program 1 (id=12480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40448f0}, 0x448d4) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000023c0)="bad31307c5dbfe6f223bbd52f59a", 0xe, 0x4041, &(0x7f0000002380)={0x11, 0x8100, r3, 0x1, 0x81, 0x6, @multicast}, 0x14) 1m10.646403432s ago: executing program 2 (id=12481): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "f6c20f40e7b2eb405d335fad442a1404c49a4bee225a5d7622a4d3cfa80c0b90f9af97d3b70238d0c706c75b0b32b5bc6fda9f8cd215efae41f5560dcd1f590596d480432e78713ba3248897fddbe1c0e4756330c988446782232cbe861539a1a5e8cddb7c6b42d4130afeb1b7ad7770bd4f3a8cb401c0e2f3c7b5dd9fdd85c01b53f48216d0d126c210be04b3f1defdc1605f051cc1430daa023ef6207df48baa1e2173a382f576e7959de4dbbdf0d890f5a41b9c096154e755d10b15f1f873495e8423f92752df4849670bfc39506d4779d9460879ce5cbc51e982c1da109b3ffcfa712f376b696a45f548d6e22238b4618afcd949c8119da9519563581856f8341ccc5277a26a25abc24a0accec7b4e14019bc87a277e613960f9bd7ee1acc6c83beaf39613bdce918cc199370301b4266e8238bca2e44aae9c51d01acee38209bc74c66681596227f4d9f592a835efa0738770dd52e3d4ea9f2a29346de99f9dff9efbc8264c34fb8ff5e8acb652115c950d56aea2d956f7d983d678a9cf908cb1ae2db8eb7711c3bc635b491332f4325586f7dec8fa008eed321afded8937f8cc55a50014e5dd3d6b42006efd4818c30cfd7019389e01125b0895426534aebd31d0b08bef434d7c8cb6bf0fccea23da10e9c5d69130470709cf49f35d06302eac6e570c8edea4161d96aeb8f0ad4b871896bb3659056e37943d87391a021edfdd3a5d3b78cfb79022b9aee0de979ec72539b8fdfed79bd51894a638d273a9cd1e141358fb817016bdcb9a39b0d2416b759867adb9c391757e73325b56935319d74f833f3e8039307063e22aa42d3d666b59b2751fca993d3b1380d7d79ff7fee05b3a5c1db0163398e3543d393184eb8b22f9583e48f007cb3801f33daf02a82f4d108f7f69df1d52e4b68c3419aa2f1983c41c672c6d68d18a83b44ea906747683ff681a6b1e8925eb0dfbbed2ff9a2996dee968960809fbf2583a10a231e69e8868b3ee4ba800c313b60db32284e94ae6d2716ee20a025a2c9445cfe83d185c27b996fc5441060bbdc028f01f668f33c82f9a1a39e0e20c3e13a3449acb6dfabc19b1ac409b0b1b6ffa7711abf7c2fa7944bf905f25889c38aba65427f523eb1f600add462003e014cef6a619ec8313268de2b5b8d359997fa6abd5f0ce3bdca4cfd216240986be545654930bf4dd16b0994c50db298ac6d3bcfa819d625933bdd054df44755b8745e06d5325b4f999a9d661db7fea772c556136ea00f9bfd57eb80c160dda7cc9656f04f4f1d5702b680ab374c9187c6f23ff846fb72266a4dfea4676c9546141c71c2cea3e4a7afce761524cef56beb34e207ae55d6fff39245e04369c9297ffe39f0e8d22ffc7f4f5370b8c454382839a8b5fdc43af3597779ebee87fa6c766b575a778c41b939f54068191fde22f3825baadb1271833e5d9c9437ff7764c250dad10ec5d5dd76a6bd55150ae52f714b0b260acc0682993ab043303dddcb13e5b4777917701060cb0f5f23b244d2ad22a072cfcd64898f16a321cc059cef1ef473796582178e7d298db28d8855b9dc3458d7157b1ebd21874eb111c076c4b4474b39a9120658793ebbbcf2b7a1a8ef02e7db2e0fdf2d20dac01d1e34b96a743c78f12082b6b6f583c2b72d0a78358f0fbc0c697480bacc0aea74833adfa88df514ea4b2ad1d8ebf56550a100f078f74c29ff4cbe23c2ad637437f036322eea1088c59ac6948fa21327c9d4d27a35ecf00d7dcbe8fca2e140484b6756b6395663926c0798673c8b95c9406ea55e87751ea6ac4507e3991179ebc20edb086071a46217880b1c241cac3c231da8701723e7d48bdb31d43fc60d31ec49df9ae160acabd668330aab210661c73160ee037ddd3a11760ce8f5e2dc547f2467d2b59e79252f84c63667b6120054c56a13cda2f03ea7c31238e72a3eb4a88697490760dbebc9f1c4f74e64b5c347b7041900884ef1b07c2874350a7f4f698164c7efaa2bf2424cccd8006f99b8fb689b6a53026e9726402d7674814270f4296da2e41ac475053d28c26225d59fbf8245d38c05b9c4ccf411407504c90aa344e866b8fd4542ff2197fdbd5d3ac991fffedda4f44033e7659a6291d79da3f93aa27a46dc33f05cccd94fff5971fb7f8808de8d2b965be96779bec17a8a4a20acf3eb6293f6e1654029af9357878f10910436e3a563bc006d6efb0fb6628c8f9ce6d1f0055dd8cd5e0b2e538f297deab09e07b32b1952a9aa93265412aaf2405f3bcd546ec537a19db7b622eb23347d9f028ac637ea240032064974c542a648444cced61e8dc13d6d98ffbf9de793d9a36bc6ba427c01e696084790791509037594cf2cf64cb67ac7fc48d4f019ce631bc64765125aaec21fb146572712cb74f1058a795775e7fcb867abf3ae1ef50e8c7f277f1863ab8a705bd5e3e97496a170090a97c350f37deefa79c9a3c075fd6ae68145cbd520610ef0c52e982d57e7c6a96951d17d31547a2c515815aa44d0f3a2e80956884069d15d941bfa43e67eba67a15c72407097144952aac6dfdaeb21ad7ce2becde62e1373ec5d06cbcf8f46c32321042e2946d701eead22de3c6152072cbee012dba4a64abe1fa3c764d53176c76e26bd856a3201dfb1e9ebeb50f5adb3427315717cb98140c79cd6f5434897630c7aa9f1ac1b4e2a6610f175c3f0c453f2cdf309ac7f41d8c5cccfd3eda93e4d3756fe426a1990a37896daec3a6453983d0a205e2c77b0e22ba15498f2dafe8bd5ee477a238856190c79376790df04c33d79862dab1ef14ed63252b77ba5c586885b043dad4f679a3aa9bcbc4db5990992d6c5117f96533f7438e329f75222d63b71be276d2dd70134b84118c08320fc6bb078a38181f0a0d29a96ae7e4ea696f2cdcb9d7d82a3bfb9e18a0378c48df3b716370d74b854be6763c1831fc398667a27f1bd17c611214997d05dbf7e1468276138158ee13993c63ad6c76713dc5df8f2e06f988de64a17819f46fcde0ff3f2f472a6ecd3f0d34a3c340c8854e1105749547ac1a66914a85f2be786478f8b186026aa6f0b065de0c89d8112bad2b46950a6b067b7ad9557ef3aaa847bb0e16840b997ecfd4fe4c613992b3b6631b8070231c1fbd42dd3dd5ee5d2280555b4b3c00247bc39d1cade5f2f8fbbddadeae1bb4ac39b340ea0dccdc62c6ad76c8fd8f45cfac3a596f8035fb2b031e274c60fef8d3fe96bdf382f9e075645cd9997e8861070471e743e284783c609d60daa43e198755be93de44ef19fa52aed6615af5679461dc96887a93e783b8381df15c70809a4fc7f222e6227d9ceee0654ee225f5862bc089b3fb966ffb82468e7664994929c9fab3281a9708fa7cb19fbd5a481334a30f611f2345b781e01548f5c66337519bb36369b9a2a171f3e35d1c3cf153f829e3582c62b642eab2e497aa08f46897d7160f9b370cef50ed329d791a47c2c4b66a265bd492f541fdbfb431f1825c613c9fedcf1dea1fefa10d929842b1c83be8b7d14f570a444291abf68623f5db1be630a6437dbdfc4e3807031a0a8e4c4e732dd1cc47dac91a3d5992493e6c746b71454491f9eee3bed24857ab1d0203da9a79a5e0ae984270a2134496f86200044089d3770a76fbf14a51ea93b13da1f43844d38142691a90b4af073fe60b39416958563933165eac5e11c9b61ec8c29794b4faea6575551c11110ec906fe086b5909309cff80a8fb04b55554326b238142e804c152c401efdf661a0ee93601eb0dcd4a5dbe3ce6ef0d28f483662ad40e9d21fe49dff6bad26e2c69c5bebc0c24748bf66cc5dfbc1de2942b19201c75c186ebaf4bfee57965c12bf77c08484ebc4d94cfc7d4ed87640fdebef36138adcb2f7bac2173e02ae875ef1f970cd8f875554e491bd549c9bda70aa4a80c2660820c9795844f07950e79e5334aaf15f952c9ee07264a3a847162f968a9ce4a05f33b454491f2338196753664d71c411f2398dd57e2b69cf564f0f86f90d2f9877bc7dda5805cfc6ef7af252f98af65e9daa8782fe14d1ecce03e2b7704cf2cdae57bc3c8d66e2e4261ca865d29b4179bc02e52a87ce346eab979ebab8c5267060cdd404c132178bc0898648ffa934cf37840d6c749b06bbe539eb5c8750451cb63c8a356c5f0a5bf9e272a1a51f4e7c523d59044e56c5d92a9b3d37b4ceab44238e4fe3ff10334db3f64700b90b36a463fbc3a13cae306dff51660e851c51c7df2cbaeb4f20d8b6e677a57d38457988a497e93e566c414521dccd30c5b895fd12258ae7aabd217347ba23eb5ad9c75bd38981c32cd903f578340175e4d9271daafbdef4adbb83f7c8230172b592b2aac42932815627b122222a408cea788e57c08da6a2cafedfadf8710e77e9286ae156dab6d20233e594ba6feb23f3a26fbb45d08794576bb16390a3ad174b67144974b2bc054c1c552ed14aa21317a2bb8f1363ad333561525b68dcdbd82a4ef526b4695b0b856891d69065a82f8413834412bbd135709b2cbfc7202a5f5af803d9234bb1edd8adb4f521eaff0e13919b67f5ad8cf7baa5ac17aa4bbc19c814bf21f9c41159a3e71ab30dff4b9c53efcd7ec8827c0fb658ee4f6bf5c316fd287c7088ac0160c722ff37a7b906fdb3aaf2ca6286b7ddcc45d7ee7c04a3598cb17958446ad4f1b408a8f351610ce58d6c912364423486731b20aa419ae37946796e02e27448cb71ec940a48b60ee0b8c92d8f6dcbe3f498943a6fa9812c39fdb7f815ad256238601f8b6b88691b48f8ab9e631210440f1702ad368c48b32fcee50204e7e4b0f9f90b13f879c03a27a42007737d2916f5247f546e8634b0ef94ebb4bdb891392b6e9f20a8aa7853c4d559d77cd33233b311552f814182c891ba7a7210ee9a4ecf4a4287fab3a9e7aaac4db5a230ef883f54cb91db01ca40d1a9550b577adac814c5ef0457bf38f664eeee951fffddc8d29bcb72eb4c94383b4588bef502c5eef09acd14d38947424a67423532ad02e16dbfd18ef91a2a6abc0cf2275507cb8af624922ef289b93c682827f5ace6944ec401e7566ce99871c5e0b401051f27e37134b389200bb7a9689598313d2f9d6f97fc4a937a71ee3347362251d22756fa3a60e9e95c4c76b1f1e283b51a3b380d1cf59192c325ac546612c00771fc93d370d82af8257a8dcea7f8e602ad00b6e96eb58cf2dc1b7b32efca56dacb9cbfaa6d1cd5918698d6b1ab581343853b6f34041a3e4d2919a8e03cfd303b2e478a0435e6f6f9d9e13cb6bc342a25c7f1662ea63afba6289e60c13301b0972a54ece4d45ba9ea6325b3ed688464e41ebb281dfd76184a7d248b0110b3d40559795ae95e4b3d920340e4c3cc5ec8ccc1b0d40b6f9bc77cdc03b3a6ad426b1b588e5ee0ba1b7"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000029c0)={0x6, 0x11, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12637fab}, {}, {}, [@call={0x85, 0x0, 0x0, 0x32}, @call={0x85, 0x0, 0x0, 0xb4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x63, 0x54, &(0x7f0000002840)=""/84, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x0, 0xd, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000340)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1m10.509895807s ago: executing program 3 (id=12482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c0002800500010005"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1m10.482243029s ago: executing program 0 (id=12483): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xe40ca4f7c51e5624}, {0xfff1, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m10.384786281s ago: executing program 4 (id=12484): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc048) 1m10.091048663s ago: executing program 4 (id=12485): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m10.088670175s ago: executing program 3 (id=12486): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r0, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m10.039367917s ago: executing program 0 (id=12487): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) 1m9.987819337s ago: executing program 2 (id=12488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001700)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0xffffffff, 0x10}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000f40)="5ec9fae306e642ed65000000009b", 0xe, 0x80, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m9.912573535s ago: executing program 1 (id=12489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0xa, 0x801, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m9.100851166s ago: executing program 1 (id=12490): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, 0x0, 0x48094) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) 1m8.940445051s ago: executing program 1 (id=12491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m8.875855479s ago: executing program 1 (id=12492): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf83}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x124, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1378}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "87308f344b5cb35ea2701073e3fc09353467369e879e1616d06763c029182270ad1f04f815d71482845cde8d236cf506eea884aeb0e5071aa9df9e90589cc237cf6fce8420636264ed3bce84a1d6684ea61dd7e5a54f3f1b172448b10909425360a43ba70b2af6626f1d57cea5fe0fb25716b629ee422ede88216817e3d5c8008479ed0deb0892830fdf6d1648339ba9f7e8166a03d30248d963cdf2c9c8639f69e8068fb0cafe3ac64f14132ec1af067bce374b6bf16b9d1ecd8942b8592b6d9c6dd03363daf24d8bd545fd24c76d308f95af46deeb"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x124}}, 0x880) 1m8.742237086s ago: executing program 0 (id=12493): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b06143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb20000000000000080e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 1m8.537568976s ago: executing program 4 (id=12494): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) close(0x3) 1m8.526413216s ago: executing program 4 (id=12495): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m8.468816143s ago: executing program 2 (id=12496): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000002840)=[{{&(0x7f0000000600)=@can={0x1d, r3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="f91e31b6f783648e18", 0x9}], 0x1}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x24000000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r5, &(0x7f0000002840)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="f91e31b6f783648e18", 0x9}], 0x1}}], 0x1, 0x40050) 1m5.592115479s ago: executing program 2 (id=12497): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) 0s ago: executing program 32 (id=12493): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b06143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb20000000000000080e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ity ac14142f, cluster identity 4711 [ 306.663823][T18855] tipc: New replicast peer: 0.0.0.0 [ 306.688699][T18855] tipc: Enabled bearer , priority 10 [ 307.017566][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'. [ 307.049044][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6291'. [ 307.219180][T18898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6299'. [ 307.278590][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6301'. [ 307.331047][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6302'. [ 307.629405][T18922] netlink: 'syz.0.6311': attribute type 23 has an invalid length. [ 307.814389][ T5761] tipc: Node number set to 2886997039 [ 307.856531][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'. [ 307.888758][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'. [ 307.897417][T18936] netlink: 'syz.1.6319': attribute type 2 has an invalid length. [ 307.926613][T18936] : entered promiscuous mode [ 307.934126][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'. [ 307.961912][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6315'. [ 308.695451][T18993] netlink: 'syz.3.6344': attribute type 3 has an invalid length. [ 308.806590][T19000] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.313756][T19023] team0: Device gtp0 is up. Set it down before adding it as a team port [ 309.851590][T19049] xt_limit: Overflow, try lower: 604147548/4200216962 [ 309.858632][T19051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.053829][T19065] openvswitch: netlink: Unknown key attributes 20 [ 310.660513][T19103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.022467][T19123] netlink: 'syz.2.6404': attribute type 1 has an invalid length. [ 311.049901][T19123] __nla_validate_parse: 42 callbacks suppressed [ 311.049919][T19123] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6404'. [ 311.090859][T19123] netlink: 'syz.2.6404': attribute type 1 has an invalid length. [ 311.599586][T19144] netlink: 'syz.4.6413': attribute type 7 has an invalid length. [ 311.942509][T19166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6424'. [ 312.076888][T19178] netlink: 'syz.3.6430': attribute type 29 has an invalid length. [ 312.087262][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6430'. [ 312.098671][T19178] netlink: 'syz.3.6430': attribute type 29 has an invalid length. [ 312.108024][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6430'. [ 312.256843][T19190] tipc: Started in network mode [ 312.265490][T19190] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 312.274701][T19190] tipc: Enabled bearer , priority 10 [ 312.296755][T19188] vlan2: entered allmulticast mode [ 312.504321][T19207] sock: sock_set_timeout: `syz.1.6444' (pid 19207) tries to set negative timeout [ 312.669380][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 313.582365][ T5761] tipc: Node number set to 9480874 [ 314.362678][T19281] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6477'. [ 314.508402][T19288] netlink: 'syz.2.6481': attribute type 2 has an invalid length. [ 314.690419][T19298] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6485'. [ 314.806332][T19308] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 314.956146][T19321] tipc: Started in network mode [ 314.963693][T19321] tipc: Node identity , cluster identity 4711 [ 314.973424][T19321] tipc: Failed to set node id, please configure manually [ 314.996673][T19321] tipc: Enabling of bearer rejected, failed to enable media [ 315.129712][T19334] IPVS: length: 8 != 1152 [ 315.178302][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6504'. [ 315.216475][T19337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.315723][T19347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6509'. [ 315.953539][T19394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6531'. [ 316.468659][T19424] netlink: 'syz.2.6546': attribute type 13 has an invalid length. [ 316.478623][T19424] veth1_macvtap: left promiscuous mode [ 316.492548][T19424] macsec0: entered allmulticast mode [ 316.592455][T19431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6549'. [ 316.923404][T19455] xt_limit: Overflow, try lower: 271964/0 [ 317.302591][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.436185][T19487] netlink: 'syz.0.6576': attribute type 10 has an invalid length. [ 317.527283][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6578'. [ 317.550211][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6578'. [ 317.829840][T19513] netlink: 'syz.0.6587': attribute type 1 has an invalid length. [ 317.864185][T19513] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6587'. [ 317.885607][T19513] netlink: 'syz.0.6587': attribute type 1 has an invalid length. [ 318.376353][T19552] openvswitch: netlink: Missing valid actions attribute. [ 318.397336][T19552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.731712][T19713] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.6680'. [ 320.753929][T19713] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 320.780875][T19713] openvswitch: netlink: Message has 512 unknown bytes. [ 321.102357][T19740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6695'. [ 321.301207][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6701'. [ 321.418207][T19759] nbd: couldn't find device at index 134217728 [ 321.450584][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6705'. [ 321.523104][T19769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6709'. [ 322.197720][T19819] netlink: 'syz.3.6733': attribute type 1 has an invalid length. [ 322.333014][T19827] openvswitch: netlink: Missing key (keys=40, expected=100) [ 322.416468][T19834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6741'. [ 322.461431][T19834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6741'. [ 322.604261][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6744'. [ 322.714118][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6749'. [ 323.010666][T19871] netlink: 'syz.1.6762': attribute type 3 has an invalid length. [ 323.027269][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6761'. [ 323.268758][T19888] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6767'. [ 323.308309][T19888] vlan1: entered allmulticast mode [ 323.317425][T19888] gretap0: entered allmulticast mode [ 323.625814][T19915] netlink: 'syz.2.6780': attribute type 33 has an invalid length. [ 324.176079][T19952] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6799'. [ 324.336882][T19965] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6806'. [ 324.993448][T20007] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6827'. [ 325.015521][T20007] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6827'. [ 325.361519][T20030] xt_hashlimit: size too large, truncated to 1048576 [ 325.789376][T20057] Cannot find add_set index 46338 as target [ 327.246781][T20151] bond5: Invalid ad_actor_system MAC address. [ 327.262858][T20151] bond5: option ad_actor_system: invalid value (1) [ 327.297546][T20151] bond5 (unregistering): Released all slaves [ 328.072218][T20208] team0: Device is already in use. [ 328.486674][T20232] pim6reg527: entered allmulticast mode [ 328.827736][T20251] xt_l2tp: missing protocol rule (udp|l2tpip) [ 329.437262][T20290] __nla_validate_parse: 4 callbacks suppressed [ 329.437281][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 329.652263][T20307] netlink: 'syz.3.6955': attribute type 29 has an invalid length. [ 329.789743][T20315] netlink: 'syz.2.6958': attribute type 1 has an invalid length. [ 329.949751][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6963'. [ 330.120839][T20335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.305617][T20345] vlan1: entered allmulticast mode [ 330.325410][T20345] veth0_vlan: entered allmulticast mode [ 330.349609][T20350] xt_HMARK: spi-set and port-set can't be combined [ 331.054852][T20399] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 331.085605][T20399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.510348][T20428] vlan2: entered promiscuous mode [ 331.533447][T20428] bridge0: entered promiscuous mode [ 331.657862][T20437] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7005'. [ 332.172709][T20464] netlink: 'syz.2.7016': attribute type 23 has an invalid length. [ 333.550146][T20542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7046'. [ 334.142784][T20585] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 334.261843][T20593] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 334.384045][T20599] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7071'. [ 334.555530][T20608] sit1: entered promiscuous mode [ 334.566711][T20608] sit1: entered allmulticast mode [ 335.693246][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7110'. [ 335.717457][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7110'. [ 335.886164][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7117'. [ 335.965617][T20694] netlink: 'syz.0.7118': attribute type 1 has an invalid length. [ 335.981201][T20694] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.7118'. [ 336.051922][T20700] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 336.671708][T20747] rdma_op ffff888036e999f0 conn xmit_rdma 0000000000000000 [ 337.154972][T20781] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 337.505921][T20803] xt_HMARK: proto mask must be zero with L3 mode [ 337.958006][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7185'. [ 337.968932][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7186'. [ 338.680389][T20884] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7209'. [ 338.812097][T20895] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 338.916667][T20900] netlink: 'syz.2.7218': attribute type 17 has an invalid length. [ 339.943606][T20944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7238'. [ 339.993595][T20946] xt_l2tp: wrong L2TP version: 0 [ 340.038096][T20952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.174018][T20957] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7243'. [ 340.202739][T20957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7243'. [ 340.307163][T20966] macsec1: entered promiscuous mode [ 340.321148][T20966] batadv0: entered promiscuous mode [ 340.328545][T20966] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 340.337140][T20966] batadv0: left promiscuous mode [ 341.539581][T21050] tipc: Enabling of bearer rejected, failed to enable media [ 341.560098][T21052] netlink: zone id is out of range [ 341.570043][T21052] netlink: zone id is out of range [ 341.580693][T21052] netlink: zone id is out of range [ 341.688944][T21061] __nla_validate_parse: 1 callbacks suppressed [ 341.688963][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7292'. [ 342.235998][T21095] lo: MTU too low for tipc bearer [ 342.242847][T21096] xt_time: unknown flags 0xf4 [ 342.253878][T21095] tipc: Enabling of bearer rejected, failed to enable media [ 342.415922][T21102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7313'. [ 342.701973][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7324'. [ 343.357745][T21169] netlink: 'syz.2.7347': attribute type 3 has an invalid length. [ 343.389997][T21169] netlink: 'syz.2.7347': attribute type 1 has an invalid length. [ 343.425669][T21169] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7347'. [ 343.599880][T21187] macvlan0: entered promiscuous mode [ 344.026266][T21215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7367'. [ 344.094747][T21217] netlink: 'syz.2.7370': attribute type 1 has an invalid length. [ 344.115577][T21219] Driver unsupported XDP return value 0 on prog (id 500) dev N/A, expect packet loss! [ 344.526113][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7386'. [ 344.658232][T21259] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 344.925178][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7398'. [ 345.378003][T21308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7415'. [ 345.522849][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7420'. [ 345.899298][T21348] veth3: entered allmulticast mode [ 346.266374][T21372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7445'. [ 346.587022][T21397] netlink: 'syz.4.7458': attribute type 11 has an invalid length. [ 346.718630][T21404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7461'. [ 346.871765][T21416] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.7465'. [ 346.899300][T21416] netlink: 'syz.3.7465': attribute type 1 has an invalid length. [ 346.979417][T21422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7470'. [ 347.180254][T21436] xt_socket: unknown flags 0xe4 [ 347.546737][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7491'. [ 347.680240][T21470] team0: Port device vlan0 added [ 347.840500][T21486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7500'. [ 348.015840][T21496] netlink: 'syz.0.7505': attribute type 2 has an invalid length. [ 348.041125][T21496] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7505'. [ 348.316548][T21516] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7517'. [ 348.349163][T21518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.659549][T21537] xfrm0 speed is unknown, defaulting to 1000 [ 349.276036][T21581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.503692][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.594051][T21574] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 349.798159][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7552'. [ 349.996630][T21619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7560'. [ 350.019993][T21619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7560'. [ 351.570545][T21723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.105121][T21743] netlink: 'syz.2.7618': attribute type 1 has an invalid length. [ 352.594836][T21769] __nla_validate_parse: 2 callbacks suppressed [ 352.594936][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7631'. [ 353.050107][T21803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7648'. [ 353.400285][T21828] vlan2: entered allmulticast mode [ 353.413237][T21830] netlink: 'syz.4.7662': attribute type 3 has an invalid length. [ 353.425784][T21828] bond0: entered allmulticast mode [ 353.442151][T21828] bond_slave_0: entered allmulticast mode [ 353.448587][T21828] bond_slave_1: entered allmulticast mode [ 353.462923][T21828] batadv0: entered allmulticast mode [ 353.474516][T21828] team0: entered allmulticast mode [ 353.484677][T21828] team_slave_0: entered allmulticast mode [ 353.499369][T21828] team_slave_1: entered allmulticast mode [ 353.511150][T21828] geneve1: entered allmulticast mode [ 353.803950][T21854] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7676'. [ 353.954614][ T30] audit: type=1107 audit(1784802590.539:2): pid=21863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 354.129973][T21874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7682'. [ 354.339009][T21891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7690'. [ 354.365567][T21891] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7690'. [ 354.386328][T21891] netlink: 'syz.3.7690': attribute type 5 has an invalid length. [ 354.403973][T21891] netlink: 'syz.3.7690': attribute type 6 has an invalid length. [ 354.415673][T21891] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7690'. [ 354.442173][T21896] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7693'. [ 355.076959][T21940] vlan2: entered promiscuous mode [ 355.088041][T21940] geneve1: entered promiscuous mode [ 355.100524][T21940] vlan2: entered allmulticast mode [ 355.117893][T21940] geneve1: entered allmulticast mode [ 355.206755][T21947] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7719'. [ 355.406663][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7727'. [ 355.538213][T21973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.795686][T21989] bridge0: port 4(ipvlan3) entered blocking state [ 355.802770][T21989] bridge0: port 4(ipvlan3) entered disabled state [ 355.810619][T21989] ipvlan3: entered allmulticast mode [ 355.816416][T21989] bridge0: entered allmulticast mode [ 355.832743][T21989] ipvlan3: left allmulticast mode [ 355.843200][T21989] bridge0: left allmulticast mode [ 357.085815][T22063] netlink: 'syz.2.7773': attribute type 1 has an invalid length. [ 357.598076][T22098] netlink: 'syz.2.7788': attribute type 5 has an invalid length. [ 357.628733][T22098] __nla_validate_parse: 6 callbacks suppressed [ 357.628752][T22098] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7788'. [ 357.965948][T22124] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7801'. [ 358.113687][T22138] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 358.372340][T22152] siw: device registration error -23 [ 358.505716][T22152] smbdirect: ib_dev[syz2] removed [ 358.778242][T22177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.008816][T22193] tipc: Enabling of bearer rejected, media not registered [ 359.042086][T22195] netlink: 'syz.2.7836': attribute type 1 has an invalid length. [ 359.071553][T22195] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7836'. [ 359.125111][T22201] netlink: 'syz.4.7838': attribute type 1 has an invalid length. [ 359.144692][T22201] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7838'. [ 359.154700][T22201] netlink: 'syz.4.7838': attribute type 1 has an invalid length. [ 359.295822][T22211] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 359.390990][T22219] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.597386][T22234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7855'. [ 359.834091][T22247] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7861'. [ 359.876150][T22247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7861'. [ 359.900361][T22251] geneve2: entered promiscuous mode [ 360.441676][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7880'. [ 360.678005][T22306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7890'. [ 360.900506][T22320] Bluetooth: MGMT ver 1.23 [ 361.127849][T22335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7903'. [ 361.969160][T22399] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 363.314613][T22489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7979'. [ 363.341286][T22489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7979'. [ 364.434975][T22555] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 364.822806][T22580] netlink: 'syz.3.8022': attribute type 11 has an invalid length. [ 365.649078][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8043'. [ 366.235442][T22669] nbd: must specify a size in bytes for the device [ 366.936343][T22716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.260067][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8100'. [ 367.636391][T22769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.688492][T22773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8115'. [ 367.710172][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8116'. [ 367.711203][T22773] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8115'. [ 367.738318][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8116'. [ 367.748829][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8115'. [ 368.063199][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8124'. [ 368.347587][T22812] __nla_validate_parse: 1 callbacks suppressed [ 368.347607][T22812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8133'. [ 368.789608][T22840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8147'. [ 368.819282][T22841] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 369.115185][T22861] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8158'. [ 369.466658][T22888] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 369.502551][T22893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8172'. [ 369.539440][T22893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8172'. [ 369.601587][T22899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8175'. [ 369.647384][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.666861][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.676062][ T5629] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.795253][ T5629] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 370.302377][ T5748] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 370.407492][T22956] atomic_op ffff88807ad89998 conn xmit_atomic 0000000000000000 [ 370.558361][T22964] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 371.042058][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8222'. [ 371.071938][T23001] netlink: 'syz.4.8225': attribute type 4 has an invalid length. [ 371.167749][T23004] vlan3: entered allmulticast mode [ 371.168045][T23007] netlink: 'syz.4.8227': attribute type 3 has an invalid length. [ 371.182451][T23004] bond0: entered allmulticast mode [ 371.194744][T23004] bond_slave_0: entered allmulticast mode [ 371.208773][T23004] bond_slave_1: entered allmulticast mode [ 371.449058][T23024] pimreg: left allmulticast mode [ 371.668013][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8243'. [ 371.682153][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8243'. [ 372.349567][T23088] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8268'. [ 372.378604][T23088] unsupported nla_type 7424 [ 372.529854][T23094] vlan2: entered promiscuous mode [ 372.553563][T23094] gretap0: entered promiscuous mode [ 372.635103][T23105] macvlan0: entered promiscuous mode [ 373.403965][T23161] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.666256][T23175] openvswitch: netlink: Unknown nsh attribute 0 [ 373.842966][T23189] netlink: 'syz.3.8318': attribute type 1 has an invalid length. [ 373.863083][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.865823][T23189] netlink: 'syz.3.8318': attribute type 2 has an invalid length. [ 374.086608][T23206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8326'. [ 374.124096][T23206] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8326'. [ 374.144454][T23206] netlink: 'syz.2.8326': attribute type 5 has an invalid length. [ 374.329139][T23223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.007928][T23270] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8357'. [ 375.122925][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8359'. [ 375.295193][T23291] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 375.304592][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8367'. [ 375.321691][T23292] IPVS: Error connecting to the multicast addr [ 375.410915][T23296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8368'. [ 375.446756][T23298] netlink: 'syz.4.8372': attribute type 1 has an invalid length. [ 375.466427][T23298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8372'. [ 375.499700][T23302] nbd: must specify an index to disconnect [ 376.508241][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8404'. [ 377.736415][T23450] tipc: Enabling of bearer rejected, failed to enable media [ 378.085209][T23474] tipc: Started in network mode [ 378.090292][T23474] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 378.110632][T23474] tipc: Enabling of bearer rejected, failed to enable media [ 378.752890][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.788943][T23518] xt_l2tp: v2 tid > 0xffff: 1114244 [ 378.930212][T23528] netlink: 'syz.2.8480': attribute type 1 has an invalid length. [ 378.971141][T23528] netlink: 500 bytes leftover after parsing attributes in process `syz.2.8480'. [ 378.990259][T23531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8482'. [ 379.329124][T23556] netlink: 'syz.4.8495': attribute type 1 has an invalid length. [ 379.350682][T23556] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8495'. [ 379.369726][T23556] netlink: 'syz.4.8495': attribute type 1 has an invalid length. [ 379.437229][T23560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8496'. [ 379.662310][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8503'. [ 379.680559][T23572] openvswitch: netlink: Missing key (keys=40, expected=80) [ 380.030204][T23598] netlink: 'syz.0.8514': attribute type 11 has an invalid length. [ 380.212031][T23608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.685804][T23639] netlink: 'syz.1.8531': attribute type 3 has an invalid length. [ 380.913683][T23655] netlink: 'syz.3.8538': attribute type 1 has an invalid length. [ 380.939802][T23655] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8538'. [ 380.957747][T23655] netlink: 'syz.3.8538': attribute type 1 has an invalid length. [ 381.670447][T23702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8555'. [ 382.544942][T23750] netlink: 'syz.2.8575': attribute type 1 has an invalid length. [ 382.580871][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 383.367656][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8601'. [ 383.698321][T23824] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8611'. [ 383.874652][T23839] netlink: 'syz.3.8618': attribute type 1 has an invalid length. [ 383.996410][T23847] syz.4.8623 (23847) used obsolete PPPIOCDETACH ioctl [ 384.425475][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8638'. [ 384.913979][T23910] netlink: 'syz.3.8653': attribute type 10 has an invalid length. [ 385.043758][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8659'. [ 385.065725][T23922] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8659'. [ 385.091219][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8659'. [ 385.215408][T23932] tipc: Enabling of bearer rejected, already enabled [ 385.632629][T23964] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8679'. [ 385.863690][T23979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8686'. [ 386.068741][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8693'. [ 387.099530][T24065] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8728'. [ 387.480211][T24087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8739'. [ 388.204015][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8762'. [ 388.242951][T24139] netlink: 'syz.0.8765': attribute type 1 has an invalid length. [ 388.264010][T24139] netlink: 'syz.0.8765': attribute type 1 has an invalid length. [ 388.883761][T24183] veth1_macvtap: entered promiscuous mode [ 388.897109][T24183] macsec1: entered promiscuous mode [ 388.905956][T24183] veth1_macvtap: left promiscuous mode [ 389.327451][T24215] netlink: 'syz.2.8802': attribute type 25 has an invalid length. [ 389.364112][T24219] xt_l2tp: v2 sid > 0xffff: 1114112 [ 389.722999][T24235] bridge0: port 3(syz_tun) entered blocking state [ 389.741915][T24235] bridge0: port 3(syz_tun) entered disabled state [ 389.786826][T24235] syz_tun: entered promiscuous mode [ 390.029849][T24255] netlink: 'syz.2.8821': attribute type 1 has an invalid length. [ 390.049870][T24255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.110743][T24259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.219656][T24267] __nla_validate_parse: 3 callbacks suppressed [ 390.219674][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8828'. [ 390.462478][T24283] Bluetooth: MGMT ver 1.23 [ 390.722105][T24300] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.8844'. [ 390.744631][T24300] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.8844'. [ 390.915565][T24313] netlink: 'syz.3.8850': attribute type 3 has an invalid length. [ 390.926363][T24312] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.933648][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8851'. [ 390.956364][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8852'. [ 391.253547][T24333] vxcan0: tx address claim with dlc 0 [ 391.755808][T24368] IPVS: Error connecting to the multicast addr [ 392.217142][T24399] team0: left promiscuous mode [ 392.227713][T24399] team_slave_0: left promiscuous mode [ 392.234388][T24399] team_slave_1: left promiscuous mode [ 392.244213][T24399] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.252499][T24399] team0: Cannot enslave team device to itself [ 392.679520][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8906'. [ 393.362615][T24468] netlink: 'syz.0.8926': attribute type 1 has an invalid length. [ 393.382504][T24468] netlink: 'syz.0.8926': attribute type 7 has an invalid length. [ 393.403680][T24468] netlink: 'syz.0.8926': attribute type 8 has an invalid length. [ 393.430813][T24468] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8926'. [ 393.460221][T24468] NCSI netlink: No device for ifindex 65584 [ 393.890066][T24506] sctp: [Deprecated]: syz.0.8943 (pid 24506) Use of int in maxseg socket option. [ 393.890066][T24506] Use struct sctp_assoc_value instead [ 393.956232][ T5634] block nbd0: Receive control failed (result -32) [ 394.669754][T24541] netlink: 'syz.0.8960': attribute type 4 has an invalid length. [ 394.799346][T24545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8962'. [ 394.836770][T24545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8962'. [ 395.321133][T24577] netlink: 766 bytes leftover after parsing attributes in process `syz.0.8977'. [ 395.807424][T24612] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.065116][T24633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9003'. [ 396.090442][T24624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.135666][T24624] bond0: (slave bond4): Enslaving as an active interface with an up link [ 396.435282][T24652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9010'. [ 396.531665][T24655] bond5 (unregistering): Released all slaves [ 396.548384][T24660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.828052][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9022'. [ 396.844374][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9022'. [ 397.108565][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9031'. [ 398.352813][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9069'. [ 398.377730][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9069'. [ 398.782612][T24792] tun0: tun_chr_ioctl cmd 1074025675 [ 398.812394][T24792] tun0: persist disabled [ 398.907310][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9083'. [ 399.047509][T24785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.221324][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 399.267761][T24785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.502290][T24785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.594339][ T5629] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 399.688056][ T143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.718349][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.745742][ T143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.784294][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.085521][ T5748] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.216442][T24886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9116'. [ 400.652763][T24917] gretap0: entered promiscuous mode [ 400.665013][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9130'. [ 400.665113][T24916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9129'. [ 400.676159][T24917] gretap0: left promiscuous mode [ 400.718515][T24919] netlink: 'syz.4.9131': attribute type 4 has an invalid length. [ 400.726547][T24919] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9131'. [ 400.758555][T24919] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9131'. [ 400.886800][T24926] gtp0: entered promiscuous mode [ 400.893014][T24926] gtp0: entered allmulticast mode [ 401.014626][T24935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9139'. [ 401.142179][T24943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9143'. [ 401.481563][T24962] bond0: entered promiscuous mode [ 401.486832][T24962] bond_slave_0: entered promiscuous mode [ 401.494975][T24962] bond_slave_1: entered promiscuous mode [ 401.503385][T24962] batadv0: entered promiscuous mode [ 401.510044][T24962] debugfs: 'hsr0' already exists in 'hsr' [ 401.516630][T24962] Cannot create hsr debugfs directory [ 401.524216][T24962] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 401.549312][T24962] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 401.579540][T24962] bond0: left promiscuous mode [ 401.587064][T24962] bond_slave_0: left promiscuous mode [ 401.600065][T24962] bond_slave_1: left promiscuous mode [ 401.614542][T24962] batadv0: left promiscuous mode [ 402.342713][T25013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9175'. [ 402.383394][T25016] netlink: 248 bytes leftover after parsing attributes in process `syz.4.9177'. [ 402.546213][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9180'. [ 402.578036][T25025] netlink: 'syz.3.9180': attribute type 9 has an invalid length. [ 402.841975][T25045] netlink: 'syz.3.9189': attribute type 10 has an invalid length. [ 402.897373][T25045] team0: Port device dummy0 added [ 403.592550][T25093] netlink: 'syz.2.9214': attribute type 3 has an invalid length. [ 403.605826][T25101] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9217'. [ 403.920616][ T5634] block nbd1: Receive control failed (result -32) [ 404.836460][T25177] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 404.865128][T25177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.072084][T25193] batman_adv: batadv0: Adding interface: bond0 [ 405.092546][T25193] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.122050][T25193] batman_adv: batadv0: Interface activated: bond0 [ 405.598964][T25228] netlink: 'syz.1.9275': attribute type 3 has an invalid length. [ 405.607111][T25228] netlink: 'syz.1.9275': attribute type 1 has an invalid length. [ 405.615134][T25228] NCSI netlink: No device for ifindex 813332851 [ 405.872299][T25242] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 405.885602][T25242] syzkaller1: group set to 0 [ 406.365191][T25274] block nbd2: Unsupported socket: should be TCP or UNIX. [ 406.538063][T25286] __nla_validate_parse: 6 callbacks suppressed [ 406.538081][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9302'. [ 406.799825][T25304] netlink: 'syz.0.9310': attribute type 83 has an invalid length. [ 406.865814][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9313'. [ 408.037825][T25386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9351'. [ 408.056831][T25388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9349'. [ 408.293745][T25404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9358'. [ 409.169282][T25467] netlink: 81 bytes leftover after parsing attributes in process `syz.0.9388'. [ 409.231818][T25469] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 409.753733][T25499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9405'. [ 409.759239][T25500] xt_hashlimit: size too large, truncated to 1048576 [ 409.952133][T25510] syz.2.9408: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 410.001546][T25510] CPU: 0 UID: 0 PID: 25510 Comm: syz.2.9408 Not tainted syzkaller #0 PREEMPT(full) [ 410.001598][T25510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 410.001633][T25510] Call Trace: [ 410.001710][T25510] [ 410.001778][T25510] dump_stack_lvl+0xe8/0x150 [ 410.001952][T25510] warn_alloc+0x24c/0x270 [ 410.002000][T25510] ? stack_depot_save_flags+0x33/0x800 [ 410.002127][T25510] ? __pfx_warn_alloc+0x10/0x10 [ 410.002150][T25510] ? kasan_save_track+0x3e/0x80 [ 410.002183][T25510] ? __kasan_kmalloc+0x93/0xb0 [ 410.002208][T25510] ? xsk_setsockopt+0x52a/0x960 [ 410.002316][T25510] ? do_sock_setsockopt+0x17c/0x1b0 [ 410.002448][T25510] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 410.002476][T25510] ? do_syscall_64+0x174/0x580 [ 410.002539][T25510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.002583][T25510] __vmalloc_node_range_noprof+0x12c/0x1730 [ 410.002633][T25510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.002659][T25510] ? __kasan_kmalloc+0x93/0xb0 [ 410.002685][T25510] ? __kmalloc_cache_noprof+0x32d/0x660 [ 410.002716][T25510] ? __kmalloc_cache_noprof+0x150/0x660 [ 410.002741][T25510] vmalloc_user_noprof+0xad/0xe0 [ 410.002763][T25510] ? xskq_create+0xbf/0x170 [ 410.002790][T25510] xskq_create+0xbf/0x170 [ 410.002819][T25510] xsk_init_queue+0x8a/0xe0 [ 410.002845][T25510] xsk_setsockopt+0x52a/0x960 [ 410.002867][T25510] ? __fget_files+0x2a/0x420 [ 410.002906][T25510] ? __pfx_xsk_setsockopt+0x10/0x10 [ 410.002927][T25510] ? __pfx_aa_sk_perm+0x10/0x10 [ 410.003026][T25510] ? aa_sock_opt_perm+0xff/0x1a0 [ 410.003047][T25510] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 410.003087][T25510] ? __pfx_xsk_setsockopt+0x10/0x10 [ 410.003110][T25510] do_sock_setsockopt+0x17c/0x1b0 [ 410.003147][T25510] __x64_sys_setsockopt+0x13d/0x1b0 [ 410.003175][T25510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.003194][T25510] do_syscall_64+0x174/0x580 [ 410.003209][T25510] ? trace_irq_disable+0x3b/0x140 [ 410.003245][T25510] ? clear_bhb_loop+0x40/0x90 [ 410.003268][T25510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.003286][T25510] RIP: 0033:0x7f199439de99 [ 410.003311][T25510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.003326][T25510] RSP: 002b:00007f19952f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.003380][T25510] RAX: ffffffffffffffda RBX: 00007f1994625fa0 RCX: 00007f199439de99 [ 410.003394][T25510] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 410.003404][T25510] RBP: 00007f1994433eaf R08: 0000000000000004 R09: 0000000000000000 [ 410.003415][T25510] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.003425][T25510] R13: 00007f1994626038 R14: 00007f1994625fa0 R15: 00007ffe23f6bbb8 [ 410.003453][T25510] [ 410.007452][T25510] Mem-Info: [ 410.054055][T25512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9410'. [ 410.071085][T25510] active_anon:9351 inactive_anon:0 isolated_anon:0 [ 410.071085][T25510] active_file:1 inactive_file:43260 isolated_file:0 [ 410.071085][T25510] unevictable:768 dirty:238 writeback:25 [ 410.071085][T25510] slab_reclaimable:11269 slab_unreclaimable:102314 [ 410.071085][T25510] mapped:29235 shmem:4662 pagetables:3473 [ 410.071085][T25510] sec_pagetables:0 bounce:0 [ 410.071085][T25510] kernel_misc_reclaimable:0 [ 410.071085][T25510] free:1312522 free_pcp:9116 free_cma:0 [ 410.434237][T25510] Node 0 active_anon:23804kB inactive_anon:0kB active_file:4kB inactive_file:172848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116840kB dirty:752kB writeback:0kB shmem:3712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12456kB pagetables:13564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 410.473151][T25510] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 410.534799][T25510] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.567714][T25510] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 410.574727][T25510] Node 0 DMA32 free:1307820kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24004kB inactive_anon:0kB active_file:4kB inactive_file:172848kB unevictable:1536kB writepending:652kB zspages:0kB present:3129332kB managed:2548676kB mlocked:0kB bounce:0kB free_pcp:42448kB local_pcp:20536kB free_cma:0kB [ 410.613348][T25510] lowmem_reserve[]: 0 0 0 0 0 [ 410.618157][T25510] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.691186][T25510] lowmem_reserve[]: 0 0 0 0 0 [ 410.702571][T25510] Node 1 Normal free:3944720kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB [ 410.765030][T25510] lowmem_reserve[]: 0 0 0 0 0 [ 410.774624][T25510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.810326][T25510] Node 0 DMA32: 735*4kB (UM) 1860*8kB (UME) 1467*16kB (UM) 1406*32kB (UM) 805*64kB (UME) 778*128kB (U) 484*256kB (UE) 206*512kB (U) 53*1024kB (UM) 4*2048kB (UE) 190*4096kB (UM) = 1307468kB [ 410.853783][T25510] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.874226][T25510] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 2*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944720kB [ 410.922717][T25510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.941041][T25510] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.961999][T25510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.977820][T25510] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.998022][T25550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9425'. [ 411.007345][T25510] 44565 total pagecache pages [ 411.012593][T25510] 0 pages in swap cache [ 411.017408][T25550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9425'. [ 411.027069][T25510] Free swap = 124996kB [ 411.031732][T25510] Total swap = 124996kB [ 411.039427][T25510] 2097051 pages RAM [ 411.048790][T25510] 0 pages HighMem/MovableOnly [ 411.058593][T25510] 428202 pages reserved [ 411.067864][T25510] 0 pages cma reserved [ 412.154220][T25614] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.9455'. [ 412.313131][T25616] openvswitch: netlink: IPv4 tunnel dst address is zero [ 412.348099][T25616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.620217][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9466'. [ 412.849312][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9473'. [ 412.888363][T25654] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 413.379681][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9492'. [ 413.611891][T25706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9498'. [ 413.755576][T25708] bond6: entered promiscuous mode [ 414.145593][T25744] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9515'. [ 415.912902][T25869] pim6reg: entered allmulticast mode [ 416.945284][T25894] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9589'. [ 416.970983][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9589'. [ 417.558158][T25942] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9610'. [ 417.587287][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9612'. [ 417.687927][T25951] netlink: 'syz.4.9615': attribute type 83 has an invalid length. [ 418.203281][T25981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9630'. [ 418.363433][T25993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9635'. [ 419.095634][ T5748] IPVS: starting estimator thread 0... [ 419.201373][T26046] IPVS: using max 38 ests per chain, 91200 per kthread [ 419.439043][T26068] netlink: 'syz.3.9671': attribute type 3 has an invalid length. [ 420.067050][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9692'. [ 420.732112][T26136] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9703'. [ 420.945426][T26147] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.002838][T26155] netlink: 'syz.1.9710': attribute type 83 has an invalid length. [ 421.189512][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9714'. [ 421.305107][T26173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9719'. [ 421.468356][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9724'. [ 421.496076][T26183] bridge0: port 3(team0) entered disabled state [ 421.539212][T26183] team0 (unregistering): left allmulticast mode [ 421.545986][T26189] netlink: 'syz.4.9727': attribute type 11 has an invalid length. [ 421.566579][T26183] team_slave_0: left allmulticast mode [ 421.580130][T26183] team_slave_1: left allmulticast mode [ 421.585892][T26183] team0 (unregistering): left promiscuous mode [ 421.592281][T26183] team_slave_0: left promiscuous mode [ 421.598023][T26183] team_slave_1: left promiscuous mode [ 421.603914][T26183] bridge0: port 3(team0) entered disabled state [ 421.652090][T26183] team0 (unregistering): Port device team_slave_0 removed [ 421.693999][T26183] team0 (unregistering): Port device team_slave_1 removed [ 422.001703][T26212] sch_fq: defrate 0 ignored. [ 423.000259][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9768'. [ 423.180041][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9777'. [ 423.185224][ T5634] block nbd0: Receive control failed (result -107) [ 423.202811][T26288] block nbd0: reconnected socket [ 423.399357][T26307] block nbd2: Unsupported socket: should be TCP or UNIX. [ 423.791248][T26336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9798'. [ 424.241743][T26368] openvswitch: netlink: IP tunnel TTL not specified. [ 424.248657][T26368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.260468][T26370] bond0 (unregistering): Released all slaves [ 424.467792][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9819'. [ 424.679344][T26391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9824'. [ 424.766276][T26396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9827'. [ 424.847964][T26401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9829'. [ 425.046613][T26413] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9834'. [ 425.313798][T26425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9841'. [ 425.387653][T26432] sctp: [Deprecated]: syz.0.9844 (pid 26432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.387653][T26432] Use struct sctp_sack_info instead [ 425.621595][T26446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9850'. [ 427.206253][ T5634] block nbd2: Receive control failed (result -32) [ 428.140589][T26616] veth0: entered promiscuous mode [ 428.179671][T26615] netlink: 'syz.3.9927': attribute type 4 has an invalid length. [ 428.197842][T26619] veth0: left promiscuous mode [ 428.413479][T26634] __nla_validate_parse: 5 callbacks suppressed [ 428.413498][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9937'. [ 428.519447][T26641] Bluetooth: hci1: too big key_count value 32778 [ 428.659290][T26647] sctp: [Deprecated]: syz.3.9942 (pid 26647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.659290][T26647] Use struct sctp_sack_info instead [ 428.839434][T26661] sctp: [Deprecated]: syz.1.9949 (pid 26661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.839434][T26661] Use struct sctp_sack_info instead [ 429.090921][T26674] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9954'. [ 429.121428][T26679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9957'. [ 429.384258][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9965'. [ 429.686321][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9977'. [ 429.714894][T26717] netlink: 'syz.3.9977': attribute type 1 has an invalid length. [ 429.738911][T26717] netlink: 'syz.3.9977': attribute type 2 has an invalid length. [ 430.212108][T26750] openvswitch: netlink: IP tunnel dst address not specified [ 430.228323][T26750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.517936][T26763] netlink: 'syz.0.9997': attribute type 2 has an invalid length. [ 430.533960][T26763] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9997'. [ 430.742943][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10004'. [ 430.950419][T26796] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10012'. [ 430.963941][T26798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10013'. [ 430.997027][T26800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10014'. [ 431.220886][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 431.268641][T26808] IPVS: persistence engine module ip_vs_pe_À not found [ 433.158003][T26946] openvswitch: netlink: IP tunnel dst address not specified [ 433.181446][T26946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.482660][T26968] __nla_validate_parse: 4 callbacks suppressed [ 433.482690][T26968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10093'. [ 433.498892][T26968] openvswitch: netlink: Flow key attribute not present in set flow. [ 433.927547][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10105'. [ 433.969795][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10105'. [ 433.988318][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10108'. [ 434.227703][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10117'. [ 434.258677][T27016] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10117'. [ 434.274592][T27016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10117'. [ 434.366663][T27021] gretap2: entered promiscuous mode [ 434.383433][T27021] batman_adv: batadv0: Adding interface: gretap2 [ 434.401674][T27021] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.460627][T27021] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 434.488368][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10120'. [ 434.585636][T27029] macvtap1: entered promiscuous mode [ 434.598064][T27029] vlan0: entered promiscuous mode [ 434.622704][T27029] macvtap1: entered allmulticast mode [ 434.633969][T27029] vlan0: entered allmulticast mode [ 434.645878][T27029] veth0_vlan: entered allmulticast mode [ 434.799886][ T12] tipc: Subscription rejected, illegal request [ 434.935362][T27053] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.10132'. [ 435.184971][T27067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10139'. [ 438.494695][T27277] __nla_validate_parse: 8 callbacks suppressed [ 438.494714][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10238'. [ 438.564960][T27277] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10238'. [ 438.621519][T27285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10242'. [ 438.658006][T27285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10242'. [ 438.676983][T27285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10242'. [ 438.683208][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10244'. [ 439.301843][T27329] netlink: 'syz.2.10264': attribute type 21 has an invalid length. [ 439.316090][T27329] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.331718][T27332] block nbd0: Unsupported socket: should be TCP or UNIX. [ 439.345265][T27329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.352579][T27329] IPv6: NLM_F_CREATE should be set when creating new route [ 439.359875][T27329] IPv6: NLM_F_CREATE should be set when creating new route [ 439.367199][T27329] IPv6: NLM_F_CREATE should be set when creating new route [ 439.425351][T27339] netlink: 'syz.2.10264': attribute type 21 has an invalid length. [ 439.439939][T27339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.548161][T27347] ip6gre0: Master is either lo or non-ether device [ 440.080390][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10287'. [ 440.185141][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.287686][T27391] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10292'. [ 440.316816][T27393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10293'. [ 440.504983][T27407] netlink: 'syz.1.10301': attribute type 21 has an invalid length. [ 440.524707][T27407] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10301'. [ 440.556684][T27407] netlink: 'syz.1.10301': attribute type 4 has an invalid length. [ 440.591761][T27411] netlink: 'syz.1.10301': attribute type 21 has an invalid length. [ 440.603414][T27407] netlink: 'syz.1.10301': attribute type 5 has an invalid length. [ 440.623513][T27411] netlink: 'syz.1.10301': attribute type 4 has an invalid length. [ 440.642019][T27411] netlink: 'syz.1.10301': attribute type 5 has an invalid length. [ 441.133562][T27446] tipc: New replicast peer: 255.255.255.255 [ 441.157813][T27446] tipc: Enabled bearer , priority 10 [ 441.289380][T27462] openvswitch: netlink: IP tunnel dst address not specified [ 441.297600][T27462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.619139][T27485] netlink: 'syz.2.10337': attribute type 2 has an invalid length. [ 442.849628][T27567] veth0: entered promiscuous mode [ 442.868290][T27566] veth0: left promiscuous mode [ 442.924639][T27572] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 443.116342][T27584] netlink: 'syz.0.10382': attribute type 83 has an invalid length. [ 443.813576][T27636] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 443.828567][T27637] __nla_validate_parse: 9 callbacks suppressed [ 443.828586][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10405'. [ 443.873130][T27637] netlink: 252 bytes leftover after parsing attributes in process `syz.1.10405'. [ 443.920184][T27642] tap0: tun_chr_ioctl cmd 2148553947 [ 444.290571][T27669] veth0_to_bridge: entered promiscuous mode [ 444.308047][T27671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10422'. [ 444.318881][T27668] veth0_to_bridge: left promiscuous mode [ 444.543521][T27686] validate_nla: 1 callbacks suppressed [ 444.543611][T27686] netlink: 'syz.4.10429': attribute type 1 has an invalid length. [ 444.596036][T27686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10429'. [ 446.232582][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10469'. [ 446.264772][T27782] netlink: 'syz.2.10469': attribute type 30 has an invalid length. [ 446.275593][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10469'. [ 446.856727][T27821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10491'. [ 446.891944][T27816] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 446.917980][T27816] syzkaller1: linktype set to 823 [ 447.938066][T27868] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.042777][T27873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10517'. [ 448.082552][T27873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10517'. [ 448.140426][T27880] netlink: 'syz.3.10520': attribute type 11 has an invalid length. [ 448.344171][T27890] veth0: entered promiscuous mode [ 448.359225][T27890] veth0: left promiscuous mode [ 448.455434][T27896] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10528'. [ 448.929985][T27931] blkio.reset_stats is deprecated [ 449.227126][T27947] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 449.250214][T27950] __nla_validate_parse: 1 callbacks suppressed [ 449.250233][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10554'. [ 449.317416][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10554'. [ 449.753495][T27985] netlink: 'syz.4.10571': attribute type 19 has an invalid length. [ 450.091641][T28010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10581'. [ 450.915925][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10603'. [ 451.067142][T28063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10606'. [ 451.442463][T28081] netlink: 'syz.2.10615': attribute type 2 has an invalid length. [ 451.734391][T28099] netlink: 'syz.2.10623': attribute type 33 has an invalid length. [ 451.766129][T28099] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 451.781740][T28099] bond1 (unregistering): Released all slaves [ 451.998034][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10631'. [ 452.042136][T28116] xfrm1: entered promiscuous mode [ 452.053913][T28116] xfrm1: entered allmulticast mode [ 452.083455][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10631'. [ 452.359015][T28140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10642'. [ 453.354279][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10675'. [ 453.587497][T28229] netlink: 'syz.2.10683': attribute type 1 has an invalid length. [ 453.626227][T28229] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.10683'. [ 453.660490][T28229] netlink: 'syz.2.10683': attribute type 1 has an invalid length. [ 454.116305][T28257] block nbd4: NBD_DISCONNECT [ 454.391787][T28272] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.441709][T28274] netlink: 'syz.3.10706': attribute type 4 has an invalid length. [ 454.897207][T28305] syzkaller1: entered promiscuous mode [ 454.905843][T28305] syzkaller1: entered allmulticast mode [ 454.979589][T28310] __nla_validate_parse: 1 callbacks suppressed [ 454.979713][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10723'. [ 454.997147][T28310] block nbd3: Unsupported socket: should be TCP or UNIX. [ 455.996252][T28322] veth0: entered promiscuous mode [ 456.107078][T28321] veth0: left promiscuous mode [ 456.345565][T28345] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.258584][T28404] veth0: entered promiscuous mode [ 457.281531][T28401] veth0: left promiscuous mode [ 457.295546][T28411] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10767'. [ 457.548521][T28421] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 457.739498][T28442] syzkaller1: entered promiscuous mode [ 457.746536][T28442] syzkaller1: entered allmulticast mode [ 458.070574][T28464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10791'. [ 458.308985][T28477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10797'. [ 458.324464][T28479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10796'. [ 458.340213][T28477] netlink: 'syz.4.10797': attribute type 1 has an invalid length. [ 458.371960][T28477] netlink: 'syz.4.10797': attribute type 2 has an invalid length. [ 458.564726][T28491] sock: sock_set_timeout: `syz.4.10803' (pid 28491) tries to set negative timeout [ 459.193611][T28527] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.215581][T28527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.222904][T28527] IPv6: NLM_F_CREATE should be set when creating new route [ 459.276965][T28534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.284282][T28534] IPv6: NLM_F_CREATE should be set when creating new route [ 459.476180][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10833'. [ 459.485822][T28551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10833'. [ 459.505627][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10833'. [ 459.516279][T28551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10833'. [ 459.862773][T28576] syzkaller1: entered promiscuous mode [ 459.868427][T28576] syzkaller1: entered allmulticast mode [ 460.153384][T28591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10850'. [ 460.176032][T28591] netlink: 'syz.4.10850': attribute type 10 has an invalid length. [ 460.185140][T28591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10850'. [ 460.618736][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10861'. [ 461.324434][T28658] batadv_slave_1: entered promiscuous mode [ 461.345426][T28657] batadv_slave_1: left promiscuous mode [ 461.386578][T28664] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10885'. [ 462.284251][T28720] netlink: 'syz.2.10910': attribute type 1 has an invalid length. [ 462.637381][T28741] syzkaller1: entered promiscuous mode [ 462.647095][T28741] syzkaller1: entered allmulticast mode [ 462.658689][T28745] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 462.683229][T28745] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 462.701806][T28745] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 462.751829][T28745] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 462.974432][T28750] vlan0 (unregistering): left allmulticast mode [ 462.982002][T28750] veth0_vlan (unregistering): left allmulticast mode [ 462.989785][T28750] vlan0 (unregistering): left promiscuous mode [ 462.997155][ T30] audit: type=1800 audit(1784802699.579:3): pid=28758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10928" name="memory.events" dev="tmpfs" ino=10915 res=0 errno=0 [ 464.185421][ T13] smbdirect: ib_dev[syz2] removed [ 464.302836][T28803] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10946'. [ 464.335447][T28803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10946'. [ 464.573028][T28817] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 464.652714][T28824] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10956'. [ 465.378409][T28865] netlink: 'syz.1.10973': attribute type 3 has an invalid length. [ 465.616707][T28882] xt_hashlimit: size too large, truncated to 1048576 [ 465.676342][T28888] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.10984'. [ 465.716331][T28888] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 465.916091][T28898] netlink: 'syz.3.10989': attribute type 63 has an invalid length. [ 465.925964][T28898] netlink: 'syz.3.10989': attribute type 63 has an invalid length. [ 466.060539][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10994'. [ 466.080614][T28911] bond0: (slave bond_slave_1): Releasing backup interface [ 467.007566][T28969] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11023'. [ 467.092902][T28972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11025'. [ 467.304801][T28988] syz_tun: left promiscuous mode [ 467.324080][T28988] bridge0: port 3(syz_tun) entered disabled state [ 467.325853][T28992] netlink: 27 bytes leftover after parsing attributes in process `syz.2.11034'. [ 467.373884][T28988] bridge_slave_1: left allmulticast mode [ 467.390079][T28988] bridge_slave_1: left promiscuous mode [ 467.400349][T28988] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.448487][T28988] bridge_slave_0: left allmulticast mode [ 467.455283][T28988] bridge_slave_0: left promiscuous mode [ 467.465184][T28988] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.475504][T28999] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 468.098068][T29032] syzkaller1: entered promiscuous mode [ 468.113251][T29032] syzkaller1: entered allmulticast mode [ 468.705327][ T5629] ÿ speed is unknown, defaulting to 1000 [ 468.881347][T29082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11077'. [ 468.965446][ T5634] block nbd3: Receive control failed (result -107) [ 469.637400][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11097'. [ 469.663992][T29127] netlink: 'syz.1.11097': attribute type 7 has an invalid length. [ 469.685208][T29127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11097'. [ 469.856651][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11103'. [ 469.887732][T29140] gtp1: entered promiscuous mode [ 469.908639][T29140] gtp1: entered allmulticast mode [ 469.973475][T29146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11105'. [ 470.080627][T29138] ÿ speed is unknown, defaulting to 1000 [ 470.129504][T29138] virt_wifi0 speed is unknown, defaulting to 1000 [ 470.659199][T29138] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 470.905719][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.918244][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.930228][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.946953][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.978053][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.987319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.190316][T29202] bond0: invalid NS target ff00:: specified for addition [ 471.218402][T29202] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 471.342680][T29211] syzkaller1: entered promiscuous mode [ 471.352524][T29211] syzkaller1: entered allmulticast mode [ 471.858063][T29246] netlink: 'syz.2.11148': attribute type 4 has an invalid length. [ 472.020833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.147034][T29263] syzkaller1: entered promiscuous mode [ 472.162103][T29263] syzkaller1: entered allmulticast mode [ 472.184561][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.334064][T29277] smc: net device vlan1 applied user defined pnetid SYZ2 [ 472.350325][T29280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11165'. [ 472.399572][T29278] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 472.430118][T29282] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11165'. [ 472.460289][T29280] netlink: 500 bytes leftover after parsing attributes in process `syz.3.11165'. [ 472.601164][T29289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11168'. [ 473.230919][T29335] netlink: 'syz.2.11190': attribute type 1 has an invalid length. [ 473.253846][T29335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11190'. [ 473.508412][T29351] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 473.867457][T29374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 473.912260][T29376] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11209'. [ 474.466320][T29412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11226'. [ 474.691651][T29424] erspan0: entered promiscuous mode [ 474.734172][T29424] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.741485][T29424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.756920][T29424] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.836611][T29424] veth1_macvtap: entered promiscuous mode [ 474.861235][T29424] veth1_macvtap: entered allmulticast mode [ 474.907378][T29424] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 474.946964][T29424] 8021q: adding VLAN 0 to HW filter on device eth0 [ 474.964529][T29424] 8021q: adding VLAN 0 to HW filter on device eth1 [ 474.974133][T29424] 8021q: adding VLAN 0 to HW filter on device eth2 [ 474.994142][T29424] 8021q: adding VLAN 0 to HW filter on device eth3 [ 475.057809][ T5629] bond_slave_0: entered promiscuous mode [ 475.065104][ T5629] bond_slave_1: entered promiscuous mode [ 475.070894][ T5629] batadv0: entered promiscuous mode [ 475.097182][ T5629] team_slave_0: entered promiscuous mode [ 475.104558][ T5629] team_slave_1: entered promiscuous mode [ 475.110343][ T5629] geneve1: entered promiscuous mode [ 475.134252][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.141501][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.270607][ T48] ip6_tunnel:  xmit: Local address not yet configured! [ 475.371445][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.047581][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11260'. [ 476.669672][ T143] net_ratelimit: 6 callbacks suppressed [ 476.669773][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.685478][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.695249][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.709623][T29535] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.301787][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.326062][T29574] netlink: 'syz.3.11290': attribute type 17 has an invalid length. [ 477.342409][T29574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11290'. [ 477.359097][T29574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11290'. [ 477.375379][T29539] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.637457][T29539] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.730443][T29593] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.758205][ T5629] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.781652][T29539] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.942607][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.974916][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.983505][T29602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11299'. [ 478.084866][ T143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.203157][T29606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11299'. [ 478.231556][ T143] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.350769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.359559][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.564497][T29629] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11305'. [ 478.582726][ T5629] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 478.971628][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11314'. [ 479.086483][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11318'. [ 479.130281][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11318'. [ 479.181612][T29661] syzkaller1: entered promiscuous mode [ 479.189562][T29661] syzkaller1: entered allmulticast mode [ 479.380795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.389195][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 479.397035][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 479.446411][T29681] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11329'. [ 479.535538][T29686] netlink: 'syz.3.11330': attribute type 1 has an invalid length. [ 479.783421][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.861686][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.316941][T29724] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.413405][T29724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.425701][T29724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.431064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.511276][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.621739][T29734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.646717][T29732] syz_tun: entered allmulticast mode [ 480.654017][T29735] syz_tun: left allmulticast mode [ 480.659358][ T143] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.701123][ T143] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.737538][ T143] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.748119][ T143] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.009546][T29753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11358'. [ 481.102072][ T190] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 481.120424][T29758] netlink: 'syz.4.11364': attribute type 17 has an invalid length. [ 481.137034][T29758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11364'. [ 481.172352][T29758] gretap0: entered promiscuous mode [ 481.203121][T29758] gretap0: left promiscuous mode [ 482.073718][T29819] bridge2: entered promiscuous mode [ 482.091626][T29819] bridge2: entered allmulticast mode [ 482.421326][ T143] net_ratelimit: 2 callbacks suppressed [ 482.421355][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.449703][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.452728][T29844] block nbd4: server does not support multiple connections per device. [ 482.467862][T29844] block nbd4: shutting down sockets [ 482.467903][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.500825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.686498][T29858] netlink: 'syz.4.11407': attribute type 2 has an invalid length. [ 482.698284][T29858] netlink: 'syz.4.11407': attribute type 2 has an invalid length. [ 482.709140][T29858] __nla_validate_parse: 6 callbacks suppressed [ 482.709157][T29858] netlink: 67 bytes leftover after parsing attributes in process `syz.4.11407'. [ 483.257709][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11425'. [ 483.541104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.553067][T29915] trusted_key: syz.3.11432 sent an empty control message without MSG_MORE. [ 483.656455][T29921] netlink: 'syz.1.11434': attribute type 15 has an invalid length. [ 483.711765][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.075021][T29936] team0: Port device vlan0 removed [ 484.580754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.612743][T29972] syzkaller1: entered promiscuous mode [ 484.618448][T29972] syzkaller1: entered allmulticast mode [ 484.951882][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11463'. [ 485.354401][T30011] netlink: 'syz.4.11470': attribute type 1 has an invalid length. [ 485.400751][T30011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.550165][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.620897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.629168][T29193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.028326][T30050] syzkaller1: entered promiscuous mode [ 486.042733][T30050] syzkaller1: entered allmulticast mode [ 486.107289][T30054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11489'. [ 486.138029][T30056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11490'. [ 486.173314][T30059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11491'. [ 486.323066][T30067] veth1_to_bond: entered allmulticast mode [ 486.335678][T30067] veth1_to_bond: entered promiscuous mode [ 486.349064][T30067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11494'. [ 486.366120][T30067] veth1_to_bond (unregistering): left allmulticast mode [ 486.387203][T30067] veth1_to_bond (unregistering): left promiscuous mode [ 486.611617][T30079] bond5: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.629013][T30079] bond5: (slave C): Enslaving as an active interface with an up link [ 486.872738][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11507'. [ 487.086666][T30110] netlink: 'syz.3.11512': attribute type 13 has an invalid length. [ 487.106245][T30116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11515'. [ 487.541104][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 487.548464][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 487.686197][T30148] netlink: 'syz.3.11527': attribute type 2 has an invalid length. [ 488.540921][T30203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11552'. [ 488.563895][T30207] netlink: 'syz.4.11553': attribute type 2 has an invalid length. [ 488.581286][ T5761] net_ratelimit: 1 callbacks suppressed [ 488.581303][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.587286][T30194] ÿ speed is unknown, defaulting to 1000 [ 488.612784][T30207] netlink: 'syz.4.11553': attribute type 2 has an invalid length. [ 488.633107][T30207] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.11553'. [ 488.661836][T30194] virt_wifi0 speed is unknown, defaulting to 1000 [ 488.714844][T30211] xt_connbytes: Forcing CT accounting to be enabled [ 488.822108][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 488.832966][T29193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.839063][ T30] audit: type=1800 audit(1784802725.429:4): pid=30217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11557" name=680B20 dev="tmpfs" ino=11621 res=0 errno=0 [ 489.468331][T29193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.562096][T30257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11571'. [ 489.860793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.914175][T30272] netlink: 'syz.1.11576': attribute type 1 has an invalid length. [ 489.960370][T30276] netlink: 'syz.4.11578': attribute type 12 has an invalid length. [ 489.969149][T30272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.993195][T30272] bond5: (slave gretap0): making interface the new active one [ 490.002835][T30272] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 490.023458][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11578'. [ 490.065368][T30276] netlink: 'syz.4.11578': attribute type 12 has an invalid length. [ 490.114157][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11578'. [ 490.167847][T30285] netlink: 'syz.1.11583': attribute type 8 has an invalid length. [ 490.178254][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11583'. [ 490.210787][T30285] bond0: entered promiscuous mode [ 490.218694][T30285] bond_slave_0: entered promiscuous mode [ 490.227668][T30285] bond0: left promiscuous mode [ 490.233103][T30285] bond_slave_0: left promiscuous mode [ 490.268163][T30252] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 490.455568][T30301] netlink: 'syz.4.11590': attribute type 1 has an invalid length. [ 490.487928][T30301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11590'. [ 490.617866][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11594'. [ 490.629824][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11594'. [ 490.788065][T30326] netlink: 'syz.4.11600': attribute type 22 has an invalid length. [ 490.798857][T30326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11600'. [ 490.819152][T29193] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.819287][T30326] netlink: 'syz.4.11600': attribute type 22 has an invalid length. [ 490.834862][T29193] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.847236][T29193] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.901140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.382665][T29193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.458260][T30360] nbd: nbd1 already in use [ 491.471627][T30360] block nbd1: NBD_DISCONNECT [ 491.494853][T30360] block nbd1: Send disconnect failed -32 [ 491.516610][T30360] block nbd1: shutting down sockets [ 491.622516][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.772791][T30332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 491.802086][T30332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 491.952965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.927210][T30428] netlink: 'syz.2.11644': attribute type 22 has an invalid length. [ 492.980862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.830531][T30471] __nla_validate_parse: 7 callbacks suppressed [ 493.830549][T30471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11662'. [ 493.851389][T30472] validate_nla: 1 callbacks suppressed [ 493.851406][T30472] netlink: 'syz.4.11664': attribute type 1 has an invalid length. [ 493.905732][T30475] netlink: 'syz.3.11662': attribute type 16 has an invalid length. [ 493.987686][T30472] bond2: entered promiscuous mode [ 493.994009][T30472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.030944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.040131][T30476] bond2: (slave bridge4): making interface the new active one [ 494.048033][T30476] bridge4: entered promiscuous mode [ 494.068079][T30476] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 494.193373][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11668'. [ 494.259839][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11668'. [ 494.294111][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11668'. [ 494.327601][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11668'. [ 494.363127][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11668'. [ 494.582686][T30501] netlink: 'syz.1.11675': attribute type 5 has an invalid length. [ 494.667406][T30504] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.11677'. [ 494.671355][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.062810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.234288][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.643914][T30536] netlink: 'syz.2.11690': attribute type 21 has an invalid length. [ 495.678332][T30536] netlink: 'syz.2.11690': attribute type 22 has an invalid length. [ 495.694410][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11692'. [ 495.716250][T30536] netlink: 'syz.2.11690': attribute type 23 has an invalid length. [ 495.725168][T30538] netlink: 'syz.3.11692': attribute type 18 has an invalid length. [ 495.725188][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11692'. [ 495.726039][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11692'. [ 495.770128][T30536] netlink: 'syz.2.11690': attribute type 25 has an invalid length. [ 495.801592][T30538] netlink: 'syz.3.11692': attribute type 18 has an invalid length. [ 495.817808][T30536] netlink: 'syz.2.11690': attribute type 26 has an invalid length. [ 495.818355][ T30] audit: type=1800 audit(1784802732.409:5): pid=30545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11694" name=0A dev="tmpfs" ino=11607 res=0 errno=0 [ 496.111356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.345772][T30559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.470462][T30569] syzkaller1: entered promiscuous mode [ 496.479117][T30569] syzkaller1: entered allmulticast mode [ 496.505030][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.009345][T30578] syzkaller1: entered promiscuous mode [ 497.016454][T30578] syzkaller1: entered allmulticast mode [ 497.150941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.702549][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.381577][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 498.441557][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 498.464559][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 498.993351][ T29] vxcan1 speed is unknown, defaulting to 1000 [ 499.005588][T30659] infiniband syz2: set active [ 499.026673][T30659] infiniband syz2: added vxcan1 [ 499.147896][T30659] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 499.201455][T30692] validate_nla: 5 callbacks suppressed [ 499.201473][T30692] netlink: 'syz.3.11755': attribute type 13 has an invalid length. [ 499.217418][T30659] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 499.222045][T30692] __nla_validate_parse: 13 callbacks suppressed [ 499.222077][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11755'. [ 499.254092][T30692] netlink: 'syz.3.11755': attribute type 13 has an invalid length. [ 499.263620][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11755'. [ 499.272708][T30659] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 499.379401][T30659] RDS/IB: syz2: added [ 499.389426][T30659] smc: adding ib device syz2 with port count 1 [ 499.398236][T30659] smc: ib device syz2 port 1 has no pnetid [ 499.408961][ T5761] vxcan1 speed is unknown, defaulting to 1000 [ 499.442017][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 499.703975][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.948518][T30713] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 499.975337][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 500.325107][T30722] netlink: 'syz.0.11768': attribute type 21 has an invalid length. [ 500.333391][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11768'. [ 500.347591][T30722] netlink: 'syz.0.11768': attribute type 21 has an invalid length. [ 500.359719][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11768'. [ 500.525330][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 500.645993][T30730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11772'. [ 500.740861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.749039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.917000][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 500.984512][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.132830][T30659] vxcan1 speed is unknown, defaulting to 1000 [ 501.330443][T30662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.624040][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.780918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.262341][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.279462][T30758] netlink: 'syz.3.11783': attribute type 20 has an invalid length. [ 502.301058][T30758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11783'. [ 502.447474][T30770] bridge_slave_0: invalid flags given to default FDB implementation [ 502.474308][T30758] netlink: 'syz.3.11783': attribute type 20 has an invalid length. [ 502.496050][T30758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11783'. [ 502.821008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.901672][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 503.206456][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11798'. [ 503.554386][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 503.645007][T30809] syzkaller1: entered promiscuous mode [ 503.671542][T30809] syzkaller1: entered allmulticast mode [ 503.782248][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.860839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.932754][T30818] lo: entered allmulticast mode [ 503.969006][T30822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11811'. [ 504.001000][T30822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11811'. [ 504.642039][T30840] syzkaller1: entered promiscuous mode [ 504.657205][T30840] syzkaller1: entered allmulticast mode [ 504.794312][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11820'. [ 504.900947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.060503][T30860] netlink: 6 bytes leftover after parsing attributes in process `syz.4.11825'. [ 505.461095][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 505.579227][T30876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11832'. [ 505.729736][T30876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.802634][T30878] bond3: (slave batadv2): Opening slave failed [ 505.853752][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11834'. [ 505.941198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.751492][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.833788][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.934194][T30914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11849'. [ 506.980888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.992351][T30914] block nbd0: Unsupported socket: should be TCP or UNIX. [ 507.154982][T30926] syzkaller1: entered promiscuous mode [ 507.161838][T30926] syzkaller1: entered allmulticast mode [ 507.563056][T30941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.600043][T30941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.905701][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 508.021114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.052027][T29193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.201650][T30969] netlink: 'syz.2.11873': attribute type 1 has an invalid length. [ 508.433638][T30969] bond1: entered promiscuous mode [ 508.443173][T30969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.548563][T30975] bond1: (slave bridge3): making interface the new active one [ 508.578944][T30975] bridge3: entered promiscuous mode [ 508.605049][T30975] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 508.962535][T31001] syzkaller1: entered promiscuous mode [ 508.989014][T31001] syzkaller1: entered allmulticast mode [ 509.444601][T31026] syzkaller1: entered promiscuous mode [ 509.475261][T31026] syzkaller1: entered allmulticast mode [ 509.861762][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.950388][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11904'. [ 509.963723][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11904'. [ 510.582089][T29192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.620958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.969871][T31105] netlink: 'syz.0.11925': attribute type 1 has an invalid length. [ 512.073790][T31105] bond8: (slave geneve2): making interface the new active one [ 512.082178][T31105] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 512.129650][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.198032][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.235697][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.269568][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.501301][ T276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.660773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.911290][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.953394][T31143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11941'. [ 513.444865][T31163] C: Caught tx_queue_len zero misconfig [ 513.556206][T31171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.678944][T31168] syzkaller0: entered promiscuous mode [ 513.702647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.719606][T31168] syzkaller0: entered allmulticast mode [ 513.787619][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.740746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.787884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.960567][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.826916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.636456][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.863822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.750584][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11968'. [ 518.769340][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11968'. [ 518.900808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.981115][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.134634][T31250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.211616][T31250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.378180][ T91] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.423724][ T91] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.453882][ T91] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.483069][ T91] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.545759][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.561626][ T91] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.598120][ T91] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.645768][ T91] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.669983][ T91] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.755363][ T91] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe [ 519.941325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.539449][T31315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11988'. [ 520.980849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.113129][T31342] netlink: 'syz.2.11996': attribute type 21 has an invalid length. [ 521.136559][T31342] netlink: 'syz.2.11996': attribute type 22 has an invalid length. [ 521.169368][T31342] netlink: 'syz.2.11996': attribute type 23 has an invalid length. [ 521.198550][T31342] netlink: 'syz.2.11996': attribute type 25 has an invalid length. [ 521.223794][T31342] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11996'. [ 522.022417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.033393][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.271736][T31394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12010'. [ 522.741704][T31364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.061078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.334015][T31401] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 523.341760][T31401] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 523.349395][T31401] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 523.357072][T31401] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 523.364713][T31401] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 524.577946][T31486] netlink: 'syz.2.12039': attribute type 1 has an invalid length. [ 524.613720][T31486] netlink: 'syz.2.12039': attribute type 2 has an invalid length. [ 524.644341][T31486] netlink: 'syz.2.12039': attribute type 5 has an invalid length. [ 524.665589][T31486] netlink: 'syz.2.12039': attribute type 2 has an invalid length. [ 524.687242][T31486] netlink: 200 bytes leftover after parsing attributes in process `syz.2.12039'. [ 524.895024][T31496] GUP no longer grows the stack in syz.0.12042 (31496): 200000003000-20000000a000 (200000001000) [ 524.923112][T31496] CPU: 1 UID: 0 PID: 31496 Comm: syz.0.12042 Not tainted syzkaller #0 PREEMPT(full) [ 524.923138][T31496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 524.923151][T31496] Call Trace: [ 524.923159][T31496] [ 524.923168][T31496] dump_stack_lvl+0xe8/0x150 [ 524.923206][T31496] __get_user_pages+0x238c/0x2720 [ 524.923242][T31496] ? __gup_longterm_locked+0xc3b/0x15c0 [ 524.923290][T31496] __gup_longterm_locked+0xd52/0x15c0 [ 524.923314][T31496] ? lock_acquire+0x106/0x350 [ 524.923399][T31496] gup_fast_fallback+0x1d8c/0x20e0 [ 524.923451][T31496] ? __pfx_gup_fast_fallback+0x10/0x10 [ 524.923475][T31496] ? is_valid_gup_args+0x11f/0x200 [ 524.923496][T31496] ? get_user_pages_fast+0x4d/0xb0 [ 524.923517][T31496] __iov_iter_get_pages_alloc+0x378/0xa40 [ 524.923653][T31496] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 524.923686][T31496] iov_iter_get_pages2+0x5e/0xa0 [ 524.923715][T31496] __se_sys_vmsplice+0x7b5/0x1660 [ 524.923760][T31496] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 524.923786][T31496] ? __pfx_futex_wait+0x10/0x10 [ 524.923888][T31496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.923911][T31496] do_syscall_64+0x174/0x580 [ 524.923934][T31496] ? clear_bhb_loop+0x40/0x90 [ 524.923957][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.923977][T31496] RIP: 0033:0x7f676bf9de99 [ 524.923995][T31496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.924011][T31496] RSP: 002b:00007f676ce10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 524.924032][T31496] RAX: ffffffffffffffda RBX: 00007f676c225fa0 RCX: 00007f676bf9de99 [ 524.924045][T31496] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 524.924057][T31496] RBP: 00007f676c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 524.924068][T31496] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 524.924078][T31496] R13: 00007f676c226038 R14: 00007f676c225fa0 R15: 00007ffdd67cdf68 [ 524.924109][T31496] [ 525.143856][T31503] netlink: 'syz.1.12047': attribute type 1 has an invalid length. [ 525.265882][T31503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 525.294191][T31508] bond7: (slave geneve4): making interface the new active one [ 525.316515][T31508] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 525.375983][T31510] only policy match revision 0 supported [ 525.376008][T31510] unable to load match [ 525.946402][T31539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12062'. [ 525.995936][T31369] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.008169][T31539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12062'. [ 526.023858][T31369] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.051932][T31369] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.123110][T31369] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.155076][T31542] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 526.423861][T29192] net_ratelimit: 125 callbacks suppressed [ 526.423880][T29192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.504471][T31364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.525656][T31364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.779398][T31573] bridge0: port 1(vlan0) entered blocking state [ 526.803425][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.829100][T31573] bridge0: port 1(vlan0) entered disabled state [ 526.853678][T31573] vlan0: entered allmulticast mode [ 526.882152][T31573] geneve0: entered allmulticast mode [ 527.222238][T29192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.636488][T29192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.917588][T31612] Unsupported xt match [ 527.917622][T31612] unable to load match [ 528.191797][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.259030][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12090'. [ 528.260751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.506730][T31634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12093'. [ 528.764953][T31646] netlink: 'syz.2.12097': attribute type 1 has an invalid length. [ 528.776351][T31646] netlink: 'syz.2.12097': attribute type 4 has an invalid length. [ 528.785669][T31646] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.12097'. [ 529.066307][T31663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12105'. [ 529.154101][ T5634] block nbd1: Receive control failed (result -107) [ 530.036136][T31704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12120'. [ 531.422650][T31762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12143'. [ 531.436833][T31762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12143'. [ 532.257805][T31787] geneve5: entered promiscuous mode [ 532.342111][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 532.399425][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12157'. [ 532.664862][T31809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12162'. [ 532.742948][T31813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12165'. [ 532.780245][T31813] netlink: 'syz.4.12165': attribute type 1 has an invalid length. [ 532.905239][T31818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12166'. [ 533.023540][T31822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12168'. [ 533.125266][T31822] hsr_slave_1 (unregistering): left promiscuous mode [ 533.316772][T31836] netlink: 'syz.2.12175': attribute type 1 has an invalid length. [ 533.396890][T31842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12177'. [ 533.614006][T31849] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.12178'. [ 534.262667][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 4 [ 534.945454][T31900] syzkaller0: entered promiscuous mode [ 534.961475][T31900] syzkaller0: entered allmulticast mode [ 535.007584][T31904] xt_hashlimit: size too large, truncated to 1048576 [ 536.831303][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 538.111330][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.780450][T31936] __nla_validate_parse: 4 callbacks suppressed [ 538.780471][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12210'. [ 538.803552][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12210'. [ 539.135060][T31957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12216'. [ 539.520408][T31968] sctp: [Deprecated]: syz.0.12220 (pid 31968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.520408][T31968] Use struct sctp_sack_info instead [ 539.658443][T31972] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12223'. [ 539.682895][T31972] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12223'. [ 539.711145][T31938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.822102][T31974] netlink: 'syz.3.12222': attribute type 5 has an invalid length. [ 540.362715][T32001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12234'. [ 540.914863][T32010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12240'. [ 541.332300][T32033] netlink: 'syz.4.12248': attribute type 1 has an invalid length. [ 541.457405][T32039] tipc: Failed to remove unknown binding: 66,1,1/9480874:1002136543/1002136545 [ 541.635380][T32049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12252'. [ 541.687438][T32033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.731047][T32036] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 541.750249][T32040] bond4: entered promiscuous mode [ 541.756940][T32040] bond4: entered allmulticast mode [ 541.872124][T32057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12254'. [ 542.098215][T32049] 0ªX¹¦Dö»: entered promiscuous mode [ 542.108300][T32045] syzkaller1: entered promiscuous mode [ 542.122114][T32045] syzkaller1: entered allmulticast mode [ 542.446995][ T48] nci: nci_ntf_packet: unknown ntf opcode 0xd31 [ 542.483168][T32080] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 542.535847][T32083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12261'. [ 542.548153][T32080] xt_hashlimit: size too large, truncated to 1048576 [ 545.295076][T32071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.495033][T32107] netlink: 'syz.3.12267': attribute type 1 has an invalid length. [ 545.523663][T32107] netlink: 'syz.3.12267': attribute type 4 has an invalid length. [ 545.558051][T32107] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12267'. [ 546.296012][T32117] ÿ speed is unknown, defaulting to 1000 [ 546.359340][T32117] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.428656][T32117] vxcan1 speed is unknown, defaulting to 1000 [ 546.657803][T32130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12275'. [ 546.683232][T32130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12275'. [ 546.694826][T32130] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 547.184964][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12282'. [ 547.205857][T32145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12281'. [ 547.864507][T32163] syzkaller1: entered promiscuous mode [ 547.881861][T32163] syzkaller1: entered allmulticast mode [ 548.355070][T32174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12293'. [ 548.389938][T32174] block nbd0: reconnected socket [ 548.417600][ T5634] block nbd0: Receive control failed (result -32) [ 549.158048][T32207] netlink: 'syz.2.12307': attribute type 1 has an invalid length. [ 549.440091][T32207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.778282][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12311'. [ 553.404771][T32233] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 553.431341][T32233] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 553.863216][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12322'. [ 553.880477][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12321'. [ 553.939543][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12322'. [ 554.011624][T31369] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.027815][T31369] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.141382][T32267] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12325'. [ 554.150119][T31369] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.156752][T32267] openvswitch: netlink: Message has 512 unknown bytes. [ 554.182724][T31369] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.478225][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12347'. [ 555.561918][T32314] syzkaller1: entered promiscuous mode [ 555.577517][T32320] netlink: 'syz.2.12350': attribute type 1 has an invalid length. [ 555.586504][T32314] syzkaller1: entered allmulticast mode [ 555.807720][T32326] macvlan3: entered promiscuous mode [ 555.813575][T32326] macvlan3: entered allmulticast mode [ 555.834817][T32326] bond4: entered promiscuous mode [ 555.859049][T32326] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 555.919621][T32326] bond4: left promiscuous mode [ 556.019660][T32340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12355'. [ 556.078488][T32340] syzkaller1: entered promiscuous mode [ 556.087733][T32340] syzkaller1: entered allmulticast mode [ 556.167328][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12357'. [ 556.190961][T32346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12357'. [ 556.854194][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12365'. [ 558.639434][T32328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.634783][T32430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12388'. [ 559.963763][T32428] tipc: Started in network mode [ 559.969034][T32428] tipc: Node identity 9ee58dbc572e, cluster identity 4711 [ 559.979987][T32428] tipc: Enabled bearer , priority 0 [ 560.067321][T32431] syzkaller0: entered promiscuous mode [ 560.073815][T32431] syzkaller0: entered allmulticast mode [ 560.080068][T32431] tipc: Resetting bearer [ 560.125287][T32427] tipc: Resetting bearer [ 560.479145][T32461] netlink: 'syz.1.12396': attribute type 1 has an invalid length. [ 560.645643][T32465] netlink: 'syz.1.12396': attribute type 10 has an invalid length. [ 560.655243][T32465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12396'. [ 563.067329][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.436599][T32427] tipc: Disabling bearer [ 563.475261][T32440] syzkaller0: entered promiscuous mode [ 563.483626][T32440] syzkaller0: entered allmulticast mode [ 563.514096][T32461] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 563.609235][T32470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12397'. [ 566.819428][ T29] tipc: Node number set to 3385560508 [ 567.026979][T32481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12401'. [ 567.119344][T32483] ip6gre3: entered promiscuous mode [ 567.138226][T32483] ip6gre3: entered allmulticast mode [ 567.166664][T32486] syzkaller1: entered promiscuous mode [ 567.189319][T32486] syzkaller1: entered allmulticast mode [ 567.535539][T32504] netlink: 'syz.2.12411': attribute type 1 has an invalid length. [ 567.773591][T32504] bond5: entered promiscuous mode [ 567.811629][T32504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.865575][T32508] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 567.886996][T32508] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 567.901337][T32508] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 567.985015][T32511] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 567.998252][T32511] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 568.035538][T32527] netlink: 'syz.0.12415': attribute type 13 has an invalid length. [ 568.209489][T32530] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 568.283100][T32536] netlink: 'syz.3.12418': attribute type 4 has an invalid length. [ 568.287183][T32529] syzkaller0: entered promiscuous mode [ 568.310172][T32529] syzkaller0: entered allmulticast mode [ 568.462957][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12419'. [ 568.503310][T32546] bridge_slave_0: left allmulticast mode [ 568.509863][T32546] bridge_slave_0: left promiscuous mode [ 568.520719][T32546] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.536143][T32546] bridge_slave_1: left allmulticast mode [ 568.549949][T32546] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.579238][T32546] bond0: (slave bond_slave_0): Releasing backup interface [ 568.594369][T32546] bond_slave_0: left allmulticast mode [ 568.604989][T32546] bond0: (slave bond_slave_1): Releasing backup interface [ 568.626137][T32546] bond_slave_1: left allmulticast mode [ 568.644675][T32546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 568.706065][T32556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12423'. [ 568.716852][T32556] netlink: 'syz.4.12423': attribute type 3 has an invalid length. [ 568.728725][T32556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12423'. [ 568.739880][T32556] netlink: 'syz.4.12423': attribute type 3 has an invalid length. [ 569.133307][T32572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12430'. [ 569.326621][T32580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12432'. [ 569.579258][T32590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12435'. [ 569.707773][T32593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12435'. [ 570.051583][T32603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12438'. [ 570.082187][T32603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12438'. [ 570.296828][T32607] netlink: 'syz.0.12440': attribute type 1 has an invalid length. [ 570.399289][T32607] 8021q: adding VLAN 0 to HW filter on device bond10 [ 573.800976][T32607] bond10: (slave geneve3): making interface the new active one [ 573.841418][T32607] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 573.969845][T29192] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 574.005257][T29192] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 574.035094][T29192] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 574.046209][T32632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12446'. [ 574.076208][T29192] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 574.568424][T32653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.679344][T32653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.733127][T32659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12457'. [ 574.760247][T32659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12457'. [ 574.795125][T32655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.016049][T32665] syzkaller0: entered promiscuous mode [ 575.021933][T32665] syzkaller0: entered allmulticast mode [ 575.185562][T32671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12461'. [ 578.900470][T32701] netlink: 'syz.0.12467': attribute type 1 has an invalid length. [ 579.000025][T32705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12468'. [ 581.996348][T32701] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 582.000143][T32704] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 582.196829][T32716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12470'. [ 582.260224][T32721] sit0: Caught tx_queue_len zero misconfig [ 582.373072][T32726] syz_tun: entered allmulticast mode [ 582.389441][T32726] syz_tun: entered promiscuous mode [ 582.405355][T32726] team0: Port device syz_tun added [ 582.426949][T32720] syzkaller0: entered promiscuous mode [ 582.440455][T32720] syzkaller0: entered allmulticast mode [ 582.837020][T32740] syzkaller0: entered promiscuous mode [ 582.843568][T32746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12482'. [ 582.857704][T32740] syzkaller0: entered allmulticast mode [ 582.955872][T32751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12483'. [ 582.980121][T32752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12484'. [ 583.401301][T32758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12485'. [ 583.434457][T32758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12485'. [ 583.448217][T32762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.048055][T32762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.062349][T32762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.079238][T32762] veth1_vlan: left promiscuous mode [ 584.087587][T32762] veth0_vlan: left promiscuous mode [ 584.095874][T32762] veth0_vlan: entered promiscuous mode [ 584.104097][T32762] veth1_vlan: entered promiscuous mode [ 584.160068][T32762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.196663][T32762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.238459][T32762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.272453][T32762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.315621][T32762] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 584.436312][T32758] virtio_net virtio1 eth0: entered promiscuous mode [ 584.459980][T32758] ifb1: entered promiscuous mode [ 584.470419][T32758] debugfs: 'hsr0' already exists in 'hsr' [ 584.476971][T32758] Cannot create hsr debugfs directory [ 584.484996][T32758] hsr0: Slave B (ifb1) is not up; please bring it up to get a fully working HSR network [ 584.755027][ T327] netlink: 'syz.4.12495': attribute type 1 has an invalid length. [ 586.084006][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b57d000: rx timeout, send abort [ 586.267544][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880587dd400: rx timeout, send abort [ 586.619182][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b57d000: abort rx timeout. Force session deactivation [ 586.800136][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880587dd400: abort rx timeout. Force session deactivation [ 593.802338][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 596.517495][ C1] sched: DL replenish lagged too much [ 604.036035][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.045699][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.953758][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.047419][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.680597][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 689.687589][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P322/1:b..l [ 689.695958][ C1] rcu: (detected by 1, t=10502 jiffies, g=133881, q=3249 ncpus=2) [ 689.703874][ C1] task:syz.0.12493 state:R running task stack:23952 pid:322 tgid:321 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 689.718558][ C1] Call Trace: [ 689.721858][ C1] [ 689.724808][ C1] __schedule+0x17d9/0x56c0 [ 689.729459][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 689.735880][ C1] ? netif_receive_skb_list_internal+0xa70/0xcf0 [ 689.742230][ C1] ? __pfx___schedule+0x10/0x10 [ 689.747107][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 689.753453][ C1] ? eth_type_trans+0x352/0x800 [ 689.758413][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 689.765142][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 689.770545][ C1] preempt_schedule_common+0x82/0xd0 [ 689.775854][ C1] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 689.781503][ C1] preempt_schedule_thunk+0x16/0x40 [ 689.786723][ C1] __local_bh_enable_ip+0xe1/0x130 [ 689.791899][ C1] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 689.797461][ C1] bpf_test_run_xdp_live+0x1976/0x1c20 [ 689.802962][ C1] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 689.808539][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 689.814368][ C1] ? 0xffffffffa0206480 [ 689.818586][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 689.824512][ C1] ? _copy_from_user+0x94/0xb0 [ 689.829302][ C1] ? bpf_test_init+0x113/0x150 [ 689.834070][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 689.839544][ C1] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 689.844944][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 689.850775][ C1] ? __fget_files+0x2a/0x420 [ 689.855386][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 689.861204][ C1] bpf_prog_test_run+0x2c5/0x340 [ 689.866203][ C1] __sys_bpf+0xa22/0xd90 [ 689.870468][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 689.875245][ C1] ? irqentry_exit+0x218/0x8f0 [ 689.880026][ C1] ? do_futex+0x3e7/0x4e0 [ 689.884402][ C1] ? rcu_is_watching+0x15/0xb0 [ 689.889219][ C1] __x64_sys_bpf+0xba/0xd0 [ 689.893653][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.899733][ C1] do_syscall_64+0x174/0x580 [ 689.904340][ C1] ? clear_bhb_loop+0x40/0x90 [ 689.909030][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.914932][ C1] RIP: 0033:0x7f676bf9de99 [ 689.919351][ C1] RSP: 002b:00007f676ce10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.927782][ C1] RAX: ffffffffffffffda RBX: 00007f676c225fa0 RCX: 00007f676bf9de99 [ 689.935771][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 689.943756][ C1] RBP: 00007f676c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 689.951739][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.959749][ C1] R13: 00007f676c226038 R14: 00007f676c225fa0 R15: 00007ffdd67cdf68 [ 689.967766][ C1] [ 689.970793][ C1] rcu: rcu_preempt kthread starved for 2356 jiffies! g133881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 689.981989][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 689.991965][ C1] rcu: RCU grace-period kthread stack dump: [ 689.997851][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 690.011362][ C1] Call Trace: [ 690.014654][ C1] [ 690.017592][ C1] __schedule+0x17d9/0x56c0 [ 690.022117][ C1] ? __lock_acquire+0x683/0x2cf0 [ 690.027109][ C1] ? __pfx___schedule+0x10/0x10 [ 690.031987][ C1] ? schedule+0x90/0x2b0 [ 690.036246][ C1] schedule+0x164/0x2b0 [ 690.040416][ C1] schedule_timeout+0x152/0x2c0 [ 690.045277][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 690.050665][ C1] ? __pfx_process_timeout+0x10/0x10 [ 690.055967][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 690.061788][ C1] ? prepare_to_swait_event+0x322/0x350 [ 690.067382][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 690.072260][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 690.078429][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 690.083724][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 690.088945][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 690.094784][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 690.099487][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.104704][ C1] ? __kthread_parkme+0x71/0x1f0 [ 690.109653][ C1] ? __kthread_parkme+0x196/0x1f0 [ 690.114695][ C1] kthread+0x388/0x470 [ 690.118777][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 690.123983][ C1] ? __pfx_kthread+0x10/0x10 [ 690.128674][ C1] ret_from_fork+0x514/0xb70 [ 690.133318][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 690.138445][ C1] ? __switch_to+0xc89/0x1420 [ 690.143136][ C1] ? __pfx_kthread+0x10/0x10 [ 690.147761][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.152568][ C1] [ 690.155593][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 690.161929][ C1] Sending NMI from CPU 1 to CPUs 0: [ 690.167153][ C0] NMI backtrace for cpu 0 [ 690.167173][ C0] CPU: 0 UID: 0 PID: 30274 Comm: kworker/R-bond5 Not tainted syzkaller #0 PREEMPT(full) [ 690.167192][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.167204][ C0] Workqueue: bond5 bond_mii_monitor [ 690.167323][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 690.167350][ C0] Code: e8 db a3 24 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 6c ae 88 00 48 c7 c3 d8 f8 6d 93 49 03 1e 48 89 [ 690.167364][ C0] RSP: 0018:ffffc900000070c0 EFLAGS: 00000246 [ 690.167378][ C0] RAX: 1ffffffff1c9f2fa RBX: 0000000000000000 RCX: 0000000080000302 [ 690.167389][ C0] RDX: ffffc90000007101 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20 [ 690.167401][ C0] RBP: 1ffffffff22f0b01 R08: ffffc90000007f20 R09: 0000000000000000 [ 690.167413][ C0] R10: ffffc900000071d8 R11: fffff52000000e3d R12: ffffc90000000000 [ 690.167425][ C0] R13: ffffffff8176f27f R14: ffffffff8e4f97d0 R15: dffffc0000000000 [ 690.167437][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 690.167451][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.167462][ C0] CR2: 0000001b3451fff8 CR3: 0000000077bfa000 CR4: 00000000003526f0 [ 690.167476][ C0] Call Trace: [ 690.167482][ C0] [ 690.167491][ C0] unwind_next_frame+0x1b66/0x2550 [ 690.167523][ C0] ? net_rx_action+0x61d/0xf50 [ 690.167577][ C0] ? unwind_next_frame+0x8f/0x2550 [ 690.167594][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.167615][ C0] arch_stack_walk+0x11b/0x150 [ 690.167634][ C0] ? handle_softirqs+0x225/0x840 [ 690.167655][ C0] stack_trace_save+0xa9/0x100 [ 690.167674][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 690.167692][ C0] ? ktime_get+0x45/0x220 [ 690.167711][ C0] ? ktime_get+0x45/0x220 [ 690.167737][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 690.167758][ C0] ? ktime_get+0x1f5/0x220 [ 690.167777][ C0] kasan_save_track+0x3e/0x80 [ 690.167797][ C0] ? kasan_save_track+0x3e/0x80 [ 690.167817][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 690.167836][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 690.167855][ C0] ? skb_clone+0x212/0x3a0 [ 690.167894][ C0] ? vxcan_xmit+0x1e0/0x780 [ 690.167948][ C0] ? dev_hard_start_xmit+0x2cd/0x830 [ 690.167963][ C0] ? __dev_queue_xmit+0x14c0/0x3820 [ 690.167979][ C0] ? can_send+0x941/0xd30 [ 690.168041][ C0] ? can_can_gw_rcv+0xd09/0xfd0 [ 690.168078][ C0] ? can_rcv_filter+0x126/0x7a0 [ 690.168097][ C0] ? can_receive+0x2c6/0x440 [ 690.168114][ C0] ? can_rcv+0x1f9/0x330 [ 690.168131][ C0] ? process_backlog+0xbf0/0x1860 [ 690.168152][ C0] ? __napi_poll+0xaa/0x330 [ 690.168170][ C0] ? net_rx_action+0x61d/0xf50 [ 690.168212][ C0] __kasan_slab_alloc+0x6c/0x80 [ 690.168233][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 690.168251][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 690.168269][ C0] ? skb_clone+0x212/0x3a0 [ 690.168283][ C0] ? skb_clone+0x212/0x3a0 [ 690.168301][ C0] skb_clone+0x212/0x3a0 [ 690.168316][ C0] ? vxcan_xmit+0x1d3/0x780 [ 690.168333][ C0] vxcan_xmit+0x1e0/0x780 [ 690.168348][ C0] ? vxcan_xmit+0x49/0x780 [ 690.168366][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 690.168391][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 690.168407][ C0] ? stack_depot_save_flags+0x33/0x800 [ 690.168431][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 690.168449][ C0] ? can_rcv_filter+0x126/0x7a0 [ 690.168467][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 690.168482][ C0] ? can_rcv+0x1f9/0x330 [ 690.168500][ C0] ? process_backlog+0xbf0/0x1860 [ 690.168520][ C0] ? net_rx_action+0x61d/0xf50 [ 690.168540][ C0] ? handle_softirqs+0x225/0x840 [ 690.168557][ C0] ? __irq_exit_rcu+0xca/0x220 [ 690.168573][ C0] ? irq_exit_rcu+0x9/0x30 [ 690.168590][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 690.168614][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.168632][ C0] ? queue_delayed_work_on+0x17a/0x1e0 [ 690.168651][ C0] ? bond_mii_monitor+0x309d/0x3260 [ 690.168672][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 690.168690][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 690.168730][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 690.168750][ C0] can_send+0x941/0xd30 [ 690.168773][ C0] ? __pfx_can_send+0x10/0x10 [ 690.168790][ C0] ? skb_ext_add+0x3b3/0x8e0 [ 690.168840][ C0] ? skb_clone+0x246/0x3a0 [ 690.168855][ C0] ? can_can_gw_rcv+0x48f/0xfd0 [ 690.168871][ C0] can_can_gw_rcv+0xd09/0xfd0 [ 690.168891][ C0] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 690.168905][ C0] can_rcv_filter+0x126/0x7a0 [ 690.168925][ C0] ? can_receive+0x16c/0x440 [ 690.168944][ C0] can_receive+0x2c6/0x440 [ 690.168965][ C0] can_rcv+0x1f9/0x330 [ 690.168983][ C0] ? __pfx_can_rcv+0x10/0x10 [ 690.169002][ C0] process_backlog+0xbf0/0x1860 [ 690.169026][ C0] ? process_backlog+0x3c3/0x1860 [ 690.169053][ C0] __napi_poll+0xaa/0x330 [ 690.169074][ C0] net_rx_action+0x61d/0xf50 [ 690.169102][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 690.169122][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 690.169215][ C0] ? net_tx_action+0xbff/0xc30 [ 690.169238][ C0] handle_softirqs+0x225/0x840 [ 690.169257][ C0] ? __irq_exit_rcu+0xca/0x220 [ 690.169279][ C0] __irq_exit_rcu+0xca/0x220 [ 690.169297][ C0] irq_exit_rcu+0x9/0x30 [ 690.169313][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 690.169338][ C0] [ 690.169343][ C0] [ 690.169349][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 690.169366][ C0] RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 [ 690.169387][ C0] Code: 00 4d 85 f6 75 16 e8 15 1e 39 00 eb 15 e8 0e 1e 39 00 e8 a9 81 42 0a 4d 85 f6 74 ea e8 ff 1d 39 00 fb 65 48 8b 05 96 6c df 11 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f [ 690.169400][ C0] RSP: 0018:ffffc90003e177e0 EFLAGS: 00000293 [ 690.169414][ C0] RAX: 552605f416ed7700 RBX: ffff88807d089201 RCX: ffff888080103e00 [ 690.169426][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.169436][ C0] RBP: 0000000000000008 R08: ffffffff905785f7 R09: 1ffffffff20af0be [ 690.169447][ C0] R10: dffffc0000000000 R11: fffffbfff20af0bf R12: 0000000002000001 [ 690.169458][ C0] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 690.169478][ C0] ? bond_mii_monitor+0x16e/0x3260 [ 690.169501][ C0] bond_mii_monitor+0x309d/0x3260 [ 690.169527][ C0] ? register_lock_class+0x31/0x2e0 [ 690.169549][ C0] ? bond_mii_monitor+0x16e/0x3260 [ 690.169570][ C0] ? __lock_acquire+0x683/0x2cf0 [ 690.169593][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 690.169618][ C0] ? irqentry_exit+0x218/0x8f0 [ 690.169632][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 690.169655][ C0] ? irqentry_exit+0x218/0x8f0 [ 690.169668][ C0] ? trace_irq_disable+0x3b/0x140 [ 690.169690][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 690.169708][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 690.169735][ C0] ? rcu_is_watching+0x15/0xb0 [ 690.169760][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 690.169777][ C0] process_scheduled_works+0xa8e/0x14e0 [ 690.169809][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.169826][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 690.169847][ C0] ? assign_work+0x3af/0x5d0 [ 690.169866][ C0] rescuer_thread+0x7b6/0x10b0 [ 690.169889][ C0] ? rescuer_thread+0xb8/0x10b0 [ 690.169918][ C0] kthread+0x388/0x470 [ 690.169940][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 690.169959][ C0] ? __pfx_kthread+0x10/0x10 [ 690.169981][ C0] ret_from_fork+0x514/0xb70 [ 690.170005][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 690.170027][ C0] ? __switch_to+0xc89/0x1420 [ 690.170047][ C0] ? __pfx_kthread+0x10/0x10 [ 690.170070][ C0] ret_from_fork_asm+0x1a/0x30 [ 690.170093][ C0]