last executing test programs: 4.588272491s ago: executing program 1 (id=2953): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 3.607586943s ago: executing program 1 (id=2969): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 3.401784652s ago: executing program 2 (id=2972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffff7f000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.4015849s ago: executing program 1 (id=2974): sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xe0, 0x114, 0x1, "6c1a1997de916e81de402819a8b3829ef93db32ba5264982d99b61388d6689c9587989ca335c56297c6349fd7dfa8c0b169e97f2ffd7b889d6619a6fab34b559870d4e8ccc0f6c530105a63e57b7f6cefbd0e0f31a0910be021cd5911674076bde79ef9f108a593abe4066c5224d07790b3d334b5fb458403b1843d8ac3d893ca5783defe3989b110ca2f40906966ec104856e20fded6ab3f45354940c9fd962ebbec6e46f87e34973bb5a5fdb5da98843eb17677d571235f54700306428bac02d9c0518c9cc8e984f43d27adcbe"}], 0xe0, 0x2}, 0x38) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 3.310093597s ago: executing program 2 (id=2975): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) 3.285384316s ago: executing program 1 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="34000000130a03"], 0x34}}, 0x4000040) 3.166775816s ago: executing program 1 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3.145322556s ago: executing program 2 (id=2980): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 3.029555846s ago: executing program 1 (id=2984): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003904000000000000ffff00000000", @ANYRES32=r4, @ANYBLOB="03980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000040)='/', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) 1.895622913s ago: executing program 3 (id=2994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x90, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.417579011s ago: executing program 4 (id=2999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x3, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x5, 0x0, 0x0, 0x0, 0xfffff800, 0x4}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0xfffffffe, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x200, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000010}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x4000}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x400, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {0x1}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x2}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.41569931s ago: executing program 2 (id=3000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b2008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.294957635s ago: executing program 0 (id=3001): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000102"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 1.20406678s ago: executing program 4 (id=3002): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) 1.104146099s ago: executing program 0 (id=3003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1.077713793s ago: executing program 4 (id=3004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x25, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 938.509448ms ago: executing program 0 (id=3005): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xfeff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x2, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x1, 0x2, 0x7, 0x1, 0x0, 0x3}]}]}, 0x17c}}, 0x0) 881.143871ms ago: executing program 2 (id=3006): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d7", 0x4, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 881.014018ms ago: executing program 4 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 839.856407ms ago: executing program 3 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 786.027216ms ago: executing program 0 (id=3009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffff7f000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 706.358924ms ago: executing program 4 (id=3010): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000640)={0x0, 0x40f}, 0xc) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)="a4", 0x1}], 0x1) 672.299457ms ago: executing program 4 (id=3011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x40000) 640.705556ms ago: executing program 0 (id=3012): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 525.264732ms ago: executing program 3 (id=3013): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x20008040) 473.818908ms ago: executing program 0 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="18003080140001800800010002"], 0x34}}, 0x8000) 445.150767ms ago: executing program 3 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 309.902469ms ago: executing program 3 (id=3016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) close(r1) 233.341305ms ago: executing program 3 (id=3017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 0s ago: executing program 2 (id=3018): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1, 0x1, [0xe79]}, 0xa) kernel console output (not intermixed with test programs): ready. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 188.388108][ T9644] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 188.431228][ T9648] netlink: 63 bytes leftover after parsing attributes in process `syz.0.878'. [ 188.440659][ T9644] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 188.523151][ T9644] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 188.550903][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 188.552093][ T9665] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 188.620885][ T9667] siw: device registration error -23 [ 188.770919][ T9670] xt_TCPMSS: Only works on TCP SYN packets [ 189.128214][ T9690] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 189.172906][ T9690] nbd: error processing sock list [ 189.459777][ T9700] lo speed is unknown, defaulting to 1000 [ 189.493269][ T9700] wg1 speed is unknown, defaulting to 1000 [ 189.533187][ T9704] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 190.281728][ T9735] lo speed is unknown, defaulting to 1000 [ 190.311505][ T9735] wg1 speed is unknown, defaulting to 1000 [ 190.592291][ T9759] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 190.607108][ T9759] netlink: 'syz.0.906': attribute type 2 has an invalid length. [ 190.979332][ T9767] bond2: option packets_per_slave: invalid value (1048582) [ 190.986836][ T9767] bond2: option packets_per_slave: allowed values 0 - 65535 [ 191.045549][ T9767] bond2 (unregistering): Released all slaves [ 191.309713][ T9788] syzkaller0: entered promiscuous mode [ 191.324137][ T9788] syzkaller0: entered allmulticast mode [ 191.929441][ T9827] delete_channel: no stack [ 192.042804][ T9842] tipc: Enabled bearer , priority 0 [ 192.055286][ T9842] syzkaller0: entered promiscuous mode [ 192.067635][ T9842] syzkaller0: entered allmulticast mode [ 192.120297][ T9842] tipc: Resetting bearer [ 192.213167][ T9857] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 192.763327][ T9883] __nla_validate_parse: 13 callbacks suppressed [ 192.763349][ T9883] netlink: 192 bytes leftover after parsing attributes in process `syz.2.943'. [ 192.849702][ T9840] tipc: Resetting bearer [ 192.890906][ T9840] tipc: Disabling bearer [ 192.892301][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 192.922657][ T9885] lo speed is unknown, defaulting to 1000 [ 192.931779][ T9885] wg1 speed is unknown, defaulting to 1000 [ 192.970815][ T9892] net_ratelimit: 30 callbacks suppressed [ 192.970836][ T9892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.053613][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 193.101970][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 193.114466][ T9901] openvswitch: netlink: Duplicate or invalid key (type 0). [ 193.121991][ T9901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.436426][ T9919] tipc: Started in network mode [ 193.441624][ T9919] tipc: Node identity a2db63ce89b1, cluster identity 4711 [ 193.449176][ T9919] tipc: Enabled bearer , priority 0 [ 193.457011][ T9919] syzkaller0: entered promiscuous mode [ 193.463661][ T9919] syzkaller0: entered allmulticast mode [ 193.525360][ T9919] tipc: Resetting bearer [ 193.557104][ T9918] tipc: Resetting bearer [ 193.632020][ T9918] tipc: Disabling bearer [ 193.954921][ T9926] lo speed is unknown, defaulting to 1000 [ 193.976437][ T9939] netlink: 'syz.4.962': attribute type 5 has an invalid length. [ 193.998984][ T9939] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 194.025377][ T9926] wg1 speed is unknown, defaulting to 1000 [ 194.050234][ T9941] rdma_rxe: rxe_newlink: failed to add lo [ 194.610538][ T9954] netlink: 'syz.1.966': attribute type 39 has an invalid length. [ 194.967612][ T9971] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 194.992681][ T9971] netlink: 128 bytes leftover after parsing attributes in process `syz.3.972'. [ 195.014509][ T9971] netlink: 3 bytes leftover after parsing attributes in process `syz.3.972'. [ 195.187761][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 195.289257][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 195.301981][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 195.313055][T10001] x_tables: duplicate underflow at hook 1 [ 195.320258][T10002] x_tables: duplicate underflow at hook 1 [ 195.391113][T10001] syzkaller0: entered promiscuous mode [ 195.400124][T10001] syzkaller0: entered allmulticast mode [ 195.415765][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 195.536322][T10013] vlan2: entered promiscuous mode [ 195.541549][T10013] batadv0: entered promiscuous mode [ 195.558587][T10017] macsec1: entered promiscuous mode [ 195.565371][T10017] macsec1: entered allmulticast mode [ 195.715698][T10027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.795020][T10025] sctp: [Deprecated]: syz.2.986 (pid 10025) Use of int in max_burst socket option. [ 195.795020][T10025] Use struct sctp_assoc_value instead [ 196.175822][T10037] nbd: device at index 1 is going down [ 196.196894][ T1043] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.210599][ T1043] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.270100][ T1043] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.310045][ T1043] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.636173][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.678717][T10059] netlink: 'syz.3.995': attribute type 11 has an invalid length. [ 196.686674][T10059] netlink: 'syz.3.995': attribute type 11 has an invalid length. [ 196.920378][T10077] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 197.008592][T10082] netlink: 'syz.2.999': attribute type 3 has an invalid length. [ 197.202163][T10088] syzkaller0: create flow: hash 2860916526 index 1 [ 197.401913][T10092] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 197.412002][T10092] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 197.445404][ T1043] syzkaller0: tun_net_xmit 76 [ 197.450997][ T1043] syzkaller0: tun_net_xmit 48 [ 197.459363][T10086] syzkaller0: delete flow: hash 2860916526 index 1 [ 197.525420][T10099] netlink: 'syz.0.1004': attribute type 21 has an invalid length. [ 197.673454][T10104] TCP: TCP_TX_DELAY enabled [ 197.760842][T10107] netlink: 'syz.4.1005': attribute type 298 has an invalid length. [ 198.771460][T10108] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 198.820289][T10095] lo speed is unknown, defaulting to 1000 [ 198.845895][T10095] wg1 speed is unknown, defaulting to 1000 [ 198.963267][T10111] lo speed is unknown, defaulting to 1000 [ 199.044475][T10111] wg1 speed is unknown, defaulting to 1000 [ 199.302700][T10137] tipc: Enabling of bearer rejected, failed to enable media [ 199.359748][T10141] __nla_validate_parse: 29 callbacks suppressed [ 199.359764][T10141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1017'. [ 199.543917][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.566633][T10149] lo speed is unknown, defaulting to 1000 [ 199.628994][T10149] wg1 speed is unknown, defaulting to 1000 [ 199.735193][T10146] syzkaller0: entered promiscuous mode [ 199.743664][T10146] syzkaller0: entered allmulticast mode [ 199.958826][T10171] netlink: 'syz.3.1025': attribute type 2 has an invalid length. [ 199.975802][T10171] netlink: 'syz.3.1025': attribute type 3 has an invalid length. [ 199.983727][T10171] netlink: 'syz.3.1025': attribute type 3 has an invalid length. [ 199.993336][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1025'. [ 201.778640][T10198] mac80211_hwsim hwsim9 ªªªªª;: renamed from wlan0 [ 201.800644][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 201.824678][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 201.866876][T10203] netlink: 'syz.4.1030': attribute type 6 has an invalid length. [ 201.888482][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 201.930949][T10210] netlink: 'syz.4.1030': attribute type 6 has an invalid length. [ 202.078869][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1034'. [ 202.279132][T10227] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 202.408346][T10232] xt_l2tp: invalid flags combination: 8 [ 202.415898][T10230] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1037'. [ 202.451068][T10232] netlink: 'syz.2.1038': attribute type 22 has an invalid length. [ 202.637773][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 202.658572][T10242] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 202.753560][T10253] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1040'. [ 202.768351][T10253] ip6gretap0: entered promiscuous mode [ 202.774885][T10253] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1040'. [ 202.800890][T10242] lo speed is unknown, defaulting to 1000 [ 202.812468][T10242] wg1 speed is unknown, defaulting to 1000 [ 203.800932][T10298] lo speed is unknown, defaulting to 1000 [ 204.114394][T10319] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 204.125319][T10318] tipc: Enabled bearer , priority 0 [ 204.234472][T10318] syzkaller0: entered promiscuous mode [ 204.240128][T10318] syzkaller0: entered allmulticast mode [ 204.251108][T10317] veth0_to_bridge: entered promiscuous mode [ 204.272118][T10314] veth0_to_bridge: left promiscuous mode [ 204.431587][T10318] tipc: Resetting bearer [ 204.470583][T10321] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 204.542207][T10321] tipc: Resetting bearer [ 204.578682][T10345] openvswitch: netlink: IP tunnel dst address not specified [ 204.586173][T10321] tipc: Disabling bearer [ 204.614388][T10348] __nla_validate_parse: 4 callbacks suppressed [ 204.614486][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 204.677929][T10353] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 204.759838][T10348] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.837481][T10348] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.912497][T10348] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.956290][T10365] !: renamed from dummy0 (while UP) [ 204.977258][T10362] tipc: Enabled bearer , priority 0 [ 205.004252][T10362] syzkaller0: entered promiscuous mode [ 205.009968][T10362] syzkaller0: entered allmulticast mode [ 205.026015][T10348] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.068400][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 205.095997][T10362] tipc: Resetting bearer [ 205.133621][T10361] tipc: Resetting bearer [ 205.161999][T10361] tipc: Disabling bearer [ 205.206032][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 205.312361][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.339322][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.366844][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1081'. [ 205.391223][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.393102][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1081'. [ 205.455103][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.579139][T10391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1086'. [ 205.750711][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 205.801126][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 205.854410][T10412] lo speed is unknown, defaulting to 1000 [ 206.048573][T10421] syzkaller0: entered promiscuous mode [ 206.056232][T10421] syzkaller0: entered allmulticast mode [ 206.252840][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'. [ 206.443052][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 207.119237][T10469] tipc: Invalid UDP bearer configuration [ 207.119298][T10469] tipc: Enabling of bearer rejected, failed to enable media [ 207.183928][T10472] netlink: 'syz.0.1104': attribute type 30 has an invalid length. [ 207.586143][T10500] ipt_REJECT: ECHOREPLY no longer supported. [ 207.699561][T10504] tipc: Enabling of bearer rejected, failed to enable media [ 207.858852][T10517] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 207.859004][T10515] IPVS: stopping master sync thread 10517 ... [ 207.903048][T10515] tipc: Enabled bearer , priority 0 [ 207.911011][T10515] syzkaller0: entered promiscuous mode [ 207.918416][T10515] syzkaller0: entered allmulticast mode [ 207.960385][T10515] tipc: Resetting bearer [ 208.017283][T10514] tipc: Resetting bearer [ 208.048361][T10514] tipc: Disabling bearer [ 208.163470][T10522] netlink: 'syz.3.1117': attribute type 1 has an invalid length. [ 208.541383][T10533] netlink: zone id is out of range [ 208.561319][T10533] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 208.620058][T10533] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 208.701319][T10533] bond3 (unregistering): Released all slaves [ 208.886166][T10547] netlink: 'syz.1.1124': attribute type 5 has an invalid length. [ 209.193218][T10549] lo speed is unknown, defaulting to 1000 [ 209.288168][T10555] tipc: Enabled bearer , priority 0 [ 209.367405][T10548] tipc: Disabling bearer [ 209.569503][T10568] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 209.931841][T10585] syzkaller0: entered promiscuous mode [ 209.945886][T10585] syzkaller0: entered allmulticast mode [ 210.026238][T10589] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 210.046369][T10585] __nla_validate_parse: 8 callbacks suppressed [ 210.046390][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 210.144741][T10600] netlink: 'syz.0.1137': attribute type 11 has an invalid length. [ 210.507255][T10611] lo speed is unknown, defaulting to 1000 [ 210.915098][T10633] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 211.138510][T10646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1150'. [ 211.169400][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 211.180565][T10644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.260257][T10644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.446170][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 211.522797][T10675] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 211.585599][T10675] bond4: entered promiscuous mode [ 211.591113][T10675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.623100][T10675] lo speed is unknown, defaulting to 1000 [ 211.646809][T10675] lo speed is unknown, defaulting to 1000 [ 211.665861][T10675] lo speed is unknown, defaulting to 1000 [ 211.858609][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 211.858640][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 211.864804][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.892481][T10688] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1161'. [ 212.031273][ T24] lo speed is unknown, defaulting to 1000 [ 212.038002][T10675] infiniband syz0: set active [ 212.043284][T10675] infiniband syz0: added lo [ 212.118961][T10675] RDS/IB: syz0: added [ 212.130573][T10675] smc: adding ib device syz0 with port count 1 [ 212.137545][T10675] smc: ib device syz0 port 1 has no pnetid [ 212.147326][ T6557] lo speed is unknown, defaulting to 1000 [ 212.165609][T10675] lo speed is unknown, defaulting to 1000 [ 212.236784][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 212.380014][T10699] : renamed from bond_slave_0 [ 212.402428][T10699] tunl0: left promiscuous mode [ 212.419687][T10699] geneve2: left promiscuous mode [ 212.440322][T10699] bridge4: left promiscuous mode [ 212.558164][T10706] netlink: 'syz.3.1167': attribute type 13 has an invalid length. [ 212.581915][T10706] netlink: 'syz.3.1167': attribute type 17 has an invalid length. [ 212.583665][T10675] lo speed is unknown, defaulting to 1000 [ 212.606017][T10708] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 212.646805][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 212.878347][T10706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.045402][T10716] lo speed is unknown, defaulting to 1000 [ 213.149120][T10729] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 213.221436][T10729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.268926][T10729] bond4: (slave geneve3): making interface the new active one [ 213.316237][T10729] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 213.338827][ T1139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.359939][T10716] lo speed is unknown, defaulting to 1000 [ 213.362592][ T1139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.376107][ T1139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.394180][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.593009][T10745] lo speed is unknown, defaulting to 1000 [ 213.623518][T10675] lo speed is unknown, defaulting to 1000 [ 213.662327][T10756] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1176'. [ 213.923705][T10745] lo speed is unknown, defaulting to 1000 [ 214.070600][T10675] lo speed is unknown, defaulting to 1000 [ 214.257899][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 214.358131][T10770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 214.377042][T10767] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 214.388105][T10767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.549689][T10776] tipc: Enabled bearer , priority 0 [ 214.563280][T10776] syzkaller0: entered promiscuous mode [ 214.573887][T10776] syzkaller0: entered allmulticast mode [ 214.597493][T10675] lo speed is unknown, defaulting to 1000 [ 214.651279][T10784] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.673194][T10784] tipc: Resetting bearer [ 215.015183][T10675] lo speed is unknown, defaulting to 1000 [ 215.226466][T10790] lo speed is unknown, defaulting to 1000 [ 215.377119][T10775] tipc: Resetting bearer [ 215.415489][T10775] tipc: Disabling bearer [ 215.528892][T10801] netlink: 'syz.0.1189': attribute type 39 has an invalid length. [ 215.756229][T10805] __nla_validate_parse: 2 callbacks suppressed [ 215.756244][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1191'. [ 216.002382][T10810] netlink: 'syz.2.1193': attribute type 4 has an invalid length. [ 216.050019][T10810] netlink: 'syz.2.1193': attribute type 4 has an invalid length. [ 216.069257][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 216.236722][T10810] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.385842][T10810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.612028][T10822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.656032][ T6074] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 216.674261][ T6074] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.736553][ T6074] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 216.750132][ T6074] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.759239][ T6074] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 216.769387][ T6074] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.788334][ T6074] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 216.809072][ T6074] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.821883][T10831] netlink: 'syz.3.1196': attribute type 2 has an invalid length. [ 216.837087][T10831] : entered promiscuous mode [ 216.951250][T10842] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 216.990953][T10842] bond3: entered allmulticast mode [ 216.997272][T10842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.032540][T10842] bridge5: entered allmulticast mode [ 217.039893][T10842] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 217.074525][T10846] netlink: 'syz.1.1201': attribute type 8 has an invalid length. [ 217.084088][T10846] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 217.102775][ T6074] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.234415][ T37] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.312358][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 217.354680][T10864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 217.376736][T10850] lo speed is unknown, defaulting to 1000 [ 217.390216][T10857] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1205'. [ 217.402468][T10850] lo speed is unknown, defaulting to 1000 [ 217.410820][T10861] lo speed is unknown, defaulting to 1000 [ 217.421729][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 217.454453][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 217.472329][T10863] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1206'. [ 217.807395][T10861] lo speed is unknown, defaulting to 1000 [ 218.114562][T10885] x_tables: duplicate underflow at hook 2 [ 218.210956][T10882] lo speed is unknown, defaulting to 1000 [ 218.221980][T10889] netlink: 'syz.0.1216': attribute type 16 has an invalid length. [ 218.230305][T10889] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1216'. [ 218.314714][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 218.390071][T10891] bond1: entered promiscuous mode [ 218.395775][T10891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.439424][T10882] lo speed is unknown, defaulting to 1000 [ 219.360552][T10906] macsec0: left allmulticast mode [ 219.509963][T10913] geneve3: entered promiscuous mode [ 219.544111][ T1115] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.561907][ T1115] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 219.574182][ T1115] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.640830][ T1043] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.663868][ T1043] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 219.687643][ T1043] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.711498][ T1043] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.728037][ T1043] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 219.759319][ T1043] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 219.818593][ T1043] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.847688][ T1043] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 219.866418][ T1043] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 220.748262][T10961] pimreg: entered allmulticast mode [ 220.759659][T10959] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 220.766081][T10959] syzkaller1: linktype set to 260 [ 220.775965][T10959] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 220.813340][T10967] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 220.889914][T10961] __nla_validate_parse: 6 callbacks suppressed [ 220.889934][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 221.008335][T10969] lo speed is unknown, defaulting to 1000 [ 221.017456][T10969] lo speed is unknown, defaulting to 1000 [ 221.414498][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 221.465233][T10982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'. [ 221.550408][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'. [ 221.596337][T10983] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 221.742288][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 221.751765][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 221.929041][T10997] tap0: tun_chr_ioctl cmd 1074025677 [ 221.962652][T10997] tap0: linktype set to 1 [ 221.980525][T11000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1245'. [ 222.265452][T11013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1249'. [ 222.534947][T11030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1253'. [ 222.853287][T11042] gretap1: entered allmulticast mode [ 222.868300][T11053] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 222.916412][T11053] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1258'. [ 222.985507][T11053] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 223.030019][T11060] pim6reg1: entered allmulticast mode [ 223.137499][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 223.244919][T11068] vlan2: entered promiscuous mode [ 223.250332][T11068] vlan1: entered promiscuous mode [ 223.335368][T11080] netlink: 'syz.1.1265': attribute type 4 has an invalid length. [ 223.406926][T11080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.705795][T11103] tipc: Enabled bearer , priority 0 [ 223.736838][T11103] syzkaller0: entered promiscuous mode [ 223.757211][T11103] syzkaller0: entered allmulticast mode [ 223.951504][T11106] syzkaller0: entered promiscuous mode [ 223.974620][T11106] syzkaller0: entered allmulticast mode [ 224.069057][T11127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.117224][T11102] tipc: Resetting bearer [ 224.143828][T11102] tipc: Disabling bearer [ 224.177844][T11129] ip6gre2: entered promiscuous mode [ 224.638894][T11163] xt_TCPMSS: Only works on TCP SYN packets [ 225.842302][T11221] ipvlan2: entered promiscuous mode [ 225.869159][T11221] bridge0: port 3(ipvlan2) entered blocking state [ 225.885761][T11221] bridge0: port 3(ipvlan2) entered disabled state [ 225.900513][T11221] ipvlan2: entered allmulticast mode [ 225.911642][T11221] bridge0: entered allmulticast mode [ 225.937364][T11221] ipvlan2: left allmulticast mode [ 225.951413][T11221] bridge0: left allmulticast mode [ 226.016899][T11233] __nla_validate_parse: 7 callbacks suppressed [ 226.016920][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 226.197386][T11245] SET target dimension over the limit! [ 226.229490][T11233] netlink: 'syz.0.1304': attribute type 39 has an invalid length. [ 226.393323][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 226.637867][T11233] bond0: (slave syz_tun): Releasing backup interface [ 226.703127][T11263] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 226.791747][T11261] bond2: entered promiscuous mode [ 226.822811][T11261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.459305][T11313] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1321'. [ 227.578359][T11319] netlink: 'syz.1.1323': attribute type 49 has an invalid length. [ 227.874891][T11339] SET target dimension over the limit! [ 228.002568][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.017410][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.031105][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.042483][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.069903][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.078547][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.087645][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.096523][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.115930][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 228.365942][T11356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1332'. [ 228.399988][T11358] lo speed is unknown, defaulting to 1000 [ 228.422303][T11358] lo speed is unknown, defaulting to 1000 [ 229.101807][T11400] tipc: Enabled bearer , priority 0 [ 229.152068][T11401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.193307][T11400] syzkaller0: entered promiscuous mode [ 229.199024][ T10] lo speed is unknown, defaulting to 1000 [ 229.209183][T11400] syzkaller0: entered allmulticast mode [ 229.259385][T11399] tipc: Resetting bearer [ 229.286822][T11399] tipc: Disabling bearer [ 229.964811][T11438] macvlan2: entered promiscuous mode [ 229.989628][T11440] geneve0: entered promiscuous mode [ 230.015377][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.028971][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.047077][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.096227][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.288512][T11451] xt_hashlimit: size too large, truncated to 1048576 [ 230.373533][T11452] lo speed is unknown, defaulting to 1000 [ 230.466667][T11452] lo speed is unknown, defaulting to 1000 [ 230.478967][T11448] lo speed is unknown, defaulting to 1000 [ 230.686090][T11462] netlink: 'syz.4.1361': attribute type 4 has an invalid length. [ 230.854846][T11465] block nbd2: server does not support multiple connections per device. [ 230.869378][T11465] block nbd2: shutting down sockets [ 230.910044][T11474] netlink: 'syz.3.1364': attribute type 11 has an invalid length. [ 231.075660][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.102593][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.152783][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.171716][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.194238][T11448] lo speed is unknown, defaulting to 1000 [ 231.204591][T11484] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1368'. [ 231.268476][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 231.530594][T11492] lo speed is unknown, defaulting to 1000 [ 231.584588][T11492] lo speed is unknown, defaulting to 1000 [ 231.610335][T11496] Cannot find del_set index 2 as target [ 231.643632][T11496] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1371'. [ 231.770418][T11499] netlink: zone id is out of range [ 231.776102][T11499] netlink: zone id is out of range [ 231.781574][T11499] netlink: zone id is out of range [ 231.787234][T11499] netlink: zone id is out of range [ 231.792713][T11499] netlink: zone id is out of range [ 231.799181][T11499] netlink: zone id is out of range [ 231.804955][T11499] netlink: zone id is out of range [ 231.810269][T11499] netlink: zone id is out of range [ 231.816400][T11499] netlink: zone id is out of range [ 232.305761][T11506] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 232.322800][T11510] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1374'. [ 232.957107][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 233.277285][T11553] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 233.336657][T11553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.353953][T11558] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 233.366317][T11558] bond4: (slave batadv2): making interface the new active one [ 233.375989][T11558] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 233.384976][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 233.564969][T11553] bond4 (unregistering): (slave batadv2): Releasing active interface [ 233.577814][T11553] bond4 (unregistering): Released all slaves [ 233.700242][T11563] netlink: 'syz.0.1388': attribute type 3 has an invalid length. [ 233.719475][T11563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1388'. [ 233.917442][T11577] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 233.935829][T11577] netlink: 'syz.0.1392': attribute type 3 has an invalid length. [ 233.943882][T11577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1392'. [ 234.152968][T11590] bridge5: entered promiscuous mode [ 234.165237][T11590] bridge5: entered allmulticast mode [ 234.223553][T11593] lo speed is unknown, defaulting to 1000 [ 234.233494][T11593] lo speed is unknown, defaulting to 1000 [ 234.686964][T11605] tipc: Failed to remove unknown binding: 66,1,1/0:545002405/545002407 [ 234.710441][T11604] tipc: Failed to remove unknown binding: 66,1,1/0:545002405/545002407 [ 234.719222][T11604] tipc: Failed to remove unknown binding: 66,1,1/0:545002405/545002407 [ 234.985418][T11613] netlink: 'syz.3.1401': attribute type 3 has an invalid length. [ 235.079856][T11622] sctp: [Deprecated]: syz.3.1404 (pid 11622) Use of int in max_burst socket option. [ 235.079856][T11622] Use struct sctp_assoc_value instead [ 235.127063][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 235.250350][T11627] bridge_slave_1 (unregistering): left allmulticast mode [ 235.266296][T11627] bridge_slave_1 (unregistering): left promiscuous mode [ 235.273646][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.288002][T11631] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1406'. [ 235.357177][T11637] net_ratelimit: 44 callbacks suppressed [ 235.357191][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.652003][T11649] hsr_slave_1 (unregistering): left promiscuous mode [ 235.683309][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.813962][T11665] lo speed is unknown, defaulting to 1000 [ 235.824818][T11665] lo speed is unknown, defaulting to 1000 [ 235.918275][T11669] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 236.254873][T11684] __nla_validate_parse: 2 callbacks suppressed [ 236.254895][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 236.276576][T11686] ipt_REJECT: TCP_RESET invalid for non-tcp [ 236.351061][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 236.403368][T11688] netlink: 'syz.0.1419': attribute type 10 has an invalid length. [ 236.633639][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 236.680035][T11694] netlink: 'syz.2.1422': attribute type 39 has an invalid length. [ 236.783883][T11694] hsr_slave_1 (unregistering): left promiscuous mode [ 236.906337][T11713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 237.177312][T11724] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 237.206286][T11724] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 237.250274][T11706] lo speed is unknown, defaulting to 1000 [ 237.303117][T11722] lo speed is unknown, defaulting to 1000 [ 237.315658][T11706] lo speed is unknown, defaulting to 1000 [ 237.811327][T11722] lo speed is unknown, defaulting to 1000 [ 237.865290][T11746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.875226][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 237.887563][T11746] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.914682][T11746] batman_adv: batadv0: Interface activated: dummy0 [ 237.931148][T11746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.557222][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 238.575383][T11766] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1436'. [ 239.720660][T11763] lo speed is unknown, defaulting to 1000 [ 239.771897][T11763] lo speed is unknown, defaulting to 1000 [ 240.033419][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 240.095336][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 240.107874][T11790] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 240.604374][T11815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 240.660058][T11819] netlink: 'syz.1.1448': attribute type 4 has an invalid length. [ 240.685735][T11819] netlink: 'syz.1.1448': attribute type 4 has an invalid length. [ 240.914267][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 240.950516][T11828] openvswitch: netlink: Invalid VLAN frame [ 241.008989][T11832] x_tables: duplicate underflow at hook 3 [ 241.538259][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'. [ 241.582440][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'. [ 242.045473][T11884] syzkaller0: entered promiscuous mode [ 242.052895][T11884] syzkaller0: entered allmulticast mode [ 242.097526][T11884] tipc: Enabled bearer , priority 0 [ 242.107109][T11883] tipc: Resetting bearer [ 242.136835][T11883] tipc: Disabling bearer [ 242.364380][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 242.413176][T11903] syzkaller1: entered promiscuous mode [ 242.418914][T11903] syzkaller1: entered allmulticast mode [ 242.515248][T11908] netlink: 'syz.3.1478': attribute type 3 has an invalid length. [ 242.533367][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1478'. [ 243.244653][T11939] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.348186][T11952] Bluetooth: MGMT ver 1.23 [ 243.494856][T11954] bridge0: entered promiscuous mode [ 243.501830][T11954] bridge0: port 3(macvtap1) entered blocking state [ 243.510628][T11954] bridge0: port 3(macvtap1) entered disabled state [ 243.518697][T11954] macvtap1: entered allmulticast mode [ 243.533202][T11954] bridge0: entered allmulticast mode [ 243.566910][T11954] macvtap1: left allmulticast mode [ 243.585613][T11954] bridge0: left allmulticast mode [ 243.744902][T11954] bridge0: left promiscuous mode [ 243.772582][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'. [ 243.781943][T11956] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1491'. [ 243.793094][T11962] netlink: 'syz.1.1492': attribute type 18 has an invalid length. [ 243.802265][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 243.813262][T11962] netlink: 'syz.1.1492': attribute type 18 has an invalid length. [ 243.823554][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 244.009554][T11971] Cannot find del_set index 49151 as target [ 244.018735][T11969] lo speed is unknown, defaulting to 1000 [ 244.037730][T11969] lo speed is unknown, defaulting to 1000 [ 244.212268][T11983] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1498'. [ 244.400461][T11988] lo speed is unknown, defaulting to 1000 [ 244.455963][T11994] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 244.463749][T11994] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 244.545864][T11994] netlink: 'syz.3.1500': attribute type 2 has an invalid length. [ 244.553650][T11994] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 244.584309][T11994] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1500'. [ 244.696567][T11988] lo speed is unknown, defaulting to 1000 [ 245.254092][ T30] audit: type=1804 audit(1765454867.560:8): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1508" name="/newroot/310/cgroup.controllers" dev="tmpfs" ino=1614 res=1 errno=0 [ 245.336044][ T30] audit: type=1800 audit(1765454867.570:9): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.380036][T12029] netlink: 'syz.0.1508': attribute type 1 has an invalid length. [ 245.443520][ T30] audit: type=1800 audit(1765454867.570:10): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.473804][ T30] audit: type=1800 audit(1765454867.570:11): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.537419][ T30] audit: type=1800 audit(1765454867.570:12): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.624222][ T30] audit: type=1800 audit(1765454867.610:13): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.692234][ T30] audit: type=1800 audit(1765454867.610:14): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.784124][ T30] audit: type=1800 audit(1765454867.610:15): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.816592][ T30] audit: type=1800 audit(1765454867.610:16): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 245.877085][ T30] audit: type=1800 audit(1765454867.610:17): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="cgroup.controllers" dev="tmpfs" ino=1614 res=0 errno=0 [ 246.368766][T12072] syzkaller0: entered promiscuous mode [ 246.374514][T12072] syzkaller0: entered allmulticast mode [ 246.907682][T12094] syzkaller0: entered promiscuous mode [ 246.913230][T12094] syzkaller0: entered allmulticast mode [ 246.962540][T12106] lo speed is unknown, defaulting to 1000 [ 246.982564][T12106] lo speed is unknown, defaulting to 1000 [ 246.991522][T12109] netlink: 'syz.1.1528': attribute type 6 has an invalid length. [ 246.999538][T12109] __nla_validate_parse: 6 callbacks suppressed [ 246.999557][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1528'. [ 247.414586][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 247.451209][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 247.462029][T12131] ksmbd: Unknown IPC event: 0, ignore. [ 247.490176][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 247.607124][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 247.628837][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 249.032167][T12147] SET target dimension over the limit! [ 249.133176][T12151] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 249.257982][T12163] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1543'. [ 249.373570][T12171] syzkaller0: entered promiscuous mode [ 249.380976][T12171] syzkaller0: entered allmulticast mode [ 249.488290][T12180] netlink: 4124 bytes leftover after parsing attributes in process `syz.4.1546'. [ 249.997233][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 250.029551][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 250.199309][T12211] batadv3: entered promiscuous mode [ 250.306823][T12217] xt_connbytes: Forcing CT accounting to be enabled [ 250.540695][T12218] lo speed is unknown, defaulting to 1000 [ 250.610814][T12218] lo speed is unknown, defaulting to 1000 [ 250.614211][T12231] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 250.640719][T12230] ipvlan2: entered promiscuous mode [ 250.683024][T12230] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 250.712410][T12235] x_tables: duplicate underflow at hook 2 [ 251.094447][T12245] : entered promiscuous mode [ 251.106471][T12247] batadv0: left promiscuous mode [ 251.120666][T12247] bridge0: port 3(batadv0) entered disabled state [ 251.152181][T12247] bridge_slave_0: left allmulticast mode [ 251.174831][T12247] bridge_slave_0: left promiscuous mode [ 251.181006][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.886438][T12282] netlink: 'syz.3.1571': attribute type 13 has an invalid length. [ 251.898558][T12282] netlink: 'syz.3.1571': attribute type 17 has an invalid length. [ 251.918240][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 251.918266][ T30] audit: type=1800 audit(1765454874.240:30): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1569" name="memory.events" dev="tmpfs" ino=1001 res=0 errno=0 [ 252.003359][T12282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.085790][T12278] tipc: Enabled bearer , priority 0 [ 252.107850][T12284] syzkaller0: entered allmulticast mode [ 252.139780][T12278] tipc: Resetting bearer [ 252.214976][T12277] tipc: Disabling bearer [ 252.342065][T12302] netlink: 'syz.3.1574': attribute type 13 has an invalid length. [ 252.647696][T12305] netlink: 'syz.3.1574': attribute type 39 has an invalid length. [ 253.077217][T12315] __nla_validate_parse: 71 callbacks suppressed [ 253.077237][T12315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1576'. [ 253.267333][T12321] tipc: Enabled bearer , priority 0 [ 253.501718][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1582'. [ 254.823860][T12321] tipc: Disabling bearer [ 254.842862][ T5908] tipc: Node number set to 728392654 [ 255.038768][ T5962] lo speed is unknown, defaulting to 1000 [ 255.047934][ T5962] syz0: Port: 1 Link DOWN [ 255.068033][ T5962] lo speed is unknown, defaulting to 1000 [ 255.267351][T12376] netlink: 'syz.0.1590': attribute type 6 has an invalid length. [ 255.287081][T12377] netlink: 'syz.1.1591': attribute type 21 has an invalid length. [ 255.305335][T12376] netlink: 'syz.0.1590': attribute type 7 has an invalid length. [ 255.313133][T12376] netlink: 'syz.0.1590': attribute type 8 has an invalid length. [ 255.344590][T12377] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1591'. [ 255.420703][T12390] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 255.481899][T12390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.538138][T12390] bond4: (slave gretap1): making interface the new active one [ 255.573410][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 255.601631][T12390] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 255.651209][T12398] lo speed is unknown, defaulting to 1000 [ 255.790237][T12394] bond4 (unregistering): (slave gretap1): Releasing active interface [ 255.807984][T12394] bond4 (unregistering): Released all slaves [ 255.829177][T12398] lo speed is unknown, defaulting to 1000 [ 256.694627][T12439] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 256.788179][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 257.125607][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 257.398584][T12471] netlink: 'syz.3.1611': attribute type 5 has an invalid length. [ 257.410092][T12471] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 257.420582][T12471] bond0: (slave wlan1): Opening slave failed [ 257.634579][T12482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.718708][T12482] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.902582][T12482] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.928638][T12497] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1616'. [ 257.938675][T12497] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 257.984614][T12482] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.109842][T12482] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.162837][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 258.318360][T12494] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.453283][ T151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.536777][T12494] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.589987][T12494] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.596232][T12525] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 258.867617][T12530] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 259.005754][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1626'. [ 259.021601][T12534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1626'. [ 259.233542][T12552] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1629'. [ 259.386033][T12552] syzkaller1: entered promiscuous mode [ 259.391659][T12552] syzkaller1: entered allmulticast mode [ 259.460634][T12558] bond4: option lacp_active: invalid value (8) [ 259.478934][T12558] bond4 (unregistering): Released all slaves [ 259.525942][T12566] netlink: 'syz.2.1633': attribute type 7 has an invalid length. [ 259.951213][T12574] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1637'. [ 260.063292][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 260.102505][T12574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1637'. [ 260.565415][T12610] tipc: Enabled bearer , priority 0 [ 260.584717][T12610] syzkaller0: entered promiscuous mode [ 260.591133][T12610] syzkaller0: entered allmulticast mode [ 260.628116][T12610] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1644'. [ 260.767446][T12610] tipc: Resetting bearer [ 260.788995][T12609] tipc: Resetting bearer [ 260.832493][T12609] tipc: Disabling bearer [ 260.881293][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 260.981112][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.310122][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1651'. [ 261.364461][T12634] lo speed is unknown, defaulting to 1000 [ 261.386279][T12634] lo speed is unknown, defaulting to 1000 [ 261.388381][T12640] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 261.415380][T12640] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 261.503183][T12640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.542545][T12640] bond5: entered promiscuous mode [ 261.595769][T12650] syzkaller1: entered promiscuous mode [ 261.601294][T12650] syzkaller1: entered allmulticast mode [ 262.066684][T12667] syzkaller1: entered allmulticast mode [ 262.901862][T12726] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 263.241625][T12734] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 264.516817][T12734] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 264.747265][T12750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.871368][T12757] __nla_validate_parse: 7 callbacks suppressed [ 264.871390][T12757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1681'. [ 264.921351][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'. [ 265.010821][T12757] tun0: tun_chr_ioctl cmd 1074025675 [ 265.023522][T12757] tun0: persist enabled [ 265.038308][T12757] tun0: tun_chr_ioctl cmd 1074025675 [ 265.052734][T12757] tun0: persist disabled [ 265.064637][T12742] "syz.2.1676" (12742) uses obsolete ecb(arc4) skcipher [ 265.285174][T12777] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1688'. [ 265.583883][T12789] netlink: 'syz.4.1691': attribute type 32 has an invalid length. [ 265.591926][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 266.680618][T12784] syzkaller0: entered promiscuous mode [ 266.686483][T12784] syzkaller0: entered allmulticast mode [ 266.712004][T12789] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 266.910449][T12798] batadv_slave_0: entered promiscuous mode [ 267.011898][T12805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.037312][T12797] batadv_slave_0: left promiscuous mode [ 267.086901][T12807] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1697'. [ 267.182831][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 267.317350][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 267.799313][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 267.925736][T12858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1708'. [ 267.998498][T12849] bridge_slave_1 (unregistering): left allmulticast mode [ 268.014907][T12849] bridge_slave_1 (unregistering): left promiscuous mode [ 268.032002][T12849] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.511428][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1714'. [ 269.054466][T12896] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 269.061872][T12896] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 270.049746][T12922] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 270.060437][T12922] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 270.165996][T12927] __nla_validate_parse: 3 callbacks suppressed [ 270.166017][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 270.200685][T12930] lo speed is unknown, defaulting to 1000 [ 270.211055][T12930] lo speed is unknown, defaulting to 1000 [ 270.681526][T12950] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1732'. [ 271.354535][T12959] tipc: Enabled bearer , priority 0 [ 271.396502][T12959] tipc: Resetting bearer [ 271.646384][T12958] tipc: Disabling bearer [ 272.145100][T12979] netlink: 'syz.0.1738': attribute type 4 has an invalid length. [ 272.163186][T12979] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1738'. [ 272.253578][T12979] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1738'. [ 272.425923][T12990] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 272.836176][T13008] lo speed is unknown, defaulting to 1000 [ 272.847652][T13018] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1748'. [ 272.848814][T13008] lo speed is unknown, defaulting to 1000 [ 273.623199][T13072] geneve2: entered promiscuous mode [ 273.671410][ T1095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.692351][ T1095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.731796][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1754'. [ 273.760291][ T1095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.788724][ T1095] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.817901][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 273.877344][T13073] lo speed is unknown, defaulting to 1000 [ 273.900254][T13084] lo speed is unknown, defaulting to 1000 [ 273.943226][T13073] lo speed is unknown, defaulting to 1000 [ 274.063710][T13090] netlink: 'syz.0.1759': attribute type 6 has an invalid length. [ 274.072365][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'. [ 274.491582][T13107] lo speed is unknown, defaulting to 1000 [ 274.618793][T13084] lo speed is unknown, defaulting to 1000 [ 274.673592][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 274.841640][T13128] tipc: Enabled bearer , priority 0 [ 274.849623][T13128] syzkaller0: entered promiscuous mode [ 274.868324][T13128] syzkaller0: entered allmulticast mode [ 275.218683][T13107] lo speed is unknown, defaulting to 1000 [ 275.595950][T13148] netlink: 'syz.2.1774': attribute type 33 has an invalid length. [ 275.603802][T13148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1774'. [ 275.637019][T13148] `: renamed from team0 (while UP) [ 275.665393][T13127] tipc: Resetting bearer [ 275.706491][T13127] tipc: Disabling bearer [ 276.394522][T13176] ip6erspan0: entered promiscuous mode [ 276.538214][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1782'. [ 276.651884][T13189] xt_cgroup: xt_cgroup: no path or classid specified [ 276.906253][T13202] tipc: Enabling of bearer rejected, failed to enable media [ 277.170281][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'. [ 277.231502][T13221] gretap0: entered promiscuous mode [ 277.441488][T13223] lo speed is unknown, defaulting to 1000 [ 277.526957][T13223] lo speed is unknown, defaulting to 1000 [ 278.049776][T13252] syzkaller0: entered promiscuous mode [ 278.056455][T13252] syzkaller0: entered allmulticast mode [ 278.352541][T13269] ip6gre1: entered promiscuous mode [ 278.389335][T13269] ip6gre1: entered allmulticast mode [ 278.397189][T13057] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.414871][T13272] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.445581][ T6571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.445609][T13057] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.488846][T13269] tipc: Enabling of bearer rejected, failed to enable media [ 278.676302][T13285] lo: entered allmulticast mode [ 278.687183][ T6571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.695300][T13286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1809'. [ 278.735585][T13285] netlink: 'syz.0.1808': attribute type 6 has an invalid length. [ 278.745983][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 278.766651][T13284] lo: left allmulticast mode [ 278.864738][T13295] netlink: 'syz.4.1813': attribute type 2 has an invalid length. [ 278.875544][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.900707][T13295] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1813'. [ 278.910503][T13295] netem: invalid attributes len -18 [ 278.916501][T13295] netem: change failed [ 278.923457][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 278.950420][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 278.961550][T13295] netlink: 147012 bytes leftover after parsing attributes in process `syz.4.1813'. [ 278.971500][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1812'. [ 279.135370][T13289] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 279.166998][T13297] lo speed is unknown, defaulting to 1000 [ 279.179243][T13297] lo speed is unknown, defaulting to 1000 [ 279.332916][T13314] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 279.819339][T13331] vti0: entered promiscuous mode [ 279.881119][T13334] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 279.988936][T13336] nbd2: detected capacity change from 0 to 127 [ 280.043167][T13342] veth0_to_batadv: entered promiscuous mode [ 280.081540][T13342] veth0_to_batadv: entered allmulticast mode [ 280.088049][ T5844] block nbd2: Receive control failed (result -32) [ 280.225367][ T10] IPVS: starting estimator thread 0... [ 280.231098][T13346] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.324267][T13348] IPVS: using max 24 ests per chain, 57600 per kthread [ 280.633261][T13373] __nla_validate_parse: 3 callbacks suppressed [ 280.633283][T13373] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1835'. [ 280.662172][T13373] openvswitch: netlink: Flow key attr not present in new flow. [ 280.719250][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 281.402673][T13411] netlink: 'syz.4.1847': attribute type 14 has an invalid length. [ 281.413827][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 281.424312][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 281.434250][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 281.443642][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 281.460744][T13417] netlink: 'syz.4.1847': attribute type 14 has an invalid length. [ 281.601308][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 281.635346][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 281.646592][T13427] netlink: 'syz.2.1850': attribute type 13 has an invalid length. [ 281.654743][T13427] netlink: 'syz.2.1850': attribute type 11 has an invalid length. [ 281.672204][T13429] lo speed is unknown, defaulting to 1000 [ 281.698313][T13429] lo speed is unknown, defaulting to 1000 [ 281.992679][T13440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 282.118956][T13444] tipc: Enabled bearer , priority 0 [ 282.127383][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 282.174648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.300122][T13444] syzkaller0: entered promiscuous mode [ 282.308668][T13444] syzkaller0: entered allmulticast mode [ 282.471388][T13457] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 282.493232][T13458] tipc: Resetting bearer [ 282.607386][T13459] macvlan4: entered promiscuous mode [ 282.622771][T13459] macvlan4: entered allmulticast mode [ 282.640624][T13459] bond5: entered promiscuous mode [ 282.646679][T13459] bridge6: entered promiscuous mode [ 282.660831][T13459] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 282.669942][T13459] bond5: left promiscuous mode [ 282.675051][T13459] bridge6: left promiscuous mode [ 282.777371][T13441] tipc: Resetting bearer [ 282.839344][T13441] tipc: Disabling bearer [ 282.946042][T13475] lo speed is unknown, defaulting to 1000 [ 282.953670][T13475] lo speed is unknown, defaulting to 1000 [ 283.518461][T13498] lo speed is unknown, defaulting to 1000 [ 283.593161][T13498] lo speed is unknown, defaulting to 1000 [ 283.737210][T13517] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 283.874375][T13517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.986077][T13519] bond5: (slave ip6gretap2): making interface the new active one [ 284.021220][T13519] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 284.118984][T13524] veth3: entered promiscuous mode [ 284.249688][T13517] erspan0: entered allmulticast mode [ 284.735633][T13548] netlink: 'syz.1.1882': attribute type 4 has an invalid length. [ 284.757237][T13548] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 284.804451][T13544] lo speed is unknown, defaulting to 1000 [ 284.812353][T13544] lo speed is unknown, defaulting to 1000 [ 284.919533][T13550] veth5: entered allmulticast mode [ 285.276935][T13563] tipc: Enabling not permitted [ 285.292743][T13563] tipc: Enabling of bearer rejected, failed to enable media [ 285.325363][T13563] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 285.760195][T13586] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 285.799990][T13583] lo speed is unknown, defaulting to 1000 [ 285.851445][T13583] lo speed is unknown, defaulting to 1000 [ 285.965391][T13597] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 286.067558][T13597] team0: Port device 0! added [ 286.539879][T13599] team0: Port device 0! removed [ 286.560665][T13599] bond0: (slave bond_slave_0): Releasing backup interface [ 286.591085][T13599] bond0: (slave bond_slave_1): Releasing backup interface [ 286.612968][T13599] team0: Port device team_slave_0 removed [ 286.622747][T13599] team0: Port device team_slave_1 removed [ 286.629140][T13599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.640044][T13599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.649229][T13599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.774534][T13609] __nla_validate_parse: 7 callbacks suppressed [ 286.774555][T13609] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1901'. [ 286.851109][T13613] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1903'. [ 286.985210][T13620] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 287.254285][T13627] lo speed is unknown, defaulting to 1000 [ 287.276335][T13626] lo speed is unknown, defaulting to 1000 [ 287.276457][T13627] lo speed is unknown, defaulting to 1000 [ 287.548867][T13635] netlink: 'syz.4.1908': attribute type 11 has an invalid length. [ 287.732908][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 287.795270][T13641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1910'. [ 287.867520][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 287.905808][T13639] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 287.907857][T13626] lo speed is unknown, defaulting to 1000 [ 288.757403][T13678] syzkaller0: entered promiscuous mode [ 288.783595][T13678] syzkaller0: entered allmulticast mode [ 289.070871][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1921'. [ 289.585635][T13703] lo speed is unknown, defaulting to 1000 [ 289.606575][T13703] lo speed is unknown, defaulting to 1000 [ 289.766126][T13705] tipc: Enabled bearer , priority 0 [ 289.774296][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.911475][T13705] syzkaller0: entered promiscuous mode [ 289.920395][T13705] syzkaller0: entered allmulticast mode [ 289.927518][T13705] tipc: Resetting bearer [ 289.955754][T13704] tipc: Resetting bearer [ 291.678479][T13704] tipc: Disabling bearer [ 291.901490][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 292.026503][T13734] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1933'. [ 292.256771][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 292.284596][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 292.435555][T13759] netlink: 'syz.0.1936': attribute type 10 has an invalid length. [ 292.511920][T13760] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 292.614705][T13743] nbd4: detected capacity change from 0 to 127 [ 292.642351][T13756] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1936'. [ 292.652930][T13756] nbd: couldn't find a device at index 0 [ 292.661055][ T5844] block nbd4: Receive control failed (result -32) [ 292.728830][T13767] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 293.018649][T13774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.046479][T13774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.399493][T13774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.415858][T13774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.636168][T13774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.677110][T13774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.729652][T13804] lo speed is unknown, defaulting to 1000 [ 293.807119][T13774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.824187][T13774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.852650][T13804] lo speed is unknown, defaulting to 1000 [ 294.164924][T13063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.188926][T13832] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1953'. [ 294.236815][T13832] netlink: 175 bytes leftover after parsing attributes in process `syz.3.1953'. [ 294.374265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.384081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.817565][T13864] netlink: 'syz.1.1963': attribute type 6 has an invalid length. [ 294.835317][T13864] netlink: 'syz.1.1963': attribute type 7 has an invalid length. [ 294.879913][T13864] netlink: 'syz.1.1963': attribute type 8 has an invalid length. [ 294.929028][T13864] netlink: 'syz.1.1963': attribute type 13 has an invalid length. [ 294.935135][T13045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.945739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.232699][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 295.395729][T13039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.448294][T13890] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1970'. [ 295.513403][T13889] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 295.531836][T13889] bond5 (unregistering): Released all slaves [ 295.546740][T13896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.574313][T13896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.588812][T13890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1970'. [ 295.614469][T13892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.623171][T13892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.815797][T13901] lo speed is unknown, defaulting to 1000 [ 295.823389][T13901] lo speed is unknown, defaulting to 1000 [ 296.023428][T13914] netlink: 'syz.2.1977': attribute type 11 has an invalid length. [ 296.476087][T13931] syzkaller0: entered promiscuous mode [ 296.494435][T13931] syzkaller0: entered allmulticast mode [ 296.591045][T13933] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 297.009234][T13961] __nla_validate_parse: 72 callbacks suppressed [ 297.009260][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 297.068402][T13961] chnl_net:caif_netlink_parms(): no params data found [ 297.333639][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 297.352306][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 297.361564][T13972] netlink: 'syz.2.1991': attribute type 18 has an invalid length. [ 297.735515][T13995] netlink: 'syz.1.2000': attribute type 39 has an invalid length. [ 297.987305][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2007'. [ 298.018012][T14014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2007'. [ 298.077355][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.451122][T14036] lo speed is unknown, defaulting to 1000 [ 298.468860][T14036] lo speed is unknown, defaulting to 1000 [ 298.510756][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 298.942592][T14059] netlink: 'syz.1.2015': attribute type 28 has an invalid length. [ 298.956354][T14059] netlink: 'syz.1.2015': attribute type 3 has an invalid length. [ 298.987160][T14059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2015'. [ 299.025778][T14064] netlink: 'syz.4.2018': attribute type 10 has an invalid length. [ 299.046705][T14067] netlink: 'syz.0.2019': attribute type 96 has an invalid length. [ 299.072774][T14064] veth1_macvtap: left promiscuous mode [ 299.090399][T14064] team0: Device veth1_macvtap failed to register rx_handler [ 299.115067][T14059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2015'. [ 299.398731][T14080] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2022'. [ 299.854313][T13062] net_ratelimit: 5 callbacks suppressed [ 299.854333][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.281841][T14127] netlink: 'syz.2.2031': attribute type 1 has an invalid length. [ 300.303835][T14127] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2031'. [ 300.426786][T14136] syzkaller0: entered promiscuous mode [ 300.441030][T14136] syzkaller0: entered allmulticast mode [ 300.530384][T14144] batadv1: entered promiscuous mode [ 300.553636][T14149] netlink: 'syz.2.2034': attribute type 39 has an invalid length. [ 300.569742][T14145] batadv1: entered promiscuous mode [ 300.659615][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.668404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.750393][T14157] tipc: Enabled bearer , priority 0 [ 300.758839][T14158] syzkaller0: entered promiscuous mode [ 300.793932][T14158] syzkaller0: entered allmulticast mode [ 300.906378][T14167] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 300.967415][T14167] bond6: entered promiscuous mode [ 300.973052][T14167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.034522][T14157] tipc: Resetting bearer [ 301.054414][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.084404][T14157] tipc: Disabling bearer [ 301.093618][T14176] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 301.170292][T13045] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.190510][T13045] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.219745][T13045] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.281273][T13045] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.313803][T14189] xt_socket: unknown flags 0xfc [ 301.466493][T14200] netlink: 'syz.2.2050': attribute type 20 has an invalid length. [ 301.676681][T14221] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 301.687965][T14221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 302.040415][T14248] __nla_validate_parse: 5 callbacks suppressed [ 302.040437][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 302.059563][T14248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'. [ 302.070841][T14250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'. [ 302.139563][T14250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.154753][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 302.173153][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.189739][T14256] bridge_slave_0: left allmulticast mode [ 302.250986][T14256] bridge_slave_0: left promiscuous mode [ 302.287349][T14256] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.431863][T14267] erspan0: left allmulticast mode [ 302.444227][T14267] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 302.465831][T14274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.474393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.603169][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2070'. [ 302.956030][T14296] lo speed is unknown, defaulting to 1000 [ 302.971583][T14296] lo speed is unknown, defaulting to 1000 [ 302.993271][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 303.020965][T14303] validate_nla: 4 callbacks suppressed [ 303.020987][T14303] netlink: 'syz.0.2075': attribute type 2 has an invalid length. [ 303.054286][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 303.190801][T14311] lo speed is unknown, defaulting to 1000 [ 303.265881][T14308] lo speed is unknown, defaulting to 1000 [ 303.372825][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2078'. [ 303.486343][T14311] lo speed is unknown, defaulting to 1000 [ 303.694486][T14323] tipc: Enabled bearer , priority 0 [ 303.788020][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 303.839887][T14323] syzkaller0: entered promiscuous mode [ 303.847334][T14323] syzkaller0: entered allmulticast mode [ 303.854197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.116910][T14308] lo speed is unknown, defaulting to 1000 [ 304.146318][T14323] tipc: Resetting bearer [ 304.374722][T14319] tipc: Resetting bearer [ 304.431902][T14319] tipc: Disabling bearer [ 304.847689][T14336] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2082'. [ 304.913922][T14337] netlink: 'syz.1.2082': attribute type 2 has an invalid length. [ 305.121304][T14341] sctp: [Deprecated]: syz.1.2083 (pid 14341) Use of int in max_burst socket option. [ 305.121304][T14341] Use struct sctp_assoc_value instead [ 305.147406][T14341] nbd: must specify a size in bytes for the device [ 305.156233][T14341] nbd: couldn't find a device at index 1 [ 305.277097][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.327937][T14348] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 305.349325][T14348] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 305.582922][T14359] xt_hashlimit: max too large, truncated to 1048576 [ 305.744920][T13051] net_ratelimit: 11 callbacks suppressed [ 305.744940][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.944965][T14378] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.966211][T14378] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.037966][T14378] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.038355][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.058224][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.068460][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.077350][T14378] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.088266][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.205977][T14395] syzkaller0: entered promiscuous mode [ 306.211681][T14395] syzkaller0: entered allmulticast mode [ 306.233116][T14378] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.243426][T14378] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.427556][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.436258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.914887][T13047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.545835][T14416] __nla_validate_parse: 10 callbacks suppressed [ 307.545852][T14416] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2105'. [ 307.891074][T14378] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.901546][T14378] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.029040][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.100372][T13062] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.117871][T13062] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.136409][T14431] netlink: 'syz.0.2110': attribute type 4 has an invalid length. [ 308.169460][T13062] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.182905][T13062] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.221031][T13044] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.239782][T13044] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.267292][T14434] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 308.275232][T14434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.298517][T14432] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 308.308821][T13044] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.334262][T13044] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.359333][T14448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2113'. [ 308.478084][T14444] bond5: (slave veth9): Enslaving as an active interface with a down link [ 308.488216][T14451] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 308.557218][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'. [ 308.577155][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2117'. [ 308.688998][T14467] xt_HMARK: spi-set and port-set can't be combined [ 308.698421][T14464] tipc: Enabled bearer , priority 0 [ 308.761515][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 308.822551][T14464] syzkaller0: entered promiscuous mode [ 308.844340][T14464] syzkaller0: entered allmulticast mode [ 308.864499][T14467] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2122'. [ 309.067267][T14486] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 309.266246][T14485] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 310.553672][T14474] tipc: Resetting bearer [ 310.706020][T14462] tipc: Resetting bearer [ 310.722401][T14462] tipc: Disabling bearer [ 310.801455][T14504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2128'. [ 310.861487][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 311.163519][T14510] lo speed is unknown, defaulting to 1000 [ 311.197288][T14510] lo speed is unknown, defaulting to 1000 [ 311.431069][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 311.440833][T13059] net_ratelimit: 11 callbacks suppressed [ 311.440852][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.526063][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 311.758701][T14554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.767412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.177539][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.186163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.518139][T14591] x_tables: unsorted entry at hook 2 [ 312.614295][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.639810][T14594] __nla_validate_parse: 1 callbacks suppressed [ 312.639831][T14594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2153'. [ 312.690064][T14598] pim6reg: entered allmulticast mode [ 312.740022][T14606] pim6reg: left allmulticast mode [ 312.807664][T14610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.820288][T14610] wg1 speed is unknown, defaulting to 1000 [ 312.854646][T14610] wg1 speed is unknown, defaulting to 1000 [ 312.875689][T14610] wg1 speed is unknown, defaulting to 1000 [ 312.978446][T14610] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 313.076020][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.083100][T14626] lo speed is unknown, defaulting to 1000 [ 313.091047][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.131545][T14626] lo speed is unknown, defaulting to 1000 [ 313.145962][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.165164][T14619] lo speed is unknown, defaulting to 1000 [ 313.193288][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.230409][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.256716][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.264978][T14610] wg1 speed is unknown, defaulting to 1000 [ 313.483451][T14648] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2166'. [ 313.647865][T14619] lo speed is unknown, defaulting to 1000 [ 313.755079][T13047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.925400][T14663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2169'. [ 314.058901][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2169'. [ 314.335570][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2175'. [ 314.360507][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2175'. [ 314.380617][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2175'. [ 314.410054][T14683] netlink: 'syz.0.2174': attribute type 13 has an invalid length. [ 314.591741][ T5908] wg1 speed is unknown, defaulting to 1000 [ 314.740853][T14693] netlink: 'syz.2.2177': attribute type 10 has an invalid length. [ 314.894520][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.588564][T14718] syzkaller0: entered promiscuous mode [ 315.594227][T14718] syzkaller0: entered allmulticast mode [ 315.722324][T14731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.092938][T14751] lo speed is unknown, defaulting to 1000 [ 316.102490][T14751] lo speed is unknown, defaulting to 1000 [ 316.229368][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 316.592289][T14751] wg1 speed is unknown, defaulting to 1000 [ 316.848026][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2202'. [ 317.186693][T13062] net_ratelimit: 4 callbacks suppressed [ 317.186714][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.396605][T14806] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.410664][T14802] netlink: 'syz.0.2207': attribute type 13 has an invalid length. [ 317.448284][T14806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.455590][T14806] IPv6: NLM_F_CREATE should be set when creating new route [ 317.462859][T14806] IPv6: NLM_F_CREATE should be set when creating new route [ 317.587686][T14802] syzkaller0: entered promiscuous mode [ 317.595498][T14802] syzkaller0: entered allmulticast mode [ 317.716172][T14831] netlink: 'syz.3.2215': attribute type 5 has an invalid length. [ 317.936379][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.944986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.325684][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.360434][T14846] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 319.193618][T14821] lo speed is unknown, defaulting to 1000 [ 319.201679][T14821] lo speed is unknown, defaulting to 1000 [ 319.233059][T14846] lo speed is unknown, defaulting to 1000 [ 319.386950][T14855] lo speed is unknown, defaulting to 1000 [ 319.411236][T14854] lo speed is unknown, defaulting to 1000 [ 319.445320][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.573916][T14864] syzkaller0: entered promiscuous mode [ 319.581123][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2222'. [ 319.581524][T14864] syzkaller0: entered allmulticast mode [ 319.624765][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 319.642706][T14855] lo speed is unknown, defaulting to 1000 [ 319.706629][T14821] wg1 speed is unknown, defaulting to 1000 [ 320.242299][T14855] wg1 speed is unknown, defaulting to 1000 [ 320.251788][T14854] lo speed is unknown, defaulting to 1000 [ 320.554446][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.827370][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 320.878835][T14911] lo speed is unknown, defaulting to 1000 [ 320.904378][T14911] lo speed is unknown, defaulting to 1000 [ 321.046637][T14919] vlan1: entered promiscuous mode [ 321.071014][T14919] vlan1: entered allmulticast mode [ 321.097184][T14919] hsr_slave_1: entered allmulticast mode [ 321.153482][T14911] wg1 speed is unknown, defaulting to 1000 [ 321.158988][T14920] lo speed is unknown, defaulting to 1000 [ 321.184814][T14920] lo speed is unknown, defaulting to 1000 [ 321.186539][T14854] wg1 speed is unknown, defaulting to 1000 [ 321.533255][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 321.674762][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.025398][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 322.058013][T14945] erspan0: entered promiscuous mode [ 322.063558][T14945] macvtap0: entered promiscuous mode [ 322.085034][T14945] macvtap0: entered allmulticast mode [ 322.090478][T14945] erspan0: entered allmulticast mode [ 322.127651][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 322.164727][T14920] wg1 speed is unknown, defaulting to 1000 [ 322.361339][T14959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2251'. [ 322.661933][T14972] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 322.673027][T14972] nbd: error processing sock list [ 322.762052][T14975] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 322.774948][T13059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.967590][T14977] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 323.012394][T14977] batman_adv: batadv0: Interface deactivated: dummy0 [ 323.020204][T14977] batman_adv: batadv0: Removing interface: dummy0 [ 323.032869][T14977] bridge_slave_0: left promiscuous mode [ 323.039548][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.051923][T14978] netlink: 'syz.2.2255': attribute type 10 has an invalid length. [ 323.052049][T14977] bond0: (slave bond_slave_0): Releasing backup interface [ 323.060445][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.060687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.092271][T14977] bond0: (slave bond_slave_1): Releasing backup interface [ 323.103637][T14977] `: Port device team_slave_0 removed [ 323.113671][T14977] `: Port device team_slave_1 removed [ 323.121119][T14977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.124185][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'. [ 323.138311][T14977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.160622][T14978] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 323.171496][T14978] bond0: (slave wlan1): Opening slave failed [ 323.301400][T14983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2257'. [ 323.526588][T14990] pim6reg1: entered promiscuous mode [ 323.532089][T14990] pim6reg1: entered allmulticast mode [ 323.672679][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 323.683462][T15001] netlink: 'syz.0.2263': attribute type 30 has an invalid length. [ 323.824732][T15021] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 323.885850][T15021] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 323.916750][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.442906][T15059] x_tables: duplicate underflow at hook 1 [ 324.658222][T15065] __nla_validate_parse: 5 callbacks suppressed [ 324.658243][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 324.743919][T15065] syzkaller0: entered promiscuous mode [ 324.765324][T15065] syzkaller0: entered allmulticast mode [ 324.861249][T15074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.870756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.060142][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.370161][T15082] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 325.507436][T15106] tipc: Enabled bearer , priority 0 [ 325.594724][T15106] syzkaller0: entered promiscuous mode [ 325.600612][T15106] syzkaller0: entered allmulticast mode [ 325.607167][T15106] tipc: Resetting bearer [ 325.980697][T13059] tipc: Resetting bearer [ 326.105116][T15105] tipc: Resetting bearer [ 326.185118][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.311964][T15113] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 326.321881][T15113] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 326.330408][T15113] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2285'. [ 326.343216][T15113] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 326.361717][T15113] netlink: 'syz.1.2285': attribute type 4 has an invalid length. [ 326.370057][T15113] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2285'. [ 326.433135][T15123] openvswitch: netlink: Key 32 has unexpected len 7 expected 2 [ 326.789843][T15135] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 326.909334][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 326.986627][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 327.993437][T15105] tipc: Disabling bearer [ 328.015168][ T5915] tipc: Node number set to 3367335168 [ 328.030404][T15135] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 328.125237][T15151] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.176682][T15151] net_ratelimit: 1 callbacks suppressed [ 328.176695][T15151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.434385][T13039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.647594][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.657635][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.667273][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.679866][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.694345][T15182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.814742][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.823191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.186840][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2321'. [ 329.196905][T15215] bond0: option all_slaves_active: invalid value (220) [ 329.584776][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.777826][T15240] syzkaller0: entered promiscuous mode [ 329.798125][T15240] syzkaller0: entered allmulticast mode [ 329.908563][T15246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.050382][T15250] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 330.209589][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 330.324702][T15256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.683419][ T6571] lo speed is unknown, defaulting to 1000 [ 330.690788][ T6571] syz0: Port: 1 Link ACTIVE [ 330.755066][ T5908] lo speed is unknown, defaulting to 1000 [ 331.017471][T15286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2352'. [ 331.512324][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2361'. [ 332.244301][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2375'. [ 332.655586][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.205936][T15377] syzkaller0: entered promiscuous mode [ 333.221974][T15377] syzkaller0: entered allmulticast mode [ 333.509073][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 333.565650][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2399'. [ 333.935832][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2405'. [ 334.077235][T13054] net_ratelimit: 4 callbacks suppressed [ 334.077258][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.588810][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.597784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.127747][T15401] team_slave_1: Caught tx_queue_len zero misconfig [ 335.195375][T13058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.679911][T15441] netlink: 'syz.1.2418': attribute type 11 has an invalid length. [ 335.783752][T15446] batman_adv: batadv0: Adding interface: dummy0 [ 335.790867][T15446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.821171][T15446] batman_adv: batadv0: Interface activated: dummy0 [ 335.859453][T15446] batadv0: mtu less than device minimum [ 335.876307][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.888616][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.900626][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.912683][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.924668][T15446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 336.248652][T15467] syzkaller1: entered promiscuous mode [ 336.261020][T15467] syzkaller1: entered allmulticast mode [ 337.276514][T15522] lo speed is unknown, defaulting to 1000 [ 337.298146][T15522] lo speed is unknown, defaulting to 1000 [ 337.339460][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 337.413589][T15529] vlan3: entered allmulticast mode [ 337.425013][T15529] bond6: entered allmulticast mode [ 337.568803][T15522] wg1 speed is unknown, defaulting to 1000 [ 337.590514][T15520] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 337.998940][T15546] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 338.034190][T15546] batman_adv: batadv0: Interface deactivated: dummy0 [ 338.047411][T15546] batman_adv: batadv0: Removing interface: dummy0 [ 338.323890][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'. [ 338.473816][T15567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2471'. [ 339.058892][T15596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.066383][T15596] IPv6: NLM_F_CREATE should be set when creating new route [ 339.073646][T15596] IPv6: NLM_F_CREATE should be set when creating new route [ 339.084867][T15596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.146794][T15603] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 339.695050][T13039] net_ratelimit: 25 callbacks suppressed [ 339.695072][T13039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.709263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.796398][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.232675][T15663] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2510'. [ 340.326326][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 340.897836][T15696] netlink: 'syz.4.2526': attribute type 21 has an invalid length. [ 340.914878][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.933416][T15696] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2526'. [ 341.267597][T15718] netlink: 'syz.4.2535': attribute type 1 has an invalid length. [ 341.384200][T15711] erspan0: left allmulticast mode [ 341.396589][ T5962] lo speed is unknown, defaulting to 1000 [ 341.402756][ T5915] wg1 speed is unknown, defaulting to 1000 [ 341.408891][ T5962] syz0: Port: 1 Link DOWN [ 341.413325][ T5915] syz: Port: 1 Link DOWN [ 341.419077][ T5962] lo speed is unknown, defaulting to 1000 [ 341.780324][T15730] lo: Caught tx_queue_len zero misconfig [ 341.824124][T15730] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 342.043243][T15741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2545'. [ 342.054364][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.081748][T15741] ksmbd: Unknown IPC event: 3, ignore. [ 342.146964][T15743] syzkaller1: entered promiscuous mode [ 342.177958][T15743] syzkaller1: entered allmulticast mode [ 342.510488][T15760] netlink: 'syz.4.2556': attribute type 39 has an invalid length. [ 342.742921][T15772] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 342.882484][T15777] bond5: (slave gretap1): making interface the new active one [ 342.926727][T15777] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 343.184838][T13039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.586722][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.630014][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.659926][T15814] ksmbd: Unknown IPC event: 4, ignore. [ 343.717743][T15818] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2579'. [ 343.723259][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.741260][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.211470][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2590'. [ 344.307455][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2590'. [ 344.461507][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2590'. [ 344.519392][T15863] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.531483][T15863] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.613384][T15863] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.643928][T15871] netlink: 'syz.4.2599': attribute type 27 has an invalid length. [ 344.644790][T15863] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.683505][T15873] netlink: 'syz.1.2601': attribute type 32 has an invalid length. [ 344.737149][T13051] net_ratelimit: 6 callbacks suppressed [ 344.737171][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.751331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.873926][T15883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2604'. [ 344.884283][T15883] ksmbd: Unknown IPC event: 3, ignore. [ 345.275224][T15863] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.314800][T15863] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.420207][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.783783][T15900] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2611'. [ 345.840583][T15863] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.866120][T15863] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.047332][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 346.093165][T13044] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.108272][T13044] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.158696][ T1095] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.179192][ T1095] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.246611][ T1095] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.266994][ T1095] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.296470][ T1095] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.305604][ T1095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.501508][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 346.527507][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 346.546619][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.977126][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 347.675047][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.778725][T15995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.788336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.797752][T15997] netlink: 'syz.1.2652': attribute type 3 has an invalid length. [ 347.912848][T16004] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 347.921409][T16004] netlink: 'syz.2.2655': attribute type 4 has an invalid length. [ 347.931547][T16004] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 347.939944][T16004] netlink: 'syz.2.2655': attribute type 4 has an invalid length. [ 348.797206][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.619532][T16082] __nla_validate_parse: 6 callbacks suppressed [ 349.619551][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 349.637902][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 349.795482][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 349.815203][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 349.907447][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.166956][T16115] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.576138][T13054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.585304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.595918][T16138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2713'. [ 350.821896][T16146] vlan4: entered allmulticast mode [ 350.833479][T16146] dummy0: entered allmulticast mode [ 351.036167][T13056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.078597][T16158] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2724'. [ 351.416101][T16182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.435484][T16182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.953898][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 351.988091][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 352.023862][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 352.163162][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 352.173310][ T1095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.884886][T16238] netlink: 'syz.1.2758': attribute type 29 has an invalid length. [ 353.043267][T16248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.072634][T16248] batadv_slave_0: entered promiscuous mode [ 353.079022][T16248] batadv_slave_0: entered allmulticast mode [ 353.090241][T16248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.120732][T16248] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 353.267453][T16262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.276591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.718635][T16287] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 354.023263][T16281] infiniband syz!: set down [ 354.027970][T16281] infiniband syz!: added team_slave_0 [ 354.072431][T16281] RDS/IB: syz!: added [ 354.077303][T16281] smc: adding ib device syz! with port count 1 [ 354.083582][T16281] smc: ib device syz! port 1 has no pnetid [ 354.508971][T16307] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.573679][T16320] netlink: 'syz.1.2795': attribute type 21 has an invalid length. [ 354.652540][T16307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.923534][T13062] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.933339][T13062] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.963653][T13062] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.985568][T13062] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.032199][T13062] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.069356][T13062] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.088741][T13062] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.106746][T13062] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.126237][T16336] batadv_slave_0: entered promiscuous mode [ 355.132309][T16336] batadv_slave_0: entered allmulticast mode [ 355.325794][T16346] __nla_validate_parse: 6 callbacks suppressed [ 355.325816][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'. [ 355.570947][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'. [ 355.590114][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 355.609860][T16354] bond0: entered promiscuous mode [ 355.615960][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2809'. [ 355.646190][T16354] bond0: left promiscuous mode [ 355.679307][T16360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2811'. [ 356.863281][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2833'. [ 357.499864][T16444] tipc: New replicast peer: 255.255.255.255 [ 357.515048][T16444] tipc: Enabled bearer , priority 6 [ 357.522302][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 357.535477][T16444] tipc: Disabling bearer [ 358.969928][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 359.025076][T16494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.099328][T16494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.114798][T16494] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.137633][T16494] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 359.477593][T16519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2870'. [ 359.585616][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2872'. [ 360.154465][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.165643][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.184181][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.192810][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.201024][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.423496][T16545] lo speed is unknown, defaulting to 1000 [ 360.448238][T16545] lo speed is unknown, defaulting to 1000 [ 360.809978][T16545] wg1 speed is unknown, defaulting to 1000 [ 361.119418][T16573] __nla_validate_parse: 1 callbacks suppressed [ 361.119442][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 361.171414][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 361.347228][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 361.408987][T16578] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 361.683477][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 361.720682][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'. [ 361.737485][T16598] bridge_slave_0: left allmulticast mode [ 361.746220][T16598] bridge_slave_0: left promiscuous mode [ 361.762693][T16598] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.783722][T16605] netlink: 'syz.4.2904': attribute type 1 has an invalid length. [ 361.933648][T16605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.980762][T16608] bond6: (slave geneve4): making interface the new active one [ 362.010843][T16608] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 362.073818][T13039] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.084042][T13039] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.092429][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 362.108129][T16613] netlink: 'syz.3.2907': attribute type 30 has an invalid length. [ 362.138017][T13039] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.255961][ T5845] Bluetooth: hci5: command tx timeout [ 362.265464][T13039] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.310773][T13039] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.335628][T13039] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.354043][T13039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.372484][T13039] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.464247][T16545] chnl_net:caif_netlink_parms(): no params data found [ 362.615290][T16636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2916'. [ 362.971298][T16648] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 363.203186][T16545] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.226133][T16545] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.239528][T16545] bridge_slave_0: entered allmulticast mode [ 363.253159][T16545] bridge_slave_0: entered promiscuous mode [ 363.262612][T16545] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.270196][T16545] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.277604][T16545] bridge_slave_1: entered allmulticast mode [ 363.344343][T16545] bridge_slave_1: entered promiscuous mode [ 363.437349][T16545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.466776][T16545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.567131][T16545] team0: Port device team_slave_0 added [ 363.586033][T16545] team0: Port device team_slave_1 added [ 363.690135][T16545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.706112][T16545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.761182][T16545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.787798][T16545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.804514][T16545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.863519][T16545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.160776][T16545] hsr_slave_0: entered promiscuous mode [ 364.168812][T16545] hsr_slave_1: entered promiscuous mode [ 364.177019][T16545] debugfs: 'hsr0' already exists in 'hsr' [ 364.182930][T16545] Cannot create hsr debugfs directory [ 364.312087][T16681] ip6gre0: entered promiscuous mode [ 364.325774][T16681] team0: Port device ip6gre0 added [ 364.334860][ T5845] Bluetooth: hci5: command tx timeout [ 364.698533][T16696] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2943'. [ 364.712007][T16545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.753037][T16545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.779055][T16545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.822585][T16545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.959428][T16714] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2946'. [ 364.975830][T16714] ksmbd: Unknown IPC event: 3, ignore. [ 365.041061][T16545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.116278][T16545] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.141287][T13056] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.148537][T13056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.206947][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.214316][T13057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.611966][T16545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.636880][T16732] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.728179][T16737] macsec1: entered promiscuous mode [ 365.733448][T16737] macsec0: entered promiscuous mode [ 365.740170][T16737] macsec1: entered allmulticast mode [ 365.746930][T16737] macsec0: entered allmulticast mode [ 365.755852][T16737] macsec0: left allmulticast mode [ 365.764830][T16737] macsec0: left promiscuous mode [ 365.822781][T16545] veth0_vlan: entered promiscuous mode [ 365.857781][T16545] veth1_vlan: entered promiscuous mode [ 365.923060][T16545] veth0_macvtap: entered promiscuous mode [ 365.947894][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 365.954292][T16545] veth1_macvtap: entered promiscuous mode [ 366.000835][T16545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.031710][T16545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.075403][T13057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.098010][T13057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.136255][T13057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.147227][T13057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.338488][T13048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.361222][T13048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.414696][ T5845] Bluetooth: hci5: command tx timeout [ 366.457326][T13048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.500461][T13048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.555529][T16764] pim6reg: entered allmulticast mode [ 366.563780][T16764] pim6reg: left allmulticast mode [ 366.648442][T16771] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.923608][T16785] __nla_validate_parse: 1 callbacks suppressed [ 366.923632][T16785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2976'. [ 367.018714][T16790] macsec0: entered promiscuous mode [ 367.867758][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'. [ 367.912326][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'. [ 368.076264][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2992'. [ 368.195367][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.208060][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.216860][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.238714][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.248529][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.326949][T13038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.423908][T13038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.473237][T16823] lo speed is unknown, defaulting to 1000 [ 368.496125][ T5845] Bluetooth: hci5: command tx timeout [ 368.517418][T16823] lo speed is unknown, defaulting to 1000 [ 368.526584][T13038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.667993][T13038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.873458][T16823] wg1 speed is unknown, defaulting to 1000 [ 368.919045][T16843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3001'. [ 369.392804][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 369.410272][T13038] team0: Port device ip6gre0 removed [ 369.455160][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 369.486714][T16857] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3008'. [ 369.504913][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 369.813184][T13038] bond5 (unregistering): (slave gretap1): Releasing active interface [ 369.953478][T13038] bond4 (unregistering): (slave geneve3): Releasing active interface [ 370.174746][ C0] skbuff: skb_under_panic: text:ffffffff8a1740d8 len:112 put:40 head:ffff88802ac60000 data:ffff88802ac5ffe8 tail:0x58 end:0x180 dev:team0 [ 370.190121][ C0] ------------[ cut here ]------------ [ 370.195661][ C0] kernel BUG at net/core/skbuff.c:213! [ 370.201210][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 370.207521][ C0] CPU: 0 UID: 0 PID: 16882 Comm: syz.3.3017 Not tainted syzkaller #0 PREEMPT(full) [ 370.216900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.227050][ C0] RIP: 0010:skb_panic+0x157/0x160 [ 370.232088][ C0] Code: c7 20 2f 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 1e 95 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 370.251787][ C0] RSP: 0018:ffffc900000074a0 EFLAGS: 00010286 [ 370.257877][ C0] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: af1f1a703bfa1e00 [ 370.265855][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 370.273828][ C0] RBP: 0000000000000180 R08: 0000000000000003 R09: 0000000000000004 [ 370.281804][ C0] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: ffff88804c94f010 [ 370.289784][ C0] R13: ffff88802ac60000 R14: ffff88802ac5ffe8 R15: 0000000000000058 [ 370.297759][ C0] FS: 00007f25a0d7e6c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 370.306690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.313279][ C0] CR2: 000000110c31e987 CR3: 0000000056a74000 CR4: 00000000003526f0 [ 370.321256][ C0] Call Trace: [ 370.324550][ C0] [ 370.327405][ C0] ? ip6gre_header+0xc8/0x790 [ 370.332180][ C0] ? ip6gre_header+0xc8/0x790 [ 370.336865][ C0] skb_push+0xc3/0xe0 [ 370.340853][ C0] ip6gre_header+0xc8/0x790 [ 370.345360][ C0] ? neigh_connected_output+0x1ea/0x460 [ 370.350929][ C0] ? __pfx_ip6gre_header+0x10/0x10 [ 370.356058][ C0] ? read_seqbegin+0x1ac/0x250 [ 370.360832][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 370.365958][ C0] ? __pfx_ip6gre_header+0x10/0x10 [ 370.371074][ C0] neigh_connected_output+0x286/0x460 [ 370.376551][ C0] ip6_finish_output2+0xfb3/0x1480 [ 370.381670][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 370.387218][ C0] ? ip6_mtu+0x7d/0x490 [ 370.391385][ C0] ? ip6_mtu+0x38c/0x490 [ 370.395635][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 370.400759][ C0] ? ip6_output+0x126/0x550 [ 370.405270][ C0] ip6_output+0x340/0x550 [ 370.409614][ C0] ndisc_send_skb+0xbce/0x1510 [ 370.414386][ C0] ? ndisc_send_skb+0x1e4/0x1510 [ 370.419337][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 370.424547][ C0] ? __pfx_dst_output+0x10/0x10 [ 370.429406][ C0] ? __asan_memset+0x22/0x50 [ 370.434003][ C0] addrconf_rs_timer+0x369/0x670 [ 370.438948][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 370.444423][ C0] call_timer_fn+0x16e/0x590 [ 370.449018][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 370.454568][ C0] ? call_timer_fn+0xbe/0x590 [ 370.459246][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 370.464371][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.469574][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 370.474779][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 370.480246][ C0] __run_timer_base+0x61a/0x860 [ 370.485128][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 370.490502][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 370.496761][ C0] run_timer_softirq+0xb7/0x180 [ 370.501620][ C0] handle_softirqs+0x27d/0x850 [ 370.506387][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 370.511159][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 370.516449][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 370.521662][ C0] __irq_exit_rcu+0xca/0x1f0 [ 370.526263][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 370.531484][ C0] irq_exit_rcu+0x9/0x30 [ 370.535733][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 370.541376][ C0] [ 370.544307][ C0] [ 370.547238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.553221][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 370.559730][ C0] Code: 74 05 e8 eb 29 7d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 73 e5 44 f6 65 8b 05 ec 12 2b 07 85 c0 74 40 48 c7 04 24 0e 36 [ 370.579345][ C0] RSP: 0018:ffffc900033b6d00 EFLAGS: 00000206 [ 370.585449][ C0] RAX: af1f1a703bfa1e00 RBX: 0000000000000a06 RCX: af1f1a703bfa1e00 [ 370.593425][ C0] RDX: 0000000000000006 RSI: ffffffff8d76bd39 RDI: 0000000000000001 [ 370.601400][ C0] RBP: ffffc900033b6d90 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 370.609377][ C0] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: dffffc0000000000 [ 370.617352][ C0] R13: 1ffff92000676ddc R14: ffff88813fffc180 R15: 1ffff92000676da0 [ 370.625339][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.631680][ C0] ? rcu_is_watching+0x15/0xb0 [ 370.636460][ C0] ? trace_mm_page_alloc_zone_locked+0x3e/0x140 [ 370.642747][ C0] __rmqueue_pcplist+0x1419/0x1df0 [ 370.647887][ C0] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 370.653549][ C0] get_page_from_freelist+0x91f/0x2440 [ 370.659113][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 370.664086][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 370.670004][ C0] ? prepare_alloc_pages+0x213/0x610 [ 370.675303][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 370.681124][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.687464][ C0] ? __apply_to_page_range+0x124b/0x13d0 [ 370.693122][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 370.698593][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 370.704407][ C0] ? alloc_pages_noprof+0xbe/0x190 [ 370.709534][ C0] kasan_populate_vmalloc+0xd1/0x270 [ 370.714833][ C0] alloc_vmap_area+0xd4e/0x1470 [ 370.719698][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 370.724986][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 370.729763][ C0] ? __get_vm_area_node+0x13f/0x300 [ 370.734966][ C0] ? translate_table+0x19b/0x2040 [ 370.739996][ C0] __get_vm_area_node+0x1f8/0x300 [ 370.745030][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 370.750948][ C0] ? translate_table+0x19b/0x2040 [ 370.755981][ C0] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 370.761890][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 370.767098][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 370.773438][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.779956][ C0] ? translate_table+0x19b/0x2040 [ 370.785164][ C0] ? rcu_is_watching+0x15/0xb0 [ 370.790111][ C0] ? translate_table+0x19b/0x2040 [ 370.795662][ C0] __kvmalloc_node_noprof+0x670/0x910 [ 370.801134][ C0] ? translate_table+0x19b/0x2040 [ 370.806942][ C0] ? do_ip6t_set_ctl+0x88a/0xce0 [ 370.811881][ C0] ? nf_setsockopt+0x26f/0x290 [ 370.816828][ C0] ? do_sock_setsockopt+0x17c/0x1b0 [ 370.822036][ C0] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 370.827861][ C0] translate_table+0x19b/0x2040 [ 370.832850][ C0] ? __pfx_translate_table+0x10/0x10 [ 370.838400][ C0] ? __might_fault+0xb0/0x130 [ 370.843369][ C0] ? _copy_from_user+0x94/0xb0 [ 370.848313][ C0] do_ip6t_set_ctl+0x970/0xce0 [ 370.853347][ C0] ? rcu_is_watching+0x15/0xb0 [ 370.858139][ C0] ? trace_contention_end+0x39/0x100 [ 370.863517][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 370.868820][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.875514][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 370.880553][ C0] ? file_init_path+0x3b/0x590 [ 370.885679][ C0] nf_setsockopt+0x26f/0x290 [ 370.890351][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 370.896265][ C0] smc_setsockopt+0x232/0xab0 [ 370.900961][ C0] ? __pfx_smc_setsockopt+0x10/0x10 [ 370.906190][ C0] ? aa_sock_opt_perm+0xff/0x1a0 [ 370.911266][ C0] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 370.916853][ C0] ? __pfx_smc_setsockopt+0x10/0x10 [ 370.922092][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 370.927153][ C0] __x64_sys_setsockopt+0x13f/0x1b0 [ 370.932427][ C0] do_syscall_64+0xfa/0xf80 [ 370.936949][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.943020][ C0] ? clear_bhb_loop+0x60/0xb0 [ 370.947706][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.953604][ C0] RIP: 0033:0x7f259ff8f749 [ 370.958038][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.977660][ C0] RSP: 002b:00007f25a0d7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 370.986125][ C0] RAX: ffffffffffffffda RBX: 00007f25a01e5fa0 RCX: 00007f259ff8f749 [ 370.994111][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 371.002171][ C0] RBP: 00007f25a0013f91 R08: 0000000000000330 R09: 0000000000000000 [ 371.010162][ C0] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.018156][ C0] R13: 00007f25a01e6038 R14: 00007f25a01e5fa0 R15: 00007ffd2df51a28 [ 371.026248][ C0] [ 371.029289][ C0] Modules linked in: [ 371.033381][ C0] ---[ end trace 0000000000000000 ]--- [ 371.038911][ C0] RIP: 0010:skb_panic+0x157/0x160 [ 371.044018][ C0] Code: c7 20 2f 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 1e 95 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.063877][ C0] RSP: 0018:ffffc900000074a0 EFLAGS: 00010286 [ 371.070022][ C0] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: af1f1a703bfa1e00 [ 371.078054][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 371.086140][ C0] RBP: 0000000000000180 R08: 0000000000000003 R09: 0000000000000004 [ 371.094185][ C0] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: ffff88804c94f010 [ 371.102207][ C0] R13: ffff88802ac60000 R14: ffff88802ac5ffe8 R15: 0000000000000058 [ 371.110356][ C0] FS: 00007f25a0d7e6c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 371.119351][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.125999][ C0] CR2: 000000110c31e987 CR3: 0000000056a74000 CR4: 00000000003526f0 [ 371.134062][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 371.141745][ C0] Kernel Offset: disabled [ 371.146098][ C0] Rebooting in 86400 seconds..