last executing test programs: 1.548847184s ago: executing program 1 (id=9863): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0"], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.457188017s ago: executing program 2 (id=9866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}}, 0x0) 1.432340375s ago: executing program 1 (id=9867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200200214000e00002fb96dffff1144ee163cddcb0000008000008276007f0000000000", 0x26}, {&(0x7f0000001300)="00052d3640efeac5", 0x8}], 0x2}, 0x5) 1.430863344s ago: executing program 4 (id=9868): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xb, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000008c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a38000000140a01010000000000000000050000090c00064000000000000000010900020073797a32000000000900010073797a31001100010000000000000000000100000a6c3ff6526df9f97eb90503e5644c66bc300b119c5e642050ccc819a1733c954771c96ce2f0b326d3d2ce121e382edca40b6c9c170f4bf23c6c13f580109f6632715904d5d03fd6163960e5925fd40cc41b36161403ed61b3413868500b16ff752b336ea47dfba923e995b5293ae7bf8bb731c7a85b67880f6284dc060b2fbe973a4e4e5b4df54eeb21459040"], 0x60}, 0x1, 0x0, 0x0, 0x44050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.385817988s ago: executing program 2 (id=9870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x0, 0xd304}, 0x8, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x7fffffff, 0x6f0f88ae}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004b00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.320957796s ago: executing program 0 (id=9871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0) 1.106209707s ago: executing program 0 (id=9874): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.066413862s ago: executing program 1 (id=9875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x1000000}, 0x0) 1.026239891s ago: executing program 0 (id=9877): syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) 1.025096312s ago: executing program 4 (id=9878): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 922.343035ms ago: executing program 1 (id=9879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 922.040456ms ago: executing program 4 (id=9880): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000006c0)={0x6, {{0xa, 0x4e23, 0xfff, @empty, 0xa}}, {{0xa, 0x4e24, 0x7, @loopback, 0x8}}}, 0x108) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd25, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x2, 0x4e22, 0x1ff, 0xa, 0xa0, 0x20, 0x3a, r2}, {0x66, 0x80, 0x0, 0x7, 0xd8f, 0x80000000, 0x1, 0x9}, {0x8001, 0x1, 0x8000000000000000, 0x6}, 0x7, 0x6e6bb8, 0xf164a2c87db575e6, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0xff}, 0xa, @in=@private=0x32, 0x3502, 0x0, 0x3, 0x0, 0x5, 0xb790, 0x5}}, 0xe8) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00', {0x2}, 0x80}) r5 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 921.927113ms ago: executing program 3 (id=9881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 921.558691ms ago: executing program 0 (id=9882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 866.650091ms ago: executing program 2 (id=9883): r0 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 807.074437ms ago: executing program 3 (id=9884): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r2}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x3, 0x10001) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, r8, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x6, [0x7fff]}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x1, 0xfe, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0xfffd, 0x88000}]}}}}}}, 0x42) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) 806.577583ms ago: executing program 1 (id=9885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 751.722801ms ago: executing program 0 (id=9886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) 712.709625ms ago: executing program 2 (id=9887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x1, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 618.978566ms ago: executing program 0 (id=9888): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 529.85427ms ago: executing program 2 (id=9889): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0xe, 0x3169, 0x1, 0x5, 0x6, 0x3, 0x8, 0x2, 0x4a24, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x0, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) 429.433596ms ago: executing program 4 (id=9890): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 369.313637ms ago: executing program 2 (id=9891): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x400461f1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, 0x0, 0x80800) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000100)=0x5, 0x4) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80800) accept4$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @none}, &(0x7f00000002c0)=0xe, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) 286.029283ms ago: executing program 4 (id=9892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 284.419633ms ago: executing program 3 (id=9893): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @loopback}}) 222.78935ms ago: executing program 4 (id=9894): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000080002009111640b00000000950f3beaaf5a1c63318900000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x112002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, &(0x7f0000000700)=""/236, 0x0, 0xec, 0x0, 0x6, 0x10000}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0x0, &(0x7f00000004c0)=@udp=r0, 0x2}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r7, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 221.449497ms ago: executing program 1 (id=9895): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r6], 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r4, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r7, @void, @void, @void, r6}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, r3, 0x24, 0x2000, r3, @value, @void, @void, @void, r6}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r9, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r6}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)={@fallback=r8, 0xffffffffffffffff, 0x16, 0x0, 0x0, @void, @value, @void, @void, r6}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x8, 0x4, 0x8}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r10, r2, 0x14, 0x20, r2, @void, @void, @void, @value=0xffffffffffffffff, r6}, 0x20) 149.656632ms ago: executing program 3 (id=9896): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 128.388988ms ago: executing program 3 (id=9897): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 0s ago: executing program 3 (id=9898): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): ribute type 3 has an invalid length. [ 281.585537][T16794] netlink: 'syz.2.5160': attribute type 1 has an invalid length. [ 281.763075][T16807] netlink: 'syz.0.5166': attribute type 2 has an invalid length. [ 282.194345][T16836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.212580][T16838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.420949][T16855] netlink: 'syz.3.5188': attribute type 1 has an invalid length. [ 282.432022][T16855] netlink: 'syz.3.5188': attribute type 2 has an invalid length. [ 282.722621][T16875] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.942091][T16957] validate_nla: 2 callbacks suppressed [ 283.942108][T16957] netlink: 'syz.4.5235': attribute type 2 has an invalid length. [ 285.956580][T17101] __nla_validate_parse: 7 callbacks suppressed [ 285.956597][T17101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5304'. [ 286.180737][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5310'. [ 286.278253][T17114] nbd: socks must be embedded in a SOCK_ITEM attr [ 286.904710][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5330'. [ 286.964796][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5331'. [ 287.250029][T17182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.491002][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5352'. [ 287.539121][T17205] xt_l2tp: unknown flags: 10 [ 287.578790][T17207] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 287.594498][T17207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.790535][T17224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5364'. [ 288.112619][T17249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.576616][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 288.941248][T17293] veth0_to_bond: left allmulticast mode [ 289.014162][T17293] tipc: Resetting bearer [ 289.108703][T17293] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 289.117549][T17293] geneve2: left promiscuous mode [ 289.124088][T17293] veth3: left allmulticast mode [ 289.153552][ T980] lo speed is unknown, defaulting to 1000 [ 289.172070][ T3481] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.175148][ T980] syz0: Port: 1 Link DOWN [ 289.181575][ T3481] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.241824][ T3481] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.261874][ T3481] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.301693][ T980] lo speed is unknown, defaulting to 1000 [ 289.302024][ T1014] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.345099][ T1014] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.367644][ T1014] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.395195][ T1014] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.784263][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5432'. [ 290.120957][T17389] sock: sock_set_timeout: `syz.0.5446' (pid 17389) tries to set negative timeout [ 290.339258][T17407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5455'. [ 290.377721][T17407] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5455'. [ 291.128466][T17469] netlink: 'syz.0.5485': attribute type 2 has an invalid length. [ 291.249299][T17478] netlink: 'syz.4.5490': attribute type 1 has an invalid length. [ 291.268745][T17478] __nla_validate_parse: 3 callbacks suppressed [ 291.268762][T17478] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5490'. [ 291.284726][T17478] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5490'. [ 291.292584][T17484] lo speed is unknown, defaulting to 1000 [ 291.294076][T17478] netlink: 'syz.4.5490': attribute type 1 has an invalid length. [ 291.333113][T17478] netlink: 618 bytes leftover after parsing attributes in process `syz.4.5490'. [ 291.659434][T17506] sctp: [Deprecated]: syz.1.5504 (pid 17506) Use of int in maxseg socket option. [ 291.659434][T17506] Use struct sctp_assoc_value instead [ 292.227306][T17552] tipc: Invalid UDP bearer configuration [ 292.227357][T17552] tipc: Enabling of bearer rejected, failed to enable media [ 292.443975][T17569] : entered promiscuous mode [ 292.619619][T17581] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5539'. [ 292.751819][T17591] netlink: 'syz.3.5544': attribute type 62 has an invalid length. [ 292.961025][T17610] xt_socket: unknown flags 0xe4 [ 293.294693][T17638] netlink: 'syz.0.5566': attribute type 58 has an invalid length. [ 293.304196][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5566'. [ 293.333939][T17643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5569'. [ 293.338489][T17641] vcan1: entered promiscuous mode [ 293.358633][T17641] vcan1: entered allmulticast mode [ 293.456349][T17649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5572'. [ 293.847032][T17679] atomic_op ffff8880798be198 conn xmit_atomic 0000000000000000 [ 294.798467][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'. [ 295.934833][T17821] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5654'. [ 296.784957][T17883] netlink: 'syz.3.5686': attribute type 83 has an invalid length. [ 296.832903][T17889] sch_fq: defrate 0 ignored. [ 296.980141][T17901] Bluetooth: hci1: too big key_count value 32778 [ 297.166804][T17912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5699'. [ 297.424505][T17928] ip6gre0: Master is either lo or non-ether device [ 297.584134][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 297.598321][T17936] netlink: 'syz.3.5710': attribute type 1 has an invalid length. [ 297.606576][T17936] netlink: 'syz.3.5710': attribute type 2 has an invalid length. [ 297.850451][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5714'. [ 298.049704][T17965] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 298.153229][T17972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5726'. [ 298.349586][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5733'. [ 298.368064][T17987] bond0 (unregistering): Released all slaves [ 298.506430][T17999] netlink: 'syz.1.5739': attribute type 4 has an invalid length. [ 298.521809][T18000] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5740'. [ 299.152912][T18048] netlink: 'syz.0.5762': attribute type 3 has an invalid length. [ 299.618419][T18085] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 299.701653][T18093] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5784'. [ 299.708151][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5786'. [ 299.784913][T18097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5787'. [ 300.352245][T18143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5810'. [ 301.117712][T18186] netlink: 'syz.1.5829': attribute type 13 has an invalid length. [ 301.173283][T18189] netlink: 'syz.2.5831': attribute type 83 has an invalid length. [ 301.188663][T18190] netlink: 'syz.1.5829': attribute type 16 has an invalid length. [ 301.188915][T18186] tipc: Resetting bearer [ 301.212282][T18190] netlink: 'syz.1.5829': attribute type 17 has an invalid length. [ 301.360237][T18190] tipc: Resetting bearer [ 301.390937][T18190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.430134][T18195] tap0: tun_chr_ioctl cmd 1074025672 [ 301.442553][T18195] tap0: ignored: set checksum disabled [ 301.817074][T18223] netlink: 'syz.2.5846': attribute type 83 has an invalid length. [ 302.511645][T18264] netlink: 'syz.3.5865': attribute type 1 has an invalid length. [ 302.522693][T18264] __nla_validate_parse: 6 callbacks suppressed [ 302.522708][T18264] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5865'. [ 302.550658][T18264] netlink: 'syz.3.5865': attribute type 1 has an invalid length. [ 302.558854][T18264] netlink: 'syz.3.5865': attribute type 8 has an invalid length. [ 302.567844][T18264] netlink: 582 bytes leftover after parsing attributes in process `syz.3.5865'. [ 302.579773][T18264] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5865'. [ 302.859713][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5874'. [ 302.893747][T18288] netlink: 'syz.0.5876': attribute type 1 has an invalid length. [ 302.927431][T18291] xt_hashlimit: size too large, truncated to 1048576 [ 302.934315][T18288] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5876'. [ 302.962918][T18288] netlink: 'syz.0.5876': attribute type 1 has an invalid length. [ 302.972728][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5876'. [ 303.425727][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5890'. [ 304.203435][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5913'. [ 304.792703][T18409] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5929'. [ 304.819445][T18414] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5932'. [ 305.885526][T18488] nbd1: detected capacity change from 0 to 127 [ 305.905975][ T5832] block nbd1: Receive control failed (result -32) [ 305.917218][T18494] block nbd1: Dead connection, failed to find a fallback [ 305.924519][T18494] block nbd1: shutting down sockets [ 305.941939][T18494] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.953428][T18494] Buffer I/O error on dev nbd1, logical block 0, async page read [ 305.961346][T18494] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.972220][T18494] Buffer I/O error on dev nbd1, logical block 1, async page read [ 305.981293][T18494] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.990912][T18494] Buffer I/O error on dev nbd1, logical block 2, async page read [ 305.998993][T18494] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.013397][T18494] Buffer I/O error on dev nbd1, logical block 3, async page read [ 306.024896][T18494] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.055794][T18494] Buffer I/O error on dev nbd1, logical block 0, async page read [ 306.063599][T18494] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.074161][T18494] Buffer I/O error on dev nbd1, logical block 1, async page read [ 306.101593][T18494] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.133479][T18494] Buffer I/O error on dev nbd1, logical block 2, async page read [ 306.142298][T18494] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.152697][T18494] Buffer I/O error on dev nbd1, logical block 3, async page read [ 306.162705][T18494] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.173895][T18494] Buffer I/O error on dev nbd1, logical block 0, async page read [ 306.191860][T18494] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.223738][T18494] Buffer I/O error on dev nbd1, logical block 1, async page read [ 306.237200][T18494] ldm_validate_partition_table(): Disk read failed. [ 306.253107][T18494] Dev nbd1: unable to read RDB block 0 [ 306.276985][T18494] nbd1: unable to read partition table [ 306.300235][T18494] ldm_validate_partition_table(): Disk read failed. [ 306.319836][T18494] Dev nbd1: unable to read RDB block 0 [ 306.335880][T18494] nbd1: unable to read partition table [ 307.094051][T18579] vlan0: Caught tx_queue_len zero misconfig [ 307.271874][T18589] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 307.990051][T18648] netlink: 'syz.4.6037': attribute type 83 has an invalid length. [ 308.311473][T18674] sctp: [Deprecated]: syz.4.6051 (pid 18674) Use of int in maxseg socket option. [ 308.311473][T18674] Use struct sctp_assoc_value instead [ 308.528544][T18688] veth1_macvtap: left promiscuous mode [ 308.728436][T18703] __nla_validate_parse: 8 callbacks suppressed [ 308.728453][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6065'. [ 309.602731][T18776] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6100'. [ 309.896309][T18799] netlink: 'syz.2.6111': attribute type 1 has an invalid length. [ 309.904773][T18799] netlink: 'syz.2.6111': attribute type 2 has an invalid length. [ 309.914839][T18799] netlink: 'syz.2.6111': attribute type 1 has an invalid length. [ 309.941088][T18799] netlink: 'syz.2.6111': attribute type 3 has an invalid length. [ 309.962649][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6111'. [ 310.337998][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6125'. [ 310.347182][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6125'. [ 310.509583][T18837] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6130'. [ 310.740895][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6137'. [ 311.349465][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6160'. [ 311.531577][T18913] netlink: 'syz.3.6166': attribute type 83 has an invalid length. [ 311.601032][T18919] netlink: 'syz.3.6169': attribute type 18 has an invalid length. [ 311.698048][T18925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6171'. [ 311.726954][T18927] netlink: 'syz.2.6172': attribute type 1 has an invalid length. [ 311.734989][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6172'. [ 311.935191][T18936] blkio.reset_stats is deprecated [ 311.987504][T18940] tun0: tun_chr_ioctl cmd 1074025675 [ 311.992945][T18940] tun0: persist disabled [ 312.686124][T18995] netem: change failed [ 313.111546][T19027] xfrm1: entered promiscuous mode [ 313.123747][T19027] xfrm1: entered allmulticast mode [ 313.758886][T19081] __nla_validate_parse: 6 callbacks suppressed [ 313.758903][T19081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6245'. [ 314.120070][T19104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6258'. [ 314.329473][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 314.358434][T19123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6267'. [ 314.492307][T19134] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6272'. [ 314.730972][T19147] syz.2.6278: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 314.752943][T19147] CPU: 0 UID: 0 PID: 19147 Comm: syz.2.6278 Not tainted syzkaller #0 PREEMPT(full) [ 314.752978][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.752994][T19147] Call Trace: [ 314.753002][T19147] [ 314.753010][T19147] dump_stack_lvl+0xe8/0x150 [ 314.753042][T19147] warn_alloc+0x249/0x340 [ 314.753067][T19147] ? stack_trace_save+0xa9/0x100 [ 314.753098][T19147] ? __pfx_warn_alloc+0x10/0x10 [ 314.753129][T19147] ? kasan_save_track+0x4f/0x80 [ 314.753149][T19147] ? kasan_save_track+0x3e/0x80 [ 314.753170][T19147] ? __kasan_kmalloc+0x93/0xb0 [ 314.753191][T19147] ? __kmalloc_cache_noprof+0x31c/0x660 [ 314.753212][T19147] ? xskq_create+0x56/0x170 [ 314.753232][T19147] ? xsk_setsockopt+0x54c/0x990 [ 314.753250][T19147] ? do_sock_setsockopt+0x17c/0x1b0 [ 314.753271][T19147] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 314.753292][T19147] ? do_syscall_64+0x14d/0xf80 [ 314.753318][T19147] __vmalloc_node_range_noprof+0x132/0x1730 [ 314.753373][T19147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 314.753405][T19147] ? __kasan_kmalloc+0x93/0xb0 [ 314.753433][T19147] vmalloc_user_noprof+0xad/0xe0 [ 314.753463][T19147] ? xskq_create+0xbf/0x170 [ 314.753484][T19147] xskq_create+0xbf/0x170 [ 314.753505][T19147] xsk_init_queue+0xad/0x110 [ 314.753526][T19147] xsk_setsockopt+0x54c/0x990 [ 314.753547][T19147] ? __pfx_xsk_setsockopt+0x10/0x10 [ 314.753568][T19147] ? __pfx_aa_sk_perm+0x10/0x10 [ 314.753596][T19147] ? aa_sock_opt_perm+0xff/0x1a0 [ 314.753624][T19147] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 314.753650][T19147] ? __pfx_xsk_setsockopt+0x10/0x10 [ 314.753672][T19147] do_sock_setsockopt+0x17c/0x1b0 [ 314.753698][T19147] __x64_sys_setsockopt+0x13d/0x1b0 [ 314.753725][T19147] do_syscall_64+0x14d/0xf80 [ 314.753746][T19147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.753764][T19147] ? trace_irq_disable+0x37/0x100 [ 314.753784][T19147] ? clear_bhb_loop+0x40/0x90 [ 314.753807][T19147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.753825][T19147] RIP: 0033:0x7f7d90d9c629 [ 314.753842][T19147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.753858][T19147] RSP: 002b:00007f7d91c80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.753878][T19147] RAX: ffffffffffffffda RBX: 00007f7d91015fa0 RCX: 00007f7d90d9c629 [ 314.753892][T19147] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 314.753904][T19147] RBP: 00007f7d90e32b39 R08: 0000000000000004 R09: 0000000000000000 [ 314.753916][T19147] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.753931][T19147] R13: 00007f7d91016038 R14: 00007f7d91015fa0 R15: 00007ffdf95b7648 [ 314.753963][T19147] [ 315.029982][T19147] Mem-Info: [ 315.033362][T19147] active_anon:11397 inactive_anon:0 isolated_anon:0 [ 315.033362][T19147] active_file:3208 inactive_file:40015 isolated_file:0 [ 315.033362][T19147] unevictable:768 dirty:291 writeback:0 [ 315.033362][T19147] slab_reclaimable:12059 slab_unreclaimable:100785 [ 315.033362][T19147] mapped:29103 shmem:1359 pagetables:3466 [ 315.033362][T19147] sec_pagetables:0 bounce:0 [ 315.033362][T19147] kernel_misc_reclaimable:0 [ 315.033362][T19147] free:1315637 free_pcp:8693 free_cma:0 [ 315.105705][T19147] Node 0 active_anon:45528kB inactive_anon:0kB active_file:12832kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116376kB dirty:1164kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:13756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.197772][T19147] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.267238][T19147] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.298087][T19147] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 315.303874][T19147] Node 0 DMA32 free:1309788kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45428kB inactive_anon:0kB active_file:12832kB inactive_file:159856kB unevictable:1536kB writepending:1164kB zspages:0kB present:3129332kB managed:2554004kB mlocked:0kB bounce:0kB free_pcp:35156kB local_pcp:15968kB free_cma:0kB [ 315.338922][T19147] lowmem_reserve[]: 0 0 0 0 0 [ 315.349955][T19147] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.405449][T19147] lowmem_reserve[]: 0 0 0 0 0 [ 315.415780][T19147] Node 1 Normal free:3936312kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.435698][T19167] netlink: 'syz.0.6287': attribute type 1 has an invalid length. [ 315.477035][T19147] lowmem_reserve[]: 0 0 0 0 0 [ 315.486254][T19147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.575348][T19147] Node 0 DMA32: 5551*4kB (U) 3324*8kB (UM) 1622*16kB (U) 99*32kB (UME) 525*64kB (UME) 552*128kB (U) 458*256kB (UM) 275*512kB (UME) 111*1024kB (U) 13*2048kB (UM) 178*4096kB (UM) = 1309596kB [ 315.599518][T19147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.633118][T19147] Node 1 Normal: 0*4kB 5*8kB (UM) 9*16kB (UME) 10*32kB (UME) 7*64kB (UME) 5*128kB (UM) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 959*4096kB (M) = 3936312kB [ 315.651211][T19147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.662982][T19147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.672637][T19147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.715126][T19147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.724501][T19147] 44578 total pagecache pages [ 315.732485][T19147] 0 pages in swap cache [ 315.747672][T19147] Free swap = 124996kB [ 315.752926][T19147] Total swap = 124996kB [ 315.764213][T19147] 2097051 pages RAM [ 315.781730][T19147] 0 pages HighMem/MovableOnly [ 315.804503][T19147] 426705 pages reserved [ 315.809076][T19147] 0 pages cma reserved [ 316.351323][T19231] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6319'. [ 316.375232][T19231] netem: invalid attributes len -24 [ 316.380512][T19231] netem: change failed [ 316.746960][T19266] : renamed from bond0 [ 316.830953][T19271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6338'. [ 316.849180][T19271] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6338'. [ 317.089106][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6343'. [ 317.310602][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.978100][T19351] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6375'. [ 317.990247][T19351] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 318.219949][T19365] tipc: Started in network mode [ 318.224856][T19365] tipc: Node identity ac14140f, cluster identity 4711 [ 318.247949][T19365] tipc: New replicast peer: 255.255.255.255 [ 318.256719][T19365] tipc: Enabled bearer , priority 10 [ 318.990595][T19423] __nla_validate_parse: 3 callbacks suppressed [ 318.990614][T19423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6411'. [ 319.365612][ T5902] tipc: Node number set to 2886997007 [ 319.593142][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6431'. [ 319.609091][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6431'. [ 320.023947][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 320.038403][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6446'. [ 320.049150][T19497] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6446'. [ 320.065945][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6446'. [ 320.071712][T19502] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6449'. [ 320.079329][T19497] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6446'. [ 320.180267][T19505] xt_hashlimit: size too large, truncated to 1048576 [ 320.247003][T19513] –: renamed from vxcan1 (while UP) [ 320.338094][T19515] block nbd1: Unsupported socket: should be TCP or UNIX. [ 320.815273][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6471'. [ 321.562794][T19610] netlink: 'syz.1.6500': attribute type 2 has an invalid length. [ 321.787307][T19629] netem: change failed [ 322.268032][T19665] netlink: 'syz.4.6527': attribute type 83 has an invalid length. [ 323.110550][T19738] hsr_slave_0: left promiscuous mode [ 323.120329][T19738] hsr_slave_1: left promiscuous mode [ 323.160057][T19742] netlink: 'syz.0.6563': attribute type 25 has an invalid length. [ 323.305461][T19750] block nbd4: not configured, cannot reconfigure [ 323.700714][T19781] netlink: 'syz.4.6583': attribute type 10 has an invalid length. [ 323.728556][T19781] team0: Port device dummy0 added [ 324.017704][T19806] tipc: New replicast peer: 255.255.255.255 [ 324.024277][T19806] tipc: Enabled bearer , priority 10 [ 324.044204][T19806] __nla_validate_parse: 13 callbacks suppressed [ 324.044223][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6595'. [ 324.148576][T19813] netlink: 'syz.2.6597': attribute type 4 has an invalid length. [ 324.277150][T19825] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6605'. [ 324.301078][T19825] netlink: 'syz.2.6605': attribute type 1 has an invalid length. [ 324.785404][T19865] sctp: [Deprecated]: syz.0.6621 (pid 19865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.785404][T19865] Use struct sctp_sack_info instead [ 325.005387][T19875] xt_hashlimit: size too large, truncated to 1048576 [ 326.076376][T19929] netlink: 'syz.2.6649': attribute type 6 has an invalid length. [ 326.121342][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6650'. [ 326.694054][T19979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6674'. [ 326.803074][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6675'. [ 327.128664][T20005] veth0: entered promiscuous mode [ 327.150011][T20005] veth0: left promiscuous mode [ 327.567408][T20039] netlink: 'syz.1.6702': attribute type 2 has an invalid length. [ 328.106370][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6723'. [ 328.389616][T20105] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.618886][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6743'. [ 328.638452][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6743'. [ 328.903645][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6755'. [ 328.936683][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6755'. [ 329.108052][T20158] tipc: Enabled bearer , priority 10 [ 329.412231][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6775'. [ 329.430050][T20185] vlan4: entered allmulticast mode [ 329.437043][T20185] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 330.051562][T20227] veth0_to_bridge: entered promiscuous mode [ 330.061309][T20226] veth0_to_bridge: left promiscuous mode [ 330.124623][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6796'. [ 330.203311][T20238] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6799'. [ 330.389005][T20250] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 330.409523][T20250] netlink: 'syz.3.6805': attribute type 2 has an invalid length. [ 330.429917][T20250] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 330.460082][T20250] netlink: 'syz.3.6805': attribute type 3 has an invalid length. [ 330.485095][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6805'. [ 330.691013][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 330.816570][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 330.912918][T20287] gretap0: entered promiscuous mode [ 330.923546][T20288] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 330.936792][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 330.951226][T20287] gretap0: left promiscuous mode [ 331.168599][T20305] netlink: 'syz.1.6832': attribute type 21 has an invalid length. [ 331.181760][T20305] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6832'. [ 331.447007][T20327] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6843'. [ 331.481821][T20324] netlink: 'syz.4.6841': attribute type 16 has an invalid length. [ 331.526255][T20324] netlink: 'syz.4.6841': attribute type 17 has an invalid length. [ 331.580844][T20324] 8021q: adding VLAN 0 to HW filter on device ` [ 331.589154][T20324] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.601619][T20324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.621538][ T5903] lo speed is unknown, defaulting to 1000 [ 331.641060][ T5903] syz0: Port: 1 Link ACTIVE [ 331.655670][ T9] lo speed is unknown, defaulting to 1000 [ 331.727827][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6851'. [ 331.754752][T20340] netlink: 'syz.2.6851': attribute type 30 has an invalid length. [ 331.966570][T20360] netlink: 'syz.0.6860': attribute type 12 has an invalid length. [ 333.329243][T20458] veth0: entered promiscuous mode [ 333.346894][T20457] veth0: left promiscuous mode [ 333.960053][T20501] netlink: 'syz.1.6925': attribute type 1 has an invalid length. [ 334.490344][T20534] netlink: 'syz.0.6941': attribute type 1 has an invalid length. [ 334.507205][T20534] __nla_validate_parse: 6 callbacks suppressed [ 334.507222][T20534] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6941'. [ 334.527664][T20534] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6941'. [ 334.537097][T20534] netlink: 'syz.0.6941': attribute type 1 has an invalid length. [ 334.547505][T20534] netlink: 'syz.0.6941': attribute type 8 has an invalid length. [ 334.556191][T20534] netlink: 582 bytes leftover after parsing attributes in process `syz.0.6941'. [ 335.172521][T20580] netlink: 766 bytes leftover after parsing attributes in process `syz.2.6963'. [ 335.394430][T20598] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6971'. [ 335.663509][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6982'. [ 335.688956][T20623] netlink: 'syz.1.6983': attribute type 5 has an invalid length. [ 336.103175][T20655] vcan0: tx address claim with dest, not broadcast [ 336.966575][ T5832] block nbd2: Receive control failed (result -32) [ 337.168804][T20732] netlink: zone id is out of range [ 337.175254][T20732] netlink: zone id is out of range [ 337.180457][T20728] netlink: set zone limit has 4 unknown bytes [ 337.209618][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7035'. [ 337.511067][T20753] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7041'. [ 338.264698][T20788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7060'. [ 338.294405][T20788] nbd: couldn't find a device at index 0 [ 338.459675][T20797] netlink: 'syz.4.7062': attribute type 19 has an invalid length. [ 338.465849][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7065'. [ 338.842166][T20820] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.416604][T20866] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.681702][T20888] __nla_validate_parse: 5 callbacks suppressed [ 339.681717][T20888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7108'. [ 339.755364][T20894] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 339.882735][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7113'. [ 340.169640][T20925] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7126'. [ 340.617338][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7141'. [ 340.686659][T20963] tipc: Started in network mode [ 340.691597][T20963] tipc: Node identity ac14140f, cluster identity 4711 [ 340.715341][T20963] tipc: New replicast peer: 255.255.255.255 [ 340.722115][T20963] tipc: Enabled bearer , priority 10 [ 340.861525][T20973] block nbd3: Unsupported socket: should be TCP or UNIX. [ 341.154395][T20999] netlink: 59 bytes leftover after parsing attributes in process `syz.2.7163'. [ 341.496608][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'. [ 341.526003][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'. [ 341.535444][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'. [ 341.835710][ T980] tipc: Node number set to 2886997007 [ 341.973662][T21062] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7189'. [ 342.042433][T21068] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 342.530599][T21101] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7206'. [ 343.293249][T21157] netlink: 'syz.3.7229': attribute type 5 has an invalid length. [ 344.170648][T21212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 345.098252][T21260] gtp0: entered promiscuous mode [ 345.113554][T21260] gtp0: entered allmulticast mode [ 345.527732][T21294] block nbd3: server does not support multiple connections per device. [ 345.552113][T21294] block nbd3: shutting down sockets [ 346.073609][T21330] syzkaller1: entered promiscuous mode [ 346.095137][T21330] syzkaller1: entered allmulticast mode [ 346.128364][T21332] __nla_validate_parse: 5 callbacks suppressed [ 346.128384][T21332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7300'. [ 346.191344][T21336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7300'. [ 346.443886][T20475] udevd[20475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 346.564574][T21358] syzkaller1: entered promiscuous mode [ 346.571968][T21358] syzkaller1: entered allmulticast mode [ 347.106980][T21396] syzkaller1: entered promiscuous mode [ 347.112577][T21396] syzkaller1: entered allmulticast mode [ 347.194409][T21402] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.871811][T21454] syzkaller1: entered promiscuous mode [ 347.879289][T21454] syzkaller1: entered allmulticast mode [ 348.162545][T21468] dvmrp6: entered allmulticast mode [ 349.388013][T21542] netlink: 'syz.0.7395': attribute type 17 has an invalid length. [ 349.395964][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7395'. [ 349.404839][T21542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7395'. [ 349.421658][T21542] gretap0: entered promiscuous mode [ 349.446714][T21542] gretap0: left promiscuous mode [ 349.580618][T21546] tipc: Resetting bearer [ 349.634315][T21549] tipc: Resetting bearer [ 349.681468][T21549] bond0: (slave bridge0): Releasing backup interface [ 349.711685][T21549] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.719725][T21549] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.728223][T21553] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 349.774174][T21549] bridge_slave_0: left allmulticast mode [ 349.781534][T21549] bridge_slave_0: left promiscuous mode [ 349.807017][T21549] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.820888][T21549] bridge_slave_1: left allmulticast mode [ 349.842743][T21549] bridge_slave_1: left promiscuous mode [ 349.851353][T21549] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.898136][T21549] bond0: (slave bond_slave_0): Releasing backup interface [ 349.924612][T21549] bond0: (slave bond_slave_1): Releasing backup interface [ 349.943567][T21549] team0: Port device team_slave_0 removed [ 349.957201][T21549] team0: Port device team_slave_1 removed [ 349.963891][T21549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.977198][T21549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.987206][T21549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.994768][T21549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.004250][T21549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.206304][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7412'. [ 350.226874][T21582] syzkaller1: entered promiscuous mode [ 350.232524][T21582] syzkaller1: entered allmulticast mode [ 350.318763][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7412'. [ 350.884053][T21624] netlink: 'syz.2.7434': attribute type 4 has an invalid length. [ 351.328608][T21657] sctp: [Deprecated]: syz.0.7449 (pid 21657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.328608][T21657] Use struct sctp_sack_info instead [ 351.648392][T21676] netlink: 'syz.3.7459': attribute type 1 has an invalid length. [ 351.665428][T21676] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7459'. [ 351.674879][T21676] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7459'. [ 351.691170][T21676] netlink: 'syz.3.7459': attribute type 1 has an invalid length. [ 351.699511][T21676] netlink: 634 bytes leftover after parsing attributes in process `syz.3.7459'. [ 351.737685][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7461'. [ 351.818947][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7463'. [ 351.835580][T21685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 351.845558][T21687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7464'. [ 351.857023][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7463'. [ 351.866648][T21685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 352.167763][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7477'. [ 352.191055][T21711] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 352.200403][T21711] team0: Port device batadv2 added [ 353.140776][T21764] gre0: entered promiscuous mode [ 353.151257][T21764] gre0: entered allmulticast mode [ 353.342304][T21779] netlink: 'syz.0.7508': attribute type 1 has an invalid length. [ 353.979376][T21824] syzkaller1: entered promiscuous mode [ 353.994741][T21824] syzkaller1: entered allmulticast mode [ 354.568548][T21865] netlink: ct family unspecified [ 354.924577][T21891] ip6gre1: entered promiscuous mode [ 354.936290][T21891] ip6gre1: entered allmulticast mode [ 355.012597][T21899] sctp: [Deprecated]: syz.4.7553 (pid 21899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.012597][T21899] Use struct sctp_sack_info instead [ 355.101257][T21903] syzkaller1: entered promiscuous mode [ 355.107895][T21903] syzkaller1: entered allmulticast mode [ 355.877815][ T2173] IPVS: starting estimator thread 0... [ 355.883644][T21940] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 355.995090][T21944] IPVS: using max 31 ests per chain, 74400 per kthread [ 356.458931][T21972] netlink: 'syz.1.7587': attribute type 63 has an invalid length. [ 356.485719][T21972] netlink: 'syz.1.7587': attribute type 63 has an invalid length. [ 356.602262][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.614314][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.637495][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.655227][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.740025][T21989] __nla_validate_parse: 7 callbacks suppressed [ 356.740042][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7596'. [ 356.792552][T21993] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7598'. [ 357.007189][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7603'. [ 357.323551][T22025] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7612'. [ 357.404294][T22027] siw: device registration error -23 [ 357.595660][T22029] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7614'. [ 358.163402][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7629'. [ 358.683634][ T980] IPVS: starting estimator thread 0... [ 358.684214][T22101] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.855958][T22103] IPVS: using max 31 ests per chain, 74400 per kthread [ 359.736900][T22168] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 359.843788][T22176] netlink: 'syz.2.7680': attribute type 1 has an invalid length. [ 359.864843][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7680'. [ 360.094766][T22190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7687'. [ 360.357252][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7699'. [ 360.705963][T22241] netlink: 'syz.2.7711': attribute type 29 has an invalid length. [ 360.715926][T22241] netlink: 'syz.2.7711': attribute type 29 has an invalid length. [ 360.725648][T22241] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7711'. [ 361.030245][T22263] syzkaller1: entered promiscuous mode [ 361.036166][T22263] syzkaller1: entered allmulticast mode [ 361.753756][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b51000: rx timeout, send abort [ 361.764140][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020b51000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.916607][T22316] __nla_validate_parse: 2 callbacks suppressed [ 361.916625][T22316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7748'. [ 361.965954][T22316] netlink: 'syz.1.7748': attribute type 7 has an invalid length. [ 361.973720][T22316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7748'. [ 362.042278][T22327] erspan0: entered promiscuous mode [ 362.047991][T22327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7752'. [ 362.139044][T22316] gretap0: entered promiscuous mode [ 362.151053][T22316] gretap0: left promiscuous mode [ 362.481367][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7764'. [ 362.554914][T22359] syzkaller1: entered promiscuous mode [ 362.564665][T22359] syzkaller1: entered allmulticast mode [ 362.653828][T22364] netlink: 'syz.2.7770': attribute type 1 has an invalid length. [ 362.679621][T22364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7770'. [ 363.253866][T22401] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7784'. [ 363.384920][T22411] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7790'. [ 363.411144][T22411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7790'. [ 363.515594][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7794'. [ 363.532423][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7794'. [ 363.673380][T22431] team_slave_1: Caught tx_queue_len zero misconfig [ 364.926024][T22518] team0 (unregistering): Port device team_slave_0 removed [ 364.949711][T22518] team0 (unregistering): Port device team_slave_1 removed [ 365.600581][T22565] syzkaller1: entered promiscuous mode [ 365.619515][T22565] syzkaller1: entered allmulticast mode [ 365.710718][T22578] netlink: 'syz.1.7867': attribute type 13 has an invalid length. [ 365.722893][T22578] netlink: 'syz.1.7867': attribute type 17 has an invalid length. [ 365.762659][T22578] tipc: Resetting bearer [ 365.789581][T22578] tipc: Resetting bearer [ 365.874514][T22578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.009788][T22595] netlink: 'syz.2.7877': attribute type 7 has an invalid length. [ 366.025480][T22595] netlink: 'syz.2.7877': attribute type 8 has an invalid length. [ 366.171127][T22604] pim6reg1: entered promiscuous mode [ 366.176867][T22604] pim6reg1: entered allmulticast mode [ 366.476985][T22624] syzkaller1: entered promiscuous mode [ 366.489056][T22624] syzkaller1: entered allmulticast mode [ 366.933474][T22652] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 367.020895][T22660] netlink: 'syz.0.7909': attribute type 11 has an invalid length. [ 367.155526][T22670] macvtap1: entered promiscuous mode [ 367.166948][T22670] macvtap1: entered allmulticast mode [ 367.172357][T22670] veth1_vlan: entered allmulticast mode [ 367.216394][T22676] macvtap2: entered promiscuous mode [ 367.222411][T22676] macvtap2: entered allmulticast mode [ 367.248166][T22679] __nla_validate_parse: 10 callbacks suppressed [ 367.248184][T22679] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.7918'. [ 367.400767][T22690] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7924'. [ 367.612784][T22707] netlink: 'syz.3.7930': attribute type 4 has an invalid length. [ 367.752299][T22711] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7933'. [ 367.765834][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7932'. [ 367.794262][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7936'. [ 367.809634][T22718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7935'. [ 368.109927][T22740] sock: sock_set_timeout: `syz.0.7947' (pid 22740) tries to set negative timeout [ 368.206673][T22750] netlink: 83 bytes leftover after parsing attributes in process `syz.4.7948'. [ 368.577629][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7959'. [ 368.730867][T22785] netlink: 'syz.4.7966': attribute type 17 has an invalid length. [ 368.750250][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 368.761493][T22785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7966'. [ 368.784459][T22785] gretap0: entered promiscuous mode [ 368.791910][T22785] gretap0: left promiscuous mode [ 369.019515][T22800] atomic_op ffff88802870f198 conn xmit_atomic 0000000000000000 [ 370.633815][T22919] netlink: 'syz.2.8025': attribute type 4 has an invalid length. [ 370.803468][T22930] netlink: 'syz.3.8030': attribute type 11 has an invalid length. [ 370.877328][T22930] netlink: 'syz.3.8030': attribute type 11 has an invalid length. [ 371.661618][T22987] tipc: Disabling bearer [ 371.853919][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac80c00: rx timeout, send abort [ 372.206245][T23027] netlink: 'syz.2.8075': attribute type 9 has an invalid length. [ 372.222111][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.222205][T23027] netlink: 'syz.2.8075': attribute type 9 has an invalid length. [ 372.244911][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.258304][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.275153][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.291081][T23029] ip6gre1: entered promiscuous mode [ 372.312730][T23031] __nla_validate_parse: 22 callbacks suppressed [ 372.312750][T23031] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8077'. [ 372.362295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ac80c00: abort rx timeout. Force session deactivation [ 373.041696][T23078] xt_hashlimit: size too large, truncated to 1048576 [ 373.090261][T23082] netlink: 'syz.4.8098': attribute type 13 has an invalid length. [ 373.099891][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8098'. [ 373.110954][T23082] netlink: 'syz.4.8098': attribute type 13 has an invalid length. [ 373.119715][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8098'. [ 373.343938][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8101'. [ 373.496769][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8105'. [ 373.505074][T23098] trusted_key: syz.0.8106 sent an empty control message without MSG_MORE. [ 373.890387][T23113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.000529][T23113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.081652][T23113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.082596][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8116'. [ 374.141458][T23113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.226533][ T58] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.248699][ T58] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.271737][T23131] netlink: 'syz.4.8119': attribute type 18 has an invalid length. [ 374.285180][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8119'. [ 374.298393][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.309580][T23131] netlink: 'syz.4.8119': attribute type 18 has an invalid length. [ 374.321703][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8119'. [ 374.322750][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.654259][T23148] netlink: 'syz.1.8127': attribute type 1 has an invalid length. [ 375.050135][T23153] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 375.056567][T23154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8129'. [ 375.111351][T23153] bond0: (slave lo): Enslaving as an active interface with an up link [ 375.133724][T23153] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 375.178282][T23163] netlink: 'syz.1.8133': attribute type 14 has an invalid length. [ 375.195704][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8133'. [ 375.219280][T23163] netlink: 'syz.1.8133': attribute type 14 has an invalid length. [ 375.321499][T23170] syzkaller1: entered promiscuous mode [ 375.345057][T23170] syzkaller1: entered allmulticast mode [ 376.133923][ T29] audit: type=1800 audit(1771425485.199:2): pid=23213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8156" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=8352 res=0 errno=0 [ 376.164305][T23172] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 376.195408][T23172] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 376.384351][T23235] netlink: 'syz.1.8165': attribute type 22 has an invalid length. [ 376.392840][T23235] netlink: 'syz.1.8165': attribute type 22 has an invalid length. [ 376.972373][T23271] netlink: 'syz.4.8182': attribute type 7 has an invalid length. [ 376.989310][ T32] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.998532][ T32] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.007737][ T32] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.016978][ T32] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.170900][T23278] syzkaller1: entered promiscuous mode [ 377.176954][T23278] syzkaller1: entered allmulticast mode [ 377.258596][T23284] bond7: entered promiscuous mode [ 377.264123][T23284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.299969][T23289] bond7: (slave bridge5): making interface the new active one [ 377.307706][T23289] bridge5: entered promiscuous mode [ 377.313971][T23289] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 377.421657][T23293] macvlan2: entered promiscuous mode [ 377.427159][T23293] macvlan2: entered allmulticast mode [ 377.433089][T23293] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 377.504423][T23296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.532310][T23300] __nla_validate_parse: 12 callbacks suppressed [ 377.532330][T23300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8194'. [ 377.550625][T23300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8194'. [ 377.599692][T23296] bond0: (slave geneve3): making interface the new active one [ 377.619259][T23296] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 377.640372][ T32] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.683416][ T32] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.717517][ T32] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.758873][ T32] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.823906][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8200'. [ 377.862907][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.863051][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8200'. [ 377.883501][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.893531][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.919250][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.227278][T23336] veth0: entered promiscuous mode [ 378.238309][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8211'. [ 378.245619][T23336] veth0: left promiscuous mode [ 378.298274][T23340] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8212'. [ 378.379392][T23348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8216'. [ 378.551859][T23362] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 378.558172][T23361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8220'. [ 378.749517][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.961142][T23385] veth0: entered promiscuous mode [ 378.979976][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8229'. [ 379.144425][T23391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.342306][T23407] veth0: entered promiscuous mode [ 379.368171][T23407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8236'. [ 380.586535][T23472] syzkaller1: entered promiscuous mode [ 380.592039][T23472] syzkaller1: entered allmulticast mode [ 381.433656][T23527] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.456668][T23527] bond6: (slave lo): Enslaving as an active interface with an up link [ 381.486264][T23527] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 382.039493][T23565] syzkaller1: entered promiscuous mode [ 382.047877][T23565] syzkaller1: entered allmulticast mode [ 382.465726][T23598] validate_nla: 10 callbacks suppressed [ 382.465747][T23598] netlink: 'syz.1.8317': attribute type 9 has an invalid length. [ 382.482532][T23598] netlink: 'syz.1.8317': attribute type 11 has an invalid length. [ 382.491771][T23598] netlink: 'syz.1.8317': attribute type 12 has an invalid length. [ 382.759919][T23618] __nla_validate_parse: 10 callbacks suppressed [ 382.759940][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8326'. [ 382.909307][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8330'. [ 383.039793][T23635] pim6reg1: entered promiscuous mode [ 383.045297][T23635] pim6reg1: entered allmulticast mode [ 383.451225][T23655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8343'. [ 383.466897][T23655] netlink: 'syz.3.8343': attribute type 7 has an invalid length. [ 383.475888][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8343'. [ 383.506009][T23655] erspan0: entered promiscuous mode [ 383.519524][T23655] gretap0: entered promiscuous mode [ 383.540250][T23655] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 383.573440][T23661] tls_set_device_offload: netdev not found [ 383.671805][T23670] netlink: 'syz.1.8350': attribute type 9 has an invalid length. [ 383.688238][T23670] netlink: 'syz.1.8350': attribute type 11 has an invalid length. [ 383.715022][T23670] netlink: 'syz.1.8350': attribute type 12 has an invalid length. [ 383.733237][T23670] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.8350'. [ 383.780775][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8350'. [ 383.820891][T23677] netlink: 'syz.2.8354': attribute type 4 has an invalid length. [ 383.892680][T23682] netlink: 'syz.2.8354': attribute type 4 has an invalid length. [ 384.267080][T23683] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 384.533981][T23699] syz_tun: entered allmulticast mode [ 384.560769][T23699] dvmrp8: entered allmulticast mode [ 384.570582][T23699] pimreg: left allmulticast mode [ 384.575940][T23699] dvmrp6: left allmulticast mode [ 384.581048][T23699] dvmrp8: left allmulticast mode [ 384.635744][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8364'. [ 384.685472][T23703] pimreg: left allmulticast mode [ 384.711146][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8365'. [ 384.735699][T23698] syz_tun: left allmulticast mode [ 384.744507][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8365'. [ 384.879495][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8370'. [ 384.952778][T23727] netlink: 'syz.4.8373': attribute type 15 has an invalid length. [ 385.022798][T13425] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 385.047922][T13425] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 385.060587][T13425] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 385.079863][T13425] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 385.780232][T23782] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.891898][T23793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.753410][T23919] syz_tun: entered allmulticast mode [ 387.770420][T23918] syz_tun: left allmulticast mode [ 388.049467][T23944] __nla_validate_parse: 19 callbacks suppressed [ 388.049487][T23944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8464'. [ 388.261115][T23962] xt_hashlimit: size too large, truncated to 1048576 [ 389.008146][T23997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8487'. [ 389.049062][T23999] ip6gre3: entered promiscuous mode [ 389.074344][T24001] nbd: nbd2 already in use [ 389.103256][T24001] block nbd2: NBD_DISCONNECT [ 389.120323][T24001] block nbd2: Send disconnect failed -32 [ 389.134617][T24001] block nbd2: shutting down sockets [ 389.734861][T24040] clip:clip_setentry: non-CLIP VCC [ 389.743240][T24044] lo speed is unknown, defaulting to 1000 [ 389.915131][T24057] PKCS7: Unknown OID: [4] (bad) [ 389.921646][T24057] PKCS7: Only support pkcs7_signedData type [ 389.987131][T24060] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8515'. [ 390.009803][T24062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8518'. [ 390.324605][T24079] sock: sock_set_timeout: `syz.1.8524' (pid 24079) tries to set negative timeout [ 391.187806][T24130] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.8542'. [ 391.384757][T24144] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8549'. [ 391.679190][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8557'. [ 391.695374][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8557'. [ 391.767217][ T3481] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.780940][ T3481] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.809091][ T3481] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.830790][ T3481] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 392.063385][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8564'. [ 392.109862][T24190] team1: entered promiscuous mode [ 392.115377][T24190] team1: entered allmulticast mode [ 392.252628][T24198] bridge0: port 4(syz_tun) entered blocking state [ 392.260688][T24198] bridge0: port 4(syz_tun) entered disabled state [ 392.273002][T24198] syz_tun: entered allmulticast mode [ 392.280821][T24198] syz_tun: entered promiscuous mode [ 392.281288][T24203] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.8570'. [ 392.288693][T24198] bridge0: port 4(syz_tun) entered blocking state [ 392.302635][T24198] bridge0: port 4(syz_tun) entered forwarding state [ 392.314376][T24204] syz_tun: entered allmulticast mode [ 392.323490][T24197] syz_tun: left allmulticast mode [ 393.093417][T24247] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 393.117300][T24247] bond2 (unregistering): Released all slaves [ 393.423106][T24278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8601'. [ 393.561292][T24281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8603'. [ 393.566555][T24285] geneve2: entered promiscuous mode [ 393.609422][ T58] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 46644 - 0 [ 393.644113][ T58] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46644 - 0 [ 393.826812][T24285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.838505][T24285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.877016][ T58] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46644 - 0 [ 394.013357][T24308] validate_nla: 3 callbacks suppressed [ 394.013374][T24308] netlink: 'syz.4.8612': attribute type 1 has an invalid length. [ 394.027431][T24308] netlink: 'syz.4.8612': attribute type 4 has an invalid length. [ 394.045179][T24308] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8612'. [ 394.145619][T24315] netlink: 'syz.0.8616': attribute type 2 has an invalid length. [ 394.155112][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8616'. [ 394.171618][T24315] netlink: 'syz.0.8616': attribute type 2 has an invalid length. [ 394.183803][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8616'. [ 394.801401][T24357] netlink: 'syz.0.8634': attribute type 15 has an invalid length. [ 394.908772][T24363] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.8637'. [ 395.156894][T24373] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8640'. [ 395.273703][T24379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8643'. [ 395.308374][T24379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8643'. [ 395.524658][T24285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.548661][T24285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.559572][T24285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46644 - 0 [ 395.578371][T24395] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8650'. [ 395.724345][T24285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.736366][T24285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.750823][T24285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46644 - 0 [ 395.838660][T24285] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.871939][T24285] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.885884][T24285] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 46644 - 0 [ 396.064528][T13425] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.074642][T13425] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 46644 - 0 [ 396.083112][T13425] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.142249][T13425] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.153266][T13425] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 46644 - 0 [ 396.163283][T13425] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.173889][T13425] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.183201][T13425] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 46644 - 0 [ 396.205487][T13425] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.254135][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.262542][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 46644 - 0 [ 396.305035][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 396.646400][T24453] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 398.250511][T24544] bridge0: entered allmulticast mode [ 398.566698][T24561] __nla_validate_parse: 7 callbacks suppressed [ 398.566717][T24561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8716'. [ 398.718351][T24570] policy can only be matched on NF_INET_PRE_ROUTING [ 398.718373][T24570] unable to load match [ 398.953364][T24585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8725'. [ 398.987876][T24585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8725'. [ 399.460625][T24595] netlink: 'syz.4.8729': attribute type 25 has an invalid length. [ 399.499445][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8729'. [ 399.551845][T24595] netlink: 'syz.4.8729': attribute type 25 has an invalid length. [ 399.588322][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8729'. [ 399.712536][T24602] netlink: 'syz.2.8731': attribute type 1 has an invalid length. [ 399.742406][T24604] netlink: 'syz.1.8732': attribute type 1 has an invalid length. [ 399.872664][T24613] netlink: 'syz.0.8736': attribute type 1 has an invalid length. [ 399.984925][T24608] bond2: (slave gretap2): making interface the new active one [ 400.007110][T24608] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 400.114595][T24617] bond1: (slave gretap1): making interface the new active one [ 400.127006][T24617] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 400.797604][T24651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8749'. [ 401.279753][T24679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8760'. [ 401.464261][T24692] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8767'. [ 401.526145][T24692] gretap0: entered promiscuous mode [ 401.598352][T24692] gretap0: left promiscuous mode [ 401.601495][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8770'. [ 401.618245][T24692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.317593][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8785'. [ 402.607905][T24749] netlink: 'syz.0.8793': attribute type 21 has an invalid length. [ 402.672775][T24749] netlink: 'syz.0.8793': attribute type 22 has an invalid length. [ 402.695204][T24749] netlink: 'syz.0.8793': attribute type 23 has an invalid length. [ 402.713357][T24749] netlink: 'syz.0.8793': attribute type 25 has an invalid length. [ 402.845973][T24760] netlink: 'syz.4.8798': attribute type 1 has an invalid length. [ 403.609470][T24809] __nla_validate_parse: 3 callbacks suppressed [ 403.609488][T24809] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8822'. [ 404.176344][T24841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.223870][T24841] bond0: (slave rose0): Enslaving as an active interface with an up link [ 404.351138][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8843'. [ 404.525895][T24872] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.715715][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8850'. [ 404.725930][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8850'. [ 404.741778][T24885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8850'. [ 404.772354][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8850'. [ 404.816950][T24889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8852'. [ 404.839821][T24889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8852'. [ 405.010366][T24898] lo speed is unknown, defaulting to 1000 [ 405.382710][T24918] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 405.602915][T24935] xt_hashlimit: size too large, truncated to 1048576 [ 405.991647][T24942] lo speed is unknown, defaulting to 1000 [ 407.029873][T25002] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.8884'. [ 408.085480][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8907'. [ 408.507081][T25094] netlink: 'syz.2.8921': attribute type 1 has an invalid length. [ 408.517990][T25094] netlink: 'syz.2.8921': attribute type 4 has an invalid length. [ 408.953237][T25117] __nla_validate_parse: 1 callbacks suppressed [ 408.953254][T25117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8931'. [ 408.987173][T25117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8931'. [ 409.094367][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8932'. [ 409.107129][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8932'. [ 409.804347][T25165] netlink: 'syz.3.8947': attribute type 4 has an invalid length. [ 409.923776][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8948'. [ 410.100507][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8950'. [ 410.162227][T25184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8953'. [ 410.253445][T25186] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 412.268510][T25254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8977'. [ 412.286519][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8976'. [ 412.329223][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8979'. [ 412.834378][T25284] sctp: [Deprecated]: syz.2.8988 (pid 25284) Use of int in maxseg socket option. [ 412.834378][T25284] Use struct sctp_assoc_value instead [ 413.137220][T25299] netlink: 'syz.3.8994': attribute type 1 has an invalid length. [ 413.257144][T25308] netlink: 'syz.4.8999': attribute type 1 has an invalid length. [ 413.278708][T25308] netlink: 'syz.4.8999': attribute type 4 has an invalid length. [ 414.616505][T25365] __nla_validate_parse: 4 callbacks suppressed [ 414.616532][T25365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9021'. [ 414.746103][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9026'. [ 414.811705][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9029'. [ 415.145718][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9035'. [ 415.343717][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9040'. [ 415.572375][T25424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9045'. [ 415.606800][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9045'. [ 415.665213][T25431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9047'. [ 415.841193][T25433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9048'. [ 416.541249][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9061'. [ 417.367035][T25503] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.478867][T25507] syzkaller1: entered promiscuous mode [ 417.496569][T25507] syzkaller1: entered allmulticast mode [ 417.592905][T25520] syz_tun: left allmulticast mode [ 417.602935][T25520] syz_tun: left promiscuous mode [ 417.609103][T25520] bridge0: port 4(syz_tun) entered disabled state [ 417.653713][T25520] dummy0: left allmulticast mode [ 417.666351][T25520] dummy0: left promiscuous mode [ 417.679413][T25520] bridge0: port 3(dummy0) entered disabled state [ 417.720317][T25520] bridge_slave_0: left promiscuous mode [ 417.729234][T25520] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.741588][T25520] .: left allmulticast mode [ 417.748072][T25520] .: left promiscuous mode [ 417.752906][T25520] bridge0: port 2(.) entered disabled state [ 417.785289][T25520] bond0: (slave bond_slave_0): Releasing backup interface [ 417.824766][T25520] bond0: (slave bond_slave_1): Releasing backup interface [ 417.868460][T25520] team0: Port device team_slave_0 removed [ 417.910367][T25520] team0: Port device team_slave_1 removed [ 417.926046][T25520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.933448][T25520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.948131][T25520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.956227][T25520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.966984][T25520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.002602][ T980] syz1: Port: 1 Link DOWN [ 418.155778][T25545] netlink: 'syz.0.9091': attribute type 4 has an invalid length. [ 418.207186][T25548] netlink: 'syz.0.9091': attribute type 4 has an invalid length. [ 418.672969][T25574] netlink: 'syz.1.9104': attribute type 1 has an invalid length. [ 418.865610][T25574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.907549][T25582] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 418.956774][T25584] bond3: entered promiscuous mode [ 418.965105][T25584] bond3: entered allmulticast mode [ 419.825829][T25634] __nla_validate_parse: 12 callbacks suppressed [ 419.825848][T25634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9123'. [ 420.168639][T25650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9129'. [ 420.264560][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9132'. [ 420.336874][T25659] syzkaller1: entered promiscuous mode [ 420.342532][T25659] syzkaller1: entered allmulticast mode [ 420.646609][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9140'. [ 420.698312][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9142'. [ 421.059616][T25701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9151'. [ 421.570442][T25732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9165'. [ 421.588097][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9165'. [ 421.598027][T25732] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.605534][T25732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.759631][T25742] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.9169'. [ 421.912835][T25749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9172'. [ 422.024717][T25754] tipc: Enabled bearer , priority 0 [ 422.147245][T25754] syzkaller0: entered promiscuous mode [ 422.153175][T25754] syzkaller0: entered allmulticast mode [ 422.166209][T25754] tipc: Resetting bearer [ 422.248982][T25753] tipc: Resetting bearer [ 423.649182][T25753] tipc: Disabling bearer [ 424.504814][T25837] tipc: Enabled bearer , priority 0 [ 424.528112][T25837] syzkaller0: MTU too low for tipc bearer [ 424.530314][T25840] netlink: 'syz.3.9206': attribute type 1 has an invalid length. [ 424.533951][T25837] tipc: Disabling bearer [ 424.584311][T25840] bond8: entered promiscuous mode [ 424.589913][T25840] 8021q: adding VLAN 0 to HW filter on device bond8 [ 424.608754][T25845] bond8: (slave bridge8): making interface the new active one [ 424.616398][T25845] bridge8: entered promiscuous mode [ 424.622696][T25845] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 424.672780][T25840] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.685729][T25840] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 424.839355][T25852] __nla_validate_parse: 6 callbacks suppressed [ 424.839372][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9210'. [ 424.858958][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9210'. [ 424.976470][T25859] bridge9: entered promiscuous mode [ 424.981787][T25859] bridge9: entered allmulticast mode [ 424.992423][T25859] team0: Port device bridge9 added [ 425.009221][T25859] bridge0: port 3(team0) entered blocking state [ 425.017709][T25859] bridge0: port 3(team0) entered disabled state [ 425.024185][T25859] team0: entered allmulticast mode [ 425.030010][T25859] team_slave_0: entered allmulticast mode [ 425.036554][T25859] team_slave_1: entered allmulticast mode [ 425.046510][T25859] team0: entered promiscuous mode [ 425.051562][T25859] team_slave_0: entered promiscuous mode [ 425.057825][T25859] team_slave_1: entered promiscuous mode [ 425.066555][T25859] bridge0: port 3(team0) entered blocking state [ 425.072846][T25859] bridge0: port 3(team0) entered forwarding state [ 425.094809][T25861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9214'. [ 425.234616][T25869] netlink: 'syz.3.9218': attribute type 33 has an invalid length. [ 425.243021][T25869] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9218'. [ 425.257249][T25869] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9218'. [ 425.711892][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9229'. [ 425.724224][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9229'. [ 425.735042][T25895] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.9228'. [ 425.744940][T25895] netlink: Unknown conntrack attr (type=2304, max=9) [ 426.071858][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9233'. [ 426.551792][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9243'. [ 427.277130][T25977] syzkaller1: entered promiscuous mode [ 427.285408][T25977] syzkaller1: entered allmulticast mode [ 427.340314][T25979] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 427.408269][T25981] lo speed is unknown, defaulting to 1000 [ 428.389522][T26016] syz.0.9274 (26016) used greatest stack depth: 17592 bytes left [ 429.713998][T26104] netlink: 'syz.3.9314': attribute type 1 has an invalid length. [ 429.798585][T26104] macvlan0: entered promiscuous mode [ 429.804167][T26104] macvlan0: entered allmulticast mode [ 429.811763][T26104] bond9: entered promiscuous mode [ 429.820760][T26104] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 429.872445][T26104] bond9: left promiscuous mode [ 429.951535][T26112] __nla_validate_parse: 9 callbacks suppressed [ 429.951554][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9318'. [ 430.540796][T26142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9330'. [ 430.714423][T26151] netlink: 'syz.0.9334': attribute type 5 has an invalid length. [ 430.938053][T26162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9338'. [ 430.940015][T26159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9339'. [ 431.028562][T26166] tipc: Enabled bearer , priority 0 [ 431.103067][T26166] syzkaller0: entered promiscuous mode [ 431.110749][T26166] syzkaller0: entered allmulticast mode [ 431.117831][T26166] tipc: Resetting bearer [ 431.173035][T26164] tipc: Resetting bearer [ 432.487242][T26164] tipc: Disabling bearer [ 432.707045][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9355'. [ 432.737273][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9356'. [ 432.748118][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9356'. [ 433.266313][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9362'. [ 433.293452][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9361'. [ 433.405274][T26221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.628278][T26240] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3954752024/3954752025 [ 433.644790][T26240] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3954752024/3954752025 [ 433.713790][T26247] netlink: 'syz.0.9373': attribute type 1 has an invalid length. [ 433.731461][T26248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9374'. [ 433.813412][T26247] bond3: entered promiscuous mode [ 433.831839][T26247] bond3: entered allmulticast mode [ 433.841599][T26247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.866350][T26259] bridge5: entered promiscuous mode [ 433.871806][T26259] bridge5: entered allmulticast mode [ 433.878708][T26259] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 433.937825][ T3481] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.056691][ T58] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.122419][T26271] netlink: 'syz.4.9383': attribute type 1 has an invalid length. [ 434.135567][T26271] netlink: 'syz.4.9383': attribute type 1 has an invalid length. [ 434.312888][T26282] netlink: 'syz.0.9387': attribute type 4 has an invalid length. [ 434.793398][T13425] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.833429][T13425] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.977756][T26313] __nla_validate_parse: 9 callbacks suppressed [ 434.977774][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9395'. [ 434.996573][T26320] syzkaller0: entered promiscuous mode [ 435.002059][T26320] syzkaller0: entered allmulticast mode [ 435.478474][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9405'. [ 435.961638][T26372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9417'. [ 435.976116][T26372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9417'. [ 435.989605][T26372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9417'. [ 436.018999][T26374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9418'. [ 436.524424][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9425'. [ 436.614904][T26403] netlink: 'syz.0.9427': attribute type 4 has an invalid length. [ 436.661433][T26403] netlink: 'syz.0.9427': attribute type 4 has an invalid length. [ 436.670783][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9428'. [ 436.795976][T26414] tipc: Enabled bearer , priority 0 [ 436.882646][T26414] syzkaller0: entered promiscuous mode [ 436.888327][T26414] syzkaller0: entered allmulticast mode [ 436.894699][T26414] tipc: Resetting bearer [ 436.910061][T26413] tipc: Resetting bearer [ 437.575375][T26447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9436'. [ 438.412711][T26413] tipc: Disabling bearer [ 438.496216][T26461] tipc: Enabled bearer , priority 0 [ 438.596618][T26461] syzkaller0: entered promiscuous mode [ 438.602167][T26461] syzkaller0: entered allmulticast mode [ 438.608851][T26461] tipc: Resetting bearer [ 438.643188][T26460] tipc: Resetting bearer [ 440.183993][T26460] tipc: Disabling bearer [ 440.190435][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.240901][T26503] tipc: Enabling of bearer rejected, failed to enable media [ 440.328259][T26511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9456'. [ 440.403772][T26511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9456'. [ 440.696766][T26540] netlink: 576 bytes leftover after parsing attributes in process `syz.4.9464'. [ 440.798531][T26546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9468'. [ 440.817628][T26543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9467'. [ 440.830625][T26548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9469'. [ 440.846017][T26543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.928529][T26551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9470'. [ 441.013663][T26555] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 441.278395][T26566] syzkaller0: entered promiscuous mode [ 441.287495][T26566] syzkaller0: entered allmulticast mode [ 442.165071][ T43] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 61 sec [ 442.201353][T26596] syzkaller0: entered promiscuous mode [ 442.237844][T26596] syzkaller0: entered allmulticast mode [ 442.406003][T26605] syzkaller0: entered allmulticast mode [ 442.569548][T26576] lec:lec_atm_close: lec0: Shut down! [ 442.583289][T26615] syzkaller0: entered promiscuous mode [ 442.616301][T26615] syzkaller0: entered allmulticast mode [ 442.650297][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9487'. [ 442.868823][T26631] netlink: 'syz.2.9490': attribute type 1 has an invalid length. [ 443.033804][T26638] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 443.063666][T26638] bond9: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 443.078069][T26638] bond9: (slave vxcan3): making interface the new active one [ 443.086600][T26638] bond9: (slave vxcan3): Enslaving as an active interface with an up link [ 443.148495][T26643] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 443.166941][T26643] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 443.203872][T26635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9491'. [ 443.241378][T26635] netlink: 'syz.0.9491': attribute type 13 has an invalid length. [ 443.415306][ T12] bond3: (slave bridge5): link status up again after 0 ms [ 443.438357][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 443.568624][ T9] lec:lec_start_xmit: lec0:No lecd attached [ 443.615832][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 443.711077][T26675] syzkaller0: entered promiscuous mode [ 443.727310][T26675] syzkaller0: entered allmulticast mode [ 443.829717][T26662] lec:lec_atm_close: lec0: Shut down! [ 443.865146][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 443.977004][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 444.102638][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 444.168220][T26695] syzkaller0: entered promiscuous mode [ 444.173860][T26695] syzkaller0: entered allmulticast mode [ 444.198933][T26695] tipc: Enabled bearer , priority 0 [ 444.215249][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 444.591615][T26694] tipc: Resetting bearer [ 444.736474][T26694] tipc: Disabling bearer [ 444.815489][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 444.939988][T26723] tipc: Failed to remove unknown binding: 66,0,0/2886997007:638486863/638486865 [ 444.950396][T26723] tipc: Failed to remove unknown binding: 66,0,0/2886997007:638486863/638486864 [ 444.960026][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 444.970338][T26723] tipc: Failed to remove unknown binding: 66,0,0/2886997007:638486863/638486865 [ 444.975998][T26719] syzkaller0: entered promiscuous mode [ 444.988604][T26719] syzkaller0: entered allmulticast mode [ 445.003962][T26723] tipc: Failed to remove unknown binding: 66,0,0/2886997007:638486863/638486864 [ 445.095190][ T12] bond3: (slave bridge5): failed to get link speed/duplex [ 445.146408][T26728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9517'. [ 445.228726][T26733] netlink: 'syz.0.9519': attribute type 13 has an invalid length. [ 445.602857][T26751] syzkaller0: entered promiscuous mode [ 445.619813][T26751] syzkaller0: entered allmulticast mode [ 445.643554][T26757] syzkaller0: entered promiscuous mode [ 445.650233][T26757] syzkaller0: entered allmulticast mode [ 445.658836][T26751] tipc: Enabled bearer , priority 0 [ 445.683792][T26754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.696001][T26749] tipc: Resetting bearer [ 445.713264][T26749] tipc: Disabling bearer [ 445.756312][T26754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.820760][T26754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.008537][T26821] syzkaller0: entered promiscuous mode [ 447.014013][T26821] syzkaller0: entered allmulticast mode [ 447.193376][T26827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.417394][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9556'. [ 447.540211][T26850] netlink: 'syz.0.9558': attribute type 13 has an invalid length. [ 447.665887][T26858] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 447.675150][T26858] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 447.835899][T26860] syzkaller0: entered promiscuous mode [ 447.845849][T26860] syzkaller0: entered allmulticast mode [ 448.063925][T26867] syzkaller0: entered promiscuous mode [ 448.069740][T26867] syzkaller0: entered allmulticast mode [ 448.227249][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9570'. [ 448.344101][T26889] syzkaller0: entered promiscuous mode [ 448.355364][T26889] syzkaller0: entered allmulticast mode [ 448.368779][T26889] tipc: Enabled bearer , priority 0 [ 448.383858][T26888] tipc: Resetting bearer [ 448.426139][T26888] tipc: Disabling bearer [ 448.465608][ T32] net_ratelimit: 28 callbacks suppressed [ 448.465626][ T32] bond3: (slave bridge5): failed to get link speed/duplex [ 448.595046][ T32] bond3: (slave bridge5): failed to get link speed/duplex [ 448.654523][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9576'. [ 448.729535][ T32] bond3: (slave bridge5): failed to get link speed/duplex [ 448.777375][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9574'. [ 448.786370][T26891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9574'. [ 448.803530][T26891] bridge12: entered promiscuous mode [ 448.809165][T26891] bridge12: entered allmulticast mode [ 448.845139][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 448.975828][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 449.042766][T26905] NFSD: Failed to start, no listeners configured. [ 449.064980][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 449.073428][ C0] lec:lec_tx_timeout: lec0 [ 449.078354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.085339][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 449.195273][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 449.307354][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 449.465370][ T32] bond3: (slave bridge5): failed to get link speed/duplex [ 449.575124][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 449.764042][T26942] syzkaller0: entered promiscuous mode [ 449.774475][T26942] syzkaller0: entered allmulticast mode [ 449.820214][T26944] syzkaller0: entered promiscuous mode [ 449.827960][T26944] syzkaller0: entered allmulticast mode [ 449.837495][T26947] netlink: 'syz.3.9593': attribute type 1 has an invalid length. [ 449.878203][T26947] 8021q: adding VLAN 0 to HW filter on device bond10 [ 449.915629][T26947] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 449.934061][T26947] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 450.088601][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9596'. [ 450.174596][T26958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9594'. [ 450.209893][T26957] syzkaller0: entered promiscuous mode [ 450.219509][T26957] syzkaller0: entered allmulticast mode [ 450.246991][T26962] syzkaller0: entered promiscuous mode [ 450.252668][T26962] syzkaller0: entered allmulticast mode [ 450.481943][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9605'. [ 450.571245][T26979] netlink: 'syz.4.9606': attribute type 83 has an invalid length. [ 450.607910][T26982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9607'. [ 450.747693][T26988] syzkaller0: entered promiscuous mode [ 450.753297][T26988] syzkaller0: entered allmulticast mode [ 450.999302][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9613'. [ 451.381345][T27012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.567064][T27016] bridge7: port 1(veth7) entered blocking state [ 451.583027][T27016] bridge7: port 1(veth7) entered disabled state [ 451.594424][T27016] veth7: entered allmulticast mode [ 451.602851][T27016] veth7: entered promiscuous mode [ 451.645803][T27021] bridge7: port 2(veth0_to_bond) entered blocking state [ 451.663265][T27021] bridge7: port 2(veth0_to_bond) entered disabled state [ 451.673263][T27021] veth0_to_bond: entered allmulticast mode [ 451.691064][T27021] veth0_to_bond: entered promiscuous mode [ 452.002050][T27034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.028290][T27034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.077951][T27032] netlink: 'syz.4.9629': attribute type 29 has an invalid length. [ 452.148179][T27034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.165823][T27034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.229930][T27040] syzkaller0: entered promiscuous mode [ 452.237852][T27040] syzkaller0: entered allmulticast mode [ 452.277353][T27034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.292796][T27034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.338251][T27043] netlink: 'syz.4.9629': attribute type 29 has an invalid length. [ 452.543243][ T32] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.555826][ T32] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.585521][ T32] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.595723][ T32] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.630319][T27053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.674675][T13425] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.690056][T13425] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.694607][T27060] __nla_validate_parse: 1 callbacks suppressed [ 452.694627][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9639'. [ 452.700922][T13425] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.722831][T13425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.731730][T27060] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 452.784436][T27060] team0: entered promiscuous mode [ 452.799349][T27060] team0: entered allmulticast mode [ 452.861659][T27066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9642'. [ 453.189243][T27077] syzkaller0: entered promiscuous mode [ 453.195112][T27077] syzkaller0: entered allmulticast mode [ 453.354064][T27085] ipt_REJECT: TCP_RESET invalid for non-tcp [ 453.441314][T27087] syzkaller0: entered promiscuous mode [ 453.460100][T27087] syzkaller0: entered allmulticast mode [ 453.546314][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 453.546307][ T58] net_ratelimit: 120 callbacks suppressed [ 453.546335][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.570089][ T58] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 453.657527][ T58] bond3: (slave bridge5): failed to get link speed/duplex [ 453.685457][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.705063][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.745219][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.753536][ T3518] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 453.785149][ T3481] bond3: (slave bridge5): failed to get link speed/duplex [ 453.832669][T27102] netlink: 'syz.1.9655': attribute type 1 has an invalid length. [ 453.904882][T27102] bond4: entered promiscuous mode [ 453.912033][T27102] bond4: entered allmulticast mode [ 453.917448][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.925889][T27102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.935946][T27109] syzkaller0: entered promiscuous mode [ 453.941426][T27109] syzkaller0: entered allmulticast mode [ 453.959567][T27102] bridge8: entered promiscuous mode [ 453.964928][T27102] bridge8: entered allmulticast mode [ 453.971380][T27102] bond4: (slave bridge8): Enslaving as a backup interface with an up link [ 454.036754][T27102] bridge9: entered promiscuous mode [ 454.042651][T27102] bridge9: entered allmulticast mode [ 454.048976][T27102] bond4: (slave bridge9): Enslaving as a backup interface with a down link [ 454.085263][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 454.093322][ C0] lec:lec_tx_timeout: lec0 [ 454.097917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.240854][T27118] syzkaller0: entered promiscuous mode [ 454.264165][T27118] syzkaller0: entered allmulticast mode [ 454.351254][T27125] syzkaller0: entered promiscuous mode [ 454.360370][T27125] syzkaller0: entered allmulticast mode [ 454.518272][T27136] syzkaller0: entered promiscuous mode [ 454.523781][T27136] syzkaller0: entered allmulticast mode [ 454.535587][T27136] tipc: Enabled bearer , priority 0 [ 454.544012][T27133] tipc: Resetting bearer [ 454.573928][T27133] tipc: Disabling bearer [ 454.601950][T27141] syzkaller0: entered promiscuous mode [ 454.608318][T27141] syzkaller0: entered allmulticast mode [ 454.712122][T27145] syzkaller0: entered promiscuous mode [ 454.718059][T27145] syzkaller0: entered allmulticast mode [ 454.772691][T27145] tipc: Enabled bearer , priority 0 [ 454.790362][T27144] tipc: Resetting bearer [ 454.812707][T27144] tipc: Disabling bearer [ 454.847355][T27148] syzkaller0: entered promiscuous mode [ 454.853001][T27148] syzkaller0: entered allmulticast mode [ 455.036594][T27158] netlink: 'syz.1.9675': attribute type 4 has an invalid length. [ 455.072068][T27160] syzkaller0: entered promiscuous mode [ 455.078440][T27160] syzkaller0: entered allmulticast mode [ 455.360794][T27162] tipc: Resetting bearer [ 455.368633][T27162] tipc: Resetting bearer [ 455.564794][T27182] syzkaller0: entered promiscuous mode [ 455.579006][T27182] syzkaller0: entered allmulticast mode [ 455.773917][T27192] syzkaller0: entered promiscuous mode [ 455.779494][T27192] syzkaller0: entered allmulticast mode [ 455.789074][T27192] tipc: Enabled bearer , priority 0 [ 455.798350][T27191] tipc: Resetting bearer [ 455.819385][T27191] tipc: Disabling bearer [ 455.888283][T27195] netlink: 'syz.3.9690': attribute type 1 has an invalid length. [ 455.910333][T27195] 8021q: adding VLAN 0 to HW filter on device bond11 [ 455.930958][T27195] macvlan0: entered promiscuous mode [ 455.936503][T27195] macvlan0: entered allmulticast mode [ 456.019400][T27200] netlink: 'syz.2.9692': attribute type 1 has an invalid length. [ 456.042352][T27200] 8021q: adding VLAN 0 to HW filter on device bond10 [ 456.061802][T27200] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 456.108729][T27200] 8021q: adding VLAN 0 to HW filter on device bond11 [ 456.117609][T27200] bond10: (slave bond11): Enslaving as an active interface with a down link [ 456.596311][T27219] lo speed is unknown, defaulting to 1000 [ 456.717759][T27228] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 456.735255][T27228] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 456.748974][T27226] syzkaller0: entered promiscuous mode [ 456.764717][T27226] syzkaller0: entered allmulticast mode [ 456.988337][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.026412][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.057294][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.073860][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.253968][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.280119][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.292871][T27232] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 457.321640][T27245] syzkaller0: entered promiscuous mode [ 457.334905][T27245] syzkaller0: entered allmulticast mode [ 457.613630][T27259] syzkaller0: entered promiscuous mode [ 457.622938][T27259] syzkaller0: entered allmulticast mode [ 457.914387][T27274] syzkaller0: entered promiscuous mode [ 457.920673][T27274] syzkaller0: entered allmulticast mode [ 458.056743][T27277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9718'. [ 458.268707][T27284] syzkaller0: entered promiscuous mode [ 458.274205][T27284] syzkaller0: entered allmulticast mode [ 458.293493][T27288] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 458.305355][T27288] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 458.374613][T27294] syzkaller0: entered promiscuous mode [ 458.380526][T27294] syzkaller0: entered allmulticast mode [ 458.516282][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9726'. [ 458.595660][T13425] net_ratelimit: 162 callbacks suppressed [ 458.595679][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.650000][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.666369][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 458.675311][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.683143][T13425] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 458.776154][ T3518] bond3: (slave bridge5): failed to get link speed/duplex [ 458.805279][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.818776][ T3518] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 458.880152][T27285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.885756][T13425] bond3: (slave bridge5): failed to get link speed/duplex [ 458.921290][T27316] syzkaller0: entered promiscuous mode [ 458.927223][T27316] syzkaller0: entered allmulticast mode [ 458.946365][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.104986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 459.113050][ C0] lec:lec_tx_timeout: lec0 [ 459.118294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.782945][T27346] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 460.942781][T27363] syzkaller0: entered promiscuous mode [ 460.985250][T27363] syzkaller0: entered allmulticast mode [ 460.993748][T27373] validate_nla: 3 callbacks suppressed [ 460.993768][T27373] netlink: 'syz.4.9749': attribute type 1 has an invalid length. [ 461.039433][T27372] syzkaller0: entered promiscuous mode [ 461.045252][T27372] syzkaller0: entered allmulticast mode [ 461.107991][T27373] bond2: entered promiscuous mode [ 461.121617][T27373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.361340][T27381] bond2: (slave bridge8): making interface the new active one [ 462.368999][T27381] bridge8: entered promiscuous mode [ 462.375332][T27381] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 462.394874][T27375] syzkaller0: entered promiscuous mode [ 462.400527][T27375] syzkaller0: entered allmulticast mode [ 462.437727][T27373] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 462.481276][T27384] macvlan3: entered promiscuous mode [ 462.487183][T27384] macvlan3: entered allmulticast mode [ 462.494064][T27384] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 462.562832][T27386] syzkaller0: entered promiscuous mode [ 462.577970][T27386] syzkaller0: entered allmulticast mode [ 462.670587][T27388] syzkaller0: entered promiscuous mode [ 462.686350][T27388] syzkaller0: entered allmulticast mode [ 462.713426][T27390] netlink: 'syz.0.9756': attribute type 1 has an invalid length. [ 462.741860][T27399] vlan0: entered promiscuous mode [ 462.747654][T27399] vlan0: entered allmulticast mode [ 462.763915][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9758'. [ 462.905980][T27410] netlink: 'syz.2.9762': attribute type 1 has an invalid length. [ 463.615259][ T58] net_ratelimit: 208 callbacks suppressed [ 463.615280][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.645126][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.667315][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.700766][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.726995][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.755306][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.777346][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.808201][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.835590][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.858811][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.125960][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 464.133984][ C0] lec:lec_tx_timeout: lec0 [ 464.138912][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 464.297850][T27410] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 464.405806][T27430] syzkaller0: entered promiscuous mode [ 464.425929][T27430] syzkaller0: entered allmulticast mode [ 464.498909][T27432] syzkaller0: entered promiscuous mode [ 464.504419][T27432] syzkaller0: entered allmulticast mode [ 464.524044][T27436] syzkaller0: entered promiscuous mode [ 464.531699][T27436] syzkaller0: entered allmulticast mode [ 464.593235][T27438] syzkaller0: entered promiscuous mode [ 464.610405][T27438] syzkaller0: entered allmulticast mode [ 464.865465][T27453] syzkaller0: entered promiscuous mode [ 464.871406][T27453] syzkaller0: entered allmulticast mode [ 465.033160][T27467] netlink: 'syz.2.9778': attribute type 13 has an invalid length. [ 465.185104][T27468] syzkaller0: entered promiscuous mode [ 465.190605][T27468] syzkaller0: entered allmulticast mode [ 465.334551][T27460] netlink: 'syz.4.9777': attribute type 2 has an invalid length. [ 465.515189][T27487] netlink: 'syz.0.9783': attribute type 1 has an invalid length. [ 465.592125][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9784'. [ 465.704569][T27500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9783'. [ 465.825353][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9784'. [ 466.802049][T27487] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 466.830713][T27496] veth11: entered promiscuous mode [ 466.987490][T27511] syzkaller0: entered promiscuous mode [ 466.996728][T27511] syzkaller0: entered allmulticast mode [ 467.124020][T27522] syzkaller0: entered promiscuous mode [ 467.130032][T27522] syzkaller0: entered allmulticast mode [ 467.136423][T27517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9788'. [ 467.170268][T27521] tipc: Enabled bearer , priority 0 [ 467.190146][T27521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 467.266523][T27521] tipc: Resetting bearer [ 467.380353][T27532] syzkaller0: entered promiscuous mode [ 467.390897][T27532] syzkaller0: entered allmulticast mode [ 467.409369][T27533] syzkaller0: entered promiscuous mode [ 467.414875][T27533] syzkaller0: entered allmulticast mode [ 467.529269][T27537] syzkaller0: entered promiscuous mode [ 467.534803][T27537] syzkaller0: entered allmulticast mode [ 467.586845][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9797'. [ 468.645151][ T3518] net_ratelimit: 205 callbacks suppressed [ 468.645171][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.685169][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.725696][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.749736][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.775953][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.796220][T13425] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.817367][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.846558][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.865149][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.885233][ T3518] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.145749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 469.153864][ C0] lec:lec_tx_timeout: lec0 [ 469.164043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.772101][T27569] syzkaller0: entered promiscuous mode [ 469.777820][T27569] syzkaller0: entered allmulticast mode [ 469.859182][T27613] tipc: Enabled bearer , priority 0 [ 469.886514][T27609] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 469.937425][T27616] syzkaller0: entered promiscuous mode [ 469.942931][T27616] syzkaller0: entered allmulticast mode [ 469.983318][T27611] tipc: Resetting bearer [ 470.007133][T27608] tipc: Resetting bearer [ 470.036305][T27608] tipc: Disabling bearer [ 470.054603][T27622] syzkaller0: entered promiscuous mode [ 470.060939][T27622] syzkaller0: entered allmulticast mode [ 470.068358][T27628] syzkaller0: entered promiscuous mode [ 470.074185][T27628] syzkaller0: entered allmulticast mode [ 470.103580][T27620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9814'. [ 470.114827][T27620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9814'. [ 470.133802][T27625] syzkaller0: entered promiscuous mode [ 470.141682][T27625] syzkaller0: entered allmulticast mode [ 470.297004][T27636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9818'. [ 470.378959][T27641] tipc: Enabling of bearer rejected, already enabled [ 470.406548][T27641] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 470.564354][T27648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 470.579530][T27648] syzkaller0: entered promiscuous mode [ 470.586314][T27648] syzkaller0: entered allmulticast mode [ 470.844145][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9832'. [ 471.003679][T27666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9832'. [ 471.337035][T27689] syzkaller0: entered promiscuous mode [ 471.351887][T27689] syzkaller0: entered allmulticast mode [ 471.595513][T27696] syzkaller0: entered promiscuous mode [ 471.612506][T27696] syzkaller0: entered allmulticast mode [ 471.818886][T27707] syzkaller0: entered promiscuous mode [ 471.834828][T27707] syzkaller0: entered allmulticast mode [ 471.849955][T27710] netlink: 'syz.2.9845': attribute type 1 has an invalid length. [ 471.921004][T27710] bond12: (slave bridge6): making interface the new active one [ 471.929659][T27710] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 471.957609][T27715] syz.3.9846: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 471.974859][T27715] CPU: 1 UID: 0 PID: 27715 Comm: syz.3.9846 Not tainted syzkaller #0 PREEMPT(full) [ 471.974886][T27715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.974903][T27715] Call Trace: [ 471.974910][T27715] [ 471.974919][T27715] dump_stack_lvl+0xe8/0x150 [ 471.974953][T27715] warn_alloc+0x249/0x340 [ 471.974979][T27715] ? stack_trace_save+0xa9/0x100 [ 471.975007][T27715] ? __pfx_warn_alloc+0x10/0x10 [ 471.975037][T27715] ? kasan_save_track+0x4f/0x80 [ 471.975056][T27715] ? kasan_save_track+0x3e/0x80 [ 471.975075][T27715] ? __kasan_kmalloc+0x93/0xb0 [ 471.975095][T27715] ? __kmalloc_cache_noprof+0x31c/0x660 [ 471.975118][T27715] ? xskq_create+0x56/0x170 [ 471.975138][T27715] ? xsk_setsockopt+0x54c/0x990 [ 471.975155][T27715] ? do_sock_setsockopt+0x17c/0x1b0 [ 471.975176][T27715] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 471.975197][T27715] ? do_syscall_64+0x14d/0xf80 [ 471.975225][T27715] __vmalloc_node_range_noprof+0x132/0x1730 [ 471.975279][T27715] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 471.975310][T27715] ? __kasan_kmalloc+0x93/0xb0 [ 471.975338][T27715] vmalloc_user_noprof+0xad/0xe0 [ 471.975360][T27715] ? xskq_create+0xbf/0x170 [ 471.975383][T27715] xskq_create+0xbf/0x170 [ 471.975406][T27715] xsk_init_queue+0xad/0x110 [ 471.975429][T27715] xsk_setsockopt+0x54c/0x990 [ 471.975451][T27715] ? __pfx_xsk_setsockopt+0x10/0x10 [ 471.975471][T27715] ? __pfx_aa_sk_perm+0x10/0x10 [ 471.975500][T27715] ? aa_sock_opt_perm+0xff/0x1a0 [ 471.975529][T27715] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 471.975555][T27715] ? __pfx_xsk_setsockopt+0x10/0x10 [ 471.975578][T27715] do_sock_setsockopt+0x17c/0x1b0 [ 471.975613][T27715] __x64_sys_setsockopt+0x13d/0x1b0 [ 471.975643][T27715] do_syscall_64+0x14d/0xf80 [ 471.975667][T27715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.975686][T27715] ? trace_irq_disable+0x37/0x100 [ 471.975707][T27715] ? clear_bhb_loop+0x40/0x90 [ 471.975729][T27715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.975753][T27715] RIP: 0033:0x7fcc12f9c629 [ 471.975772][T27715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.975791][T27715] RSP: 002b:00007fcc111f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 471.975812][T27715] RAX: ffffffffffffffda RBX: 00007fcc13215fa0 RCX: 00007fcc12f9c629 [ 471.975827][T27715] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 471.975839][T27715] RBP: 00007fcc13032b39 R08: 0000000000000004 R09: 0000000000000000 [ 471.975852][T27715] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.975864][T27715] R13: 00007fcc13216038 R14: 00007fcc13215fa0 R15: 00007ffcde5aabf8 [ 471.975897][T27715] [ 471.981882][T27710] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 471.989875][T27715] Mem-Info: [ 472.102685][T27717] macvlan0: entered promiscuous mode [ 472.148743][T27715] active_anon:11779 inactive_anon:0 isolated_anon:0 [ 472.148743][T27715] active_file:3273 inactive_file:40085 isolated_file:0 [ 472.148743][T27715] unevictable:768 dirty:258 writeback:0 [ 472.148743][T27715] slab_reclaimable:12154 slab_unreclaimable:116453 [ 472.148743][T27715] mapped:32363 shmem:1413 pagetables:3572 [ 472.148743][T27715] sec_pagetables:0 bounce:0 [ 472.148743][T27715] kernel_misc_reclaimable:0 [ 472.148743][T27715] free:1296898 free_pcp:10456 free_cma:0 [ 472.205365][T27717] macvlan0: entered allmulticast mode [ 472.217827][T27715] Node 0 active_anon:48616kB inactive_anon:0kB active_file:13092kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134752kB dirty:1032kB writeback:0kB shmem:5416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13348kB pagetables:14160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 472.356132][T27717] bond12: entered promiscuous mode [ 472.361284][T27717] bridge6: entered promiscuous mode [ 472.404246][T27717] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 472.421698][T27715] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 472.456242][T27717] bond12: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 472.482582][T27717] bond12: left promiscuous mode [ 472.497138][T27715] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.500025][T27717] bridge6: left promiscuous mode [ 472.626861][T27715] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 472.719118][T27715] Node 0 DMA32 free:1236516kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55916kB inactive_anon:0kB active_file:13092kB inactive_file:160136kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2554004kB mlocked:0kB bounce:0kB free_pcp:31660kB local_pcp:19020kB free_cma:0kB [ 472.827911][T27715] lowmem_reserve[]: 0 0 0 0 0 [ 472.859967][T27715] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.944118][T27715] lowmem_reserve[]: 0 0 0 0 0 [ 472.952816][T27715] Node 1 Normal free:3935508kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 472.985890][T27737] syzkaller0: entered promiscuous mode [ 472.986017][T27715] lowmem_reserve[]: 0 0 0 0 0 [ 472.991625][T27737] syzkaller0: entered allmulticast mode [ 472.996445][T27715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.019776][T27715] Node 0 DMA32: 6090*4kB (UME) 4678*8kB (UM) 2596*16kB (UME) 27*32kB (ME) 70*64kB (UM) 610*128kB (UE) 509*256kB (UME) 327*512kB (U) 150*1024kB (UE) 33*2048kB (UME) 128*4096kB (UM) = 1229944kB [ 473.115694][T27715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 473.175056][T27715] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 11*16kB (UME) 8*32kB (UME) 3*64kB (ME) 1*128kB (M) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 959*4096kB (UM) = 3935508kB [ 473.195668][T27715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.206339][T27715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.216540][T27715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 473.226817][T27715] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 473.236277][T27715] 47587 total pagecache pages [ 473.241299][T27715] 0 pages in swap cache [ 473.245630][T27715] Free swap = 124996kB [ 473.249789][T27715] Total swap = 124996kB [ 473.254211][T27715] 2097051 pages RAM [ 473.258364][T27715] 0 pages HighMem/MovableOnly [ 473.263043][T27715] 426705 pages reserved [ 473.268789][T27715] 0 pages cma reserved [ 473.655154][ T3481] net_ratelimit: 185 callbacks suppressed [ 473.655176][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.685157][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.707472][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.739030][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.766928][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.787159][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.816919][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.846557][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.866268][ T3481] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.896362][ T58] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.175046][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 474.183107][ C0] lec:lec_tx_timeout: lec0 [ 474.187921][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.796017][T27785] syzkaller0: entered promiscuous mode [ 474.820896][T27785] syzkaller0: entered allmulticast mode [ 474.920371][T27789] syzkaller0: entered promiscuous mode [ 474.935545][T27789] syzkaller0: entered allmulticast mode [ 474.959088][T27792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9856'. [ 475.062253][T27798] Unknown metaid 0 dlen 28 [ 475.146215][T27803] syzkaller0: entered promiscuous mode [ 475.151761][T27803] syzkaller0: entered allmulticast mode [ 475.519094][T27822] syzkaller0: entered promiscuous mode [ 475.524590][T27822] syzkaller0: entered allmulticast mode [ 475.577224][T27829] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.646551][T27832] syzkaller0: entered promiscuous mode [ 475.652061][T27832] syzkaller0: entered allmulticast mode [ 475.946622][T27848] team0: Port device dummy0 removed [ 475.962518][T27848] team0: Port device batadv2 removed [ 475.971037][T27848] bond0: (slave geneve3): Releasing active interface [ 476.003198][T27848] bond2: (slave bridge8): Releasing backup interface [ 476.033989][T27848] bond2: (slave bridge8): the permanent HWaddr of slave - 4e:6d:72:d4:66:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 476.060518][T27848] bridge8: left promiscuous mode [ 476.070554][T27848] bond2: (slave gretap1): making interface the new active one [ 476.080688][T27848] gretap1: entered promiscuous mode [ 476.094717][T27848] bond2: (slave gretap1): Releasing backup interface [ 476.102493][T27848] gretap1: left promiscuous mode [ 476.124540][ T3481] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.185046][ T3481] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.203945][T27870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.207603][ T3481] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.255234][ T3481] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.280219][T27860] tipc: Enabled bearer , priority 0 [ 476.301051][T27860] tipc: Resetting bearer [ 476.360301][T27871] syzkaller0: entered promiscuous mode [ 476.366018][T27871] syzkaller0: entered allmulticast mode [ 476.394037][T27859] tipc: Resetting bearer [ 476.434886][T27859] tipc: Disabling bearer [ 476.605830][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9895'. [ 476.695878][T27892] smc: removing ib device syz2 [ 476.798275][ T12] [ 476.800630][ T12] ============================================ [ 476.806763][ T12] WARNING: possible recursive locking detected [ 476.812910][ T12] syzkaller #0 Not tainted [ 476.817305][ T12] -------------------------------------------- [ 476.823429][ T12] kworker/u8:0/12 is trying to acquire lock: [ 476.829383][ T12] ffff88802b0fb760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 476.838679][ T12] [ 476.838679][ T12] but task is already holding lock: [ 476.846021][ T12] ffff88802b0fb760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 476.855567][ T12] [ 476.855567][ T12] other info that might help us debug this: [ 476.863604][ T12] Possible unsafe locking scenario: [ 476.863604][ T12] [ 476.871030][ T12] CPU0 [ 476.874291][ T12] ---- [ 476.877566][ T12] lock(k-sk_lock-AF_INET6); [ 476.882226][ T12] lock(k-sk_lock-AF_INET6); [ 476.886885][ T12] [ 476.886885][ T12] *** DEADLOCK *** [ 476.886885][ T12] [ 476.895008][ T12] May be due to missing lock nesting notation [ 476.895008][ T12] [ 476.903318][ T12] 4 locks held by kworker/u8:0/12: [ 476.908408][ T12] #0: ffff88807c400948 ((wq_completion)krds_cp_wq#20/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 476.920134][ T12] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 476.932901][ T12] #2: ffff88802b0fb760 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 476.942888][ T12] #3: ffff88802b0fb908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 476.952874][ T12] [ 476.952874][ T12] stack backtrace: [ 476.958744][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 476.958764][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.958774][ T12] Workqueue: krds_cp_wq#20/0 rds_send_worker [ 476.958792][ T12] Call Trace: [ 476.958799][ T12] [ 476.958806][ T12] dump_stack_lvl+0xe8/0x150 [ 476.958823][ T12] print_deadlock_bug+0x279/0x290 [ 476.958840][ T12] __lock_acquire+0x253f/0x2cf0 [ 476.958854][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 476.958869][ T12] ? lock_acquire+0x106/0x330 [ 476.958883][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 476.958897][ T12] ? lock_acquire+0x106/0x330 [ 476.958909][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 476.958925][ T12] ? inet6_getname+0x15d/0x650 [ 476.958942][ T12] lock_acquire+0x106/0x330 [ 476.958953][ T12] ? inet6_getname+0x15d/0x650 [ 476.958970][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 476.958984][ T12] ? unwind_next_frame+0x1aaf/0x23c0 [ 476.959002][ T12] lock_sock_nested+0x48/0x100 [ 476.959015][ T12] ? inet6_getname+0x15d/0x650 [ 476.959033][ T12] inet6_getname+0x15d/0x650 [ 476.959053][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 476.959073][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 476.959095][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.959110][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 476.959128][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 476.959141][ T12] ? rds_send_worker+0x7d/0x2e0 [ 476.959154][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 476.959167][ T12] ? worker_thread+0xa50/0xfc0 [ 476.959183][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 476.959200][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 476.959215][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 476.959228][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 476.959245][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 476.959263][ T12] __tcp_read_sock+0x196/0x970 [ 476.959282][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 476.959295][ T12] rds_tcp_data_ready+0x369/0x950 [ 476.959307][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 476.959325][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 476.959337][ T12] ? tcp_grow_window+0x4fc/0xc50 [ 476.959352][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 476.959374][ T12] ? tcp_urg+0x106/0x410 [ 476.959388][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 476.959403][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 476.959417][ T12] ? ktime_get+0x45/0x200 [ 476.959432][ T12] ? seqcount_lockdep_reader_access+0x60/0x100 [ 476.959448][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 476.959466][ T12] tcp_rcv_established+0x1270/0x2670 [ 476.959486][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 476.959501][ T12] ? ip6_dst_check+0x70/0x7e0 [ 476.959514][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 476.959526][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 476.959538][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 476.959550][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 476.959570][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 476.959585][ T12] __release_sock+0x1b8/0x3a0 [ 476.959604][ T12] release_sock+0x5f/0x1f0 [ 476.959615][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 476.959633][ T12] rds_send_xmit+0x207e/0x28d0 [ 476.959645][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 476.959657][ T12] ? look_up_lock_class+0x57/0x110 [ 476.959684][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 476.959697][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 476.959710][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 476.959724][ T12] rds_send_worker+0x7d/0x2e0 [ 476.959737][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 476.959754][ T12] process_scheduled_works+0xaec/0x17a0 [ 476.959776][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.959791][ T12] ? assign_work+0x3d5/0x5e0 [ 476.959805][ T12] worker_thread+0xa50/0xfc0 [ 476.959827][ T12] kthread+0x388/0x470 [ 476.959842][ T12] ? __pfx_worker_thread+0x10/0x10 [ 476.959855][ T12] ? __pfx_kthread+0x10/0x10 [ 476.959870][ T12] ret_from_fork+0x51e/0xb90 [ 476.959885][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 476.959897][ T12] ? __switch_to+0xc7d/0x1400 [ 476.959909][ T12] ? __pfx_kthread+0x10/0x10 [ 476.959925][ T12] ret_from_fork_asm+0x1a/0x30 [ 476.959946][ T12] [ 477.363634][ T12] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 477.372617][ T12] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u8:0 [ 477.381654][ T12] preempt_count: 201, expected: 0 [ 477.386693][ T12] RCU nest depth: 0, expected: 0 [ 477.391623][ T12] INFO: lockdep is turned off. [ 477.396395][ T12] Preemption disabled at: [ 477.396405][ T12] [<0000000000000000>] 0x0 [ 477.405246][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 477.405266][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.405276][ T12] Workqueue: krds_cp_wq#20/0 rds_send_worker [ 477.405299][ T12] Call Trace: [ 477.405304][ T12] [ 477.405310][ T12] dump_stack_lvl+0xe8/0x150 [ 477.405330][ T12] __might_resched+0x378/0x4d0 [ 477.405350][ T12] lock_sock_nested+0x5d/0x100 [ 477.405365][ T12] inet6_getname+0x15d/0x650 [ 477.405389][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 477.405414][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 477.405441][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 477.405461][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 477.405484][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 477.405501][ T12] ? rds_send_worker+0x7d/0x2e0 [ 477.405519][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 477.405537][ T12] ? worker_thread+0xa50/0xfc0 [ 477.405558][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 477.405581][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 477.405601][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 477.405618][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 477.405639][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 477.405662][ T12] __tcp_read_sock+0x196/0x970 [ 477.405686][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 477.405702][ T12] rds_tcp_data_ready+0x369/0x950 [ 477.405718][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 477.405740][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 477.405755][ T12] ? tcp_grow_window+0x4fc/0xc50 [ 477.405775][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 477.405803][ T12] ? tcp_urg+0x106/0x410 [ 477.405822][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 477.405841][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 477.405859][ T12] ? ktime_get+0x45/0x200 [ 477.405878][ T12] ? seqcount_lockdep_reader_access+0x60/0x100 [ 477.405898][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 477.405921][ T12] tcp_rcv_established+0x1270/0x2670 [ 477.405948][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 477.405967][ T12] ? ip6_dst_check+0x70/0x7e0 [ 477.405984][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 477.405999][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 477.406022][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 477.406039][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 477.406064][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 477.406084][ T12] __release_sock+0x1b8/0x3a0 [ 477.406107][ T12] release_sock+0x5f/0x1f0 [ 477.406122][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 477.406139][ T12] rds_send_xmit+0x207e/0x28d0 [ 477.406156][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 477.406172][ T12] ? look_up_lock_class+0x57/0x110 [ 477.406206][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 477.406223][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 477.406241][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 477.406258][ T12] rds_send_worker+0x7d/0x2e0 [ 477.406275][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 477.406292][ T12] process_scheduled_works+0xaec/0x17a0 [ 477.406322][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.406342][ T12] ? assign_work+0x3d5/0x5e0 [ 477.406361][ T12] worker_thread+0xa50/0xfc0 [ 477.406391][ T12] kthread+0x388/0x470 [ 477.406410][ T12] ? __pfx_worker_thread+0x10/0x10 [ 477.406427][ T12] ? __pfx_kthread+0x10/0x10 [ 477.406446][ T12] ret_from_fork+0x51e/0xb90 [ 477.406466][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 477.406483][ T12] ? __switch_to+0xc7d/0x1400 [ 477.406499][ T12] ? __pfx_kthread+0x10/0x10 [ 477.406519][ T12] ret_from_fork_asm+0x1a/0x30 [ 477.406546][ T12] [ 477.406555][ T12] BUG: scheduling while atomic: kworker/u8:0/12/0x00000202 [ 477.758267][ T12] INFO: lockdep is turned off. [ 477.763017][ T12] Modules linked in: [ 477.766917][ T12] Preemption disabled at: [ 477.766926][ T12] [<0000000000000000>] 0x0 [ 477.775660][ T12] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 477.784414][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 477.795253][ T12] Tainted: [W]=WARN [ 477.799039][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.809077][ T12] Workqueue: krds_cp_wq#20/0 rds_send_worker [ 477.815059][ T12] Call Trace: [ 477.818334][ T12] [ 477.821250][ T12] vpanic+0x1e0/0x670 [ 477.825219][ T12] panic+0xc5/0xd0 [ 477.828925][ T12] ? __pfx_panic+0x10/0x10 [ 477.833320][ T12] ? __pfx__printk+0x10/0x10 [ 477.837895][ T12] ? vprintk_emit+0x4eb/0x560 [ 477.842558][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 477.847582][ T12] ? __irq_work_queue_local+0x1f2/0x540 [ 477.853114][ T12] check_panic_on_warn+0x89/0xb0 [ 477.858047][ T12] __schedule_bug+0xf6/0x150 [ 477.862629][ T12] __schedule+0x168c/0x5290 [ 477.867123][ T12] ? __wake_up_klogd+0xe6/0x120 [ 477.871972][ T12] ? vprintk_emit+0x4eb/0x560 [ 477.876645][ T12] ? rcu_is_watching+0x15/0xb0 [ 477.881496][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 477.886502][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 477.891597][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.896604][ T12] ? prepare_to_wait_exclusive+0x45/0x240 [ 477.902308][ T12] ? __pfx___schedule+0x10/0x10 [ 477.907141][ T12] ? schedule+0x90/0x360 [ 477.911372][ T12] ? rcu_is_watching+0x15/0xb0 [ 477.916129][ T12] ? rcu_is_watching+0x15/0xb0 [ 477.920873][ T12] ? lock_release+0x4b/0x3a0 [ 477.925441][ T12] ? schedule+0x90/0x360 [ 477.929661][ T12] ? wq_worker_sleeping+0x63/0x250 [ 477.934755][ T12] schedule+0x164/0x360 [ 477.938891][ T12] __lock_sock+0x161/0x2c0 [ 477.943290][ T12] ? __pfx___lock_sock+0x10/0x10 [ 477.948208][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.953216][ T12] ? __pfx_autoremove_wake_function+0x10/0x10 [ 477.959271][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.964625][ T12] ? dump_stack_lvl+0x135/0x150 [ 477.969463][ T12] ? lock_sock_nested+0x6a/0x100 [ 477.974378][ T12] lock_sock_nested+0x9f/0x100 [ 477.979118][ T12] inet6_getname+0x15d/0x650 [ 477.983693][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 477.989572][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 477.995990][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.001781][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 478.008178][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 478.013270][ T12] ? rds_send_worker+0x7d/0x2e0 [ 478.018101][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 478.023800][ T12] ? worker_thread+0xa50/0xfc0 [ 478.028547][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 478.034173][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 478.039191][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 478.044630][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 478.049379][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 478.054301][ T12] __tcp_read_sock+0x196/0x970 [ 478.059053][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 478.064493][ T12] rds_tcp_data_ready+0x369/0x950 [ 478.069499][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 478.074949][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 478.080488][ T12] ? tcp_grow_window+0x4fc/0xc50 [ 478.085497][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 478.090358][ T12] ? tcp_urg+0x106/0x410 [ 478.094586][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 478.099778][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 478.104347][ T12] ? ktime_get+0x45/0x200 [ 478.108657][ T12] ? seqcount_lockdep_reader_access+0x60/0x100 [ 478.114801][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 478.120592][ T12] tcp_rcv_established+0x1270/0x2670 [ 478.125871][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 478.131656][ T12] ? ip6_dst_check+0x70/0x7e0 [ 478.136312][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 478.140970][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 478.145723][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 478.150821][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 478.155494][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 478.160589][ T12] __release_sock+0x1b8/0x3a0 [ 478.165262][ T12] release_sock+0x5f/0x1f0 [ 478.169657][ T12] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 478.175884][ T12] rds_send_xmit+0x207e/0x28d0 [ 478.180626][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 478.185547][ T12] ? look_up_lock_class+0x57/0x110 [ 478.190671][ T12] ? __pfx_rds_send_xmit+0x10/0x10 [ 478.195774][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 478.201471][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 478.206829][ T12] rds_send_worker+0x7d/0x2e0 [ 478.211495][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 478.217194][ T12] process_scheduled_works+0xaec/0x17a0 [ 478.222728][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 478.228708][ T12] ? assign_work+0x3d5/0x5e0 [ 478.233281][ T12] worker_thread+0xa50/0xfc0 [ 478.237871][ T12] kthread+0x388/0x470 [ 478.241921][ T12] ? __pfx_worker_thread+0x10/0x10 [ 478.247009][ T12] ? __pfx_kthread+0x10/0x10 [ 478.251581][ T12] ret_from_fork+0x51e/0xb90 [ 478.256155][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 478.261249][ T12] ? __switch_to+0xc7d/0x1400 [ 478.265907][ T12] ? __pfx_kthread+0x10/0x10 [ 478.270481][ T12] ret_from_fork_asm+0x1a/0x30 [ 478.275237][ T12] [ 478.278599][ T12] Kernel Offset: disabled [ 478.283000][ T12] Rebooting in 86400 seconds..