last executing test programs: 6.097180512s ago: executing program 4 (id=13319): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 5.206598498s ago: executing program 4 (id=13325): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.08170638s ago: executing program 2 (id=13342): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec07", 0x6, 0x800, 0x0, 0x0) 2.042234442s ago: executing program 0 (id=13343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140200100000000000000000000000000012001000000000000000000000000000220e620e60030000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677"], 0x64) recvfrom$inet6(r3, &(0x7f0000000800)=""/100, 0x64, 0x0, 0x0, 0x0) 1.967333563s ago: executing program 1 (id=13345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)=',', 0x1, 0x18854, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto(r0, &(0x7f0000000280)="1fe7", 0x2, 0x4000001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.967041221s ago: executing program 4 (id=13346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$kcm(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.90181801s ago: executing program 2 (id=13347): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 1.893234419s ago: executing program 1 (id=13348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.874622242s ago: executing program 3 (id=13349): r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r2, 0x0, 0x0, 0x8840000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x22a8, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r0, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) 1.719999811s ago: executing program 3 (id=13350): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}}, 0x0) 1.650308657s ago: executing program 1 (id=13351): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 1.630083535s ago: executing program 1 (id=13352): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2eb, @local, 0xa}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.474164871s ago: executing program 3 (id=13353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) 1.148799103s ago: executing program 2 (id=13354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 1.034262368s ago: executing program 4 (id=13355): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 995.132303ms ago: executing program 4 (id=13356): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 896.17287ms ago: executing program 4 (id=13357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7e7, 0x66, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7cf, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2"}}}}, 0x7f5) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r0], 0x14) 786.340567ms ago: executing program 1 (id=13358): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) 752.852783ms ago: executing program 2 (id=13359): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x7, 0xb2, [@loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) 656.307963ms ago: executing program 0 (id=13360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 655.430896ms ago: executing program 1 (id=13361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000180)="89e7ee2c7edad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="fb10ab696a54fe2a168b5ef5538bc5bb", 0x10}], 0x2) 523.425817ms ago: executing program 2 (id=13362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$l2tp(0x2, 0x2, 0x73) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1ff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 521.758509ms ago: executing program 3 (id=13363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 438.515183ms ago: executing program 0 (id=13364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0xb}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) 312.599447ms ago: executing program 3 (id=13365): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 216.107232ms ago: executing program 0 (id=13366): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, 0xffffffffffffffff, 0x80000000000) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000001) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, 0xffffffffffffffff, 0xeed35000) 77.692185ms ago: executing program 2 (id=13367): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 76.048453ms ago: executing program 0 (id=13368): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000004340)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="9555", 0x2}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x2000891) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 44.12129ms ago: executing program 3 (id=13369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x12, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 0 (id=13370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x6, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x7, 0x9, 0xb, 0xf, 0xc, 0xe, 0xf, 0xf, 0xa, 0x0, 0x7, 0x4, 0xd, 0xa, 0x6, 0xc], 0x1, [0xfffa, 0x1, 0x8, 0x7, 0x0, 0x8001, 0xe6, 0x1, 0x7, 0xa, 0x401, 0xff, 0x1, 0x3, 0xd, 0xf], [0x2, 0xd7a, 0x0, 0x9, 0x3, 0x7, 0xff, 0xffff, 0x6, 0x4f, 0xaf, 0x3, 0x7, 0x6, 0x3, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) kernel console output (not intermixed with test programs): 804 audit(1785608685.210:5): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9259" name="/newroot/1846/cgroup.controllers" dev="tmpfs" ino=9263 res=1 errno=0 [ 497.311770][ T29] audit: type=1800 audit(1785608685.210:6): pid=25396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9259" name="cgroup.controllers" dev="tmpfs" ino=9263 res=0 errno=0 [ 499.134988][T25502] IPVS: sed: FWM 3 0x00000003 - no destination available [ 499.845517][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9330'. [ 499.982948][T25557] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9335'. [ 500.033770][T25565] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9335'. [ 500.562725][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9351'. [ 500.724474][T25605] netlink: 'syz.3.9354': attribute type 83 has an invalid length. [ 501.173542][T25627] bond0: option miimon: invalid value (18446744071829782528) [ 501.181352][T25627] bond0: option miimon: allowed values 0 - 2147483647 [ 501.697830][T25653] tap0: tun_chr_ioctl cmd 1074025672 [ 501.713027][T25653] tap0: ignored: set checksum disabled [ 501.748107][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9379'. [ 501.759047][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9379'. [ 501.945057][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9386'. [ 502.214945][T25684] netlink: 'syz.4.9393': attribute type 11 has an invalid length. [ 502.652130][T25705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9401'. [ 502.681758][T25707] sctp: [Deprecated]: syz.0.9403 (pid 25707) Use of int in max_burst socket option. [ 502.681758][T25707] Use struct sctp_assoc_value instead [ 502.732910][T25705] team0 (unregistering): Port device team_slave_0 removed [ 502.768192][T25705] team0 (unregistering): Port device team_slave_1 removed [ 502.789431][T25711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9405'. [ 502.839183][T25709] nbd1: detected capacity change from 0 to 63 [ 502.869662][ T5640] block nbd1: Receive control failed (result -32) [ 502.871527][ T25] block nbd1: Send control failed (result -32) [ 502.883836][ T25] block nbd1: Request send failed, requeueing [ 502.901546][ T25] block nbd1: Dead connection, failed to find a fallback [ 502.910599][ T25] block nbd1: shutting down sockets [ 502.919190][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.929859][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 502.938977][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.949410][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 502.960013][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 502.970059][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 502.978374][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 502.991273][ T4951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 503.001055][ T4951] Buffer I/O error on dev nbd1, logical block 0, async page read [ 503.009805][ T4951] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 503.019658][ T4951] Buffer I/O error on dev nbd1, logical block 1, async page read [ 503.037915][ T4951] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 503.047645][ T4951] Buffer I/O error on dev nbd1, logical block 2, async page read [ 503.056246][ T4951] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 503.065992][ T4951] Buffer I/O error on dev nbd1, logical block 3, async page read [ 503.076130][ T4951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 503.085802][ T4951] Buffer I/O error on dev nbd1, logical block 0, async page read [ 503.093895][ T4951] Buffer I/O error on dev nbd1, logical block 1, async page read [ 503.103018][ T4951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 503.113140][ T4951] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 503.122149][T25720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9408'. [ 503.125791][T25563] ldm_validate_partition_table(): Disk read failed. [ 503.140853][T25563] Dev nbd1: unable to read RDB block 0 [ 503.151132][T25563] nbd1: unable to read partition table [ 503.168977][T25563] ldm_validate_partition_table(): Disk read failed. [ 503.178037][T25563] Dev nbd1: unable to read RDB block 0 [ 503.185463][T25563] nbd1: unable to read partition table [ 503.225603][T25720] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.234501][T25720] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.451110][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9416'. [ 503.591375][T25746] netlink: 'syz.3.9421': attribute type 1 has an invalid length. [ 503.606652][T25746] netlink: 208 bytes leftover after parsing attributes in process `syz.3.9421'. [ 503.625917][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9422'. [ 503.644780][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9422'. [ 503.798019][T25760] netlink: 'syz.0.9428': attribute type 4 has an invalid length. [ 504.128536][ T1012] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 504.491192][T25802] netlink: 'syz.3.9448': attribute type 5 has an invalid length. [ 505.637115][T25864] netlink: 'syz.4.9474': attribute type 83 has an invalid length. [ 506.008171][T25888] netlink: 'syz.0.9485': attribute type 19 has an invalid length. [ 506.348395][T25909] Bluetooth: hci1: too big key_count value 32778 [ 506.574076][T25925] syz.3.9501: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 506.609529][T25925] CPU: 0 UID: 0 PID: 25925 Comm: syz.3.9501 Not tainted syzkaller #0 PREEMPT(full) [ 506.609561][T25925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.609574][T25925] Call Trace: [ 506.609646][T25925] [ 506.609702][T25925] dump_stack_lvl+0xe8/0x150 [ 506.609845][T25925] warn_alloc+0x24c/0x270 [ 506.609909][T25925] ? stack_depot_save_flags+0x33/0x800 [ 506.610027][T25925] ? __pfx_warn_alloc+0x10/0x10 [ 506.610059][T25925] ? kasan_save_track+0x3e/0x80 [ 506.610099][T25925] ? __kasan_kmalloc+0x93/0xb0 [ 506.610130][T25925] ? xsk_setsockopt+0x52a/0x960 [ 506.610224][T25925] ? do_sock_setsockopt+0x17c/0x1b0 [ 506.610302][T25925] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 506.610324][T25925] ? do_syscall_64+0x174/0x580 [ 506.610472][T25925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.610523][T25925] __vmalloc_node_range_noprof+0x12c/0x1730 [ 506.610588][T25925] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 506.610621][T25925] ? __kasan_kmalloc+0x93/0xb0 [ 506.610654][T25925] ? __kmalloc_cache_noprof+0x32d/0x660 [ 506.610692][T25925] ? __kmalloc_cache_noprof+0x150/0x660 [ 506.610725][T25925] vmalloc_user_noprof+0xad/0xe0 [ 506.610754][T25925] ? xskq_create+0xbf/0x170 [ 506.610779][T25925] xskq_create+0xbf/0x170 [ 506.610806][T25925] xsk_init_queue+0x8a/0xe0 [ 506.610833][T25925] xsk_setsockopt+0x52a/0x960 [ 506.610854][T25925] ? __fget_files+0x2a/0x420 [ 506.610905][T25925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 506.610928][T25925] ? __pfx_aa_sk_perm+0x10/0x10 [ 506.611009][T25925] ? aa_sock_opt_perm+0xff/0x1a0 [ 506.611057][T25925] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 506.611111][T25925] ? __pfx_xsk_setsockopt+0x10/0x10 [ 506.611135][T25925] do_sock_setsockopt+0x17c/0x1b0 [ 506.611167][T25925] __x64_sys_setsockopt+0x13d/0x1b0 [ 506.611194][T25925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.611219][T25925] do_syscall_64+0x174/0x580 [ 506.611244][T25925] ? trace_irq_disable+0x3b/0x140 [ 506.611292][T25925] ? clear_bhb_loop+0x40/0x90 [ 506.611321][T25925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.611342][T25925] RIP: 0033:0x7f9d4899e019 [ 506.611391][T25925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.611410][T25925] RSP: 002b:00007f9d49826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 506.611464][T25925] RAX: ffffffffffffffda RBX: 00007f9d48c25fa0 RCX: 00007f9d4899e019 [ 506.611480][T25925] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 506.611493][T25925] RBP: 00007f9d48a3500c R08: 0000000000000004 R09: 0000000000000000 [ 506.611507][T25925] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.611522][T25925] R13: 00007f9d48c26038 R14: 00007f9d48c25fa0 R15: 00007ffd4835ed68 [ 506.611559][T25925] [ 506.614724][T25925] Mem-Info: [ 506.924706][T25925] active_anon:5279 inactive_anon:0 isolated_anon:0 [ 506.924706][T25925] active_file:3 inactive_file:43193 isolated_file:0 [ 506.924706][T25925] unevictable:768 dirty:299 writeback:0 [ 506.924706][T25925] slab_reclaimable:11380 slab_unreclaimable:99225 [ 506.924706][T25925] mapped:29164 shmem:1291 pagetables:1215 [ 506.924706][T25925] sec_pagetables:0 bounce:0 [ 506.924706][T25925] kernel_misc_reclaimable:0 [ 506.924706][T25925] free:1323784 free_pcp:10123 free_cma:0 [ 506.999512][T25925] Node 0 active_anon:21348kB inactive_anon:0kB active_file:12kB inactive_file:172568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116640kB dirty:1192kB writeback:0kB shmem:3628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13524kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 507.124134][T25925] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 507.188063][T25925] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.223366][T25925] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 507.229840][T25925] Node 0 DMA32 free:1359152kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21464kB inactive_anon:0kB active_file:12kB inactive_file:172568kB unevictable:1536kB writepending:1192kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:39540kB local_pcp:20744kB free_cma:0kB [ 507.291824][T25925] lowmem_reserve[]: 0 0 0 0 0 [ 507.306847][T25925] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.340560][T25953] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 507.372871][T25925] lowmem_reserve[]: 0 0 0 0 0 [ 507.374738][T25956] __nla_validate_parse: 6 callbacks suppressed [ 507.374754][T25956] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9514'. [ 507.386893][T25925] Node 1 Normal free:3931120kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.447235][T25925] lowmem_reserve[]: 0 0 0 0 0 [ 507.454040][T25925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 507.484586][T25925] Node 0 DMA32: 1159*4kB (UME) 457*8kB (UME) 321*16kB (UME) 388*32kB (UE) 232*64kB (UME) 127*128kB (UME) 49*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 8*2048kB (UME) 309*4096kB (UM) = 1358708kB [ 507.528168][T25925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.541263][T25925] Node 1 Normal: 0*4kB 2*8kB (UM) 10*16kB (UM) 6*32kB (UM) 4*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 957*4096kB (M) = 3931120kB [ 507.597039][T25925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.608454][T25925] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.627142][T25925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.658867][T25925] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.689940][T25925] 44483 total pagecache pages [ 507.700718][T25925] 0 pages in swap cache [ 507.710815][T25925] Free swap = 124996kB [ 507.715150][T25925] Total swap = 124996kB [ 507.722675][T25925] 2097051 pages RAM [ 507.731845][T25925] 0 pages HighMem/MovableOnly [ 507.736567][T25925] 428238 pages reserved [ 507.741125][T25925] 0 pages cma reserved [ 507.828463][T25973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9522'. [ 508.423190][T26012] netlink: 81 bytes leftover after parsing attributes in process `syz.1.9539'. [ 508.479302][T26015] netlink: 284 bytes leftover after parsing attributes in process `syz.0.9541'. [ 508.685783][T26026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9544'. [ 508.735313][T26026] xfrm1: entered promiscuous mode [ 508.738534][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9544'. [ 508.744961][T26026] xfrm1: entered allmulticast mode [ 508.859569][T26037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9551'. [ 508.963869][T26041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9553'. [ 509.156148][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9556'. [ 509.272669][T26058] team0: Device gtp0 is of different type [ 509.442291][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9564'. [ 509.766343][T26089] netlink: 'syz.4.9575': attribute type 8 has an invalid length. [ 509.793175][T26089] sch_fq: defrate 0 ignored. [ 510.519090][T26136] netlink: 'syz.2.9598': attribute type 4 has an invalid length. [ 510.809707][T26154] netlink: 'syz.3.9606': attribute type 2 has an invalid length. [ 510.863941][T26150] netlink: 'syz.4.9605': attribute type 3 has an invalid length. [ 511.414386][T26191] netlink: 'syz.0.9621': attribute type 83 has an invalid length. [ 511.808460][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 512.744419][T26266] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 513.062254][T26285] __nla_validate_parse: 3 callbacks suppressed [ 513.062277][T26285] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9663'. [ 513.958417][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9687'. [ 514.487096][T26369] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9701'. [ 514.507278][T26369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9701'. [ 515.393541][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9729'. [ 515.414745][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9728'. [ 515.595990][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9733'. [ 515.971698][T26461] netlink: 'syz.0.9744': attribute type 12 has an invalid length. [ 515.995606][T26461] netlink: 'syz.0.9744': attribute type 29 has an invalid length. [ 516.013549][T26461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9744'. [ 516.025405][T26461] netlink: 'syz.0.9744': attribute type 1 has an invalid length. [ 516.053277][T26461] netlink: 'syz.0.9744': attribute type 2 has an invalid length. [ 516.508280][T26492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9761'. [ 517.439346][T26534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9778'. [ 518.267613][T26570] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.9795'. [ 518.731108][T26595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9803'. [ 519.776474][T26659] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9833'. [ 520.064158][T26678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9839'. [ 520.162454][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9844'. [ 520.279161][T26684] macvtap1: entered promiscuous mode [ 520.290251][T26684] vlan0: entered promiscuous mode [ 520.298930][T26684] macvtap1: entered allmulticast mode [ 520.304555][T26684] vlan0: entered allmulticast mode [ 520.310365][T26684] veth0_vlan: entered allmulticast mode [ 520.509715][T26702] netlink: 'syz.0.9852': attribute type 1 has an invalid length. [ 520.545099][T26702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9852'. [ 520.623581][T26704] netlink: 'syz.3.9854': attribute type 33 has an invalid length. [ 520.688560][T26704] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 520.711939][T26704] bond6 (unregistering): Released all slaves [ 521.311171][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9873'. [ 521.321469][T26743] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 521.382741][T26747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9875'. [ 521.741872][T26769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9885'. [ 523.293587][T26864] netlink: 'syz.1.9926': attribute type 3 has an invalid length. [ 523.318721][T26864] netlink: 'syz.1.9926': attribute type 1 has an invalid length. [ 523.357174][T26864] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9926'. [ 523.386281][T26864] NCSI netlink: No device for ifindex 813332851 [ 523.751204][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 524.135996][T26912] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9949'. [ 524.572628][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9963'. [ 524.934838][T26964] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9974'. [ 525.282581][T26984] IPv6: Can't replace route, no match found [ 525.304975][T26984] IPv6: Can't replace route, no match found [ 525.686397][ T5640] block nbd2: Receive control failed (result -32) [ 525.805424][T27012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9994'. [ 525.880889][T27019] openvswitch: netlink: IP tunnel dst address not specified [ 525.904506][T27019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.087988][T27032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10004'. [ 527.345695][T27109] xt_hashlimit: size too large, truncated to 1048576 [ 527.582048][T27126] netlink: 'syz.3.10048': attribute type 2 has an invalid length. [ 528.569181][T27186] netlink: 'syz.2.10074': attribute type 3 has an invalid length. [ 528.941810][T27209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10085'. [ 529.029203][T27211] xt_hashlimit: size too large, truncated to 1048576 [ 529.106355][T27217] netlink: 'syz.3.10089': attribute type 21 has an invalid length. [ 529.115286][T27217] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10089'. [ 529.125617][T27217] netlink: 'syz.3.10089': attribute type 4 has an invalid length. [ 529.134319][T27217] netlink: 'syz.3.10089': attribute type 5 has an invalid length. [ 529.144720][T27217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10089'. [ 529.159652][T27217] netlink: 'syz.3.10089': attribute type 21 has an invalid length. [ 529.169046][T27217] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10089'. [ 529.204572][T27217] netlink: 'syz.3.10089': attribute type 4 has an invalid length. [ 529.221253][T27217] netlink: 'syz.3.10089': attribute type 5 has an invalid length. [ 529.243547][T27217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10089'. [ 529.717417][T27242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10099'. [ 529.970323][T27260] block nbd0: Unsupported socket: should be TCP or UNIX. [ 530.097682][T27266] netlink: 'syz.3.10107': attribute type 1 has an invalid length. [ 530.123065][T27266] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10107'. [ 530.155494][T27266] netlink: 'syz.3.10107': attribute type 2 has an invalid length. [ 530.179198][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10107'. [ 530.424555][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10115'. [ 530.435793][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10115'. [ 530.473148][T27286] blkio.reset_stats is deprecated [ 531.420921][T27343] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 531.669216][T27356] sch_fq: defrate 0 ignored. [ 531.822364][T27367] xt_hashlimit: size too large, truncated to 1048576 [ 531.902592][T27371] xt_hashlimit: size too large, truncated to 1048576 [ 534.115588][T27499] veth0: entered promiscuous mode [ 534.135723][T27499] veth0: left promiscuous mode [ 534.358476][T27514] netlink: 'syz.1.10220': attribute type 83 has an invalid length. [ 534.500317][T27518] gtp0: entered promiscuous mode [ 534.511646][T27518] gtp0: entered allmulticast mode [ 534.517814][T27522] netlink: 'syz.1.10223': attribute type 21 has an invalid length. [ 534.528656][T27522] __nla_validate_parse: 5 callbacks suppressed [ 534.528675][T27522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10223'. [ 535.272888][T27563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10242'. [ 535.323839][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10245'. [ 535.551449][T27584] netlink: 'syz.4.10252': attribute type 83 has an invalid length. [ 536.052644][T27615] block nbd3: Unsupported socket: should be TCP or UNIX. [ 536.097228][T27617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10267'. [ 536.201586][T27622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10268'. [ 536.679716][T27645] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.10279'. [ 536.914731][T27660] netlink: 'syz.4.10285': attribute type 14 has an invalid length. [ 536.997853][T27665] block nbd3: Unsupported socket: should be TCP or UNIX. [ 537.169881][T27673] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10289'. [ 537.683059][T27706] tun0: tun_chr_ioctl cmd 1074025675 [ 537.694206][T27706] tun0: persist disabled [ 538.000354][T27717] tap0: tun_chr_ioctl cmd 1074025676 [ 538.020740][T27717] tap0: owner set to 0 [ 538.604114][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10329'. [ 538.632863][T27758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10329'. [ 540.045895][T27848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.053354][T27848] IPv6: NLM_F_CREATE should be set when creating new route [ 540.060663][T27848] IPv6: NLM_F_CREATE should be set when creating new route [ 540.081491][T27848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.235621][T27856] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10375'. [ 541.167500][T27908] netlink: 'syz.0.10399': attribute type 9 has an invalid length. [ 541.610685][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10412'. [ 541.885557][T27944] ipvlan2: entered allmulticast mode [ 541.897673][T27944] batadv_slave_1: entered allmulticast mode [ 541.922206][T27944] batman_adv: batadv0: Adding interface: ipvlan2 [ 541.944430][T27944] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.014089][T27944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.054805][T27944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.059991][T27957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10424'. [ 542.073960][T27944] batman_adv: batadv0: Interface activated: ipvlan2 [ 542.085614][T27957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10424'. [ 542.259276][T27969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10426'. [ 542.274546][T27970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10427'. [ 542.510495][T27976] bond0 (unregistering): Released all slaves [ 542.553361][T27986] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10435'. [ 543.002665][T28009] netlink: 'syz.2.10442': attribute type 2 has an invalid length. [ 543.576389][T28046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10457'. [ 543.831924][T28060] netlink: 165 bytes leftover after parsing attributes in process `syz.1.10464'. [ 543.852822][T28061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10463'. [ 544.214879][T28082] netlink: 'syz.0.10476': attribute type 30 has an invalid length. [ 545.699975][T28158] vlan0 (unregistering): left allmulticast mode [ 545.706295][T28158] veth0_vlan (unregistering): left allmulticast mode [ 545.713423][T28158] vlan0 (unregistering): left promiscuous mode [ 546.863661][T28192] __nla_validate_parse: 3 callbacks suppressed [ 546.863684][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10525'. [ 546.912669][T28197] pim6reg1: entered promiscuous mode [ 546.918376][T28197] pim6reg1: entered allmulticast mode [ 547.100606][T28203] syzkaller1: entered promiscuous mode [ 547.126189][T28203] syzkaller1: entered allmulticast mode [ 547.590831][T28230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10542'. [ 547.857793][T28243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10548'. [ 547.869274][T28243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10548'. [ 548.139502][T28255] tipc: Enabling of bearer rejected, already enabled [ 548.165326][T28255] tipc: New replicast peer: 0.0.0.0 [ 548.790738][T28287] xt_hashlimit: size too large, truncated to 1048576 [ 548.936056][T28296] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 550.068402][T28355] syzkaller1: entered promiscuous mode [ 550.079049][T28355] syzkaller1: entered allmulticast mode [ 550.102419][T28358] gre0: entered promiscuous mode [ 550.120592][T28358] gre0: entered allmulticast mode [ 550.259755][T28368] bridge6: entered promiscuous mode [ 550.265158][T28368] bridge6: entered allmulticast mode [ 550.274353][T28368] team0: Port device bridge6 added [ 550.290126][T28368] bridge0: port 3(team0) entered blocking state [ 550.308553][T28368] bridge0: port 3(team0) entered disabled state [ 550.326583][T28368] team0: entered allmulticast mode [ 550.346810][T28368] team_slave_0: entered allmulticast mode [ 550.355602][T28368] team_slave_1: entered allmulticast mode [ 550.379702][T28368] team0: entered promiscuous mode [ 550.392732][T28368] team_slave_0: entered promiscuous mode [ 550.404875][T28368] team_slave_1: entered promiscuous mode [ 550.412127][T28377] netlink: 'syz.4.10603': attribute type 1 has an invalid length. [ 550.686128][ T29] audit: type=1800 audit(1785608738.640:7): pid=28390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10610" name="memory.events" dev="tmpfs" ino=10861 res=0 errno=0 [ 550.971375][T28405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10617'. [ 550.996187][T28405] netlink: 'syz.3.10617': attribute type 10 has an invalid length. [ 551.011628][T28405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10617'. [ 551.151737][T28412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10620'. [ 551.186311][T28412] netlink: 'syz.3.10620': attribute type 7 has an invalid length. [ 551.206508][T28412] netlink: 'syz.3.10620': attribute type 8 has an invalid length. [ 551.228120][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10620'. [ 552.751687][T28489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10659'. [ 552.934680][T28498] veth0: entered promiscuous mode [ 552.974991][T28497] veth0: left promiscuous mode [ 552.992144][T28504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10665'. [ 553.001493][T28504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10665'. [ 554.387468][T28576] ip6erspan0: entered promiscuous mode [ 554.492428][T28582] bridge3: entered promiscuous mode [ 554.507589][T28582] bridge3: entered allmulticast mode [ 554.561657][T28582] team0: Port device bridge3 added [ 554.598503][T28583] bridge0: port 1(team0) entered blocking state [ 554.638538][T28583] bridge0: port 1(team0) entered disabled state [ 554.655139][T28583] team0: entered allmulticast mode [ 554.672239][T28583] team_slave_0: entered allmulticast mode [ 554.686535][T28583] team_slave_1: entered allmulticast mode [ 554.711997][T28583] team0: entered promiscuous mode [ 554.723029][T28583] team_slave_0: entered promiscuous mode [ 554.737778][T28583] team_slave_1: entered promiscuous mode [ 554.752846][T28583] bridge0: port 1(team0) entered blocking state [ 554.762071][T28583] bridge0: port 1(team0) entered forwarding state [ 555.144577][T28617] netlink: 'syz.1.10711': attribute type 64 has an invalid length. [ 555.156010][T28617] netlink: 'syz.1.10711': attribute type 64 has an invalid length. [ 555.823100][T28645] syzkaller1: entered promiscuous mode [ 555.842070][T28645] syzkaller1: entered allmulticast mode [ 555.861059][T28659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10730'. [ 555.873773][T28659] netlink: 'syz.4.10730': attribute type 7 has an invalid length. [ 555.883568][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10730'. [ 556.183335][T28674] hsr0: entered promiscuous mode [ 556.203512][T28674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10737'. [ 556.225267][T28674] hsr_slave_0: left promiscuous mode [ 556.237063][T28674] hsr_slave_1: left promiscuous mode [ 556.276564][T28674] hsr0 (unregistering): left promiscuous mode [ 556.359719][T28680] syzkaller1: entered promiscuous mode [ 556.377359][T28680] syzkaller1: entered allmulticast mode [ 556.659576][T28701] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.10749'. [ 556.852653][T28713] sctp: [Deprecated]: syz.0.10755 (pid 28713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.852653][T28713] Use struct sctp_sack_info instead [ 557.185138][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10761'. [ 557.208287][T28728] veth0_macvtap: left promiscuous mode [ 557.331754][T28734] netlink: 'syz.4.10764': attribute type 4 has an invalid length. [ 557.797471][T28759] macvlan0: entered promiscuous mode [ 558.336867][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10788'. [ 558.480861][T28792] team0: Port device team_slave_0 removed [ 558.499792][T28799] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10793'. [ 558.871787][T28815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10801'. [ 559.333247][T28843] syzkaller1: entered promiscuous mode [ 559.349327][T28843] syzkaller1: entered allmulticast mode [ 559.356012][T28844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10813'. [ 559.388055][T28844] block nbd3: Unsupported socket: should be TCP or UNIX. [ 559.459749][T28850] xt_hashlimit: size too large, truncated to 1048576 [ 559.851793][T28870] netlink: 71 bytes leftover after parsing attributes in process `syz.4.10822'. [ 560.092581][T28881] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 560.119212][T28881] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 560.156476][T28881] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 560.195038][T28881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 560.271680][T28881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 560.594063][ T1110] smbdirect: ib_dev[syz2] removed [ 561.519541][T28953] IPVS: Scheduler module ip_vs_sip not found [ 561.854912][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10872'. [ 561.881308][T28979] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10871'. [ 562.020077][T28983] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 564.061857][T29102] smc: net device lo erased user defined pnetid SYZ0 [ 565.569695][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.741138][T29198] netlink: 'syz.4.10970': attribute type 17 has an invalid length. [ 565.750507][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10970'. [ 565.760196][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10970'. [ 565.789422][T29198] gretap0: entered promiscuous mode [ 565.817104][T29198] gretap0: left promiscuous mode [ 566.058044][T29215] tipc: Started in network mode [ 566.069857][T29215] tipc: Node identity ac14142f, cluster identity 4711 [ 566.091780][T29215] tipc: New replicast peer: 0.0.0.0 [ 566.109540][T29215] tipc: Enabled bearer , priority 10 [ 566.128838][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10979'. [ 566.184630][T29221] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10981'. [ 566.356612][T29231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.811895][T29247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10993'. [ 566.829510][T29247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10993'. [ 567.031056][T29258] netlink: 'syz.1.10998': attribute type 39 has an invalid length. [ 567.240472][ T9] tipc: Node number set to 2886997039 [ 567.897245][T29298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11016'. [ 568.125306][T29310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11022'. [ 568.480296][T29329] netlink: 'syz.2.11031': attribute type 4 has an invalid length. [ 568.488689][T29327] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 568.947647][T29353] netlink: 83 bytes leftover after parsing attributes in process `syz.4.11043'. [ 569.233214][T29374] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11053'. [ 569.523419][T29392] netlink: 'syz.0.11060': attribute type 7 has an invalid length. [ 569.531917][T29392] netlink: 'syz.0.11060': attribute type 8 has an invalid length. [ 569.599573][T29394] sctp: [Deprecated]: syz.4.11061 (pid 29394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.599573][T29394] Use struct sctp_sack_info instead [ 570.636127][T29449] xt_hashlimit: size too large, truncated to 1048576 [ 570.694299][T29456] bridge_slave_0 (unregistering): left allmulticast mode [ 570.730437][T29456] bridge_slave_0 (unregistering): left promiscuous mode [ 570.775306][T29456] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.120883][T29473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 571.159961][T29473] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 571.181180][T29473] gretap1: entered promiscuous mode [ 571.202645][T29473] gretap1: entered allmulticast mode [ 572.588269][T29550] __nla_validate_parse: 4 callbacks suppressed [ 572.588291][T29550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11117'. [ 572.688113][T29556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11120'. [ 572.701416][T29556] netlink: 'syz.1.11120': attribute type 7 has an invalid length. [ 572.711414][T29556] netlink: 'syz.1.11120': attribute type 8 has an invalid length. [ 572.721459][T29556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11120'. [ 572.747377][T29556] erspan0: entered promiscuous mode [ 572.754704][T29556] erspan0: left promiscuous mode [ 573.933718][T29625] netlink: 'syz.4.11147': attribute type 11 has an invalid length. [ 574.404412][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11156'. [ 574.434321][T29644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11157'. [ 574.475599][T29644] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.11157'. [ 574.646962][T29653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11161'. [ 574.700096][T29656] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 574.983257][T29657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11161'. [ 574.999389][T29675] xt_hashlimit: size too large, truncated to 1048576 [ 575.005956][T29657] nbd: device at index 64 is going down [ 575.051723][T29679] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.11171'. [ 575.065460][T29679] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 575.124027][T29679] 0ªX¹¦Dö»: entered allmulticast mode [ 575.171500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.286557][T29677] udevd[29677]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 575.341026][T29595] udevd[29595]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 575.739839][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11184'. [ 575.855861][T29711] syzkaller1: entered promiscuous mode [ 575.882776][T29711] syzkaller1: entered allmulticast mode [ 577.686321][T29824] __nla_validate_parse: 3 callbacks suppressed [ 577.686345][T29824] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11235'. [ 577.735740][T29824] openvswitch: netlink: Message has 4 unknown bytes. [ 577.929747][T29836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.744296][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.748365][T29872] erspan0: entered promiscuous mode [ 578.753633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.933524][T29872] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.940855][T29872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.025115][T29872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.091983][T29872] wireguard: wg0: Could not create IPv4 socket [ 579.120277][T29872] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 579.339229][T29890] netlink: 'syz.4.11262': attribute type 63 has an invalid length. [ 579.361460][T29890] netlink: 'syz.4.11262': attribute type 63 has an invalid length. [ 580.022852][T29927] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11281'. [ 580.065840][T29929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11280'. [ 580.103468][T29929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11280'. [ 580.114798][T29929] netlink: 500 bytes leftover after parsing attributes in process `syz.1.11280'. [ 580.274758][T29941] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11287'. [ 580.523357][T29957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.559570][T29958] netlink: 'syz.1.11292': attribute type 8 has an invalid length. [ 580.881098][T29976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11302'. [ 580.912049][T29979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11303'. [ 580.923797][T29979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11303'. [ 580.934065][T29981] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11301'. [ 580.948517][T29979] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 580.951334][ T5640] block nbd3: Receive control failed (result -107) [ 581.327785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.338944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.583134][T30013] netlink: 'syz.4.11317': attribute type 1 has an invalid length. [ 581.630688][T30016] nbd: couldn't find a device at index 1760550558 [ 582.104057][T30037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.115075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.311892][T30051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.393895][T30051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.795791][T30076] __nla_validate_parse: 3 callbacks suppressed [ 582.795813][T30076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11343'. [ 583.316290][T30106] syzkaller1: entered promiscuous mode [ 583.322736][T30106] syzkaller1: entered allmulticast mode [ 583.533943][T30120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11362'. [ 583.534197][T30123] batadv_slave_1: entered promiscuous mode [ 583.560633][T30122] batadv_slave_1: left promiscuous mode [ 584.198264][T30155] tipc: Resetting bearer [ 584.316178][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11383'. [ 584.327121][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 584.500773][T30165] syzkaller1: entered promiscuous mode [ 584.518502][T30165] syzkaller1: entered allmulticast mode [ 584.587592][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 584.771058][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.870853][T30196] macvtap0: entered promiscuous mode [ 584.886849][T30196] macvtap0: entered allmulticast mode [ 584.899496][T30196] veth1_to_bridge: entered promiscuous mode [ 584.925466][T30196] veth1_to_bridge: entered allmulticast mode [ 584.955198][T30196] team0: Device macvtap0 failed to register rx_handler [ 584.970846][T30196] veth1_to_bridge: left allmulticast mode [ 584.977156][T30196] veth1_to_bridge: left promiscuous mode [ 585.440257][T30221] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11404'. [ 585.477355][T30221] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11404'. [ 585.826990][T30239] block nbd4: server does not support multiple connections per device. [ 585.864271][T30239] block nbd4: shutting down sockets [ 586.094135][T30244] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 586.359440][T30266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11423'. [ 586.824819][T30285] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.11432'. [ 587.665548][T30330] netlink: 'syz.2.11453': attribute type 17 has an invalid length. [ 587.693050][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11453'. [ 587.702802][T30330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11453'. [ 587.775381][T30334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11454'. [ 588.006351][T30349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11461'. [ 588.383050][T30377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11472'. [ 588.540219][T30386] pim6reg1: entered promiscuous mode [ 588.545849][T30386] pim6reg1: entered allmulticast mode [ 588.649178][T30393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11478'. [ 588.812060][T30399] ipvlan0: left promiscuous mode [ 589.013203][T30411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11488'. [ 589.182711][T30415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11490'. [ 589.214285][T30419] netlink: 'syz.0.11492': attribute type 1 has an invalid length. [ 589.222679][T30415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11490'. [ 590.738724][T30465] netlink: 'syz.0.11510': attribute type 1 has an invalid length. [ 590.764403][T30465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.143864][T30370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.262208][T30485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11519'. [ 591.288028][T11970] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 591.369088][T30497] netlink: 'syz.3.11521': attribute type 16 has an invalid length. [ 591.384093][T30497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11521'. [ 591.431677][T30496] ip6gre1: entered allmulticast mode [ 591.456930][T11982] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 591.619747][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11527'. [ 591.638897][T30512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11526'. [ 591.930958][T30526] netlink: 'syz.4.11533': attribute type 15 has an invalid length. [ 593.414357][T30606] netlink: 'syz.4.11570': attribute type 1 has an invalid length. [ 593.478373][T30606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.567030][T30612] __nla_validate_parse: 1 callbacks suppressed [ 593.567054][T30612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11572'. [ 593.580911][T30614] trusted_key: syz.1.11573 sent an empty control message without MSG_MORE. [ 593.594215][T30608] bond4: (slave geneve4): making interface the new active one [ 593.606093][T30608] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 593.763779][T30618] netlink: 'syz.4.11575': attribute type 4 has an invalid length. [ 594.128385][T30634] bridge0: entered allmulticast mode [ 594.815037][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ed42000: rx timeout, send abort [ 595.024698][T30663] veth0: entered promiscuous mode [ 595.033019][T30663] veth0: left promiscuous mode [ 595.325611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ed42000: abort rx timeout. Force session deactivation [ 595.695302][T30696] netlink: 6 bytes leftover after parsing attributes in process `syz.1.11611'. [ 595.705179][T30699] netlink: 'syz.2.11613': attribute type 4 has an invalid length. [ 595.722409][T30699] netlink: 'syz.2.11613': attribute type 4 has an invalid length. [ 595.730750][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.846250][T30703] syzkaller1: entered promiscuous mode [ 595.874178][T30703] syzkaller1: entered allmulticast mode [ 595.962882][T30710] ipip1: entered promiscuous mode [ 595.978947][T30710] ipip1: entered allmulticast mode [ 596.158507][T30722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11623'. [ 596.221869][T30722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 596.276458][T30727] bond6: (slave batadv1): Opening slave failed [ 596.745673][T30755] netlink: 'syz.4.11636': attribute type 13 has an invalid length. [ 596.763112][T30758] netlink: 'syz.1.11639': attribute type 1 has an invalid length. [ 596.770407][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11636'. [ 596.771969][T30758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11639'. [ 596.793974][T30755] netlink: 'syz.4.11636': attribute type 13 has an invalid length. [ 596.803776][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11636'. [ 597.046555][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11641'. [ 597.113081][T30770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11643'. [ 597.444782][ T29] audit: type=1800 audit(1785608785.400:8): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11647" name=680B20 dev="tmpfs" ino=12025 res=0 errno=0 [ 598.014344][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11654'. [ 598.037036][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11654'. [ 598.312419][T30814] netlink: 'syz.0.11661': attribute type 20 has an invalid length. [ 598.398703][T30814] netlink: 'syz.0.11661': attribute type 20 has an invalid length. [ 598.407096][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.437503][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.489935][T11970] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.578994][ T29] audit: type=1800 audit(1785608786.540:9): pid=30828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11669" name=0A dev="tmpfs" ino=11557 res=0 errno=0 [ 598.702525][T30833] netlink: 'syz.0.11670': attribute type 10 has an invalid length. [ 598.791824][T30840] __nla_validate_parse: 2 callbacks suppressed [ 598.791845][T30840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11673'. [ 598.863788][T30843] block nbd0: Unsupported socket: should be TCP or UNIX. [ 599.225495][T30868] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.232862][T30868] bridge0: port 2(bridge_slave_1) entered listening state [ 599.240385][T30868] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.247635][T30868] bridge0: port 1(bridge_slave_0) entered listening state [ 599.470589][T30880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11692'. [ 599.688144][T30891] nbd: nbd3 already in use [ 599.698136][T30891] block nbd3: NBD_DISCONNECT [ 599.711040][T30891] block nbd3: Send disconnect failed -32 [ 599.732490][T30891] block nbd3: shutting down sockets [ 599.959362][T30903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11703'. [ 600.151570][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11708'. [ 600.182107][T30915] netlink: 'syz.4.11708': attribute type 10 has an invalid length. [ 600.192310][T30915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11708'. [ 600.215122][T30917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11709'. [ 600.228929][T30915] geneve5: entered promiscuous mode [ 600.235854][T30915] geneve5: entered allmulticast mode [ 600.272651][T30917] netlink: 'syz.3.11709': attribute type 16 has an invalid length. [ 600.312940][T30923] netlink: 'syz.1.11712': attribute type 1 has an invalid length. [ 600.384512][T30923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.424730][T30927] bond0: (slave gretap1): making interface the new active one [ 600.436145][T30927] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 600.500982][T30934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11716'. [ 601.088520][T30954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11725'. [ 601.393456][T30967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11730'. [ 601.906409][T30992] syzkaller1: entered allmulticast mode [ 602.316583][T31013] netlink: 'syz.4.11752': attribute type 5 has an invalid length. [ 602.394734][T31017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11755'. [ 602.447302][ T1110] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.474508][ T1110] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.507164][ T1110] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.556778][ T1110] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.851265][T31043] netlink: 'syz.4.11768': attribute type 1 has an invalid length. [ 602.875306][T31043] netlink: 'syz.4.11768': attribute type 1 has an invalid length. [ 603.479483][T31079] veth0: entered promiscuous mode [ 603.503478][T31078] veth0: left promiscuous mode [ 603.967841][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.039738][T31105] __nla_validate_parse: 10 callbacks suppressed [ 604.039761][T31105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11794'. [ 604.083077][T31105] block nbd0: Unsupported socket: should be TCP or UNIX. [ 604.390308][T31116] netlink: 'syz.2.11799': attribute type 21 has an invalid length. [ 604.405327][T31119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11798'. [ 604.415136][T31116] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11799'. [ 604.425321][T31116] netlink: 'syz.2.11799': attribute type 5 has an invalid length. [ 604.441806][T31116] netlink: 'syz.2.11799': attribute type 6 has an invalid length. [ 604.461155][T31116] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11799'. [ 604.483065][T31121] netlink: 33 bytes leftover after parsing attributes in process `syz.1.11800'. [ 604.494938][T31114] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11798'. [ 604.519705][T31121] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11800'. [ 604.564085][T31124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11801'. [ 604.610173][T31124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11801'. [ 604.693563][T31126] netlink: 1355 bytes leftover after parsing attributes in process `syz.2.11802'. [ 605.137643][T31151] gretap0: entered promiscuous mode [ 605.181455][T31152] xt_hashlimit: size too large, truncated to 1048576 [ 605.899414][T31178] netlink: 'syz.1.11819': attribute type 2 has an invalid length. [ 605.929754][T31165] netlink: 'syz.1.11819': attribute type 2 has an invalid length. [ 608.112580][T31257] netlink: 'syz.4.11860': attribute type 2 has an invalid length. [ 608.222862][T31266] netlink: 'syz.3.11865': attribute type 6 has an invalid length. [ 608.249262][T31266] netlink: 'syz.3.11865': attribute type 6 has an invalid length. [ 608.526197][T31280] syzkaller1: entered promiscuous mode [ 608.545284][T31280] syzkaller1: entered allmulticast mode [ 608.610192][T31287] batman_adv: batadv0: Adding interface: dummy0 [ 608.618293][T31287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.646362][T31287] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 608.665261][T31286] syzkaller1: entered promiscuous mode [ 608.688587][T31286] syzkaller1: entered allmulticast mode [ 609.251842][ T29] audit: type=1800 audit(1785608797.210:10): pid=31321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11889" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11782 res=0 errno=0 [ 609.302688][T31327] __nla_validate_parse: 15 callbacks suppressed [ 609.302710][T31327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11891'. [ 609.940066][T31361] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 610.541972][T31389] xt_hashlimit: size too large, truncated to 1048576 [ 611.261131][T31428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11932'. [ 611.351327][T31433] syzkaller1: entered promiscuous mode [ 611.368115][T31433] syzkaller1: entered allmulticast mode [ 611.422487][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11938'. [ 611.435703][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11938'. [ 611.480903][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11938'. [ 611.490992][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11938'. [ 611.500807][ T1110] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.515491][ T1110] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.523424][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11939'. [ 611.534196][ T1110] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.557644][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11939'. [ 611.569384][ T1110] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.807312][ T9] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 611.850097][T31461] netlink: 'syz.0.11947': attribute type 9 has an invalid length. [ 611.858287][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11947'. [ 611.872180][T31461] netlink: 'syz.0.11947': attribute type 9 has an invalid length. [ 611.881136][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11947'. [ 611.937512][T31463] netlink: 'syz.3.11949': attribute type 1 has an invalid length. [ 612.022022][T31463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.058398][T31469] bond7: (slave geneve5): making interface the new active one [ 612.068303][T31469] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 612.107108][ T94] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 612.125961][ T94] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 612.163305][ T94] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 612.188809][ T94] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 612.330839][T31477] netlink: 'syz.3.11954': attribute type 1 has an invalid length. [ 612.389840][T31477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 612.723726][T31496] xt_hashlimit: size too large, truncated to 1048576 [ 613.032982][T31506] netlink: 'syz.4.11966': attribute type 10 has an invalid length. [ 613.501740][T31533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 613.509096][T31533] IPv6: NLM_F_CREATE should be set when creating new route [ 614.122777][T31562] netlink: 'syz.3.11993': attribute type 18 has an invalid length. [ 614.148334][T31561] nbd: nbd2 already in use [ 614.154259][T31558] syzkaller1: entered promiscuous mode [ 614.164992][T31561] block nbd2: NBD_DISCONNECT [ 614.171285][T31561] block nbd2: Send disconnect failed -32 [ 614.171746][T31558] syzkaller1: entered allmulticast mode [ 614.177421][T31561] block nbd2: shutting down sockets [ 614.243027][T31562] netlink: 'syz.3.11993': attribute type 18 has an invalid length. [ 614.966377][T31608] netlink: 'syz.2.12012': attribute type 15 has an invalid length. [ 614.978248][T31608] __nla_validate_parse: 13 callbacks suppressed [ 614.978271][T31608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12012'. [ 615.098283][ T1110] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 615.109400][T31608] netlink: 'syz.2.12012': attribute type 15 has an invalid length. [ 615.136472][ T1110] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 615.142066][T31608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12012'. [ 615.154908][ T1110] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 615.230972][T11970] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 615.561011][T11982] bond0: (slave bond_slave_0): interface is now down [ 615.590434][T11982] bond0: (slave bond_slave_1): interface is now down [ 615.685102][T11982] bond0: now running without any active interface! [ 615.828704][T31648] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 615.846168][T31648] bond9: (slave lo): Enslaving as an active interface with an up link [ 615.855438][T31648] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 616.047078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.392816][T31678] netlink: 'syz.3.12038': attribute type 1 has an invalid length. [ 616.512329][T31688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12043'. [ 616.536731][T31688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12043'. [ 616.544764][T31678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 616.567229][T31684] bond10: (slave geneve6): making interface the new active one [ 616.577647][T31684] bond10: (slave geneve6): Enslaving as an active interface with an up link [ 616.667471][ T94] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.703547][ T94] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.747204][ T94] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 616.776407][ T94] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 617.087191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.278957][T31722] validate_nla: 2 callbacks suppressed [ 617.279039][T31722] netlink: 'syz.1.12057': attribute type 8 has an invalid length. [ 617.320314][T31722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12057'. [ 617.630745][T31732] netlink: 'syz.2.12063': attribute type 1 has an invalid length. [ 618.126815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.682018][T31798] netlink: 'syz.2.12091': attribute type 14 has an invalid length. [ 618.706816][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12091'. [ 618.730442][T31798] netlink: 'syz.2.12091': attribute type 14 has an invalid length. [ 618.751116][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12091'. [ 618.802222][T31805] netlink: 'syz.4.12094': attribute type 1 has an invalid length. [ 618.966099][T31815] netlink: 'syz.4.12097': attribute type 7 has an invalid length. [ 619.028689][T31815] netlink: 'syz.4.12097': attribute type 7 has an invalid length. [ 619.166419][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12101'. [ 619.176214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.211110][T31827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12103'. [ 619.229591][T31827] 0„ž{X¹¦: renamed from gretap0 [ 619.249260][T31827] 0„ž{X¹¦: entered allmulticast mode [ 619.260550][T31827] A link change request failed with some changes committed already. Interface 30„ž{X¹¦ may have been left with an inconsistent configuration, please check. [ 619.368334][T31834] gretap2: entered promiscuous mode [ 619.383134][T31834] batman_adv: batadv0: Adding interface: gretap2 [ 619.399997][T31834] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 619.438989][T31834] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 620.195948][T31876] veth0: entered promiscuous mode [ 620.203352][T31876] batadv_slave_1: entered promiscuous mode [ 620.214319][T31875] batadv_slave_1: left promiscuous mode [ 620.216895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.222275][T31875] veth0: left promiscuous mode [ 620.450369][T31886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.606868][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 620.630599][T31893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12127'. [ 620.908504][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12129'. [ 620.918530][T31902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12129'. [ 621.246861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.594630][T31925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12140'. [ 622.286862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.624717][T31964] netlink: 'syz.4.12157': attribute type 7 has an invalid length. [ 622.681985][T31964] netlink: 'syz.4.12157': attribute type 7 has an invalid length. [ 622.697046][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12158'. [ 622.707355][ T1110] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.728383][ T1110] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.748495][T31967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12158'. [ 622.839548][ T1110] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.859993][ T1110] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.890162][T31969] bridge_slave_0: invalid flags given to default FDB implementation [ 623.327106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.544656][T32007] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 623.824770][T32020] tipc: Bearer : already 2 bearers with priority 10 [ 623.836203][T32020] tipc: Bearer : trying with adjusted priority [ 623.866492][T32020] tipc: Enabled bearer , priority 9 [ 623.894559][T32018] tipc: Resetting bearer [ 623.951560][T32018] tipc: Disabling bearer [ 624.092009][T32032] syzkaller1: entered promiscuous mode [ 624.098963][T32032] syzkaller1: entered allmulticast mode [ 624.217246][T32036] only policy match revision 0 supported [ 624.217270][T32036] unable to load match [ 624.366853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.506169][ T5785] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 624.603578][T32063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.651617][T32063] sctp: [Deprecated]: syz.3.12199 (pid 32063) Use of int in maxseg socket option. [ 624.651617][T32063] Use struct sctp_assoc_value instead [ 624.863364][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12204'. [ 625.227949][T32047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.307793][T32099] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12215'. [ 625.406947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.542071][T32113] syzkaller1: entered promiscuous mode [ 625.547972][T32113] syzkaller1: entered allmulticast mode [ 625.778619][T32116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12221'. [ 625.931320][T32135] netlink: 'syz.0.12228': attribute type 1 has an invalid length. [ 626.015405][T32135] bond1: (slave gretap1): making interface the new active one [ 626.035344][T32135] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 626.446898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.818739][T32174] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 626.853750][T32177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.375783][T32207] xt_hashlimit: size too large, truncated to 1048576 [ 627.488650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.523745][T32214] netlink: 'syz.4.12264': attribute type 2 has an invalid length. [ 627.558111][T32214] netlink: 'syz.4.12264': attribute type 2 has an invalid length. [ 627.600923][T32214] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12264'. [ 627.834658][T32227] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 627.935985][T32229] veth0: entered promiscuous mode [ 627.953247][T32229] veth0: left promiscuous mode [ 628.334051][T32255] netlink: 'syz.2.12280': attribute type 1 has an invalid length. [ 628.453372][T32260] bond0: (slave geneve3): making interface the new active one [ 628.465978][T32260] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 628.489368][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.506100][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.515242][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.524546][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 628.533770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.890219][T32235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.225911][T32295] policy can only be matched on NF_INET_PRE_ROUTING [ 629.225935][T32295] unable to load match [ 629.388156][ T5785] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 629.571894][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 629.581158][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 629.588568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.109759][T32301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.287809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.298560][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.334759][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12313'. [ 630.344849][T32341] netlink: 'syz.1.12313': attribute type 29 has an invalid length. [ 630.354443][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12313'. [ 630.367951][T11982] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 630.370105][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12313'. [ 630.406935][T32341] netlink: 'syz.1.12313': attribute type 29 has an invalid length. [ 630.433823][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12313'. [ 630.606884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.632601][T32349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12316'. [ 630.767895][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.851663][T32359] tipc: Failed to remove unknown binding: 66,1,1/8195:4069944174/4069944176 [ 630.862450][T32359] tipc: Failed to remove unknown binding: 66,1,1/8195:4069944174/4069944176 [ 630.928866][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.089348][T32334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.111137][T32370] netlink: 'syz.2.12326': attribute type 26 has an invalid length. [ 631.143920][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12326'. [ 631.204270][T32370] netlink: 'syz.2.12326': attribute type 26 has an invalid length. [ 631.206315][T32375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12327'. [ 631.235036][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12326'. [ 631.537164][ T5734] net_ratelimit: 1 callbacks suppressed [ 631.537245][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.646914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.793214][T32391] Unsupported xt match [ 631.793239][T32391] unable to load match [ 632.060637][T32374] infiniband syz1: set down [ 632.065236][T32374] infiniband syz1: added bond_slave_0 [ 632.194924][T32395] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12336'. [ 632.205476][T32374] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 632.258706][T32374] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 632.298783][T32398] bridge0: port 3(vlan0) entered blocking state [ 632.313048][T32374] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 632.323674][T32398] bridge0: port 3(vlan0) entered disabled state [ 632.345879][T32398] vlan0: entered allmulticast mode [ 632.365416][T32398] geneve0: entered allmulticast mode [ 632.374870][T32374] RDS/IB: syz1: added [ 632.388693][T32374] smc: adding ib device syz1 with port count 1 [ 632.405540][T32374] smc: ib device syz1 port 1 has no pnetid [ 632.411287][T32398] vlan0: entered promiscuous mode [ 632.418524][T32398] geneve0: entered promiscuous mode [ 632.686982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.123861][T32427] netlink: 184 bytes leftover after parsing attributes in process `syz.1.12348'. [ 633.727387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.843956][T32452] xt_hashlimit: size too large, truncated to 1048576 [ 633.873195][T32449] syzkaller1: entered promiscuous mode [ 633.884784][T32449] syzkaller1: entered allmulticast mode [ 634.291510][T32458] tipc: Resetting bearer [ 634.481978][T32458] tipc: Disabling bearer [ 634.766767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.456040][T32503] netlink: 'syz.4.12368': attribute type 1 has an invalid length. [ 635.574775][T32503] bond5: entered promiscuous mode [ 635.582090][T32503] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.623714][T32507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.647811][T32507] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 635.658784][T32507] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 635.673792][T32507] bond5: (slave ip6gre2): making interface the new active one [ 635.686710][T32507] ip6gre2: entered promiscuous mode [ 635.702708][T32507] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 635.757091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.806983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.816973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.028277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.167124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.436502][T32544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12381'. [ 636.509956][T32544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12381'. [ 636.606900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.846854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.950133][T32558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12387'. [ 637.197708][T32566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12390'. [ 637.428879][T32570] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 637.448985][T32570] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 637.791945][T32593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12400'. [ 637.886849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.053250][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12404'. [ 638.074812][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12404'. [ 638.232058][T32621] veth1_to_bond: entered allmulticast mode [ 638.270752][T32621] veth1_to_bond: left allmulticast mode [ 638.926889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.655333][T32689] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12426'. [ 639.799439][T32695] syzkaller1: entered promiscuous mode [ 639.805417][T32695] syzkaller1: entered allmulticast mode [ 639.808493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.966865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.093002][T32666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.259286][T32710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12434'. [ 640.304228][T32710] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.311753][T32710] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.326301][T32714] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12434'. [ 640.809313][T32731] xt_hashlimit: size too large, truncated to 1048576 [ 641.006790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.795260][ T311] netlink: 'syz.3.12453': attribute type 1 has an invalid length. [ 641.902855][ T316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.954535][T32745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.046761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.125171][ T311] 8021q: adding VLAN 0 to HW filter on device bond11 [ 643.014429][ T361] netlink: 208 bytes leftover after parsing attributes in process `syz.1.12467'. [ 644.171295][ T408] syzkaller1: entered promiscuous mode [ 644.197210][ T408] syzkaller1: entered allmulticast mode [ 644.576572][ T420] syzkaller1: entered promiscuous mode [ 644.592433][ T420] syzkaller1: entered allmulticast mode [ 645.117819][ T453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12491'. [ 645.943414][ T486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12506'. [ 646.614858][ T524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12521'. [ 646.664585][ T524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12521'. [ 647.270439][ T556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12534'. [ 647.745206][ T580] syzkaller1: entered promiscuous mode [ 647.760907][ T580] syzkaller1: entered allmulticast mode [ 649.222492][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 649.961509][ T645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.046890][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 650.440725][ T695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12594'. [ 650.993747][ T713] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12602'. [ 651.691280][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12614'. [ 651.724341][ T741] netlink: 'syz.4.12614': attribute type 10 has an invalid length. [ 651.748538][ T741] bridge0: port 1(team0) entered disabled state [ 651.755223][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.823659][ T741] bridge0: port 1(team0) entered blocking state [ 651.830185][ T741] bridge0: port 1(team0) entered forwarding state [ 651.838137][ T741] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.845465][ T741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.863657][ T741] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 651.924705][ T747] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 652.046372][ T754] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12617'. [ 652.606991][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.749593][ T783] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12628'. [ 653.080669][ T792] netlink: 'syz.0.12632': attribute type 1 has an invalid length. [ 653.143364][ T792] bond3: (slave bridge2): making interface the new active one [ 653.152328][ T792] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 653.302582][ T801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12634'. [ 653.338409][ T801] team1: entered promiscuous mode [ 653.343796][ T801] team1: entered allmulticast mode [ 653.350417][ T771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.082026][ T821] netlink: 'syz.2.12642': attribute type 15 has an invalid length. [ 654.440840][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12647'. [ 654.691938][ T834] netlink: 'syz.0.12648': attribute type 1 has an invalid length. [ 654.855838][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12647'. [ 655.216022][ T850] netlink: 'syz.2.12653': attribute type 1 has an invalid length. [ 655.302058][ T850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.355708][ T853] bond4: (slave veth0_to_bond): making interface the new active one [ 655.419339][ T853] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 655.488270][ T850] bond4: entered promiscuous mode [ 655.493588][ T850] veth0_to_bond: entered promiscuous mode [ 655.500601][ T850] bond4: entered allmulticast mode [ 655.505990][ T850] veth0_to_bond: entered allmulticast mode [ 655.660142][ T860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12657'. [ 655.679314][ T697] Set syz1 is full, maxelem 65536 reached [ 655.756026][ T860] netlink: 'syz.4.12657': attribute type 1 has an invalid length. [ 655.777567][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12660'. [ 655.834122][ T867] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12660'. [ 655.861578][ T869] syzkaller1: entered promiscuous mode [ 655.880378][ T869] syzkaller1: entered allmulticast mode [ 656.116080][ T879] netlink: 'syz.4.12666': attribute type 4 has an invalid length. [ 656.139389][ T879] netlink: 'syz.4.12666': attribute type 4 has an invalid length. [ 656.256401][ T892] "syz.0.12670" (892) uses obsolete ecb(arc4) skcipher [ 656.290516][T11982] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc1 [ 656.514182][ T908] netlink: 'syz.2.12674': attribute type 4 has an invalid length. [ 656.532502][ T905] netlink: 'syz.2.12674': attribute type 4 has an invalid length. [ 657.007362][ T886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.032409][ T897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.153159][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'. [ 657.181405][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'. [ 657.231370][ T937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12683'. [ 657.863987][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12689'. [ 658.363301][ T978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12694'. [ 658.375904][ T980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12695'. [ 658.671367][ T991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.847805][ T972] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.12691:972 [ 659.354938][ T1007] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.781279][ T1007] batman_adv: batadv0: Interface activated: dummy0 [ 659.836906][ T1007] batadv0: mtu less than device minimum [ 659.850038][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.864038][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.876078][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.888055][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.900100][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.912141][ T1007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 660.012748][ T1007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.155479][ T1007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.248418][ T1007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.276791][ T1007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.314954][ T1007] veth0_vlan: left promiscuous mode [ 660.324508][ T1007] veth0_vlan: entered promiscuous mode [ 660.341885][ T1007] veth1_vlan: entered promiscuous mode [ 660.363045][ T1007] veth1_macvtap: left promiscuous mode [ 660.379609][ T1007] veth0_macvtap: left promiscuous mode [ 660.392494][ T1007] veth0_macvtap: entered promiscuous mode [ 660.411227][ T1007] veth1_macvtap: entered promiscuous mode [ 660.511689][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.519016][T11970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.563790][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.571137][T11970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.722512][T11970] bridge0: port 3(team0) entered blocking state [ 660.729034][T11970] bridge0: port 3(team0) entered forwarding state [ 660.758421][ T1038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12713'. [ 660.857535][ T94] net_ratelimit: 35 callbacks suppressed [ 660.857556][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.881429][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12714'. [ 661.101870][ T1056] bond9: option mode: unable to set because the bond device has slaves [ 661.189726][ T1061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12720'. [ 661.199648][ T1056] bond9: option mode: unable to set because the bond device has slaves [ 661.396886][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 661.411933][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.518847][ T1076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.662123][ T1091] netlink: 'syz.0.12727': attribute type 39 has an invalid length. [ 661.734215][ T1097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12729'. [ 661.784796][ T1099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12729'. [ 661.976446][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 661.991228][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.076460][ T1106] tipc: Failed to remove unknown binding: 66,1,1/10136234:1178565361/1178565363 [ 662.393356][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.590422][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 662.604921][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.909361][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12741'. [ 663.044850][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.177818][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 663.192311][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.604583][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.795048][ T1171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12756'. [ 663.812792][ T1173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12757'. [ 664.136055][ T1189] sctp: [Deprecated]: syz.2.12762 (pid 1189) Use of int in maxseg socket option. [ 664.136055][ T1189] Use struct sctp_assoc_value instead [ 666.279156][T11982] net_ratelimit: 10 callbacks suppressed [ 666.279181][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 666.300322][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.820026][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 666.830306][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12772'. [ 666.834621][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.068805][ T1232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12777'. [ 667.105130][ T1232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12777'. [ 667.367403][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 667.382390][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.946843][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 667.961561][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.389875][ T1256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.550107][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 668.565255][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.621113][ T1289] tipc: Enabling of bearer rejected, already enabled [ 668.923906][ T1300] netlink: 'syz.2.12798': attribute type 1 has an invalid length. [ 669.810508][ T1323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.847211][ T1323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.052516][ T1332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12810'. [ 670.655929][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12815'. [ 671.416022][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12823'. [ 671.552828][ T1377] syzkaller0: entered promiscuous mode [ 671.570672][ T1377] syzkaller0: entered allmulticast mode [ 671.603629][ T1377] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 671.720327][ T94] net_ratelimit: 10 callbacks suppressed [ 671.720351][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 671.741044][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.773657][ T1379] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12826'. [ 672.088188][ T1388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12829'. [ 672.139989][ T1390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 672.167588][ T1390] xt_hashlimit: size too large, truncated to 1048576 [ 672.205248][ T1388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12829'. [ 672.215362][ T1392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12831'. [ 672.308097][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 672.323238][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.433699][ T5785] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa0 [ 672.641015][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12834'. [ 672.808579][ T1414] netlink: 'syz.1.12836': attribute type 1 has an invalid length. [ 672.816507][ T1414] netlink: 'syz.1.12836': attribute type 4 has an invalid length. [ 672.825214][ T1414] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12836'. [ 672.854215][ T1414] netlink: 'syz.1.12836': attribute type 1 has an invalid length. [ 672.876274][ T1414] netlink: 'syz.1.12836': attribute type 4 has an invalid length. [ 672.899556][ T1414] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12836'. [ 672.956894][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 672.971677][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.537135][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 673.552064][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 674.081386][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 674.096144][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.115781][ T1462] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12845'. [ 676.140354][ T1462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12845'. [ 676.186873][ T1468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12848'. [ 676.489194][ T1486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12854'. [ 677.023937][ T1505] scsi_nl_rcv_msg: discarding partial skb [ 677.188213][T11970] net_ratelimit: 10 callbacks suppressed [ 677.188235][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 677.208581][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.778677][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 677.793288][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.987091][ T1535] __nla_validate_parse: 1 callbacks suppressed [ 677.987117][ T1535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12874'. [ 678.205696][ T1535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.317287][ T1537] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 678.328636][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 678.343020][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.475513][ T1548] syzkaller1: entered promiscuous mode [ 678.494602][ T1548] syzkaller1: entered allmulticast mode [ 678.939769][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 678.954276][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 679.529034][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 679.543769][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 680.332659][ T1586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12889'. [ 682.381044][ T1607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12897'. [ 682.399120][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12898'. [ 682.610987][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12901'. [ 682.628205][T11982] net_ratelimit: 10 callbacks suppressed [ 682.628227][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 682.649547][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.832403][ T1625] netlink: 193 bytes leftover after parsing attributes in process `syz.1.12905'. [ 682.949526][ T1631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12907'. [ 682.963455][ T1631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12907'. [ 683.037985][ T1635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12909'. [ 683.167020][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 683.181898][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.737501][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 683.752475][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.885333][ T1671] erspan0: left allmulticast mode [ 683.900951][ T1671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12921'. [ 684.040924][ T1679] netlink: 'syz.2.12927': attribute type 4 has an invalid length. [ 684.299487][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 684.314110][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.413896][ T1696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12934'. [ 684.841487][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 684.845662][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12940'. [ 684.856479][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.083905][ T1719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12943'. [ 685.518669][ T1741] ip6gre1: entered promiscuous mode [ 685.524518][ T1741] ip6gre1: entered allmulticast mode [ 685.630951][ T1748] netlink: 'syz.3.12954': attribute type 1 has an invalid length. [ 685.685015][ T1748] 8021q: adding VLAN 0 to HW filter on device bond12 [ 685.718735][ T1754] netlink: 'syz.1.12955': attribute type 1 has an invalid length. [ 685.817840][ T1754] bond6: (slave veth11): Enslaving as an active interface with a down link [ 685.860415][ T1754] 8021q: adding VLAN 0 to HW filter on device bond6 [ 686.421415][ T1788] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 686.596314][ T1795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12969'. [ 686.615482][ T1795] syzkaller1: entered promiscuous mode [ 686.623235][ T1795] syzkaller1: entered allmulticast mode [ 686.803188][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12971'. [ 686.851084][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12971'. [ 686.910759][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12971'. [ 687.987679][ T94] net_ratelimit: 11 callbacks suppressed [ 687.987702][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 688.007943][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.236420][ T1726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.443000][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12977'. [ 688.455409][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12977'. [ 688.481158][ T1811] syzkaller0: entered promiscuous mode [ 688.488048][ T1811] syzkaller0: entered allmulticast mode [ 688.529636][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 688.544109][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.641109][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12980'. [ 688.656002][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12980'. [ 688.866186][ T1830] xt_hashlimit: size too large, truncated to 1048576 [ 689.090435][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 689.105153][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 689.620954][ T1865] netlink: 'syz.1.12996': attribute type 13 has an invalid length. [ 689.673699][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 689.689719][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.218989][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 690.234405][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 691.445774][ T1916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13013'. [ 691.601789][ T1919] bond5: entered promiscuous mode [ 691.680341][ T1926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13017'. [ 691.691260][ T1923] macvlan2: entered promiscuous mode [ 691.696705][ T1923] macvlan2: entered allmulticast mode [ 691.703383][ T1923] bond5: (slave macvlan2): Opening slave failed [ 691.735919][ T1926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13017'. [ 691.791084][ T1927] netlink: 'syz.0.13017': attribute type 32 has an invalid length. [ 692.796842][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13031'. [ 692.816963][ T1957] syzkaller1: entered promiscuous mode [ 692.822341][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13031'. [ 692.829516][ T1957] syzkaller1: entered allmulticast mode [ 692.849351][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13033'. [ 693.356785][T11982] net_ratelimit: 10 callbacks suppressed [ 693.356807][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 693.377990][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 693.380572][ T1987] netlink: 'syz.2.13040': attribute type 19 has an invalid length. [ 693.560043][ T1991] netlink: 'syz.4.13041': attribute type 1 has an invalid length. [ 693.661637][ T1991] 8021q: adding VLAN 0 to HW filter on device bond6 [ 693.714422][ T1995] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 693.783770][ T1991] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 693.835043][ T1991] netlink: 'syz.4.13041': attribute type 10 has an invalid length. [ 693.860807][ T1991] __nla_validate_parse: 1 callbacks suppressed [ 693.860839][ T1991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13041'. [ 693.877620][ T48] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 693.890292][ T1991] dummy0: entered promiscuous mode [ 693.906377][ T1991] bond6: (slave dummy0): Removing an active aggregator [ 693.927722][ T1991] bond6: (slave dummy0): Releasing backup interface [ 693.947445][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 693.962498][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 694.028967][ T2008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13047'. [ 694.399541][ T2023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13053'. [ 694.496849][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 694.511380][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 694.662898][ T2036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13059'. [ 694.689766][ T2036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13059'. [ 694.713825][ T2036] netlink: 31 bytes leftover after parsing attributes in process `syz.4.13059'. [ 695.072480][ T2049] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 695.085215][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 695.100400][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 695.232172][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13066'. [ 695.389650][ T2064] lo speed is unknown, defaulting to 1000 [ 695.398679][ T2064] lo speed is unknown, defaulting to 1000 [ 695.414560][ T2064] lo speed is unknown, defaulting to 1000 [ 695.423244][ T2064] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 695.438388][ T2064] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 695.456467][ T2064] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 695.543821][ T2064] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 695.593065][ T2064] lo speed is unknown, defaulting to 1000 [ 695.603144][ T2064] lo speed is unknown, defaulting to 1000 [ 695.611482][ T2064] lo speed is unknown, defaulting to 1000 [ 695.617218][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 695.621855][ T2064] lo speed is unknown, defaulting to 1000 [ 695.640654][ T2064] lo speed is unknown, defaulting to 1000 [ 695.999649][ T2090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13078'. [ 696.081910][ T2094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13080'. [ 696.325156][ T2104] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13084'. [ 696.341995][ T2105] netlink: 'syz.4.13085': attribute type 1 has an invalid length. [ 696.457310][ T2105] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.612739][ T2110] bond7: (slave gretap0): making interface the new active one [ 696.638959][ T2110] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 698.575469][ T2174] netlink: 'syz.2.13106': attribute type 13 has an invalid length. [ 698.655763][ T2073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.727500][ T1110] net_ratelimit: 12 callbacks suppressed [ 698.727521][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 698.747607][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.165313][ T2189] __nla_validate_parse: 3 callbacks suppressed [ 699.165339][ T2189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13113'. [ 699.346880][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 699.361361][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 699.538172][ T2205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13119'. [ 699.927857][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 699.942902][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 700.449990][ T2240] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13131'. [ 700.520281][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 700.535066][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 701.087634][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 701.102501][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 701.770216][ T2256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.041663][ T2294] tipc: Enabled bearer , priority 0 [ 702.275940][ T2294] syzkaller0: entered promiscuous mode [ 702.277205][ T2305] netlink: 'syz.2.13148': attribute type 1 has an invalid length. [ 702.301276][ T2294] syzkaller0: entered allmulticast mode [ 702.334899][ T2294] tipc: Resetting bearer [ 702.477044][ T2305] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.628287][ T2293] tipc: Resetting bearer [ 703.846912][ T1110] net_ratelimit: 8 callbacks suppressed [ 703.846935][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 703.867397][ T1110] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.387280][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 704.401848][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 704.917489][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 704.932038][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.303429][ T2293] tipc: Disabling bearer [ 705.328129][ T2332] ip6gre3: entered promiscuous mode [ 705.333393][ T2332] ip6gre3: entered allmulticast mode [ 705.457376][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 705.471913][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.566115][ T2357] tipc: Enabled bearer , priority 0 [ 705.682323][ T2357] syzkaller0: entered promiscuous mode [ 705.697300][ T2357] syzkaller0: entered allmulticast mode [ 705.711277][ T2357] tipc: Resetting bearer [ 705.724968][ T2368] netlink: 'syz.2.13164': attribute type 19 has an invalid length. [ 705.749889][ T2368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13164'. [ 705.778968][ T2368] netlink: 'syz.2.13164': attribute type 19 has an invalid length. [ 705.789487][ T2368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13164'. [ 705.846883][ T2354] tipc: Resetting bearer [ 706.038518][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 706.053571][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 706.137590][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13171'. [ 706.148924][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13171'. [ 708.444782][ T2354] tipc: Disabling bearer [ 708.496532][ T2403] syzkaller0: entered promiscuous mode [ 708.514960][ T2403] syzkaller0: entered allmulticast mode [ 708.661824][ T2411] syzkaller0: entered promiscuous mode [ 708.675656][ T2411] syzkaller0: entered allmulticast mode [ 708.800626][ T2422] erspan0: entered promiscuous mode [ 708.883386][ T2422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.902283][ T2422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.921278][ T2422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.935547][ T2422] net_ratelimit: 10 callbacks suppressed [ 708.935567][ T2422] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 708.991486][T11973] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.999933][T11973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.129206][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 709.143764][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.192013][ T2437] syzkaller0: entered promiscuous mode [ 709.226016][ T2437] syzkaller0: entered allmulticast mode [ 709.594446][ T2456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13187'. [ 709.612320][ T2456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13187'. [ 709.708256][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 709.722723][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 709.850683][ T2477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13195'. [ 710.018072][ T2483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13196'. [ 710.296952][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 710.311592][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 710.314876][ T2499] xfrm0: Caught tx_queue_len zero misconfig [ 710.488875][ T2474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13194'. [ 710.805467][ T2509] gretap0: left promiscuous mode [ 710.869345][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 710.884057][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 710.983526][ T2509] wireguard: wg0: Could not create IPv4 socket [ 710.994341][ T2509] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 711.160966][ T2532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13210'. [ 711.273006][ T2536] tipc: Failed to remove unknown binding: 66,0,0/3758096385:3166824122/3166824123 [ 711.303300][ T2536] tipc: Failed to remove unknown binding: 66,0,0/3758096385:3166824122/3166824123 [ 711.471513][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.778224][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13225'. [ 712.393489][T11970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.403030][T11970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.967798][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13246'. [ 713.011648][ T2639] tipc: Failed to remove unknown binding: 66,0,0/10136234:627413657/627413658 [ 713.031779][ T2639] tipc: Failed to remove unknown binding: 66,0,0/10136234:627413657/627413658 [ 713.607714][ T2669] syzkaller0: entered promiscuous mode [ 713.613487][ T2669] syzkaller0: entered allmulticast mode [ 713.741753][ T2679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13261'. [ 713.923877][ T2691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13264'. [ 713.991584][ T48] net_ratelimit: 11 callbacks suppressed [ 713.991603][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 714.012191][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.183086][ T2702] netlink: 'syz.1.13269': attribute type 1 has an invalid length. [ 714.228394][ T2710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13271'. [ 714.275270][ T2702] 8021q: adding VLAN 0 to HW filter on device bond8 [ 714.296072][ T2702] bond7: (slave bond8): making interface the new active one [ 714.307108][ T2702] bond7: (slave bond8): Enslaving as an active interface with an up link [ 714.349436][ T2702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13269'. [ 714.359442][ T2716] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 714.408808][ T2702] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.558837][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 714.573287][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.588681][ T2731] syzkaller1: entered promiscuous mode [ 714.594353][ T2731] syzkaller1: entered allmulticast mode [ 714.725235][ T2741] netlink: 'syz.1.13278': attribute type 1 has an invalid length. [ 714.890954][ T2747] netlink: 'syz.1.13281': attribute type 1 has an invalid length. [ 715.095337][ T2760] vlan4: entered promiscuous mode [ 715.100945][ T2760] hsr0: entered promiscuous mode [ 715.108972][ T2760] vlan4: entered allmulticast mode [ 715.114304][ T2760] hsr0: entered allmulticast mode [ 715.119981][ T2760] hsr_slave_0: entered allmulticast mode [ 715.126990][ T2760] hsr_slave_1: entered allmulticast mode [ 715.128377][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 715.147361][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 715.248169][ T2767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13287'. [ 715.401140][ T2767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13287'. [ 715.667223][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 715.682411][T11970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 715.860307][ T2797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13297'. [ 715.984074][ T2806] 0: reclassify loop, rule prio 0, protocol 03 [ 716.238556][T11982] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 716.606969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.033830][ T2860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13314'. [ 717.419384][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13320'. [ 718.156438][ T2900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13324'. [ 718.215921][ T2900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13324'. [ 718.376404][ T2908] tipc: Failed to remove unknown binding: 66,0,0/10136234:386042393/386042394 [ 718.389856][ T2908] tipc: Failed to remove unknown binding: 66,0,0/10136234:386042393/386042394 [ 718.770730][ T2923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13335'. [ 719.115549][ T2810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.327958][ T48] net_ratelimit: 12 callbacks suppressed [ 719.327980][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 719.348427][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 719.866781][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 719.881428][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.407111][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 720.421655][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.943949][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 720.959066][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 721.477202][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 721.491811][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 721.669995][ T2958] block nbd0: reconnected socket [ 721.673145][ T5640] block nbd0: Receive control failed (result -107) [ 721.884939][ T2963] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13350'. [ 722.186150][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.211505][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.458555][ T2966] veth1_vlan: left allmulticast mode [ 722.691078][ T5785] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.723487][ T5785] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.749249][ T5785] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.784184][ T5785] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.820121][ T5785] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.833646][ T5785] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.896874][T11973] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.925026][T11973] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.062262][ T2994] syzkaller0: entered promiscuous mode [ 723.069309][ T2994] syzkaller0: entered allmulticast mode [ 723.210879][ T3003] syzkaller0: entered promiscuous mode [ 723.227663][ T3003] syzkaller0: entered allmulticast mode [ 723.438569][ T3015] [ 723.440968][ T3015] ====================================================== [ 723.448035][ T3015] WARNING: possible circular locking dependency detected [ 723.455132][ T3015] syzkaller #0 Not tainted [ 723.459566][ T3015] ------------------------------------------------------ [ 723.466652][ T3015] syz.2.13367/3015 is trying to acquire lock: [ 723.472736][ T3015] ffff88801c294210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 723.483371][ T3015] [ 723.483371][ T3015] but task is already holding lock: [ 723.490733][ T3015] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 723.500858][ T3015] [ 723.500858][ T3015] which lock already depends on the new lock. [ 723.500858][ T3015] [ 723.511255][ T3015] [ 723.511255][ T3015] the existing dependency chain (in reverse order) is: [ 723.520273][ T3015] [ 723.520273][ T3015] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 723.528109][ T3015] cpus_read_lock+0x42/0x160 [ 723.533295][ T3015] static_key_slow_inc+0x12/0x30 [ 723.538813][ T3015] nbd_genl_reconfigure+0x1301/0x1e80 [ 723.544842][ T3015] genl_family_rcv_msg_doit+0x233/0x340 [ 723.551058][ T3015] genl_rcv_msg+0x614/0x7a0 [ 723.556128][ T3015] netlink_rcv_skb+0x226/0x4a0 [ 723.561456][ T3015] genl_rcv+0x28/0x40 [ 723.566014][ T3015] netlink_unicast+0x7bb/0x940 [ 723.571302][ T3015] netlink_sendmsg+0x813/0xb40 [ 723.576596][ T3015] sock_sendmsg_nosec+0x13a/0x180 [ 723.582223][ T3015] ____sys_sendmsg+0x54e/0x850 [ 723.587515][ T3015] ___sys_sendmsg+0x2a5/0x360 [ 723.592808][ T3015] __x64_sys_sendmsg+0x1b1/0x290 [ 723.598267][ T3015] do_syscall_64+0x174/0x580 [ 723.603383][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.609790][ T3015] [ 723.609790][ T3015] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 723.617444][ T3015] __mutex_lock+0x19d/0x1550 [ 723.622677][ T3015] nbd_queue_rq+0x373/0x1150 [ 723.627789][ T3015] blk_mq_dispatch_rq_list+0x499/0x1990 [ 723.633926][ T3015] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 723.640820][ T3015] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 723.647339][ T3015] blk_mq_run_work_fn+0x16c/0x300 [ 723.652882][ T3015] process_scheduled_works+0xa8e/0x14e0 [ 723.658978][ T3015] worker_thread+0xa47/0xfb0 [ 723.664085][ T3015] kthread+0x388/0x470 [ 723.668671][ T3015] ret_from_fork+0x514/0xb70 [ 723.673852][ T3015] ret_from_fork_asm+0x1a/0x30 [ 723.679131][ T3015] [ 723.679131][ T3015] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 723.686423][ T3015] __mutex_lock+0x19d/0x1550 [ 723.691539][ T3015] nbd_queue_rq+0xc1/0x1150 [ 723.696559][ T3015] blk_mq_dispatch_rq_list+0x499/0x1990 [ 723.702648][ T3015] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 723.709525][ T3015] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 723.716032][ T3015] blk_mq_run_work_fn+0x16c/0x300 [ 723.721591][ T3015] process_scheduled_works+0xa8e/0x14e0 [ 723.727657][ T3015] worker_thread+0xa47/0xfb0 [ 723.732763][ T3015] kthread+0x388/0x470 [ 723.737348][ T3015] ret_from_fork+0x514/0xb70 [ 723.742473][ T3015] ret_from_fork_asm+0x1a/0x30 [ 723.747788][ T3015] [ 723.747788][ T3015] -> #4 (set->srcu){.+.+}-{0:0}: [ 723.754939][ T3015] __synchronize_srcu+0xc9/0x2f0 [ 723.760444][ T3015] elevator_switch+0x1e8/0x7b0 [ 723.765802][ T3015] elevator_change+0x2fa/0x480 [ 723.771115][ T3015] elevator_set_default+0x375/0x440 [ 723.776834][ T3015] blk_register_queue+0x3f3/0x4e0 [ 723.782454][ T3015] __add_disk+0x6cb/0xe30 [ 723.787334][ T3015] add_disk_fwnode+0x100/0x3a0 [ 723.792612][ T3015] nbd_dev_add+0x733/0xb60 [ 723.797548][ T3015] nbd_init+0x15f/0x1e0 [ 723.802270][ T3015] do_one_initcall+0x250/0x870 [ 723.807556][ T3015] do_initcall_level+0x10a/0x1a0 [ 723.813031][ T3015] do_initcalls+0x59/0xa0 [ 723.817874][ T3015] kernel_init_freeable+0x29d/0x3e0 [ 723.823592][ T3015] kernel_init+0x1d/0x1d0 [ 723.828446][ T3015] ret_from_fork+0x514/0xb70 [ 723.833580][ T3015] ret_from_fork_asm+0x1a/0x30 [ 723.838888][ T3015] [ 723.838888][ T3015] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 723.846713][ T3015] __mutex_lock+0x19d/0x1550 [ 723.852028][ T3015] elevator_change+0x1af/0x480 [ 723.857415][ T3015] elevator_set_none+0xb5/0x140 [ 723.862900][ T3015] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 723.869232][ T3015] nbd_start_device+0x189/0xb30 [ 723.874604][ T3015] nbd_genl_connect+0x1597/0x1c10 [ 723.880182][ T3015] genl_family_rcv_msg_doit+0x233/0x340 [ 723.886279][ T3015] genl_rcv_msg+0x614/0x7a0 [ 723.891418][ T3015] netlink_rcv_skb+0x226/0x4a0 [ 723.896705][ T3015] genl_rcv+0x28/0x40 [ 723.901233][ T3015] netlink_unicast+0x7bb/0x940 [ 723.906518][ T3015] netlink_sendmsg+0x813/0xb40 [ 723.911802][ T3015] sock_sendmsg_nosec+0x13a/0x180 [ 723.917377][ T3015] ____sys_sendmsg+0x54e/0x850 [ 723.922659][ T3015] ___sys_sendmsg+0x2a5/0x360 [ 723.927856][ T3015] __x64_sys_sendmsg+0x1b1/0x290 [ 723.933340][ T3015] do_syscall_64+0x174/0x580 [ 723.938464][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.944911][ T3015] [ 723.944911][ T3015] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 723.953554][ T3015] blk_alloc_queue+0x544/0x690 [ 723.958847][ T3015] __blk_mq_alloc_disk+0x194/0x390 [ 723.964475][ T3015] nbd_dev_add+0x494/0xb60 [ 723.969433][ T3015] nbd_init+0x15f/0x1e0 [ 723.974106][ T3015] do_one_initcall+0x250/0x870 [ 723.979391][ T3015] do_initcall_level+0x10a/0x1a0 [ 723.984843][ T3015] do_initcalls+0x59/0xa0 [ 723.989681][ T3015] kernel_init_freeable+0x29d/0x3e0 [ 723.995395][ T3015] kernel_init+0x1d/0x1d0 [ 724.000268][ T3015] ret_from_fork+0x514/0xb70 [ 724.005381][ T3015] ret_from_fork_asm+0x1a/0x30 [ 724.010658][ T3015] [ 724.010658][ T3015] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 724.017886][ T3015] fs_reclaim_acquire+0x71/0x100 [ 724.023373][ T3015] kmem_cache_alloc_noprof+0x64/0x5f0 [ 724.029294][ T3015] __kernfs_iattrs+0xdd/0x380 [ 724.034503][ T3015] kernfs_iop_setattr+0xe6/0x3f0 [ 724.039979][ T3015] notify_change+0xbba/0xea0 [ 724.045096][ T3015] do_truncate+0x1c2/0x250 [ 724.050235][ T3015] path_openat+0x2fed/0x3830 [ 724.055347][ T3015] do_file_open+0x23e/0x4a0 [ 724.060367][ T3015] do_sys_openat2+0x115/0x200 [ 724.065575][ T3015] __x64_sys_openat+0x138/0x170 [ 724.070941][ T3015] do_syscall_64+0x174/0x580 [ 724.076053][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.082464][ T3015] [ 724.082464][ T3015] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 724.090972][ T3015] __lock_acquire+0x1520/0x2cf0 [ 724.096366][ T3015] lock_acquire+0x106/0x350 [ 724.101408][ T3015] down_read+0x4a/0x330 [ 724.106106][ T3015] kernfs_iop_permission+0x7f/0x430 [ 724.111842][ T3015] inode_permission+0x3de/0x5f0 [ 724.117211][ T3015] cgroup_attach_permissions+0x28e/0x9f0 [ 724.123364][ T3015] __cgroup_procs_write+0x24b/0x320 [ 724.129092][ T3015] cgroup_threads_write+0x24/0x50 [ 724.134638][ T3015] cgroup_file_write+0x331/0x8f0 [ 724.140087][ T3015] kernfs_fop_write_iter+0x3a4/0x540 [ 724.145888][ T3015] vfs_write+0x612/0xba0 [ 724.150649][ T3015] ksys_write+0x150/0x270 [ 724.155517][ T3015] do_syscall_64+0x174/0x580 [ 724.160624][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.167037][ T3015] [ 724.167037][ T3015] other info that might help us debug this: [ 724.167037][ T3015] [ 724.177259][ T3015] Chain exists of: [ 724.177259][ T3015] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 724.177259][ T3015] [ 724.191412][ T3015] Possible unsafe locking scenario: [ 724.191412][ T3015] [ 724.198897][ T3015] CPU0 CPU1 [ 724.204290][ T3015] ---- ---- [ 724.209690][ T3015] rlock(cpu_hotplug_lock); [ 724.214278][ T3015] lock(&nsock->tx_lock); [ 724.221207][ T3015] lock(cpu_hotplug_lock); [ 724.228221][ T3015] rlock(&root->kernfs_iattr_rwsem); [ 724.233586][ T3015] [ 724.233586][ T3015] *** DEADLOCK *** [ 724.233586][ T3015] [ 724.241719][ T3015] 5 locks held by syz.2.13367/3015: [ 724.246915][ T3015] #0: ffff88802aea6470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 724.256066][ T3015] #1: ffff88807fdd4450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 724.265006][ T3015] #2: ffff888068dbc080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 724.274828][ T3015] #3: ffffffff8eb99560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 724.284622][ T3015] #4: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 724.295159][ T3015] [ 724.295159][ T3015] stack backtrace: [ 724.301065][ T3015] CPU: 1 UID: 0 PID: 3015 Comm: syz.2.13367 Not tainted syzkaller #0 PREEMPT(full) [ 724.301084][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.301092][ T3015] Call Trace: [ 724.301098][ T3015] [ 724.301103][ T3015] dump_stack_lvl+0xe8/0x150 [ 724.301127][ T3015] print_circular_bug+0x2e1/0x300 [ 724.301142][ T3015] check_noncircular+0x12e/0x150 [ 724.301156][ T3015] __lock_acquire+0x1520/0x2cf0 [ 724.301174][ T3015] ? __lock_acquire+0x683/0x2cf0 [ 724.301194][ T3015] ? kernfs_iop_permission+0x7f/0x430 [ 724.301211][ T3015] lock_acquire+0x106/0x350 [ 724.301226][ T3015] ? kernfs_iop_permission+0x7f/0x430 [ 724.301243][ T3015] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 724.301261][ T3015] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 724.301277][ T3015] down_read+0x4a/0x330 [ 724.301293][ T3015] ? kernfs_iop_permission+0x7f/0x430 [ 724.301309][ T3015] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 724.301326][ T3015] kernfs_iop_permission+0x7f/0x430 [ 724.301342][ T3015] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 724.301359][ T3015] inode_permission+0x3de/0x5f0 [ 724.301376][ T3015] cgroup_attach_permissions+0x28e/0x9f0 [ 724.301395][ T3015] __cgroup_procs_write+0x24b/0x320 [ 724.301428][ T3015] cgroup_threads_write+0x24/0x50 [ 724.301442][ T3015] ? __pfx_cgroup_threads_write+0x10/0x10 [ 724.301455][ T3015] cgroup_file_write+0x331/0x8f0 [ 724.301468][ T3015] ? kernfs_fop_write_iter+0x22b/0x540 [ 724.301482][ T3015] ? __pfx_cgroup_file_write+0x10/0x10 [ 724.301495][ T3015] ? __kmalloc_noprof+0x396/0x720 [ 724.301510][ T3015] ? vfs_write+0x22b/0xba0 [ 724.301520][ T3015] ? __kmalloc_noprof+0x1ad/0x720 [ 724.301537][ T3015] ? __pfx_cgroup_file_write+0x10/0x10 [ 724.301549][ T3015] kernfs_fop_write_iter+0x3a4/0x540 [ 724.301563][ T3015] vfs_write+0x612/0xba0 [ 724.301576][ T3015] ? __pfx_vfs_write+0x10/0x10 [ 724.301589][ T3015] ? __fget_files+0x2a/0x420 [ 724.301607][ T3015] ksys_write+0x150/0x270 [ 724.301619][ T3015] ? __pfx_ksys_write+0x10/0x10 [ 724.301632][ T3015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.301645][ T3015] do_syscall_64+0x174/0x580 [ 724.301660][ T3015] ? trace_irq_disable+0x3b/0x140 [ 724.301677][ T3015] ? clear_bhb_loop+0x40/0x90 [ 724.301691][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.301704][ T3015] RIP: 0033:0x7f6c2639e019 [ 724.301716][ T3015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.301727][ T3015] RSP: 002b:00007f6c27302028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 724.301743][ T3015] RAX: ffffffffffffffda RBX: 00007f6c26625fa0 RCX: 00007f6c2639e019 [ 724.301752][ T3015] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000005 [ 724.301761][ T3015] RBP: 00007f6c2643500c R08: 0000000000000000 R09: 0000000000000000 [ 724.301769][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.301776][ T3015] R13: 00007f6c26626038 R14: 00007f6c26625fa0 R15: 00007fffcc8a0eb8 [ 724.301791][ T3015] [ 724.666968][ T5785] net_ratelimit: 10 callbacks suppressed [ 724.666989][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 724.687162][ T5785] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.216782][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 725.231326][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.571051][ T2979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.756899][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 725.771459][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 726.286833][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 726.301255][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 726.816945][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 726.831717][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 729.906716][T11973] net_ratelimit: 10 callbacks suppressed [ 729.906739][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 729.927047][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.447191][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 730.461532][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.976750][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 730.991303][ T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 731.507610][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 731.521938][ T94] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 732.037230][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:80:df:42 [ 732.051667][T11973] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01