last executing test programs: 3.975712624s ago: executing program 1 (id=10342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f0000000740)=""/51, 0x33, 0x0, 0x0}}, 0x10) 3.023979152s ago: executing program 1 (id=10351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xb}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4040880) 2.692692232s ago: executing program 1 (id=10357): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) pipe(&(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.684585316s ago: executing program 2 (id=10358): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 2.543756989s ago: executing program 4 (id=10359): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2.532938142s ago: executing program 3 (id=10360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000500)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x27}, {&(0x7f0000000a80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9c025e46bbe64fa"}, {&(0x7f0000000c80)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5"}, {&(0x7f0000000cc0)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea"}, {&(0x7f0000000d40)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba"}, {&(0x7f0000000e00)="6d7bbc790240b441bba9be"}, {&(0x7f0000000e40)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605"}], 0x0, &(0x7f0000000e80)=[@iv={0x0, 0x117, 0x2, 0x0, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0x0, 0x841}], 0x4924924924925b0, 0x40800) recvmsg(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001000)=""/60, 0xffffffda}, {&(0x7f00000020c0)=""/4085, 0x1000}, {&(0x7f0000000000)=""/221, 0xec}, {&(0x7f0000000180)=""/36, 0x24}], 0x4}, 0x20) 2.411658967s ago: executing program 2 (id=10362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.386551157s ago: executing program 1 (id=10363): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 2.220575035s ago: executing program 3 (id=10364): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) 1.887792958s ago: executing program 1 (id=10366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b40)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000d40)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000d80)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6c", 0x245}], 0x1}}], 0x1, 0x4000001) 1.840452255s ago: executing program 4 (id=10367): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) write$ppp(r1, &(0x7f00000002c0)="c021", 0x2) 1.690217136s ago: executing program 3 (id=10369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000980)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 1.606378877s ago: executing program 4 (id=10370): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r1, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) 1.398551454s ago: executing program 0 (id=10371): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001080)=0x1, 0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0xfffffe60}], 0x1) 1.32614434s ago: executing program 4 (id=10372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 1.248389548s ago: executing program 2 (id=10373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000040000000000600001c"], 0x4a) 1.129180172s ago: executing program 3 (id=10374): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.065290317s ago: executing program 0 (id=10375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304856755200db549e13d64a3489bfc1961cc504fc1175ce7e3335c86d231c5d64829c1ebfac649a1787882b454975a71a18ece31ee6f69e99707e2a13f4f826a57837744a810058f73e25119f8e0b8787ed2f318a1df960df58a7c091b9a7a60e5a2f546d0fe807dab278a08cb2056295185213037adcec5da72763d52734d7dfd51c27", 0xcf}, {&(0x7f00000003c0)="e8700e444d50a969ff67247cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece98ad3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfe67}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 936.385692ms ago: executing program 4 (id=10376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r2, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) 809.469257ms ago: executing program 0 (id=10377): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000380)=0x207, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000780)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x8, 0x0, @local}}}}}}, 0x0) 722.486999ms ago: executing program 1 (id=10378): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000003c0)=0x3ff, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000400)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 700.667536ms ago: executing program 2 (id=10379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20048940) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001040)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 514.239399ms ago: executing program 3 (id=10380): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000008c0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000900)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000940)={0xa, 0x0, 0x7ffff, @loopback, 0x2b, 0x8}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 497.261545ms ago: executing program 0 (id=10381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) 325.798254ms ago: executing program 2 (id=10382): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) 261.234793ms ago: executing program 3 (id=10383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 165.925375ms ago: executing program 4 (id=10384): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x5, 0x3) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)='#', 0xfd67}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="130fef", 0x3}], 0x1}}], 0x2, 0x4040040) 165.729682ms ago: executing program 0 (id=10385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040074) 146.457269ms ago: executing program 2 (id=10386): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 0s ago: executing program 0 (id=10387): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000600)={0x40, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.3933'. [ 245.847752][T13974] netlink: 'syz.1.3941': attribute type 2 has an invalid length. [ 246.108635][T13990] vlan1: entered promiscuous mode [ 246.108925][T13990] vlan1: entered allmulticast mode [ 246.108943][T13990] veth0_vlan: entered allmulticast mode [ 246.126887][T13944] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 246.348344][T14000] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3952'. [ 246.419805][T14008] IPv6: Can't replace route, no match found [ 246.541601][T14012] batadv_slave_1: Caught tx_queue_len zero misconfig [ 246.541878][T14012] netlink: 'syz.2.3959': attribute type 4 has an invalid length. [ 246.606908][T14018] netlink: 'syz.0.3962': attribute type 9 has an invalid length. [ 246.905821][T14035] IPv6: sit1: Disabled Multicast RS [ 247.040651][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 247.218572][T14055] xt_hl: Unknown Hop Limit match mode: 206 [ 247.316838][T14061] x_tables: unsorted underflow at hook 3 [ 247.717109][T14084] netlink: 'syz.3.3995': attribute type 1 has an invalid length. [ 247.717136][T14084] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3995'. [ 247.899250][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4000'. [ 247.919584][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4000'. [ 248.301358][T14117] netlink: 'syz.0.4011': attribute type 6 has an invalid length. [ 248.662293][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 249.031470][T14163] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4034'. [ 249.120470][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'. [ 249.120499][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'. [ 249.120534][T14167] netlink: 'syz.2.4036': attribute type 4 has an invalid length. [ 249.476361][T14189] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 249.746537][T14204] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 250.047104][T14222] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.438876][T14243] smc: removing ib device rxe0 [ 250.458119][T14237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.649182][T14243] smbdirect: ib_dev[rxe0] removed [ 250.955981][T14268] __nla_validate_parse: 3 callbacks suppressed [ 250.956004][T14268] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4077'. [ 251.371565][ T5298] netdevsim netdevsim2 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 251.372031][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.101312][T14312] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 252.340375][T14319] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4102'. [ 252.341338][T14319] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4102'. [ 252.341363][T14319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4102'. [ 252.720098][T14331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.036912][T14343] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 253.111335][T14346] IPv6: sit1: Disabled Multicast RS [ 253.143959][T14351] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 253.408148][T14363] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 253.593067][T14373] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4127'. [ 254.196585][T14403] xt_cluster: node mask cannot exceed total number of nodes [ 254.233536][T14409] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 254.234927][T14409] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 254.435098][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'. [ 254.469881][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 254.678010][T14434] netlink: 'syz.3.4158': attribute type 3 has an invalid length. [ 255.109933][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 255.324682][T14473] netlink: 'syz.4.4179': attribute type 10 has an invalid length. [ 255.376406][T14473] team0: Device wg2 is of different type [ 255.481478][T14479] xt_hashlimit: invalid interval [ 255.928419][T14507] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 255.958176][T14508] netlink: 'syz.4.4196': attribute type 2 has an invalid length. [ 255.958204][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 255.971543][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971723][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.148922][T14520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.244967][T14524] netlink: 'syz.4.4205': attribute type 24 has an invalid length. [ 256.467036][T14537] openvswitch: netlink: Actions may not be safe on all matching packets [ 256.522324][T14542] geneve2: entered promiscuous mode [ 256.522351][T14542] geneve2: entered allmulticast mode [ 256.543439][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.543504][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.543541][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.543577][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.056595][T14570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'. [ 257.056624][T14570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'. [ 257.273030][T14581] netlink: 'syz.2.4230': attribute type 11 has an invalid length. [ 257.273059][T14581] netlink: 'syz.2.4230': attribute type 5 has an invalid length. [ 257.273074][T14581] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4230'. [ 257.718146][T14607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.763145][T14611] ip6t_frag: unknown flags 6 [ 257.862573][T14616] netlink: 'syz.0.4248': attribute type 9 has an invalid length. [ 257.939382][T14620] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4254'. [ 258.020262][T14626] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 258.020287][T14626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4253'. [ 258.236172][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 258.933060][T14676] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 259.172157][T14689] netlink: 'syz.4.4283': attribute type 1 has an invalid length. [ 259.316668][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4290'. [ 259.316697][T14699] validate_nla: 46 callbacks suppressed [ 259.316710][T14699] netlink: 'syz.4.4290': attribute type 6 has an invalid length. [ 259.597046][T14712] veth3: entered allmulticast mode [ 259.626841][T14718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4300'. [ 259.626870][T14718] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4300'. [ 259.626891][T14718] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4300'. [ 260.040632][T14692] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 260.233239][T14746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.540196][T14758] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 260.697015][T14765] ip6t_rt: address list match requested but addrnr is 0 [ 261.321903][T14795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.631650][T14817] openvswitch: netlink: IP tunnel dst address not specified [ 262.534598][T14866] openvswitch: netlink: Unknown key attributes 2 [ 262.628169][T14871] netlink: 'syz.2.4359': attribute type 3 has an invalid length. [ 262.628193][T14871] __nla_validate_parse: 5 callbacks suppressed [ 262.628205][T14871] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4359'. [ 262.704912][T14873] xt_hashlimit: size too large, truncated to 1048576 [ 262.705129][T14873] xt_hashlimit: max too large, truncated to 1048576 [ 262.705239][T14873] xt_hashlimit: invalid rate [ 263.065042][T14896] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4371'. [ 263.421944][T14916] xt_l2tp: v2 doesn't support IP mode [ 263.504230][T14920] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 263.571907][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4385'. [ 263.669455][T14932] netlink: 'syz.4.4388': attribute type 12 has an invalid length. [ 263.812974][T14932] bond5: option primary_reselect: invalid value (255) [ 263.822708][T14932] bond5 (unregistering): Released all slaves [ 263.874857][T14939] : entered promiscuous mode [ 264.262400][T14966] netlink: 'syz.0.4404': attribute type 4 has an invalid length. [ 264.278987][T14967] SET target dimension over the limit! [ 264.798206][T14996] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 265.096363][T15014] netlink: 'syz.1.4428': attribute type 1 has an invalid length. [ 265.096387][T15014] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4428'. [ 265.205373][T15016] sctp: [Deprecated]: syz.1.4431 (pid 15016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.205373][T15016] Use struct sctp_sack_info instead [ 265.395925][T15029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 265.476595][T15034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4436'. [ 265.742325][T15051] netlink: 'syz.1.4447': attribute type 64 has an invalid length. [ 265.742351][T15051] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4447'. [ 266.080447][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 266.492998][T15098] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 266.551550][T15101] netlink: 'syz.3.4471': attribute type 26 has an invalid length. [ 267.307813][T15145] netlink: 'syz.0.4493': attribute type 29 has an invalid length. [ 267.333072][T15149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4495'. [ 267.416650][T15151] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 267.416676][T15151] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4496'. [ 267.901573][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 267.901612][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4509'. [ 268.063536][T15191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.167918][T15194] xt_policy: too many policy elements [ 268.360635][T15209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4524'. [ 268.861293][T15239] lo: entered promiscuous mode [ 268.880954][T15239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.886410][T15243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4541'. [ 268.886448][T15243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4541'. [ 268.960625][T15243] gretap1: entered promiscuous mode [ 268.962306][T15243] gretap1: entered allmulticast mode [ 269.148059][T15257] netlink: 'syz.1.4548': attribute type 58 has an invalid length. [ 269.148086][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4548'. [ 269.678264][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'. [ 269.678375][T15281] bridge_slave_1: left allmulticast mode [ 269.678401][T15281] bridge_slave_1: left promiscuous mode [ 269.678699][T15281] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.728518][T15281] bridge_slave_0: left promiscuous mode [ 269.728830][T15281] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.814223][T15291] xt_NETMAP: bad rangesize 37. [ 269.963639][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 269.963670][T15298] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4568'. [ 270.023755][T15301] netlink: ct family unspecified [ 270.406002][T15322] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.560901][ T30] audit: type=1107 audit(1794530633.430:2): pid=15328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 270.661910][T15335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4586'. [ 270.860498][T15342] dvmrp0: entered allmulticast mode [ 271.091108][T15358] netlink: 'syz.1.4597': attribute type 3 has an invalid length. [ 272.010995][T15404] openvswitch: netlink: IP tunnel dst address not specified [ 273.126454][T15469] netlink: 'syz.0.4650': attribute type 2 has an invalid length. [ 274.011728][T15526] netlink: 'syz.0.4677': attribute type 10 has an invalid length. [ 274.031886][T15526] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.031915][T15526] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 274.032087][T15526] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 274.119499][T15529] netlink: 'syz.0.4681': attribute type 1 has an invalid length. [ 274.119525][T15529] netlink: 'syz.0.4681': attribute type 2 has an invalid length. [ 274.119539][T15529] __nla_validate_parse: 2 callbacks suppressed [ 274.119551][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4681'. [ 274.249469][T15535] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 274.493507][T15551] netlink: 'syz.0.4690': attribute type 61 has an invalid length. [ 274.752578][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4697'. [ 275.228161][T15595] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4712'. [ 275.392155][T15605] sock: sock_timestamping_bind_phc: sock not bind to device [ 275.962613][T15640] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 276.195895][T15653] netlink: 'syz.0.4738': attribute type 24 has an invalid length. [ 276.344894][T15660] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.4744'. [ 277.182488][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 277.192831][T15713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4767'. [ 277.277978][T15717] netlink: 'syz.1.4771': attribute type 12 has an invalid length. [ 278.000549][T15763] netlink: 'syz.4.4791': attribute type 2 has an invalid length. [ 278.421181][T15786] netlink: 'syz.2.4805': attribute type 13 has an invalid length. [ 278.773684][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 278.982535][T15806] netlink: 'syz.2.4814': attribute type 2 has an invalid length. [ 278.982565][T15806] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4814'. [ 279.398326][T15825] netlink: 'syz.2.4824': attribute type 1 has an invalid length. [ 279.664792][T15840] netlink: 'syz.3.4832': attribute type 20 has an invalid length. [ 279.664819][T15840] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.742822][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4835'. [ 280.314446][T15875] netlink: 'syz.3.4849': attribute type 4 has an invalid length. [ 280.352189][T15882] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 280.414446][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4856'. [ 280.563509][T15892] xt_TCPMSS: Only works on TCP SYN packets [ 280.632913][T15898] openvswitch: netlink: Duplicate key (type 16). [ 280.831265][T15909] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4867'. [ 280.993997][T15916] wg0 speed is unknown, defaulting to 1000 [ 280.997690][T15916] wg0 speed is unknown, defaulting to 1000 [ 280.999881][T15916] wg0 speed is unknown, defaulting to 1000 [ 281.048685][T15920] x_tables: duplicate underflow at hook 2 [ 281.277851][T15928] sctp: [Deprecated]: syz.4.4876 (pid 15928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.277851][T15928] Use struct sctp_sack_info instead [ 281.372241][T15916] infiniband syz0: set active [ 281.372308][ T10] wg0 speed is unknown, defaulting to 1000 [ 281.372390][T15916] infiniband syz0: added wg0 [ 281.422476][T15916] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 281.422518][T15916] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 281.422560][T15916] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 281.503082][T15916] RDS/IB: syz0: added [ 281.503144][T15916] smc: adding ib device syz0 with port count 1 [ 281.503165][T15916] smc: ib device syz0 port 1 has no pnetid [ 281.503247][ T5777] wg0 speed is unknown, defaulting to 1000 [ 281.527734][T15916] wg0 speed is unknown, defaulting to 1000 [ 281.827732][T15949] netlink: 'syz.1.4884': attribute type 10 has an invalid length. [ 281.843930][T15949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.927232][T15916] wg0 speed is unknown, defaulting to 1000 [ 282.119998][T15957] Cannot find add_set index 0 as target [ 282.238584][T15916] wg0 speed is unknown, defaulting to 1000 [ 282.331626][T15966] netlink: 'syz.1.4893': attribute type 2 has an invalid length. [ 282.331649][T15966] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4893'. [ 282.653966][T15982] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 282.744443][T15984] lo: left promiscuous mode [ 282.744652][T15984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.915558][T15916] wg0 speed is unknown, defaulting to 1000 [ 283.091730][T16000] netlink: 'syz.0.4910': attribute type 7 has an invalid length. [ 283.204886][T16002] netlink: 'syz.4.4914': attribute type 21 has an invalid length. [ 283.292369][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4915'. [ 283.292426][T16010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4915'. [ 283.292462][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4915'. [ 283.559902][T16022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.684564][T15916] wg0 speed is unknown, defaulting to 1000 [ 284.300692][T16049] ebt_among: dst integrity fail: 301 [ 284.636861][T16073] hsr0: entered allmulticast mode [ 284.636888][T16073] hsr_slave_0: entered allmulticast mode [ 284.636907][T16073] hsr_slave_1: entered allmulticast mode [ 284.960600][T16093] openvswitch: netlink: Actions may not be safe on all matching packets [ 285.010229][T16097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4956'. [ 285.035490][T16086] bond4: option lp_interval: invalid value (0) [ 285.035532][T16086] bond4: option lp_interval: allowed values 1 - 2147483647 [ 285.062889][T16086] bond4 (unregistering): Released all slaves [ 285.450868][T16120] syz.0.4968: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.451003][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.0.4968 Not tainted syzkaller #0 PREEMPT(full) [ 285.451029][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 285.451043][T16120] Call Trace: [ 285.451051][T16120] [ 285.451062][T16120] dump_stack_lvl+0xe8/0x150 [ 285.451104][T16120] warn_alloc+0x24d/0x270 [ 285.451132][T16120] ? stack_depot_save_flags+0x404/0x810 [ 285.451169][T16120] ? __pfx_warn_alloc+0x10/0x10 [ 285.451195][T16120] ? kasan_save_track+0x4f/0x80 [ 285.451227][T16120] ? __kasan_kmalloc+0x93/0xb0 [ 285.451260][T16120] ? xsk_init_queue+0x8a/0xe0 [ 285.451286][T16120] ? xsk_setsockopt+0x52a/0x960 [ 285.451314][T16120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.451352][T16120] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 285.451413][T16120] ? rcu_is_watching+0x16/0xb0 [ 285.451454][T16120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.451480][T16120] ? __kmalloc_cache_noprof+0x31c/0x600 [ 285.451511][T16120] ? __kmalloc_cache_noprof+0x148/0x600 [ 285.451543][T16120] ? xskq_create+0x56/0x220 [ 285.451578][T16120] xskq_create+0x148/0x220 [ 285.451607][T16120] ? xsk_init_queue+0x8a/0xe0 [ 285.451639][T16120] xsk_init_queue+0x8a/0xe0 [ 285.451670][T16120] xsk_setsockopt+0x52a/0x960 [ 285.451701][T16120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.451729][T16120] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.451775][T16120] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.451805][T16120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.451835][T16120] do_sock_setsockopt+0x17c/0x1b0 [ 285.451866][T16120] __x64_sys_setsockopt+0x13d/0x1b0 [ 285.451898][T16120] do_syscall_64+0x166/0x520 [ 285.451929][T16120] ? trace_irq_disable+0x3b/0x140 [ 285.451991][T16120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.452014][T16120] ? clear_bhb_loop+0x70/0xc0 [ 285.452044][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.452066][T16120] RIP: 0033:0x7f0cb85a94d9 [ 285.452087][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.452107][T16120] RSP: 002b:00007f0cb9529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.452132][T16120] RAX: ffffffffffffffda RBX: 00007f0cb8825fa0 RCX: 00007f0cb85a94d9 [ 285.452148][T16120] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 285.452163][T16120] RBP: 00007f0cb863804e R08: 0000000000000004 R09: 0000000000000000 [ 285.452177][T16120] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.452191][T16120] R13: 00007f0cb8826038 R14: 00007f0cb8825fa0 R15: 00007ffd70b68dc8 [ 285.452229][T16120] [ 285.470759][T16120] Mem-Info: [ 285.470778][T16120] active_anon:5786 inactive_anon:6 isolated_anon:0 [ 285.470778][T16120] active_file:3 inactive_file:43207 isolated_file:0 [ 285.470778][T16120] unevictable:0 dirty:191 writeback:0 [ 285.470778][T16120] slab_reclaimable:11488 slab_unreclaimable:100131 [ 285.470778][T16120] mapped:29083 shmem:524 pagetables:1303 [ 285.470778][T16120] sec_pagetables:0 bounce:0 [ 285.470778][T16120] kernel_misc_reclaimable:0 [ 285.470778][T16120] free:1322453 free_pcp:8686 free_cma:0 [ 285.470840][T16120] Node 0 active_anon:23144kB inactive_anon:24kB active_file:12kB inactive_file:172640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116332kB dirty:764kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12600kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.470902][T16120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 285.470965][T16120] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.482748][T16120] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 285.482799][T16120] Node 0 DMA32 free:1332000kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23144kB inactive_anon:24kB active_file:12kB inactive_file:172640kB unevictable:0kB writepending:764kB zspages:0kB present:3129332kB managed:2522784kB mlocked:0kB bounce:0kB free_pcp:34840kB local_pcp:18344kB free_cma:0kB [ 285.482867][T16120] lowmem_reserve[]: 0 0 1 1 1 [ 285.482904][T16120] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 285.482995][T16120] lowmem_reserve[]: 0 0 0 0 0 [ 285.483033][T16120] Node 1 Normal free:3942452kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.483099][T16120] lowmem_reserve[]: 0 0 0 0 0 [ 285.483137][T16120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.484652][T16120] Node 0 DMA32: 514*4kB (UM) 1309*8kB (UE) 567*16kB (UME) 532*32kB (UME) 55*64kB (UME) 11*128kB (M) 55*256kB (UME) 15*512kB (UME) 11*1024kB (ME) 9*2048kB (UM) 302*4096kB (UM) = 1332000kB [ 285.484853][T16120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.484970][T16120] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 8*16kB (UM) 10*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942452kB [ 285.485158][T16120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.485177][T16120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.485194][T16120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.485212][T16120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.485229][T16120] 43730 total pagecache pages [ 285.485243][T16120] 0 pages in swap cache [ 285.496316][T16120] Free swap = 124996kB [ 285.496359][T16120] Total swap = 124996kB [ 285.496389][T16120] 2097051 pages RAM [ 285.496411][T16120] 0 pages HighMem/MovableOnly [ 285.496425][T16120] 434391 pages reserved [ 285.496451][T16120] 0 pages cma reserved [ 286.332067][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4974'. [ 286.493155][T16141] netlink: zone id is out of range [ 286.500344][T16141] netlink: zone id is out of range [ 286.500360][T16141] netlink: zone id is out of range [ 286.500369][T16141] netlink: zone id is out of range [ 286.500378][T16141] netlink: zone id is out of range [ 286.539136][T16142] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 286.539162][T16142] netlink: 'syz.0.4979': attribute type 3 has an invalid length. [ 286.539176][T16142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4979'. [ 287.000319][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4991'. [ 287.191108][T16182] bond0: (slave ip6tnl0): refused to change device type [ 287.371385][T16189] netlink: 'syz.3.5001': attribute type 11 has an invalid length. [ 287.442770][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 287.471450][T16195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.512654][T16197] netlink: 'syz.1.5006': attribute type 2 has an invalid length. [ 287.512677][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5006'. [ 287.915406][T16223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.100286][T16235] netlink: 'syz.0.5025': attribute type 1 has an invalid length. [ 288.432219][T16253] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5036'. [ 288.432260][T16253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.649331][T16267] netlink: 'syz.2.5041': attribute type 1 has an invalid length. [ 288.649356][T16267] netlink: 'syz.2.5041': attribute type 2 has an invalid length. [ 288.930854][T16283] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 289.168276][T16297] netlink: 'syz.4.5056': attribute type 21 has an invalid length. [ 289.168306][T16297] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.262031][T16301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5057'. [ 289.475245][T16313] netlink: 'syz.3.5063': attribute type 1 has an invalid length. [ 289.475269][T16313] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5063'. [ 290.030192][T16336] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5073'. [ 290.030481][T16336] 0·: renamed from hsr0 (while UP) [ 290.059541][T16336] 0·: entered allmulticast mode [ 290.059566][T16336] hsr_slave_0: entered allmulticast mode [ 290.059585][T16336] hsr_slave_1: entered allmulticast mode [ 290.062703][T16336] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 290.413867][T16354] netlink: Unknown conntrack attr (0) [ 290.629964][T16365] ip6t_REJECT: ECHOREPLY is not supported [ 291.532402][ T5298] veth0_vlan: left promiscuous mode [ 291.577485][ T10] veth0_vlan: entered promiscuous mode [ 291.909230][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5114'. [ 291.958658][T16436] bond4: option xmit_hash_policy: invalid value (64) [ 291.976939][T16436] bond4 (unregistering): Released all slaves [ 292.249920][T16451] netlink: 'syz.2.5119': attribute type 1 has an invalid length. [ 292.249947][T16451] netlink: 'syz.2.5119': attribute type 2 has an invalid length. [ 292.744988][T16481] ipt_rpfilter: unknown options [ 293.438325][T16519] netlink: 'syz.2.5147': attribute type 3 has an invalid length. [ 293.539087][T16522] netlink: 'syz.0.5152': attribute type 15 has an invalid length. [ 294.259176][T16562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5168'. [ 294.277176][T16564] xt_LOG: level 8 >= 8 [ 294.803650][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5183'. [ 295.116140][T16607] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 295.246091][T16619] net_ratelimit: 2 callbacks suppressed [ 295.246114][T16619] ip_tables: iptables: counters copy to user failed while replacing table [ 295.409808][T16627] Bluetooth: MGMT ver 1.23 [ 295.425042][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5200'. [ 295.529492][T16633] Bluetooth: MGMT ver 1.23 [ 295.651739][T16639] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5204'. [ 296.321695][T16680] team0: Device ipvlan0 failed to register rx_handler [ 296.676850][T16702] veth0_to_bond: entered allmulticast mode [ 296.941146][T16718] Bluetooth: MGMT ver 1.23 [ 297.039453][T16726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.061377][T16724] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 297.149230][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5252'. [ 297.149255][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5252'. [ 297.149282][T16728] netlink: 'syz.1.5252': attribute type 12 has an invalid length. [ 297.149297][T16728] netlink: 'syz.1.5252': attribute type 11 has an invalid length. [ 297.666632][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5268'. [ 297.681645][T16764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5267'. [ 297.808561][T16769] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5271'. [ 297.955008][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5275'. [ 298.090521][T16785] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5277'. [ 298.242333][T16796] netlink: 'syz.4.5283': attribute type 29 has an invalid length. [ 298.391431][T16804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5288'. [ 298.391475][T16804] netlink: 'syz.0.5288': attribute type 1 has an invalid length. [ 298.461053][T16806] ip_tables: iptables: counters copy to user failed while replacing table [ 299.781865][T16882] ip_tables: iptables: counters copy to user failed while replacing table [ 300.244228][T16912] netlink: 'syz.1.5337': attribute type 5 has an invalid length. [ 300.277112][T16913] ip_tables: iptables: counters copy to user failed while replacing table [ 301.320351][T16958] tipc: Started in network mode [ 301.320392][T16958] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 301.340324][T16958] tipc: Enabled bearer , priority 10 [ 302.160256][T16991] netlink: 'syz.2.5375': attribute type 1 has an invalid length. [ 302.447659][ T5777] tipc: Node number set to 10070698 [ 302.552482][T17011] __nla_validate_parse: 2 callbacks suppressed [ 302.552505][T17011] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5386'. [ 302.785757][T17025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5391'. [ 303.047343][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5398'. [ 303.117383][T17046] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 303.322389][T17059] netlink: 'syz.4.5405': attribute type 34 has an invalid length. [ 303.322424][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 303.479643][T17066] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.517563][T17059] Zero length message leads to an empty skb [ 304.122995][T17102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5421'. [ 304.526915][T17125] netlink: 'syz.3.5431': attribute type 25 has an invalid length. [ 304.978157][T17151] raw_sendmsg: syz.3.5443 forgot to set AF_INET. Fix it! [ 305.147470][T17159] sctp: [Deprecated]: syz.1.5445 (pid 17159) Use of int in max_burst socket option. [ 305.147470][T17159] Use struct sctp_assoc_value instead [ 305.385929][T17173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5448'. [ 305.385961][T17173] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5448'. [ 305.385978][T17173] netlink: 'syz.0.5448': attribute type 5 has an invalid length. [ 305.385993][T17173] netlink: 'syz.0.5448': attribute type 6 has an invalid length. [ 305.386006][T17173] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5448'. [ 305.531589][T17175] team0: Device gtp0 is up. Set it down before adding it as a team port [ 305.734286][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'. [ 305.734313][T17189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5455'. [ 306.069061][T17203] netlink: 'syz.4.5460': attribute type 2 has an invalid length. [ 306.470890][T17229] tipc: Failed to obtain node identity [ 306.470927][T17229] tipc: Enabling of bearer rejected, failed to enable media [ 306.887256][T17256] netlink: 'syz.2.5485': attribute type 1 has an invalid length. [ 307.165934][T17272] Bluetooth: hci0: unsupported parameter 5135 [ 307.165960][T17272] Bluetooth: hci0: unsupported parameter 8192 [ 307.165974][T17272] Bluetooth: hci0: unsupported parameter 5135 [ 307.165986][T17272] Bluetooth: hci0: unsupported parameter 8192 [ 307.426663][T17285] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 307.514241][ T30] audit: type=1107 audit(1794530670.390:3): pid=17291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 307.650944][T17296] tipc: Started in network mode [ 307.650976][T17296] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 307.668576][T17296] tipc: Enabled bearer , priority 10 [ 307.757348][T17306] __nla_validate_parse: 3 callbacks suppressed [ 307.757369][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5511'. [ 307.926208][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'. [ 307.926567][T17314] xt_cgroup: path and classid specified [ 309.291523][ T9738] tipc: Node number set to 4269801491 [ 309.496709][T17362] netlink: 'syz.0.5538': attribute type 7 has an invalid length. [ 309.496734][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5538'. [ 309.496769][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5538'. [ 310.194589][T17405] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 310.214333][T17406] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5559'. [ 310.214358][T17406] nbd: illegal input index -8454144 [ 310.632539][T17430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5569'. [ 310.680263][T17432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.680283][T17432] IPv6: NLM_F_CREATE should be set when creating new route [ 310.680327][T17432] IPv6: NLM_F_CREATE should be set when creating new route [ 310.680352][T17432] IPv6: NLM_F_CREATE should be set when creating new route [ 310.681233][T17432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.814811][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5576'. [ 311.147314][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5585'. [ 311.842140][T17499] netlink: 'syz.4.5605': attribute type 2 has an invalid length. [ 311.842168][T17499] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5605'. [ 311.988867][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5611'. [ 312.821395][T17557] __nla_validate_parse: 2 callbacks suppressed [ 312.821417][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5633'. [ 312.862144][T17561] netlink: 'syz.1.5634': attribute type 1 has an invalid length. [ 313.048811][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5643'. [ 313.108781][T17576] netlink: 'syz.3.5640': attribute type 3 has an invalid length. [ 313.778055][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5663'. [ 313.778085][T17620] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5663'. [ 313.778140][T17620] netlink: 'syz.0.5663': attribute type 5 has an invalid length. [ 313.985915][T17626] wireguard1: entered promiscuous mode [ 314.579053][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5683'. [ 314.912816][T17686] ip_tables: iptables: counters copy to user failed while replacing table [ 315.039758][T17694] xt_IDLETIMER: timeout value is too big [ 315.572164][T17724] nftables ruleset with unbound set [ 315.706587][T17730] ip_tables: iptables: counters copy to user failed while replacing table [ 316.041246][T17740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.261488][T17740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.462487][T17774] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.463207][T17740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.567882][T17776] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5737'. [ 317.040506][T17803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5745'. [ 317.040531][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'. [ 317.040551][T17803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5745'. [ 317.040566][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'. [ 317.406073][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.406135][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956523][T17848] tipc: MTU too low for tipc bearer [ 318.256087][T17865] ip_tables: iptables: counters copy to user failed while replacing table [ 318.272639][T17866] __nla_validate_parse: 2 callbacks suppressed [ 318.272659][T17866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5771'. [ 318.931860][T17903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5785'. [ 319.157806][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.297104][T17919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5791'. [ 319.489397][T17928] netlink: 'syz.2.5794': attribute type 2 has an invalid length. [ 319.823936][T17947] xt_hashlimit: size too large, truncated to 1048576 [ 320.350617][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 321.196759][T18014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.392094][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5828'. [ 322.043866][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 322.114514][T18066] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5842'. [ 322.473525][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5851'. [ 322.525310][T18092] Bluetooth: hci0: unsupported parameter 5135 [ 322.525338][T18092] Bluetooth: hci0: unsupported parameter 8192 [ 322.525351][T18092] Bluetooth: hci0: unsupported parameter 5135 [ 322.525364][T18092] Bluetooth: hci0: unsupported parameter 8192 [ 322.576306][T18091] xt_hashlimit: size too large, truncated to 1048576 [ 322.739313][T18102] ip_tables: iptables: counters copy to user failed while replacing table [ 323.215869][T18122] ip_tables: iptables: counters copy to user failed while replacing table [ 323.602055][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 324.911319][T18212] netlink: 'syz.4.5902': attribute type 2 has an invalid length. [ 325.950602][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5928'. [ 325.950631][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5928'. [ 325.950661][T18269] netlink: 'syz.4.5928': attribute type 14 has an invalid length. [ 325.950678][T18269] netlink: 'syz.4.5928': attribute type 13 has an invalid length. [ 326.555329][T18292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5939'. [ 326.674520][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5941'. [ 327.780168][T18349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 328.512493][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 329.108739][T18423] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6001'. [ 329.189729][T18427] vlan2: entered promiscuous mode [ 329.189757][T18427] bridge0: entered promiscuous mode [ 329.189973][T18427] vlan2: entered allmulticast mode [ 329.189990][T18427] bridge0: entered allmulticast mode [ 329.447916][T18438] ip_tables: iptables: counters copy to user failed while replacing table [ 329.568932][T18443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6012'. [ 329.650629][T18448] IPVS: ip_vs_add_dest(): server weight less than zero [ 329.836725][T18457] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6015'. [ 330.049998][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6022'. [ 330.050027][T18470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6022'. [ 330.680314][T18506] vlan1: entered allmulticast mode [ 330.680341][T18506] veth0_vlan: entered allmulticast mode [ 331.169247][T18534] tipc: Started in network mode [ 331.169267][T18534] tipc: Node identity , cluster identity 4711 [ 331.169286][T18534] tipc: Failed to obtain node identity [ 331.169313][T18534] tipc: Enabling of bearer rejected, failed to enable media [ 331.350918][T18543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.723673][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6067'. [ 332.231690][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 332.651438][T18613] lo: Caught tx_queue_len zero misconfig [ 332.692654][T18618] netlink: 'syz.3.6095': attribute type 83 has an invalid length. [ 332.970505][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6099'. [ 333.688809][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6114'. [ 333.688835][T18663] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6114'. [ 333.688852][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6114'. [ 334.102913][T18686] ip_tables: iptables: counters copy to user failed while replacing table [ 334.623385][ T30] audit: type=1800 audit(1794530697.490:4): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6134" name="memory.events" dev="tmpfs" ino=6125 res=0 errno=-22 [ 334.668032][ T30] audit: type=1804 audit(1794530697.530:5): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6134" name="/newroot/1220/memory.events" dev="tmpfs" ino=6125 res=1 errno=0 [ 335.124291][T18732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6142'. [ 335.357612][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6147'. [ 335.585954][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6152'. [ 335.636493][T18762] ip_tables: iptables: counters copy to user failed while replacing table [ 335.705365][T18765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6154'. [ 336.980470][T18839] netlink: 'syz.1.6184': attribute type 3 has an invalid length. [ 337.289624][T18856] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.289826][T18856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.289839][T18856] IPv6: NLM_F_CREATE should be set when creating new route [ 337.289871][T18856] IPv6: NLM_F_CREATE should be set when creating new route [ 337.450997][T18863] netlink: 'syz.3.6194': attribute type 1 has an invalid length. [ 337.451023][T18863] netlink: 'syz.3.6194': attribute type 3 has an invalid length. [ 337.451038][T18863] __nla_validate_parse: 1 callbacks suppressed [ 337.451050][T18863] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6194'. [ 337.451080][T18863] NCSI netlink: No device for ifindex 813332851 [ 337.504242][T18867] Bluetooth: hci0: unsupported parameter 5135 [ 337.504266][T18867] Bluetooth: hci0: unsupported parameter 8192 [ 337.504279][T18867] Bluetooth: hci0: unsupported parameter 5135 [ 337.504291][T18867] Bluetooth: hci0: unsupported parameter 8192 [ 337.734766][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6200'. [ 338.570846][T18926] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6219'. [ 338.759219][T18936] netlink: 'syz.1.6223': attribute type 2 has an invalid length. [ 338.759245][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6223'. [ 338.865072][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 338.865107][T18943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6227'. [ 338.865125][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6227'. [ 339.003173][ T1181] IPVS: starting estimator thread 0... [ 339.093377][T18950] IPVS: using max 27 ests per chain, 64800 per kthread [ 340.041365][T19009] netlink: 'syz.2.6254': attribute type 2 has an invalid length. [ 340.661728][T19041] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6271'. [ 340.662999][T19041] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6271'. [ 340.846904][T19051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6274'. [ 340.846935][T19051] nbd: illegal input index 65508 [ 340.972791][T19054] Bluetooth: hci0: unsupported parameter 5134 [ 340.972819][T19054] Bluetooth: hci0: unsupported parameter 8192 [ 340.972835][T19054] Bluetooth: hci0: unsupported parameter 5134 [ 340.972849][T19054] Bluetooth: hci0: unsupported parameter 8192 [ 341.660059][T19095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.807660][T19099] ip_tables: iptables: counters copy to user failed while replacing table [ 342.746088][T19157] netlink: 'syz.1.6329': attribute type 2 has an invalid length. [ 342.822840][T19165] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 343.118273][T19181] Bluetooth: hci0: unsupported parameter 5135 [ 343.118296][T19181] Bluetooth: hci0: unsupported parameter 8192 [ 343.118310][T19181] Bluetooth: hci0: unsupported parameter 5135 [ 343.118323][T19181] Bluetooth: hci0: unsupported parameter 8192 [ 343.226048][T19187] __nla_validate_parse: 5 callbacks suppressed [ 343.226068][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6341'. [ 343.227343][T19187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6341'. [ 343.563588][T19203] netlink: 'syz.2.6349': attribute type 29 has an invalid length. [ 343.638154][ T1181] IPVS: starting estimator thread 0... [ 343.723563][T19207] IPVS: using max 28 ests per chain, 67200 per kthread [ 343.783758][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6355'. [ 344.358703][T19248] netlink: 'syz.0.6371': attribute type 62 has an invalid length. [ 344.643611][T19264] netlink: 'syz.2.6379': attribute type 2 has an invalid length. [ 345.612146][T19290] ip6gre1: entered allmulticast mode [ 345.621659][ T1181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.758021][T19300] netlink: 'syz.4.6395': attribute type 12 has an invalid length. [ 345.758051][T19300] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6395'. [ 346.121452][T19320] ip_tables: iptables: counters copy to user failed while replacing table [ 346.328080][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'. [ 346.328118][T19333] netlink: 'syz.0.6411': attribute type 3 has an invalid length. [ 346.391797][T19341] ip6tnl0: Caught tx_queue_len zero misconfig [ 346.460475][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6416'. [ 346.566298][T19345] netlink: 'syz.0.6419': attribute type 1 has an invalid length. [ 346.568736][T19347] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 346.949711][T19372] rdma_op ffff88807ecaaa38 conn xmit_rdma 0000000000000000 [ 348.023396][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6460'. [ 348.447861][T19458] pim6reg: entered allmulticast mode [ 348.664227][T19469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6478'. [ 348.851407][T19478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6483'. [ 349.040408][T19490] netlink: 'syz.4.6486': attribute type 4 has an invalid length. [ 349.564016][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.818419][T19531] x_tables: ip_tables: owner match: used from hooks INPUT, but only valid from OUTPUT/POSTROUTING [ 349.843098][T19532] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 350.186174][T19552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6518'. [ 350.186219][T19552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6518'. [ 350.574223][T19578] Bluetooth: MGMT ver 1.23 [ 350.640294][T19581] netlink: 'syz.0.6534': attribute type 64 has an invalid length. [ 350.640321][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6534'. [ 350.855705][T19592] Bluetooth: hci0: unsupported parameter 5134 [ 350.855730][T19592] Bluetooth: hci0: unsupported parameter 8192 [ 350.855745][T19592] Bluetooth: hci0: unsupported parameter 5134 [ 350.855758][T19592] Bluetooth: hci0: unsupported parameter 8192 [ 351.299420][T19619] netlink: 22960 bytes leftover after parsing attributes in process `syz.0.6550'. [ 352.072366][T19659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.103540][T19664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6571'. [ 352.302715][T19673] netlink: 'syz.4.6579': attribute type 3 has an invalid length. [ 352.838406][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6594'. [ 352.924879][T19714] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 353.307864][T19734] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6606'. [ 355.008241][T19827] veth3: entered allmulticast mode [ 355.463779][T19856] ip_tables: iptables: counters copy to user failed while replacing table [ 355.491470][T19858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.735368][T19870] ip_tables: iptables: counters copy to user failed while replacing table [ 355.954877][T19885] netlink: 'syz.0.6676': attribute type 32 has an invalid length. [ 355.954903][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'. [ 356.022976][T19888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6679'. [ 356.040773][T19885] bond4: option coupled_control: invalid value (192) [ 356.066598][T19885] bond4 (unregistering): Released all slaves [ 356.395282][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6687'. [ 357.204860][T19953] xt_hashlimit: size too large, truncated to 1048576 [ 357.723484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.944549][T19995] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6730'. [ 357.949061][T19993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6731'. [ 358.043116][T19999] Bluetooth: hci0: unsupported parameter 5135 [ 358.043142][T19999] Bluetooth: hci0: unsupported parameter 8192 [ 358.043156][T19999] Bluetooth: hci0: unsupported parameter 5135 [ 358.043170][T19999] Bluetooth: hci0: unsupported parameter 8192 [ 358.335235][T20015] ip_tables: iptables: counters copy to user failed while replacing table [ 358.794778][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 359.780817][T20098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6781'. [ 360.755975][T20149] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6806'. [ 360.756008][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6806'. [ 360.827215][T20151] xt_IDLETIMER: label is empty or not nul-terminated [ 360.906360][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'. [ 361.579507][T20195] __nla_validate_parse: 1 callbacks suppressed [ 361.579529][T20195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6828'. [ 361.641358][T20201] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.247809][T20230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6846'. [ 362.301797][T20232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6847'. [ 362.301828][T20232] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6847'. [ 362.301845][T20232] netlink: 'syz.1.6847': attribute type 6 has an invalid length. [ 362.301860][T20232] netlink: 'syz.1.6847': attribute type 5 has an invalid length. [ 362.301874][T20232] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6847'. [ 362.506291][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6849'. [ 362.649566][T20242] vlan3: entered allmulticast mode [ 362.927367][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6858'. [ 363.003349][ T5642] Bluetooth: hci4: command tx timeout [ 363.406312][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 363.522088][T20282] netlink: 'syz.4.6871': attribute type 3 has an invalid length. [ 363.522121][T20282] netlink: 'syz.4.6871': attribute type 1 has an invalid length. [ 363.522137][T20282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6871'. [ 364.092980][T20307] xt_cgroup: invalid path, errno=-2 [ 364.683716][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6902'. [ 365.335397][T20384] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.523507][ T4953] Bluetooth: hci4: command 0x0405 tx timeout [ 366.897838][T20459] netlink: 'syz.2.6954': attribute type 9 has an invalid length. [ 367.546365][T20498] Bluetooth: hci0: unsupported parameter 5161 [ 367.546391][T20498] Bluetooth: hci0: unsupported parameter 8192 [ 367.546405][T20498] Bluetooth: hci0: unsupported parameter 5161 [ 367.546418][T20498] Bluetooth: hci0: unsupported parameter 8192 [ 367.933806][T20521] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.933912][T20521] netlink: 'syz.0.6985': attribute type 1 has an invalid length. [ 368.341862][T20536] __nla_validate_parse: 6 callbacks suppressed [ 368.341885][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6993'. [ 368.377003][T20534] pim6reg: left allmulticast mode [ 368.431446][T20539] ip_tables: iptables: counters copy to user failed while replacing table [ 368.608091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.193964][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'. [ 369.426468][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7020'. [ 369.466107][T20601] netlink: 'syz.3.7021': attribute type 2 has an invalid length. [ 369.687784][T20611] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7028'. [ 370.071621][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7037'. [ 370.101489][T20632] Bluetooth: MGMT ver 1.23 [ 370.461424][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7048'. [ 371.216270][T20689] ip_tables: iptables: counters copy to user failed while replacing table [ 371.426076][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7068'. [ 371.465575][T20696] bond6: Invalid ad_actor_system MAC address. [ 371.465598][T20696] bond6: option ad_actor_system: invalid value (1) [ 371.499016][T20696] bond6 (unregistering): Released all slaves [ 371.867247][T20721] tipc: Enabling of bearer rejected, media not registered [ 372.123593][ T4953] Bluetooth: hci4: command 0x0405 tx timeout [ 372.145007][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7087'. [ 372.145404][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7087'. [ 372.379726][T20748] Bluetooth: hci0: unsupported parameter 5135 [ 372.379759][T20748] Bluetooth: hci0: unsupported parameter 8192 [ 372.379776][T20748] Bluetooth: hci0: unsupported parameter 5135 [ 372.379791][T20748] Bluetooth: hci0: unsupported parameter 8192 [ 372.638841][T20760] netlink: 'syz.3.7098': attribute type 2 has an invalid length. [ 373.052127][T20786] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 373.555137][T20811] netlink: 'syz.4.7122': attribute type 4 has an invalid length. [ 373.724476][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.097189][T20840] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7134'. [ 374.544419][T20863] atomic_op ffff888055f109e0 conn xmit_atomic 0000000000000000 [ 374.564597][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'. [ 374.669124][T20869] netlink: 'syz.2.7149': attribute type 49 has an invalid length. [ 374.874363][T20883] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7155'. [ 375.016690][T20888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7158'. [ 375.961482][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7183'. [ 376.066719][T20951] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7188'. [ 376.066745][T20951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7188'. [ 376.136942][T20954] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 376.291188][T20965] netlink: 'syz.1.7196': attribute type 29 has an invalid length. [ 376.305869][T20965] netlink: 'syz.1.7196': attribute type 29 has an invalid length. [ 376.407272][ T4953] Bluetooth: hci1: Malformed HCI Event [ 376.798908][T20995] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7211'. [ 376.926591][T21002] ip_tables: iptables: counters copy to user failed while replacing table [ 377.041604][T20998] IPVS: Scheduler module ip_vs_mh not found [ 377.184363][T21015] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7217'. [ 377.680032][T21038] netlink: 'syz.2.7230': attribute type 3 has an invalid length. [ 377.680152][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7230'. [ 378.157842][T21063] netlink: 'syz.2.7243': attribute type 3 has an invalid length. [ 378.623467][T21089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 378.847459][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847550][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.521523][T21123] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 379.756462][T21134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.785419][T21138] IPVS: length: 8 != 1152 [ 380.087609][T21152] netlink: 'syz.2.7284': attribute type 2 has an invalid length. [ 380.478891][T21174] Bluetooth: hci0: unsupported parameter 5134 [ 380.478918][T21174] Bluetooth: hci0: unsupported parameter 8192 [ 380.478933][T21174] Bluetooth: hci0: unsupported parameter 5134 [ 380.478947][T21174] Bluetooth: hci0: unsupported parameter 8192 [ 380.998916][T21202] netlink: 'syz.1.7308': attribute type 29 has an invalid length. [ 381.005370][T21202] netlink: 'syz.1.7308': attribute type 29 has an invalid length. [ 381.113801][T21209] __nla_validate_parse: 2 callbacks suppressed [ 381.113822][T21209] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7310'. [ 381.234895][T21213] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 381.370651][T21221] tipc: Started in network mode [ 381.370689][T21221] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 381.371324][T21221] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 381.405327][T21221] tipc: Enabled bearer , priority 10 [ 382.493726][ T5777] tipc: Node number set to 1 [ 383.446978][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7360'. [ 383.447013][T21311] netlink: 79 bytes leftover after parsing attributes in process `syz.4.7360'. [ 383.966124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 384.450343][T21368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7387'. [ 384.953538][T21395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7401'. [ 384.953580][T21395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7401'. [ 385.688343][T21437] tipc: Started in network mode [ 385.688378][T21437] tipc: Node identity ac14142f, cluster identity 4711 [ 385.689155][T21437] tipc: Enabling of bearer rejected, failed to enable media [ 385.856788][T21451] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7426'. [ 386.065129][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7430'. [ 386.177656][T21466] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7437'. [ 386.352929][T21475] netlink: 'syz.0.7440': attribute type 13 has an invalid length. [ 386.438103][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7443'. [ 387.360420][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7468'. [ 387.360448][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7468'. [ 387.492550][T21540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.492570][T21540] IPv6: NLM_F_CREATE should be set when creating new route [ 387.492598][T21540] IPv6: NLM_F_CREATE should be set when creating new route [ 387.979150][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7486'. [ 388.934265][T21618] gretap0: entered promiscuous mode [ 388.937519][T21618] vlan2: entered promiscuous mode [ 389.665721][T21664] xt_IDLETIMER: label is empty or not nul-terminated [ 389.692797][T21666] Bluetooth: hci0: unsupported parameter 5135 [ 389.692831][T21666] Bluetooth: hci0: unsupported parameter 8192 [ 389.692847][T21666] Bluetooth: hci0: unsupported parameter 5135 [ 389.692863][T21666] Bluetooth: hci0: unsupported parameter 8192 [ 389.750727][T21668] netlink: 'syz.4.7534': attribute type 1 has an invalid length. [ 389.750753][T21668] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7534'. [ 390.296637][T21698] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7549'. [ 391.174447][T21754] nbd: must specify a size in bytes for the device [ 391.329118][T21763] Bluetooth: hci0: unsupported parameter 5161 [ 391.329146][T21763] Bluetooth: hci0: unsupported parameter 8192 [ 391.329161][T21763] Bluetooth: hci0: unsupported parameter 5161 [ 391.329175][T21763] Bluetooth: hci0: unsupported parameter 8192 [ 391.389966][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7582'. [ 391.566255][T21774] tipc: Started in network mode [ 391.566290][T21774] tipc: Node identity e0000001, cluster identity 4711 [ 391.566344][T21774] tipc: Enabling of bearer rejected, failed to enable media [ 392.338273][T21819] xt_hashlimit: size too large, truncated to 1048576 [ 392.438678][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7610'. [ 392.758457][T21842] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7618'. [ 392.931891][T21852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7623'. [ 393.241831][T21866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7629'. [ 393.241859][T21866] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7629'. [ 393.241910][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7629'. [ 393.399311][T21872] bond_slave_1: entered allmulticast mode [ 394.174826][T21912] Bluetooth: hci0: unsupported parameter 5135 [ 394.174857][T21912] Bluetooth: hci0: unsupported parameter 8192 [ 394.174873][T21912] Bluetooth: hci0: unsupported parameter 5135 [ 394.174888][T21912] Bluetooth: hci0: unsupported parameter 8192 [ 395.231177][T21956] sit2: entered promiscuous mode [ 395.231204][T21956] sit2: entered allmulticast mode [ 395.734950][T21987] netlink: 'syz.3.7686': attribute type 18 has an invalid length. [ 395.773495][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.784162][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.784791][ T483] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.784833][ T483] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.105431][T22009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7694'. [ 396.154744][T22011] netlink: 75 bytes leftover after parsing attributes in process `syz.3.7695'. [ 396.341264][T22014] netlink: 'syz.3.7696': attribute type 32 has an invalid length. [ 396.341290][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7696'. [ 396.404536][T22014] bond3: Setting coupled_control to off (0) [ 396.602608][T22026] netlink: 292 bytes leftover after parsing attributes in process `syz.3.7703'. [ 396.928759][T22046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7711'. [ 397.241017][T22067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7722'. [ 397.290305][T22070] netlink: 'syz.4.7724': attribute type 29 has an invalid length. [ 397.290329][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7724'. [ 397.291073][ T1181] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.291323][ T1181] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.291475][T22070] netlink: 'syz.4.7724': attribute type 29 has an invalid length. [ 397.291493][T22070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7724'. [ 397.314256][ T9738] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.419765][T22074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 397.510211][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7725'. [ 397.510240][T22076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7725'. [ 397.838650][T22092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7734'. [ 397.880508][ T9738] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.949393][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 398.005240][T22098] team0: Caught tx_queue_len zero misconfig [ 398.228837][ T9738] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.481922][T22111] erspan0: entered promiscuous mode [ 399.529425][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7757'. [ 401.403760][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.614867][T22220] __nla_validate_parse: 4 callbacks suppressed [ 401.614890][T22220] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7792'. [ 401.662306][T22223] veth0_to_bridge: entered promiscuous mode [ 401.709641][T22222] veth0_to_bridge: left promiscuous mode [ 401.826888][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7796'. [ 401.826930][T22227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7796'. [ 402.127862][T22237] netlink: 'syz.2.7799': attribute type 2 has an invalid length. [ 402.366103][T22236] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.678703][T22249] sctp: [Deprecated]: syz.3.7805 (pid 22249) Use of int in max_burst socket option. [ 402.678703][T22249] Use struct sctp_assoc_value instead [ 403.278870][ T4953] block nbd0: Receive control failed (result -32) [ 403.650566][T22281] xt_hashlimit: size too large, truncated to 1048576 [ 403.961898][T22286] netlink: 37 bytes leftover after parsing attributes in process `syz.3.7822'. [ 404.076082][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7825'. [ 404.450182][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7826'. [ 404.755361][T22311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7833'. [ 404.840754][T22315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7837'. [ 404.968459][T22320] bond0: Caught tx_queue_len zero misconfig [ 405.083561][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.744236][T22376] ip_tables: iptables: counters copy to user failed while replacing table [ 407.307885][T22400] netlink: 'syz.4.7877': attribute type 2 has an invalid length. [ 407.542429][T22409] netlink: 34 bytes leftover after parsing attributes in process `syz.0.7882'. [ 407.632172][T22412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7883'. [ 407.874942][T22419] ip_tables: iptables: counters copy to user failed while replacing table [ 407.875168][T22416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7887'. [ 408.534109][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7897'. [ 408.685046][T22449] geneve0: Caught tx_queue_len zero misconfig [ 408.966533][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7905'. [ 408.966571][T22459] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7905'. [ 409.197341][T22459] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7905'. [ 409.563651][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 409.673057][T22472] udevd[22472]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.709534][T22468] udevd[22468]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.947998][T22496] netlink: 576 bytes leftover after parsing attributes in process `syz.0.7920'. [ 410.092643][T22497] tipc: Enabled bearer , priority 10 [ 410.500098][T22509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7925'. [ 410.502289][T22508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7926'. [ 410.502387][T22508] ip6gre0: Caught tx_queue_len zero misconfig [ 410.878741][T22520] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 410.878768][T22520] syzkaller1: group set to 0 [ 411.203613][ T5777] tipc: Node number set to 2886997039 [ 411.280960][T22541] batadv_slave_0: Caught tx_queue_len zero misconfig [ 411.590024][T22558] Cannot find set identified by id 4 to match [ 412.729529][T22590] __nla_validate_parse: 2 callbacks suppressed [ 412.729711][T22590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7964'. [ 413.607521][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7973'. [ 414.106132][T22627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'. [ 414.856892][T22657] tap0: tun_chr_ioctl cmd 2148553947 [ 415.044029][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7997'. [ 416.408247][T22707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.783991][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8026'. [ 417.339905][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8036'. [ 417.544633][T22753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8039'. [ 418.660505][T22787] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8054'. [ 418.746758][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8057'. [ 419.009805][T22797] nbd1: detected capacity change from 0 to 274877906944 [ 419.013661][ T4953] block nbd1: Receive control failed (result -32) [ 419.030823][ T1740] block nbd1: Dead connection, failed to find a fallback [ 419.030850][ T1740] block nbd1: shutting down sockets [ 419.030931][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.031027][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.037875][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.037912][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038046][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038075][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038193][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038221][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038355][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038383][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038525][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038552][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038688][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038716][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038832][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.038860][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.038897][T22713] ldm_validate_partition_table(): Disk read failed. [ 419.038993][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.039020][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.039135][ T1740] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.039163][ T1740] Buffer I/O error on dev nbd1, logical block 0, async page read [ 419.039433][T22713] Dev nbd1: unable to read RDB block 0 [ 419.041581][T22713] nbd1: unable to read partition table [ 419.277251][T22713] ldm_validate_partition_table(): Disk read failed. [ 419.278947][T22713] Dev nbd1: unable to read RDB block 0 [ 419.281217][T22713] nbd1: unable to read partition table [ 420.011926][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8075'. [ 420.861727][T22860] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8088'. [ 421.035728][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8090'. [ 421.240738][T22869] netlink: 'syz.1.8093': attribute type 10 has an invalid length. [ 421.367314][T22869] team0: Port device dummy0 added [ 421.700793][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8099'. [ 421.724470][T22884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8099'. [ 421.724563][T22884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8099'. [ 422.847817][T22928] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8121'. [ 422.856900][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8119'. [ 423.280916][T22944] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 423.940339][T22968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8139'. [ 424.244969][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 424.923799][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.048959][T23008] netlink: 'syz.3.8159': attribute type 83 has an invalid length. [ 425.237775][T23016] geneve1: Caught tx_queue_len zero misconfig [ 425.370538][T23021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8165'. [ 425.709570][T23035] veth1_to_bond: entered allmulticast mode [ 425.710179][T23035] veth1_to_bond: left allmulticast mode [ 426.064193][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8178'. [ 426.064231][T23049] netlink: 'syz.1.8178': attribute type 30 has an invalid length. [ 426.122525][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8178'. [ 426.122563][T23052] netlink: 'syz.1.8178': attribute type 30 has an invalid length. [ 426.144168][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.144250][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.144297][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.144343][ T62] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.523025][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8183'. [ 426.523059][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8183'. [ 426.551588][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8183'. [ 426.551622][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8183'. [ 426.552022][T23060] netlink: 'syz.1.8182': attribute type 2 has an invalid length. [ 426.627139][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8182'. [ 426.727691][T23060] !: entered promiscuous mode [ 426.736165][T23064] !: left promiscuous mode [ 427.487016][T23092] veth0: entered promiscuous mode [ 427.489560][T23091] veth0: left promiscuous mode [ 427.822433][ T573] IPVS: starting estimator thread 0... [ 427.915418][T23103] IPVS: using max 25 ests per chain, 60000 per kthread [ 428.316275][T23120] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 428.560294][T23133] tipc: Enabling of bearer rejected, already enabled [ 428.947596][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8222'. [ 429.046292][T23147] team0 (unregistering): Port device team_slave_0 removed [ 429.091979][T23147] team0 (unregistering): Port device team_slave_1 removed [ 429.142082][T23147] team0 (unregistering): Port device dummy0 removed [ 430.028282][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8237'. [ 430.376691][T23191] sctp: [Deprecated]: syz.0.8242 (pid 23191) Use of int in max_burst socket option deprecated. [ 430.376691][T23191] Use struct sctp_assoc_value instead [ 430.938158][T23213] batman_adv: batadv0: Adding interface: gretap1 [ 430.938180][T23213] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.938215][T23213] batman_adv: batadv0: Interface activated: gretap1 [ 430.996714][T23214] tun0: tun_chr_ioctl cmd 1074025675 [ 430.996742][T23214] tun0: persist enabled [ 431.437640][T23225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8257'. [ 432.060687][T23250] netlink: 'syz.3.8269': attribute type 83 has an invalid length. [ 432.610024][T23266] netlink: 'syz.1.8277': attribute type 4 has an invalid length. [ 433.160351][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8287'. [ 433.898759][T23317] ip_tables: iptables: counters copy to user failed while replacing table [ 434.560019][T23334] netlink: 'syz.2.8307': attribute type 3 has an invalid length. [ 434.750492][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8312'. [ 434.750546][T23342] block nbd2: Unsupported socket: should be TCP or UNIX. [ 436.361608][T23391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.449668][T23435] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8356'. [ 437.871252][T23448] ip_tables: iptables: counters copy to user failed while replacing table [ 439.180283][T23497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8385'. [ 439.968685][T23519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8394'. [ 440.025620][T23525] erspan0: entered promiscuous mode [ 440.289113][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.376896][T23539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8404'. [ 440.588442][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8405'. [ 441.107300][T23566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8413'. [ 442.676231][T23630] veth1_macvtap: left promiscuous mode [ 443.110336][T23646] : renamed from bond0 (while UP) [ 443.232725][T23652] ip_tables: iptables: counters copy to user failed while replacing table [ 443.331733][T23657] netlink: 'syz.3.8454': attribute type 3 has an invalid length. [ 443.331759][T23657] netlink: 'syz.3.8454': attribute type 2 has an invalid length. [ 443.572260][T23660] pim6reg: entered allmulticast mode [ 443.601015][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8455'. [ 443.870270][T23671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8459'. [ 444.561786][T23694] sctp: [Deprecated]: syz.0.8469 (pid 23694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.561786][T23694] Use struct sctp_sack_info instead [ 445.084663][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8480'. [ 446.054758][T23745] lo: left promiscuous mode [ 446.166261][T23745] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 447.476487][T23805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8522'. [ 448.036813][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'. [ 448.450941][T23838] veth1_macvtap: left promiscuous mode [ 448.451203][T23838] macsec0: entered allmulticast mode [ 448.635563][T23842] veth1_macvtap: entered promiscuous mode [ 448.635593][T23842] veth1_macvtap: entered allmulticast mode [ 448.635730][T23842] macsec0: left allmulticast mode [ 448.635744][T23842] veth1_macvtap: left allmulticast mode [ 449.288748][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8550'. [ 450.409360][T23904] netlink: 'syz.3.8569': attribute type 1 has an invalid length. [ 450.409385][T23904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8569'. [ 451.202279][T23935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8584'. [ 451.699113][T23953] netlink: 'syz.4.8592': attribute type 6 has an invalid length. [ 451.917936][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8594'. [ 451.959611][T23959] xfrm2: entered promiscuous mode [ 451.959852][T23959] xfrm2: entered allmulticast mode [ 451.987119][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8594'. [ 452.240178][T23973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8600'. [ 452.251609][T23973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8600'. [ 453.109754][ T4953] block nbd2: Receive control failed (result -32) [ 453.231675][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8614'. [ 453.383002][T24002] netlink: 'syz.3.8614': attribute type 1 has an invalid length. [ 453.383029][T24002] netlink: 'syz.3.8614': attribute type 2 has an invalid length. [ 454.986109][T24054] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.407442][T24072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 455.446202][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8649'. [ 455.446231][T24078] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8649'. [ 455.446283][T24078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8649'. [ 455.451979][T24077] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 455.543581][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8648'. [ 455.800690][T24085] tipc: New replicast peer: 255.255.255.255 [ 455.801155][T24085] tipc: Enabled bearer , priority 10 [ 456.173121][T24095] netlink: 'syz.1.8658': attribute type 83 has an invalid length. [ 456.260367][T24100] vxcan0: tx address claim with dest, not broadcast [ 456.283414][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.875950][T24119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8669'. [ 456.875997][T24119] nbd: socks must be embedded in a SOCK_ITEM attr [ 457.503614][T24142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8680'. [ 457.906128][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8686'. [ 457.906468][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8686'. [ 458.162382][T24159] netlink: 'syz.0.8689': attribute type 83 has an invalid length. [ 458.163142][T24163] vlan0: mtu less than device minimum [ 458.193076][T24164] sctp: [Deprecated]: syz.3.8690 (pid 24164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.193076][T24164] Use struct sctp_sack_info instead [ 458.452860][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8692'. [ 459.561599][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8705'. [ 460.290421][T24228] Dropped outbound packet type=d5b3 [ 460.710058][ T12] tipc: Subscription rejected, illegal request [ 461.504741][T24273] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.732395][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8746'. [ 462.515459][T24310] blkio.reset_stats is deprecated [ 463.502759][T24335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8772'. [ 463.634564][T24339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8774'. [ 463.637912][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'. [ 463.637959][T24339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8774'. [ 463.776846][T24342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8775'. [ 463.776890][T24342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 463.776906][T24342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8775'. [ 464.386114][T24368] vlan0: entered promiscuous mode [ 464.514862][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8786'. [ 464.803509][T24377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8789'. [ 466.506437][T24441] team0 (unregistering): Port device team_slave_0 removed [ 466.559204][T24441] team0 (unregistering): Port device team_slave_1 removed [ 466.590507][T24445] veth0: entered promiscuous mode [ 466.590563][T24445] veth0: left promiscuous mode [ 467.367548][T24475] __nla_validate_parse: 8 callbacks suppressed [ 467.367573][T24475] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8834'. [ 467.531561][ T4953] block nbd3: Receive control failed (result -32) [ 467.532455][ T5642] block nbd3: Receive control failed (result -32) [ 467.838540][T24486] sctp: [Deprecated]: syz.1.8839 (pid 24486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.838540][T24486] Use struct sctp_sack_info instead [ 468.499085][T24509] team0: Cannot enslave team device to itself [ 468.964968][T24525] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 469.840682][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8873'. [ 470.478852][ T10] hid-generic 0005:0C45:4155.0001: unknown main item tag 0x0 [ 470.507209][ T10] hid-generic 0005:0C45:4155.0001: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 470.639363][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8881'. [ 471.003684][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.148630][T24595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8889'. [ 471.338986][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8895'. [ 471.650027][T24615] ipvlan1: Caught tx_queue_len zero misconfig [ 472.176783][T24631] netlink: 'syz.1.8906': attribute type 1 has an invalid length. [ 472.176813][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8906'. [ 473.398343][ T30] audit: type=1804 audit(1794530836.270:6): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8929" name="/newroot/1733/cgroup.controllers" dev="tmpfs" ino=8706 res=1 errno=0 [ 473.430723][ T30] audit: type=1800 audit(1794530836.300:7): pid=24680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8929" name="cgroup.controllers" dev="tmpfs" ino=8706 res=0 errno=-22 [ 474.658363][T24727] netlink: 'syz.0.8951': attribute type 4 has an invalid length. [ 474.857781][T24730] netlink: 'syz.1.8953': attribute type 3 has an invalid length. [ 475.391957][T24747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8959'. [ 475.830521][T24756] Bluetooth: hci1: too big key_count value 32778 [ 475.955760][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8966'. [ 477.306537][T24809] veth1_to_bond: Caught tx_queue_len zero misconfig [ 481.209921][T24942] tipc: Enabling of bearer rejected, already enabled [ 482.247061][T24981] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 482.247576][T24981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.501780][T25019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9074'. [ 483.759291][T25026] netlink: 'syz.3.9075': attribute type 5 has an invalid length. [ 484.243010][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9084'. [ 485.101717][T25070] lwtunnel_output(): recursion limit reached on datapath [ 485.346324][T25076] ip_tables: iptables: counters copy to user failed while replacing table [ 485.859643][T25090] ip_tables: iptables: counters copy to user failed while replacing table [ 486.432438][T25108] netlink: 'syz.0.9115': attribute type 83 has an invalid length. [ 487.486015][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9132'. [ 487.486050][T25142] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9132'. [ 487.802271][T25148] netlink: 'syz.4.9134': attribute type 1 has an invalid length. [ 487.815015][T25153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9136'. [ 487.826906][T25153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9136'. [ 488.500580][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9146'. [ 488.572780][T25173] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 489.279167][T25200] netlink: 'syz.1.9162': attribute type 14 has an invalid length. [ 489.426886][T25203] netlink: 'syz.3.9163': attribute type 4 has an invalid length. [ 490.004610][T25225] tipc: Enabling of bearer rejected, failed to enable media [ 490.555901][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9184'. [ 490.561291][T25245] hsr_slave_0: left promiscuous mode [ 490.616475][T25245] hsr_slave_1: left promiscuous mode [ 491.182086][T25263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9192'. [ 491.694640][T25286] team_slave_0: entered allmulticast mode [ 491.699742][T25286] team_slave_0: entered promiscuous mode [ 492.489143][T25314] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.9215'. [ 492.808406][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9221'. [ 492.840054][T25328] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 493.412894][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9230'. [ 493.475125][T25349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9232'. [ 493.489274][T25349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9232'. [ 493.504330][T25349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9232'. [ 493.759335][T25355] macvlan0: entered promiscuous mode [ 494.273662][T25374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9244'. [ 494.273701][T25374] netlink: 'syz.2.9244': attribute type 7 has an invalid length. [ 494.273717][T25374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9244'. [ 494.472571][T25381] syzkaller1: entered allmulticast mode [ 495.142219][T25407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 495.773930][T25424] sctp: [Deprecated]: syz.4.9266 (pid 25424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.773930][T25424] Use struct sctp_sack_info instead [ 496.008375][T25433] syzkaller1: entered promiscuous mode [ 496.008403][T25433] syzkaller1: entered allmulticast mode [ 496.480465][T25442] __nla_validate_parse: 1 callbacks suppressed [ 496.480521][T25442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9275'. [ 496.480554][T25442] netlink: 'syz.0.9275': attribute type 7 has an invalid length. [ 496.480569][T25442] netlink: 'syz.0.9275': attribute type 8 has an invalid length. [ 496.480583][T25442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9275'. [ 497.032130][T25458] tipc: Enabled bearer , priority 0 [ 497.151897][T25463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9285'. [ 497.353214][T25463] netlink: 'syz.0.9285': attribute type 1 has an invalid length. [ 497.353238][T25463] netlink: 'syz.0.9285': attribute type 2 has an invalid length. [ 497.356288][T25468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9288'. [ 497.364898][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9290'. [ 497.990945][T25486] veth0: entered promiscuous mode [ 497.993822][T25486] veth0: left promiscuous mode [ 498.072314][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9299'. [ 498.072355][T25489] netlink: 'syz.0.9299': attribute type 10 has an invalid length. [ 498.072373][T25489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9299'. [ 498.619281][T25508] bridge0: port 3(veth0) entered blocking state [ 498.619545][T25508] bridge0: port 3(veth0) entered disabled state [ 498.621901][T25508] veth0: entered allmulticast mode [ 498.650097][T25508] veth0: entered promiscuous mode [ 498.667354][T25508] bridge0: port 3(veth0) entered blocking state [ 498.667536][T25508] bridge0: port 3(veth0) entered forwarding state [ 498.818711][T25517] xt_hashlimit: size too large, truncated to 1048576 [ 499.319657][T25523] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 500.867814][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9336'. [ 500.872833][T25575] netlink: 'syz.4.9334': attribute type 12 has an invalid length. [ 500.872857][T25575] netlink: 'syz.4.9334': attribute type 29 has an invalid length. [ 500.872872][T25575] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9334'. [ 500.872905][T25575] netlink: 'syz.4.9334': attribute type 1 has an invalid length. [ 500.872920][T25575] netlink: 'syz.4.9334': attribute type 2 has an invalid length. [ 500.872935][T25575] netlink: 15 bytes leftover after parsing attributes in process `syz.4.9334'. [ 501.141441][T25582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 501.725784][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.251386][T25608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.251435][T25608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.518072][T25608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.518112][T25608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.772391][T25632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9359'. [ 502.805315][T25608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.805358][T25608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.077574][T25608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.077622][T25608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.343408][ T62] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.343451][ T62] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.345901][T25645] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 503.345932][T25645] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 503.480388][ T62] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.480430][ T62] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.659998][T25658] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9368'. [ 503.848801][ T573] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.848842][ T573] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.861491][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.861530][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.093901][T25669] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 504.094120][T25669] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 504.831216][T25699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 505.155828][T25709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9387'. [ 508.150401][T25801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 508.426547][T25806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9427'. [ 508.749657][T25823] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9434'. [ 509.669992][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079586c00: rx timeout, send abort [ 509.782998][T25856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9448'. [ 510.171096][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079586c00: abort rx timeout. Force session deactivation [ 510.656939][T25889] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 510.656971][T25889] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 510.783256][T25891] netlink: 'syz.0.9463': attribute type 1 has an invalid length. [ 511.612703][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9476'. [ 511.655544][T25917] ipvlan0: Caught tx_queue_len zero misconfig [ 512.260961][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9487'. [ 512.289333][T25944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9486'. [ 512.307456][ T5642] block nbd4: Receive control failed (result -107) [ 512.545492][T25950] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9490'. [ 512.921144][T25964] netlink: 'syz.3.9494': attribute type 39 has an invalid length. [ 513.076086][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9497'. [ 513.497806][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9503'. [ 514.389338][T26009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 515.316264][T26031] ip6erspan0: entered allmulticast mode [ 515.437285][T26035] bridge0: port 3(syz_tun) entered blocking state [ 515.437787][T26035] bridge0: port 3(syz_tun) entered disabled state [ 515.438338][T26035] syz_tun: entered allmulticast mode [ 515.461784][T26035] syz_tun: entered promiscuous mode [ 515.474554][T26035] bridge0: port 3(syz_tun) entered blocking state [ 515.474676][T26035] bridge0: port 3(syz_tun) entered forwarding state [ 515.698048][T26041] geneve2: entered promiscuous mode [ 515.714738][ T1011] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 39673 - 0 [ 515.714787][ T1011] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 39673 - 0 [ 515.714824][ T1011] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 39673 - 0 [ 515.714860][ T1011] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 39673 - 0 [ 518.219239][T26123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9565'. [ 518.219487][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9565'. [ 518.390977][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9566'. [ 518.405139][T26129] gretap0: left promiscuous mode [ 519.116945][T26152] sctp: [Deprecated]: syz.3.9578 (pid 26152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.116945][T26152] Use struct sctp_sack_info instead [ 520.325132][T26191] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 520.866745][T26209] tunl0: Caught tx_queue_len zero misconfig [ 521.103519][T26220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.203381][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 523.088160][T26277] mac80211_hwsim hwsim11 syzkaller1: left promiscuous mode [ 523.088191][T26277] mac80211_hwsim hwsim11 syzkaller1: left allmulticast mode [ 524.010176][T26305] netlink: 'syz.1.9650': attribute type 11 has an invalid length. [ 524.238846][T26318] sock: sock_set_timeout: `syz.0.9652' (pid 26318) tries to set negative timeout [ 524.832775][T26336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9661'. [ 527.372579][T26431] IPVS: sed: FWM 3 0x00000003 - no destination available [ 528.114004][T26450] vcan0: tx address claim with dest, not broadcast [ 528.467576][T26460] ip_tables: iptables: counters copy to user failed while replacing table [ 529.230775][T26475] netlink: 'syz.4.9725': attribute type 17 has an invalid length. [ 529.230803][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9725'. [ 529.230832][T26475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9725'. [ 529.491044][T26475] gretap0: entered promiscuous mode [ 529.523084][T26475] gretap0: left promiscuous mode [ 529.885236][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9730'. [ 530.291816][T26484] ip_tables: iptables: counters copy to user failed while replacing table [ 530.675722][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9740'. [ 530.724327][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9740'. [ 530.745697][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9739'. [ 531.105792][T26528] ip_tables: iptables: counters copy to user failed while replacing table [ 531.607482][ T1051] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.607530][ T1051] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 534.010478][T26614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9779'. [ 534.051271][T26616] tipc: Enabled bearer , priority 0 [ 534.443482][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 534.656343][T26630] netlink: 'syz.2.9786': attribute type 1 has an invalid length. [ 534.676605][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.303013][T26653] ip_tables: iptables: counters copy to user failed while replacing table [ 536.921172][T26711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9823'. [ 536.921213][T26711] netlink: 'syz.1.9823': attribute type 10 has an invalid length. [ 536.921233][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9823'. [ 537.600317][T26731] netlink: 'syz.3.9834': attribute type 2 has an invalid length. [ 537.602778][T26731] netlink: 'syz.3.9834': attribute type 2 has an invalid length. [ 537.602799][T26731] netlink: 67 bytes leftover after parsing attributes in process `syz.3.9834'. [ 538.299966][T26763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 538.688342][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9850'. [ 540.061371][T26817] vlan1: left allmulticast mode [ 540.603609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.603895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.604144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.609943][T26876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.826154][T26906] netlink: 'syz.1.9908': attribute type 3 has an invalid length. [ 542.826180][T26906] netlink: 'syz.1.9908': attribute type 2 has an invalid length. [ 543.098877][T26915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9912'. [ 543.098920][T26915] bond0: ARP target 8.4.0.0 is already present [ 543.098943][T26915] bond0: option arp_ip_target: invalid value (1032) [ 543.301766][T26921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9915'. [ 543.957069][T26944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9924'. [ 544.066912][T26940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9922'. [ 544.165887][T26951] netlink: 'syz.0.9927': attribute type 11 has an invalid length. [ 544.366706][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051ca6400: rx timeout, send abort [ 544.866765][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051ca6400: abort rx timeout. Force session deactivation [ 544.868527][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051ca5c00: rx timeout, send abort [ 545.358216][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9942'. [ 545.358259][T26984] netlink: 'syz.1.9942': attribute type 7 has an invalid length. [ 545.358274][T26984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9942'. [ 545.373115][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051ca5c00: abort rx timeout. Force session deactivation [ 546.443557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.443840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.444082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.656679][T27029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.685516][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9957'. [ 547.332562][T27050] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.9964'. [ 547.983207][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9974'. [ 548.078238][T27078] netlink: 'syz.1.9975': attribute type 4 has an invalid length. [ 550.107980][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9998'. [ 550.445603][T27146] syzkaller1: entered promiscuous mode [ 550.445629][T27146] syzkaller1: entered allmulticast mode [ 550.466476][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10002'. [ 550.819463][T27155] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.10002'. [ 551.057678][T27167] macvlan0: entered promiscuous mode [ 551.205126][T27174] v: renamed from vlan1 [ 551.483431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.483672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.483893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.379242][T27212] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10023'. [ 552.727852][T27229] ieee802154 phy0 wpan0: encryption failed: -22 [ 552.966661][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10034'. [ 553.532051][T27251] batadv_slave_1: entered promiscuous mode [ 553.546032][T27248] batadv_slave_1: left promiscuous mode [ 553.710729][T27259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10043'. [ 553.764978][T27259] bridge0: port 3(syz_tun) entered disabled state [ 553.766597][T27259] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.766896][T27259] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.298598][T27280] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10052'. [ 557.230229][T27386] syzkaller1: entered promiscuous mode [ 557.230255][T27386] syzkaller1: entered allmulticast mode [ 557.264612][T27389] vcan0: tx address claim with broadcast sa [ 557.323414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.323686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.323908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.890367][T27410] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10091'. [ 558.325570][T27421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10094'. [ 560.043600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.043878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.044118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.044351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.044604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.044839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.045070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.171824][T27523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10129'. [ 561.435157][T27529] veth0: entered promiscuous mode [ 561.467573][T27528] veth0: left promiscuous mode [ 561.671614][T27539] netlink: 'syz.3.10136': attribute type 2 has an invalid length. [ 561.685461][T27540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10135'. [ 561.697363][T27539] netlink: 'syz.3.10136': attribute type 2 has an invalid length. [ 561.697387][T27539] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.10136'. [ 561.826567][T27544] netlink: 'syz.3.10140': attribute type 1 has an invalid length. [ 561.884527][T27544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.378074][T27568] net_ratelimit: 215 callbacks suppressed [ 562.378179][T27568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.385387][T27568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.443461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.443746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.444008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.988872][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10152'. [ 562.988912][T27590] netlink: 'syz.3.10152': attribute type 10 has an invalid length. [ 562.988931][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10152'. [ 563.172912][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.862233][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10166'. [ 563.862270][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10166'. [ 563.862300][T27621] netlink: 'syz.1.10166': attribute type 15 has an invalid length. [ 563.905135][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10166'. [ 563.905163][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10166'. [ 563.905205][T27621] netlink: 'syz.1.10166': attribute type 15 has an invalid length. [ 563.935986][ T13] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 563.936051][ T13] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 563.936089][ T13] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 563.936126][ T13] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 564.071237][T27623] ip_tables: iptables: counters copy to user failed while replacing table [ 564.338975][T27637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10172'. [ 564.502340][T27641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10174'. [ 564.650442][T27645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10176'. [ 564.650467][T27645] bridge: RTM_NEWNEIGH with invalid ether address [ 564.651484][T27645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10176'. [ 564.651504][T27645] bridge: RTM_NEWNEIGH with invalid ether address [ 564.756407][T27546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.845420][T27661] tunl0: left promiscuous mode [ 565.854450][T27661] gre0: left promiscuous mode [ 565.879921][T27661] erspan0: left promiscuous mode [ 565.881549][T27661] ip_vti0: left promiscuous mode [ 565.960673][T27661] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 565.973214][T27661] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.874802][T27704] vlan4: entered allmulticast mode [ 566.874827][T27704] gretap0: entered allmulticast mode [ 567.445315][T27726] bond0: invalid NS target :: specified for addition [ 567.445348][T27726] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 567.563781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.564061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.564288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.880130][T27770] pim6reg1: entered promiscuous mode [ 568.880157][T27770] pim6reg1: entered allmulticast mode [ 569.168295][T27782] netlink: 'syz.3.10233': attribute type 15 has an invalid length. [ 569.168320][T27782] __nla_validate_parse: 3 callbacks suppressed [ 569.168333][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10233'. [ 569.227943][T27782] netlink: 'syz.3.10233': attribute type 15 has an invalid length. [ 569.227969][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10233'. [ 569.235119][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 569.245397][ T1051] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 569.245568][ T1051] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 569.245683][ T1051] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 569.370491][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a93d000: rx timeout, send abort [ 569.370736][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a93d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 570.102125][T27802] netlink: 'syz.4.10242': attribute type 1 has an invalid length. [ 570.306226][T27802] bond6: entered promiscuous mode [ 570.321406][T27802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.420446][T27808] bond6: (slave bridge6): making interface the new active one [ 570.420476][T27808] bridge6: entered promiscuous mode [ 570.456808][T27808] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 570.580026][T27820] netlink: 'syz.4.10248': attribute type 1 has an invalid length. [ 570.620457][T27820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.658326][T27820] bond7: (slave geneve5): making interface the new active one [ 570.660853][T27820] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 570.898520][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.945073][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.945412][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.945673][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.945882][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.946101][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.946361][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 570.952509][T27827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10247'. [ 571.225243][T27836] netlink: 'syz.4.10250': attribute type 4 has an invalid length. [ 571.293182][T27836] netlink: 'syz.4.10250': attribute type 4 has an invalid length. [ 571.714223][ T483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.826096][T27853] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 571.923716][T27857] ip_tables: iptables: counters copy to user failed while replacing table [ 571.961996][T27861] netlink: 'syz.2.10262': attribute type 1 has an invalid length. [ 572.108692][T27861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.123702][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.142368][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.257678][T27863] bond3: (slave gretap1): making interface the new active one [ 572.260087][T27863] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 572.844433][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.927816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.096760][T27883] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 573.152463][T27883] bond4: (slave lo): Enslaving as an active interface with an up link [ 573.201588][T27883] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 573.945014][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.963503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.963782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.159189][T27891] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 574.159363][T27891] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 574.435478][ T9738] wlan1 speed is unknown, defaulting to 1000 [ 574.435612][ T9738] syz2: Port: 1 Link DOWN [ 574.441596][T27928] syz_tun: entered allmulticast mode [ 574.748924][T27923] syz_tun: left allmulticast mode [ 575.035056][T27947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.104377][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.242238][T27957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.260933][T27957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.938414][T27981] __nla_validate_parse: 45 callbacks suppressed [ 575.938440][T27981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10301'. [ 576.605255][T27998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10308'. [ 577.230300][T28016] netlink: 'syz.2.10314': attribute type 12 has an invalid length. [ 577.230327][T28016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10314'. [ 577.275649][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10316'. [ 577.319417][T28016] netlink: 'syz.2.10314': attribute type 12 has an invalid length. [ 577.319442][T28016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10314'. [ 577.378864][T28021] 8021q: VLANs not supported on ip_vti0 [ 578.187088][T28044] net_ratelimit: 6 callbacks suppressed [ 578.187122][T28044] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 578.265726][T28051] netlink: 'syz.4.10324': attribute type 10 has an invalid length. [ 578.305132][T28051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.339394][T28051] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 578.477416][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.720525][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10326'. [ 578.756716][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10326'. [ 578.757127][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10326'. [ 578.757854][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10326'. [ 578.772359][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10326'. [ 579.049304][T28073] netlink: 'syz.1.10329': attribute type 12 has an invalid length. [ 579.049333][T28073] netlink: 'syz.1.10329': attribute type 29 has an invalid length. [ 579.049355][T28073] netlink: 'syz.1.10329': attribute type 1 has an invalid length. [ 579.460396][T28082] ip_tables: iptables: counters copy to user failed while replacing table [ 579.595138][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.599509][T28111] hsr_slave_1 (unregistering): left promiscuous mode [ 580.695098][ T1011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.186014][T28136] netlink: 'syz.3.10354': attribute type 15 has an invalid length. [ 581.729249][ T1051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.801850][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.368536][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.895080][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.852158][T28224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.888952][ C0] ------------[ cut here ]------------ [ 583.888970][ C0] !rcu_read_lock_held() [ 583.888986][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: kworker/u8:4/62 [ 583.909483][ C0] Modules linked in: [ 583.913515][ C0] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 583.922909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 583.933039][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 583.941077][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 583.947209][ C0] Code: be b5 01 00 00 48 c7 c2 20 ff 53 8d e8 b0 d6 06 f7 e9 aa fc ff ff e8 06 85 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 f8 84 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 f7 e0 51 fa 84 c0 0f 84 e1 00 [ 583.967186][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 583.973398][ C0] RAX: ffffffff8a9d8c78 RBX: 0000000000000000 RCX: ffff88801e7d0000 [ 583.981415][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 583.989482][ C0] RBP: ffffc90000007b90 R08: 0000000000000100 R09: 1ffffffff237bff7 [ 583.997530][ C0] R10: dffffc0000000000 R11: fffffbfff237bff8 R12: dffffc0000000000 [ 584.005615][ C0] R13: ffff888059b9e2d8 R14: ffff88807f24fa90 R15: ffff88807abb1800 [ 584.013659][ C0] FS: 0000000000000000(0000) GS:ffff888123408000(0000) knlGS:0000000000000000 [ 584.022634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.029384][ C0] CR2: 00005555559eaa38 CR3: 00000000379cc000 CR4: 00000000003526f0 [ 584.037457][ C0] Call Trace: [ 584.040787][ C0] [ 584.043757][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 584.049445][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 584.054817][ C0] ? __asan_memset+0x22/0x50 [ 584.059520][ C0] ? xfrm_output+0xa03/0x1ca0 [ 584.064300][ C0] iptfs_delay_timer+0x3803/0x4310 [ 584.069534][ C0] ? __lock_acquire+0x747/0x2de0 [ 584.074709][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 584.080245][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.085359][ C0] ? lock_acquire+0x115/0x350 [ 584.090111][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.095597][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.101592][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 584.107161][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 584.112476][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 584.117869][ C0] handle_softirqs+0x265/0x8d0 [ 584.122835][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0xe1/0x780 [ 584.130047][ C0] do_softirq+0x77/0xd0 [ 584.134309][ C0] [ 584.137283][ C0] [ 584.140257][ C0] __local_bh_enable_ip+0x100/0x140 [ 584.145549][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0xe1/0x780 [ 584.152561][ C0] ? rcu_is_watching+0x16/0xb0 [ 584.157431][ C0] ? process_scheduled_works+0x97a/0x1630 [ 584.163268][ C0] process_scheduled_works+0xc3d/0x1630 [ 584.168921][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.171373][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.183090][ C0] ? assign_work+0x3cf/0x5d0 [ 584.187787][ C0] worker_thread+0xa47/0xfb0 [ 584.192476][ C0] kthread+0x38b/0x480 [ 584.196640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.201808][ C0] ? __pfx_kthread+0x10/0x10 [ 584.206562][ C0] ret_from_fork+0x514/0xb70 [ 584.211270][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 584.216499][ C0] ? __switch_to+0xc78/0x1410 [ 584.221246][ C0] ? __pfx_kthread+0x10/0x10 [ 584.225916][ C0] ret_from_fork_asm+0x1a/0x30 [ 584.230788][ C0] [ 584.233878][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.241195][ C0] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 584.250517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 584.260610][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 584.268495][ C0] Call Trace: [ 584.271813][ C0] [ 584.274688][ C0] vpanic+0x26f/0x710 [ 584.278744][ C0] panic+0xc5/0xd0 [ 584.282496][ C0] ? __pfx_panic+0x10/0x10 [ 584.286993][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 584.291978][ C0] __warn+0x315/0x4c0 [ 584.296004][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 584.301431][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 584.306851][ C0] __report_bug+0x276/0x570 [ 584.311534][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 584.316966][ C0] ? __pfx___report_bug+0x10/0x10 [ 584.322037][ C0] ? lock_acquire+0x115/0x350 [ 584.326763][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 584.332284][ C0] ? xfrm_aevent_is_on+0x18/0x230 [ 584.337351][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 584.342776][ C0] report_bug+0x16b/0x220 [ 584.347164][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 584.352596][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 584.358028][ C0] handle_bug+0x9c/0x200 [ 584.362408][ C0] exc_invalid_op+0x1a/0x50 [ 584.366969][ C0] asm_exc_invalid_op+0x1a/0x20 [ 584.371904][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 584.377943][ C0] Code: be b5 01 00 00 48 c7 c2 20 ff 53 8d e8 b0 d6 06 f7 e9 aa fc ff ff e8 06 85 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 f8 84 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 f7 e0 51 fa 84 c0 0f 84 e1 00 [ 584.397796][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 584.403911][ C0] RAX: ffffffff8a9d8c78 RBX: 0000000000000000 RCX: ffff88801e7d0000 [ 584.411930][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 584.419946][ C0] RBP: ffffc90000007b90 R08: 0000000000000100 R09: 1ffffffff237bff7 [ 584.427967][ C0] R10: dffffc0000000000 R11: fffffbfff237bff8 R12: dffffc0000000000 [ 584.435988][ C0] R13: ffff888059b9e2d8 R14: ffff88807f24fa90 R15: ffff88807abb1800 [ 584.444016][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 584.449513][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 584.455174][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 584.460647][ C0] ? __asan_memset+0x22/0x50 [ 584.465333][ C0] ? xfrm_output+0xa03/0x1ca0 [ 584.470084][ C0] iptfs_delay_timer+0x3803/0x4310 [ 584.475276][ C0] ? __lock_acquire+0x747/0x2de0 [ 584.480275][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 584.485792][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.490900][ C0] ? lock_acquire+0x115/0x350 [ 584.495635][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.501074][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.506937][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 584.512584][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 584.517894][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 584.523066][ C0] handle_softirqs+0x265/0x8d0 [ 584.527928][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0xe1/0x780 [ 584.535204][ C0] do_softirq+0x77/0xd0 [ 584.539420][ C0] [ 584.542384][ C0] [ 584.545382][ C0] __local_bh_enable_ip+0x100/0x140 [ 584.550634][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0xe1/0x780 [ 584.557626][ C0] ? rcu_is_watching+0x16/0xb0 [ 584.562460][ C0] ? process_scheduled_works+0x97a/0x1630 [ 584.568272][ C0] process_scheduled_works+0xc3d/0x1630 [ 584.573939][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.579991][ C0] ? assign_work+0x3cf/0x5d0 [ 584.584648][ C0] worker_thread+0xa47/0xfb0 [ 584.589325][ C0] kthread+0x38b/0x480 [ 584.593529][ C0] ? __pfx_worker_thread+0x10/0x10 [ 584.598731][ C0] ? __pfx_kthread+0x10/0x10 [ 584.603376][ C0] ret_from_fork+0x514/0xb70 [ 584.608018][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 584.613176][ C0] ? __switch_to+0xc78/0x1410 [ 584.617911][ C0] ? __pfx_kthread+0x10/0x10 [ 584.622546][ C0] ret_from_fork_asm+0x1a/0x30 [ 584.627369][ C0] [ 584.630699][ C0] Kernel Offset: disabled [ 584.635141][ C0] Rebooting in 86400 seconds..