last executing test programs: 5.125491326s ago: executing program 3 (id=3027): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f00000002c0), 0x0}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.915959138s ago: executing program 3 (id=3029): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x134, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb080045af0126006700000821"], 0x0) 4.794606262s ago: executing program 3 (id=3030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x4e) ppoll(&(0x7f0000000340)=[{r0, 0x200}], 0x1, &(0x7f0000000380), 0x0, 0x0) 4.599560982s ago: executing program 3 (id=3032): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000039000000150000000000000045000000ffffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 4.493243842s ago: executing program 3 (id=3034): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0x15, 0x19}, 0x20) 4.370625722s ago: executing program 3 (id=3035): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000180)="800064de269bb73c", 0x8, 0x4c880, &(0x7f00000000c0)={0xa, 0x4e24, 0x80cd, @mcast1}, 0x1c) 2.916688803s ago: executing program 4 (id=3061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) 2.756618435s ago: executing program 4 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000d8720000060000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.67121262s ago: executing program 4 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000025000000150000000000000045000000ffffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) 2.564745764s ago: executing program 4 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 2.475737251s ago: executing program 4 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.301652196s ago: executing program 4 (id=3076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, &(0x7f0000000040)) 1.318205192s ago: executing program 1 (id=3087): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) 1.227744439s ago: executing program 0 (id=3088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000a10000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0xd9, &(0x7f00000008c0)=""/217, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2b}, 0x94) 1.078694252s ago: executing program 0 (id=3090): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x0, 0x40, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0xc, 0x98, &(0x7f0000000080)=""/152, 0x41000, 0x62}, 0x94) 1.067443373s ago: executing program 1 (id=3091): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711897000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.007656941s ago: executing program 2 (id=3092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 966.900393ms ago: executing program 0 (id=3093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0x3) 926.910947ms ago: executing program 1 (id=3094): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0}, 0x94) 767.987622ms ago: executing program 0 (id=3095): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240)=r0, 0x5a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb8e, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) 767.154561ms ago: executing program 1 (id=3096): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x41) 695.837861ms ago: executing program 0 (id=3097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44091}, 0x4040000) 672.857847ms ago: executing program 1 (id=3098): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0}}}}}}, 0x0) 619.638024ms ago: executing program 2 (id=3099): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711829000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 517.011981ms ago: executing program 2 (id=3100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 510.691863ms ago: executing program 0 (id=3101): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="40000000100001044000000000000100bce9438f", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e64000000080028000000000004001880"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r3, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310828bd7000ffff00000000000008000300", @ANYRES32=r7, @ANYBLOB="0800100107000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) 366.764001ms ago: executing program 2 (id=3102): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), 0x0}, 0x20) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000200)) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x4, 0x1}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) (async) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async) sendfile(r3, r4, 0x0, 0xffffffff000) (async) getpeername(r4, &(0x7f00000007c0)=@ax25={{}, [@null, @remote, @rose, @netrom, @remote, @remote, @rose, @netrom]}, &(0x7f0000000080)=0x80) (async) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0) (async) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x40000000000003) 300.631478ms ago: executing program 1 (id=3103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r5) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="5e0ff6044df96744927dc2", 0xb}, {&(0x7f0000000680)="8c4e", 0x2}], 0x5) (async) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="5e0ff6044df96744927dc2", 0xb}, {&(0x7f0000000680)="8c4e", 0x2}], 0x5) 190.958673ms ago: executing program 2 (id=3104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040c91) shutdown(r1, 0x1) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4(r2, &(0x7f0000000280)=@l2={0x1f, 0x0, @none}, &(0x7f0000000100)=0x80, 0x80000) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @timestamp, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @window={0x3, 0x0, 0x4}], 0x8) (async) sendto$inet(r0, &(0x7f0000000380)="1c", 0x1, 0x48015, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) ppoll(&(0x7f0000000200)=[{r4, 0x101}, {r2, 0x81d5}, {r5, 0x4}], 0x3, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={[0xc]}, 0x8) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="0198f500000000002000128008000100677265001400028008000700ac14140008000100", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000240)="3f031c0003", 0x5, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="f64d6fb086eb", 0x6}], 0x1}}], 0x1, 0x8000) 0s ago: executing program 2 (id=3105): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="88008000", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b00e60200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f8090000"], 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f0000000100013000000000000000000000025870a2c00000000ffffe00000020aefa112c5fc0101020000000000000000000000004e2314"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030528bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15560100ef000012805c9614000280060008003b0000b0c8f12b0000000000"], 0x40}}, 0x28048810) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): nfo: [ 357.255444][T10650] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 357.318342][T10645] active_anon:4552 inactive_anon:0 isolated_anon:0 [ 357.318342][T10645] active_file:3140 inactive_file:39954 isolated_file:0 [ 357.318342][T10645] unevictable:768 dirty:112 writeback:0 [ 357.318342][T10645] slab_reclaimable:11077 slab_unreclaimable:102711 [ 357.318342][T10645] mapped:29227 shmem:1356 pagetables:981 [ 357.318342][T10645] sec_pagetables:0 bounce:0 [ 357.318342][T10645] kernel_misc_reclaimable:0 [ 357.318342][T10645] free:1324349 free_pcp:14744 free_cma:0 [ 357.541139][T10645] Node 0 active_anon:18108kB inactive_anon:0kB active_file:12560kB inactive_file:159612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117008kB dirty:448kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12996kB pagetables:3860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.635296][T10645] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 357.683929][T10645] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.715085][T10645] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 357.722145][T10645] Node 0 DMA32 free:1387916kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18708kB inactive_anon:0kB active_file:12560kB inactive_file:159612kB unevictable:1536kB writepending:448kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:41192kB local_pcp:22116kB free_cma:0kB [ 357.816785][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 357.827307][T10666] Can't find ip_set type hash:ip$mec [ 357.857080][T10645] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.974370][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 357.994322][T10645] Node 1 Normal free:3894248kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:7872kB free_cma:0kB [ 358.093912][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 358.105374][T10645] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 358.129315][T10645] Node 0 DMA32: 4*4kB (UME) 317*8kB (UME) 264*16kB (UME) 1721*32kB (UME) 454*64kB (UM) 100*128kB (UME) 34*256kB (UM) 11*512kB (UME) 7*1024kB (UME) 8*2048kB (UME) 303*4096kB (UM) = 1382680kB [ 358.151914][T10645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 358.167315][T10645] Node 1 Normal: 178*4kB (UM) 40*8kB (UME) 40*16kB (UME) 115*32kB (UME) 36*64kB (UME) 8*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3894248kB [ 358.195372][T10645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.206361][T10645] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.218981][T10645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.230136][T10645] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.292229][T10645] 47311 total pagecache pages [ 358.302358][T10645] 0 pages in swap cache [ 358.317617][T10645] Free swap = 124996kB [ 358.326344][T10645] Total swap = 124996kB [ 358.336486][T10645] 2097051 pages RAM [ 358.340344][T10645] 0 pages HighMem/MovableOnly [ 358.346130][T10645] 424280 pages reserved [ 358.359466][T10682] tipc: Enabled bearer , priority 0 [ 358.376348][T10645] 0 pages cma reserved [ 358.391595][T10682] syzkaller0: entered promiscuous mode [ 358.423582][T10682] syzkaller0: entered allmulticast mode [ 358.500485][T10682] tipc: Resetting bearer [ 358.538816][T10681] tipc: Resetting bearer [ 358.572307][T10681] tipc: Disabling bearer [ 359.005583][T10720] netlink: 'syz.4.1197': attribute type 15 has an invalid length. [ 359.198241][T10731] xt_l2tp: v2 doesn't support IP mode [ 359.502732][T10712] __nla_validate_parse: 8 callbacks suppressed [ 359.502753][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 359.682174][T10755] netlink: 'syz.4.1208': attribute type 11 has an invalid length. [ 359.741955][T10755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1208'. [ 359.758410][T10760] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1209'. [ 359.779782][T10764] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1209'. [ 359.813763][T10762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1207'. [ 359.846516][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 360.236574][T10779] x_tables: duplicate underflow at hook 1 [ 360.437576][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 360.739180][T10793] bond4: entered allmulticast mode [ 360.806957][T10793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.726226][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 361.744824][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 361.828964][T10817] netlink: 'syz.0.1223': attribute type 7 has an invalid length. [ 361.960116][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1224'. [ 362.887045][T10839] syzkaller1: entered promiscuous mode [ 362.894655][T10839] syzkaller1: entered allmulticast mode [ 363.431580][T10847] tipc: Started in network mode [ 363.436720][T10847] tipc: Node identity ac14140f, cluster identity 4711 [ 363.447668][T10847] tipc: New replicast peer: 255.255.255.255 [ 363.455442][T10847] tipc: Enabled bearer , priority 10 [ 363.463645][T10847] netlink: 'syz.3.1233': attribute type 11 has an invalid length. [ 363.471578][T10847] netlink: 'syz.3.1233': attribute type 11 has an invalid length. [ 363.844180][T10855] bridge4: entered promiscuous mode [ 363.849705][T10855] bridge4: entered allmulticast mode [ 363.930501][T10862] net_ratelimit: 47 callbacks suppressed [ 363.930524][T10862] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 363.945049][T10862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.982675][T10864] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 364.115251][T10872] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 364.272538][T10876] vxcan2: entered allmulticast mode [ 364.522177][T10888] __nla_validate_parse: 6 callbacks suppressed [ 364.522198][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 364.585609][ T985] tipc: Node number set to 2886997007 [ 364.638194][T10897] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 364.674250][T10897] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 364.716661][T10897] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 364.731884][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1243'. [ 364.741671][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 364.752200][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1243'. [ 364.762476][T10899] syzkaller1: entered promiscuous mode [ 364.768582][T10899] syzkaller1: entered allmulticast mode [ 365.265622][T10915] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 365.311580][T10915] netlink: 'syz.0.1250': attribute type 3 has an invalid length. [ 365.356319][T10915] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1250'. [ 365.785062][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 365.801564][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 366.397279][T10945] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'. [ 367.239445][T10980] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1260'. [ 367.309109][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'. [ 367.907071][T10993] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 368.402128][T11007] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 368.958100][T11009] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 369.009010][T11013] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 369.024295][T11009] team0: Port device dummy0 added [ 369.091085][T11013] team0: Port device dummy0 removed [ 369.880792][T11033] syzkaller0: entered promiscuous mode [ 369.898615][T11033] syzkaller0: entered allmulticast mode [ 369.910749][T11039] x_tables: unsorted underflow at hook 1 [ 370.000253][T11037] pim6reg: entered allmulticast mode [ 370.184815][T11053] __nla_validate_parse: 4 callbacks suppressed [ 370.184834][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'. [ 370.289763][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 370.410451][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 370.438742][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'. [ 370.474992][T11062] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 370.523877][T11066] bond4: entered promiscuous mode [ 370.529156][T11066] bridge5: entered promiscuous mode [ 370.535754][T11066] bond4: entered allmulticast mode [ 370.541106][T11066] bridge5: entered allmulticast mode [ 370.550044][T11065] netlink: 'syz.1.1294': attribute type 12 has an invalid length. [ 370.718005][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 371.721852][T11108] vxcan3: entered allmulticast mode [ 371.946471][T11107] vxcan3: entered allmulticast mode [ 371.991531][T11119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 372.336065][T11124] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 372.491582][T11126] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 372.529914][T11126] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 372.649242][T11130] netlink: 'syz.4.1306': attribute type 11 has an invalid length. [ 372.660643][T11130] netlink: 'syz.4.1306': attribute type 11 has an invalid length. [ 372.670550][T11130] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1306'. [ 372.767693][T11124] macvlan0: entered promiscuous mode [ 372.774140][T11124] macvlan0: entered allmulticast mode [ 372.781013][T11124] bond7: entered promiscuous mode [ 372.785745][T11120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.787960][T11124] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 372.811484][T11124] bond7: left promiscuous mode [ 373.261425][T11147] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1314'. [ 373.326308][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 373.691281][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 373.748391][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.943990][T11170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.081449][ T3450] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 374.787285][ T5930] IPVS: starting estimator thread 0... [ 374.903524][T11223] IPVS: using max 26 ests per chain, 62400 per kthread [ 375.341935][T11237] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20003 [ 375.528439][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.587904][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 375.617379][T11249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1339'. [ 375.663830][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 375.769856][T11251] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1340'. [ 376.210251][T11265] sctp: [Deprecated]: syz.4.1346 (pid 11265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.210251][T11265] Use struct sctp_sack_info instead [ 376.616578][T11286] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 376.701382][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1351'. [ 376.820264][T11292] bridge4: entered allmulticast mode [ 376.835333][T11294] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1352'. [ 376.863205][T11294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1352'. [ 376.891238][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 377.216710][T11317] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 377.247738][T11317] sctp: [Deprecated]: syz.2.1359 (pid 11317) Use of int in max_burst socket option. [ 377.247738][T11317] Use struct sctp_assoc_value instead [ 377.909150][T11348] sctp: [Deprecated]: syz.1.1364 (pid 11348) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.909150][T11348] Use struct sctp_sack_info instead [ 377.942070][T11347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1364'. [ 378.270895][T11324] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 378.412310][T11359] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1367'. [ 378.431874][T11361] netlink: 'syz.1.1367': attribute type 15 has an invalid length. [ 378.731654][T11374] tipc: New replicast peer: 255.255.255.255 [ 378.742016][T11374] tipc: Enabled bearer , priority 10 [ 378.765610][T11374] netlink: 'syz.1.1370': attribute type 11 has an invalid length. [ 378.793378][T11374] netlink: 'syz.1.1370': attribute type 11 has an invalid length. [ 379.034894][ T3100] IPVS: starting estimator thread 0... [ 379.143947][T11397] IPVS: using max 27 ests per chain, 64800 per kthread [ 379.892405][ T5921] tipc: Node number set to 709783396 [ 380.552673][T11449] netlink: 'syz.0.1386': attribute type 32 has an invalid length. [ 381.522874][T11477] syzkaller0: entered promiscuous mode [ 381.528871][T11477] syzkaller0: entered allmulticast mode [ 381.666234][T11480] xt_cgroup: invalid path, errno=-2 [ 381.857343][T11498] netlink: 'syz.3.1395': attribute type 16 has an invalid length. [ 381.867668][T11498] netlink: 'syz.3.1395': attribute type 17 has an invalid length. [ 382.099009][T11505] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 383.392579][T11490] syzkaller0: entered promiscuous mode [ 383.398576][T11490] syzkaller0: entered allmulticast mode [ 383.417590][T11498] syz_tun: left promiscuous mode [ 383.432038][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.442202][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.457546][T11498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.780206][T11525] __nla_validate_parse: 1 callbacks suppressed [ 383.780236][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'. [ 383.819792][T11527] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 385.460980][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 385.472352][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 385.483747][T11547] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1411'. [ 385.504670][T11547] netlink: 'syz.0.1411': attribute type 21 has an invalid length. [ 385.512553][T11547] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1411'. [ 385.554231][T11547] netlink: 'syz.0.1411': attribute type 5 has an invalid length. [ 385.562028][T11547] netlink: 'syz.0.1411': attribute type 6 has an invalid length. [ 385.575771][T11547] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1411'. [ 386.115825][T11582] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 386.419528][T11596] geneve2: entered promiscuous mode [ 386.472259][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 386.643043][T11610] sctp: [Deprecated]: syz.1.1429 (pid 11610) Use of int in maxseg socket option. [ 386.643043][T11610] Use struct sctp_assoc_value instead [ 386.707688][T11610] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1429'. [ 386.919736][T11617] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 386.997767][T11617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.031642][T11620] syzkaller0: entered promiscuous mode [ 387.037957][T11620] syzkaller0: entered allmulticast mode [ 387.104446][T11624] bond5: (slave geneve2): making interface the new active one [ 387.146731][T11624] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 387.219576][T11381] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 387.237179][T11633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.264276][T11633] tipc: Enabled bearer , priority 0 [ 387.277710][T11381] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 387.307192][T11381] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 387.334901][T11381] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 387.419324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.460170][T11618] tipc: Resetting bearer [ 387.547503][T11618] tipc: Disabling bearer [ 387.570182][T11652] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 387.831964][T11667] bond9 (unregistering): Released all slaves [ 387.840369][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 388.382720][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.395792][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.406896][T11691] batman_adv: batadv0: Interface activated: dummy0 [ 388.414233][T11691] batadv0: mtu less than device minimum [ 388.421451][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.433432][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.445485][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.457454][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.469419][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.481417][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.493367][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.505371][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.517359][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.529493][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.542239][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.554441][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.566646][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.578829][T11691] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.836592][T11705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1455'. [ 389.426211][T11722] tipc: Enabling of bearer rejected, already enabled [ 389.602178][T11729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1461'. [ 389.670656][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 390.455784][T11758] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1471'. [ 390.600777][T11760] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1472'. [ 390.637811][T11763] IPVS: Scheduler module ip_vs_sip not found [ 390.934627][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 391.003544][T11770] tipc: Enabling of bearer rejected, failed to enable media [ 391.241821][T11776] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1477'. [ 391.454402][T11774] 8021q: VLANs not supported on ip6tnl0 [ 391.801214][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 391.849512][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 391.860216][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 391.979699][T11808] netlink: 'syz.0.1485': attribute type 2 has an invalid length. [ 391.994138][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'. [ 392.041068][T11799] syz_tun: entered promiscuous mode [ 392.050309][T11799] syz_tun: left promiscuous mode [ 392.099502][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c5ef000: rx timeout, send abort [ 392.284825][T11814] bond5: option updelay: invalid value (18446744073709551615) [ 392.292365][T11814] bond5: option updelay: allowed values 0 - 2147483647 [ 392.301249][T11814] bond5 (unregistering): Released all slaves [ 392.556703][T11831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 392.574185][T11831] syzkaller1: linktype set to 260 [ 392.609082][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c5ef000: abort rx timeout. Force session deactivation [ 392.987585][T11845] No such timeout policy "syz0" [ 393.006800][T11845] hsr_slave_0: left promiscuous mode [ 393.806729][T11861] --map-set only usable from mangle table [ 393.919824][T11865] netlink: 'syz.4.1502': attribute type 10 has an invalid length. [ 393.930931][T11865] __nla_validate_parse: 5 callbacks suppressed [ 393.930951][T11865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1502'. [ 393.992091][T11865] team0: Failed to send options change via netlink (err -105) [ 394.000914][T11865] team0: Port device geneve0 added [ 394.094859][T11871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1505'. [ 394.223524][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 394.449865][T11886] tipc: Enabled bearer , priority 0 [ 394.464771][T11887] syzkaller0: entered promiscuous mode [ 394.470327][T11887] syzkaller0: entered allmulticast mode [ 394.482281][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'. [ 394.524691][T11885] tipc: Resetting bearer [ 394.584606][T11885] tipc: Disabling bearer [ 394.815087][T11915] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1517'. [ 394.839306][T11916] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1517'. [ 395.099522][T11927] netlink: 'syz.3.1519': attribute type 15 has an invalid length. [ 395.127339][T11927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 395.135960][T11928] tipc: Enabled bearer , priority 0 [ 395.280113][T11933] xt_CT: No such helper "netbios-ns" [ 395.294906][T11928] syzkaller0: entered promiscuous mode [ 395.300464][T11928] syzkaller0: entered allmulticast mode [ 395.311997][T11928] tipc: Resetting bearer [ 395.354236][T11924] tipc: Resetting bearer [ 396.827691][T11924] tipc: Disabling bearer [ 397.095423][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 397.268897][T11968] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 397.357906][T11968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 397.986281][T11967] delete_channel: no stack [ 397.992938][T11976] bond5 (unregistering): Released all slaves [ 398.380777][T12000] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1540'. [ 398.399171][T12000] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1540'. [ 399.137123][T12042] __nla_validate_parse: 4 callbacks suppressed [ 399.137148][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 399.221303][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 399.269095][T12052] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 399.389957][T12052] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.450449][T12055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1555'. [ 399.476219][T12052] bond7: (slave bond8): making interface the new active one [ 399.501489][T12052] bond7: (slave bond8): Enslaving as an active interface with an up link [ 399.518874][T12055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 399.801786][T12064] bond6: option arp_validate: invalid value (18446744073491447809) [ 399.811294][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 399.855550][T12064] bond6 (unregistering): Released all slaves [ 399.940092][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 400.434232][T12077] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1563'. [ 400.918845][T12093] syzkaller1: entered promiscuous mode [ 400.949659][T12093] syzkaller1: entered allmulticast mode [ 402.441914][T12147] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1582'. [ 402.530127][T12158] netlink: 'syz.3.1585': attribute type 15 has an invalid length. [ 402.990672][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 403.029027][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 403.132921][T12187] tipc: Enabling of bearer rejected, already enabled [ 403.252308][ T30] audit: type=1800 audit(1765600461.711:4): pid=12193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1594" name=C001 dev="tmpfs" ino=1566 res=0 errno=0 [ 403.353880][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 403.456510][T12198] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 403.487150][T12198] bond6 (unregistering): Released all slaves [ 404.308568][T12214] veth0_to_bridge: entered promiscuous mode [ 405.239895][T12213] veth0_to_bridge: left promiscuous mode [ 406.481622][T12235] netlink: 'syz.4.1601': attribute type 6 has an invalid length. [ 407.628572][T12246] tipc: Enabling of bearer rejected, failed to enable media [ 407.693921][T12256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.366809][T12279] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1611'. [ 408.400918][T12282] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 408.697834][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 408.750804][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 408.761540][T12291] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1615'. [ 408.959148][T12300] pimreg3: entered allmulticast mode [ 409.225935][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 409.249214][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 409.900557][T12318] delete_channel: no stack [ 410.067135][T12335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1625'. [ 410.144754][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'. [ 411.496893][T12404] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 411.505858][T12404] syzkaller1: linktype set to 768 [ 411.679507][T12411] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 411.856864][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 412.144252][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 413.093021][T12452] @: renamed from veth0_vlan [ 413.440022][T12467] net_ratelimit: 6 callbacks suppressed [ 413.440042][T12467] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 414.046003][T12482] x_tables: duplicate underflow at hook 1 [ 414.084340][T12482] No such timeout policy "syz1" [ 414.107488][T12482] __nla_validate_parse: 5 callbacks suppressed [ 414.107509][T12482] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1666'. [ 414.149803][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'. [ 414.171989][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 414.465256][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 414.987390][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 414.997647][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 415.013631][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'. [ 415.551565][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 416.296417][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 416.316522][T12561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1690'. [ 416.909529][T12578] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 416.958039][T12578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.196033][T12593] ip6tnl1: entered promiscuous mode [ 417.201490][T12593] ip6tnl1: entered allmulticast mode [ 417.296030][T12600] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 417.430450][T12600] ip6gre2: entered promiscuous mode [ 417.449605][T12600] ip6gre2: entered allmulticast mode [ 417.517997][ T7822] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 417.534882][ T7822] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 417.544795][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 417.777901][T12605] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 417.850482][T12605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.874360][T12605] netlink: 'syz.1.1701': attribute type 3 has an invalid length. [ 417.882378][T12605] netlink: 'syz.1.1701': attribute type 2 has an invalid length. [ 417.891162][T12605] netlink: 'syz.1.1701': attribute type 2 has an invalid length. [ 418.145914][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 418.171971][T12620] netlink: 'syz.4.1707': attribute type 3 has an invalid length. [ 418.405826][ T5906] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 418.938599][T12654] delete_channel: no stack [ 419.217296][T12680] netlink: 'syz.3.1722': attribute type 4 has an invalid length. [ 419.246691][T12674] syzkaller0: entered promiscuous mode [ 419.252337][T12674] syzkaller0: entered allmulticast mode [ 419.284591][T12680] netlink: 'syz.3.1722': attribute type 8 has an invalid length. [ 419.326695][T12680] __nla_validate_parse: 10 callbacks suppressed [ 419.326716][T12680] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1722'. [ 421.096416][T12699] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 421.106960][T12699] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 421.125044][T12699] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 421.310958][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 421.326400][T12709] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 421.443317][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.797732][T12735] delete_channel: no stack [ 422.046647][T12741] team_slave_0: entered promiscuous mode [ 422.052805][T12741] team_slave_1: entered promiscuous mode [ 422.058679][T12741] bridge2: entered promiscuous mode [ 422.064307][T12741] geneve0: entered promiscuous mode [ 422.078048][T12741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.104611][T12753] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 422.184339][T12756] tipc: Trying to set illegal importance in message [ 422.369203][T12762] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3944. macoff=96 [ 422.399199][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 422.420973][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 422.614416][T12778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1753'. [ 422.725926][T12782] delete_channel: no stack [ 422.740897][T12782] delete_channel: no stack [ 422.837926][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 423.077237][T12799] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 423.111150][T12799] team0: Port device dummy0 added [ 423.128683][T12800] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 423.155868][T12800] team0: Port device dummy0 removed [ 424.068315][T12825] veth0: entered promiscuous mode [ 424.074117][T12825] veth0: entered allmulticast mode [ 424.529162][T12834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1770'. [ 425.107769][T12860] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1777'. [ 426.046377][T12902] tipc: Enabled bearer , priority 0 [ 426.071336][T12902] syzkaller0: entered promiscuous mode [ 426.093024][T12902] syzkaller0: entered allmulticast mode [ 426.136565][T12902] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1789'. [ 426.229546][T12902] tipc: Resetting bearer [ 426.247800][T12900] tipc: Resetting bearer [ 426.292886][T12900] tipc: Disabling bearer [ 426.946107][T12946] sctp: [Deprecated]: syz.2.1798 (pid 12946) Use of int in max_burst socket option. [ 426.946107][T12946] Use struct sctp_assoc_value instead [ 427.088902][T12953] x_tables: duplicate underflow at hook 1 [ 427.287266][T12958] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1804'. [ 427.301640][T12957] tipc: Enabled bearer , priority 0 [ 427.334873][T12957] syzkaller0: entered promiscuous mode [ 427.340412][T12957] syzkaller0: entered allmulticast mode [ 427.428117][T12957] tipc: Resetting bearer [ 427.520837][T12963] bond6 (unregistering): Released all slaves [ 427.697831][T12955] tipc: Resetting bearer [ 427.725426][T12955] tipc: Disabling bearer [ 427.772067][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 427.781974][T12981] team_slave_0: left promiscuous mode [ 427.817190][T12981] team_slave_1: left promiscuous mode [ 427.834924][T12981] bridge2: left promiscuous mode [ 427.840344][T12981] geneve0: left promiscuous mode [ 428.236864][T12981] team0 (unregistering): Port device team_slave_0 removed [ 428.278729][T12981] team0 (unregistering): Port device team_slave_1 removed [ 428.298427][T12981] team0 (unregistering): Port device bridge2 removed [ 428.315587][T12981] team0 (unregistering): Port device geneve0 removed [ 428.397771][T13002] syzkaller1: entered promiscuous mode [ 428.406004][T13002] syzkaller1: entered allmulticast mode [ 428.516962][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 428.809315][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 428.919294][T13023] bond6: entered allmulticast mode [ 428.939557][T13023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.025884][T13026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.050285][T13026] bond7: entered allmulticast mode [ 429.058393][T13026] bond6: (slave bond7): Enslaving as an active interface with an up link [ 429.229749][T13036] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1823'. [ 429.381626][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.665529][T13042] gretap0: entered promiscuous mode [ 429.784719][T13045] netlink: 'syz.1.1827': attribute type 5 has an invalid length. [ 429.813438][T13048] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 430.046629][T13059] netlink: 'syz.2.1831': attribute type 30 has an invalid length. [ 431.658018][T13118] team0: Port device bridge5 added [ 431.704653][T13122] bridge0: port 3(team0) entered blocking state [ 431.712556][T13122] bridge0: port 3(team0) entered disabled state [ 431.720914][T13122] team0: entered allmulticast mode [ 431.730829][T13122] team_slave_0: entered allmulticast mode [ 431.739109][T13122] team_slave_1: entered allmulticast mode [ 431.745393][T13122] bridge5: entered allmulticast mode [ 431.761191][T13122] team0: entered promiscuous mode [ 431.793243][T13122] team_slave_0: entered promiscuous mode [ 431.811044][T13122] team_slave_1: entered promiscuous mode [ 431.837824][T13122] bridge5: entered promiscuous mode [ 432.034227][T13134] netlink: 'syz.2.1848': attribute type 29 has an invalid length. [ 432.173380][T13134] netlink: 'syz.2.1848': attribute type 29 has an invalid length. [ 432.183157][T13134] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1848'. [ 433.019411][T13164] openvswitch: netlink: Message has 1 unknown bytes. [ 433.026856][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.499739][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.520170][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.567197][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.645088][T13189] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 433.716993][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.767269][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.783869][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.812966][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.820791][T13196] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 433.875485][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 433.897185][T13189] wg1 speed is unknown, defaulting to 1000 [ 433.903775][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 433.936098][T13196] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1863'. [ 433.940966][T13197] netlink: 'syz.0.1863': attribute type 13 has an invalid length. [ 433.955895][T13197] netlink: 'syz.0.1863': attribute type 12 has an invalid length. [ 434.011933][T13204] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 434.286214][T13215] gre2: entered allmulticast mode [ 434.294136][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 434.526187][T13223] bond4: entered promiscuous mode [ 434.531838][T13223] bond4: entered allmulticast mode [ 434.539945][T13223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.563808][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 434.858771][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'. [ 434.878781][T13223] bond4 (unregistering): Released all slaves [ 435.095264][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 435.161617][T13255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1879'. [ 435.162716][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1880'. [ 435.465202][T13275] netlink: 'syz.1.1883': attribute type 29 has an invalid length. [ 435.641920][T13282] pimreg3: entered allmulticast mode [ 436.239283][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.400886][T13302] netlink: 'syz.3.1891': attribute type 11 has an invalid length. [ 436.427892][T13301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.631134][T13313] geneve3: entered promiscuous mode [ 436.646554][ T6347] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.656000][ T6347] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.694940][ T6347] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.729494][ T6347] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.775524][T13283] wg1 speed is unknown, defaulting to 1000 [ 436.782475][T13320] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 437.317979][T13348] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 437.428100][T13330] wg1 speed is unknown, defaulting to 1000 [ 437.582325][T13358] tipc: Enabled bearer , priority 0 [ 437.607330][T13358] syzkaller0: entered promiscuous mode [ 437.613399][T13358] syzkaller0: entered allmulticast mode [ 438.084550][T13372] __nla_validate_parse: 5 callbacks suppressed [ 438.084572][T13372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1907'. [ 438.132391][T13371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1907'. [ 438.241618][T13372] ipvlan0: entered promiscuous mode [ 438.322370][T13371] ipvlan1: entered promiscuous mode [ 438.478340][T13357] tipc: Resetting bearer [ 438.519235][T13357] tipc: Disabling bearer [ 438.790111][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 439.084909][T13390] wg1 speed is unknown, defaulting to 1000 [ 439.088215][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'. [ 439.298933][T13414] tipc: Enabling of bearer rejected, already enabled [ 439.307742][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 439.466516][T13411] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 439.574081][T13427] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 439.741012][T13431] netlink: 210320 bytes leftover after parsing attributes in process `syz.2.1925'. [ 439.931676][T13444] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 439.986566][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1926'. [ 440.087187][T13446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.295466][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 440.309421][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 440.445918][T13417] wg1 speed is unknown, defaulting to 1000 [ 441.169480][T13463] netlink: 'syz.3.1932': attribute type 3 has an invalid length. [ 441.294195][T13424] wg1 speed is unknown, defaulting to 1000 [ 441.621839][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 441.717143][T13484] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 441.717823][T13482] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.812304][T13488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.821411][T13488] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 441.837750][T13488] bond9: (slave sit3): Error -95 calling set_mac_address [ 441.857360][T13493] netlink: 'syz.1.1938': attribute type 11 has an invalid length. [ 441.900477][T13496] netlink: 'syz.3.1939': attribute type 16 has an invalid length. [ 441.910168][T13496] netlink: 'syz.3.1939': attribute type 3 has an invalid length. [ 441.917242][T13490] bond10: Unable to set up delay as MII monitoring is disabled [ 441.928098][T13490] bond10 (unregistering): Released all slaves [ 442.222613][T13421] wg1 speed is unknown, defaulting to 1000 [ 442.222840][T13506] tipc: Enabled bearer , priority 0 [ 442.240495][T13495] tipc: Disabling bearer [ 442.938408][T13513] delete_channel: no stack [ 443.339552][T13535] __nla_validate_parse: 3 callbacks suppressed [ 443.339573][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'. [ 443.491369][T13547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1953'. [ 443.804091][T13554] sctp: [Deprecated]: syz.0.1954 (pid 13554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.804091][T13554] Use struct sctp_sack_info instead [ 443.839513][T13560] netlink: 'syz.3.1956': attribute type 3 has an invalid length. [ 443.922592][T13560] netlink: 'syz.3.1956': attribute type 1 has an invalid length. [ 443.984044][T13560] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1956'. [ 444.019700][T13560] NCSI netlink: No device for ifindex 813332851 [ 444.482625][T13574] wg1 speed is unknown, defaulting to 1000 [ 444.691394][T13611] 8021q: VLANs not supported on ip6gre0 [ 445.049024][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 445.049555][T13622] bond0: (slave erspan0): Error: Device type is different from other slaves [ 445.074192][T13620] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1965'. [ 445.118794][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'. [ 445.142970][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 445.149441][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'. [ 445.422710][T13618] wg1 speed is unknown, defaulting to 1000 [ 445.490598][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 445.817845][T13644] bridge5: port 1(veth7) entered blocking state [ 445.826017][T13644] bridge5: port 1(veth7) entered disabled state [ 445.842846][T13644] veth7: entered allmulticast mode [ 445.868917][T13644] veth7: entered promiscuous mode [ 445.886161][T13644] bridge5: port 1(veth7) entered blocking state [ 445.892951][T13644] bridge5: port 1(veth7) entered forwarding state [ 445.955154][ T1144] bridge5: port 1(veth7) entered disabled state [ 446.007344][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 446.120330][T13650] tipc: Enabled bearer , priority 0 [ 446.129326][T13652] syzkaller0: entered promiscuous mode [ 446.153443][T13652] syzkaller0: entered allmulticast mode [ 446.254433][T13650] tipc: Resetting bearer [ 446.294729][T13649] tipc: Resetting bearer [ 446.400445][T13649] tipc: Disabling bearer [ 446.571005][T13687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'. [ 446.740958][T13690] nbd: must specify at least one socket [ 446.986142][T13707] netlink: 'syz.3.1990': attribute type 21 has an invalid length. [ 446.994374][T13707] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 447.585524][T13744] mac80211_hwsim hwsim6 ;: renamed from wlan0 [ 447.945888][T13726] wg1 speed is unknown, defaulting to 1000 [ 448.635697][T13787] __nla_validate_parse: 16 callbacks suppressed [ 448.635718][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2014'. [ 448.755443][T13791] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 448.769544][T13791] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2013'. [ 449.010231][T13795] syz.3.2015 (13795) used obsolete PPPIOCDETACH ioctl [ 449.272131][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 449.731535][T13819] tipc: Enabled bearer , priority 0 [ 449.739763][T13819] syzkaller0: entered promiscuous mode [ 449.759926][T13819] syzkaller0: entered allmulticast mode [ 449.864701][T13827] sctp: [Deprecated]: syz.3.2022 (pid 13827) Use of int in max_burst socket option deprecated. [ 449.864701][T13827] Use struct sctp_assoc_value instead [ 449.895187][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 450.149556][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 450.200615][T13851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.327998][T13853] syzkaller1: entered promiscuous mode [ 450.334740][T13853] syzkaller1: entered allmulticast mode [ 450.359410][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2030'. [ 450.388049][T13853] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2030'. [ 450.413063][T13853] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 450.436855][T13859] tunl0: Caught tx_queue_len zero misconfig [ 450.546580][T13814] tipc: Resetting bearer [ 450.574700][T13814] tipc: Disabling bearer [ 450.877846][T13873] syzkaller1: entered promiscuous mode [ 450.889652][T13873] syzkaller1: entered allmulticast mode [ 450.924176][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 450.951497][T13880] xt_hashlimit: size too large, truncated to 1048576 [ 450.963502][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 450.971316][T13881] syzkaller1: entered promiscuous mode [ 450.972427][T13877] netlink: 'syz.1.2036': attribute type 11 has an invalid length. [ 450.978843][T13881] syzkaller1: entered allmulticast mode [ 451.058496][T13885] syzkaller1: left promiscuous mode [ 451.070305][T13885] syzkaller1: left allmulticast mode [ 451.317395][T13893] netlink: 'syz.1.2040': attribute type 8 has an invalid length. [ 451.517747][T13897] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.620483][T13897] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.809713][T13897] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.845511][T13875] wg1 speed is unknown, defaulting to 1000 [ 451.917928][T13897] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.929594][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2043'. [ 452.068275][T13909] bond6: entered promiscuous mode [ 452.071402][T13913] SET target dimension over the limit! [ 452.081822][T13909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 452.089944][T13916] SET target dimension over the limit! [ 452.120885][T13910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 452.129287][T13910] bond7: entered promiscuous mode [ 452.135783][T13910] bond6: (slave bond7): Enslaving as an active interface with an up link [ 452.437220][T13923] netlink: 'syz.4.2045': attribute type 9 has an invalid length. [ 452.445287][T13923] netlink: 'syz.4.2045': attribute type 6 has an invalid length. [ 452.467462][T13922] ip6tnl2: entered allmulticast mode [ 452.497238][ T33] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.552555][ T33] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.670678][ T7836] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.715615][ T7836] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.928795][T13936] syzkaller0: entered promiscuous mode [ 452.953870][T13936] syzkaller0: entered allmulticast mode [ 453.048708][T13942] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 453.800595][T13967] __nla_validate_parse: 3 callbacks suppressed [ 453.800616][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 454.006241][T13977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2062'. [ 454.006445][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2062'. [ 455.643420][T13995] tipc: Enabled bearer , priority 0 [ 455.761399][T13995] tipc: Disabling bearer [ 455.805012][T14005] raw_sendmsg: syz.4.2067 forgot to set AF_INET. Fix it! [ 456.052465][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 456.087172][T14018] nbd: must specify a size in bytes for the device [ 456.112509][T14018] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2071'. [ 456.122293][T14018] block nbd0: not configured, cannot reconfigure [ 456.238917][T14025] netlink: 'syz.1.2071': attribute type 10 has an invalid length. [ 456.394930][T14033] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2077'. [ 456.462269][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 456.474792][T14039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2078'. [ 456.485076][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'. [ 456.495860][T14041] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2075'. [ 456.654354][T14049] 0{X: renamed from gretap0 (while UP) [ 456.675689][T14049] 0{X: entered allmulticast mode [ 456.681685][T14049] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 456.698940][T14050] 1{X: renamed from 30{X (while UP) [ 456.707792][T14050] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 457.621224][T14091] bond0: option miimon: invalid value (18446744072730617911) [ 457.657860][T14091] bond0: option miimon: allowed values 0 - 2147483647 [ 457.880797][T14101] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 457.903702][T14104] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 457.913863][T14101] netlink: 'syz.0.2094': attribute type 8 has an invalid length. [ 457.938343][T14112] netlink: zone id is out of range [ 457.945850][T14112] netlink: zone id is out of range [ 457.951329][T14112] netlink: zone id is out of range [ 457.966859][T14104] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.979540][T14112] netlink: zone id is out of range [ 457.997809][T14106] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 458.008759][T14112] netlink: zone id is out of range [ 458.025245][T14106] bond6 (unregistering): Released all slaves [ 458.045447][T14112] netlink: zone id is out of range [ 458.050919][T14112] netlink: zone id is out of range [ 458.062121][T14112] netlink: zone id is out of range [ 458.698516][T14158] netlink: 'syz.2.2106': attribute type 3 has an invalid length. [ 458.905867][T14122] wg1 speed is unknown, defaulting to 1000 [ 459.070865][T14167] __nla_validate_parse: 8 callbacks suppressed [ 459.070885][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 460.061016][T14204] x_tables: duplicate underflow at hook 3 [ 460.410750][T14200] wg1 speed is unknown, defaulting to 1000 [ 460.414081][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2121'. [ 460.433823][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2121'. [ 460.477155][T14212] tipc: Cannot configure node identity twice [ 460.606456][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 461.336105][T14211] wg1 speed is unknown, defaulting to 1000 [ 461.356999][T14201] wg1 speed is unknown, defaulting to 1000 [ 461.625114][T14243] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 461.841180][T14243] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.945196][T14241] bond6: (slave veth5): Enslaving as an active interface with a down link [ 462.043523][T14246] bond6: (slave veth7): Enslaving as an active interface with a down link [ 462.214597][T14247] bond6 (unregistering): (slave veth5): Releasing active interface [ 462.227333][T14247] bond6 (unregistering): (slave veth7): Releasing active interface [ 462.240281][T14247] bond6 (unregistering): Released all slaves [ 462.575286][T14270] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 462.607721][T14271] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 462.690222][T14273] syzkaller0: entered allmulticast mode [ 462.795689][T14268] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2135'. [ 463.031171][T14289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2139'. [ 463.049261][T14289] team0: left allmulticast mode [ 463.055213][T14289] team_slave_0: left allmulticast mode [ 463.064052][T14289] team_slave_1: left allmulticast mode [ 463.069735][T14289] bridge5: left allmulticast mode [ 463.075743][T14289] team0: left promiscuous mode [ 463.080717][T14289] team_slave_0: left promiscuous mode [ 463.103502][T14289] team_slave_1: left promiscuous mode [ 463.123134][T14289] bridge5: left promiscuous mode [ 463.129229][T14289] bridge0: port 3(team0) entered disabled state [ 463.176531][T14289] bridge_slave_0: left allmulticast mode [ 463.197423][T14289] bridge_slave_0: left promiscuous mode [ 463.226180][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.260774][T14289] bridge_slave_1: left allmulticast mode [ 463.281079][T14289] bridge_slave_1: left promiscuous mode [ 463.328827][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.358069][T14289] bond0: (slave bond_slave_0): Releasing backup interface [ 463.399449][T14289] bond0: (slave bond_slave_1): Releasing backup interface [ 463.437571][T14289] team0: Port device team_slave_0 removed [ 463.469918][T14289] team0: Port device team_slave_1 removed [ 463.512020][T14289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.579393][T14289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.721833][T14289] net_ratelimit: 46 callbacks suppressed [ 463.721857][T14289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.160736][T14335] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 464.193910][T14335] netlink: 'syz.1.2151': attribute type 2 has an invalid length. [ 464.208048][T14335] netlink: 'syz.1.2151': attribute type 1 has an invalid length. [ 464.217554][T14335] netlink: 'syz.1.2151': attribute type 2 has an invalid length. [ 464.564707][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 464.573715][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 464.631225][T14362] gretap1: entered allmulticast mode [ 464.947245][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 465.327314][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'. [ 465.404534][T14403] sctp: [Deprecated]: syz.0.2172 (pid 14403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.404534][T14403] Use struct sctp_sack_info instead [ 465.645974][T14409] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 465.653003][T14409] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 465.768235][T14395] wg1 speed is unknown, defaulting to 1000 [ 465.905994][T14425] xt_TCPMSS: Only works on TCP SYN packets [ 466.303884][T14444] pim6reg: entered allmulticast mode [ 466.309839][T14448] pim6reg: left allmulticast mode [ 466.689940][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 466.756315][T14434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.969626][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 467.166258][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.174146][T14460] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.327615][T14460] batadv_slave_0: left promiscuous mode [ 467.461505][T14460] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 467.469218][T14460] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 467.482826][T14460] ip6gre1: left promiscuous mode [ 467.500118][T14460] macvtap1: left promiscuous mode [ 467.512676][T14460] bond1: left promiscuous mode [ 467.523030][T14460] bridge3: left promiscuous mode [ 467.528744][T14460] bond1: left allmulticast mode [ 467.535349][T14460] bridge3: left allmulticast mode [ 467.586831][T14460] ip6gretap1: left allmulticast mode [ 467.608681][T14460] vlan0: left allmulticast mode [ 467.613842][T14460] veth1: left allmulticast mode [ 467.645023][T14460] bond4: left promiscuous mode [ 467.649943][T14460] bridge5: left promiscuous mode [ 467.655758][T14460] bond4: left allmulticast mode [ 467.660740][T14460] bridge5: left allmulticast mode [ 467.734619][T14460] gre2: left allmulticast mode [ 467.762731][T14460] ip6tnl2: left allmulticast mode [ 467.779414][ T9844] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.794968][ T9844] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.807700][ T7721] wg1 speed is unknown, defaulting to 1000 [ 467.819742][ T7768] syz0: Port: 1 Link DOWN [ 467.837574][ T7721] syz: Port: 1 Link DOWN [ 467.854998][ T9844] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.888168][ T9844] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.929099][ T9844] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.945958][ T9844] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 467.967089][ T9844] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.992647][ T9844] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 468.052201][ T9844] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.076425][ T9844] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 468.148311][T14485] syzkaller0: entered promiscuous mode [ 468.155061][T14485] syzkaller0: entered allmulticast mode [ 468.162438][ T7836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.213950][ T7836] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 468.242325][T14494] svc: failed to register nfsdv3 RPC service (errno 111). [ 468.296989][T14494] svc: failed to register nfsaclv3 RPC service (errno 111). [ 468.811728][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 469.007214][T14538] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2198'. [ 470.251878][T14519] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2195'. [ 470.301609][T14538] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 470.521114][T14549] bond8: Removing last ns target with arp_interval on [ 470.631411][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2201'. [ 470.674242][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 471.060530][T14588] pimreg: entered allmulticast mode [ 471.076517][T14588] pimreg: left allmulticast mode [ 471.388861][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 471.420799][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 471.762993][T14631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2219'. [ 472.030605][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 472.471145][T14640] wg1 speed is unknown, defaulting to 1000 [ 472.769578][T14668] bridge6: entered promiscuous mode [ 472.931146][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2229'. [ 472.978113][T14644] wg1 speed is unknown, defaulting to 1000 [ 473.130578][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 473.173263][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'. [ 473.379022][T14687] tipc: Enabled bearer , priority 0 [ 473.391273][T14687] syzkaller0: entered promiscuous mode [ 473.397071][T14687] syzkaller0: entered allmulticast mode [ 473.453881][T14687] tipc: Resetting bearer [ 473.518818][T14700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.703065][T14686] tipc: Resetting bearer [ 473.797326][T14686] tipc: Disabling bearer [ 473.957538][T14705] siw: device registration error -23 [ 474.111833][T14709] dummy0: entered promiscuous mode [ 474.118728][T14709] dummy0: left promiscuous mode [ 474.880415][T14762] netlink: 'syz.4.2255': attribute type 8 has an invalid length. [ 475.294460][T14789] __nla_validate_parse: 1 callbacks suppressed [ 475.294481][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 475.340289][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 475.472260][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 475.810354][T14808] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 475.821709][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 475.833203][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2268'. [ 475.853317][T14808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2270'. [ 476.171393][T14831] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 476.178344][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 476.188296][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 476.345341][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 476.462714][T14849] 8021q: adding VLAN 0 to HW filter on device bond11 [ 476.569948][T14858] veth1_to_batadv: entered promiscuous mode [ 476.766874][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 476.849237][T14838] wg1 speed is unknown, defaulting to 1000 [ 477.002120][T14871] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 477.074144][T14865] bond6: entered promiscuous mode [ 477.079282][T14865] bridge8: entered promiscuous mode [ 477.085024][T14865] bond6: entered allmulticast mode [ 477.096515][T14865] bridge8: entered allmulticast mode [ 477.804118][T14878] wg1 speed is unknown, defaulting to 1000 [ 478.242510][T14936] syzkaller1: entered promiscuous mode [ 478.270390][T14936] syzkaller1: entered allmulticast mode [ 478.632569][T14955] tipc: Enabling of bearer rejected, already enabled [ 479.158454][T14941] wg1 speed is unknown, defaulting to 1000 [ 479.531353][T14930] wg1 speed is unknown, defaulting to 1000 [ 479.637771][T14978] Cannot find map_set index 135 as target [ 479.923527][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 480.307867][T14998] : renamed from bond_slave_0 [ 480.489293][T15003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.622064][T15005] GUP no longer grows the stack in syz.1.2319 (15005): 200000003000-20000000a000 (200000001000) [ 480.643682][T15005] CPU: 0 UID: 0 PID: 15005 Comm: syz.1.2319 Not tainted syzkaller #0 PREEMPT(full) [ 480.643714][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.643732][T15005] Call Trace: [ 480.643744][T15005] [ 480.643755][T15005] dump_stack_lvl+0x189/0x250 [ 480.643789][T15005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.643814][T15005] ? __pfx__printk+0x10/0x10 [ 480.643839][T15005] ? find_vma+0xe7/0x160 [ 480.643880][T15005] __get_user_pages+0x2470/0x2a00 [ 480.643910][T15005] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 480.643961][T15005] ? rcu_is_watching+0x15/0xb0 [ 480.643993][T15005] __gup_longterm_locked+0xde4/0x1660 [ 480.644024][T15005] ? try_grab_folio_fast+0x1bf/0x6a0 [ 480.644061][T15005] ? gup_fast_fallback+0x1b86/0x22d0 [ 480.644089][T15005] gup_fast_fallback+0x1d65/0x22d0 [ 480.644154][T15005] ? __pfx_gup_fast_fallback+0x10/0x10 [ 480.644174][T15005] ? __mutex_lock+0x335/0x1350 [ 480.644212][T15005] ? is_valid_gup_args+0x11f/0x200 [ 480.644238][T15005] ? get_user_pages_fast+0x4d/0xb0 [ 480.644265][T15005] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 480.644305][T15005] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 480.644325][T15005] ? wait_for_space+0x248/0x2d0 [ 480.644348][T15005] iov_iter_get_pages2+0x5e/0xa0 [ 480.644390][T15005] __se_sys_vmsplice+0x548/0x10d0 [ 480.644434][T15005] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 480.644456][T15005] ? __pfx_futex_wait+0x10/0x10 [ 480.644552][T15005] ? do_syscall_64+0xbe/0xf80 [ 480.644586][T15005] do_syscall_64+0xfa/0xf80 [ 480.644614][T15005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.644635][T15005] ? clear_bhb_loop+0x60/0xb0 [ 480.644662][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.644682][T15005] RIP: 0033:0x7fed4918f749 [ 480.644701][T15005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.644721][T15005] RSP: 002b:00007fed473f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 480.644744][T15005] RAX: ffffffffffffffda RBX: 00007fed493e5fa0 RCX: 00007fed4918f749 [ 480.644758][T15005] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 480.644773][T15005] RBP: 00007fed49213f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.644786][T15005] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 480.644799][T15005] R13: 00007fed493e6038 R14: 00007fed493e5fa0 R15: 00007ffec02e3068 [ 480.644836][T15005] [ 480.950331][T15007] __nla_validate_parse: 7 callbacks suppressed [ 480.950347][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 481.257063][T15024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2322'. [ 481.289739][T15024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2322'. [ 481.341341][T14991] wg1 speed is unknown, defaulting to 1000 [ 481.380686][T15033] tipc: Enabled bearer , priority 0 [ 481.491379][T15034] syzkaller0: entered promiscuous mode [ 481.513418][T15034] syzkaller0: entered allmulticast mode [ 481.585826][T15036] tipc: Resetting bearer [ 483.288695][T15036] tipc: Disabling bearer [ 483.353524][ T5921] tipc: Node number set to 1879768371 [ 483.403790][T15018] wg1 speed is unknown, defaulting to 1000 [ 483.416562][T15056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.451274][T15065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'. [ 483.475754][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 483.533619][T15056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.614750][T15067] nbd: socks must be embedded in a SOCK_ITEM attr [ 483.673024][T15056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.764977][T15078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2334'. [ 483.775757][T15073] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2334'. [ 483.786658][T15076] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 483.837502][T15077] erspan1: entered allmulticast mode [ 483.893639][T15076] bond12: entered promiscuous mode [ 483.896564][T14641] udevd[14641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 483.899165][T15076] bond12: entered allmulticast mode [ 483.917064][T15076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 483.990675][T15056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.066985][T15085] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 484.118392][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2336'. [ 484.144750][T15086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2336'. [ 484.222809][T15085] 8021q: adding VLAN 0 to HW filter on device bond13 [ 484.423846][ T1133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.452303][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2340'. [ 484.455337][ T1133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.512979][ T7831] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.547147][ T7831] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.872260][T15100] wg1 speed is unknown, defaulting to 1000 [ 485.770204][T15126] wg1 speed is unknown, defaulting to 1000 [ 485.783961][T15116] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 485.979890][T15144] netem: unknown loss type 0 [ 485.997413][T15144] netem: change failed [ 486.107349][T15150] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 486.510189][T15167] __nla_validate_parse: 6 callbacks suppressed [ 486.510208][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 486.654557][T15170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 486.726075][T15170] netlink: 'syz.4.2358': attribute type 29 has an invalid length. [ 487.271629][T15196] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2365'. [ 487.325605][T15203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2366'. [ 487.572830][T15212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.744108][T15229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2371'. [ 487.809403][T15236] team0: entered promiscuous mode [ 487.818615][T15236] team_slave_0: entered promiscuous mode [ 487.844302][T15236] team_slave_1: entered promiscuous mode [ 487.864767][T15239] netlink: 'syz.4.2374': attribute type 11 has an invalid length. [ 487.875912][T15236] team0: entered allmulticast mode [ 487.881095][T15236] team_slave_0: entered allmulticast mode [ 487.896108][T15236] team_slave_1: entered allmulticast mode [ 487.902729][T15236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2372'. [ 487.938356][T15236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.115104][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 488.156884][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2377'. [ 488.172214][T15257] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 488.206275][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 488.242078][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2376'. [ 488.292505][T15257] bond10: entered promiscuous mode [ 488.298519][T15257] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.242199][T15313] netlink: 'syz.1.2392': attribute type 2 has an invalid length. [ 490.340603][T15312] wg1 speed is unknown, defaulting to 1000 [ 490.602785][T15317] wg1 speed is unknown, defaulting to 1000 [ 490.846806][T15351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.987179][T15351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.102551][T15351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.212880][T15351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.421793][T11384] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.437700][T15344] wg1 speed is unknown, defaulting to 1000 [ 491.616982][T11384] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.707120][T15346] wg1 speed is unknown, defaulting to 1000 [ 491.772605][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.908148][ T7831] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.966734][T15357] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 491.983741][T15357] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 491.997990][T15357] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 492.007560][T15357] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 492.019407][T15357] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 492.899380][T15385] netlink: 'syz.1.2411': attribute type 4 has an invalid length. [ 492.916293][T15384] netlink: 'syz.1.2411': attribute type 4 has an invalid length. [ 492.927812][T15387] __nla_validate_parse: 5 callbacks suppressed [ 492.927834][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2412'. [ 493.569055][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'. [ 494.102267][T15438] SET target dimension over the limit! [ 494.255268][T15403] wg1 speed is unknown, defaulting to 1000 [ 494.462498][T15448] tipc: Enabling of bearer rejected, failed to enable media [ 494.478248][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 494.498140][T15448] netlink: 'syz.2.2428': attribute type 20 has an invalid length. [ 494.536323][ T1133] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.536547][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 494.556045][ T1133] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.573738][ T1133] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.594876][ T1133] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.604964][T15448] netlink: 'syz.2.2428': attribute type 20 has an invalid length. [ 494.716903][T15428] wg1 speed is unknown, defaulting to 1000 [ 495.301570][T15441] wg1 speed is unknown, defaulting to 1000 [ 495.366630][T15470] tipc: Enabled bearer , priority 0 [ 495.374457][T15470] syzkaller0: entered promiscuous mode [ 495.379975][T15470] syzkaller0: entered allmulticast mode [ 495.437970][T15470] tipc: Resetting bearer [ 495.570779][T15479] xt_l2tp: invalid flags combination: 0 [ 495.622352][T15481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2439'. [ 495.777007][T15484] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.967031][T15484] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.028570][T15490] tipc: Enabled bearer , priority 0 [ 496.061054][T15489] syzkaller0: entered promiscuous mode [ 496.067600][T15489] syzkaller0: entered allmulticast mode [ 496.076519][T15467] tipc: Resetting bearer [ 496.095640][T15467] tipc: Disabling bearer [ 496.116985][T15484] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.138610][T15489] tipc: Resetting bearer [ 496.157432][T15468] wg1 speed is unknown, defaulting to 1000 [ 496.168429][T15488] tipc: Resetting bearer [ 496.191831][T15488] tipc: Disabling bearer [ 496.248575][T15462] wg1 speed is unknown, defaulting to 1000 [ 496.306445][T15484] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.699835][ T7836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.829817][ T3450] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.906409][ T6347] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.998846][T15505] netlink: 'syz.0.2446': attribute type 23 has an invalid length. [ 497.046910][ T6347] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.072160][T15510] x_tables: duplicate underflow at hook 4 [ 497.714357][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2451'. [ 497.763008][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2451'. [ 497.944951][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 497.981748][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 498.206525][T15543] netlink: 'syz.2.2455': attribute type 83 has an invalid length. [ 498.297043][T15552] syzkaller0: left promiscuous mode [ 498.312567][T15552] syzkaller0: left allmulticast mode [ 498.353929][T15552] tipc: Resetting bearer [ 498.375707][T15552] tipc: Resetting bearer [ 498.502006][T15562] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 498.539142][T15569] dvmrp1: entered allmulticast mode [ 498.579247][T15572] netlink: 'syz.1.2462': attribute type 12 has an invalid length. [ 498.708078][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 498.811781][T15581] bridge_slave_0: entered promiscuous mode [ 498.828080][T15581] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 498.884232][T15585] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 499.035968][T15594] netlink: 'syz.0.2471': attribute type 1 has an invalid length. [ 499.078050][T15594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 499.145530][T15594] veth7: entered promiscuous mode [ 499.174200][T15601] syzkaller0: entered promiscuous mode [ 499.180518][T15601] syzkaller0: entered allmulticast mode [ 499.491827][T15612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.685700][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'. [ 499.988794][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 500.326269][T15643] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2485'. [ 500.599628][T15652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'. [ 500.683794][T15658] IPv6: Can't replace route, no match found [ 500.710879][T15658] batadv0: entered allmulticast mode [ 500.816750][T15639] wg1 speed is unknown, defaulting to 1000 [ 501.317181][T15674] wg1 speed is unknown, defaulting to 1000 [ 501.789459][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2498'. [ 501.855766][T15699] netlink: 'syz.2.2500': attribute type 5 has an invalid length. [ 501.976933][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 501.984089][T15699] netlink: 212352 bytes leftover after parsing attributes in process `syz.2.2500'. [ 502.790642][T15744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.149718][T15719] __nla_validate_parse: 1 callbacks suppressed [ 503.149740][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 503.256388][T15765] syzkaller0: tun_net_xmit 76 [ 503.261849][T15765] tipc: Enabled bearer , priority 0 [ 503.322589][T15737] wg1 speed is unknown, defaulting to 1000 [ 503.393790][ C1] syzkaller0: tun_net_xmit 76 [ 503.411217][T15764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2506'. [ 503.606202][T15764] bond11 (unregistering): Released all slaves [ 503.661946][T15788] netlink: 'syz.3.2520': attribute type 39 has an invalid length. [ 503.670521][ C1] syzkaller0: tun_net_xmit 76 [ 503.815523][T15781] netlink: 'syz.4.2518': attribute type 4 has an invalid length. [ 504.194312][ C1] syzkaller0: tun_net_xmit 76 [ 504.347495][ T7831] syzkaller0: tun_net_xmit 76 [ 504.352875][ T7831] syzkaller0: tun_net_xmit 48 [ 504.368392][T15757] tipc: Resetting bearer [ 506.082865][T15757] tipc: Disabling bearer [ 506.269439][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 506.851120][T15840] ip6tnl0: Caught tx_queue_len zero misconfig [ 507.264562][T15836] wg1 speed is unknown, defaulting to 1000 [ 507.321705][T15863] x_tables: duplicate underflow at hook 2 [ 507.328772][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 507.426451][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 507.800245][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2546'. [ 508.054607][T15895] macsec0: entered allmulticast mode [ 508.281640][T15905] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2551'. [ 508.305028][T15907] mac80211_hwsim hwsim2 ;: renamed from wlan0 [ 508.356695][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 508.378079][T15909] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 508.507961][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 508.570711][T15923] netlink: 'syz.1.2554': attribute type 8 has an invalid length. [ 508.581680][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2555'. [ 508.628313][T15878] wg1 speed is unknown, defaulting to 1000 [ 508.976194][T15934] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 509.004085][T15934] bond9 (unregistering): Released all slaves [ 509.627492][T15968] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 509.672408][T15968] bond11: (slave vcan1): The slave device specified does not support setting the MAC address [ 509.684307][T15968] bond11: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 509.697833][T15968] bond11: (slave vcan1): making interface the new active one [ 509.707560][T15968] bond11: (slave vcan1): Enslaving as an active interface with an up link [ 509.744895][T15968] bond11: (slave vcan2): The slave device specified does not support setting the MAC address [ 509.795472][T15968] bond11: (slave vcan2): Enslaving as a backup interface with an up link [ 509.812242][T15972] 8021q: adding VLAN 0 to HW filter on device bond11 [ 510.588005][T15992] wg1 speed is unknown, defaulting to 1000 [ 510.677198][T16012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2579'. [ 510.721167][T16019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2579'. [ 510.734823][T16019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2579'. [ 510.815412][T16021] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 510.833230][T16021] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 510.930679][T16029] x_tables: duplicate entry at hook 1 [ 510.960935][T16023] tipc: Enabled bearer , priority 0 [ 511.002028][T16024] syzkaller0: entered promiscuous mode [ 511.036058][T16024] syzkaller0: entered allmulticast mode [ 511.129906][T16022] tipc: Resetting bearer [ 511.184223][T16022] tipc: Disabling bearer [ 511.339657][T16045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2588'. [ 511.937577][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2590'. [ 511.965027][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'. [ 512.064956][T16077] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 512.091537][T16077] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 512.317320][T16092] syzkaller0: entered promiscuous mode [ 512.323033][T16092] syzkaller0: entered allmulticast mode [ 512.629380][T16106] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 512.665854][T16106] bond5: (slave dummy0): Releasing active interface [ 512.693003][T16106] dummy0: left promiscuous mode [ 512.705884][T16107] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 512.850156][T16107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.886592][T16099] netlink: 'syz.1.2600': attribute type 4 has an invalid length. [ 513.262085][T16130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.442061][T16116] wg1 speed is unknown, defaulting to 1000 [ 513.671554][T16150] __nla_validate_parse: 2 callbacks suppressed [ 513.671581][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 513.766322][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2614'. [ 513.898652][T16166] netlink: 'syz.2.2617': attribute type 2 has an invalid length. [ 513.898655][T16167] netlink: 'syz.2.2617': attribute type 2 has an invalid length. [ 514.419123][T16193] netlink: 'syz.2.2621': attribute type 21 has an invalid length. [ 514.512169][T16192] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 514.574069][T16194] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 514.587875][T16194] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 514.620038][T16193] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2621'. [ 514.643326][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'. [ 514.661883][T16189] syzkaller1: entered promiscuous mode [ 514.698709][T16189] syzkaller1: entered allmulticast mode [ 515.016923][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 515.034984][T16216] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2629'. [ 515.072526][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 515.116460][T16216] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2629'. [ 515.129502][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 515.198725][T16227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2632'. [ 515.597551][T16246] : renamed from wg2 [ 516.639900][T16300] netlink: 'syz.0.2653': attribute type 39 has an invalid length. [ 516.851102][T16290] wg1 speed is unknown, defaulting to 1000 [ 517.009318][T16312] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 517.100148][T16322] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 517.340558][T16330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.560812][T16282] wg1 speed is unknown, defaulting to 1000 [ 518.204227][T16337] wg1 speed is unknown, defaulting to 1000 [ 518.688613][T16361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.903827][T16367] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 518.905122][T16365] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 518.912229][T16367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.038741][T16370] netlink: 'syz.2.2673': attribute type 10 has an invalid length. [ 519.151825][T16371] bond15: (slave gretap0): making interface the new active one [ 519.169916][T16371] bond15: (slave gretap0): Enslaving as an active interface with an up link [ 519.206381][T16370] syz_tun: entered promiscuous mode [ 519.211746][T16370] syz_tun: entered allmulticast mode [ 519.252530][T16370] team0: Port device syz_tun added [ 519.503369][T16394] __nla_validate_parse: 4 callbacks suppressed [ 519.503392][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 519.609326][T16394] bond9: entered promiscuous mode [ 519.636777][T16394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.708507][T16400] 8021q: adding VLAN 0 to HW filter on device bond10 [ 519.718122][T16400] bond10: entered promiscuous mode [ 519.726800][T16400] bond9: (slave bond10): Enslaving as an active interface with an up link [ 519.794503][T16405] bond16: Unable to set down delay as MII monitoring is disabled [ 519.805194][T16405] bond16 (unregistering): Released all slaves [ 520.135595][T16427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2689'. [ 520.534611][T16447] netlink: 'syz.2.2694': attribute type 1 has an invalid length. [ 520.597454][T16448] delete_channel: no stack [ 520.602465][T16448] delete_channel: no stack [ 520.720396][T16455] x_tables: ip_tables: osf match: only valid for protocol 6 [ 520.844156][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'. [ 521.208715][T16473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.253169][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 521.370642][T16437] wg1 speed is unknown, defaulting to 1000 [ 521.535876][T16486] syzkaller1: entered promiscuous mode [ 521.552441][T16486] syzkaller1: entered allmulticast mode [ 521.664971][T16497] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2708'. [ 521.788868][T16503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2711'. [ 522.204926][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'. [ 522.737760][T16523] wg1 speed is unknown, defaulting to 1000 [ 523.248601][T16546] xt_hashlimit: overflow, rate too high: 0 [ 523.265215][T16548] netlink: 'syz.4.2723': attribute type 3 has an invalid length. [ 523.374522][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 524.404855][T16585] netlink: 'syz.0.2733': attribute type 33 has an invalid length. [ 524.424258][T16585] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2733'. [ 524.489567][T16585] `: renamed from team0 (while UP) [ 524.658581][T16609] netlink: 'syz.1.2738': attribute type 1 has an invalid length. [ 524.712637][T16609] bond11: entered promiscuous mode [ 524.740134][T16609] 8021q: adding VLAN 0 to HW filter on device bond11 [ 524.837467][T16612] 8021q: adding VLAN 0 to HW filter on device bond11 [ 524.865673][T16612] bond11: (slave gre1): The slave device specified does not support setting the MAC address [ 524.900013][T16612] bond11: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 524.936962][T16612] bond11: (slave gre1): making interface the new active one [ 524.973921][T16612] gre1: entered promiscuous mode [ 524.980832][T16612] bond11: (slave gre1): Enslaving as an active interface with an up link [ 524.983594][T16617] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2740'. [ 525.017439][T16589] wg1 speed is unknown, defaulting to 1000 [ 525.078729][T16616] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 525.160071][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 525.628205][T16646] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2749'. [ 525.710375][T16649] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 525.776114][T16652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2752'. [ 525.965495][T16660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.069515][T16588] wg1 speed is unknown, defaulting to 1000 [ 526.129382][T16666] netlink: 'syz.3.2757': attribute type 1 has an invalid length. [ 526.142019][T16593] wg1 speed is unknown, defaulting to 1000 [ 526.271809][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.336581][T16668] netlink: 'syz.2.2756': attribute type 3 has an invalid length. [ 526.490591][T16677] netlink: 'syz.3.2758': attribute type 6 has an invalid length. [ 526.492725][T16668] dvmrp1: left allmulticast mode [ 526.515494][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2758'. [ 526.548272][T16678] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2758'. [ 526.604217][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.612165][T16673] team0: left promiscuous mode [ 526.634208][T16673] team_slave_0: left promiscuous mode [ 526.639816][T16673] team_slave_1: left promiscuous mode [ 526.658229][T16673] syz_tun: left promiscuous mode [ 526.670187][T16673] team0: left allmulticast mode [ 526.680569][T16673] team_slave_0: left allmulticast mode [ 526.686481][T16673] team_slave_1: left allmulticast mode [ 526.691995][T16673] syz_tun: left allmulticast mode [ 526.698445][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.710458][T16673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.752916][T16658] wg1 speed is unknown, defaulting to 1000 [ 527.025184][T16688] netlink: 'syz.0.2761': attribute type 3 has an invalid length. [ 527.463740][T16706] tipc: Enabling of bearer rejected, failed to enable media [ 527.831538][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2768'. [ 527.839916][T16699] wg1 speed is unknown, defaulting to 1000 [ 527.903869][T16721] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 528.118536][T16731] netlink: 'syz.2.2771': attribute type 10 has an invalid length. [ 528.647126][T16725] wg1 speed is unknown, defaulting to 1000 [ 528.691328][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'. [ 528.765648][T16754] IPv6: addrconf: prefix option has invalid lifetime [ 528.772463][T16754] IPv6: addrconf: prefix option has invalid lifetime [ 529.008839][T16761] Timeout policy `syz0' can only be used by L3 protocol number 34916 [ 529.208682][T16767] veth0_to_batadv: entered promiscuous mode [ 529.243393][T16767] veth0_to_batadv: entered allmulticast mode [ 529.260874][T16769] nbd: must specify at least one socket [ 529.408116][T16778] syzkaller0: entered promiscuous mode [ 529.422727][T16778] syzkaller0: entered allmulticast mode [ 529.566179][T16789] tipc: Enabled bearer , priority 0 [ 529.587278][T16791] netlink: 'syz.1.2790': attribute type 9 has an invalid length. [ 529.597930][T16789] tipc: Resetting bearer [ 529.627061][T16788] tipc: Disabling bearer [ 529.719741][T16803] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 529.929802][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2795'. [ 529.970594][T16816] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2798'. [ 530.134361][T16818] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 530.230549][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2801'. [ 530.254449][T16818] 8021q: adding VLAN 0 to HW filter on device bond11 [ 530.285118][T16822] bond11: (slave geneve3): making interface the new active one [ 530.305285][T16822] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 530.324981][T16825] bridge0: entered promiscuous mode [ 530.337900][T16826] bond11: entered promiscuous mode [ 530.344194][T16826] geneve3: entered promiscuous mode [ 530.366533][T11383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.385941][T11383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.395246][T11383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.540273][T16838] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 530.549785][T16838] openvswitch: netlink: Message has 8 unknown bytes. [ 530.798390][T16861] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2808'. [ 531.140648][T16882] tipc: Enabling of bearer rejected, failed to enable media [ 531.186221][T16889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2816'. [ 531.450104][T16882] syzkaller0: entered promiscuous mode [ 531.459209][T16882] syzkaller0: entered allmulticast mode [ 531.474513][T16874] wg1 speed is unknown, defaulting to 1000 [ 532.275800][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2820'. [ 533.318509][T16910] team0: Port device bridge13 added [ 533.426411][T16925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2821'. [ 533.570461][T16925] 0{X: renamed from gretap0 (while UP) [ 533.606095][T16925] 0{X: entered allmulticast mode [ 533.622616][T16925] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 533.742767][T16899] wg1 speed is unknown, defaulting to 1000 [ 533.835432][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2827'. [ 534.128733][T16955] IPv6: addrconf: prefix option has invalid lifetime [ 534.163658][T16955] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2828'. [ 534.645767][T16962] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 534.841088][T16980] tipc: Enabling of bearer rejected, failed to enable media [ 535.725504][T17016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.736619][T17022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2846'. [ 536.046787][T17039] mac80211_hwsim hwsim1 wlan0: entered promiscuous mode [ 536.086184][T17016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.206220][T17016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.260185][T17046] netlink: 'syz.0.2850': attribute type 23 has an invalid length. [ 536.274351][T17016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.496695][ T311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.548195][ T148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.591229][T17066] ip6gre4: entered promiscuous mode [ 536.605207][T17066] ip6gre4: entered allmulticast mode [ 536.626346][ T148] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 536.654845][ T5921] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 536.662707][ T148] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 536.718375][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2858'. [ 536.766527][ T148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.798923][ T148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.823673][ T5921] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 537.022255][T17093] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2863'. [ 537.069830][T17076] wg1 speed is unknown, defaulting to 1000 [ 537.096223][T17087] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 537.188800][T17087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 537.277077][T17097] 8021q: adding VLAN 0 to HW filter on device bond9 [ 537.284658][T17097] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 537.307539][T17097] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 537.343192][T17087] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 537.351433][T17087] bond9: (slave wlan0): Opening slave failed [ 537.607267][ T5921] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 537.646422][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 537.885281][T17135] netlink: 5192 bytes leftover after parsing attributes in process `syz.0.2871'. [ 537.946521][T17139] openvswitch: netlink: Multiple metadata blocks provided [ 538.432946][T17153] bond12: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 538.489948][T17129] wg1 speed is unknown, defaulting to 1000 [ 538.957530][T17171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2882'. [ 538.988538][T17171] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2882'. [ 539.010980][T17176] bridge0: left promiscuous mode [ 539.315756][T17183] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 539.487502][T17186] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 539.536852][T17186] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 539.585958][T17186] bond12: (slave xfrm1): making interface the new active one [ 539.605300][T17186] bond12: (slave xfrm1): Enslaving as an active interface with an up link [ 539.674199][T17191] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 540.084593][T17208] netlink: 'syz.4.2890': attribute type 21 has an invalid length. [ 540.192281][T17209] bond12: option arp_validate: invalid value (18446744073491447809) [ 540.257546][T17209] bond12 (unregistering): Released all slaves [ 540.344765][T17208] netlink: 'syz.4.2890': attribute type 6 has an invalid length. [ 540.362895][T17208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2890'. [ 540.558774][T17221] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2894'. [ 540.568278][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 541.245035][T17225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.544297][T17225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.633927][T17225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.920972][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.930868][T17245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2899'. [ 541.977500][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 542.006584][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.037574][T17248] vlan2: entered promiscuous mode [ 542.052993][T17248] 0{X: entered promiscuous mode [ 542.092372][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.151522][ T7836] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.246400][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 542.523713][T17240] wg1 speed is unknown, defaulting to 1000 [ 542.749668][T17273] netlink: 'syz.4.2908': attribute type 3 has an invalid length. [ 542.914088][T17280] tipc: Enabled bearer , priority 0 [ 543.117710][T17275] wg1 speed is unknown, defaulting to 1000 [ 543.160961][T17283] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2912'. [ 543.191734][T17285] netlink: 'syz.2.2913': attribute type 20 has an invalid length. [ 543.200651][T17285] syz.2.2913 uses old SIOCAX25GETINFO [ 543.339654][T17287] xt_hashlimit: invalid interval [ 543.761401][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 543.771931][T17303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.619708][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'. [ 544.971443][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.982723][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.001999][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.014859][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.024391][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.047007][T17358] netlink: 'syz.3.2932': attribute type 1 has an invalid length. [ 545.074399][T17352] vet0_virt_wif: renamed from lo (while UP) [ 545.105531][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.113991][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.121424][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.131727][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.140349][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.179635][T17364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2932'. [ 545.265516][T17367] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2935'. [ 545.321725][ T311] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.436892][ T311] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.515665][ T311] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.630841][ T311] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.954902][T17388] IPv6: Can't replace route, no match found [ 545.982344][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 546.018565][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 546.045261][T17388] 0{X: left allmulticast mode [ 546.065651][T17388] ip6gre0: left promiscuous mode [ 546.095924][T17388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.155145][T17388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.269514][T17390] vxcan3: entered allmulticast mode [ 546.549442][T17392] Cannot find add_set index 2 as target [ 546.566663][ T311] veth7: left allmulticast mode [ 546.572009][ T311] veth7: left promiscuous mode [ 546.595797][ T311] bridge5: port 1(veth7) entered disabled state [ 546.618461][ T311] tipc: Resetting bearer [ 547.052650][ T311] bond3 (unregistering): (slave gretap1): Releasing active interface [ 547.118956][ T311] bond11 (unregistering): (slave geneve3): Releasing active interface [ 547.129138][ T311] geneve3 (unregistering): left promiscuous mode [ 547.203476][ T5152] Bluetooth: hci4: command tx timeout [ 547.485370][ T311] tipc: Disabling bearer [ 547.619198][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.629870][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.640784][ T311] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 547.656108][ T311] bond0 (unregistering): Released all slaves [ 547.758918][ T311] bond1 (unregistering): Released all slaves [ 547.879072][ T311] bond2 (unregistering): (slave lo): Releasing backup interface [ 547.887391][ T311] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 547.899337][ T311] bond2 (unregistering): Released all slaves [ 547.914864][ T311] bond3 (unregistering): Released all slaves [ 548.029865][ T311] bond4 (unregistering): Released all slaves [ 548.143107][ T311] bond5 (unregistering): Released all slaves [ 548.250164][ T311] bond6 (unregistering): (slave bond7): Releasing backup interface [ 548.259164][ T311] bond7 (unregistering): left promiscuous mode [ 548.265840][ T311] bond6 (unregistering): Released all slaves [ 548.376822][ T311] bond7 (unregistering): Released all slaves [ 548.390958][ T311] bond8 (unregistering): Released all slaves [ 548.403529][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 548.411907][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 548.514657][ T311] bond9 (unregistering): (slave bond10): Releasing backup interface [ 548.523908][ T311] bond10 (unregistering): left promiscuous mode [ 548.530582][ T311] bond9 (unregistering): Released all slaves [ 548.642560][ T311] bond10 (unregistering): Released all slaves [ 548.747842][ T311] bond11 (unregistering): Released all slaves [ 548.761668][ T311] bond12 (unregistering): Released all slaves [ 548.779640][T17354] wg1 speed is unknown, defaulting to 1000 [ 548.911973][T17434] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 548.944775][ T311] !: left promiscuous mode [ 549.077601][ T311] tipc: Left network mode [ 549.301657][ T5152] Bluetooth: hci4: command tx timeout [ 549.968207][T17429] wg1 speed is unknown, defaulting to 1000 [ 550.203645][T17456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.212902][T17457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.299340][T17354] chnl_net:caif_netlink_parms(): no params data found [ 550.580885][T17475] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 550.670156][T17480] __nla_validate_parse: 16 callbacks suppressed [ 550.670244][T17480] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2964'. [ 551.039831][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.047494][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.055213][T17354] bridge_slave_0: entered allmulticast mode [ 551.065309][T17354] bridge_slave_0: entered promiscuous mode [ 551.075165][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.082812][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.090449][T17354] bridge_slave_1: entered allmulticast mode [ 551.098545][T17354] bridge_slave_1: entered promiscuous mode [ 551.115957][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.210753][ T311] pimreg3 (unregistering): left allmulticast mode [ 551.371081][ T5152] Bluetooth: hci4: command tx timeout [ 551.943018][T17500] tipc: Enabled bearer , priority 0 [ 552.016779][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.056395][T17500] tipc: Disabling bearer [ 552.077423][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.129899][T17354] team0: Port device team_slave_0 added [ 552.196640][T17354] team0: Port device team_slave_1 added [ 552.293978][T17509] x_tables: duplicate underflow at hook 1 [ 552.294289][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.300961][T17509] No such timeout policy "syz1" [ 552.333610][T17509] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2975'. [ 552.344113][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 552.346115][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.358710][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2975'. [ 552.371792][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.382207][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2975'. [ 552.384687][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.400955][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.411898][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.439738][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.455189][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.464541][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.472404][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.487144][T17511] bridge_slave_1: left allmulticast mode [ 552.492842][T17511] bridge_slave_1: left promiscuous mode [ 552.495857][T17510] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 552.524276][T17511] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.540511][T17511] bridge_slave_0: left allmulticast mode [ 552.547086][T17511] bridge_slave_0: left promiscuous mode [ 552.554595][T17511] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.719588][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.755100][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.867922][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.060753][T17539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2980'. [ 553.141537][T17525] wg1 speed is unknown, defaulting to 1000 [ 553.297512][ T311] IPVS: stop unused estimator thread 0... [ 553.415607][T17354] hsr_slave_0: entered promiscuous mode [ 553.422745][T17354] hsr_slave_1: entered promiscuous mode [ 553.453452][ T5152] Bluetooth: hci4: command tx timeout [ 553.623315][T17560] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2985'. [ 555.030035][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2998'. [ 555.040888][T17605] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2998'. [ 555.065338][T17608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2998'. [ 555.310936][T17614] wireguard0: entered promiscuous mode [ 555.316802][T17614] wireguard0: entered allmulticast mode [ 555.320585][T17579] delete_channel: no stack [ 555.347265][T17614] team0: Device wireguard0 is of different type [ 555.496661][T17354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 555.555502][T17354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 555.607779][T17354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 555.645301][T17354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 555.655835][T17620] validate_nla: 25 callbacks suppressed [ 555.655856][T17620] netlink: 'syz.3.3002': attribute type 32 has an invalid length. [ 555.839879][T17645] bond0: (slave `): Releasing backup interface [ 555.867290][T17645] `: left promiscuous mode [ 555.890876][T17645] batman_adv: batadv0: Interface deactivated: dummy0 [ 555.898978][T17645] batman_adv: batadv0: Removing interface: dummy0 [ 555.909796][T17645] bond1: (slave bond2): Releasing backup interface [ 555.925633][T17645] bond5: (slave vcan0): Releasing backup interface [ 555.937773][T17645] bond5: (slave vcan1): making interface the new active one [ 555.956011][T17645] bond5: (slave vcan1): Releasing backup interface [ 555.973873][T17645] bond15: (slave gretap0): Releasing active interface [ 555.994730][ T5930] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 556.014042][ T5930] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 556.255987][T17354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.295950][T17625] wg1 speed is unknown, defaulting to 1000 [ 556.308010][T17660] __nla_validate_parse: 1 callbacks suppressed [ 556.308032][T17660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3009'. [ 556.436575][ T5930] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 556.456368][T17354] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.498215][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.505446][ T7822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.515062][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 556.561545][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.568780][ T7822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.792138][T17676] syzkaller0: entered promiscuous mode [ 556.798869][T17676] syzkaller0: entered allmulticast mode [ 556.872199][T17676] tipc: Enabling of bearer rejected, already enabled [ 556.947220][T17680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3015'. [ 557.055818][ T7768] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 557.058899][T17677] syzkaller1: entered allmulticast mode [ 557.116695][T17651] wg1 speed is unknown, defaulting to 1000 [ 557.554861][T17694] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 557.651988][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 557.677725][T17694] 8021q: adding VLAN 0 to HW filter on device bond11 [ 557.733148][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 557.830917][T17699] ip6gretap3: entered allmulticast mode [ 557.942423][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 557.960722][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.649871][T17354] veth0_vlan: entered promiscuous mode [ 558.696632][T17354] veth1_vlan: entered promiscuous mode [ 558.779873][T17354] veth0_macvtap: entered promiscuous mode [ 558.806363][T17354] veth1_macvtap: entered promiscuous mode [ 558.862076][T17354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.906918][T17354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.962209][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.009664][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.036296][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.108445][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.281872][ T7836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.296243][ T7836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.387214][T11384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.417523][T11384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.482701][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.495265][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.507930][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.520431][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.528387][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.696957][T17815] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 560.750424][T17815] bond16: (slave ip6gretap4): Enslaving as a backup interface with an up link [ 560.835086][T17815] veth9: entered promiscuous mode [ 560.845059][T17815] bond16: (slave veth9): Enslaving as a backup interface with a down link [ 561.072376][T17804] wg1 speed is unknown, defaulting to 1000 [ 561.360028][T17847] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 561.470670][T17804] chnl_net:caif_netlink_parms(): no params data found [ 561.705591][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.713458][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.721132][T17804] bridge_slave_0: entered allmulticast mode [ 561.729353][T17804] bridge_slave_0: entered promiscuous mode [ 561.739380][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.747375][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.757507][T17804] bridge_slave_1: entered allmulticast mode [ 561.772545][T17804] bridge_slave_1: entered promiscuous mode [ 561.891087][T17804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.909922][T17804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.045791][T17804] team0: Port device team_slave_0 added [ 562.078169][T17804] team0: Port device team_slave_1 added [ 562.277444][T17804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.301049][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.357604][T17804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.392631][T17804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.421201][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.490920][T17804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.564152][ T5152] Bluetooth: hci3: command tx timeout [ 562.731843][T17804] hsr_slave_0: entered promiscuous mode [ 562.764844][T17804] hsr_slave_1: entered promiscuous mode [ 562.771786][T17804] debugfs: 'hsr0' already exists in 'hsr' [ 562.788585][T17804] Cannot create hsr debugfs directory [ 563.265353][T17909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3097'. [ 563.346115][T17804] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.459692][T17919] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 563.518204][T17804] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.758931][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3103'. [ 563.923942][T17937] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 668.243448][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 668.623023][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 668.629678][ C1] rcu: 1-....: (1 GPs behind) idle=f7d4/1/0x4000000000000000 softirq=92563/92564 fqs=5205 [ 668.640775][ C1] rcu: hardirqs softirqs csw/system [ 668.647197][ C1] rcu: number: 8458 0 0 [ 668.653615][ C1] rcu: cputime: 236 52243 6 ==> 52480(ms) [ 668.661417][ C1] rcu: (t=10500 jiffies g=80781 q=2971 ncpus=2) [ 668.667754][ C1] CPU: 1 UID: 0 PID: 17865 Comm: syz.4.3076 Not tainted syzkaller #0 PREEMPT(full) [ 668.667779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.667791][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 [ 668.667815][ C1] Code: 5b e9 13 d2 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 f0 76 92 <65> 8b 15 b8 a5 b5 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 668.667828][ C1] RSP: 0018:ffffc90000a08b38 EFLAGS: 00000202 [ 668.667842][ C1] RAX: ffffffff8961fe40 RBX: 0000000000000000 RCX: ffff88802c00db80 [ 668.667852][ C1] RDX: 0000000000000100 RSI: 0000000000000010 RDI: 0000000000000008 [ 668.667861][ C1] RBP: 1ffff1100a39d86a R08: ffffffff89615756 R09: ffffffff8df41cc0 [ 668.667872][ C1] R10: 0000000000000001 R11: ffffffff89549fc0 R12: dffffc0000000000 [ 668.667882][ C1] R13: ffff888051cec354 R14: 0000000000000010 R15: 0000000000000002 [ 668.667891][ C1] FS: 00007ff719e986c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 668.667903][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.667913][ C1] CR2: 00007f759edf5f98 CR3: 0000000073d82000 CR4: 00000000003526f0 [ 668.667926][ C1] Call Trace: [ 668.667932][ C1] [ 668.667937][ C1] taprio_dequeue_tc_priority+0x2d0/0x750 [ 668.667966][ C1] ? taprio_dequeue+0x26/0x550 [ 668.667982][ C1] taprio_dequeue+0x186/0x550 [ 668.667995][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 668.668016][ C1] __qdisc_run+0x23f/0x1510 [ 668.668052][ C1] qdisc_run+0xc7/0x300 [ 668.668072][ C1] net_tx_action+0x7ac/0x9f0 [ 668.668092][ C1] ? net_tx_action+0x617/0x9f0 [ 668.668109][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 668.668126][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 668.668156][ C1] handle_softirqs+0x27d/0x850 [ 668.668173][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 668.668191][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 668.668213][ C1] __irq_exit_rcu+0xca/0x1f0 [ 668.668227][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 668.668254][ C1] irq_exit_rcu+0x9/0x30 [ 668.668265][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 668.668285][ C1] [ 668.668289][ C1] [ 668.668295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.668311][ C1] RIP: 0010:unwind_next_frame+0x1315/0x2390 [ 668.668327][ C1] Code: 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 <4c> 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 [ 668.668339][ C1] RSP: 0018:ffffc900035a7198 EFLAGS: 00000246 [ 668.668351][ C1] RAX: fffffffff16e035c RBX: ffffffff8f91feb4 RCX: dffffc0000000000 [ 668.668361][ C1] RDX: ffffffff8f91fe30 RSI: ffffffff9009d3ee RDI: ffffffff8bbfc600 [ 668.668372][ C1] RBP: ffffffff8f91fe30 R08: 0000000000000022 R09: ffffffff8df41cc0 [ 668.668382][ C1] R10: ffffc900035a72b8 R11: ffffffff81ad4ad0 R12: ffffffff8100012f [ 668.668392][ C1] R13: ffffffff8f91fe30 R14: ffffc900035a7268 R15: ffffffff8f91fe70 [ 668.668404][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7f [ 668.668419][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.668450][ C1] ? unwind_next_frame+0xd4/0x2390 [ 668.668469][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.668485][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.668503][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.668524][ C1] arch_stack_walk+0x11c/0x150 [ 668.668544][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.668562][ C1] stack_trace_save+0x9c/0xe0 [ 668.668583][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.668612][ C1] save_stack+0xf5/0x1f0 [ 668.668630][ C1] ? rcu_is_watching+0x15/0xb0 [ 668.668648][ C1] ? __pfx_save_stack+0x10/0x10 [ 668.668664][ C1] ? preempt_schedule_irq+0xde/0x150 [ 668.668681][ C1] ? post_alloc_hook+0x234/0x290 [ 668.668697][ C1] ? get_page_from_freelist+0x2365/0x2440 [ 668.668717][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 668.668737][ C1] ? alloc_pages_bulk_noprof+0x560/0x710 [ 668.668756][ C1] ? kasan_populate_vmalloc+0xd1/0x270 [ 668.668772][ C1] ? alloc_vmap_area+0xd4e/0x1470 [ 668.668787][ C1] ? __get_vm_area_node+0x1f8/0x300 [ 668.668803][ C1] ? get_vm_area+0x80/0xb0 [ 668.668817][ C1] ? arena_map_alloc+0x256/0x520 [ 668.668830][ C1] ? map_create+0xafd/0x16a0 [ 668.668846][ C1] ? __sys_bpf+0x5f0/0x860 [ 668.668860][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 668.668874][ C1] ? do_syscall_64+0xfa/0xf80 [ 668.668891][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.668906][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 668.668931][ C1] __set_page_owner+0x8d/0x4c0 [ 668.668952][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 668.668978][ C1] post_alloc_hook+0x234/0x290 [ 668.668999][ C1] get_page_from_freelist+0x2365/0x2440 [ 668.669020][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 668.669066][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 668.669089][ C1] ? prepare_alloc_pages+0x213/0x610 [ 668.669115][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 668.669139][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 668.669159][ C1] ? __apply_to_page_range+0x124b/0x13d0 [ 668.669188][ C1] alloc_pages_bulk_noprof+0x560/0x710 [ 668.669210][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 668.669237][ C1] kasan_populate_vmalloc+0xd1/0x270 [ 668.669261][ C1] alloc_vmap_area+0xd4e/0x1470 [ 668.669290][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 668.669307][ C1] ? __kmalloc_cache_node_noprof+0x46d/0x6f0 [ 668.669327][ C1] ? __get_vm_area_node+0x13f/0x300 [ 668.669344][ C1] ? arena_map_alloc+0x256/0x520 [ 668.669358][ C1] __get_vm_area_node+0x1f8/0x300 [ 668.669381][ C1] get_vm_area+0x80/0xb0 [ 668.669397][ C1] ? arena_map_alloc+0x256/0x520 [ 668.669412][ C1] arena_map_alloc+0x256/0x520 [ 668.669431][ C1] map_create+0xafd/0x16a0 [ 668.669450][ C1] ? security_bpf+0x7e/0x300 [ 668.669473][ C1] __sys_bpf+0x5f0/0x860 [ 668.669492][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 668.669507][ C1] ? count_memcg_event_mm+0x21/0x260 [ 668.669534][ C1] ? exc_page_fault+0x82/0x100 [ 668.669561][ C1] __x64_sys_bpf+0x7c/0x90 [ 668.669577][ C1] do_syscall_64+0xfa/0xf80 [ 668.669597][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.669611][ C1] ? clear_bhb_loop+0x60/0xb0 [ 668.669629][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.669642][ C1] RIP: 0033:0x7ff718f8f749 [ 668.669656][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.669668][ C1] RSP: 002b:00007ff719e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.669681][ C1] RAX: ffffffffffffffda RBX: 00007ff7191e5fa0 RCX: 00007ff718f8f749 [ 668.669692][ C1] RDX: 0000000000000048 RSI: 0000200000003940 RDI: 0000000000000000 [ 668.669701][ C1] RBP: 00007ff719013f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.669709][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.669718][ C1] R13: 00007ff7191e6038 R14: 00007ff7191e5fa0 R15: 00007ffe4132a188 [ 668.669741][ C1] [ 670.354407][ C1] sched: DL replenish lagged too much