last executing test programs: 3.313661414s ago: executing program 4 (id=10384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@igmp={{0x6, 0x4, 0x2, 0x2, 0x20, 0x68, 0x0, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x4, 0x57, 0x1, 0xe}]}}, {0x11, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x2e) 2.613339574s ago: executing program 0 (id=10389): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 2.577877275s ago: executing program 4 (id=10391): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) 2.281103431s ago: executing program 2 (id=10396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) 2.213347432s ago: executing program 1 (id=10397): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 2.022517193s ago: executing program 2 (id=10399): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 2.000220852s ago: executing program 1 (id=10400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.851608576s ago: executing program 1 (id=10401): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000000000000000000000000000000000ff06"], 0x42) 1.756638027s ago: executing program 2 (id=10402): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket(0x8, 0x3, 0x3) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.706560999s ago: executing program 4 (id=10403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 1.492952936s ago: executing program 1 (id=10404): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) 1.347063462s ago: executing program 0 (id=10405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e3d", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="9f5214", 0x3}], 0x5) 1.169298414s ago: executing program 1 (id=10406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.028643867s ago: executing program 3 (id=10407): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70200000000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 825.163088ms ago: executing program 0 (id=10408): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277c", 0x62}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 774.636855ms ago: executing program 3 (id=10409): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 771.828253ms ago: executing program 4 (id=10410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x1, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) 623.110118ms ago: executing program 3 (id=10411): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 591.545569ms ago: executing program 0 (id=10412): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1, 0x30}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 590.934298ms ago: executing program 2 (id=10413): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 397.814315ms ago: executing program 3 (id=10414): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 298.684229ms ago: executing program 2 (id=10415): socket$kcm(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) close(0x4) 290.940642ms ago: executing program 0 (id=10416): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) close(0x3) close(0x4) 289.932752ms ago: executing program 1 (id=10417): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xea, 0x45eb0a72, 0xfffffff8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 186.11632ms ago: executing program 3 (id=10418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 184.456154ms ago: executing program 4 (id=10419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a65a3a0f", 0x4, 0x840, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a7e659d65294442f7e4e19", 0x7f}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xfef, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4079, 0xfef, 0x1, 0x0}, &(0x7f0000000000)=0x40) 129.86235ms ago: executing program 2 (id=10420): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 39.304142ms ago: executing program 4 (id=10421): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 18.869847ms ago: executing program 0 (id=10422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 0s ago: executing program 3 (id=10423): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x7, r3, 0xfffffffb}, 0xc) close(0x4) kernel console output (not intermixed with test programs): ching packets. [ 242.373384][T14668] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4273'. [ 242.398324][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 242.416194][T14668] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4273'. [ 242.892801][T14696] netlink: 'syz.3.4287': attribute type 27 has an invalid length. [ 242.940702][T14699] lo: entered promiscuous mode [ 242.980447][T14699] tunl0: entered promiscuous mode [ 243.022426][T14699] gre0: entered promiscuous mode [ 243.125827][T14699] bridge0: port 3(gretap0) entered disabled state [ 243.159275][T14699] erspan0: entered promiscuous mode [ 243.198663][T14699] ip_vti0: entered promiscuous mode [ 243.219407][ T10] lo speed is unknown, defaulting to 1000 [ 243.225245][ T6092] lo speed is unknown, defaulting to 1000 [ 243.237544][ T10] syz0: Port: 1 Link DOWN [ 243.683610][T14736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4306'. [ 243.702107][T14736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4306'. [ 243.826419][T14743] netlink: 'syz.4.4309': attribute type 21 has an invalid length. [ 243.867693][T14743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.874976][T14743] IPv6: NLM_F_CREATE should be set when creating new route [ 243.882281][T14743] IPv6: NLM_F_CREATE should be set when creating new route [ 243.889539][T14743] IPv6: NLM_F_CREATE should be set when creating new route [ 243.973587][T14749] netlink: 'syz.3.4312': attribute type 21 has an invalid length. [ 244.004925][T14749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4312'. [ 244.995814][T14809] __nla_validate_parse: 3 callbacks suppressed [ 244.995832][T14809] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4342'. [ 245.388256][T14832] rdma_rxe: rxe_newlink: failed to add lo [ 245.607252][T14842] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 245.756951][T14853] netlink: zone id is out of range [ 245.771390][T14853] netlink: zone id is out of range [ 245.783103][T14853] netlink: zone id is out of range [ 245.798079][T14853] netlink: zone id is out of range [ 245.812093][T14853] netlink: zone id is out of range [ 245.830924][T14853] netlink: zone id is out of range [ 245.846083][T14853] netlink: zone id is out of range [ 245.872945][T14853] netlink: zone id is out of range [ 245.891335][T14853] netlink: zone id is out of range [ 245.910668][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 245.933135][T14857] batadv1: entered allmulticast mode [ 246.120679][T14871] netlink: 'syz.2.4372': attribute type 10 has an invalid length. [ 246.157127][T14871] team0: Device ipvlan1 failed to register rx_handler [ 246.458618][T14889] netlink: 'syz.4.4382': attribute type 3 has an invalid length. [ 247.961687][T14980] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4424'. [ 248.289157][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 249.048860][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4455'. [ 249.087613][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 249.118263][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4455'. [ 249.130764][T15044] netlink: 'syz.0.4456': attribute type 1 has an invalid length. [ 249.190601][T15047] netlink: 'syz.1.4458': attribute type 1 has an invalid length. [ 249.400219][T15060] net_ratelimit: 3 callbacks suppressed [ 249.400236][T15060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.893847][T15086] netlink: 'syz.3.4477': attribute type 7 has an invalid length. [ 250.289368][T15108] openvswitch: netlink: IP tunnel dst address not specified [ 250.443195][T15114] netlink: 'syz.1.4491': attribute type 20 has an invalid length. [ 250.471079][T15114] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.480289][T15118] netlink: 'syz.0.4493': attribute type 21 has an invalid length. [ 250.665451][T15131] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 250.995946][T15149] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4508'. [ 251.037259][T15154] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4511'. [ 251.062917][T15154] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 251.859807][T15204] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 252.481354][T15239] H: renamed from dummy0 (while UP) [ 252.652444][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 252.964525][T15267] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4566'. [ 252.995634][T15267] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4566'. [ 253.005441][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4568'. [ 253.348035][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4579'. [ 253.372329][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4579'. [ 253.398545][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4579'. [ 253.705795][T15312] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4590'. [ 253.983101][T15331] netlink: 'syz.1.4598': attribute type 21 has an invalid length. [ 254.299539][T15350] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 255.466350][T15411] netlink: 'syz.3.4638': attribute type 10 has an invalid length. [ 255.623116][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753979][T15411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.080273][T15441] __nla_validate_parse: 5 callbacks suppressed [ 256.080291][T15441] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4653'. [ 256.340933][T15456] netlink: 'syz.0.4661': attribute type 1 has an invalid length. [ 256.357826][T15460] bond0: left allmulticast mode [ 256.375975][T15460] : left allmulticast mode [ 256.399201][T15460] bond_slave_1: left allmulticast mode [ 256.559238][T15468] netlink: 'syz.2.4666': attribute type 11 has an invalid length. [ 256.583403][T15468] netlink: 'syz.2.4666': attribute type 11 has an invalid length. [ 256.610174][T15468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4666'. [ 256.773299][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4673'. [ 257.022566][T15498] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 257.067000][T15498] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 257.158731][T15503] xt_socket: unknown flags 0x8 [ 257.347738][T15517] openvswitch: netlink: IP tunnel TTL not specified. [ 257.371734][T15520] delete_channel: no stack [ 257.919365][T15548] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 258.977047][T15617] netlink: 'syz.1.4733': attribute type 2 has an invalid length. [ 258.999526][T15617] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4733'. [ 259.316878][T15637] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4741'. [ 259.538535][T15643] bond1: Unable to set up delay as MII monitoring is disabled [ 259.623820][T15643] bond1 (unregistering): Released all slaves [ 260.316279][T15695] netlink: 'syz.2.4769': attribute type 21 has an invalid length. [ 260.398069][T15695] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 260.412037][T15695] bond1 (unregistering): Released all slaves [ 260.423604][T15702] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 260.451612][T15704] netlink: 'syz.3.4774': attribute type 2 has an invalid length. [ 260.514002][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4776'. [ 260.910292][T15726] x9: renamed from bridge_slave_0 (while UP) [ 260.961289][T15728] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.000690][T15732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.017784][T15734] netlink: 'syz.4.4789': attribute type 3 has an invalid length. [ 261.037045][T15734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4789'. [ 262.078006][T15791] netlink: 408 bytes leftover after parsing attributes in process `syz.2.4817'. [ 262.401494][T15810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.466512][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4829'. [ 262.545863][T15818] netlink: 'syz.4.4831': attribute type 16 has an invalid length. [ 262.588097][T15818] netlink: 'syz.4.4831': attribute type 3 has an invalid length. [ 262.617866][T15818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4831'. [ 262.671111][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4834'. [ 262.764994][T15829] netlink: 'syz.3.4836': attribute type 1 has an invalid length. [ 262.802957][T15829] netlink: 'syz.3.4836': attribute type 2 has an invalid length. [ 263.137527][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'. [ 264.138860][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4874'. [ 264.361893][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4881'. [ 264.614405][T15935] SET target dimension over the limit! [ 265.051896][T15958] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4899'. [ 265.173379][T15967] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 265.384283][T15978] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 265.587043][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 265.981930][T16014] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4920'. [ 265.999301][T16015] netlink: 'syz.3.4921': attribute type 4 has an invalid length. [ 266.081987][T16021] xt_hashlimit: overflow, rate too high: 0 [ 266.197537][T16017] bond3: entered promiscuous mode [ 266.202874][T16017] bond3: entered allmulticast mode [ 266.211128][T16017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.653643][T16050] netlink: 'syz.0.4938': attribute type 3 has an invalid length. [ 266.769915][T16060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.773164][T16054] veth3: entered promiscuous mode [ 266.801008][T16054] veth3: entered allmulticast mode [ 266.916436][T16064] 8021q: VLANs not supported on gre0 [ 267.137461][T16080] __nla_validate_parse: 4 callbacks suppressed [ 267.137478][T16080] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4953'. [ 267.210039][T16084] SET target dimension over the limit! [ 267.385679][T16094] netlink: 'syz.4.4960': attribute type 1 has an invalid length. [ 267.593160][T16104] xt_addrtype: ipv6 does not support BROADCAST matching [ 267.879379][T16117] TCP: TCP_TX_DELAY enabled [ 268.002679][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4975'. [ 268.036944][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 268.057047][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4978'. [ 268.450162][T16149] Unsupported ieee802154 address type: 0 [ 268.630721][T16158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.641955][T16160] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 269.115159][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5008'. [ 269.572336][T16217] netlink: 'syz.0.5021': attribute type 1 has an invalid length. [ 269.593785][T16217] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5021'. [ 269.774221][T16227] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 269.957187][T16241] netlink: 'syz.1.5033': attribute type 9 has an invalid length. [ 269.966253][T16240] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 270.165767][T16254] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.173391][T16254] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.263832][T16260] openvswitch: netlink: IP tunnel dst address not specified [ 271.106908][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5063'. [ 271.343957][T16320] Cannot find add_set index 65532 as target [ 271.371464][T16318] netlink: 'syz.3.5070': attribute type 2 has an invalid length. [ 271.391821][T16318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5070'. [ 271.523422][T16328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.928312][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5087'. [ 271.977768][T16358] xt_SECMARK: invalid mode: 9 [ 272.033797][T16360] openvswitch: netlink: IP tunnel dst address not specified [ 272.191272][T16370] netlink: 'syz.3.5096': attribute type 1 has an invalid length. [ 272.338522][T16378] : renamed from virt_wifi0 [ 273.109669][T16423] netlink: 'syz.3.5123': attribute type 4 has an invalid length. [ 273.226372][T16428] netlink: 'syz.0.5125': attribute type 4 has an invalid length. [ 273.264651][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5127'. [ 273.304785][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5127'. [ 273.789127][T16460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5141'. [ 274.061036][T16469] SET target dimension over the limit! [ 274.900124][T16518] openvswitch: netlink: IPv4 tunnel dst address is zero [ 275.454633][T16546] netlink: 'syz.3.5183': attribute type 1 has an invalid length. [ 275.498234][T16546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5183'. [ 275.559577][T16546] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5183'. [ 275.589700][T16546] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5183'. [ 276.286594][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 276.513505][T16608] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5214'. [ 276.624152][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'. [ 276.913792][T16628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5225'. [ 277.099012][T16639] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 277.410814][T16652] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 277.483473][T16652] bond4 (unregistering): Released all slaves [ 278.758902][T16730] netlink: 'syz.2.5275': attribute type 10 has an invalid length. [ 278.784046][T16730] __nla_validate_parse: 3 callbacks suppressed [ 278.784063][T16730] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5275'. [ 279.309284][T16761] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 279.317141][T16761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5291'. [ 279.472284][T16771] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 279.595618][T16777] netlink: 'syz.2.5298': attribute type 64 has an invalid length. [ 279.884439][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5305'. [ 280.097633][T16805] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 280.197072][T16811] netlink: 'syz.4.5315': attribute type 10 has an invalid length. [ 280.216168][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5315'. [ 280.232850][T16815] netlink: 'syz.0.5316': attribute type 11 has an invalid length. [ 280.247467][T16811] dummy0: entered promiscuous mode [ 280.290647][T16811] bridge0: port 3(dummy0) entered blocking state [ 280.309537][T16811] bridge0: port 3(dummy0) entered disabled state [ 280.326422][T16811] dummy0: entered allmulticast mode [ 280.354885][T16811] bridge0: port 3(dummy0) entered blocking state [ 280.361484][T16811] bridge0: port 3(dummy0) entered forwarding state [ 281.010388][T16859] netlink: 'syz.4.5339': attribute type 2 has an invalid length. [ 281.031959][T16859] netlink: 'syz.4.5339': attribute type 5 has an invalid length. [ 281.354923][T16881] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5350'. [ 281.388690][T16881] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 281.440326][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5353'. [ 281.466993][T16887] netlink: 'syz.1.5352': attribute type 11 has an invalid length. [ 282.352589][T16941] netlink: 'syz.4.5379': attribute type 1 has an invalid length. [ 282.372538][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 282.391797][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 282.779150][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 283.251647][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5403'. [ 283.795629][T17022] netlink: 'syz.4.5417': attribute type 32 has an invalid length. [ 283.826099][T17022] __nla_validate_parse: 1 callbacks suppressed [ 283.826116][T17022] netlink: 776 bytes leftover after parsing attributes in process `syz.4.5417'. [ 283.995518][T17028] Unknown options in mask b7f2 [ 284.471840][T17050] tipc: Can't bind to reserved service type 1 [ 284.662706][T17062] Bluetooth: MGMT ver 1.23 [ 285.030861][T17082] netlink: 'syz.4.5445': attribute type 1 has an invalid length. [ 285.256377][T17093] xt_time: unknown flags 0xf4 [ 285.577213][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5462'. [ 286.249078][T17153] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5481'. [ 286.515638][T17170] veth0_to_bond: entered allmulticast mode [ 286.787052][T17186] delete_channel: no stack [ 286.804949][T17187] xt_l2tp: missing protocol rule (udp|l2tpip) [ 287.433189][T17221] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5514'. [ 287.675619][T17239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5523'. [ 288.302159][T17271] netlink: 'syz.1.5541': attribute type 33 has an invalid length. [ 288.495841][T17284] xt_HMARK: spi-set and port-set can't be combined [ 288.809959][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5553'. [ 289.215917][T17322] netlink: 'syz.3.5563': attribute type 2 has an invalid length. [ 289.377881][T17329] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5567'. [ 289.409585][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5567'. [ 289.430695][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5567'. [ 289.598385][T17344] netlink: 'syz.3.5574': attribute type 1 has an invalid length. [ 289.621703][T17344] netlink: 'syz.3.5574': attribute type 3 has an invalid length. [ 289.635617][T17344] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5574'. [ 289.645113][T17344] NCSI netlink: No device for ifindex 813332851 [ 289.656843][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'. [ 289.980972][T17368] Bluetooth: MGMT ver 1.23 [ 290.136688][T17373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5588'. [ 290.468074][T17398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5601'. [ 290.511793][T17398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5601'. [ 290.631684][T17407] xt_hashlimit: size too large, truncated to 1048576 [ 291.534840][T17458] netlink: 'syz.0.5627': attribute type 25 has an invalid length. [ 291.856611][T17464] lo speed is unknown, defaulting to 1000 [ 291.865791][T17477] netlink: 'syz.0.5635': attribute type 4 has an invalid length. [ 291.878976][T17477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5635'. [ 292.962175][T17533] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5662'. [ 293.276654][T17552] "syz.3.5671" (17552) uses obsolete ecb(arc4) skcipher [ 293.345530][T17557] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0 [ 293.507157][T17565] netlink: 'syz.2.5678': attribute type 1 has an invalid length. [ 293.536857][T17567] xt_limit: Overflow, try lower: 604147548/4200216962 [ 293.543904][T17565] nbd: error processing sock list [ 294.087168][T17599] netlink: 'syz.2.5695': attribute type 1 has an invalid length. [ 294.129940][T17599] netlink: 'syz.2.5695': attribute type 3 has an invalid length. [ 294.152038][T17599] NCSI netlink: No device for ifindex 813332851 [ 294.687882][T17635] __nla_validate_parse: 4 callbacks suppressed [ 294.687901][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 295.493791][T17682] tipc: Failed to obtain node identity [ 295.511298][T17682] tipc: Enabling of bearer rejected, failed to enable media [ 296.037849][T17711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.051211][T17712] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5750'. [ 296.428313][T17737] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5762'. [ 297.058217][T17770] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 297.249707][T17782] netlink: 'syz.0.5784': attribute type 3 has an invalid length. [ 297.995911][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 298.009405][T17827] tipc: Started in network mode [ 298.020926][T17827] tipc: Node identity , cluster identity 4711 [ 298.045920][T17827] tipc: Failed to set node id, please configure manually [ 298.054077][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5807'. [ 298.064491][T17827] tipc: Enabling of bearer rejected, failed to enable media [ 298.391532][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5817'. [ 298.405602][T17845] pimreg3: entered allmulticast mode [ 299.103757][T17894] netlink: 'syz.2.5839': attribute type 2 has an invalid length. [ 299.819707][T17932] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5855'. [ 300.039744][ T6194] IPVS: starting estimator thread 0... [ 300.139929][T17950] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5864'. [ 300.147550][T17946] IPVS: using max 35 ests per chain, 84000 per kthread [ 300.236668][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5869'. [ 300.432542][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5872'. [ 300.432703][T17964] Zero length message leads to an empty skb [ 300.473911][ T171] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.504992][ T171] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.546084][ T171] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.597473][ T171] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.825708][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5884'. [ 301.385685][T18019] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 302.112294][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5916'. [ 302.313445][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5921'. [ 302.537292][T18081] tipc: Enabling not permitted [ 302.557244][T18081] tipc: Enabling of bearer rejected, failed to enable media [ 302.702153][T18090] netlink: 'syz.2.5931': attribute type 2 has an invalid length. [ 303.286486][T18117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5944'. [ 303.341870][ T3492] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 303.378619][ T6092] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 303.388229][ T3492] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 303.727618][ T6092] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 303.764059][ T6092] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 303.818031][T18149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5958'. [ 303.890447][T18153] netlink: 'syz.3.5961': attribute type 58 has an invalid length. [ 303.911354][T18153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5961'. [ 304.284146][T18175] netlink: 'syz.4.5971': attribute type 142 has an invalid length. [ 304.476165][T18183] tipc: Enabling of bearer rejected, failed to enable media [ 305.153688][T18214] batadv0: entered promiscuous mode [ 305.185342][T18214] macsec1: entered promiscuous mode [ 305.221326][T18214] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 305.255431][T18214] batadv0: left promiscuous mode [ 305.276675][T18219] __nla_validate_parse: 1 callbacks suppressed [ 305.276691][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 305.329684][T18222] wireguard0: entered promiscuous mode [ 305.343589][T18222] wireguard0: entered allmulticast mode [ 305.617658][ T6028] Bluetooth: hci4: command 0x0406 tx timeout [ 305.822463][T18247] Driver unsupported XDP return value 0 on prog (id 446) dev N/A, expect packet loss! [ 306.272318][T18274] netlink: 'syz.4.6019': attribute type 83 has an invalid length. [ 306.313013][T18277] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6020'. [ 306.365288][T18277] netlink: 'syz.2.6020': attribute type 2 has an invalid length. [ 306.391174][T18277] netlink: 'syz.2.6020': attribute type 1 has an invalid length. [ 306.430658][T18283] xt_hashlimit: size too large, truncated to 1048576 [ 306.841009][T18299] netlink: 'syz.3.6029': attribute type 11 has an invalid length. [ 306.851055][T18299] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.6029'. [ 307.617601][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 307.636697][T18341] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 308.018212][T18351] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 308.202322][T18359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6057'. [ 308.234407][T18355] delete_channel: no stack [ 308.486212][T18373] vcan0: entered allmulticast mode [ 308.600141][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6069'. [ 310.362718][T18474] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6113'. [ 310.394654][T18474] netlink: 'syz.1.6113': attribute type 1 has an invalid length. [ 310.402917][T18474] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6113'. [ 310.654338][T18491] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6120'. [ 310.668224][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6122'. [ 310.680215][T18491] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6120'. [ 310.721218][T18491] netlink: 'syz.3.6120': attribute type 5 has an invalid length. [ 310.767398][T18491] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6120'. [ 310.831670][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6125'. [ 311.982081][T18570] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6156'. [ 312.525077][T18600] netlink: 'syz.1.6171': attribute type 3 has an invalid length. [ 312.547276][T18600] netlink: 766 bytes leftover after parsing attributes in process `syz.1.6171'. [ 312.563722][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6172'. [ 312.746092][T18609] tipc: Started in network mode [ 312.764940][T18609] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 312.774158][T18609] tipc: Enabled bearer , priority 24 [ 313.220286][T18639] : entered promiscuous mode [ 313.238505][T18640] tipc: Started in network mode [ 313.254397][T18640] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 313.269844][T18640] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 313.318973][T18640] tipc: Enabled bearer , priority 10 [ 313.892434][ T6092] tipc: Node number set to 10005162 [ 314.442155][ T6092] tipc: Node number set to 1 [ 316.417499][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 316.563820][T18806] netlink: 'syz.1.6268': attribute type 13 has an invalid length. [ 316.590271][T18806] veth0_macvtap: left promiscuous mode [ 316.630333][T18806] macvtap0: entered allmulticast mode [ 316.664663][T18806] macvtap0: refused to change device tx_queue_len [ 317.063107][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.424817][T18858] __nla_validate_parse: 4 callbacks suppressed [ 317.424839][T18858] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.6293'. [ 317.452473][T18858] openvswitch: netlink: Message has 6 unknown bytes. [ 317.847287][T18879] netlink: 'syz.4.6303': attribute type 3 has an invalid length. [ 317.953902][T18885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6305'. [ 319.490605][T18962] vlan2: entered allmulticast mode [ 319.515805][T18962] bond0: entered allmulticast mode [ 319.538753][T18962] : entered allmulticast mode [ 319.544921][T18962] bond_slave_1: entered allmulticast mode [ 319.756114][T18983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6344'. [ 319.769579][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6346'. [ 320.222496][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'. [ 320.926475][T19047] xt_l2tp: invalid flags combination: 0 [ 321.076457][T19056] netlink: 'syz.2.6377': attribute type 1 has an invalid length. [ 321.107218][T19056] netlink: 'syz.2.6377': attribute type 2 has an invalid length. [ 321.138352][T19056] netlink: 'syz.2.6377': attribute type 1 has an invalid length. [ 321.158888][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6377'. [ 321.200027][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'. [ 321.375185][ T6194] IPVS: starting estimator thread 0... [ 321.383605][T19074] IPVS: ip_vs_add_dest(): server weight less than zero [ 321.508123][T19075] IPVS: using max 33 ests per chain, 79200 per kthread [ 321.861692][T19103] netlink: 'syz.2.6401': attribute type 1 has an invalid length. [ 322.023088][T19115] netlink: 'syz.0.6404': attribute type 11 has an invalid length. [ 323.061882][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6428'. [ 323.093653][T19165] tipc: Started in network mode [ 323.103909][T19165] tipc: Node identity , cluster identity 4711 [ 323.136989][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6430'. [ 323.544896][T19187] sctp: [Deprecated]: syz.3.6440 (pid 19187) Use of int in max_burst socket option. [ 323.544896][T19187] Use struct sctp_assoc_value instead [ 323.962163][T19213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.035847][T19218] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6455'. [ 324.073062][T19218] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6455'. [ 324.082617][T19218] netlink: 'syz.0.6455': attribute type 5 has an invalid length. [ 324.091435][T19218] netlink: 'syz.0.6455': attribute type 6 has an invalid length. [ 324.119680][T19218] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6455'. [ 324.335041][T19236] xt_limit: Overflow, try lower: 271964/0 [ 324.500356][T19245] netlink: 'syz.2.6468': attribute type 1 has an invalid length. [ 326.114358][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6506'. [ 326.147552][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6506'. [ 326.179075][T19324] netlink: 'syz.4.6506': attribute type 12 has an invalid length. [ 326.200472][T19324] netlink: 'syz.4.6506': attribute type 11 has an invalid length. [ 326.723695][T19358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6523'. [ 326.757570][T19358] tipc: Invalid UDP bearer configuration [ 326.757621][T19358] tipc: Enabling of bearer rejected, failed to enable media [ 326.853781][T19364] vlan0: entered promiscuous mode [ 326.875081][T19364] bridge0: entered promiscuous mode [ 327.106536][T19381] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 328.097514][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 328.632832][T19461] xt_hashlimit: size too large, truncated to 1048576 [ 328.784563][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6579'. [ 329.474153][T19511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6596'. [ 329.732696][T19526] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6603'. [ 329.905398][T19535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.016151][T19543] netlink: 'syz.1.6612': attribute type 3 has an invalid length. [ 330.632231][T19577] netlink: 'syz.0.6625': attribute type 1 has an invalid length. [ 330.647993][T19577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.655295][T19577] IPv6: NLM_F_CREATE should be set when creating new route [ 331.557211][T19623] netlink: 'syz.2.6650': attribute type 10 has an invalid length. [ 332.143500][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6666'. [ 332.483645][T19681] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6675'. [ 333.015265][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6692'. [ 333.134846][T19717] tipc: Enabling of bearer rejected, media not registered [ 333.470643][T19738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.681485][T19749] ipvlan0: entered promiscuous mode [ 333.797634][T19754] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6712'. [ 334.337479][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 334.582757][T19805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6734'. [ 334.625365][T19810] Cannot find add_set index 46338 as target [ 334.771846][T19815] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 335.307610][T19841] syz.2.6747 (19841) used obsolete PPPIOCDETACH ioctl [ 335.384396][T19846] netlink: 'syz.0.6749': attribute type 23 has an invalid length. [ 335.606126][T19854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6752'. [ 335.658879][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6752'. [ 335.697942][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6752'. [ 335.876958][T19870] netlink: 'syz.4.6756': attribute type 1 has an invalid length. [ 335.896623][T19870] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6756'. [ 336.469674][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6774'. [ 336.545893][T19906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.213911][T19947] xt_hashlimit: size too large, truncated to 1048576 [ 337.521210][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6801'. [ 338.472981][T20013] xt_hashlimit: size too large, truncated to 1048576 [ 339.872710][T20086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6859'. [ 341.288169][T20159] netlink: 'syz.0.6892': attribute type 1 has an invalid length. [ 341.319890][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6892'. [ 341.366644][T20159] netlink: 'syz.0.6892': attribute type 1 has an invalid length. [ 341.553145][T20174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6900'. [ 341.993499][T20200] netlink: 'syz.0.6913': attribute type 58 has an invalid length. [ 342.018360][T20200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6913'. [ 342.237435][T20214] netlink: 'syz.3.6919': attribute type 4 has an invalid length. [ 342.559204][T20231] Bluetooth: MGMT ver 1.23 [ 342.575459][T20232] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6927'. [ 342.758071][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6932'. [ 342.877093][T20238] bond1: Invalid ad_actor_system MAC address. [ 342.897220][T20238] bond1: option ad_actor_system: invalid value (1) [ 342.928522][T20238] bond1 (unregistering): Released all slaves [ 343.005996][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'. [ 343.027179][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'. [ 343.051836][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6939'. [ 343.142134][T20255] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 343.238982][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6941'. [ 343.357276][T20266] lo: left promiscuous mode [ 343.370644][T20266] tunl0: left promiscuous mode [ 343.392042][T20266] gre0: left promiscuous mode [ 343.405203][T20266] erspan0: left promiscuous mode [ 343.415546][T20266] ip_vti0: left promiscuous mode [ 343.429398][T20270] nbd: must specify a device to reconfigure [ 343.530265][T20266] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.537970][T20266] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.639886][T20278] IPVS: sed: FWM 3 0x00000003 - no destination available [ 343.679980][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 343.735613][T20284] Bluetooth: MGMT ver 1.23 [ 343.781906][T20266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 343.820061][T20287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.583655][T20331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.450883][T20385] tipc: Started in network mode [ 345.471595][T20385] tipc: Node identity b6fe5e686189, cluster identity 4711 [ 345.499131][T20385] tipc: Enabled bearer , priority 11 [ 346.687962][ T6194] tipc: Node number set to 3614924392 [ 346.915714][T20464] __nla_validate_parse: 2 callbacks suppressed [ 346.915733][T20464] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7024'. [ 347.182398][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7032'. [ 348.696524][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7061'. [ 348.736439][T20565] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7061'. [ 348.766343][T20565] netlink: 'syz.3.7061': attribute type 5 has an invalid length. [ 349.356608][T20604] openvswitch: netlink: Missing valid actions attribute. [ 349.393208][T20604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.705630][T20624] xt_HMARK: proto mask must be zero with L3 mode [ 350.161424][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7096'. [ 350.336590][T20659] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7099'. [ 351.047913][T20701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7116'. [ 351.334529][T20714] vlan3: entered promiscuous mode [ 351.352344][T20714] geneve1: entered promiscuous mode [ 351.372491][T20714] vlan3: entered allmulticast mode [ 351.382532][T20714] geneve1: entered allmulticast mode [ 351.456451][T20718] bridge0: port 4(ipvlan1) entered blocking state [ 351.471496][T20718] bridge0: port 4(ipvlan1) entered disabled state [ 351.481761][T20718] ipvlan1: entered allmulticast mode [ 351.487097][T20718] bridge0: entered allmulticast mode [ 351.496633][T20718] ipvlan1: left allmulticast mode [ 351.502019][T20718] bridge0: left allmulticast mode [ 352.061979][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7141'. [ 352.318829][T20769] nbd: must specify an index to disconnect [ 352.586820][T20786] netlink: 'syz.2.7155': attribute type 32 has an invalid length. [ 352.596680][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7155'. [ 352.722363][T20786] bond1: option coupled_control: invalid value (192) [ 352.750712][T20786] bond1 (unregistering): Released all slaves [ 352.790598][T20793] tipc: Enabling of bearer rejected, failed to enable media [ 353.089825][T20809] bridge0: port 4(veth0_to_bridge) entered blocking state [ 353.121260][T20809] bridge0: port 4(veth0_to_bridge) entered disabled state [ 353.137881][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 353.161943][T20809] veth0_to_bridge: entered allmulticast mode [ 353.179314][T20809] veth0_to_bridge: entered promiscuous mode [ 353.462880][T20829] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 353.671405][T20841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7183'. [ 353.698002][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7185'. [ 353.724599][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7185'. [ 353.745026][T20844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7185'. [ 354.016718][T20861] macsec1: entered promiscuous mode [ 354.314158][T20880] sock: sock_timestamping_bind_phc: sock not bind to device [ 354.845137][T20908] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 355.387046][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7224'. [ 355.403796][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7224'. [ 355.756391][T20943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7234'. [ 355.778068][T20943] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7234'. [ 356.438244][T20983] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.599969][T20996] nbd: illegal input index -8454144 [ 357.220533][T21030] pimreg: left allmulticast mode [ 357.786817][T21048] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.794352][T21048] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.958911][T21048] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.275296][T21074] __nla_validate_parse: 5 callbacks suppressed [ 358.275314][T21074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7292'. [ 358.340478][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7295'. [ 358.466850][T21087] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7298'. [ 358.897077][T21112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7311'. [ 359.176652][T21133] netlink: 'syz.3.7318': attribute type 3 has an invalid length. [ 359.295274][T21135] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7322'. [ 359.491579][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7328'. [ 359.680621][T21159] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 359.714604][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 359.787053][T21164] macsec1: entered promiscuous mode [ 359.814192][T21164] bridge0: entered promiscuous mode [ 359.827935][T21164] macsec1: entered allmulticast mode [ 359.847518][T21164] bridge0: entered allmulticast mode [ 359.874071][T21164] bridge0: port 3(macsec1) entered blocking state [ 359.894257][T21164] bridge0: port 3(macsec1) entered disabled state [ 359.918929][T21164] bridge0: left allmulticast mode [ 359.927158][T21164] bridge0: left promiscuous mode [ 360.105490][T21183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7345'. [ 360.830572][T21061] IPVS: starting estimator thread 0... [ 360.836567][T21226] IPVS: ip_vs_edit_dest(): server weight less than zero [ 360.947717][T21229] IPVS: using max 43 ests per chain, 103200 per kthread [ 360.991940][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7371'. [ 361.011532][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7371'. [ 361.035382][T21238] netlink: 'syz.1.7371': attribute type 14 has an invalid length. [ 361.073427][T21238] netlink: 'syz.1.7371': attribute type 13 has an invalid length. [ 361.163580][T21246] netlink: 'syz.4.7376': attribute type 1 has an invalid length. [ 361.361248][T21258] netlink: 'syz.3.7383': attribute type 11 has an invalid length. [ 361.711087][T21278] netlink: 'syz.1.7391': attribute type 10 has an invalid length. [ 362.710311][T21337] lo: entered allmulticast mode [ 362.730023][T21337] lo: left allmulticast mode [ 362.763307][T21340] netlink: 'syz.2.7422': attribute type 11 has an invalid length. [ 362.799070][T21340] netlink: 'syz.2.7422': attribute type 11 has an invalid length. [ 363.294017][T21367] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 363.581976][T21386] __nla_validate_parse: 2 callbacks suppressed [ 363.581994][T21386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7445'. [ 363.632783][T21386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 363.702284][T21392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7448'. [ 364.029535][T21410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7457'. [ 365.132266][T21471] netlink: 'syz.0.7486': attribute type 8 has an invalid length. [ 365.368650][T21484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7492'. [ 365.580426][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7500'. [ 365.620344][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7500'. [ 365.926084][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7507'. [ 366.310633][T21540] veth0: entered promiscuous mode [ 366.334163][T21539] veth0: left promiscuous mode [ 366.535287][T21552] tipc: Started in network mode [ 366.543111][T21552] tipc: Node identity ac14140f, cluster identity 4711 [ 366.567112][T21552] tipc: New replicast peer: 172.20.20.187 [ 366.576325][T21552] tipc: Enabled bearer , priority 10 [ 366.583976][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7526'. [ 366.632512][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7526'. [ 367.131379][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7538'. [ 367.315436][T21590] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 367.689754][ T6149] tipc: Node number set to 2886997007 [ 367.809498][T21620] vlan4: entered allmulticast mode [ 367.833539][T21620] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 367.841131][ T12] tipc: Subscription rejected, illegal request [ 368.709508][T21668] __nla_validate_parse: 6 callbacks suppressed [ 368.709526][T21668] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7577'. [ 369.181404][T21687] : renamed from bond0 [ 369.264153][T21691] netlink: 'syz.4.7589': attribute type 1 has an invalid length. [ 369.285512][T21691] netlink: 'syz.4.7589': attribute type 7 has an invalid length. [ 369.310928][T21691] netlink: 'syz.4.7589': attribute type 8 has an invalid length. [ 369.319195][T21691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7589'. [ 369.888562][T21724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7603'. [ 369.914863][T21724] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7603'. [ 370.177487][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 370.244653][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7611'. [ 370.670029][T21758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7619'. [ 370.819974][T21763] netlink: 'syz.2.7624': attribute type 2 has an invalid length. [ 370.886483][T21769] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7623'. [ 371.497691][T21800] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 371.852882][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7648'. [ 372.296815][T21848] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7661'. [ 372.495309][T21857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7668'. [ 373.219556][T21900] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 374.172923][T21947] __nla_validate_parse: 2 callbacks suppressed [ 374.172940][T21947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7712'. [ 374.264575][T21951] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7714'. [ 374.477280][T21962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7717'. [ 374.485315][T21965] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7720'. [ 374.630759][T21970] netlink: 'syz.0.7722': attribute type 2 has an invalid length. [ 374.661020][T21970] netlink: 'syz.0.7722': attribute type 2 has an invalid length. [ 374.867046][T21986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7730'. [ 375.066163][T21995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7734'. [ 375.126734][T21995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7734'. [ 375.154493][T22002] netlink: 'syz.4.7737': attribute type 2 has an invalid length. [ 375.176670][T22002] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7737'. [ 375.312749][T22010] sctp: [Deprecated]: syz.3.7739 (pid 22010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.312749][T22010] Use struct sctp_sack_info instead [ 375.462412][T22020] netlink: 'syz.3.7745': attribute type 3 has an invalid length. [ 375.470719][T22020] netlink: 'syz.3.7745': attribute type 1 has an invalid length. [ 375.478579][T22020] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7745'. [ 375.490028][T22020] NCSI netlink: No device for ifindex 813332851 [ 376.067004][T22044] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7756'. [ 376.692770][T22078] netlink: 'syz.0.7770': attribute type 30 has an invalid length. [ 378.116689][T22151] block nbd0: Unsupported socket: should be TCP or UNIX. [ 378.144505][T22146] netlink: 'syz.1.7806': attribute type 10 has an invalid length. [ 378.162911][T22146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.233999][T22146] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 378.510614][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.746764][T22184] syz.4.7821: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 378.808986][T22184] CPU: 1 UID: 0 PID: 22184 Comm: syz.4.7821 Not tainted syzkaller #0 PREEMPT(full) [ 378.809012][T22184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.809031][T22184] Call Trace: [ 378.809039][T22184] [ 378.809047][T22184] dump_stack_lvl+0xe8/0x150 [ 378.809089][T22184] warn_alloc+0x249/0x340 [ 378.809119][T22184] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 378.809146][T22184] ? __pfx_warn_alloc+0x10/0x10 [ 378.809183][T22184] ? kasan_save_track+0x4f/0x80 [ 378.809214][T22184] ? kasan_save_track+0x3e/0x80 [ 378.809240][T22184] ? __kasan_kmalloc+0x93/0xb0 [ 378.809256][T22184] ? __kmalloc_cache_noprof+0x31c/0x660 [ 378.809285][T22184] ? xskq_create+0x56/0x170 [ 378.809304][T22184] ? xsk_setsockopt+0x54c/0x990 [ 378.809321][T22184] ? do_sock_setsockopt+0x17c/0x1b0 [ 378.809348][T22184] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 378.809374][T22184] ? do_syscall_64+0x15f/0xf80 [ 378.809399][T22184] __vmalloc_node_range_noprof+0x132/0x1730 [ 378.809458][T22184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.809493][T22184] ? __kasan_kmalloc+0x93/0xb0 [ 378.809524][T22184] vmalloc_user_noprof+0xad/0xe0 [ 378.809552][T22184] ? xskq_create+0xbf/0x170 [ 378.809573][T22184] xskq_create+0xbf/0x170 [ 378.809596][T22184] xsk_init_queue+0x8a/0xe0 [ 378.809618][T22184] xsk_setsockopt+0x54c/0x990 [ 378.809639][T22184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 378.809658][T22184] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.809687][T22184] ? aa_sock_opt_perm+0xff/0x1a0 [ 378.809717][T22184] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 378.809746][T22184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 378.809765][T22184] do_sock_setsockopt+0x17c/0x1b0 [ 378.809798][T22184] __x64_sys_setsockopt+0x13d/0x1b0 [ 378.809829][T22184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.809848][T22184] do_syscall_64+0x15f/0xf80 [ 378.809870][T22184] ? trace_irq_disable+0x3b/0x140 [ 378.809890][T22184] ? clear_bhb_loop+0x40/0x90 [ 378.809915][T22184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.809938][T22184] RIP: 0033:0x7f4c6819c819 [ 378.809960][T22184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.809977][T22184] RSP: 002b:00007f4c690e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 378.809998][T22184] RAX: ffffffffffffffda RBX: 00007f4c68415fa0 RCX: 00007f4c6819c819 [ 378.810012][T22184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 378.810022][T22184] RBP: 00007f4c68232c91 R08: 0000000000000004 R09: 0000000000000000 [ 378.810033][T22184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.810045][T22184] R13: 00007f4c68416038 R14: 00007f4c68415fa0 R15: 00007ffd877db088 [ 378.810077][T22184] [ 378.813540][T22184] Mem-Info: [ 379.099821][T22184] active_anon:5931 inactive_anon:0 isolated_anon:0 [ 379.099821][T22184] active_file:3078 inactive_file:40091 isolated_file:0 [ 379.099821][T22184] unevictable:768 dirty:224 writeback:0 [ 379.099821][T22184] slab_reclaimable:10621 slab_unreclaimable:102783 [ 379.099821][T22184] mapped:29282 shmem:1356 pagetables:3563 [ 379.099821][T22184] sec_pagetables:0 bounce:0 [ 379.099821][T22184] kernel_misc_reclaimable:0 [ 379.099821][T22184] free:1321666 free_pcp:9206 free_cma:0 [ 379.172561][T22184] Node 0 active_anon:23824kB inactive_anon:0kB active_file:12312kB inactive_file:160168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117228kB dirty:896kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12340kB pagetables:13704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 379.231241][T22184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 379.261798][T22184] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.333629][T22184] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 379.341318][T22184] Node 0 DMA32 free:1318176kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24424kB inactive_anon:0kB active_file:12312kB inactive_file:160168kB unevictable:1536kB writepending:896kB zspages:0kB present:3129332kB managed:2551532kB mlocked:0kB bounce:0kB free_pcp:36736kB local_pcp:15664kB free_cma:0kB [ 379.419298][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 379.439448][T22184] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 379.481756][T22216] netlink: 'syz.3.7836': attribute type 25 has an invalid length. [ 379.508799][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 379.518730][T22184] Node 1 Normal free:3952660kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.616801][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 379.627076][T22184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 379.660920][T22184] Node 0 DMA32: 3726*4kB (UME) 3013*8kB (UM) 1925*16kB (UM) 534*32kB (UME) 606*64kB (UME) 588*128kB (UME) 450*256kB (UM) 301*512kB (UME) 168*1024kB (UM) 8*2048kB (UM) 161*4096kB (UM) = 1318128kB [ 379.745619][T22184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 379.778594][T22184] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 11*16kB (UM) 4*32kB (UM) 5*64kB (UM) 7*128kB (UM) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3952660kB [ 379.809888][T22184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.824872][T22184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.834681][T22184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.853677][T22184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.872629][T22184] 46491 total pagecache pages [ 379.881726][T22184] 0 pages in swap cache [ 379.890503][T22184] Free swap = 124996kB [ 379.896785][T22184] Total swap = 124996kB [ 379.905681][T22184] 2097051 pages RAM [ 379.915017][T22184] 0 pages HighMem/MovableOnly [ 379.924028][T22184] 427400 pages reserved [ 379.928441][T22184] 0 pages cma reserved [ 380.888356][T22270] __nla_validate_parse: 9 callbacks suppressed [ 380.888375][T22270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7859'. [ 381.305884][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7866'. [ 381.510369][T22296] netlink: 'syz.2.7871': attribute type 1 has an invalid length. [ 381.527434][T22296] netlink: 'syz.2.7871': attribute type 2 has an invalid length. [ 381.539040][T22296] netlink: 'syz.2.7871': attribute type 1 has an invalid length. [ 381.559290][T22296] netlink: 'syz.2.7871': attribute type 3 has an invalid length. [ 381.573548][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'. [ 382.202572][T22328] netlink: 'syz.2.7885': attribute type 4 has an invalid length. [ 382.469594][T22341] netlink: 'syz.0.7891': attribute type 83 has an invalid length. [ 382.658010][T22354] netlink: 'syz.0.7897': attribute type 1 has an invalid length. [ 382.687566][T22354] netlink: 'syz.0.7897': attribute type 2 has an invalid length. [ 382.710701][T22354] netlink: 'syz.0.7897': attribute type 1 has an invalid length. [ 382.741031][T22354] netlink: 'syz.0.7897': attribute type 3 has an invalid length. [ 382.765209][T22360] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7901'. [ 382.769897][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7897'. [ 383.394129][T22397] netem: change failed [ 384.423894][T22447] netlink: 'syz.1.7940': attribute type 4 has an invalid length. [ 384.650529][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7945'. [ 385.021802][T22479] netlink: 'syz.0.7956': attribute type 83 has an invalid length. [ 385.033644][T22481] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 385.045233][T22481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 385.101449][T22483] erspan0: entered promiscuous mode [ 385.908492][T22530] netlink: 'syz.1.7978': attribute type 6 has an invalid length. [ 386.052285][T22538] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7980'. [ 386.097867][T22538] openvswitch: netlink: Message has 5 unknown bytes. [ 386.607886][T22569] netlink: 'syz.4.7993': attribute type 83 has an invalid length. [ 386.924362][ T5488] veth0_macvtap: left promiscuous mode [ 387.059975][T22599] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.8004'. [ 387.674763][T22633] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8019'. [ 387.859660][ T5955] block nbd0: Receive control failed (result -32) [ 387.874188][T22646] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8025'. [ 388.034265][T22652] tipc: Enabling of bearer rejected, already enabled [ 388.383586][T22675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8037'. [ 388.895727][T22699] block nbd1: Unsupported socket: should be TCP or UNIX. [ 389.384512][T22728] validate_nla: 1 callbacks suppressed [ 389.384531][T22728] netlink: 'syz.1.8062': attribute type 25 has an invalid length. [ 389.412708][T22728] netlink: 'syz.1.8062': attribute type 28 has an invalid length. [ 389.464930][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8064'. [ 389.722870][T22751] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 389.875805][T22761] netlink: 'syz.3.8075': attribute type 1 has an invalid length. [ 389.886939][T22764] netem: incorrect gi model size [ 389.893394][T22761] netlink: 'syz.3.8075': attribute type 3 has an invalid length. [ 389.894181][T22764] netem: change failed [ 389.905846][T22761] netlink: 'syz.3.8075': attribute type 7 has an invalid length. [ 389.932953][T22761] netlink: 'syz.3.8075': attribute type 8 has an invalid length. [ 389.948090][T22761] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8075'. [ 389.964807][T22761] NCSI netlink: No device for ifindex 131092 [ 390.015377][T22768] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.8079'. [ 391.260904][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8106'. [ 391.312200][T22832] hsr_slave_0: left promiscuous mode [ 391.330345][T22832] hsr_slave_1: left promiscuous mode [ 391.368342][T22838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 391.802811][T22864] veth0: entered promiscuous mode [ 391.811102][T22863] veth0: left promiscuous mode [ 391.866969][T22868] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8123'. [ 392.854245][T22926] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.402070][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 394.422248][T23006] netlink: 'syz.2.8183': attribute type 1 has an invalid length. [ 394.446927][T23006] netlink: 'syz.2.8183': attribute type 2 has an invalid length. [ 394.522251][T23010] xt_hashlimit: size too large, truncated to 1048576 [ 394.595241][T23012] : renamed from vxcan1 [ 394.902376][T23022] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8191'. [ 395.057752][T23027] tipc: Enabling of bearer rejected, already enabled [ 395.192139][T23035] netlink: 'syz.0.8196': attribute type 1 has an invalid length. [ 395.226149][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8196'. [ 395.774990][T23058] netlink: 'syz.1.8208': attribute type 2 has an invalid length. [ 396.132206][T23071] sctp: [Deprecated]: syz.2.8214 (pid 23071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.132206][T23071] Use struct sctp_sack_info instead [ 396.307869][T23078] netlink: 'syz.4.8218': attribute type 4 has an invalid length. [ 396.820824][T23100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8228'. [ 396.898551][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8232'. [ 396.929199][T23107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8232'. [ 397.406306][T23098] bridge0: port 3(dummy0) entered disabled state [ 397.413000][T23098] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.421341][T23098] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.642828][T23098] wg1: left promiscuous mode [ 397.654821][T23098] wg1: left allmulticast mode [ 397.881308][T23098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.928820][T23098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.330188][T23098] ip6tnl1: left allmulticast mode [ 398.455527][T23098] vlan2: left allmulticast mode [ 398.467692][T23098] bond0: left allmulticast mode [ 398.472623][T23098] : left allmulticast mode [ 398.478763][T23098] bond_slave_1: left allmulticast mode [ 398.484562][T23098] vlan3: left promiscuous mode [ 398.489994][T23098] geneve1: left promiscuous mode [ 398.495063][T23098] vlan3: left allmulticast mode [ 398.500312][T23098] geneve1: left allmulticast mode [ 398.520629][T23100] geneve2: entered promiscuous mode [ 398.540204][ T171] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.583446][ T171] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.612863][ T171] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.659119][ T171] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.813147][T23141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8242'. [ 399.262641][T23168] Bluetooth: hci1: too big key_count value 32778 [ 399.693639][T23190] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.702457][T23190] bridge0: port 1(0x9) entered disabled state [ 399.789342][T23196] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.821545][T23196] team0: Cannot enslave team device to itself [ 400.001363][T23207] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.8270'. [ 400.113845][T23212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8273'. [ 400.134985][T23212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8273'. [ 400.440721][ T30] audit: type=1804 audit(1776496170.124:3): pid=23232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8281" name="/newroot/1651/cgroup.controllers" dev="tmpfs" ino=8297 res=1 errno=0 [ 400.520426][ T30] audit: type=1800 audit(1776496170.164:4): pid=23232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8281" name="cgroup.controllers" dev="tmpfs" ino=8297 res=0 errno=0 [ 400.649503][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8287'. [ 401.331654][T23288] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8307'. [ 401.366957][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8307'. [ 401.662164][T23306] macvlan2: entered allmulticast mode [ 401.680327][T23306] hsr0: entered allmulticast mode [ 401.696011][T23306] hsr_slave_0: entered allmulticast mode [ 401.703933][T23306] hsr_slave_1: entered allmulticast mode [ 401.903704][T23321] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.441575][T23348] bond1 (unregistering): Released all slaves [ 402.565175][T23361] __nla_validate_parse: 2 callbacks suppressed [ 402.565195][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8334'. [ 403.015059][T23385] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 403.022163][T23385] syzkaller1: linktype set to 823 [ 403.343138][T23406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8351'. [ 404.333183][T23465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8380'. [ 404.461990][T23470] netlink: 'syz.3.8383': attribute type 4 has an invalid length. [ 405.062420][T23506] netlink: 'syz.3.8400': attribute type 3 has an invalid length. [ 405.532192][T23531] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 405.575306][T23531] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 406.264015][T23575] ipvlan2: entered allmulticast mode [ 406.273491][T23575] batadv_slave_1: entered allmulticast mode [ 406.282142][T23575] batman_adv: batadv0: Adding interface: ipvlan2 [ 406.296542][T23575] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.372753][T23575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.409183][T23575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.449830][T23575] batman_adv: batadv0: Interface activated: ipvlan2 [ 406.890377][T23600] sctp: [Deprecated]: syz.0.8443 (pid 23600) Use of int in max_burst socket option deprecated. [ 406.890377][T23600] Use struct sctp_assoc_value instead [ 407.829838][T23662] tipc: New replicast peer: 255.255.255.255 [ 407.858057][T23662] tipc: Enabled bearer , priority 10 [ 407.871295][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8471'. [ 407.944422][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8475'. [ 408.072864][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8479'. [ 408.401543][T23698] veth0_to_team: entered allmulticast mode [ 408.499065][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8490'. [ 408.559481][T23710] sch_fq: defrate 0 ignored. [ 408.890548][T23726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8501'. [ 408.949331][T23729] netlink: 'syz.1.8502': attribute type 83 has an invalid length. [ 408.983414][T23733] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8503'. [ 409.144264][T23735] bond4: entered promiscuous mode [ 409.183659][T23745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8508'. [ 409.759468][T23777] netlink: 81 bytes leftover after parsing attributes in process `syz.3.8523'. [ 410.482201][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8543'. [ 410.520284][T23821] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.8544'. [ 410.536631][T23821] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 411.303803][T23862] h: entered promiscuous mode [ 412.513285][T23937] netlink: 'syz.4.8593': attribute type 83 has an invalid length. [ 412.853349][T23954] netlink: 'syz.3.8604': attribute type 2 has an invalid length. [ 413.186989][T23977] netem: change failed [ 413.655755][T24004] __nla_validate_parse: 8 callbacks suppressed [ 413.655775][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8628'. [ 414.034627][T24026] xt_hashlimit: size too large, truncated to 1048576 [ 414.154381][T24033] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.213584][T24033] bridge_slave_0 (unregistering): left allmulticast mode [ 414.246076][T24033] bridge_slave_0 (unregistering): left promiscuous mode [ 414.279127][T24033] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.576492][T24112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8675'. [ 415.722009][T24117] netlink: 'syz.1.8677': attribute type 1 has an invalid length. [ 415.739935][T24117] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8677'. [ 415.742733][T24120] gretap0: entered promiscuous mode [ 415.761096][T24117] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8677'. [ 415.785641][T24117] netlink: 'syz.1.8677': attribute type 1 has an invalid length. [ 415.788355][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8678'. [ 415.809045][T24117] netlink: 'syz.1.8677': attribute type 8 has an invalid length. [ 415.818420][T24120] gretap0: left promiscuous mode [ 415.827602][T24117] netlink: 582 bytes leftover after parsing attributes in process `syz.1.8677'. [ 416.088898][T24135] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8685'. [ 416.217192][T24141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8689'. [ 417.006162][T24185] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8707'. [ 417.590073][T24220] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8723'. [ 417.620163][T24217] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.819077][T24227] syzkaller1: entered promiscuous mode [ 417.842661][T24227] syzkaller1: entered allmulticast mode [ 418.202276][T24248] netlink: 'syz.0.8736': attribute type 1 has an invalid length. [ 418.981113][T24286] block nbd1: server does not support multiple connections per device. [ 418.999645][T24286] block nbd1: shutting down sockets [ 419.302444][T24318] __nla_validate_parse: 2 callbacks suppressed [ 419.302462][T24318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8766'. [ 420.551862][T24391] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.8801'. [ 420.646491][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8803'. [ 421.155814][T24424] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.191653][T24424] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.219319][T24424] gretap1: entered promiscuous mode [ 421.228953][T24424] gretap1: entered allmulticast mode [ 421.473558][T24436] syzkaller1: entered promiscuous mode [ 421.483919][T24436] syzkaller1: entered allmulticast mode [ 422.285638][T24494] erspan0: entered promiscuous mode [ 422.304786][T24494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8843'. [ 422.449668][T24499] netlink: 'syz.2.8846': attribute type 9 has an invalid length. [ 422.459783][T24499] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8846'. [ 422.640296][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8848'. [ 422.930256][T24516] syzkaller1: entered promiscuous mode [ 422.936029][T24516] syzkaller1: entered allmulticast mode [ 423.114195][T24523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.364922][T24534] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 423.814720][T24562] netlink: 'syz.4.8867': attribute type 9 has an invalid length. [ 423.937621][T24571] netlink: 'syz.3.8871': attribute type 10 has an invalid length. [ 423.987205][T24571] bridge_slave_1: left allmulticast mode [ 423.994406][T24571] bridge_slave_1: left promiscuous mode [ 424.002509][T24571] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.020670][T24574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8872'. [ 424.033153][T24571] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 424.426441][T24597] block nbd0: Unsupported socket: should be TCP or UNIX. [ 424.913103][T24626] netlink: 'syz.3.8890': attribute type 1 has an invalid length. [ 425.424948][T24647] netlink: 'syz.3.8899': attribute type 17 has an invalid length. [ 425.448113][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8899'. [ 425.471986][T24647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8899'. [ 425.513160][T24647] gretap0: entered promiscuous mode [ 425.529126][T24647] gretap0: left promiscuous mode [ 425.706303][T24655] netlink: 'syz.4.8903': attribute type 2 has an invalid length. [ 425.737849][T24655] netlink: 'syz.4.8903': attribute type 2 has an invalid length. [ 426.228700][T24679] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.8915'. [ 426.294177][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8917'. [ 426.336778][T24684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.422663][T24684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.103347][T24724] netlink: 'syz.1.8936': attribute type 2 has an invalid length. [ 427.318954][T24738] syzkaller1: entered promiscuous mode [ 427.337499][T24738] syzkaller1: entered allmulticast mode [ 427.613144][T24753] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8949'. [ 427.654496][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8951'. [ 427.676930][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8951'. [ 427.925208][T24772] tipc: Enabling of bearer rejected, failed to enable media [ 428.093298][T24782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8963'. [ 428.136782][T24782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8963'. [ 428.325208][T24795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8968'. [ 428.383369][T24795] gretap0: entered promiscuous mode [ 428.412928][T24795] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 428.441936][T24800] netlink: 'syz.4.8971': attribute type 63 has an invalid length. [ 428.442391][T24795] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 428.465251][T24800] netlink: 'syz.4.8971': attribute type 63 has an invalid length. [ 428.777113][T24815] gtp0: entered promiscuous mode [ 428.803596][T24815] gtp0: entered allmulticast mode [ 429.595503][T24863] sctp: [Deprecated]: syz.3.8998 (pid 24863) Use of int in max_burst socket option deprecated. [ 429.595503][T24863] Use struct sctp_assoc_value instead [ 429.834073][T24880] netlink: 'syz.1.9008': attribute type 7 has an invalid length. [ 429.844492][T24880] netlink: 'syz.1.9008': attribute type 8 has an invalid length. [ 429.906067][T24882] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 430.912445][T24945] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 430.934771][T24944] __nla_validate_parse: 9 callbacks suppressed [ 430.934790][T24944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9036'. [ 431.053131][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9036'. [ 431.298990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.690596][T24999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9058'. [ 431.705458][T24999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9058'. [ 431.746257][T25002] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9059'. [ 431.943670][ T30] audit: type=1800 audit(1776496201.614:5): pid=25012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9063" name="memory.events" dev="tmpfs" ino=8684 res=0 errno=0 [ 432.016785][T25024] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9068'. [ 432.121714][T25033] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9072'. [ 432.184619][T25037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9074'. [ 432.299961][T25044] block nbd1: NBD_DISCONNECT [ 432.337800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.426978][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9080'. [ 432.446728][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9080'. [ 432.759918][T25069] team0: Port device gretap1 added [ 432.775786][T25070] erspan0: left promiscuous mode [ 432.809341][T25070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.829418][T25070] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.865839][T25070] bridge0: port 3(dummy0) entered blocking state [ 432.873392][T25070] bridge0: port 3(dummy0) entered forwarding state [ 432.900663][T25070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.195131][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ea9000: rx timeout, send abort [ 433.377435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.580350][T25117] netlink: 'syz.0.9111': attribute type 30 has an invalid length. [ 433.600552][ T171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.602401][T25117] netlink: 'syz.0.9111': attribute type 30 has an invalid length. [ 433.612416][ T171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.632136][ T171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.679268][ T171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.705506][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ea9000: abort rx timeout. Force session deactivation [ 434.321710][T25157] netlink: 'syz.4.9131': attribute type 4 has an invalid length. [ 434.417423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.645483][T25179] lo speed is unknown, defaulting to 1000 [ 434.818603][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.192296][T25206] veth0_macvtap: left promiscuous mode [ 435.368544][T25179] dvmrp8: entered allmulticast mode [ 435.458281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.487630][ T12] dvmrp8: left allmulticast mode [ 435.807169][T25243] veth0: entered promiscuous mode [ 435.825765][T25240] veth0: left promiscuous mode [ 436.097952][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.364643][T25273] team0 (unregistering): Port device team_slave_0 removed [ 436.394165][T25273] team0 (unregistering): Port device team_slave_1 removed [ 436.497489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.623573][T25294] __nla_validate_parse: 11 callbacks suppressed [ 436.623593][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9188'. [ 436.795872][T25306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9194'. [ 436.998815][T25314] syzkaller1: entered promiscuous mode [ 437.008902][T25314] syzkaller1: entered allmulticast mode [ 437.537457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.904040][T25361] syzkaller1: entered promiscuous mode [ 437.914719][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9218'. [ 437.926156][T25361] syzkaller1: entered allmulticast mode [ 438.121171][T25372] xt_hashlimit: size too large, truncated to 1048576 [ 438.144046][T25374] sctp: [Deprecated]: syz.3.9226 (pid 25374) Use of int in max_burst socket option. [ 438.144046][T25374] Use struct sctp_assoc_value instead [ 438.577719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.657534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.669009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.940379][T25419] netlink: 'syz.2.9247': attribute type 29 has an invalid length. [ 438.969843][T25419] netlink: 'syz.2.9247': attribute type 29 has an invalid length. [ 438.996048][T25419] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9247'. [ 439.029346][T25419] unsupported nla_type 58 [ 439.256528][T25438] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 439.429647][T25450] netlink: 'syz.2.9263': attribute type 10 has an invalid length. [ 439.465814][T25450] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.484896][T25450] bridge_slave_1: left allmulticast mode [ 439.491711][T25450] bridge_slave_1: left promiscuous mode [ 439.506014][T25450] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.550138][T25450] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 439.617425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.661510][T25462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.727566][ T6149] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 439.751535][T25466] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9269'. [ 439.794296][T25466] netlink: ct family unspecified [ 439.941936][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.448508][T25509] netlink: 'syz.3.9288': attribute type 1 has an invalid length. [ 440.657475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.659330][ T6149] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 441.094590][T25550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9307'. [ 441.130344][T25550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9307'. [ 441.149700][T25550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9307'. [ 441.178360][T25550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9307'. [ 441.201930][T25550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9307'. [ 441.367068][T25564] pim6reg1: entered promiscuous mode [ 441.383368][T25564] pim6reg1: entered allmulticast mode [ 441.697651][ C1] net_ratelimit: 1 callbacks suppressed [ 441.697667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.754664][T25586] __nla_validate_parse: 1 callbacks suppressed [ 441.754681][T25586] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9325'. [ 441.788138][T25586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9325'. [ 442.299502][T25625] netlink: 'syz.0.9342': attribute type 39 has an invalid length. [ 442.436227][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9347'. [ 442.737439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.046774][T25666] netlink: 'syz.2.9362': attribute type 1 has an invalid length. [ 443.103588][T25668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9363'. [ 443.114535][T25668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9363'. [ 443.125744][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9363'. [ 443.519519][T25687] sctp: [Deprecated]: syz.3.9370 (pid 25687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.519519][T25687] Use struct sctp_sack_info instead [ 443.656924][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9373'. [ 443.777469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.864289][T25705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9379'. [ 444.024045][T25717] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9385'. [ 444.044898][T25717] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9385'. [ 444.093907][T25722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.817637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.057496][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 445.699120][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.857436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.874877][T25817] netlink: 'syz.3.9429': attribute type 8 has an invalid length. [ 445.906157][T25817] bond0: entered promiscuous mode [ 445.912907][T25817] bond_slave_0: entered promiscuous mode [ 445.924499][T25817] bond_slave_1: entered promiscuous mode [ 445.946510][T25817] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 445.958963][T25817] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 445.966284][T25817] bridge_slave_1: entered promiscuous mode [ 445.975012][T25817] gretap0: entered promiscuous mode [ 445.988674][T25817] hsr0: entered promiscuous mode [ 446.153912][T25838] netlink: Conntrack attr has 4 unknown bytes [ 446.179776][T25840] netlink: 'syz.3.9438': attribute type 13 has an invalid length. [ 446.201725][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.210827][T25840] netlink: 'syz.3.9438': attribute type 13 has an invalid length. [ 446.219155][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.234828][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.244663][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.266424][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.625984][T25862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.710797][T25868] netlink: 'syz.1.9452': attribute type 3 has an invalid length. [ 446.746772][T25862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.844345][T25862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.897582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.912218][T25873] netlink: 'syz.1.9453': attribute type 22 has an invalid length. [ 446.923006][T25873] __nla_validate_parse: 9 callbacks suppressed [ 446.923023][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9453'. [ 446.973627][ T171] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.988394][ T171] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.998555][T25873] netlink: 'syz.1.9453': attribute type 22 has an invalid length. [ 447.012594][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9453'. [ 447.034425][T25862] batman_adv: batadv0: Removing interface: netdevsim0 [ 447.045736][T25862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.068699][ T171] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.089211][ T171] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.199732][ T171] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.227735][T25886] netlink: 'syz.1.9460': attribute type 11 has an invalid length. [ 447.235729][T25886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9460'. [ 447.250709][ T171] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.259307][T25886] netlink: 'syz.1.9460': attribute type 11 has an invalid length. [ 447.269267][T25886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9460'. [ 447.280090][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.306444][ T171] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.462257][T25897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9465'. [ 447.593469][T25902] atomic_op ffff88807357b198 conn xmit_atomic 0000000000000000 [ 447.938934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.053900][T25934] netlink: 'syz.4.9483': attribute type 7 has an invalid length. [ 448.090166][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.091689][T25934] netlink: 'syz.4.9483': attribute type 7 has an invalid length. [ 448.114311][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.139860][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.162624][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.228163][T25941] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9484'. [ 448.239060][T25941] netlink: Conntrack attr has 3 unknown bytes [ 448.382226][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9490'. [ 448.410343][T25951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9490'. [ 448.440263][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9491'. [ 448.456525][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9491'. [ 448.844446][T25975] syzkaller1: entered promiscuous mode [ 448.850447][T25975] syzkaller1: entered allmulticast mode [ 448.977424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.067303][T25992] dvmrp0: left allmulticast mode [ 449.076417][T25992] veth0_to_team: left allmulticast mode [ 450.017437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.443847][T26049] chnl_net:caif_netlink_parms(): no params data found [ 450.553185][T26052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.839567][T26067] trusted_key: syz.4.9539 sent an empty control message without MSG_MORE. [ 451.458606][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.467140][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.617828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.968823][T26112] __nla_validate_parse: 9 callbacks suppressed [ 451.968842][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9558'. [ 452.023323][T26112] validate_nla: 5 callbacks suppressed [ 452.023341][T26112] netlink: 'syz.0.9558': attribute type 6 has an invalid length. [ 452.055043][T26112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9558'. [ 452.078964][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9558'. [ 452.116868][T26112] netlink: 'syz.0.9558': attribute type 6 has an invalid length. [ 452.141794][T26112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9558'. [ 452.266876][T26126] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9562'. [ 452.657390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.286928][T26189] pim6reg1: entered promiscuous mode [ 453.301058][T26189] pim6reg1: entered allmulticast mode [ 453.697629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.248129][T26250] netlink: 'syz.3.9607': attribute type 1 has an invalid length. [ 454.284435][T26250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.295889][T26252] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 454.315273][T26252] bond2: (slave lo): Enslaving as an active interface with an up link [ 454.326434][T26252] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 454.491396][T26263] netlink: 'syz.1.9612': attribute type 21 has an invalid length. [ 454.515174][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9612'. [ 454.516312][T26265] gretap1: entered promiscuous mode [ 454.530926][T26265] batman_adv: batadv0: Adding interface: gretap1 [ 454.537696][T26265] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 454.557657][T26265] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 454.568734][T26263] netlink: 'syz.1.9612': attribute type 21 has an invalid length. [ 454.576816][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9612'. [ 454.737395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.780216][T26275] netlink: 'syz.0.9617': attribute type 16 has an invalid length. [ 454.788981][T26275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9617'. [ 454.826664][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9618'. [ 454.942668][T26281] syzkaller1: entered promiscuous mode [ 454.954159][T26281] syzkaller1: entered allmulticast mode [ 455.311024][T26309] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9632'. [ 455.777440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.817664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.219308][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.228018][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.433667][T26366] __nla_validate_parse: 2 callbacks suppressed [ 457.433686][T26366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9652'. [ 457.535029][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9655'. [ 457.779020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.811646][T26383] netlink: 'syz.3.9659': attribute type 1 has an invalid length. [ 457.857418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.914315][T26385] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 457.926592][T26385] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 457.960155][T26385] bond2: (slave ip6gre1): making interface the new active one [ 457.980342][T26385] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 458.064885][T26392] tls_set_device_offload: netdev not found [ 458.598852][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9673'. [ 458.887966][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9681'. [ 458.897137][T26436] netlink: 'syz.4.9681': attribute type 5 has an invalid length. [ 458.905046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.916190][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9681'. [ 458.926453][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9681'. [ 458.936187][T26436] netlink: 'syz.4.9681': attribute type 5 has an invalid length. [ 458.944792][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9681'. [ 459.106725][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9688'. [ 459.380708][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9694'. [ 459.513959][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9698'. [ 459.777657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.847182][T26481] syzkaller1: entered promiscuous mode [ 459.859322][T26481] syzkaller1: entered allmulticast mode [ 459.938716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.334409][T26510] syzkaller1: entered promiscuous mode [ 460.352809][T26510] syzkaller1: entered allmulticast mode [ 460.977382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.479158][T26577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 461.485118][T26577] syzkaller1: Linktype set failed because interface is up [ 461.533894][T26586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.542892][T26586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.551134][T26586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.559315][T26586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.889959][T26606] ip6tnl5: entered promiscuous mode [ 462.175243][T26625] syzkaller0: entered allmulticast mode [ 462.245630][T26625] syzkaller0 (unregistering): left allmulticast mode [ 462.587038][T26652] __nla_validate_parse: 6 callbacks suppressed [ 462.587056][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9769'. [ 462.687614][T26660] netlink: 'syz.1.9773': attribute type 9 has an invalid length. [ 462.695899][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9773'. [ 462.706717][T26660] netlink: 'syz.1.9773': attribute type 9 has an invalid length. [ 462.715283][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9773'. [ 462.845364][T26666] vlan1: entered allmulticast mode [ 462.856754][T26666] bond0: entered allmulticast mode [ 462.863180][T26666] bond_slave_0: entered allmulticast mode [ 462.869938][T26666] bond_slave_1: entered allmulticast mode [ 462.882398][T26666] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9775'. [ 462.942428][T26666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.964967][T26666] bond_slave_0: left allmulticast mode [ 462.977190][T26666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.988043][ T36] net_ratelimit: 8 callbacks suppressed [ 462.988058][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.006857][T26666] bond_slave_1: left allmulticast mode [ 463.029112][T26666] bond0 (unregistering): Released all slaves [ 463.056216][T26672] veth0: entered promiscuous mode [ 463.061726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.080067][ T76] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 463.093947][T26675] veth0: left promiscuous mode [ 463.236879][T26692] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9785'. [ 463.351217][T26701] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 463.370012][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9787'. [ 463.393187][T26705] netlink: 'syz.0.9788': attribute type 1 has an invalid length. [ 463.401055][T26701] bond3: (slave lo): Enslaving as an active interface with an up link [ 463.403324][T26701] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 463.467408][T26705] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.9788'. [ 463.759997][T26723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9796'. [ 463.789422][T26723] netlink: 320 bytes leftover after parsing attributes in process `syz.1.9796'. [ 464.060992][T26731] netlink: 'syz.1.9800': attribute type 19 has an invalid length. [ 464.078586][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9800'. [ 464.103643][T26731] netlink: 'syz.1.9800': attribute type 19 has an invalid length. [ 464.286020][T26737] syzkaller1: entered promiscuous mode [ 464.308045][T26737] syzkaller1: entered allmulticast mode [ 464.337735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.366713][T26739] "syz.3.9804" (26739) uses obsolete ecb(arc4) skcipher [ 464.576363][T26747] netlink: 'syz.3.9808': attribute type 15 has an invalid length. [ 464.588756][T26747] netlink: 'syz.3.9808': attribute type 15 has an invalid length. [ 465.377410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.098605][T26789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.106226][T26789] bridge0: port 5(bond0) entered blocking state [ 466.113774][T26789] bridge0: port 5(bond0) entered disabled state [ 466.121603][T26789] bond0: entered allmulticast mode [ 466.136978][T26789] bond0: entered promiscuous mode [ 466.417404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.435934][T26810] bond2: option mode: unable to set because the bond device has slaves [ 466.472486][T26813] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 467.244558][T26854] veth0: entered promiscuous mode [ 467.290083][T26849] veth0: left promiscuous mode [ 467.428771][T26858] ip6erspan0: entered allmulticast mode [ 467.457527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.476451][T26862] netlink: 'syz.4.9848': attribute type 12 has an invalid length. [ 467.507141][T26862] netlink: 'syz.4.9848': attribute type 12 has an invalid length. [ 467.726713][T26872] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 467.836273][T26881] netlink: 'syz.3.9858': attribute type 51 has an invalid length. [ 467.851772][T26881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.861016][T26881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.882679][T26881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.899790][T26881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.949102][T26881] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 467.974638][T26881] batman_adv: batadv0: Removing interface: ipvlan2 [ 468.122643][T26892] netlink: 'syz.2.9862': attribute type 1 has an invalid length. [ 468.193713][T26894] __nla_validate_parse: 7 callbacks suppressed [ 468.193733][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9864'. [ 468.209985][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9864'. [ 468.222877][T26894] netlink: 'syz.3.9864': attribute type 15 has an invalid length. [ 468.257157][ T76] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 468.269735][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9864'. [ 468.283238][ T76] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 468.292890][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9864'. [ 468.302493][ T76] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 468.313365][ T76] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 468.498632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.600647][T26911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.720600][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9874'. [ 468.739958][T26918] ip6erspan0: entered allmulticast mode [ 468.746479][T26920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9874'. [ 468.778085][T26922] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.9876'. [ 468.886088][T26928] bond3: option mode: unable to set because the bond device has slaves [ 468.910095][T26928] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.928110][T26926] validate_nla: 1 callbacks suppressed [ 468.928126][T26926] netlink: 'syz.2.9878': attribute type 1 has an invalid length. [ 469.062205][T26938] netlink: 'syz.1.9884': attribute type 15 has an invalid length. [ 469.315008][T26950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9889'. [ 469.488554][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9893'. [ 469.691135][T26973] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9899'. [ 469.718877][T26976] netlink: 'syz.2.9897': attribute type 3 has an invalid length. [ 469.838299][T26984] netlink: 'syz.3.9904': attribute type 1 has an invalid length. [ 469.885286][T26984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.868879][T27047] netlink: 'syz.1.9931': attribute type 16 has an invalid length. [ 470.876736][T27047] netlink: 'syz.1.9931': attribute type 17 has an invalid length. [ 470.931552][T27047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.943829][T27047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.005660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b8eb000: rx timeout, send abort [ 471.402476][T27068] pim6reg1: entered promiscuous mode [ 471.408468][T27068] pim6reg1: entered allmulticast mode [ 471.505926][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b8e9000: rx timeout, send abort [ 471.514826][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b8eb000: abort rx timeout. Force session deactivation [ 471.893585][T27098] netlink: 'syz.4.9954': attribute type 1 has an invalid length. [ 472.014235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b8e9000: abort rx timeout. Force session deactivation [ 472.048783][T27108] IPv4: Oversized IP packet from 127.202.26.0 [ 472.064663][T27104] bond3: (slave ip6gretap1): making interface the new active one [ 472.075822][T27104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 472.086787][T27104] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 472.095363][T27104] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.106343][T27142] syzkaller1: entered promiscuous mode [ 474.124003][T27142] syzkaller1: entered allmulticast mode [ 474.504440][T27162] __nla_validate_parse: 4 callbacks suppressed [ 474.504457][T27162] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9975'. [ 474.554647][T27166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9978'. [ 474.570013][T27166] netlink: 'syz.0.9978': attribute type 7 has an invalid length. [ 474.580361][T27166] netlink: 'syz.0.9978': attribute type 8 has an invalid length. [ 474.589353][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9978'. [ 474.700536][T27175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9982'. [ 475.021835][T27195] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9990'. [ 475.097896][T27198] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9991'. [ 475.481319][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10000'. [ 475.545054][T27225] netlink: 'syz.2.10004': attribute type 1 has an invalid length. [ 475.564875][T27225] netlink: 'syz.2.10004': attribute type 4 has an invalid length. [ 475.585883][T27225] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.10004'. [ 475.683540][T27232] netlink: 51 bytes leftover after parsing attributes in process `syz.1.10005'. [ 476.655453][T27272] syzkaller0: entered promiscuous mode [ 476.661829][T27272] syzkaller0: entered allmulticast mode [ 476.938890][T27296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10030'. [ 478.411641][T27301] netlink: 'syz.1.10031': attribute type 1 has an invalid length. [ 478.420457][T27301] netlink: 'syz.1.10031': attribute type 4 has an invalid length. [ 478.600503][T27308] gretap0: entered promiscuous mode [ 478.640880][T27315] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 478.964201][T27335] netlink: 'syz.2.10047': attribute type 1 has an invalid length. [ 479.158787][T27340] bond1: (slave geneve2): making interface the new active one [ 479.195412][T27340] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 479.220077][ T82] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.233175][ T82] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.257629][ T82] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.275310][ T82] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 479.336474][T27348] netlink: 'syz.2.10051': attribute type 1 has an invalid length. [ 479.479999][T27348] bond2: entered promiscuous mode [ 479.510513][T27348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.608356][T27352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.636151][T27352] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 479.661206][T27352] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 479.700287][T27352] bond2: (slave ip6gre1): making interface the new active one [ 479.729598][T27352] ip6gre1: entered promiscuous mode [ 479.752941][T27352] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 480.235482][T27373] syzkaller1: entered promiscuous mode [ 480.264472][T27373] syzkaller1: entered allmulticast mode [ 480.272396][T27378] __nla_validate_parse: 6 callbacks suppressed [ 480.272411][T27378] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.10064'. [ 480.273264][T27382] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10065'. [ 480.412997][T27386] syzkaller1: entered promiscuous mode [ 480.429180][T27386] syzkaller1: entered allmulticast mode [ 480.444183][T27382] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10065'. [ 480.671880][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10072'. [ 481.669223][T27446] lo speed is unknown, defaulting to 1000 [ 482.014296][T27469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10094'. [ 482.028957][T27469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.035938][ T3492] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 482.036249][T27469] IPv6: NLM_F_CREATE should be set when creating new route [ 482.052651][T27469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10094'. [ 482.776972][T27459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.886498][T27498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10105'. [ 482.896767][T27498] bridge: RTM_NEWNEIGH with invalid ether address [ 482.933806][T27498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10105'. [ 482.947010][T27498] bridge: RTM_NEWNEIGH with invalid ether address [ 483.066165][T27509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10108'. [ 483.085805][T27509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10108'. [ 483.117492][T27510] netlink: 'syz.4.10107': attribute type 1 has an invalid length. [ 483.609239][T27535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.630373][T27534] team0: entered promiscuous mode [ 483.635465][T27534] team0: entered allmulticast mode [ 483.766584][T27541] netlink: 'syz.1.10123': attribute type 1 has an invalid length. [ 483.777115][T27501] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 483.875776][T27549] veth1_to_bond: entered allmulticast mode [ 483.896214][T27549] veth1_to_bond: left allmulticast mode [ 485.482778][T27625] netlink: 'syz.4.10155': attribute type 1 has an invalid length. [ 485.538665][T27625] bond4: (slave gretap2): making interface the new active one [ 485.554510][T27625] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 486.114417][T27658] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 486.293922][T27666] __nla_validate_parse: 3 callbacks suppressed [ 486.293934][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10163'. [ 486.359600][T27668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10164'. [ 486.369511][T27668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10164'. [ 486.654753][T27676] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10168'. [ 487.318578][T27581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.525723][T27696] netlink: 208 bytes leftover after parsing attributes in process `syz.1.10175'. [ 487.781534][T27703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10180'. [ 488.000683][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10187'. [ 488.011701][T27717] netlink: 'syz.2.10186': attribute type 1 has an invalid length. [ 488.030925][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10187'. [ 488.039604][T27717] netlink: 'syz.2.10186': attribute type 1 has an invalid length. [ 488.318309][T27736] GUP no longer grows the stack in syz.4.10195 (27736): 200000003000-20000000a000 (200000001000) [ 488.328426][T27740] netlink: 'syz.1.10198': attribute type 1 has an invalid length. [ 488.349771][T27736] CPU: 0 UID: 0 PID: 27736 Comm: syz.4.10195 Not tainted syzkaller #0 PREEMPT(full) [ 488.349800][T27736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 488.349813][T27736] Call Trace: [ 488.349821][T27736] [ 488.349829][T27736] dump_stack_lvl+0xe8/0x150 [ 488.349864][T27736] __get_user_pages+0x2453/0x29d0 [ 488.349912][T27736] ? __gup_longterm_locked+0xc4e/0x1630 [ 488.349938][T27736] ? down_read_killable+0x1bb/0x340 [ 488.349964][T27736] ? try_get_folio+0xec/0x650 [ 488.349995][T27736] __gup_longterm_locked+0xdcf/0x1630 [ 488.350043][T27736] gup_fast_fallback+0x1d82/0x22e0 [ 488.350098][T27736] ? __pfx_gup_fast_fallback+0x10/0x10 [ 488.350126][T27736] ? is_valid_gup_args+0x11f/0x200 [ 488.350153][T27736] ? get_user_pages_fast+0x4d/0xb0 [ 488.350179][T27736] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 488.350206][T27736] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 488.350239][T27736] iov_iter_get_pages2+0x5e/0xa0 [ 488.350262][T27736] __se_sys_vmsplice+0x7b3/0x1490 [ 488.350303][T27736] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 488.350330][T27736] ? __pfx_futex_wake+0x10/0x10 [ 488.350362][T27736] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.350441][T27736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.350462][T27736] do_syscall_64+0x15f/0xf80 [ 488.350485][T27736] ? trace_irq_disable+0x3b/0x140 [ 488.350505][T27736] ? clear_bhb_loop+0x40/0x90 [ 488.350535][T27736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.350555][T27736] RIP: 0033:0x7f4c6819c819 [ 488.350573][T27736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.350591][T27736] RSP: 002b:00007f4c690e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 488.350687][T27736] RAX: ffffffffffffffda RBX: 00007f4c68415fa0 RCX: 00007f4c6819c819 [ 488.350701][T27736] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 488.350714][T27736] RBP: 00007f4c68232c91 R08: 0000000000000000 R09: 0000000000000000 [ 488.350727][T27736] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 488.350739][T27736] R13: 00007f4c68416038 R14: 00007f4c68415fa0 R15: 00007ffd877db088 [ 488.350772][T27736] [ 488.575874][T27749] bond4: (slave gretap2): making interface the new active one [ 488.584688][T27749] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 488.734967][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10203'. [ 488.822325][T27760] hsr_slave_1 (unregistering): left promiscuous mode [ 489.131298][T27785] lo: Caught tx_queue_len zero misconfig [ 489.139510][T27737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.166552][T27788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10213'. [ 489.248467][T27790] gre0 speed is unknown, defaulting to 1000 [ 489.508251][T27792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.581611][T27790] gre0 speed is unknown, defaulting to 1000 [ 489.604742][T27790] gre0 speed is unknown, defaulting to 1000 [ 489.968329][T27819] syzkaller1: entered promiscuous mode [ 489.990096][T27819] syzkaller1: entered allmulticast mode [ 490.111454][ T6085] gre0 speed is unknown, defaulting to 1000 [ 490.123059][T27790] infiniband syz1: set active [ 490.133720][T27790] infiniband syz1: added gre0 [ 490.243997][T27790] RDS/IB: syz1: added [ 490.262732][T27790] smc: adding ib device syz1 with port count 1 [ 490.285643][T27790] smc: ib device syz1 port 1 has no pnetid [ 490.309088][ T6085] gre0 speed is unknown, defaulting to 1000 [ 490.325071][T27834] netlink: 'syz.3.10230': attribute type 1 has an invalid length. [ 490.413665][T27834] bond5: entered promiscuous mode [ 490.434650][T27834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.449363][T27790] gre0 speed is unknown, defaulting to 1000 [ 490.522608][T27841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.535710][T27841] bond5: (slave vti1): The slave device specified does not support setting the MAC address [ 490.547172][T27841] bond5: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 490.561519][T27841] bond5: (slave vti1): making interface the new active one [ 490.569152][T27841] vti1: entered promiscuous mode [ 490.575783][T27841] bond5: (slave vti1): Enslaving as an active interface with an up link [ 490.805255][T27849] syzkaller1: entered promiscuous mode [ 490.825962][T27849] syzkaller1: entered allmulticast mode [ 490.909828][T27790] gre0 speed is unknown, defaulting to 1000 [ 491.597714][T27790] gre0 speed is unknown, defaulting to 1000 [ 492.164122][T27790] gre0 speed is unknown, defaulting to 1000 [ 492.841023][T27790] gre0 speed is unknown, defaulting to 1000 [ 492.888127][T27929] netlink: 'syz.2.10271': attribute type 1 has an invalid length. [ 492.911921][T27929] netlink: 'syz.2.10271': attribute type 4 has an invalid length. [ 492.937375][T27929] __nla_validate_parse: 2 callbacks suppressed [ 492.937391][T27929] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.10271'. [ 493.244470][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10274'. [ 493.666437][T27970] syzkaller1: entered promiscuous mode [ 493.692451][T27970] syzkaller1: entered allmulticast mode [ 493.945286][ T171] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfb [ 494.047720][T27991] xt_hashlimit: size too large, truncated to 1048576 [ 494.391382][T28001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10295'. [ 494.538981][T28010] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10299'. [ 494.549235][T28010] netlink: 'syz.0.10299': attribute type 2 has an invalid length. [ 495.144480][T28043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10310'. [ 495.308749][T28042] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.315980][T28042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.460130][T28049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10314'. [ 495.479259][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10315'. [ 495.786374][T28063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.824383][T28058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.954791][T28069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10323'. [ 496.757150][T28099] netlink: 'syz.1.10333': attribute type 4 has an invalid length. [ 496.779300][T28099] netlink: 'syz.1.10333': attribute type 4 has an invalid length. [ 497.080957][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10338'. [ 497.499788][T28120] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.10341'. [ 498.012450][T28146] __nla_validate_parse: 3 callbacks suppressed [ 498.012469][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10350'. [ 498.734685][T28157] lo speed is unknown, defaulting to 1000 [ 498.789505][T28157] gre0 speed is unknown, defaulting to 1000 [ 498.834388][T28175] netlink: 'syz.1.10359': attribute type 1 has an invalid length. [ 498.943898][T28182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10361'. [ 498.976579][T28175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.075259][T28180] bond5: (slave veth5): Enslaving as an active interface with a down link [ 499.122095][T28183] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 499.147904][T28183] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 499.524289][T28204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10369'. [ 499.549741][T28202] netlink: 'syz.1.10368': attribute type 1 has an invalid length. [ 499.685737][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10371'. [ 499.709214][T28202] bond6: entered promiscuous mode [ 499.716345][T28202] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.804638][T28212] bond6: (slave bridge4): making interface the new active one [ 499.814582][T28216] netlink: 'syz.4.10373': attribute type 1 has an invalid length. [ 499.823067][T28212] bridge4: entered promiscuous mode [ 499.844970][T28212] bridge4: left promiscuous mode [ 499.960774][T28216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.984091][T28218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.998650][T28218] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 500.012060][T28218] bond5: (slave vcan1): Error -95 calling set_mac_address [ 500.115429][T28225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10375'. [ 500.579672][T28247] syzkaller1: entered promiscuous mode [ 500.598428][T28247] syzkaller1: entered allmulticast mode [ 501.505241][T28269] lo speed is unknown, defaulting to 1000 [ 501.536730][T28269] gre0 speed is unknown, defaulting to 1000 [ 502.421053][T28283] mpoa:mpoad_close: () going down [ 502.569339][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10405'. [ 502.718374][T28320] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 503.080410][T28330] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.10408'. [ 503.657671][T28354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10417'. [ 503.737712][T28362] netlink: 'syz.2.10420': attribute type 1 has an invalid length. [ 503.779054][ T24] ================================================================== [ 503.787166][ T24] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 503.795075][ T24] Read of size 8 at addr ffff8880581730c0 by task kworker/1:0/24 [ 503.802798][ T24] [ 503.805128][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 503.805150][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.805169][ T24] Workqueue: mld mld_ifc_work [ 503.805194][ T24] Call Trace: [ 503.805200][ T24] [ 503.805208][ T24] dump_stack_lvl+0xe8/0x150 [ 503.805232][ T24] print_report+0xba/0x230 [ 503.805251][ T24] ? sock_def_readable+0x1cb/0x550 [ 503.805269][ T24] kasan_report+0x117/0x150 [ 503.805287][ T24] ? sock_def_readable+0x1cb/0x550 [ 503.805309][ T24] sock_def_readable+0x1cb/0x550 [ 503.805327][ T24] ? sock_def_readable+0xae/0x550 [ 503.805343][ T24] ? send_to_lecd+0x26d/0x830 [ 503.805362][ T24] send_to_lecd+0x3e7/0x830 [ 503.805384][ T24] lec_start_xmit+0xe52/0x2890 [ 503.805410][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 503.805433][ T24] sch_direct_xmit+0x251/0x4c0 [ 503.805454][ T24] ? __pfx_sch_direct_xmit+0x10/0x10 [ 503.805480][ T24] __dev_queue_xmit+0x180f/0x3950 [ 503.805501][ T24] ? __dev_queue_xmit+0x2b6/0x3950 [ 503.805523][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 503.805539][ T24] ? neigh_resolve_output+0x438/0x750 [ 503.805560][ T24] ? eth_header+0x11b/0x200 [ 503.805574][ T24] ? __asan_memcpy+0x40/0x70 [ 503.805603][ T24] ? ip6_output+0x126/0x550 [ 503.805623][ T24] ip6_output+0x340/0x550 [ 503.805644][ T24] ? __pfx_ip6_output+0x10/0x10 [ 503.805663][ T24] NF_HOOK+0x177/0x4f0 [ 503.805685][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 503.805704][ T24] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 503.805722][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 503.805745][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 503.805765][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 503.805784][ T24] ? icmp6_dst_alloc+0x3a6/0x440 [ 503.805805][ T24] mld_sendpack+0x8b4/0xe40 [ 503.805831][ T24] ? mld_sendpack+0x213/0xe40 [ 503.805849][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 503.805878][ T24] mld_ifc_work+0x835/0xe70 [ 503.805901][ T24] ? process_scheduled_works+0xa70/0x1860 [ 503.805923][ T24] process_scheduled_works+0xb5d/0x1860 [ 503.805960][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.805984][ T24] ? assign_work+0x3d5/0x5e0 [ 503.806006][ T24] worker_thread+0xa53/0xfc0 [ 503.806040][ T24] kthread+0x388/0x470 [ 503.806057][ T24] ? __pfx_worker_thread+0x10/0x10 [ 503.806077][ T24] ? __pfx_kthread+0x10/0x10 [ 503.806093][ T24] ret_from_fork+0x514/0xb70 [ 503.806118][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 503.806139][ T24] ? __switch_to+0xc79/0x1410 [ 503.806166][ T24] ? __pfx_kthread+0x10/0x10 [ 503.806183][ T24] ret_from_fork_asm+0x1a/0x30 [ 503.806214][ T24] [ 503.806220][ T24] [ 504.064252][ T24] Allocated by task 28285: [ 504.068648][ T24] kasan_save_track+0x3e/0x80 [ 504.073320][ T24] __kasan_slab_alloc+0x6c/0x80 [ 504.078148][ T24] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 504.083948][ T24] sock_alloc_inode+0x2c/0x190 [ 504.088698][ T24] alloc_inode+0x6a/0x1b0 [ 504.093010][ T24] __sock_create+0x12d/0x9d0 [ 504.097582][ T24] __sys_socket+0xd6/0x1b0 [ 504.101980][ T24] __x64_sys_socket+0x7a/0x90 [ 504.106635][ T24] do_syscall_64+0x15f/0xf80 [ 504.111210][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.117082][ T24] [ 504.119387][ T24] Freed by task 23: [ 504.123174][ T24] kasan_save_track+0x3e/0x80 [ 504.127835][ T24] kasan_save_free_info+0x46/0x50 [ 504.132852][ T24] __kasan_slab_free+0x5c/0x80 [ 504.137627][ T24] kmem_cache_free+0x180/0x630 [ 504.142398][ T24] rcu_core+0x7cd/0x1070 [ 504.146629][ T24] handle_softirqs+0x22a/0x840 [ 504.151379][ T24] run_ksoftirqd+0x36/0x60 [ 504.155792][ T24] smpboot_thread_fn+0x541/0xa50 [ 504.160730][ T24] kthread+0x388/0x470 [ 504.164788][ T24] ret_from_fork+0x514/0xb70 [ 504.169367][ T24] ret_from_fork_asm+0x1a/0x30 [ 504.174121][ T24] [ 504.176426][ T24] Last potentially related work creation: [ 504.182123][ T24] kasan_save_stack+0x3e/0x60 [ 504.186788][ T24] kasan_record_aux_stack+0xbd/0xd0 [ 504.191978][ T24] call_rcu+0xee/0x890 [ 504.196052][ T24] evict+0x95b/0xb10 [ 504.199934][ T24] __dentry_kill+0x1a2/0x5e0 [ 504.204509][ T24] finish_dput+0xc9/0x480 [ 504.208822][ T24] __fput+0x691/0xa60 [ 504.212791][ T24] task_work_run+0x1d9/0x270 [ 504.217369][ T24] exit_to_user_mode_loop+0xed/0x480 [ 504.222643][ T24] do_syscall_64+0x33e/0xf80 [ 504.227219][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.233109][ T24] [ 504.235422][ T24] The buggy address belongs to the object at ffff888058173000 [ 504.235422][ T24] which belongs to the cache sock_inode_cache of size 1408 [ 504.249980][ T24] The buggy address is located 192 bytes inside of [ 504.249980][ T24] freed 1408-byte region [ffff888058173000, ffff888058173580) [ 504.263858][ T24] [ 504.266174][ T24] The buggy address belongs to the physical page: [ 504.272568][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058170000 pfn:0x58170 [ 504.282621][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 504.291105][ T24] memcg:ffff888058177e01 [ 504.295328][ T24] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 504.303807][ T24] page_type: f5(slab) [ 504.307771][ T24] raw: 00fff00000000240 ffff88801f6b9c80 ffffea0001609410 ffffea0001605210 [ 504.316338][ T24] raw: ffff888058170000 000000080015000e 00000000f5000000 ffff888058177e01 [ 504.324916][ T24] head: 00fff00000000240 ffff88801f6b9c80 ffffea0001609410 ffffea0001605210 [ 504.333576][ T24] head: ffff888058170000 000000080015000e 00000000f5000000 ffff888058177e01 [ 504.342237][ T24] head: 00fff00000000003 ffffea0001605c01 00000000ffffffff 00000000ffffffff [ 504.350924][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 504.359573][ T24] page dumped because: kasan: bad access detected [ 504.365977][ T24] page_owner tracks the page as allocated [ 504.371669][ T24] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6023, tgid 6023 (syz-executor), ts 253933845496, free_ts 92743983344 [ 504.394834][ T24] post_alloc_hook+0x231/0x280 [ 504.399591][ T24] get_page_from_freelist+0x24dc/0x2580 [ 504.405117][ T24] __alloc_frozen_pages_noprof+0x18d/0x380 [ 504.410906][ T24] allocate_slab+0x77/0x660 [ 504.415392][ T24] refill_objects+0x331/0x3c0 [ 504.420049][ T24] __pcs_replace_empty_main+0x2e6/0x730 [ 504.425575][ T24] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 504.431363][ T24] sock_alloc_inode+0x2c/0x190 [ 504.436110][ T24] alloc_inode+0x6a/0x1b0 [ 504.440422][ T24] __sock_create+0x12d/0x9d0 [ 504.444996][ T24] __sys_socket+0xd6/0x1b0 [ 504.449393][ T24] __x64_sys_socket+0x7a/0x90 [ 504.454055][ T24] do_syscall_64+0x15f/0xf80 [ 504.458634][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.464514][ T24] page last free pid 6033 tgid 6033 stack trace: [ 504.470818][ T24] __free_frozen_pages+0xc2b/0xdb0 [ 504.475913][ T24] __slab_free+0x263/0x2b0 [ 504.480317][ T24] qlist_free_all+0x97/0x100 [ 504.484890][ T24] kasan_quarantine_reduce+0x148/0x160 [ 504.490337][ T24] __kasan_slab_alloc+0x22/0x80 [ 504.495166][ T24] kmem_cache_alloc_noprof+0x2bc/0x650 [ 504.500606][ T24] alloc_pid+0x1ad/0x12f0 [ 504.504922][ T24] copy_process+0x21d1/0x4450 [ 504.509583][ T24] kernel_clone+0x284/0x8f0 [ 504.514070][ T24] __x64_sys_clone+0x1b6/0x230 [ 504.518819][ T24] do_syscall_64+0x15f/0xf80 [ 504.523392][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.529265][ T24] [ 504.531570][ T24] Memory state around the buggy address: [ 504.537183][ T24] ffff888058172f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 504.545232][ T24] ffff888058173000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.553291][ T24] >ffff888058173080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.561343][ T24] ^ [ 504.567480][ T24] ffff888058173100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.575520][ T24] ffff888058173180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.583555][ T24] ================================================================== [ 504.591610][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 504.598790][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 504.607977][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 504.618013][ T24] Workqueue: mld mld_ifc_work [ 504.622683][ T24] Call Trace: [ 504.625944][ T24] [ 504.628859][ T24] vpanic+0x56c/0xa60 [ 504.632833][ T24] ? __pfx_vpanic+0x10/0x10 [ 504.637330][ T24] panic+0xc5/0xd0 [ 504.641047][ T24] ? __pfx_panic+0x10/0x10 [ 504.645451][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.650544][ T24] ? rcu_is_watching+0x15/0xb0 [ 504.655296][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.660389][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.665482][ T24] check_panic_on_warn+0x89/0xb0 [ 504.670402][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.675492][ T24] end_report+0x73/0x170 [ 504.679716][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.684808][ T24] kasan_report+0x128/0x150 [ 504.689307][ T24] ? sock_def_readable+0x1cb/0x550 [ 504.694410][ T24] sock_def_readable+0x1cb/0x550 [ 504.699331][ T24] ? sock_def_readable+0xae/0x550 [ 504.704338][ T24] ? send_to_lecd+0x26d/0x830 [ 504.708996][ T24] send_to_lecd+0x3e7/0x830 [ 504.713486][ T24] lec_start_xmit+0xe52/0x2890 [ 504.718239][ T24] dev_hard_start_xmit+0x2cd/0x830 [ 504.723343][ T24] sch_direct_xmit+0x251/0x4c0 [ 504.728092][ T24] ? __pfx_sch_direct_xmit+0x10/0x10 [ 504.733364][ T24] __dev_queue_xmit+0x180f/0x3950 [ 504.738374][ T24] ? __dev_queue_xmit+0x2b6/0x3950 [ 504.743471][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.748823][ T24] ? neigh_resolve_output+0x438/0x750 [ 504.754180][ T24] ? eth_header+0x11b/0x200 [ 504.758662][ T24] ? __asan_memcpy+0x40/0x70 [ 504.763245][ T24] ? ip6_output+0x126/0x550 [ 504.767736][ T24] ip6_output+0x340/0x550 [ 504.772054][ T24] ? __pfx_ip6_output+0x10/0x10 [ 504.776888][ T24] NF_HOOK+0x177/0x4f0 [ 504.780942][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 504.785515][ T24] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 504.791304][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 504.796575][ T24] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.801757][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 504.807027][ T24] ? icmp6_dst_alloc+0x3a6/0x440 [ 504.811951][ T24] mld_sendpack+0x8b4/0xe40 [ 504.816447][ T24] ? mld_sendpack+0x213/0xe40 [ 504.821105][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 504.826118][ T24] mld_ifc_work+0x835/0xe70 [ 504.830605][ T24] ? process_scheduled_works+0xa70/0x1860 [ 504.836311][ T24] process_scheduled_works+0xb5d/0x1860 [ 504.841854][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 504.847824][ T24] ? assign_work+0x3d5/0x5e0 [ 504.852399][ T24] worker_thread+0xa53/0xfc0 [ 504.856982][ T24] kthread+0x388/0x470 [ 504.861035][ T24] ? __pfx_worker_thread+0x10/0x10 [ 504.866128][ T24] ? __pfx_kthread+0x10/0x10 [ 504.870699][ T24] ret_from_fork+0x514/0xb70 [ 504.875278][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 504.880375][ T24] ? __switch_to+0xc79/0x1410 [ 504.885033][ T24] ? __pfx_kthread+0x10/0x10 [ 504.889604][ T24] ret_from_fork_asm+0x1a/0x30 [ 504.894362][ T24] [ 504.897679][ T24] Kernel Offset: disabled [ 504.901989][ T24] Rebooting in 86400 seconds..